Starting System Logging Service... [ OK ] Started Permit User Sessions. [ OK ] Found device /dev/ttyS0. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started System Logging Service. [* ] A start job is running for OpenBSD …Shell server (1min 21s / 2min 40s) [** ] A start job is running for OpenBSD …Shell server (1min 22s / 2min 40s) [*** ] A start job is running for OpenBSD …Shell server (1min 23s / 2min 40s) [ *** ] A start job is running for OpenBSD …Shell server (1min 25s / 2min 54s) [ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.36' (ECDSA) to the list of known hosts. 2020/08/15 20:34:26 fuzzer started 2020/08/15 20:34:27 dialing manager at 10.128.0.26:46235 2020/08/15 20:34:28 syscalls: 3107 2020/08/15 20:34:28 code coverage: enabled 2020/08/15 20:34:28 comparison tracing: enabled 2020/08/15 20:34:28 extra coverage: enabled 2020/08/15 20:34:28 setuid sandbox: enabled 2020/08/15 20:34:28 namespace sandbox: enabled 2020/08/15 20:34:28 Android sandbox: /sys/fs/selinux/policy does not exist 2020/08/15 20:34:28 fault injection: enabled 2020/08/15 20:34:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/15 20:34:28 net packet injection: enabled 2020/08/15 20:34:28 net device setup: enabled 2020/08/15 20:34:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/15 20:34:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/15 20:34:28 USB emulation: enabled 2020/08/15 20:34:28 hci packet injection: enabled 20:38:46 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) close(r0) syzkaller login: [ 404.524431][ T8486] IPVS: ftp: loaded support on port[0] = 21 [ 404.939192][ T8486] chnl_net:caif_netlink_parms(): no params data found [ 405.082726][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.090275][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.099764][ T8486] device bridge_slave_0 entered promiscuous mode [ 405.112769][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.120314][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.130719][ T8486] device bridge_slave_1 entered promiscuous mode [ 405.176601][ T8486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.193555][ T8486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.239872][ T8486] team0: Port device team_slave_0 added [ 405.252836][ T8486] team0: Port device team_slave_1 added [ 405.292395][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.299661][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.325892][ T8486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.341937][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.349319][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.376073][ T8486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.435947][ T8486] device hsr_slave_0 entered promiscuous mode [ 405.445384][ T8486] device hsr_slave_1 entered promiscuous mode [ 405.723562][ T8486] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 405.746022][ T8486] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 405.765554][ T8486] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 405.784240][ T8486] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 406.097028][ T8486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.131436][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 406.141029][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 406.162436][ T8486] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.184736][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 406.196209][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 406.205750][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.213132][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.254908][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 406.264272][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 406.274591][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 406.284083][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.291324][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.300513][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 406.326589][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 406.354089][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 406.364473][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 406.394214][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 406.404042][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 406.414358][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 406.456308][ T8486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 406.464176][ T3766] Bluetooth: hci0: command 0x0409 tx timeout [ 406.467924][ T8486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.486575][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 406.496432][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 406.506890][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 406.516596][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 406.564486][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 406.584778][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 406.592564][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 406.619149][ T8486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.682695][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 406.692932][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 406.751133][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 406.762739][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 406.786887][ T8486] device veth0_vlan entered promiscuous mode [ 406.799297][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 406.808971][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 406.840324][ T8486] device veth1_vlan entered promiscuous mode [ 406.904953][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 406.914560][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 406.945686][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 406.947333][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 406.976497][ T8486] device veth0_macvtap entered promiscuous mode [ 406.999279][ T8486] device veth1_macvtap entered promiscuous mode [ 407.059587][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.067941][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 407.077902][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 407.087436][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 407.098521][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 407.130092][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.137691][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 407.147877][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 407.572275][ T8703] IPVS: ftp: loaded support on port[0] = 21 [ 408.236002][ T8703] IPVS: ftp: loaded support on port[0] = 21 [ 408.353634][ T1607] tipc: TX() has been purged, node left! [ 408.535487][ T8700] Bluetooth: hci0: command 0x041b tx timeout 20:38:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x9}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 20:38:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) [ 410.613840][ T8697] Bluetooth: hci0: command 0x040f tx timeout 20:38:53 executing program 0: getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 410.739890][ T1607] tipc: TX() has been purged, node left! [ 411.033843][ C0] hrtimer: interrupt took 80021 ns 20:38:54 executing program 0: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) 20:38:55 executing program 0: clone(0x2000a1047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) 20:38:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x108c0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r3, 0x4) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0x5000005}}], 0xc6, 0x0) 20:38:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1}}], 0x1, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x706, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x35, 0xe2, 0xe3, 0xff, 0x499, 0x2001, 0x8ba9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f4, 0x1, 0x2, 0xf0, 0x80, 0x40, [{{0x9, 0x4, 0x93, 0x8, 0xd, 0xe1, 0x8b, 0xdb, 0x3f, [@generic={0x63, 0x31, "a51660ce97bbbc0df40036bde3ac078609fe582aeeace260ebf1b032f9da0f7a8b17086fb6202b46a3a0fb4c050bc52b598478033fadd75889526025434190c7c3b609f19239924c40a5161f1aafa587cd5744f7b2e113fa23f73583cb8688c3c1"}, @uac_control={{0xa, 0x24, 0x1, 0x20d, 0x20}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x1, 0x81, 0xc33, 0x1, 0x20}]}], [{{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x1, 0x7, 0x71, [@generic={0x54, 0x23, "bc364fbebc872ed7502f2cef2550eae6aba2d13268b41e41e946df66b9922e32698a7845e5999c9336082ea4962793c4f266ef6721ac3668f1f8d50befc7b3b77324b37b4dd2fffb9f241b9424a31e6c93ec"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x20, 0x8, 0x7, [@generic={0x62, 0x6, "e70e74eb4204aed25f7ca4fc243ea3265df5795ac9c67d2351989cfb7be41f2697426e51a0d836399fa81c63709e71a0196791643da5864e1a804bcf1e357ba13441f222568de07116e54a38e66ed45207316508ca78ef7ddaa6ac6178b15250"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x1}]}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x8f, 0xf3, 0x4, [@generic={0xbb, 0x30, "749a44227b1ca84526893126f913d8999380bf89b608187756e38a3eba0e3fcf19814df5e6a0f1281bc545da85a3f9deb075fe9289e021f09e0a621d25fd3ec93a01071e6b984a474b61f1efcd0ccd0a4433a605966f488e45045b55abbafac9b06ccba6ef6a2f09b92782389c88bc8b2aa2767d548f240b8d24d5b9d9bf6be0537cdbba08ebabad66f4d185b87360833d894d2d75be2ea0225976c057f96180434817af75aa37cb73ec0a687c535ea7a4d3abf462760b69f8"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x9, 0x7, 0x1f, [@generic={0x59, 0xf, "d07cd5ca4c8f6398988b34fcc57bb9e385955b449f18718588c49a24045396fd60e611d7ed504ed3c3fd0f431624d1a7885f5419dcf66bb1773ce3682069a974c083ef51de272c2ae633bdd110b71832bbcfc8beefe4e7"}, @generic={0xfd, 0x6, "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"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x40, 0x3, 0x9}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xad, 0x9, 0x5, [@generic={0xb8, 0x21, "dd752558fc9b80b380964c40a2064da80607d1d9adc80b32855c50733469d24dd93e35e85abb9dce75bcb36a44f264f3f878d5fd154e381be8868f9d489061b6d5f9ddf7b20a111343d1e4d438c883531327501cdd2bb72e3d92fae97705eb3db29d14bf2e9c7b6b3e0eb88aa6d5e26324b50be5dd23e82462278f84330bf276f79aaf11b88960c6fe5f76ab41041988999235b1c87b55af3b63991c0c93f1d4133a93ec4f8f5382827e38db21f0dbca541f6ba3987e"}, @generic={0x9c, 0xa, "8dc85d0f09f83035736de1e92aae54548f61c06b8cb2d01edff97f935a60b8d9809fa258fb1aa3a4e97d4db70b64ff8364405681308519d8141d6200beffe6968bbbab1e9b696c5f2b611687ea269a94b4a4d81030f520ba8b659a98ce9613a1f725a59ba01304d67e0cd7b1dfffa440401cfb0d8ec39ab7c6c1165b41d795bd6b1ae061ae88a37febb358bd31bd3424e298211fb6aa5de43db2"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x31, 0x81, 0x4c}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x40, 0x96, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9f}, @generic={0x11, 0x22, "f2a7322179605790420b1cc59c0a4f"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x80, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5e, 0x9}, @generic={0xe3, 0x10, "bf139e528c7e048604f6b47af4277a06904ade7cf339a741f0809a3cacf5840a3602c8993735b683125fac52c0d92d6d0f31d661543da01e4dc1c51bc421d24cfcc1ad1407d95e6f42e6be16f5c6dfbdd5dd6948b84b9af46121e4c00e4778b246de97bd49c52426c954c490b77123880282cc39de4643d9dcee08564a848515c1c0ca7fd567794c55082cd3e44013139d11e14ef0ad2c6f21029b5990862b05fa8471445d9f3da1fdf9c0a82f8c499001f68280fc507e2e986663237223d32ceb8ea930b6ebab20353af467c028aa7a2e3858f55a42f35a2917715502d0871d9c"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x1f, 0x6, 0x3f, [@generic={0x90, 0x24, "e68012450a80a29a43b1b4f7ac477440d3e26291bf1289fe1fab3c04b7c0661ee7fc9680e15aa738a8542916fb482d92966f5c92ff4faabcf4d011f8ae231860a1a0a1b1011b9df4a6eb2411df1015c6d94505cda16a3591304b1d003e7fcfa271358816c6bdd03e3d996dd1433255175b37c7c179692c5784275f808ea3eabd46e8191d0b0463d8481fcc8781e1"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x80}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x9, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x0, 0xff80}, @uac_iso={0x7, 0x25, 0x1, 0x102, 0x80, 0xf25}]}}, {{0x9, 0x5, 0xb, 0x8, 0x0, 0x5, 0x8}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7b, 0x2, 0x2, [@generic={0x2c, 0xe, "4cdd3bb9479692af98c096fb7c32b877e462b5235272b25449739b366b7b670c9a6d967413394359c494"}]}}]}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x310, 0x6, 0x8, 0x87, 0x8, 0x8}, 0x5, &(0x7f0000000b00)={0x5, 0xf, 0x5}, 0x4, [{0x38, &(0x7f0000000b40)=@string={0x38, 0x3, "776881f580af4c072c98821761d11593c843f7ed56be937ba08af26bbc364642ecb7f3747cc4b90ba35785e58aa091d2159522e29323"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x459}}, {0xb2, &(0x7f0000000bc0)=@string={0xb2, 