[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.230' (ECDSA) to the list of known hosts. 2020/09/01 19:44:33 fuzzer started 2020/09/01 19:44:34 dialing manager at 10.128.0.26:33875 2020/09/01 19:44:34 syscalls: 3166 2020/09/01 19:44:34 code coverage: enabled 2020/09/01 19:44:34 comparison tracing: enabled 2020/09/01 19:44:34 extra coverage: enabled 2020/09/01 19:44:34 setuid sandbox: enabled 2020/09/01 19:44:34 namespace sandbox: enabled 2020/09/01 19:44:34 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/01 19:44:34 fault injection: enabled 2020/09/01 19:44:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/01 19:44:34 net packet injection: enabled 2020/09/01 19:44:34 net device setup: enabled 2020/09/01 19:44:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/01 19:44:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/01 19:44:34 USB emulation: enabled 2020/09/01 19:44:34 hci packet injection: enabled 19:49:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x34, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1}, 0x100) syzkaller login: [ 437.708919][ T8492] IPVS: ftp: loaded support on port[0] = 21 [ 438.100072][ T8492] chnl_net:caif_netlink_parms(): no params data found [ 438.225581][ T8492] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.232948][ T8492] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.242305][ T8492] device bridge_slave_0 entered promiscuous mode [ 438.263068][ T8492] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.271336][ T8492] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.280827][ T8492] device bridge_slave_1 entered promiscuous mode [ 438.327641][ T8492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.344208][ T8492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.389438][ T8492] team0: Port device team_slave_0 added [ 438.402467][ T8492] team0: Port device team_slave_1 added [ 438.447873][ T8492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.454939][ T8492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.481155][ T8492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.497438][ T8492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.504499][ T8492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.530598][ T8492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.591157][ T8492] device hsr_slave_0 entered promiscuous mode [ 438.600981][ T8492] device hsr_slave_1 entered promiscuous mode [ 438.870015][ T8492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 438.909210][ T8492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 438.946081][ T8492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 438.964098][ T8492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 439.255865][ T8492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.293770][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 439.302822][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 439.323471][ T8492] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.345863][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 439.355866][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 439.366676][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.374148][ T8704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.438199][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 439.447887][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 439.457904][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 439.467468][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.474692][ T8704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.483844][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 439.494762][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 439.506023][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 439.516528][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 439.534588][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 439.544160][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 439.554917][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 439.576780][ T17] Bluetooth: hci0: command 0x0409 tx timeout [ 439.578983][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 439.593067][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 439.627751][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 439.638306][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 439.652141][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 439.709506][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 439.717329][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 439.746750][ T8492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.811371][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 439.822235][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 439.881306][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 439.892041][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 439.914927][ T8492] device veth0_vlan entered promiscuous mode [ 439.928690][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 439.937961][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 439.973021][ T8492] device veth1_vlan entered promiscuous mode [ 440.050075][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 440.059680][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 440.069541][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 440.079519][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 440.102757][ T8492] device veth0_macvtap entered promiscuous mode [ 440.123003][ T8492] device veth1_macvtap entered promiscuous mode [ 440.134068][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 440.143615][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 440.199430][ T8492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.210013][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 440.220465][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 440.248189][ T8492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.255961][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 440.268086][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 19:49:30 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000280)=""/153) 19:49:30 executing program 0: syz_emit_ethernet(0x56, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x20, 0x3c, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[@hopopts={0x0, 0x1, [], [@jumbo, @enc_lim]}], @echo_reply}}}}}, 0x0) 19:49:30 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x20000a7e, &(0x7f0000000a40)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x8, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @echo_reply}}}}}, 0x0) 19:49:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000025, &(0x7f00000000c0)=0x1f, 0x4) [ 441.627498][ T17] Bluetooth: hci0: command 0x041b tx timeout [ 441.671795][ T8727] TCP: TCP_TX_DELAY enabled 19:49:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setpriority(0x0, 0x0, 0x7) 19:49:31 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000280)={{0x3a, @loopback, 0x4e23, 0x2, 'dh\x00', 0x1b, 0x1000, 0x4c}, {@empty, 0x4e24, 0x1, 0x100, 0x4b5, 0x5}}, 0x44) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f00000001c0)=@nl=@unspec={0xa, 0x0, 0x0, 0x8dffffff}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)="82c2178d", 0xfc9e}], 0x1}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000300)={{0x8, 0x0, 0x38b0, 0x3, 'syz0\x00'}, 0x1, [0x3b2, 0x4, 0x5, 0xd85, 0x6, 0x8, 0x0, 0x5e55, 0x2, 0x5fa0, 0x3, 0x4, 0x1ff, 0x7, 0x2, 0x1, 0x3fc, 0x81, 0x0, 0x100000001, 0x9, 0x3, 0x4, 0x7ff, 0x4, 0x8, 0x9, 0x6, 0x3f, 0x7ba9, 0x20, 0x4, 0x93, 0x1000, 0x7ff, 0x7, 0x8000, 0x1ff, 0xc7, 0x1, 0x6, 0x3e5, 0x5, 0x2, 0x3, 0x7, 0x8001, 0x4, 0x6, 0x0, 0xd11, 0x401, 0x2, 0x1, 0xffffffffffffffff, 0x4, 0x39, 0x1, 0x6, 0x8, 0x80000001, 0xfffffffffffffffc, 0x6, 0x9, 0x7fffffff, 0x1, 0x6, 0x1ff, 0x20, 0x8000, 0x4, 0x7, 0x3, 0xde, 0x6, 0xf6f0, 0x3f, 0x9, 0x1, 0xe58, 0x2, 0x9, 0x728d, 0x8, 0x9, 0x1f, 0x3, 0x50, 0xff, 0x9, 0x2f8, 0x3, 0x1d3b5028, 0x100, 0x2, 0x7, 0x2, 0x3, 0x7, 0x1ff, 0x8, 0x20, 0x6, 0x4, 0x6, 0x100000001, 0x4, 0x6, 0x10001, 0x4, 0x10000, 0x80, 0x7bb, 0x7, 0x2, 0xffffffff, 0x40, 0x0, 0x0, 0xfffffffffffffff9, 0x9, 0x8, 0x9, 0x9, 0x9, 0x8, 0x9, 0x2000000000000000]}) write$UHID_DESTROY(r2, &(0x7f0000000100), 0x4) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x7fffffff}) 19:49:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xa0000, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x4, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x20}}, 0x4044080) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x47, &(0x7f0000000240)=ANY=[@ANYBLOB="4715494d13ebe035733b4bd590d0fa32000000000000000000"]}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 442.607143][ T17] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 442.856966][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 442.977993][ T17] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 442.989070][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.000366][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.010365][ T17] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 443.023445][ T17] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 443.032635][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.047516][ T17] usb 1-1: config 0 descriptor?? [ 443.551863][ T17] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0001/input/input5 [ 443.580319][ T17] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0001/input/input6 [ 443.671595][ T17] kye 0003:0458:5013.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 443.750164][ T8705] Bluetooth: hci0: command 0x040f tx timeout [ 443.758049][ T17] usb 1-1: USB disconnect, device number 2 [ 444.527024][ T8704] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 444.766828][ T8704] usb 1-1: Using ep0 maxpacket: 16 [ 444.887735][ T8704] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 444.899449][ T8704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.910683][ T8704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.920680][ T8704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 444.933770][ T8704] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 444.943058][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.957981][ T8704] usb 1-1: config 0 descriptor?? 19:49:34 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0xbb, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x0, 0x0, {0xffc0}}, 0x18) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x250, &(0x7f0000000640)=ANY=[]) [ 445.357821][ T8704] usbhid 1-1:0.0: can't add hid device: -71 [ 445.364154][ T8704] usbhid: probe of 1-1:0.0 failed with error -71 [ 445.413653][ T8704] usb 1-1: USB disconnect, device number 3 19:49:35 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x40, 0x8000) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x7, 0x7, 0x3}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x90000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x8400) fanotify_mark(r2, 0x4, 0xc0000000, r1, &(0x7f0000000180)='./file0\x00') write(r0, &(0x7f00000001c0)='\t}0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00$\x00\a/\x00'/20, @ANYRES16=r1, @ANYBLOB="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"], 0x7c}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 448.873958][ T8810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 448.906016][ T8810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 448.967877][ T12] usb 1-1: device descriptor read/all, error -71 [ 449.095493][ T9034] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 449.158063][ T9035] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 449.218380][ T8704] Bluetooth: hci1: command 0x0409 tx timeout 19:49:38 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfb, 0xce, 0x81, 0x10, 0xc45, 0x800a, 0xbd4c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x70}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4, 0x1}, 0x18) sendmmsg$alg(r1, &(0x7f00000000c0), 0x4924924924924d8, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x188, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6}}]}, 0x188}}, 0xff49a7d4fee42c06) syz_usb_control_io(r0, 0x0, &(0x7f00000024c0)={0x84, &(0x7f00000020c0)={0x0, 0x0, 0x1, 'p'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 449.483810][ T8810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.552754][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 449.562136][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 449.583050][ T8810] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.637401][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 449.647313][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 449.656773][ T8705] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.664012][ T8705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.728398][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 449.738124][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 449.747926][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 449.757196][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.764425][ T8705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.773505][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 449.784314][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 449.795098][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 449.805468][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 449.831106][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 449.841219][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 449.851644][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 449.876673][ T12] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 449.893908][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 449.903876][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 449.937260][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 449.947062][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 449.963038][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 450.022126][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 450.030331][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 450.066569][ T8810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.117877][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 450.136130][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 450.146769][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 450.208886][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 450.219608][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 450.237705][ T12] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=bd.4c [ 450.246959][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.264194][ T8810] device veth0_vlan entered promiscuous mode [ 450.274035][ T12] usb 1-1: config 0 descriptor?? [ 450.292766][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 450.303026][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 450.325512][ T12] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 450.362217][ T8810] device veth1_vlan entered promiscuous mode [ 450.447723][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 450.457561][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 450.467098][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 450.476935][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 450.504862][ T8810] device veth0_macvtap entered promiscuous mode [ 450.527355][ T12] gspca_sn9c2028: read1 error -32 [ 450.567158][ T8810] device veth1_macvtap entered promiscuous mode [ 450.578633][ T12] gspca_sn9c2028: read1 error -32 [ 450.689162][ T8810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 450.699752][ T8810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.713987][ T8810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.723136][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 450.732864][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 450.742976][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 450.752991][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 450.828929][ T8706] usb 1-1: USB disconnect, device number 6 [ 450.852368][ T8810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 450.863256][ T8810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.877060][ T8810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.884915][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 450.895306][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 451.298339][ T12] Bluetooth: hci1: command 0x041b tx timeout 19:49:40 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@private}}, &(0x7f0000000100)=0xe8) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id'}}) [ 451.556341][ C0] hrtimer: interrupt took 109778 ns [ 451.646979][ T12] usb 1-1: new high-speed USB device number 7 using dummy_hcd 19:49:41 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_open_procfs(0x0, &(0x7f0000272000)) [ 451.887234][ T12] usb 1-1: Using ep0 maxpacket: 16 19:49:41 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x40, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x2, 0xe0, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xb7, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0x1f, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff, 0xbd}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x300, 0x6, 0x40, 0x3, 0x1, 0x1}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x6, 0x0, "40a0cb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x81, 0x4, 0x6f, 0x9, '#w'}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x3f, 0x1, "7a1d6dfedfb1"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xff80, 0x1000, 0x8, "d470af9aae6f"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x2, 0x4, "34428690167cde10"}]}, {{0x9, 0x5, 0x1, 0x9, 0x11664e9162ab75ab, 0xfa, 0xf7, 0x5, {0x7, 0x25, 0x1, 0x80, 0x0, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x80, 0x5}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4, 0x8, 0x80, "ae116961f85094a071"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x1, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3f, 0x6e, 0x20, {0x7, 0x25, 0x1, 0x84, 0x4, 0x5}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x6, 0x4, 0x0, 0x20, 0x7f}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x1c, &(0x7f0000000200)=@string={0x1c, 0x3, "d004cca44c84105a5cde1b46beebb905856532eae64b975f7340"}}, {0xca, &(0x7f0000000240)=@string={0xca, 0x3, "072321c461855779a67e69fb9ef047a3efa1e3b80ceba29262ee13c6b7a0043532beb0a7e48f35b990865f7e92722782bddcfc87579b52155523cadca8c14e447bcecefb4e7b85c8e7b0ee7ae329a26f4664e69e4ead06ffbfd6820ecf57bc88726db239e2a664753b7ae52f858fa837595935fe93b60e1970823a2b7c1a3826ade879ad78b5c36a9258d99dde12d91c918ac0b060d629dc4111428ed2fa9560caa2a4091e627f4c3cb145d4fc600f6b25255f2d7a472124af5f1e7863c2e45947d3850aa2b31ccb"}}, {0x28, &(0x7f0000000340)=@string={0x28, 0x3, "7fd68b655a3183779cfb41a17c8a02ac22cd20a6a12acbc7df04bb16ecf01ae99672b01fcc46"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x820}}, {0x26, &(0x7f00000003c0)=@string={0x26, 