0x3, "7eeee25ed0c18f16ff64a6a541f3902505759e1f01fe96f6232aac929cea0b17546e80c93b1528837805bc104ff1bad3cb3d3c84a2aaf688104f15fab0100daea9ce73ac093390eaaa66f5864a491b75c45bc216f5b0622e3a6d511b26c866e776891f955015f79451eb4fd7cbfe66df5dac0ad8ac62fcae6efbccd194b25ad4c54ebce250a0737ae2977efaab5ba87289977e980dfe7bf70095c3bdf6372ad58c0759fb43832b7d45abfad7c4cb2249"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x860}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000dc0)={0x14, &(0x7f0000000d40)={0x40, 0xf, 0x34, {0x34, 0x30, "e3493694e7418c6649abb34b980b83ceed12ec44b9563df249d19bd713057b95be95f6ce957e660f7438d4509304c7156379"}}, &(0x7f0000000d80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ec0)={0x1c, &(0x7f0000000e00)={0x0, 0x0, 0x30, "1385f932978286d23f44f2b5d80a3f32064c9da9c498af07b4bbda7ceeeec0c5997f0b95dc6dc0c6e1330dfbccc08789"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x5}}) r4 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0x80045519, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x2}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="2bad9214715d47e26e981cc10ae56c934fb83388a9d0014dacb0def7dbf2f5be78d3fb92afb0c487a3c259f7edd6b49480e7a48056ccbe82be81dfd21815c6989cd3a55f587e309f9283745ff6c2be87334718b0440b580d43142f99214210b4e38c55c7e7804e3953a67ead288bfabd4025ea58bc7f28", 0x77}, {&(0x7f00000002c0)="50f18c728286706f85a2d783ae9b5a11b9aa8f154fe438f5b9fbb9cf684b7184270636e92119198a6524a02013150724ad4b4f7c054cd368d1a70397f62ed5cbe5df9090204b52f3e30030f7e0e4fb0665f6f38cb1a3101913b52dd54a891419727cddeed098a15b5fd1ff234d3b3bcd4700a20601ae75fc79a756f59197ce78998f1cb1d5be3b42c07b0239353c418c945bffbc6e9b92b3f9e32b53adda73e02e4fc54b531fd8ad6d4ae404ed", 0xad}], 0x2, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0) [ 412.693747][ T8697] Bluetooth: hci0: command 0x0419 tx timeout [ 413.083688][ T8697] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 413.323630][ T8697] usb 1-1: Invalid ep0 maxpacket: 512 [ 413.474250][ T8697] usb 1-1: new full-speed USB device number 3 using dummy_hcd 20:38:56 executing program 1: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x10001) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x9) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x0, {0x400, 0x1, 0xfffff6da, 0xfffffffa}}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001200)={0x53, 0xfffffffffffffff8, 0x43, 0x7f, @buffer={0x0, 0x1000, &(0x7f0000000100)=""/4096}, &(0x7f0000001100)="98ed43fa93aecf51a88ab10b142e244c1bb5b1537b2239ef7478377ede45e8be1c57dbc80f2e9b11e46339d198514ca00f0b9adacff3967271604c96efa9b17bb60ac4", &(0x7f0000001180)=""/13, 0x3ff, 0x1, 0xffffffffffffffff, &(0x7f00000011c0)}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000001280)) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, 0x1, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4801) splice(r1, &(0x7f00000013c0)=0x4, 0xffffffffffffffff, &(0x7f0000001400)=0x100000000, 0x54f, 0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001440)='/dev/dlm-control\x00', 0x100, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)='trusted.overlay.redirect\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x3) r3 = socket$caif_seqpacket(0x25, 0x5, 0x2) recvfrom(r3, &(0x7f0000001540)=""/229, 0xe5, 0x101, &(0x7f0000001640)=@in6={0xa, 0x4e21, 0x2db165cb, @ipv4={[], [], @loopback}, 0x9d2e}, 0x80) r4 = creat(&(0x7f00000016c0)='./file0\x00', 0x20) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000001700)=0x1000) clock_getres(0x4, &(0x7f0000001740)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000017c0)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000001ac0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x44, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x4800) [ 413.714247][ T8697] usb 1-1: Invalid ep0 maxpacket: 512 [ 413.722481][ T8697] usb usb1-port1: attempt power cycle [ 414.454318][ T8697] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 414.544498][ T8697] usb 1-1: Invalid ep0 maxpacket: 512 [ 414.696407][ T8697] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 414.795073][ T8697] usb 1-1: Invalid ep0 maxpacket: 512 [ 414.801059][ T8697] usb usb1-port1: unable to enumerate USB device [ 415.216569][ T8797] IPVS: ftp: loaded support on port[0] = 21 [ 415.664800][ T8797] chnl_net:caif_netlink_parms(): no params data found [ 415.852820][ T8797] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.860283][ T8797] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.869825][ T8797] device bridge_slave_0 entered promiscuous mode [ 415.882749][ T8797] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.890269][ T8797] bridge0: port 2(bridge_slave_1) entered disabled state 20:38:59 executing program 0: r0 = inotify_init() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x8, 0x80000000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000180)) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000480)) r3 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea4342b11"], 0x14f) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x800000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x90) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r4, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) [ 415.899949][ T8797] device bridge_slave_1 entered promiscuous mode [ 415.973032][ T8797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.993255][ T8797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.051184][ T8797] team0: Port device team_slave_0 added [ 416.065597][ T8797] team0: Port device team_slave_1 added [ 416.138501][ T8797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.145743][ T8797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.171996][ T8797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.208685][ T8797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.216096][ T8797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.242272][ T8797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.268684][ C0] sd 0:0:1:0: [sg0] tag#5666 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 416.279435][ C0] sd 0:0:1:0: [sg0] tag#5666 CDB: Test Unit Ready [ 416.286280][ C0] sd 0:0:1:0: [sg0] tag#5666 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.296211][ C0] sd 0:0:1:0: [sg0] tag#5666 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.306115][ C0] sd 0:0:1:0: [sg0] tag#5666 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.316029][ C0] sd 0:0:1:0: [sg0] tag#5666 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.325950][ C0] sd 0:0:1:0: [sg0] tag#5666 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.335853][ C0] sd 0:0:1:0: [sg0] tag#5666 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.345774][ C0] sd 0:0:1:0: [sg0] tag#5666 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.355688][ C0] sd 0:0:1:0: [sg0] tag#5666 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.365624][ C0] sd 0:0:1:0: [sg0] tag#5666 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.375556][ C0] sd 0:0:1:0: [sg0] tag#5666 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.385434][ C0] sd 0:0:1:0: [sg0] tag#5666 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.395298][ C0] sd 0:0:1:0: [sg0] tag#5666 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.405165][ C0] sd 0:0:1:0: [sg0] tag#5666 CDB[c0]: 00 00 00 00 00 00 00 00 [ 416.420571][ T8797] device hsr_slave_0 entered promiscuous mode [ 416.461585][ T8797] device hsr_slave_1 entered promiscuous mode [ 416.472013][ T8797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.479809][ T8797] Cannot create hsr debugfs directory 20:38:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3d) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x800) syz_open_procfs(r1, &(0x7f0000000000)='net/dev\x00') 20:39:00 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qrtr-tun\x00', 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050006000100000008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r1], 0x48}}, 0x0) [ 417.028428][ T8797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 417.064551][ T8797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 417.095269][ T8697] Bluetooth: hci1: command 0x0409 tx timeout [ 417.117453][ T8797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 417.191138][ T8797] netdevsim netdevsim1 netdevsim3: renamed from eth3 20:39:00 executing program 0: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000019940)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2"], 0x1a3) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000380)={{{0x4}}, 0x0, 0x1000, &(0x7f0000000340)}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xa2b02, 0x0) write$P9_RSTATu(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x16b) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000}) add_key$keyring(0x0, &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) syz_open_dev$vcsa(0x0, 0x6, 0x0) sysfs$1(0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 417.681252][ T8797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.710834][ C0] sd 0:0:1:0: [sg0] tag#5668 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 417.721506][ C0] sd 0:0:1:0: [sg0] tag#5668 CDB: Test Unit Ready [ 417.728324][ C0] sd 0:0:1:0: [sg0] tag#5668 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.738250][ C0] sd 0:0:1:0: [sg0] tag#5668 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.748168][ C0] sd 0:0:1:0: [sg0] tag#5668 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.758111][ C0] sd 0:0:1:0: [sg0] tag#5668 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.767979][ C0] sd 0:0:1:0: [sg0] tag#5668 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.777862][ C0] sd 0:0:1:0: [sg0] tag#5668 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.787734][ C0] sd 0:0:1:0: [sg0] tag#5668 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.796965][ T9033] IPVS: ftp: loaded support on port[0] = 21 [ 417.797578][ C0] sd 0:0:1:0: [sg0] tag#5668 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.813160][ C0] sd 0:0:1:0: [sg0] tag#5668 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.823029][ C0] sd 0:0:1:0: [sg0] tag#5668 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.832910][ C0] sd 0:0:1:0: [sg0] tag#5668 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.842793][ C0] sd 0:0:1:0: [sg0] tag#5668 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.852663][ C0] sd 0:0:1:0: [sg0] tag#5668 CDB[c0]: 00 00 00 00 00 00 00 00 [ 417.978955][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 417.988349][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 418.012498][ T8797] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.095862][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 418.105766][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 418.115170][ T8699] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.122402][ T8699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.139202][ C1] sd 0:0:1:0: [sg0] tag#5669 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 418.149902][ C1] sd 0:0:1:0: [sg0] tag#5669 CDB: Test Unit Ready [ 418.156825][ C1] sd 0:0:1:0: [sg0] tag#5669 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 418.166775][ C1] sd 0:0:1:0: [sg0] tag#5669 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 418.176738][ C1] sd 0:0:1:0: [sg0] tag#5669 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 418.186755][ C1] sd 0:0:1:0: [sg0] tag#5669 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 418.196804][ C1] sd 0:0:1:0: [sg0] tag#5669 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 418.206768][ C1] sd 0:0:1:0: [sg0] tag#5669 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 418.214251][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 418.216802][ C1] sd 0:0:1:0: [sg0] tag#5669 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 418.225592][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 418.233856][ C1] sd 0:0:1:0: [sg0] tag#5669 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 418.233973][ C1] sd 0:0:1:0: [sg0] tag#5669 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 418.234091][ C1] sd 0:0:1:0: [sg0] tag#5669 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 418.234210][ C1] sd 0:0:1:0: [sg0] tag#5669 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 418.234342][ C1] sd 0:0:1:0: [sg0] tag#5669 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 418.244013][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 418.252224][ C1] sd 0:0:1:0: [sg0] tag#5669 CDB[c0]: 00 00 00 00 00 00 00 00 [ 418.262825][ T8699] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.292573][ T9055] IPVS: ftp: loaded support on port[0] = 21 [ 418.299035][ T8699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.300675][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 418.337966][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 418.399540][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 418.410107][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 418.475373][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 418.485373][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 418.496196][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 418.506612][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 418.516333][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 418.556958][ T8797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.571068][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 418.644886][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 418.655245][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 418.746225][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 418.754330][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 418.810124][ T8797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.920320][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 418.930641][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 419.018962][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 419.029092][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 419.060318][ T8797] device veth0_vlan entered promiscuous mode [ 419.089237][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 419.098546][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 419.168970][ T8797] device veth1_vlan entered promiscuous mode [ 419.179796][ T8700] Bluetooth: hci1: command 0x041b tx timeout [ 419.268096][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 419.277761][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 419.288168][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 419.298158][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 419.322375][ T8797] device veth0_macvtap entered promiscuous mode [ 419.346628][ T8797] device veth1_macvtap entered promiscuous mode [ 419.409891][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 419.420567][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.434340][ T8797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.446916][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 419.456887][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 419.466292][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 419.476373][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 419.513473][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 419.525599][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.539313][ T8797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.547545][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 419.557822][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:39:02 executing program 0: syz_usb_connect(0x4, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4c, 0xcc, 0x15, 0x8, 0x5a9, 0x2640, 0xe386, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}}]}}]}}]}}, 0x0) 20:39:03 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3d) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) sched_getattr(0xffffffffffffffff, &(0x7f0000000040)={0x38}, 0xfffffffffffffd50, 0x0) 20:39:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x8, 0x80000000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000000)=0x6) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0}, &(0x7f0000cab000)=0x1) clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001240)=[r2, 0x0], 0x2}, 0x58) 20:39:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x3}}]}, 0x24}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="18080000", @ANYRES16=r1, @ANYBLOB="ef8780000000000000000500000008000e"], 0x1c}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x8, 0x80000000) sendmsg$kcm(r2, &(0x7f0000000a80)={&(0x7f0000000200)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes-arm64)\x00'}, 0x80, &(0x7f0000000740)=[{&(0x7f00000002c0)="c07236b9b819cf026be8e8c4a21a6778972bdba2dd163c644e6f48157d86b4f1c7929d8e79f2b6cf22c2ac3bddcbc1a38a26929d0d95661ce0430180370575bd776871c1d1e13bf6c71ee4049422dce87a4860239741ae3c619c3b60aecf29b2bfc5cd5a7d2df42275c2df46904c6c5f6b923074ea25b0", 0x77}, {&(0x7f0000000380)="372ce7568cd3e8aa22a820b8a090b2d94ddebbaff0b0568f761d8aa23eaaeabc7eff63d9a080da7b8b70ae988ffaa02196578c66b3455b016a81ab2a716548611b1e735b22bffe21c40e17097ebbef9b8e9ecc3abe82ca0f267983552d48b1126a2ab497e1a74d6551c5005ef871b605823d31ae6740766495ad4af37325bcbcae0ebe5c4e88b61a63837923afc8bf3cbd2f2008a679e48f89329a453b1af13cb55012aa43d9fa9171f7963dae5e5a42022b10ef158a2ca49eb577f749", 0xbd}, {&(0x7f0000000440)="fbb9168818fef0ba3b8ceb8c85023cced128336d8e54025e9fbc104a2ce3f427f0c6ef4e9bce6ba781f143f3188a5ecd202221900af0f3c5ff6ccfb4004ff59942cd5dbb9f352808bc140ac828db6d4e3120305a14116b56adb850a77e20e851ec5dffcbf433f5b60403", 0x6a}, {&(0x7f00000004c0)="45379376981a471b94d42f10b1dd69757e4c59fa442ed9413f27b36bfd0ee0", 0x1f}, {&(0x7f0000000500)="f4767968fa4cc1a1542ead3242d1105d4c130a5b14f2f2a5fda20e424fd2a820825f1f0779621ec7ee8dfbd46dd2fda051a8ec73384a903029d37d9376f552", 0x3f}, {&(0x7f0000000540)="af826cb268849a4d4eb830f6c47634bc839a41d8e209706562602c65f1ec8e4f588df6f441ddc1179eec77638e188ef77646245b8588f7fff99225e4a152fe904b487713df3efe8967d252446249058f861f69e44fc7381857d6e04c98cbdceb93e056c632f9464a5e07805767f9a6e39da8d582d2839054785f86832312a2d41f981f5f295cbaa6c9aa70e5091f6fce6925a6178c79dd187f998b9d453fcc56817fdbb36f7b56da9b45689b81e172f4", 0xb0}, {&(0x7f0000000600)="fadb5aa28a8eded28bea412c9f8b909a38add157285623bfe6c34c76215dd0f4cd356cc3fd4e66d3d284eaab2bcfba4cc548811b1b2db081f9bc649f82c2f8a7fa3c9952", 0x44}, {&(0x7f0000000680)="6468721e37a83453277ea6919aaa7fa705db3eb3ce92230aa42cb08948a9655837ece66004d289be58c3a2f22feae8b78e74170357b804f06e9d41a72f8617fde5e919949bcb2825ae65d1e91da54aed064aa05d000d4fa896ffcafaa282028a811b049e0634b08ec6e3c9de506bb39d11fb3dd5812dfe3d242fc1c46a3ee19bb6deb2a9fbd2f38dbe60af762145cb70a852648d", 0x94}], 0x8, &(0x7f00000007c0)=[{0x38, 0x112, 0x10000, "d7f09802d6b4fa1aeb189a29c9c66f926d2f9245d01ba91f17fd471e8e5ef3fa4f"}, {0xb8, 0x0, 0x6, "590f5a42df22818383f9fd4630d060b68e6c321f4c9b54127e9651b7e506388c1a7c4df5e4f4bbd5d7082a9aae7fbaff861fd58bd0c6304fdb379d0a143cce6ca9033ca409e3b4cc197bd70d9566a559fd98b95fcf941a332a48fb1e5766cd05b7f6dba729484a32740f2d9eb04b68a0943e2c378a3795996376c07d528d6530342a5b85cfe28a6b3c883f616f3f95fbbd9a39c0e259fd150eaf8fbc5aff836448"}, {0xe0, 0x117, 0x4, "f167a8ec3a43b2cbdf0303e8cb25dabaf532660d82db092b59ff45f741a0721817e944e8a6761ad8f0544aa5631e5aa462bc915c4e6dff19e49a92bc276776b76bbb03c2520470700a155f3a6e59c3739b964da365615c4f9fe6c5eca1329f3dea3944b87ef5d16ee0c602342358a2921da6592c1b5c5716a30455bac3e1e7bcf7cf717f16a49916d9932a33872b5887064e1efa10da21653e2751a7a343019fe104f09670f737e20f30f424e16ca40c71464238fc8254bb794593e191548718efeb8dd29102065caf7aae32f55d43"}, {0xc0, 0x10b, 0x1, "31469b341b256f68778e26b78f70bfbfed4201c11371db67df16d030a63c423e9b210dcca832ba34e80b88cc0dad48721f67a7960be54928b5099b1c242c6a5a541a073f8429ca2893730d3c09f307114219d9920dc997c77dbb2d064cc007de3bf5a7a5706e023b61868bfed06f8a9bff9e31c35c17057e4e84e112bdb70e81055335bc9c570197cb58120da443f7067d996ee873262dfc4be8bad9c4c14216332a90427f434b433bf63ec462"}], 0x290}, 0x4000) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x8, 0x80000000) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)={0x6, [0x1, 0x101, 0x8, 0x0, 0x2, 0x7f]}, &(0x7f00000001c0)=0x10) 20:39:04 executing program 1: mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x40) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_ifreq(r1, 0x8970, &(0x7f0000000080)={'macsec0\x00', @ifru_mtu=0x6}) dup(0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x2060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x8, 0x80000000) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@multicast, @random="f6004400", @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x3, 0xd8}, @timestamp_addr={0x44, 0x4, 0xf1}]}}, @timestamp}}}}, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000001c0)) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) pwritev2(r2, &(0x7f0000000800)=[{&(0x7f00000002c0)="38ad28c18770e0af0310665344ba0c6f63dc787d00f5d203dd65d9d8a175e4141a7201ad0b294b34ae22bda3624e1cec8bdf3004148e13169024227cb0643343cd6dd3c791dca1b3213a33fc3e188c0e5a8c6499dc0aa7d939e7097af8df0fd6db9d8787aefc7b2f86c0a7384d118024c8cbe41c48086e0adc3a991c2500a619a2ae54cb4eae4b1181b134e60e6c113e64e0ee9471aa59d1f738fbe737bc81098404065e94d1ffaf3890004409079e8bd63d2b050d31", 0xb6}, {&(0x7f0000000380)="1f57861554a65ac03e270ea8106834d8cbf817c49bea9e1788472a127ee88d32d050003a907ea08b0e20204e4c51870ca523ed9a50ba580b8419076185dcda086debd4924a886a3d37f030ea90a2e2f50e0f738c4d18c7e3c446cdaa847c19e5de2ad3e1d98a515482cc6fdaacbb3705be257b03836e24747af8052a17a4a2540f486ecd02328438f31d13cf73be81f9bcaf32ab18086ade595c570e3be1b5ee0ef27f300d11a9c340a2c6f4e112d716e81bb746d564a868d7ca645b922d3d8d0b2eb276f2f46d0c7783", 0xca}, {&(0x7f0000000480)="4cf697f821be07aac33a097328be142cdb6f0aa27fd0ef0e9d4c81add522d1d648520b757a70b1acfd2e26ebe5df949ab6f1cf9821c4fd628dc1ca2b999d6d0ea7c01e0140795305127562a4bd1149a78f98f92dc344dd744e4495ce3860c8da0f55a3cb8bd1ae134d85567c57891cfc2ba358a4dd756fd0c4e97c6a05e684ab9c8009b57abae1d1645d3225fdc60cc5611612d6396d8a3dba89069994a8c4bd6b43a7f09d5b", 0xa6}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000540)="4d23fee4a548775c91a2b56bc6dc0cfdb5a219f5e88853556c844c6e856dfeeb4873974f5fbf4ef2b50c2920b3d88fce861f983174a325f02d24c252e6cace59a5076d1bf8807200872280782113ae11562b533e3f37210e6f7a1367f67469712198e3015bc1f58cd3446f41c1b3791ec634d7ed31802f2577ceced216b5bca9c3adbb291cb22f670bd822e8fb7c9a682b13353516c5", 0x96}, {&(0x7f0000000600)="63f71f82cb7facefe615648fc4368e7a6e0124ab19d967d79f23784e816dc621a5f04ff533060e33328018cbe7d09f30ab0e5b2bd340d64cf25f650f17e7814db04bd68fa5e5f557bad37631e1ba82748b85bbb354c0c22b759a6ce145d456bcbba346806a55ab82fea21fd07f28a3d2ccfff2191b92fc4ef0c8745a57a1ce1968d79f848fa4cc1c109deae7fdfb580640ca280edfa0c03d731b12e15d0e6e30d5d05fd493ec051484cbbf1b341e22318058ff4d89e86ff041940aa8e78292eeb79a58cb23e5a2471be4d500fd74edf0e57a2cca9e2e", 0xd6}, {&(0x7f0000000700)="46d08dd7f00c587734a9ed1b442f2b428893c043d21e940a8a830048942ee770db3a4e3a6045c83a2315a9be913140425ad8785db1c62a62d5047aedb8a99893d0ea1e95211c58e0d5ac26f22458672bb357ee37e7971a6d38f35b2a29afb281517c72089d0bb1c537f438b395850780761d022c3b9cb612a2ce0193a50298dd270b0e56371fb0fb0454f8db27f419328ce18565d142d37127bb937e61a714a9fdd9caaf9e9259bc2abc89000d3734d6475d05ddce5d2ca8c8a681e74bc5ee7f7aed930e9c9d051d078f7c09ae1113", 0xcf}], 0x7, 0x81, 0x80000000, 0xc) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 20:39:04 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) fsopen(&(0x7f0000000040)='fusectl\x00', 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x1}) [ 421.255727][ T8700] Bluetooth: hci1: command 0x040f tx timeout 20:39:04 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x8, 0x80000000) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x1ff, 0x7fff, 0xd959, 0x4, 0x75, "beead8d710af6064abd311775a6de80032e9e4", 0x3, 0x6}) io_setup(0x1ff, &(0x7f0000000100)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r2, 0x2, &(0x7f0000000200)=[&(0x7f00000000c0)={0x13a9010000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xfffffffffffffffe}]) 20:39:04 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100000000090400000003000000092100000001220000090581"], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xec, 0x2e, 0x1, 0x8, 0x1d19, 0x1104, 0x5ef7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf, 0xa5, 0x3c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000001580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000900002003041cc304000000000109022c00010000a0000904000001"], 0x0) 20:39:05 executing program 0: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x7, 0x40) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000e40)={0x2a0, r1, 0x0, 0x70bd28, 0x0, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, [], 0x1}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x400, @private1={0xfc, 0x1, [], 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1ff, @remote, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x69}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x90}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "88b56ef939cdc8e4bbc05826f3325710fbd1abe4a88cb7d423"}}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x14}, 0x4008804) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736dab457d5b8fa9afec173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e0"], 0x14f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000300)=0x3ff) r4 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0x80045519, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x2}) fcntl$setstatus(r4, 