0x3, "14685b8c372b9996d11eed4ab07db533b3212fefbf20e0dfa86a21ee85c78f2a491602a3"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x40d}}]}) syz_usb_control_io(r1, &(0x7f0000000600)={0x2c, &(0x7f00000004c0)={0x40, 0x2, 0x31, {0x31, 0x5, "2b95146501750851f406ab955b9f8b97bcdc258e45dba170ebb90ec010182e77dff5ff950ee5ad1b6a93cb6b87305a"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, &(0x7f0000000540)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf8, 0x2, 0x81, 0xfa, "fcf353a0", "97d32b0f"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x2, 0x6, 0x0, 0x115a, 0x80}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000640)={0x0, 0x8, 0x7a, "19d593e5eeb1ff84ea27bd9abaf29f77527b10eb8939dc009e92d48be8dea8d1623e6333d842b83e7c4cef4011f620c4d2c5f0c7d34716dd905935ba6721a73a1b14f123aaf16687bd518d583ac92f4eca4787f5329c6fd2554711ef0e8d9e90b7b5ce36aabeb3d6344c4f561b68e15b33812605515d77fa8a8f"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x56}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x1f0, 0x2, [0xf000]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x40}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000900)={0x40, 0xb, 0x2, "8419"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000980)={0x40, 0x13, 0x6, @dev={[], 0x1a}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "1612"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) [ 452.026835][ T12] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=bd.4c [ 452.036004][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.118995][ T12] usb 1-1: config 0 descriptor?? [ 452.164207][ T12] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 452.366655][ T12] gspca_sn9c2028: read1 error -32 [ 452.446875][ T12] gspca_sn9c2028: read1 error -71 19:49:41 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r1, 0x7, 0x81, 0x8001}) getpeername(r2, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x468, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc}, @TCA_TBF_PTAB={0x404}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x77, 0x0, 0x0, 0x0, 0x0, 0x585}}}]}}]}, 0x468}}, 0x0) [ 452.476586][ T8705] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 452.482092][ T12] gspca_sn9c2028: read1 error -71 [ 452.489600][ T12] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 452.521644][ T12] usb 1-1: USB disconnect, device number 7 [ 452.612396][ T9089] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 452.654998][ T9089] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! 19:49:42 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000dccd5e08cb060900be5c000000010902240001000000000904340102d46d263dffff8acfe2368f7d940000000071222cbe0e00411fe50fa89e3f4392f6f1d11ba5b30000008000dbfb344205ba17c1d93ed7bd10a8b6d7adba06000000000000004e74a5c400828dc85041107a89c023591f4ccf82642ba5f0c233e0a3ce0a0f321a20d461a0cc78006ba18d00bd9a006c7d44edc6e040cf780c14fc3a792bc4d9f2bcda0fcbdb3a7aa6027501002832eb58bf50564798930c3f6e7a36c35c1a5e3f733ea465521aa0a75390fe18f80820cb71f40b195354818efa85ecdb5824c252988784ffff5b8db215cfcddb6922b8cd731b2eaef557e2bb565766d5d7d04663466f6330f8462edbf2ed84a6dfedc5d1a832c11f8f5184cfcd0a3027d6edb4d433d19d06d737f9ae7523626dddecf93fde183497d6cdfa8d281ddc"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x20402) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f00000004c0)=""/4096) [ 452.848367][ T8705] usb 2-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 452.857824][ T8705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.932718][ T8705] usb 2-1: config 0 descriptor?? [ 453.197956][ T8705] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 453.276631][ T17] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 453.376523][ T12] Bluetooth: hci1: command 0x040f tx timeout [ 453.426777][ T8705] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 453.437048][ T8705] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 453.497700][ T8705] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 453.516445][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 453.636762][ T17] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 453.645104][ T17] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 453.655699][ T17] usb 1-1: config 0 has no interface number 0 [ 453.662084][ T17] usb 1-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 453.675317][ T17] usb 1-1: config 0 interface 52 has no altsetting 0 [ 453.682287][ T17] usb 1-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice=5c.be [ 453.691545][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.710051][ T17] usb 1-1: config 0 descriptor?? [ 453.760660][ T9077] udc-core: couldn't find an available UDC or it's busy [ 453.767849][ T9077] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 453.989601][ T17] usb 1-1: string descriptor 0 read error: -71 [ 454.018094][ T17] usb 1-1: Can not set alternate setting to 1, error: -71 [ 454.025616][ T17] synaptics_usb: probe of 1-1:0.52 failed with error -71 [ 454.046730][ T8705] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 454.057203][ T8705] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 454.067995][ T8705] asix: probe of 2-1:0.0 failed with error -71 [ 454.118560][ T17] usb 1-1: USB disconnect, device number 8 [ 454.162212][ T8705] usb 2-1: USB disconnect, device number 2 [ 454.776626][ T8705] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 454.827013][ T12] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 455.016546][ T8705] usb 1-1: Using ep0 maxpacket: 8 [ 455.147777][ T8705] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 455.156054][ T8705] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 455.166711][ T8705] usb 1-1: config 0 has no interface number 0 [ 455.172988][ T8705] usb 1-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 455.186220][ T8705] usb 1-1: config 0 interface 52 has no altsetting 0 [ 455.193031][ T8705] usb 1-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice=5c.be [ 455.202224][ T8705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.228084][ T12] usb 2-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 455.237510][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.277290][ T12] usb 2-1: config 0 descriptor?? [ 455.308935][ T8705] usb 1-1: config 0 descriptor?? [ 455.456258][ T8706] Bluetooth: hci1: command 0x0419 tx timeout 19:49:44 executing program 1: r0 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000240)="1080", 0x2, r0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="6c71ae2b15c098dd0f39de0d6d8c13598e33fddd86e2952c2817a0c17c826699d782826c0bcf8bb6c61e6ea7d6452c82d94648164425306049e61a27a7bb355e7d182dc2abf8555ef96f9bc6cb3550acf0035fff1d44e4eff435d6f5a98a322c1a23bb495128039fb6253f533b4493c0b0381974c700080000604db35705254f02fb0060f118b9870997c33efa5b009e5ad487469ab54df4a9ea5f8e8be6cb230f73a4f311b08d34921b0fb40f02cb9e584026ed42213feb096746163da7caabaaac3bcfdb8b6ccb33dc8ac4d99e78b3ba0639b1efdc083b72e285835b218e00f6eb5137401d07406f5be706368de50aa7"], 0x0, 0x2000000, 0x0}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000200)) r1 = socket(0x11, 0x5, 0x0) bind(r1, &(0x7f0000000080)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x80) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x11, r2, r2, 0xfffffffffffffffd, 0x0) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)='/dev/sg#\x00', r2) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x14f) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, &(0x7f00000002c0)={'exec ', ':\xae\x86\xadG\xaa\r\x94\x95\xe6\xd8\x0f{\xde-\x18\xff\xb3l\xf1R\xae\xd2\xd4\b\xfbX\xe3\x05\xfc\x8e//}\x91\xf8\x1bb\x1c\xc4!MJ$\xe1aO\xbe\xe0\xbe\xac\x8fJ\x04Pr\xb7p!-F\xd4\xa2\xdf\tky\x1f*K\xa2\x18\xe1,\b\xff\xff\xff\xff\xff\xffC\xb4\xe1\xadZG\xb7j\xa2IE\xb7\n|\x9d\xd5\xed\xea\xc5+Z\x87os\xcf\xbef7\x1ar\xfd!\xe1\x83\b\x8a\x1eM\x9b\x8a\xecK\xf1\x1f=\x95D\xd6\xb5\x9bJU\xb2\xab\xee\\\xbf\x11*\xa4\x80\xbdM\xde\xf2r\xf9\v\x8c\x10\x1f\x8c\x1b\\\x8f\xe4\x1e\x17\x0f\xd0\xc7u\xdb\xc5\xbe\vm:\xea\xbe`(\xa4|d\xaf\xb6%\xabp.[\x1d\xc1_\x9cK=\t\xbe\x81/4\x0eh\x1e\x86\x94\xf5\xba\xdfd\r\xa3\xfd\xfc/\x92\x9bL+\xeb\x9aY,Wr\x87\xb6\x02\x1b\xfe\xec$\x14l\x7f\x95`\x8b\xb6\nsb\x06\xa0\x9d\x9fG\xe8\x9c@D\xea\xdd\xe5|\xde\xfd\x15\xf2[\x82-.\xaf\"\x06\xdf\rkq\xb6>\xe0\x84\x15\xda\xea\t\xaf6\x985x\xf6\xf4\x19\x8a\bC\xcc\x1b\x1b\xd7\x80\x01P\a\xab\x97\t\xccb\x11\xe3\xb5\xc6\x85\xb9r\xb5\xc5\xe9_\x05Jz\x9f\xe1I(/g\x9c\x84f\xb9sN8P\xec\x98A\x9d\xd0\xc8\x87qY\x18\xf9\xe7\x80(B\b[\xc6\x06\xf3\f&T\x86\x9e\x9e\"\x99\xfd\x0f\xc6\x917\xfe\x16U\x92h\x94e\xee\xbd\\\xaf\xad|)\xde*\xdaj\xd3M\xc5\xae\xb7\xde\xc4^\x96Pc\xe3\x89\xcaf\x12\xe4\xc3lC\xa9\x15\rS1\xad\xbb\v\xeb\x01\xa0b\xb1\xf14\x9f\xc2\xec\xeav\xcb|@\xcd\xfe7\x81\x85\xf3\t\xb4#\x9b\x1dqAM\x0f\xdaZG\xf8Y2`\xcc\v\xd7#\xb1\xcc\xa8\x145\xf0A2\x7f\xb4\xe5\b6\xb1\x8c\xf3\xa7\xe1)\x9a\a\xf4S%\xfc\xd0Z|0\xf4~\x7f\a=\xccXO~\x05\x16\xcbt\xc5Z\n*0\xdc\x9f1c\x86\x8f|#:\xd1\xff\xf8z,q\xccd3\xe9\xbd|2\t\xde\f\xba\x95R\xf5\xc7\xc0O$\xec\xcf k\xdbtUdS\x9d\xd6-eZ3\xd4\nPv`f\x8c0\xf7r\x02\x80\xd8l\x10NX\xd3\rl\xb6U\xb5\xc3\xe0f>\xbf\xdcS\xd4\x8f^X\x14\xe0\vU\xff\x9a3\xf3\xed7]\xfbKG\xd8\x9aY\x9f1\xa0\xd6\x12\x82z\x8fn\x11s\xeb7n\x11\x16\r\xdb\xc0\xd7\x9e:\x11\xd5\xa9\x9f\xa9\xc9\x8fU\x9e\xfe\xb1\xe0\xc3\x96\xd6\xda\"_\xba\xd0\xdc\x88\x0e\x92=k.\xd2\x89\x0e\xed\x82U\xbd/\x82\x96\xb8\xd6\x89v*\xa0.\x13\x99\x04[\xc0\xcb\xec\a\xec\x93\x7f.m\xfa\xc9`F\x05t\xe2\xe0\r\xc3\x92!