0x4, 0x400) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000140)=0x80000) [ 422.126259][ T8700] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 422.148906][ C1] sd 0:0:1:0: [sg0] tag#5674 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 422.159594][ C1] sd 0:0:1:0: [sg0] tag#5674 CDB: Test Unit Ready [ 422.166397][ C1] sd 0:0:1:0: [sg0] tag#5674 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.176299][ C1] sd 0:0:1:0: [sg0] tag#5674 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.186216][ C1] sd 0:0:1:0: [sg0] tag#5674 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.196189][ C1] sd 0:0:1:0: [sg0] tag#5674 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.206083][ C1] sd 0:0:1:0: [sg0] tag#5674 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.215969][ C1] sd 0:0:1:0: [sg0] tag#5674 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.225872][ C1] sd 0:0:1:0: [sg0] tag#5674 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.235765][ C1] sd 0:0:1:0: [sg0] tag#5674 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.245655][ C1] sd 0:0:1:0: [sg0] tag#5674 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.255601][ C1] sd 0:0:1:0: [sg0] tag#5674 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.265503][ C1] sd 0:0:1:0: [sg0] tag#5674 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.275497][ C1] sd 0:0:1:0: [sg0] tag#5674 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.285391][ C1] sd 0:0:1:0: [sg0] tag#5674 CDB[c0]: 00 00 00 00 00 00 00 00 [ 422.524190][ T8700] usb 2-1: Using ep0 maxpacket: 16 [ 422.646495][ T8700] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 422.659607][ T8700] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 422.668985][ T8700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.757458][ T8700] usb 2-1: config 0 descriptor?? [ 422.801580][ T8700] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 422.858698][ C0] sd 0:0:1:0: [sg0] tag#5675 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 422.869381][ C0] sd 0:0:1:0: [sg0] tag#5675 CDB: Test Unit Ready [ 422.876160][ C0] sd 0:0:1:0: [sg0] tag#5675 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.886063][ C0] sd 0:0:1:0: [sg0] tag#5675 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.895979][ C0] sd 0:0:1:0: [sg0] tag#5675 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.905990][ C0] sd 0:0:1:0: [sg0] tag#5675 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.915906][ C0] sd 0:0:1:0: [sg0] tag#5675 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.925841][ C0] sd 0:0:1:0: [sg0] tag#5675 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.935772][ C0] sd 0:0:1:0: [sg0] tag#5675 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.945681][ C0] sd 0:0:1:0: [sg0] tag#5675 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.955553][ C0] sd 0:0:1:0: [sg0] tag#5675 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.965512][ C0] sd 0:0:1:0: [sg0] tag#5675 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.975389][ C0] sd 0:0:1:0: [sg0] tag#5675 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.985260][ C0] sd 0:0:1:0: [sg0] tag#5675 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.995117][ C0] sd 0:0:1:0: [sg0] tag#5675 CDB[c0]: 00 00 00 00 00 00 00 00 [ 423.017720][ T9096] udc-core: couldn't find an available UDC or it's busy [ 423.024915][ T9096] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 20:39:06 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045519, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x2}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x8, 0x80000000) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x1, 0x4) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_usb_control_io(r3, &(0x7f0000001080)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000204"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 423.291944][ T9096] udc-core: couldn't find an available UDC or it's busy [ 423.299174][ T9096] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 423.334593][ T28] Bluetooth: hci1: command 0x0419 tx timeout [ 423.341821][ T28] usb 2-1: USB disconnect, device number 2 [ 423.725810][ T8700] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 423.994453][ T8700] usb 1-1: device descriptor read/64, error 18 [ 424.114167][ T28] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 424.354242][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 424.384020][ T8700] usb 1-1: device descriptor read/64, error 18 [ 424.475053][ T28] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 424.488186][ T28] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 424.497600][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.564627][ T28] usb 2-1: config 0 descriptor?? [ 424.611901][ T28] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 424.664323][ T8700] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 424.807649][ T9096] udc-core: couldn't find an available UDC or it's busy [ 424.814910][ T9096] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 20:39:08 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x8, 0x80000000) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000040)={0x2, 0x7ffffffe, 0x8001, 0x7, 0x9, 0x100, 0x2, 0x7, 0x2, 0x0, 0x8, 0x5, 0x1, 0x9}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) r5 = dup(r4) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f0000000140)=0x37c) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="24000000190007841dfffd946f6105000a2881001f03fe050400080005001e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa43e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 424.924034][ T28] usb 2-1: USB disconnect, device number 3 [ 424.955513][ T8700] usb 1-1: device descriptor read/64, error 18 [ 425.077455][ T9135] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 425.086318][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 425.344658][ T8700] usb 1-1: device descriptor read/64, error 18 [ 425.465456][ T8700] usb usb1-port1: attempt power cycle 20:39:08 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x8, 0x80000000) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000240)={0x0, 0x5, 0xffff2d23, [], &(0x7f0000000200)=0x8}) fcntl$setpipe(r2, 0x8, 0x80000000) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x34, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x55}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x34}}, 0x4000001) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x52, 0xffffffff, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r3, 0x7c80, 0x0) [ 425.914909][ T8699] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 426.174148][ T8700] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 426.195776][ T8699] usb 2-1: device descriptor read/64, error 18 20:39:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0x80045519, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x2}) write(r3, &(0x7f0000000100)="3ccbe5b145fd60ba5a0b0c6f4f32973348a7d0c93bb1db522215258bd042af708685fe0cb6b6473b85687854e6457f554241a322cc222463fae830e909b387b2fe1684fc637871c2cb54c57df88c67d7f6547f15c1f0111046b8fec054436699a07e9133dac9d821f2ccfcdfeeb01b17ba9e84503f6d6a9cb2cf463a4a6c1287ff6a15498c7001f24d787abf7cd172a0088e7c798dfb551d3036123fc915331c5eafd4d5f82b127c59ea345e79b6a90b550cff6cd54dd81bea39dee1e42b849afa05351427a21f1a285ac6320e90a8180e71c971e4188e0192653f0fa2a0928d8f6b9c6e38cf2e3e7dc71981f4264eda6d0fb8a69a18", 0xf6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000100005070000f0ffffffffffffff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e00010069703665727370616e"], 0x40}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 426.404474][ T8700] usb 1-1: device descriptor read/8, error -71 [ 426.595257][ T8699] usb 2-1: device descriptor read/64, error 18 [ 426.611732][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 426.622233][ T8700] usb 1-1: device descriptor read/8, error -71 [ 426.747414][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 426.866289][ T8699] usb 2-1: new high-speed USB device number 5 using dummy_hcd 20:39:10 executing program 0: socket$inet6_sctp(0xa, 0x10000000005, 0x84) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0xffffffffffffc6fb}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000001300)=ANY=[]) write$binfmt_misc(r0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x155) mmap$dsp(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x0, 0x0) read$dsp(r3, &(0x7f0000001100)=""/4096, 0x1000) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0x40045010, &(0x7f0000000100)) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={r2, 0x270c}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r4, 0x0, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r4}, &(0x7f0000000140)=0x8) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c40)={0x0, 0xfffffffffffffffd, 0xc6, 0x82, @buffer={0x0, 0x4b, &(0x7f0000000a00)=""/75}, &(0x7f0000000a80)="047330b726f373c400d372bf9cab0d0bcfe1bd4f575cf0ae638383564502a6406ad11f54f9456ecd3282ebb27b57ac7eaa10b6bbd86009dd0cf8dbad50ff202c32cb7f0e9cea8b4c92d1ceb517a4162fafa5f204993e12c14de71a79662e1f7bff838e8a055b189fcd0f6a991ad44c9af914d965778e17a75adb65ae4806624d8dffb79ec657cd4d55cd5e90c66e90638ffdbcd64b4e19383bc44fc52160529944cf4eb77127c51bcc51a704192f40bb7a3525e6a7399a086430fcae1c4d5752553c1a239299", &(0x7f0000000b80)=""/127, 0x0, 0x3, 0x0, &(0x7f00000008c0)}) writev(r1, &(0x7f00000012c0)=[{&(0x7f0000001540)="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", 0x8a8}], 0x1) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 427.068787][ C1] sd 0:0:1:0: [sg0] tag#5676 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 427.079500][ C1] sd 0:0:1:0: [sg0] tag#5676 CDB: Test Unit Ready [ 427.086369][ C1] sd 0:0:1:0: [sg0] tag#5676 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.096305][ C1] sd 0:0:1:0: [sg0] tag#5676 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.106248][ C1] sd 0:0:1:0: [sg0] tag#5676 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.116191][ C1] sd 0:0:1:0: [sg0] tag#5676 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.126147][ C1] sd 0:0:1:0: [sg0] tag#5676 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.136119][ C1] sd 0:0:1:0: [sg0] tag#5676 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.146075][ C1] sd 0:0:1:0: [sg0] tag#5676 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.156149][ C1] sd 0:0:1:0: [sg0] tag#5676 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.166104][ C1] sd 0:0:1:0: [sg0] tag#5676 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.175215][ T8699] usb 2-1: device descriptor read/64, error 18 [ 427.175984][ C1] sd 0:0:1:0: [sg0] tag#5676 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.191831][ C1] sd 0:0:1:0: [sg0] tag#5676 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.201745][ C1] sd 0:0:1:0: [sg0] tag#5676 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.211649][ C1] sd 0:0:1:0: [sg0] tag#5676 CDB[c0]: 00 00 00 00 00 00 00 00 20:39:10 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x100, 0xff, 0x4, 0x8001, 0x4, 0x200}) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x20000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x8, 0x9}, {0xb, 0x3}, {0x2, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x8004) r3 = syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0x8, 0x200000) ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000000480)) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000500)) set_tid_address(&(0x7f0000000540)) recvmsg(r3, &(0x7f0000000880)={&(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000600)=""/25, 0x19}, {&(0x7f0000000640)=""/255, 0xff}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/68, 0x44}], 0x4}, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f00000008c0)=0x3, 0x4) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000900)='/dev/vsock\x00', 0x54000, 0x0) sendmsg$NET_DM_CMD_START(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1001}, 0x20040010) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffff9) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000a40)) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'syztnl1\x00', r2, 0x4, 0x0, 0xeb, 0xfffffff7, 0xe, @rand_addr=' \x01\x00', @remote, 0xf828, 0x80, 0x8, 0x8}}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000b80)=0x1, 0x4) semget$private(0x0, 0x3, 0x1) [ 427.585873][ T8699] usb 2-1: device descriptor read/64, error 18 [ 427.704885][ T8699] usb usb2-port1: attempt power cycle [ 427.842075][ C0] sd 0:0:1:0: [sg0] tag#5677 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 427.842196][ C0] sd 0:0:1:0: [sg0] tag#5677 CDB: Test Unit Ready [ 427.842448][ C0] sd 0:0:1:0: [sg0] tag#5677 