\xa4\xa0\xcb\x1d\xbb\xfaIs\xfc\xb7\xbev\xe8{\xdf\xe6\xbc\x14\x05kZ\x86}\x051bGFZ\xce\xdd\xf5\xc9X%\xd7:\x9b\x11\x9d\xab\xd6\xf1\x83\x1a\x9bu\x19\xba\x86\xab\xc9I\x93\xfe\x91\x8a\x1bd\rW\xe2v\x02}\x9e\xf4\x90\x06R5\x93T\a\xf7\xed\xa3d\x90\xd0\xc9j\x16\xd2v\x85\xe6]\x1b)\xa5\xbf#\xd5\xbc\xa2\xacM\"[8\x86\x907f\xe9\xf9\xb3\a\x85=B\x94z\x83\xe6\xd0\x1a\xa7\xefJ]\xf9\x00\xce\xc9'}, 0x32b) [ 455.536986][ T12] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 455.547389][ T12] asix: probe of 2-1:0.0 failed with error -71 [ 455.617327][ T8705] usb 1-1: string descriptor 0 read error: -71 [ 455.647614][ T8705] usb 1-1: Can not set alternate setting to 1, error: -71 [ 455.649021][ T12] usb 2-1: USB disconnect, device number 3 [ 455.654961][ T8705] synaptics_usb: probe of 1-1:0.52 failed with error -71 19:49:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="0000020000009741"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x2, '\\M'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000380)={0x0, 0x0, 0x2, "fbdf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 455.755252][ T8705] usb 1-1: USB disconnect, device number 9 [ 455.909608][ C0] sd 0:0:1:0: [sg0] tag#2175 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 455.920358][ C0] sd 0:0:1:0: [sg0] tag#2175 CDB: Test Unit Ready [ 455.927181][ C0] sd 0:0:1:0: [sg0] tag#2175 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.937122][ C0] sd 0:0:1:0: [sg0] tag#2175 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.947040][ C0] sd 0:0:1:0: [sg0] tag#2175 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.956967][ C0] sd 0:0:1:0: [sg0] tag#2175 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.966889][ C0] sd 0:0:1:0: [sg0] tag#2175 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.975601][ T28] audit: type=1400 audit(1598989785.284:2): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name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sd 0:0:1:0: [sg0] tag#2175 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.073887][ C0] sd 0:0:1:0: [sg0] tag#2175 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.083809][ C0] sd 0:0:1:0: [sg0] tag#2175 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.093712][ C0] sd 0:0:1:0: [sg0] tag#2175 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.103645][ C0] sd 0:0:1:0: [sg0] tag#2175 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.113592][ C0] sd 0:0:1:0: [sg0] tag#2175 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.123552][ C0] sd 0:0:1:0: [sg0] tag#2175 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.133471][ C0] sd 0:0:1:0: [sg0] tag#2175 CDB[c0]: 00 00 00 00 00 00 00 00 [ 456.145355][ T9145] sg_write: process 13 (syz-executor.1) changed security contexts after opening file descriptor, this is not allowed. 19:49:45 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000001c0)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340), 0x18) r2 = dup(0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, r3], 0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4, 0x0, @loopback}, 0x1c) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000000), 0x10) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 456.317158][ T8705] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 456.596286][ T8705] usb 1-1: device descriptor read/64, error 18 19:49:46 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0xa6, 0xef, 0x11c2, 0x0, 0x38}, 0x14) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000200)='\x00', &(0x7f00000003c0)='^#\x00\xb8\xda\x1f\t<\xa26\xb9\xd9Z\x107Y\xfaO\xe7\x13*\x90\xcb\xa0Yw_\x8c\xf9\x87\x0e\xff\x03\x00\x00]\xa4lE\xb8\x1bV\xb0\xe2\xcb\x9f\xba\xa8\x90\xabTd\xbe\x01-\xc6\xfd\xceD\xb3hL\x8a\xb1C\x12F^\xcb\x14=\x0e\xebc', 0x0], &(0x7f0000000240)=[&(0x7f0000000340)='*[\xe9\x05\xf3\xe9\xbdq\xd8\x87Q*\x81\xe1#x\x1a\xd7M\xb4\xbd\xba\xf3\xef\a\xca_\xbf\x90\xd75\nY\x8a\xdb\x19\xbf\x16\xa62\x87\xa3\xa59\x88\xeb\xd2\xe7\x89\x10\x1e\xf3\x98\xb6.\xdd\xb4\xeb\xc4w\x16)\x8aO:\xe1[_\xb8\x0e\xf2\xf5N', &(0x7f0000000440)='\\!+Z+*^))\x00']) [ 456.996357][ T8705] usb 1-1: device descriptor read/64, error 18 19:49:46 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x208f00, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000240)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000002c0)={{0x6, 0x8}, 0x12}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000b40)=""/126, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000180), 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="6d000000dbed278854af2ca84e8901c9e49602b2695255eeb0d34624dfd27ae2495c856be8bc48d15fd9ee0042e7ce7764af4401ea546e43d8e6c5e5c80889be0b5da291b8e999b9e40c658741ed93703f92e39c990efd16cf0a189cf4b3b2f52f7218b5d4e804c2d499a0daf1b24e15c8fccaa8977022b0da3c0fa70ccb08224298aa143c2d3423254fc7b7ef32ec57929b0147d4eb76c84e09f91f92c00d85eee54e673cecb93e219e062f3ac2acac33ffe35d9f397fa94587c5635d916b6f91bdd03813261c3d88b9b85485e6812d77b5ee2d5aa322774686db25c2ba3e5c5653000300"/240], &(0x7f0000000180)=0x75) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000200)={r1, 0x3}, 0x8) set_mempolicy(0x1, &(0x7f0000000040)=0xfffffffffffffffb, 0x2) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)=""/3, &(0x7f0000000380)=0x3) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20405) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280)=0x4, 0x4) write$binfmt_misc(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x2fe) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000440)={0x0, 0x6}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1cac83, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 457.165093][ C0] sd 0:0:1:0: [sg0] tag#2116 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 457.175882][ C0] sd 0:0:1:0: [sg0] tag#2116 CDB: Test Unit Ready [ 457.182736][ C0] sd 0:0:1:0: [sg0] tag#2116 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.192658][ C0] sd 0:0:1:0: [sg0] tag#2116 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.202563][ C0] sd 0:0:1:0: [sg0] tag#2116 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.212519][ C0] sd 0:0:1:0: [sg0] tag#2116 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.222711][ C0] sd 0:0:1:0: [sg0] tag#2116 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.232657][ C0] sd 0:0:1:0: [sg0] tag#2116 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.242592][ C0] sd 0:0:1:0: [sg0] tag#2116 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.252522][ C0] sd 0:0:1:0: [sg0] tag#2116 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.262456][ C0] sd 0:0:1:0: [sg0] tag#2116 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.272640][ C0] sd 0:0:1:0: [sg0] tag#2116 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.277431][ T8705] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 457.282530][ C0] sd 0:0:1:0: [sg0] tag#2116 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.299760][ C0] sd 0:0:1:0: [sg0] tag#2116 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.309672][ C0] sd 0:0:1:0: [sg0] tag#2116 CDB[c0]: 00 00 00 00 00 00 00 00 [ 457.556982][ T9165] IPVS: ftp: loaded support on port[0] = 21 [ 457.984172][ C0] sd 0:0:1:0: [sg0] tag#2117 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 457.995164][ C0] sd 0:0:1:0: [sg0] tag#2117 CDB: Test Unit Ready [ 458.001995][ C0] sd 0:0:1:0: [sg0] tag#2117 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.011907][ C0] sd 0:0:1:0: [sg0] tag#2117 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.021793][ C0] sd 0:0:1:0: [sg0] tag#2117 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.031719][ C0] sd 0:0:1:0: [sg0] tag#2117 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.041604][ C0] sd 0:0:1:0: [sg0] tag#2117 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.051493][ C0] sd 0:0:1:0: [sg0] tag#2117 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.061380][ C0] sd 0:0:1:0: [sg0] tag#2117 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.071277][ C0] sd 0:0:1:0: [sg0] tag#2117 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.081163][ C0] sd 0:0:1:0: [sg0] tag#2117 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.091054][ C0] sd 0:0:1:0: [sg0] tag#2117 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.100944][ C0] sd 0:0:1:0: [sg0] tag#2117 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.110842][ C0] sd 0:0:1:0: [sg0] tag#2117 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.120729][ C0] sd 0:0:1:0: [sg0] tag#2117 CDB[c0]: 00 00 00 00 00 00 00 00 [ 458.165300][ T9163] IPVS: ftp: loaded support on port[0] = 21 19:49:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) r5 = gettid() rt_sigqueueinfo(r5, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x20}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x801, 0x0, 0x1000, {0x0, 0x0, 0x0, r4}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x31a}, @IFLA_IFALIASn={0x4}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x48}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 458.324820][ T8705] usb 1-1: device descriptor read/64, error 18 [ 458.348033][ T8552] tipc: TX() has been purged, node left! [ 458.590606][ T9211] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 458.672279][ T9212] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 458.726431][ T8705] usb 1-1: device descriptor read/64, error 18 19:49:48 executing program 1: unshare(0x40000000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x54d61ef63d62788c, 0xc031, 0xffffffffffffffff, 0xffffc000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'bond_slave_0\x00', &(0x7f0000000040)=ANY=[@ANYRESDEC=r0]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r1, 0x0, 0x24, &(0x7f0000000080)="5d24e9f20c1c6eefb0fc7ab85b5418454d08afc9f9f313f5d542fa8f0a0b08e52a9e4f8455108b9aa8a575301bc9f83bdb896b2b695ef40b15591f4007ca3b77f7576d014459a0a042c5e45f3b9d5c199db35185c173b5ced7918ee7b3f012a3a8ea130ab2f82925ddc2737dddb8d45dd192ae02eb3e37180fbb0f2c79a66faaaeca8f1b47386bb1d2", 0x89) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) [ 458.846680][ T8705] usb usb1-port1: attempt power cycle [ 458.927424][ T9214] IPVS: ftp: loaded support on port[0] = 21 19:49:48 executing program 0: r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c00000010001fffe20000000000000000000202", @ANYRES32=0x0, @ANYBLOB="09fb5056d1df39cf540012800b000100627269646765001344000280050019000800000006000600080080000c002300f8ffffffffffffff0500180000000000080015003f00000005006500000000000c002000070000000000000008000a00d0"], 0x7c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 459.257378][ T9214] IPVS: ftp: loaded support on port[0] = 21 [ 459.315339][ T9241] device bridge1 entered promiscuous mode [ 459.734306][ T9241] device bridge1 entered promiscuous mode 19:49:49 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x82, &(0x7f0000000080)={@multicast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x66, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x1, 0x0, @loopback, @remote, {[@timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@broadcast}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2}, {@multicast2}, {@loopback}, {@loopback}, {@private}]}]}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x14, 0x0, 0x711, 0x0, 0xfffffffe, {0x9}}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x52000800}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000012da27431f7f360f0052a05e796fd5a90ae873bdbe9e189811d408cda4ebd73ef135725d08ced88fa363b1fdb7ae0c928b0135c299323981890387029db18e3002a9df00021580982669901a083dd400ab432b9863835e75af97213dec9a337cfb644e0ea2f41dd3ddc497a7524d9390ac473900452427ad81aea0950c102051df8519b3c05d7d262c44e3bc51efa6a23ac536979726b176a560c7e12247ee20309b2192d2c1c7a28bb3b6dff24ac0f244d823ab4b653ae79b5268f77b13a2fbe3b2f867a4c0e472b7229ca911abf4ed2f4fa9ba11d46b8c7bb3094baa00"/241, @ANYRES16=r4, @ANYBLOB="200000000000fedbdf25010000002c00018014000200687372300000000000000000000000001400020073797a6b616c6c657230000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x24022494}, 0x4000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000d90b6aba50da22b2be1a6121edcf29633606cc0d97107174be460b4f71b2c8147ea5557d3211d13f207880a82d2c9022466a603cbeacec9b50bf5caf1c7836ff9ce694d04b70e589d43ccb66dffddb058a167cda0cc59922ac40264f7a8c9459f577d53d28a315705d0e1ee38bb685cc5f7df61e48d2f7e462039dce6686cf31c976a21017475f3dc865e5afdffaad4c259e2dd6613fb60a997b19d22a16acacbb8494a474ab814ecd94f4b1dc5f1c22948884", @ANYRES32=r7, @ANYRESOCT=r3], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="5000010010001fff00001489a3bb24100a07de00", @ANYRES32=0x0, @ANYBLOB="00000000000000a34883df3d1b30f5e88b5f9b0e638000280012800900018076657468000000001800028014000100000000007a3730f1bc3f00ea550a0cf062d32e1e4d934d7afde96c096bb16c0af505223920776c13c9ece1de9d0f2e8016c90e19ff8ced360cac3fb957741389a9d8f46561cb35a19b513e1f0edb294f24c17c86730c58a2f9304a360a2f8c4018820d8827777bcfd3f68fc8b5462800234148", @ANYRES32=0x0, @ANYBLOB="48c43171038b8b493ebf159c3efac8c39a438161ceb1224cfd4c45a7ab46a34f63857d13ce920dc3c60ce575893eebc67f7ab2edfa71ef963c7ed73546581964f03ba736b278a5b5946f433b650aa53c4df1bdfe64ed1f82a423fb799b4cb4136c9171d6d64ed8a75c6d74107ca38172a2d52a791c129d19bdb0853200252bd5690d1704d15c833c2b823b3302b72701ddbad155ae6203af140284773a681b891ae59ee0f1c24b04d00f111387e8a753590e3ee90397bd89dfc028bdb489191e22064d003c8021e019417b69866da0d8f5932719e53e80ab0ec199a160754f6fbff1966065137d70c912", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04022dbd7000fddbdf25070000003c000180140002007465616d30000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000300030000001400021c6272696467655f736c6176655f310000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000540), &(0x7f0000000380)=0x3c) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 460.323370][ T9255] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 460.461347][ T9255] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 19:49:49 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007fdb03405e04c607565600000001090212000100000000095a20394d889e96f135003afa50dc799cd670c39f51d8cceca1ab03cfd4bd36ee5a6bb85f9153a6c59c9e7dd5942d21d9fbc3fbdf8dfb05e1b6485bfe68c7b095934faddf8700a9f3323e32f1f4e893ae03000000f15421191f7c648e6d027a64922f1dce41335ec26a4aceeb9bdd590510bd5b5b9f0356461d60"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000080)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000000c0)={0x6, 0x8, 0x0, 'queue1\x00', 0x7}) 19:49:50 executing program 2: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x622000, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000040)={0x0, 0x303, 0xba}) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000440)='\x00', 0x1) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa4, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:iptables_unit_file_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000640)={0x3, &(0x7f0000000600)=[{}, {}, {}]}) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000700)={&(0x7f0000000680)=""/102, 0x66}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740)='/dev/bsg\x00', 0x20043, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x2) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000780)=0x1280) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000880), &(0x7f00000008c0)=0x8) sendmsg$rds(r1, &(0x7f0000000b40)={&(0x7f0000000900)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000a00)=""/199, 0xc7}], 0x2, 0x0, 0x0, 0x4000000}, 0x40000) recvmsg(r1, &(0x7f0000000ec0)={&(0x7f0000000b80)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000c00)=""/94, 0x5e}, {&(0x7f0000000c80)=""/58, 0x3a}, {&(0x7f0000000cc0)=""/96, 0x60}, {&(0x7f0000000d40)=""/144, 0x90}], 0x4, &(0x7f0000000e40)=""/66, 0x42}, 0x30) accept$unix(r1, 0x0, &(0x7f0000000f00)) clone3(&(0x7f0000001140)={0x4000, &(0x7f0000000f40), &(0x7f0000000f80), &(0x7f0000000fc0)=0x0, {0x2e}, &(0x7f0000001000)=""/129, 0x81, &(0x7f00000010c0)=""/41, &(0x7f0000001100)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58) fcntl$setownex(r0, 0xf, &(0x7f00000011c0)={0x3, r2}) getsockopt$inet6_dccp_buf(r1, 0x21, 0x2, &(0x7f0000001200)=""/118, &(0x7f0000001280)=0x76) r3 = syz_open_dev$vcsn(&(0x7f00000012c0)='/dev/vcs#\x00', 0x4, 0x2000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000001340)) [ 461.156373][ T8705] usb 1-1: new high-speed USB device number 13 using dummy_hcd 19:49:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x1, 0x1b, 0x7f, 0x7f, 0x0, 0x40, 0x8080, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000005c0)}, 0x404c5, 0x6, 0x7ff, 0x9, 0xffff, 0x8, 0x8000}, 0xffffffffffffffff, 0x6, r1, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xe7) flistxattr(r2, &(0x7f0000000640)=""/118, 0x76) clone(0x2000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00 \x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000ffdbdf25150000003c00098008000200c43b0000080001000000000008000200018000000800010003000000080002000800000008000200996d00000800020006000000"], 0x50}}, 0x800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) [ 461.349789][ T8912] tipc: TX() has been purged, node left! [ 461.429958][ T9266] ip6t_REJECT: ECHOREPLY is not supported [ 461.443536][ T9268] ip6t_REJECT: ECHOREPLY is not supported 19:49:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000100)=""/29) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000000)) [ 461.532794][ T8705] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 461.542001][ T8705] usb 1-1: New USB device found, idVendor=045e, idProduct=07c6, bcdDevice=56.56 [ 461.551369][ T8705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.649741][ T8705] usb 1-1: config 0 descriptor?? [ 461.729898][ T9275] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 19:49:51 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r5}, 0x18) r6 = socket(0x18, 0x0, 0x0) close(r6) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(r9, 0x4020aea5, &(0x7f0000000280)={0x2, 0x2000, 0x5, 0x6, 0x101}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r10}, 0x18) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="e00000005304100025bd7000fe45f0d280515c729de580cd1aafb5354e5207e2fece4047b344e4a220e42b8d580ae125fe235d8c4aee0c231761068a7ec304695de78ac4940f985398e7fb8d42e87f307ff8a39de9d9dcc857c7700cc0fb3696c382166bbbf8c15c0c8c4cd5f6fa28c136be2b10f9ff4df806c196a0e5bf63170977d1d756695f95d2ea150d2bb5038aa89b38c94b2c5eacb05ab9f03ea47ff0b04000000059a18688a4e943f605e3b33be0bf7ec2ed127747cc7f61c3325f10ac28303150cf8eaf7f27b84ea06fbcffc824"], 0xe0}, 0x1, 0x0, 0x0, 0x8051}, 0x4) connect$can_j1939(r6, &(0x7f0000000000)={0x1d, r10, 0x1}, 0x18) sendmmsg$alg(r6, &(0x7f00000000c0), 0x4924924924924d8, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000003d00010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRESHEX, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r6, @ANYBLOB], 0x44}}, 0x0) 19:49:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001800210000000000000000001c140000fe000001000000000400130000000000b10ab3b938c1a094114d468067176c25dad27791010c26234c7a751a81af217bb7cf470921271de5b32fc053f4fd9500c0885932211bd4a4b1e4d6a3d5645bded2cbc0814188f797f8f21d8bdaeaba2a08b60bd156ec871a5b86ccc07e134c74b85a25ffc6441b723caa8d4ea02d1772aef8326655d173d2cc0cfae0d9462ebaa9d042"], 0x20}}, 0x0) 19:49:52 