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.842567][ C0] sd 0:0:1:0: [sg0] tag#5677 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.842684][ C0] sd 0:0:1:0: [sg0] tag#5677 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.842808][ C0] sd 0:0:1:0: [sg0] tag#5677 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.842923][ C0] sd 0:0:1:0: [sg0] tag#5677 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.843040][ C0] sd 0:0:1:0: [sg0] tag#5677 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.843157][ C0] sd 0:0:1:0: [sg0] tag#5677 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.843274][ C0] sd 0:0:1:0: [sg0] tag#5677 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.843395][ C0] sd 0:0:1:0: [sg0] tag#5677 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.843511][ C0] sd 0:0:1:0: [sg0] tag#5677 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.843627][ C0] sd 0:0:1:0: [sg0] tag#5677 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.843747][ C0] sd 0:0:1:0: [sg0] tag#5677 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.843865][ C0] sd 0:0:1:0: [sg0] tag#5677 CDB[c0]: 00 00 00 00 00 00 00 00 [ 428.434590][ T8699] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 428.615862][ T8699] usb 2-1: device descriptor read/8, error -61 20:39:11 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x8, 0x80000000) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x20}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x8, 0x80000000) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket(0x10, 0x80002, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 20:39:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x8, 0x80000000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="10002cbd7000fbdbdf25080000004400098008f501000900000008000100b00a00000800010001010000018001000100010008000200ff0f00000800010009000000080002000900000008000100f4000000300007800c00040020000000000000000c00030099070000000000000c0003001f0000000000000008000200b704000032be84a42702bf81967b27d40aa38032b62d0e4cb0ce1e706664b96a82"], 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x735b3cbcf7a4f46d) listen(r1, 0x0) listen(r0, 0x0) ftruncate(0xffffffffffffffff, 0x400) r4 = socket$netlink(0x10, 0x3, 0x8) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 428.835744][ T8699] usb 2-1: device descriptor read/8, error -71 20:39:12 executing program 0: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0xea240, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/1}], 0x200000000000000f) semctl$IPC_RMID(0x0, 0x0, 0x0) close(r0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio1\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000003c0)="8de2c53516353c628de2752028552eb1ee1a1cba2d8892721a2bcf11e7f3c235dfc2b90240638cf26d3195dc1604dd67ae8a82d3f2fc5f32d687fe50d3f7c58d828b2f83c985304ada41e50e4aceee8e14282bb08fa196d4752f0433c4fe0d7cd3801b4925ac59c93ae2a7ad6150d2762a804f57334aae96187c0b334b014f497ae3b22e13a0cfcd6d21e8abf6b9f8bfa70e82937679fb6370dbb33dd3907f4fe56deb6d09e935277bb014b950afce38cbff715f8f9a528a626eedbaa5c990addf5a9191f527c5d817b03b85cfd24ac8f99a03e8cc90dffe300757ea", 0xdc, 0xfffffffffffffffb) keyctl$invalidate(0x15, r1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x8, 0x80000000) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000040800d7b10177fd6cea0a5c4558f24525f45962c0743c021cbc9a6747b5c1674d5c49b58f800b5da1dc4f36d09368573a514dd029e366fd840cbb8cabd71983621c7eaac533a2ab080c52b4f8ec14cd7dc8475a91b65bab3df9509521471314c3b2aac45593be3d"], 0x14}}, 0x0) syz_extract_tcp_res(&(0x7f00000004c0), 0x7ff, 0x4728) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={&(0x7f0000000500)="2ff1419cadb2058ad7ddbf575dabf2c92454eae81ef48739308098c38cb693f669cad8fa9ad66e54d1448551dfbcc15b620c33f983f5828f03b4b24585b9164844d18794c90aa95c88728da6e93a879655e178fc2a72883513be0bc580713ed02b7993ac9d5228bb4cd530b5fe10abe53f451a93826f4eacd84d70efa89c4058ec9b5ef65746ce5ea6591d8a36505c4e140e5c1cc0cc97fbd25b9fcf9eac182d618036b561d484ae8dc7ca88ef8cf0f1bfa8cb39f6ec2729bf088fc8bfbc4e284a136e66408d8e4c060f0d709526a05b0e52a0133d9960c5a6d28b6ea68461a398adc2c3e8526f49283dc66ed5bd2b6b736452a5a175ecb7", &(0x7f0000000700)="ef432bb271ac6fa64846afa0adfeb6b037c0d2a73d697f779acaa91f6753b2704695b6771e46e577d9996cecbb254f75f02d92209777cd1734ce5d68c8e747337cf79a979a0572e801a5f57fc88f8ef405c2ca82b883b9e50b37a04013783459a8a7904c2624f4faf889990318d764b22ff4242fd6d27ef23cf9e611260bcae220390bbea362c43f39cb91f070eec9b0a9f7f200fee18a431e98f1332b78a0dac342571963c3849450a4cb9df23f32f0819e9e5207b3973b5f10e4b5be16d76edfa82e678cbc4834461ecab1d961bacfdf33b20fa05bb9657efdc49a18d111ee85a0f55b844ee4a9248e3a6f2282ed0e594190f011508a07"}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x8, 0x80000000) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000300)=@req={0x5, 0x3ff, 0x378ae59e, 0x7}, 0x10) [ 429.557656][ T9185] IPVS: ftp: loaded support on port[0] = 21 20:39:13 executing program 0: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0xea240, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/1}], 0x200000000000000f) semctl$IPC_RMID(0x0, 0x0, 0x0) close(r0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio1\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000003c0)="8de2c53516353c628de2752028552eb1ee1a1cba2d8892721a2bcf11e7f3c235dfc2b90240638cf26d3195dc1604dd67ae8a82d3f2fc5f32d687fe50d3f7c58d828b2f83c985304ada41e50e4aceee8e14282bb08fa196d4752f0433c4fe0d7cd3801b4925ac59c93ae2a7ad6150d2762a804f57334aae96187c0b334b014f497ae3b22e13a0cfcd6d21e8abf6b9f8bfa70e82937679fb6370dbb33dd3907f4fe56deb6d09e935277bb014b950afce38cbff715f8f9a528a626eedbaa5c990addf5a9191f527c5d817b03b85cfd24ac8f99a03e8cc90dffe300757ea", 0xdc, 0xfffffffffffffffb) keyctl$invalidate(0x15, r1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x8, 0x80000000) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000040800d7b10177fd6cea0a5c4558f24525f45962c0743c021cbc9a6747b5c1674d5c49b58f800b5da1dc4f36d09368573a514dd029e366fd840cbb8cabd71983621c7eaac533a2ab080c52b4f8ec14cd7dc8475a91b65bab3df9509521471314c3b2aac45593be3d"], 0x14}}, 0x0) syz_extract_tcp_res(&(0x7f00000004c0), 0x7ff, 0x4728) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={&(0x7f0000000500)="2ff1419cadb2058ad7ddbf575dabf2c92454eae81ef48739308098c38cb693f669cad8fa9ad66e54d1448551dfbcc15b620c33f983f5828f03b4b24585b9164844d18794c90aa95c88728da6e93a879655e178fc2a72883513be0bc580713ed02b7993ac9d5228bb4cd530b5fe10abe53f451a93826f4eacd84d70efa89c4058ec9b5ef65746ce5ea6591d8a36505c4e140e5c1cc0cc97fbd25b9fcf9eac182d618036b561d484ae8dc7ca88ef8cf0f1bfa8cb39f6ec2729bf088fc8bfbc4e284a136e66408d8e4c060f0d709526a05b0e52a0133d9960c5a6d28b6ea68461a398adc2c3e8526f49283dc66ed5bd2b6b736452a5a175ecb7", &(0x7f0000000700)="ef432bb271ac6fa64846afa0adfeb6b037c0d2a73d697f779acaa91f6753b2704695b6771e46e577d9996cecbb254f75f02d92209777cd1734ce5d68c8e747337cf79a979a0572e801a5f57fc88f8ef405c2ca82b883b9e50b37a04013783459a8a7904c2624f4faf889990318d764b22ff4242fd6d27ef23cf9e611260bcae220390bbea362c43f39cb91f070eec9b0a9f7f200fee18a431e98f1332b78a0dac342571963c3849450a4cb9df23f32f0819e9e5207b3973b5f10e4b5be16d76edfa82e678cbc4834461ecab1d961bacfdf33b20fa05bb9657efdc49a18d111ee85a0f55b844ee4a9248e3a6f2282ed0e594190f011508a07"}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x8, 0x80000000) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000300)=@req={0x5, 0x3ff, 0x378ae59e, 0x7}, 0x10) 20:39:13 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) r1 = syz_open_dev$vivid(&(0x7f0000000380)='/dev/video#\x00', 0x0, 0x2) poll(&(0x7f0000000040)=[{r0, 0x2681}, {r1, 0xc4}], 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x8, 0x80000000) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0x80045519, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x2}) r4 = pidfd_getfd(r2, r3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$evdev(r3, &(0x7f00000000c0)=[{{0x77359400}, 0x14, 0xfff8, 0xec4}, {{0x77359400}, 0x17, 0x5c, 0x2}, {{0x77359400}, 0x4, 0x7, 0xff}], 0x48) fcntl$setpipe(r5, 0x8, 0x80000000) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000080)={0x6, 0x200, 0xffff, 0x800, r5}) [ 430.195604][ T9185] chnl_net:caif_netlink_parms(): no params data found [ 430.502858][ T9185] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.511205][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.520890][ T9185] device bridge_slave_0 entered promiscuous mode [ 430.534680][ T9185] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.541925][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.551538][ T9185] device bridge_slave_1 entered promiscuous mode [ 430.636167][ T9185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.697269][ T9185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 20:39:14 executing program 1: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000000000000000000000d0000008000018044000400200001000a00000000000000fc00000000000000000000000000000000000000200002000a004e2300000000fe8000000000000000000000000000bb0000000038000400200001000a00000000000000fe880000000000000000000000000001000000001400020002004e23e00000010000000000000000"], 0x94}}, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x240240, 0x0) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='n', 0x10000, r0) [ 430.859422][ T9185] team0: Port device team_slave_0 added [ 430.889425][ T9185] team0: Port device team_slave_1 added [ 430.993053][ T9185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.000610][ T9185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.026827][ T9185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.066033][ T9185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.073121][ T9185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.100313][ T9185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.133015][ T9353] Option ' ' to dns_resolver key: bad/missing value 20:39:14 executing program 0: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0xea240, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/1}], 0x200000000000000f) semctl$IPC_RMID(0x0, 0x0, 0x0) close(r0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio1\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000003c0)="8de2c53516353c628de2752028552eb1ee1a1cba2d8892721a2bcf11e7f3c235dfc2b90240638cf26d3195dc1604dd67ae8a82d3f2fc5f32d687fe50d3f7c58d828b2f83c985304ada41e50e4aceee8e14282bb08fa196d4752f0433c4fe0d7cd3801b4925ac59c93ae2a7ad6150d2762a804f57334aae96187c0b334b014f497ae3b22e13a0cfcd6d21e8abf6b9f8bfa70e82937679fb6370dbb33dd3907f4fe56deb6d09e935277bb014b950afce38cbff715f8f9a528a626eedbaa5c990addf5a9191f527c5d817b03b85cfd24ac8f99a03e8cc90dffe300757ea", 0xdc, 0xfffffffffffffffb) keyctl$invalidate(0x15, r1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x8, 0x80000000) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000040800d7b10177fd6cea0a5c4558f24525f45962c0743c021cbc9a6747b5c1674d5c49b58f800b5da1dc4f36d09368573a514dd029e366fd840cbb8cabd71983621c7eaac533a2ab080c52b4f8ec14cd7dc8475a91b65bab3df9509521471314c3b2aac45593be3d"], 0x14}}, 0x0) syz_extract_tcp_res(&(0x7f00000004c0), 0x7ff, 0x4728) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={&(0x7f0000000500)="2ff1419cadb2058ad7ddbf575dabf2c92454eae81ef48739308098c38cb693f669cad8fa9ad66e54d1448551dfbcc15b620c33f983f5828f03b4b24585b9164844d18794c90aa95c88728da6e93a879655e178fc2a72883513be0bc580713ed02b7993ac9d5228bb4cd530b5fe10abe53f451a93826f4eacd84d70efa89c4058ec9b5ef65746ce5ea6591d8a36505c4e140e5c1cc0cc97fbd25b9fcf9eac182d618036b561d484ae8dc7ca88ef8cf0f1bfa8cb39f6ec2729bf088fc8bfbc4e284a136e66408d8e4c060f0d709526a05b0e52a0133d9960c5a6d28b6ea68461a398adc2c3e8526f49283dc66ed5bd2b6b736452a5a175ecb7", &(0x7f0000000700)="ef432bb271ac6fa64846afa0adfeb6b037c0d2a73d697f779acaa91f6753b2704695b6771e46e577d9996cecbb254f75f02d92209777cd1734ce5d68c8e747337cf79a979a0572e801a5f57fc88f8ef405c2ca82b883b9e50b37a04013783459a8a7904c2624f4faf889990318d764b22ff4242fd6d27ef23cf9e611260bcae220390bbea362c43f39cb91f070eec9b0a9f7f200fee18a431e98f1332b78a0dac342571963c3849450a4cb9df23f32f0819e9e5207b3973b5f10e4b5be16d76edfa82e678cbc4834461ecab1d961bacfdf33b20fa05bb9657efdc49a18d111ee85a0f55b844ee4a9248e3a6f2282ed0e594190f011508a07"}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x8, 0x80000000) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000300)=@req={0x5, 0x3ff, 0x378ae59e, 0x7}, 0x10) 20:39:14 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x8, 0x80000000) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000080)) r1 = socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x8, 0x80000000) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000040)) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x1, 0x0, 0x9, 0xa, 0x40030000000000, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x4d4}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) [ 