executing program 1: setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x9dd, 0x3, 0x8, 0x0, 0xfffff3ed}, 0x14) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88800) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r1 = socket(0x10, 0x3, 0x3) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000480)={0x7, 0x0, &(0x7f0000000440)=[r5]}, 0x1) r6 = dup3(r2, r2, 0x80000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r8, 0x1}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r8, 0x2, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) recvfrom$inet6(r6, &(0x7f0000000600)=""/186, 0xba, 0x10141, &(0x7f0000000300)={0xa, 0x4f21, 0xb4, @remote}, 0x1c) write(r1, &(0x7f0000000100)="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", 0xfc) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r9, 0x84, 0x16, &(0x7f0000000500)={0x8, [0x0, 0x8a, 0x0, 0x3f, 0x1, 0x40, 0xffff, 0xfff7]}, 0x14) setxattr$security_evm(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='security.evm\x00', &(0x7f00000005c0)=@ng={0x4, 0x13, "f55468841d"}, 0x7, 0x2) [ 463.279102][ T9302] IPVS: ftp: loaded support on port[0] = 21 19:49:53 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r2 = signalfd4(r0, &(0x7f0000000080)={[0x6]}, 0x8, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000000c0)=""/142, &(0x7f0000000180)=0x8e) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 463.922608][ T9302] chnl_net:caif_netlink_parms(): no params data found 19:49:53 executing program 0: setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast2}, 0x1b6}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e23, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x800, 0xfff, 0xd887}) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x7f, 0x2, 0x5}, {0x6, 0x8, 0x20, 0x7fffffff}, {0x8, 0x45, 0x0, 0x3f}]}) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x1401, 0x4, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}}, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r5}, 0x18) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000002c0), &(0x7f0000000380)=0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000180)={0x81, 0x1000, 0x8, 0x800, 0x0, "c9bf6f4a781919a8"}) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r5, 0x1}, 0x18) sendmmsg$alg(r2, &(0x7f00000000c0), 0x4924924924924d8, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000280)={0x2, 0xfff}) [ 463.965261][ T8704] usb 1-1: USB disconnect, device number 13 [ 464.466650][ T9302] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.473973][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.483811][ T9302] device bridge_slave_0 entered promiscuous mode [ 464.517115][ T9302] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.524429][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.534667][ T9302] device bridge_slave_1 entered promiscuous mode 19:49:53 executing program 1: r0 = socket(0x18, 0xa, 0xfffffffd) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r3, 0x1}, 0x18) sendmmsg$alg(r0, &(0x7f00000000c0), 0x4924924924924d8, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRESDEC=r2, @ANYBLOB="e322c8ab317862c3ef9a47cbe9fbb9b00a11cb1564650b5e70803eeada284f201b79352f47523b6801f975636d1da0004a3720eb558b981646a95d772b168535bf358aa98661afc50b07c822690defed06e293303ec4bb306a3505e9ef14878ccc0dd2475e31d161ceedc11105bc081c94a837110423b483f252a8472c3decb1afeccbbce673c8d1fa8a43c7748c0f4b4812f89d6057dc828795c25ad9d5bfdcd305dd193d71ccde66a222911a3d6b77b521aa6438944697065eeb841740c011b8d6cc7e426f4baa039e68afda10d3ab960312b92a6134afe7fdb3d6370ac55963c44f7e1b6b89919f3265125db62dca9bcb3bb8fabf2becc952e5075fdaa50d595d9555ee20fd67f0583450301f6007b2d8c22c67d4e8fd56c51d7cab26159ee307cb5b24728e95d0cd1e9a4f22a462e724bba6e9d09b3c0d50e0380eb1d30fcb98ba149bdcf34a40dc270ec5edda6fe4cb75ae6daa7d966b3f8fabe4403a329a4722b0031f65ebc8d0dc1af3d4f130a6fc367aa0d2ec50982ba17f1edcaf4f88948a77da77978a648058cb010a5bd605c28c38b99daf950800ec77bd0850c0ef518fea78a68371e65a409f0f370980e5540bc0cd70b319a3e198f1f20c29c43683126a6546c6a74c23281f8c0cf30783388cee5064903fd31728f54b324b9675077fdf76bb748c651c6b1877fe8ede5e46586e104c3d0aad18f76d2eaf1b3992109e6841cd24378f1a06334b5de3b26ba3dec8172f2fd35da7dadcef7b761e5209c6e6130c33b3ca2f6ab6e7171443ba4c82abfa32185d3b521450636588e70883b0b4a91130bb813f2265c09e16dbfbd041bab1a42ba02cda2b1228a319be91ac76a626cf6e6d31b30b79a79df14544655c87150f7dd66b06bbb64343f40ca9db2c7ecddc3bed4a0e8e0e9cbfddfa86a87fe002728dde33c2f783e187401b0c8f6b139a6863bb9cd1235585acf557a38281cdaf34d6eea6eb4430b497c4d68db89c6af19ed1810764f39daefb28be6d6d95178e19cab8faf46a545d79bda2f34ff5736218368bc917df9c825b7e94a96ea5df36523dfc21287745ee37da61e33c6096dfdd2ba3adcfaa12aa9a26d15a3c74d7fc87652b967b9e1e740c6e9b893722213863d93372c557b4edc2260d2164c3f14847bb1ab07d05a1c0ad7078080acb9d1683c3b78fa0657207902f23b3443cab73d5fefa0e6647823f65ab6f3891252fdbae0c1cf9602a5b3288aacb9654d8de7b0fcdc4324e30b69fbc3bd54d0fc181faa4a44ea389a10ad9e8a5dc306482154e6918483e2a479dc06fcea89340bd1abcf6bcceba5ad1bd70bcf624e6813dd9be18ffcefb2c7d0796c0de8f9ec63385ec141f9ebe83063804a5c76bd3c4323d3cddee69aca8e311795e4ab052f8e56f8f25a32e3852c06c5fb84fc2657f88ae1111ae3f8bb58e9ca4d31c6de638581d85b9c4245661c8867df7b7c0b6effc2e0693f6ce8545c19d1ed35f5c546da7da1ec22fb14ebf9b2b2a6713f2d415267286c8a2ac4b9abba3e739599c15a1443aacbcd320361b967d9f4e8bcfbf6179dce9548e71cf870d942222cac23451ac7d78980d8d15149a93df2318161317593d5e0b8269c4d33d19d6a8a6fdd55d3aeceaaec297f49c0518cdb400f521cfbbbbb31202e0a0b8d9047061d0ae5fe1192b277f259a88608f073bd74bca79d4fb6ebfe897e9a8e66df9608a7a87d05d2764a82c85308206a524a4880523f5fb4d49946aea8aa5793a4a7bf8b17046ff42001977cb38783bb780d15658d058d2d8e7e11d04d7f030d6a1f49fd35b52d093231774cd4a10ae0b14489a2abfef680608525ca76a0f9b927c1d42cd45785359edccd715fe3278e370984791cdcaea8435f3e87a29a6b813f8a4e70a0742c989888abc546cc42a373dff65cd020aba817b8ceab8f549ad6184b47ab06f0b20f759b914f73b407a9ab82e48f324ffa929a805dec3a409b4320ea04ebfa14e353892a0373ef42f1b882adcfdb6c862994e8233a5c87215f93ec6c53e2c0900ed6dd23f77c99280052be0959f8583f29c8c8c01257a3301d0e2cf6de647845b9f03d71dcb059049d2429f810b5511dba93ba37376f0b87fb2bc44e1df5d5333b67d47ed39b88e134683133221d4e2d4c814916932c00963bfd878f09fffeb1115ec95de9eebbe31c1ed475eeac4badd90a9513b1743c8768db5a2d4272ac98523edf21c71fb66ee16d39621e4ada109aa9095cbbb41c1a7168a5ccee2f7e4c5af5a135b9716b27b662572b0f3a96f86cb789a9a38fcdf2153c6dc101bd2b33a63d80635500e0f561134df7c6c3a675e074efdecb0e27d810217b88b8ea54891a783476b34901163a4df5d75b34093b774a7be5b43e4898eeabf7063359acc69a6d3fb3f07c6ff8dac76de15500dec6a79c95726cde899198e9a4d035f62bad59e1905250eb390489b63c1f385fd5a9bb5dc61e29f35ca6487ec194828082b6e16952551350ee55485ca8af9e2d57f23ee72305aef195946ed4af47503cf34c4edf43c108ecc4969f2c7134f3b6a78c00d84ac7d768793a59ebb4ed1d971951705f5527dc148c5ce1cb1592ad94a1fc5d36c825d07fca0df28604f8fd254f4a04baaa90d96f4b9fd5e965bb327b350b69d973b31606e07e352081912844ffc4019ee900f67830c8d2d670e763bdac21c416b2a63dcbb1eabe88d51214ab1b2bab7f51bd401ae15f56573af001d5b6f3316dd762fe55d36ca769c84447fba835c40fd327bafafa8b3c628bed53137a486ea215fe5f8fc0fadef312b58c6c0190c61d2836c1e092913b446c896f7836263fe471ee4e8b3bc447ba9030fb2264c8fd3477d99219464e5edb1c816fef06ac4bc98c9ca1aa823de934c90c926ebd66c90c0b1a823819a5f71cedf94fb86c2d1517af6628bc1cd194cc234fa96bfc517c3e4a2778306d166e73e3c5927ea4d3f52a869c96e79c8788b619339882d7dd6421b59bb169510e6633c937164b529bdb5dc13dbcda05779d5d687fbb313c566a33276da1c1ea0c9d0996703d73e2d8cea6b2aa75230fa9943d03b35a00460e50a33889c5e43a9347f7faf36ceebba5d4a4dc0d615c3552c7fc24292f702201f8d2a390e4698d99df0e94d78eeef414fd5db976a778ed1fc7aa239d9a8e572085ff156b0f4075320e1cead97932d1f215b5ebf334f9b8b2b2b6dd2563b401509e645b25374fa166024d81eb75046ddc13791a3c07daa234ea45d14feb0ca5a1197b7d8d1911a36d0557162e1d712554f36e7e67f90bd9b28f9bed23ef6b55b61ea56a004161b0a687d0db5b9f8f05a7bf425c642ad4d6b585300866562525863d578f99ed753ce4e43165a760e07506b48737549d570dbfd3057b29640997917b1f1eda2a8160a4a40e926c2652cd4d2eb4fb0ec62b0c33f841e6a40756c5632813ce8ecf018ff164b9dfb1580c0ca33518c918f98fe22d294ce0f828ac38b0607f35a56cacfc0b3c3db75694648b9bdb6c95b997c4d7b2ba609fcd2c8ea2f5b3e65eaffee831cff63881874b46a01b3748a54336c12b23cae33eff84845e7d6167632c0e16491f09fdb6df0b2ab732be65d7498b1aac58dfda91c9e72d4a31ebe690c526f265ee9766333453655514433f79dd0cda0c7250180ca28a1f01fb622b9540589bad14f6fc255c9c259185aa8093b89b7d25f8511811d68e044802ec371bee7d6113358091c168556cd1714fc9e431446fb32619ad3df8061e574e02cfa1b98cb6fcf4dcc0febad1d036aca92a75479647530560c74e4bc822b4397b68dc733f23316aa7dc178922ac3aba9daea065665b8918b77dfd68342fd960c4eab48a725a8e4860f273f7337b48040e31bcf28f72248968a4ad6297d0cae5cef2ca377b71c164cc50d0dd311f57719c6680c3d30e81c5fcf9fbeb87914500be7fd26b276164731bb5d69bee303a23223d64c4884369111b2e16d65f3d2cb01561f6bbb318a48b5774a210a8db42378fa56d484e14122d88baf3ddb2aa95eb1358aa892d820c0a9f4af175d56c0117a15e1eca3a114e6fcbd42199109d762ff9f5b5daf83ce33845d30396daebe06b8c066313b92f960d8b51e1ac750b0deafccd56fd42e7ccb87d3fdb4b693b734abc81379ac556798c90c9e4ee2637964552132ac6a946edead63c22edcaddda738bc7dcf75815d8c69ab0426dae582278021d489ddaa3306d4a1d255e58b9269df80c3f51d1800a614ddc1be800db0cc3232d1be773f016c8880b00d3c5551de99aca01805277b5c9b6b304d83406727f956af54fc562ffe68fccab43e784347a297798dbfb199e8db00cadff4826f09aa267e2d171745ea54ec284bb4adac8f81cab1b9e808adb6eebf731de9f4bc1061dde556c207fd408661a424f1462c5dd23b8abd14a48a5d6edce4a860a33e9727f047a2cd08320585d72a33cb3c7d03495c14f30e5a485b312d79ceac4151ddc421cdb9a161f0e2d73be964511ca2f411a76aa53d74f6a2cd079d2555a6b26d57641c18026626b7088b6168103b7cd30c5f5cbb643df4f3ef2f802a0e212d0c6aa97a65a586b4b69586c1897ca7fc97231f65e8d0d8dc95a1a78053b6caff7395da9b5cc18de74e7324c96fdb83777b5eda864a22ed6f5779fd646c906798e9952774d30b393e26d95ce4c27847eb1002e35c06bab5e8bb7647d34df73c0f50954ee021b268951ff803403e16a802b0edc6f5a7243a60db759fc351c9c05b087fae6e2971051ff97bfbcc472ede6cd6d7caea2287ab245d0f251f5c9d05973745cf623d342bebbc18cb45a28b634670bbfd3d9027049944b866458f269d087e5969c8cf2498a2fed27c4e835c6065c9d71bf6519ae284c96e8778c48ffa7a532a9b4ffc7d5e359f967c1ffb7b16b82d833951c0b9174c23744aa4f272e89d7c7268bc0c3f327179501f68eed8cd27e6ccd0dbb6f79fe68d6bb4a089da2c86ac64f88f39174da363689e5c37e76dffab3ba85448b22825b15a1173abd354e8cd9c9187f1de90cb1dbb3b2b411a6e0ed1a612f6e95569c5a8d1dd83bea7fb6e6c31d66d39b0eebcbc5c499cb8d989a5efd05943fd39b30eaafdb9c1c04bc77535e3be846de625a6e85c25acffa61a9ff5b51fc67351ec61ba65ab4950879506652c861fe779b6aa8c5ad9da5dd5e14d39cfbe5c21eece13c7bce3ab3925fb6df096392a55a76cefee31e0b1f93cd22d89480b22b0d8d14f90bd459938781970c6a7bc72b95998220a2a12ab6a0bbc574d8eb55964a108bba47b7a257f9ebaade01dcbdc1fc8ec1cd2fa9e7d702fefebe7d8865ccb66888ea2a6c9ee14302aaaec0799897d18e882bec95519f1a67c219753ce9eccae0df0716b05c4b2de9adb570f58c156afd9df2e3cbc7a84e65027f42df84cec2fd383bb4c3c653a62487a797a20789c6f0a1f5b2e9367ff66a492928b97bf3e128c835d64dd9d5283d8fc3bc96bb5048b200181cfc6299c44c342d30f6a08a65a567c1fe6c0923d673f04341c29f3d2ad90133a17496ec19773a50849898cd99c617120d32d27d19ae531e387b0df0e8984ee0ccafc21c2e227ac5ab68be14f8f0847648df4327aba98daad37b63593b6f7cbcb8c8a8dc717e4ef489191dff9647df53230496f496fa2f39d1cf0f28e8f8cc5d370c11db1e2e42a68de5b5b03236230d4383f2ea30e376d4550a05681640986601ef54d4a7595f38108feea245f9cb1f0454219a9ec20cf4c33a3ca1c2ae3ac87ee8a0040c896c75e9061197b6efbfc5378e1aeec6c84cc9a"], 0x0) [ 464.621992][ T9302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 19:49:54 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4, 0x1, {0x0, 0x0, 0x2}}, 0x18) sendmmsg$alg(r1, &(0x7f00000000c0), 0x4924924924924d8, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000140)={'raw\x00', 0xb7, "780df82d0cfecc52452058808075f8363968393ba5527f684f58c5c5ed6de57b1510164511804d1210500bbc1c2aa23302ce0a88b6cab4c83f6c309e24080027176dc0e1ab98dc5d15e70c0851e92617b60d37ed6503e8703745df1418769c3fea03b73ee03cf99c985f1fd0e668ac4cc170eb9a7a6fbba86314146f7494f63ce4ac15da628779270dcfc1f64cebe115d22b5551defd5f73b99688d2dac61d4015725c34bf2ef8784f1970f50639697593bda1eecee919"}, &(0x7f0000000040)=0xdb) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="230653000000064177bb6b"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 464.694217][ T9302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 19:49:54 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x202) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_flash={0x33, 0x2, './file0\x00'}}) [ 464.832872][ T9302] team0: Port device team_slave_0 added [ 464.871606][ T9302] team0: Port device team_slave_1 added 19:49:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x0) [ 465.021622][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.029006][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.055154][ T9302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.073831][ T12] Bluetooth: hci2: command 0x0409 tx timeout [ 465.146081][ T8705] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 465.164500][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.171744][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.198293][ T9302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.327731][ T9302] device hsr_slave_0 entered promiscuous mode [ 465.367063][ T9302] device hsr_slave_1 entered promiscuous mode [ 465.396696][ T9302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.404399][ T9302] Cannot create hsr debugfs directory [ 465.548213][ T8705] usb 1-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 465.557458][ T8705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.609221][ T8705] usb 1-1: config 0 descriptor?? [ 465.656302][ T8705] gspca_main: se401-2.14.0 probing 047d:5001 [ 465.950802][ T9302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 466.030812][ T9302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 466.085806][ T9302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 466.112891][ T9302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 466.127848][ T8705] gspca_se401: ExtraFeatures: 187 [ 466.132949][ T8705] gspca_se401: Too many frame sizes [ 466.337597][ T8705] usb 1-1: USB disconnect, device number 14 [ 466.642304][ T9302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.685317][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 466.694979][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 466.719220][ T9302] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.744260][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 466.754388][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 466.765183][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.772618][ T8704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.786417][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 466.830588][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 466.840859][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 466.850704][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.858025][ T8705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.867279][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 466.940663][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 466.952025][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 466.962810][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 466.973285][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 466.984050][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 466.994585][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 467.004256][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 467.041373][ T9302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.054586][ T9302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 467.110852][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 467.120936][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 467.130606][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 467.137872][ T12] Bluetooth: hci2: command 0x041b tx timeout [ 467.151637][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 467.159529][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 467.192932][ T9302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.285136][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 467.296317][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 467.336047][ T8705] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 467.400054][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 467.409890][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 467.441601][ T9302] device veth0_vlan entered promiscuous mode [ 467.450858][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 467.460070][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 467.498011][ T9302] device veth1_vlan entered promiscuous mode [ 467.580311][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 467.589801][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 467.599242][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 467.609181][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 467.637717][ T9302] device veth0_macvtap entered promiscuous mode [ 467.661387][ T9302] device veth1_macvtap entered promiscuous mode [ 467.726841][ T9302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 467.737448][ T9302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.747539][ T9302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 467.757664][ T8705] usb 1-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 467.758140][ T9302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.767218][ T8705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.780454][ T9302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.796645][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 467.806965][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 467.816383][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 467.826497][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 467.855051][ T9302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 467.867541][ T9302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.877585][ T9302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 467.888132][ T9302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.901862][ T9302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.903037][ T8705] usb 1-1: config 0 descriptor?? [ 467.910528][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 467.924381][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 468.018336][ T8705] usb 1-1: can't set config #0, error -71 [ 468.073288][ T8705] usb 1-1: USB disconnect, device number 15 19:49:58 executing program 2: clone(0x6048300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$CAPI_SET_FLAGS(0xffffffffffffffff, 0x80044324, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0xd0, 0xd0, 0x420, 0x0, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0xc]}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'tunl0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private1}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "ef0d"}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@hbh={{0x48, 'hbh\x00'}}]}, @inet=@TOS={0x28, 'TOS\x00'}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [], [], 