431.343424][ T9185] device hsr_slave_0 entered promiscuous mode [ 431.371433][ T9185] device hsr_slave_1 entered promiscuous mode [ 431.409764][ T9185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.417979][ T9185] Cannot create hsr debugfs directory [ 431.498860][ T8699] Bluetooth: hci2: command 0x0409 tx timeout 20:39:14 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e80000000003000600f418000002004000da000001000000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb20200000000152c000000000000000001020014bb000000000000002300000000030005000020000002"], 0x80}}, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x400, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f00000000c0), 0x2c8, 0x0) 20:39:15 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000780)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x2, 0x5, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) set_mempolicy(0x1, &(0x7f0000000040), 0x2) socket(0x25, 0x5, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7cd6e26560000000049d245c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee0d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e8060085c4ca2996e51800000000000000000000007f000000"], 0xed) getitimer(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="45ca6b3807898f9a2d839537d419dd3c8cc2247bd3ed96f025dc9a54b62f20cf665145b3", 0x24}], 0x1) ioctl$int_out(r1, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2=0xe000000f, 0x0, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x0, 'netdevsim0\x00'}, 0x18) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000180)={0x401, "e653c14fb70516a366f4c6e49b282d5f2f40aa92640688a59dd5f39577e210fb", 0x2, 0x3, 0x1, 0x8, 0x1000006, 0x2}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 432.129089][ T9185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 432.190756][ T9185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 432.201568][ C1] sd 0:0:1:0: [sg0] tag#5693 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 432.212256][ C1] sd 0:0:1:0: [sg0] tag#5693 CDB: Test Unit Ready [ 432.219069][ C1] sd 0:0:1:0: [sg0] tag#5693 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.228969][ C1] sd 0:0:1:0: [sg0] tag#5693 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.238874][ C1] sd 0:0:1:0: [sg0] tag#5693 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.248781][ C1] sd 0:0:1:0: [sg0] tag#5693 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.249703][ T9185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 432.258673][ C1] sd 0:0:1:0: [sg0] tag#5693 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.275265][ C1] sd 0:0:1:0: [sg0] tag#5693 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.285149][ C1] sd 0:0:1:0: [sg0] tag#5693 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.295051][ C1] sd 0:0:1:0: [sg0] tag#5693 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.304936][ C1] sd 0:0:1:0: [sg0] tag#5693 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.314834][ C1] sd 0:0:1:0: [sg0] tag#5693 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.324735][ C1] sd 0:0:1:0: [sg0] tag#5693 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.334629][ C1] sd 0:0:1:0: [sg0] tag#5693 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.344521][ C1] sd 0:0:1:0: [sg0] tag#5693 CDB[c0]: 00 00 00 00 00 00 00 00 [ 432.420002][ T9421] IPVS: ftp: loaded support on port[0] = 21 20:39:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @private}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000000000007000000440c090100406b548710e6cd4a000000496459576002db987ca563c3d4f1617e725e7e1b146beea2a0b6f8e97a0a9ae9affd48752dce2b9986e35a5a19ee228b6d5fbc6f6872a84de0835c6c5f4c41c0a0b0810bf4e22074c78f99a65a0f9d144e67ea46ad59c2f99941ad74abc79ab59976db7134a3363400ffe4913d29a411ced6847f6b1ac98b81b1179d8921e00e26a68e449adf8cc65561918d51a6cf1a489def43d1f921980faca0a3d4345f81e42a3e"], 0x20}}], 0x1, 0x0) [ 432.535859][ T9185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 432.957204][ C0] sd 0:0:1:0: [sg0] tag#5694 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 432.967942][ C0] sd 0:0:1:0: [sg0] tag#5694 CDB: Test Unit Ready [ 432.974722][ C0] sd 0:0:1:0: [sg0] tag#5694 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.984583][ C0] sd 0:0:1:0: [sg0] tag#5694 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.994544][ C0] sd 0:0:1:0: [sg0] tag#5694 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.004509][ C0] sd 0:0:1:0: [sg0] tag#5694 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.014419][ C0] sd 0:0:1:0: [sg0] tag#5694 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.024330][ C0] sd 0:0:1:0: [sg0] tag#5694 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.034262][ C0] sd 0:0:1:0: [sg0] tag#5694 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.044070][ C0] sd 0:0:1:0: [sg0] tag#5694 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.054298][ C0] sd 0:0:1:0: [sg0] tag#5694 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.064096][ C0] sd 0:0:1:0: [sg0] tag#5694 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.074016][ C0] sd 0:0:1:0: [sg0] tag#5694 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.083969][ C0] sd 0:0:1:0: [sg0] tag#5694 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.093917][ C0] sd 0:0:1:0: [sg0] tag#5694 CDB[c0]: 00 00 00 00 00 00 00 00 [ 433.586044][ T8699] Bluetooth: hci2: command 0x041b tx timeout [ 433.604066][ T9185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.713413][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 433.723178][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 433.745060][ T9185] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.779327][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 433.789546][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 433.798960][ T8699] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.806254][ T8699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.895996][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 433.905542][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 433.915511][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 433.924912][ T8699] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.932241][ T8699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.941445][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 433.952432][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 434.058146][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 434.067906][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 434.078349][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 434.089486][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 434.100350][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 434.110082][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 434.141826][ T9185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 434.155556][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 434.186428][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 434.196359][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 434.206165][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 434.302215][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 434.310123][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 434.357856][ T9185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.457243][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 434.467568][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 434.551698][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 434.561499][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 434.579100][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 434.588426][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 434.640047][ T9185] device veth0_vlan entered promiscuous mode [ 434.679636][ T9185] device veth1_vlan entered promiscuous mode [ 434.717989][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 434.727842][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 434.817845][ T9057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 434.828160][ T9057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 434.855886][ T9185] device veth0_macvtap entered promiscuous mode [ 434.902031][ T9185] device veth1_macvtap entered promiscuous mode [ 434.989230][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 434.999850][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.009924][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 435.021489][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.035412][ T9185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.046019][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 435.055619][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 435.065034][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 435.074983][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 435.179936][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 435.190747][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.201005][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 435.211830][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.226608][ T9185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.236967][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 435.247183][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 435.657886][ T8698] Bluetooth: hci2: command 0x040f tx timeout 20:39:19 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x8, 0x80000000) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000)=0x1f, 0x4) 20:39:19 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1b8, 0x280, 0x280, 0x1b8, 0x280, 0x2a8, 0x350, 0x350, 0x2a8, 0x350, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote, @mcast1}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'team_slave_1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x9, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'netpci0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x503, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x0) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x81, 0x80100) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000000c0)=r5, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r5, 0x401}, &(0x7f0000000080)=0x8) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) sendto$inet6(r2, &(0x7f0000000180)="89", 0x1, 0x4c841, &(0x7f0000001180)={0xa, 0x0, 0x0, @private1}, 0x1c) 20:39:19 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x8, 0x80000000) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000f0feffff02000000000000ef2400000000000000"]) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x488, 0x0, 0x11e57ed0, 0x8, 0x3a, 0x0, 0x5]}) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000100)=""/124) [ 436.156944][ T9465] dccp_xmit_packet: Payload too large (65475) for featneg. 20:39:19 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x69, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x8, 0x80000000) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x42}, 0x8) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7117}, 0x0) 20:39:19 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000003c0)={0x2d, 0x1}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x4000000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x800, 0x121000) write$binfmt_misc(r1, &(0x7f0000019940)=ANY=[@ANYBLOB="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"], 0x1a3) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x16b, 0x7d, 0x0, {{0x500, 0xfc, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{evbox%\xff\xff\xff\x81\x02\x00'/31, 0x34, 'p\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde1@\x00\x00\x00\x00\x18{\x82\xd9\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x11, '\xb0\x9b\xf4r\x91\xc7cgro\x98ppppP\x97', 0x65, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6[\x94\b\x039\xc0\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf14\xa6f\xa8RH&\xb2\xb4\xa8\x8e\x01zwW\xb2\x06\xf8\xb0\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7'}, 0x5a, '/dev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xb99\x0e\xa8O\x93C\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x981\x9f0\x11\x84G\xaa\x9a\xa5~\xb0\xa0{t'}}, 0x16b) r3 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10000, 0x0, 0xffffc, 0x4}) r4 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', 0x0, &(0x7f0000000a00)='F', 0x1, r4) syz_open_dev$vcsa(0x0, 0x6, 0x0) sysfs$1(0x1, &(0x7f0000000180)='big_key\x00') setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000380)={0x6, &(0x7f0000000340)=[{0x3, 0x6, 0x5, 0xfc8}, {0xe3fd, 0x9, 0x1, 0xffff3dc9}, {0x1, 0x8, 0xff, 0x4f}, {0x1, 0x3, 0x3f, 0x7}, {0x6, 0x5, 0x80, 0x14000}, {0x1, 0x5, 0x7, 0xcda}]}, 0x10) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 436.674337][ T9465] dccp_xmit_packet: Payload too large (65475) for featneg. [ 436.850541][ T9482] IPVS: ftp: loaded support on port[0] = 21 20:39:20 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x8, 0x80000000) r1 = accept4(r0, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80, 0x800) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000000c0)=0x63, 0x2) syz_usb_connect(0x0, 0x16e, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x3a, 0xf4, 0x40, 0xf88, 0x3012, 0x4cd5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x15c, 0x1, 0x0, 0x0, 0x0, 0x7f, [{{0x9, 0x4, 0x99, 0x0, 0x6, 0xa9, 0x61, 0x1d, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x0, 0x47, 0x7f, [@generic={0xb5, 0x8, "3092a37c2391520528dfb88be02a79527f070ac71bbf21a5f7f0b0c3c155d75347ce8930839375a9fa84429df3fb97c663916ced692b93d0843972374f87fc676648957230f53486c14a0c10a5bb1de6767ffafb5fb33482c02c668091b7ff690c30bdaf15dab7da3883bae47dd86be5bcea2ca9151505a7937ed99b948680d6b536145d51b82a10bbd070b414b11cca6dbefa29c15e5e076ac30234f93d18e4f29de1458d635e162576144fc7efa185b5f13e"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x40, 0x40, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf9, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x27c0}]}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0x96, 0x1, 0x1, [@generic={0x35, 0x21, "744affc87f1b33e1c7da6d32b0a269b4ff1293360b85c92283e9dd65255dbe1414d66107f4cc8ad95a3c1e81f22083fd3cb208"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x7f, 0x4, 0x5}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0x20, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x2}]}}, {{0x9, 0x5, 0xe, 0x5, 0x3ff, 0x4, 0x9, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0xa1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0x65, 0x2}]}}]}}]}}]}}, 0x0) 20:39:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000e40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000028bd7000000000000b0000000800068004000200c800018044000400200001000a004e2200000001fc00000000000000000000000000000107000000200002000a004e2100000400fc01000000000000000000000000000106000000380004001400010002004e23ffffffff0000000000000000200002000a004e21000001fffe8000000000000000000000000000bb02000000140002800800020000000000080004000300000008000300030000002c0004001400010002004e20ac14142200000000000000001400020002004e236401010200000000000000004400098008000100ff03000008000200690000000800020004000000080002000101000008000200ffffffff0800020009000000080002000600000008000200400000005000068008000100900000004100040067636d28616573290000000000000000000000000000000000000000000000001900000088b56ef939cdc8e4bbc05826f3325710fbd1abe4a88cb7d4230000001000028008000200000000000400040080000580140002800800010013000000080001000c0000003400028008000400090000000800020007000000080004000800000008000400090000000800010015000000080002000500000014000280080003000800000008000400faffffff070001006962000008000100657468000800010065746800070001006962000004000580940004800900010073797a31000000001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00002400078008000200ff010000080003000010000008000400ff010000080001002000000024000780080001000f000000080001"], 0x2a0}, 0x1, 0x0, 0x0, 0x14}, 0x4008804) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x120, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8310}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xab}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xfffff773}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000001) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}]}}}]}, 0x3c}}, 0x0) 20:39:20 executing program 2: socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x800000000000401) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@migrate={0x50, 0x21, 0x0, 0x0, 0x0, {{@in6=@loopback, @in6=@empty}}}, 0x50}}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x2000, 0x0, {0x77359400}, {0x3, 0xc, 0x5, 0x0, 0x0, 0x0, "63122a3c"}, 0x0, 0x0, @userptr=0x800}) inotify_add_watch(0xffffffffffffffff, 0x0, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x3, 0x4, 0x4c8, 0x3e0, 0x2f8, 0x0, 0x2f8, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x518) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) get_robust_list(r2, &(0x7f0000000280)=&(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0)}}, &(0x7f00000002c0)=0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) [ 437.445607][ T8697] usb 1-1: new high-speed USB device number 10 using dummy_hcd 20:39:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) creat(&(0x7f00000000c0)='./file0\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da7", 0x78}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088dfd546a136d40646857b851b65a7a918c58881be75d5d71239c7698d7bdb3f879f49436bbbd87586553407860397d48842400126f8703ddc55ba", 0xeb}, {&(0x7f0000000000)="0c06251f00000000461ace70236fa0348db1147c2390dbe06de04e35eb0265000000", 0x22}, {&(0x7f0000001880)="bdcc25945d5320762605855bdd5022bce4d5ecd21753f95ce22bbec3d78b5644a4f358945013c7220ccdf35e86770ac02760d99e9206acc59036a49f4b8971cf78556f3c6ca383a03d95fc318a9aeaccfa469ba8a16aa00a2bd34222049e1c038f769d461fd8e623ef4860aee8c34cde929e63045684f8", 0x77}, {&(0x7f0000000300)="cd96bdb578810f358b2aaaf2bacafe0e46d11b73fdeffa5726afc6a69f941fc2599736bb61d60c3c812d5418a5ea3ae461b9018b039a4f69e2fdb082765b01000000d10caad94fd56acc522d8ccc79457da8b9fd8a3c83e184d7ec12809c5ee6b6e151ac4607a4", 0x67}], 0x5}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f00000003c0)="9c5948ce9528017c27de9f5216", 0xd}], 0x1}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000021c0)="d38874b7ef7ea6f303c4b44feba7174b2e17c595325b7a57e4197434591c16015eb2ca1bf84b081a4eb7856549e48c6d75fafe554b337f7f7d91b38d2ab08f85d9919a412c85657dd5292628fc882d5d1a8a16dc511a29ad1ac44f1c28c4b9f5e09c4ee7312183c94d191cf13f2896c5b638561a43202f9604bccfca319ff885933a97d1cd4a94e9401262f5ef507fc9e2eed79bf873608aa309cea48908e8e0d838dbac0bd6dc925eb9516afce2092d39a7ce104e146a242937955a03df4c6bf1db3d5952d7048d90aa7d7bc69a", 0xce}, {&(0x7f0000001400)="356b969d738b67d456d40f5abb84a6820cc79356838e8931f8275d0b6756c906e28e08b0a8bf6cae4e31c463145519d3b76d58", 0x33}], 0x2}}], 0x3, 0x0) add_key$fscrypt_provisioning(&(0x7f00000001c0)='fscrypt-provisioning\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)={0x0, 0x0, "830b7dbebb15badb455f60cd17aa885c7f9d5e18f354347c36490c8539ff7b57bfcd2c551782af000bba0102a9fdb8220c36812eb8af85d5b7aa7598ee0ad8d6047e33961cece397ee189668c34040a59299bc074aa2daae86de3c06b96d6498fe2eb748c73e0c1e3681a9a62d014985d3954ca038b93decfd66c3f5190738d22996fdfae6ff4e7a83b952d5c07205b00f36c8a2714297ce4b14d3e960e48cf1f083fc381b7e"}, 0xae, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x8, 0x80000000) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000080)) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x8, 0x80000000) sendto$inet(r4, &(0x7f0000000140)="5bd2fde794798d477fca0248481f08696cb8e58f635224db5eeb05863ce6278dedb42b4115b363e516e0d989aa0904b9cc46ca5e2c905ce755c6fcbccff91668efd0fbcaaa40dbf2925dae015f2079cbb49994642826", 0x56, 0x4044801, 0x0, 0x0) [ 437.691241][ T9551] x_tables: unsorted entry at hook 1 [ 437.730428][ T9551] IPVS: ftp: loaded support on port[0] = 21 [ 437.745414][ T9057] Bluetooth: hci2: command 0x0419 tx timeout [ 437.849914][ T8697] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 437.858458][ T8697] usb 1-1: config 0 has no interface number 0 [ 437.865026][ T8697] usb 1-1: config 0 interface 153 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 437.875493][ T8697] usb 1-1: config 0 interface 153 altsetting 0 endpoint 0x1 has an invalid bInterval 150, changing to 7 [ 437.887002][ T8697] usb 1-1: config 0 interface 153 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 437.898692][ T8697] usb 1-1: config 0 interface 153 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 437.909646][ T8697] usb 1-1: New USB device found, idVendor=0f88, idProduct=3012, bcdDevice=4c.d5 [ 437.919009][ T8697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.124998][ T9553] IPVS: ftp: loaded support on port[0] = 21 [ 438.134243][ T8697] usb 1-1: config 0 descriptor?? [ 438.161150][ T9507] raw-gadget gadget: fail, usb_ep_enable returned -22 20:39:21 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000fbc)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000180a0000000000020a000000000000000000000000000020000000000a01010000000000000000000000000900010073797a310000000030000000160a01080000000000000000000000000900020073797a30000000000900010073797a310000000004000380140000001100010000000000000000000000000a"], 0xa0}}, 0x0) [ 438.336384][ T7] tipc: TX() has been purged, node left! [ 438.384733][ T8697] usb 1-1: reset high-speed USB device number 10 using dummy_hcd 20:39:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x8, 0x80000000) openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x2, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000000c0)='syz0\x00') sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000000000000000000000000700000044044200470b05e000000200000000009f2225ebc6afa0068f1c87330fec78c1cc2829e2c2fa7e4afc183f107c5de56c70ff20cf3575afb243d18768bcb4b4a081c570ce2ac803a8fcfff8ea69e7c328fcb7e4a3e1ceeada6fef1a63"], 0x20}}], 0x1, 0x0) 20:39:22 executing program 1: unshare(0x40000400) arch_prctl$ARCH_GET_CPUID(0x1011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 439.025998][ T9613] IPVS: ftp: loaded support on port[0] = 21 20:39:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f00000000c0)={0x2, 0xffffffff, 0x5, 0x6b, 0x8000, 0x456d}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x8, 0x80000000) accept4$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10, 0x80800) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0x28000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) [ 439.394683][ T8697] usb 1-1: device descriptor read/64, error -71 20:39:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000086d040ec74000000000010902240001000000000904000001030100000921a94e8f9b0e038304458e49c47000000001220100090581030800000000"], 0x0) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00a2008044d5d6fb1e0706204d87caa693dcce85189313a41ac96e9c42eb533676eeadb0ff610038bbda9f6a730268303a89306da6d90df92df0a58294a76afb1daf2609fb2797b9aac3d52419b77ab628c47a286ec6cf431d97570f40ac5ec2da70667d1fd4668489f78e2215"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000100)='M') [ 439.860849][ T9611] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 440.157735][ T9057] usb 3-1: new high-speed USB device number 2 using dummy_hcd 20:39:23 executing program 0: unshare(0x400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/udmabuf\x00', 0x2) lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYBLOB="8667d81e3eac2a166c84db1d8ef0d328b31d76106671f1ad2a88580ff72266e63e17c656938da00d1bd832f7fd9eb0a95d982c6ffaea3d17c07e953a05dc67a2ed2b6f81cb4bc2fa94f29bcc09d0b1261472e8e1ea8cb3637ee36605e396cea12f473e02fb03007098a42f221cc1d770fbc5cce9888482f1f9b762055f4e2b5da36f23ee8278b244a90ab9c1dc06b747618c252f9299783d", @ANYRES64=r0], 0x1d) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x78) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f00000002c0)) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0x10, 0x8000000100000003, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a269930a06000000a84308910000000400120008001e0000dc13382d0204009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000100)='nr0\x00') close(r5) splice(r2, 0x0, r5, 0x0, 0x80000001, 0x0) [ 440.355166][ T8697] ieee80211 phy3: rt2x00usb_vendor_request: Error - Vendor Request 0x09 failed for offset 0x0000 with error -71 [ 440.367457][ T8697] ===================================================== [ 440.374564][ T8697] BUG: KMSAN: uninit-value in rt2500usb_bbp_read+0x19f/0x7e0 [ 440.381953][ T8697] CPU: 1 PID: 8697 Comm: kworker/1:0 Not tainted 5.8.0-rc5-syzkaller #0 [ 440.390278][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.400385][ T8697] Workqueue: usb_hub_wq hub_event [ 440.405413][ T8697] Call Trace: [ 440.408787][ T8697] dump_stack+0x21c/0x280 [ 440.413164][ T8697] kmsan_report+0xf7/0x1e0 [ 440.417593][ T8697] __msan_warning+0x58/0xa0 [ 440.422111][ T8697] rt2500usb_bbp_read+0x19f/0x7e0 [ 440.427151][ T8697] rt2500usb_probe_hw+0x48f/0x2710 [ 440.432269][ T8697] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 440.438086][ T8697] ? rt2500usb_queue_init+0x200/0x200 [ 440.443462][ T8697] rt2x00lib_probe_dev+0xc58/0x3620 [ 440.448667][ T8697] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 440.454483][ T8697] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 440.460642][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 440.465844][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 440.471060][ T8697] rt2x00usb_probe+0x80a/0xfb0 [ 440.475839][ T8697] rt2500usb_probe+0x50/0x60 [ 440.480437][ T8697] ? rt2800_brightness_set+0x1090/0x1090 [ 440.486131][ T8697] usb_probe_interface+0xece/0x1550 [ 440.491352][ T8697] ? usb_register_driver+0x900/0x900 [ 440.496726][ T8697] really_probe+0xf20/0x20b0 [ 440.501328][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 440.506554][ T8697] driver_probe_device+0x293/0x390 [ 440.511682][ T8697] __device_attach_driver+0x63f/0x830 [ 440.517069][ T8697] bus_for_each_drv+0x2ca/0x3f0 [ 440.521925][ T8697] ? coredump_store+0xf0/0xf0 [ 440.526614][ T8697] __device_attach+0x4e2/0x7f0 [ 440.531392][ T8697] device_initial_probe+0x4a/0x60 [ 440.536420][ T8697] bus_probe_device+0x177/0x3d0 [ 440.541276][ T8697] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 440.547087][ T8697] device_add+0x3b0e/0x40d0 [ 440.551616][ T8697] usb_set_configuration+0x380f/0x3f10 [ 440.557086][ T8697] ? usb_set_configuration+0xb41/0x3f10 [ 440.562663][ T8697] usb_generic_driver_probe+0x138/0x300 [ 440.568218][ T8697] ? usb_choose_configuration+0xe70/0xe70 [ 440.573944][ T8697] usb_probe_device+0x311/0x490 [ 440.578804][ T8697] ? usb_register_device_driver+0x540/0x540 [ 440.584700][ T8697] really_probe+0xf20/0x20b0 [ 440.589301][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 440.594515][ T8697] driver_probe_device+0x293/0x390 [ 440.599638][ T8697] __device_attach_driver+0x63f/0x830 [ 440.605022][ T8697] bus_for_each_drv+0x2ca/0x3f0 [ 440.609961][ T8697] ? coredump_store+0xf0/0xf0 [ 440.614651][ T8697] __device_attach+0x4e2/0x7f0 [ 440.619434][ T8697] device_initial_probe+0x4a/0x60 [ 440.624466][ T8697] bus_probe_device+0x177/0x3d0 [ 440.629341][ T8697] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 440.635161][ T8697] device_add+0x3b0e/0x40d0 [ 440.639697][ T8697] usb_new_device+0x1bd4/0x2a30 [ 440.644586][ T8697] hub_event+0x5e7b/0x8a70 [ 440.649052][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 440.654258][ T8697] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 440.660067][ T8697] ? led_work+0x7c0/0x7c0 [ 440.664508][ T8697] process_one_work+0x1688/0x2140 [ 440.669564][ T8697] worker_thread+0x10bc/0x2730 [ 440.674337][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 440.679546][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 440.684761][ T8697] kthread+0x551/0x590 [ 440.688835][ T8697] ? process_one_work+0x2140/0x2140 [ 440.694039][ T8697] ? kthread_blkcg+0x110/0x110 [ 440.698837][ T8697] ret_from_fork+0x1f/0x30 [ 440.703263][ T8697] [ 440.705628][ T8697] Local variable ----reg.i.i@rt2500usb_bbp_read created at: [ 440.712914][ T8697] rt2500usb_bbp_read+0x98/0x7e0 [ 440.717850][ T8697] rt2500usb_bbp_read+0x98/0x7e0 [ 440.722775][ T8697] ===================================================== [ 440.729698][ T8697] Disabling lock debugging due to kernel taint [ 440.735848][ T8697] Kernel panic - not syncing: panic_on_warn set ... [ 440.742441][ T8697] CPU: 1 PID: 8697 Comm: kworker/1:0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 440.752150][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.762217][ T8697] Workqueue: usb_hub_wq hub_event [ 440.767236][ T8697] Call Trace: [ 440.770537][ T8697] dump_stack+0x21c/0x280 [ 440.774945][ T8697] panic+0x4d7/0xef7 [ 440.778859][ T8697] ? add_taint+0x17c/0x210 [ 440.783285][ T8697] kmsan_report+0x1df/0x1e0 [ 440.787803][ T8697] __msan_warning+0x58/0xa0 [ 440.792316][ T8697] rt2500usb_bbp_read+0x19f/0x7e0 [ 440.797353][ T8697] rt2500usb_probe_hw+0x48f/0x2710 [ 440.802470][ T8697] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 440.808288][ T8697] ? rt2500usb_queue_init+0x200/0x200 [ 440.813663][ T8697] rt2x00lib_probe_dev+0xc58/0x3620 [ 440.818867][ T8697] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 440.824682][ T8697] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 440.830840][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 440.836044][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 440.841257][ T8697] rt2x00usb_probe+0x80a/0xfb0 [ 440.846041][ T8697] rt2500usb_probe+0x50/0x60 [ 440.850642][ T8697] ? rt2800_brightness_set+0x1090/0x1090 [ 440.856279][ T8697] usb_probe_interface+0xece/0x1550 [ 440.861495][ T8697] ? usb_register_driver+0x900/0x900 [ 440.866783][ T8697] really_probe+0xf20/0x20b0 [ 440.871384][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 440.876590][ T8697] driver_probe_device+0x293/0x390 [ 440.881713][ T8697] __device_attach_driver+0x63f/0x830 [ 440.887104][ T8697] bus_for_each_drv+0x2ca/0x3f0 [ 440.891962][ T8697] ? coredump_store+0xf0/0xf0 [ 440.896654][ T8697] __device_attach+0x4e2/0x7f0 [ 440.901439][ T8697] device_initial_probe+0x4a/0x60 [ 440.906489][ T8697] bus_probe_device+0x177/0x3d0 [ 440.911351][ T8697] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 440.917164][ T8697] device_add+0x3b0e/0x40d0 [ 440.921696][ T8697] usb_set_configuration+0x380f/0x3f10 [ 440.927235][ T8697] ? usb_set_configuration+0xb41/0x3f10 [ 440.932818][ T8697] usb_generic_driver_probe+0x138/0x300 [ 440.938374][ T8697] ? usb_choose_configuration+0xe70/0xe70 [ 440.944103][ T8697] usb_probe_device+0x311/0x490 [ 440.948976][ T8697] ? usb_register_device_driver+0x540/0x540 [ 440.954881][ T8697] really_probe+0xf20/0x20b0 [ 440.959485][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 440.964695][ T8697] driver_probe_device+0x293/0x390 [ 440.969821][ T8697] __device_attach_driver+0x63f/0x830 [ 440.975209][ T8697] bus_for_each_drv+0x2ca/0x3f0 [ 440.980081][ T8697] ? coredump_store+0xf0/0xf0 [ 440.984773][ T8697] __device_attach+0x4e2/0x7f0 [ 440.989556][ T8697] device_initial_probe+0x4a/0x60 [ 440.994585][ T8697] bus_probe_device+0x177/0x3d0 [ 440.999446][ T8697] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 441.005257][ T8697] device_add+0x3b0e/0x40d0 [ 441.009789][ T8697] usb_new_device+0x1bd4/0x2a30 [ 441.014666][ T8697] hub_event+0x5e7b/0x8a70 [ 441.019142][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 441.024373][ T8697] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 441.030194][ T8697] ? led_work+0x7c0/0x7c0 [ 441.034542][ T8697] process_one_work+0x1688/0x2140 [ 441.039606][ T8697] worker_thread+0x10bc/0x2730 [ 441.044382][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 441.049596][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 441.054811][ T8697] kthread+0x551/0x590 [ 441.058886][ T8697] ? process_one_work+0x2140/0x2140 [ 441.064094][ T8697] ? kthread_blkcg+0x110/0x110 [ 441.068867][ T8697] ret_from_fork+0x1f/0x30 [ 441.073986][ T8697] ------------[ cut here ]------------ [ 441.079427][ T8697] kernel BUG at mm/kmsan/kmsan.h:87! [ 441.084692][ T8697] invalid opcode: 0000 [#1] SMP [ 441.089573][ T8697] CPU: 1 PID: 8697 Comm: kworker/1:0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 441.099255][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.109292][ T8697] Workqueue: usb_hub_wq hub_event [ 441.114301][ T8697] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 441.120898][ T8697] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 441.140479][ T8697] RSP: 0018:ffff888042222528 EFLAGS: 00010046 [ 441.146519][ T8697] RAX: 0000000000000002 RBX: 0000000005d70065 RCX: 0000000005d70065 [ 441.154466][ T8697] RDX: 0000000000000000 RSI: 0000000000000100 RDI: ffff88804222260c [ 441.162414][ T8697] RBP: ffff8880422225d0 R08: ffffea000000000f R09: ffff88812fffa000 [ 441.170498][ T8697] R10: 0000000000000002 R11: ffff88811a283d00 R12: 0000000000000000 [ 441.178482][ T8697] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 441.186432][ T8697] FS: 0000000000000000(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 441.195349][ T8697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.201918][ T8697] CR2: 000000000169ecb8 CR3: 0000000034a12000 CR4: 00000000001406e0 [ 441.209874][ T8697] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 441.217863][ T8697] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 441.225809][ T8697] Call Trace: [ 441.229088][ T8697] kmsan_check_memory+0xd/0x10 [ 441.234011][ T8697] iowrite8+0x99/0x300 [ 441.238112][ T8697] pvpanic_panic_notify+0xb7/0xe0 [ 441.243157][ T8697] ? pvpanic_mmio_remove+0x60/0x60 [ 441.248245][ T8697] atomic_notifier_call_chain+0x123/0x290 [ 441.253946][ T8697] panic+0x560/0xef7 [ 441.257826][ T8697] ? add_taint+0x17c/0x210 [ 441.262237][ T8697] kmsan_report+0x1df/0x1e0 [ 441.266731][ T8697] __msan_warning+0x58/0xa0 [ 441.271226][ T8697] rt2500usb_bbp_read+0x19f/0x7e0 [ 441.276230][ T8697] rt2500usb_probe_hw+0x48f/0x2710 [ 441.281424][ T8697] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 441.287209][ T8697] ? rt2500usb_queue_init+0x200/0x200 [ 441.292560][ T8697] rt2x00lib_probe_dev+0xc58/0x3620 [ 441.297735][ T8697] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 441.303518][ T8697] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 441.309648][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 441.314834][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 441.320025][ T8697] rt2x00usb_probe+0x80a/0xfb0 [ 441.324782][ T8697] rt2500usb_probe+0x50/0x60 [ 441.329349][ T8697] ? rt2800_brightness_set+0x1090/0x1090 [ 441.334959][ T8697] usb_probe_interface+0xece/0x1550 [ 441.340140][ T8697] ? usb_register_driver+0x900/0x900 [ 441.345402][ T8697] really_probe+0xf20/0x20b0 [ 441.349983][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 441.355160][ T8697] driver_probe_device+0x293/0x390 [ 441.360251][ T8697] __device_attach_driver+0x63f/0x830 [ 441.365603][ T8697] bus_for_each_drv+0x2ca/0x3f0 [ 441.370430][ T8697] ? coredump_store+0xf0/0xf0 [ 441.375176][ T8697] __device_attach+0x4e2/0x7f0 [ 441.379936][ T8697] device_initial_probe+0x4a/0x60 [ 441.384951][ T8697] bus_probe_device+0x177/0x3d0 [ 441.389781][ T8697] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 441.395569][ T8697] device_add+0x3b0e/0x40d0 [ 441.400061][ T8697] usb_set_configuration+0x380f/0x3f10 [ 441.405501][ T8697] ? usb_set_configuration+0xb41/0x3f10 [ 441.411037][ T8697] usb_generic_driver_probe+0x138/0x300 [ 441.416564][ T8697] ? usb_choose_configuration+0xe70/0xe70 [ 441.422259][ T8697] usb_probe_device+0x311/0x490 [ 441.427089][ T8697] ? usb_register_device_driver+0x540/0x540 [ 441.432971][ T8697] really_probe+0xf20/0x20b0 [ 441.437551][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 441.442745][ T8697] driver_probe_device+0x293/0x390 [ 441.447837][ T8697] __device_attach_driver+0x63f/0x830 [ 441.453189][ T8697] bus_for_each_drv+0x2ca/0x3f0 [ 441.458030][ T8697] ? coredump_store+0xf0/0xf0 [ 441.462689][ T8697] __device_attach+0x4e2/0x7f0 [ 441.467437][ T8697] device_initial_probe+0x4a/0x60 [ 441.472440][ T8697] bus_probe_device+0x177/0x3d0 [ 441.477277][ T8697] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 441.483074][ T8697] device_add+0x3b0e/0x40d0 [ 441.487568][ T8697] usb_new_device+0x1bd4/0x2a30 [ 441.492405][ T8697] hub_event+0x5e7b/0x8a70 [ 441.496818][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 441.501996][ T8697] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 441.507809][ T8697] ? led_work+0x7c0/0x7c0 [ 441.512124][ T8697] process_one_work+0x1688/0x2140 [ 441.517143][ T8697] worker_thread+0x10bc/0x2730 [ 441.521888][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 441.527151][ T8697] ? kmsan_get_metadata+0x116/0x180 [ 441.532370][ T8697] kthread+0x551/0x590 [ 441.536416][ T8697] ? process_one_work+0x2140/0x2140 [ 441.541592][ T8697] ? kthread_blkcg+0x110/0x110 [ 441.546370][ T8697] ret_from_fork+0x1f/0x30 [ 441.550759][ T8697] Modules linked in: [ 441.554634][ T8697] ---[ end trace f9e61d74babce284 ]--- [ 441.560070][ T8697] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 441.566632][ T8697] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 441.586209][ T8697] RSP: 0018:ffff888042222528 EFLAGS: 00010046 [ 441.592286][ T8697] RAX: 0000000000000002 RBX: 0000000005d70065 RCX: 0000000005d70065 [ 441.600240][ T8697] RDX: 0000000000000000 RSI: 0000000000000100 RDI: ffff88804222260c [ 441.608231][ T8697] RBP: ffff8880422225d0 R08: ffffea000000000f R09: ffff88812fffa000 [ 441.616218][ T8697] R10: 0000000000000002 R11: ffff88811a283d00 R12: 0000000000000000 [ 441.624180][ T8697] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 441.632130][ T8697] FS: 0000000000000000(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 441.641036][ T8697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.647638][ T8697] CR2: 000000000169ecb8 CR3: 0000000034a12000 CR4: 00000000001406e0 [ 441.655585][ T8697] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 441.663537][ T8697] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 441.671501][ T8697] Kernel panic - not syncing: Fatal exception [ 441.678211][ T8697] Kernel Offset: disabled [ 441.682540][ T8697] Rebooting in 86400 seconds..