'batadv_slave_0\x00', 'syzkaller0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) r2 = socket(0x18, 0x0, 0x0) close(r2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r5}, 0x18) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r5, 0x1}, 0x18) sendmmsg$alg(r2, &(0x7f00000000c0), 0x4924924924924d8, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f00000000c0)="518481f4b6f00b30621b782d3ba3a2898c805a8773b7a911de6e17946d82597c3194470bf164192f58ba1182e4db4a0e8366528055cb53ee8c5abf1183a69f8ae3ceff60b78bee25cefcc6d826c3fd705930c43f929b264f331531e9f472694fe302b2e194423f08b01ac1aafc9d2c", 0x6f) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x2008, 0x4) 19:49:58 executing program 0: r0 = socket(0x18, 0x0, 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r3, 0x1}, 0x18) sendmmsg$alg(r0, &(0x7f00000000c0), 0x4924924924924d8, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x20, 0x1, 0x7, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x7, 0x20, 0x7ff, 0x100}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1cc, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4020010}, 0x40001) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') write$binfmt_aout(r8, &(0x7f00000019c0)=ANY=[@ANYBLOB="5ce3"], 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000500)='status\x00') read(r9, 0x0, 0x0) 19:49:58 executing program 1: r0 = socket(0x18, 0x0, 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r4, @ANYBLOB="000000e0c3558e9ef62d2f043b40ff0000000000"], 0x2c}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xc0010008}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xa8, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r3, 0x1}, 0x18) sendmmsg$alg(r0, &(0x7f00000000c0), 0x4924924924924d8, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @local}, {0x6, @broadcast}, 0x44, {0x2, 0x4e21, @empty}, 'vlan0\x00'}) r5 = fcntl$dupfd(r0, 0x0, r0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000060a509541f8ad04a025cbb2ffaf3ebd2894b02fd66e173ea7417b0ccea422c22276de3743647172bf037752739fe840078756033a53b11b66a454e64b05daa1f647621c01ff7f93c41f381c3462c5c0b4fd8b367879bda6f3c3df3fd1a4e2c510e2a8a78d0707f97922c6f9af5846103149e354057ec3061dcb4f5b8e1afb026028c3beb518adcf23b5f8d2776b17cd965", @ANYRES16=r6, @ANYBLOB="02002abd7000fcdbdf25030000000800040003000000080007007f000001"], 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x20008000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) r8 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) [ 469.087348][ T9579] xt_TPROXY: Can be used only with -p tcp or -p udp 19:49:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRESDEC, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtfilter={0x3c, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4, 0x1000}]}]}}]}, 0x3c}}, 0x0) [ 469.174785][ T9579] xt_TPROXY: Can be used only with -p tcp or -p udp 19:49:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/242, 0xf2}, {&(0x7f00000005c0)=""/96, 0x60}, {0x0}, {&(0x7f0000000240)=""/123, 0x7b}], 0x4, 0xad, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @output={0x0, 0x0, {0x2, 0x1}, 0x100, 0x8000}}) fchmod(0xffffffffffffffff, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000100)={0xffffffffffffffff, 0xdd6}) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x40, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000004c0)={0x6}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@mcast2, @mcast2, @loopback, 0x5, 0x9, 0xc, 0x300, 0x85d0, 0x20000, r4}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000440), &(0x7f0000000480)=0x4) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) [ 469.221351][ T12] Bluetooth: hci2: command 0x040f tx timeout 19:49:58 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x6, &(0x7f00000006c0)={0x14, {{0x29, 0x0, 0x3e000000, @local}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = semget(0xffffffffffffffff, 0x4, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x1, 0x68ed9064}) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf25040000001c0004800c000780080001000f0000000900010073797a300000000018000280080001000900000008000100000000000400040070000580070001006962000014000280080002000400000008000300200000000400028044000280080001001a00000008000100200000000800030004000000080001001a00000008000200010000000800040009000000080001000500000008000200a2bee8ff08000100756470001c0007800800020020010000080002000000d24608000100030000001c0007800c0003007f000000000000000c000400fcffffffffffffff"], 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000001540)=""/250) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000340)={0x7, 0x8}, 0x10) write$binfmt_misc(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x131) r4 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 469.493891][ T9590] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 469.589893][ T9590] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 19:49:59 executing program 2: syz_usb_connect(0x2, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="f6306fec2af18e89819368be35e9f60afe41c64f471371549cfdd5ef8b353df1136f5adc8202915a6f503c73e762d736fef0b9d83e091c0b93ba0ed9db33b5556cdcc71d70adb7634c65f02560723fb66e2435f1bfdb9ee00722c6df51e6ed3eb2af5df73986e6b40453793e5a6abce46522c7e649f8c693c1d4649ed16574593947d4794a6ae6fbdaf10e2f084647c84106e18d058a44b17d9462924b6a1768a4", @ANYRES32, @ANYRES32=0x0, @ANYRESHEX], 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x28100, 0x97) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) umount2(&(0x7f0000000180)='./file0\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) [ 469.867753][ C0] sd 0:0:1:0: [sg0] tag#2135 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 469.878444][ C0] sd 0:0:1:0: [sg0] tag#2135 CDB: Test Unit Ready [ 469.885105][ C0] sd 0:0:1:0: [sg0] tag#2135 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.895097][ C0] sd 0:0:1:0: [sg0] tag#2135 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.904994][ C0] sd 0:0:1:0: [sg0] tag#2135 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.914928][ C0] sd 0:0:1:0: [sg0] tag#2135 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.924901][ C0] sd 0:0:1:0: [sg0] tag#2135 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.934783][ C0] sd 0:0:1:0: [sg0] tag#2135 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.944689][ C0] sd 0:0:1:0: [sg0] tag#2135 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.954638][ C0] sd 0:0:1:0: [sg0] tag#2135 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.964548][ C0] sd 0:0:1:0: [sg0] tag#2135 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.974465][ C0] sd 0:0:1:0: [sg0] tag#2135 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.984337][ C0] sd 0:0:1:0: [sg0] tag#2135 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.994201][ C0] sd 0:0:1:0: [sg0] tag#2135 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.004058][ C0] sd 0:0:1:0: [sg0] tag#2135 CDB[c0]: 00 00 00 00 00 00 00 00 19:49:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ec0000002100000400000000fbdbdf2500000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/420], 0xec}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1a, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="5607895965c3db7d00000000", @ANYRES32=r4, @ANYBLOB="000000000000000008002e000000000004001a80"], 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000e2ffffffff07002604001ac00000000000"], 0x2c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x2, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000940)={0x1d4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20040884}, 0x60004080) [ 470.036197][ T28] audit: type=1800 audit(1598989799.345:3): pid=9598 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15732 res=0 [ 470.232587][ T28] audit: type=1800 audit(1598989799.545:4): pid=9598 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15734 res=0 [ 470.357308][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 19:49:59 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x6, &(0x7f00000006c0)={0x14, {{0x29, 0x0, 0x3e000000, @local}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = semget(0xffffffffffffffff, 0x4, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x1, 0x68ed9064}) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf25040000001c0004800c000780080001000f0000000900010073797a300000000018000280080001000900000008000100000000000400040070000580070001006962000014000280080002000400000008000300200000000400028044000280080001001a00000008000100200000000800030004000000080001001a00000008000200010000000800040009000000080001000500000008000200a2bee8ff08000100756470001c0007800800020020010000080002000000d24608000100030000001c0007800c0003007f000000000000000c000400fcffffffffffffff"], 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000001540)=""/250) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000340)={0x7, 0x8}, 0x10) write$binfmt_misc(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x131) r4 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 470.475824][ C0] sd 0:0:1:0: [sg0] tag#2152 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 470.486542][ C0] sd 0:0:1:0: [sg0] tag#2152 CDB: Test Unit Ready [ 470.493201][ C0] sd 0:0:1:0: [sg0] tag#2152 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.503140][ C0] sd 0:0:1:0: [sg0] tag#2152 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.513029][ C0] sd 0:0:1:0: [sg0] tag#2152 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.522927][ C0] sd 0:0:1:0: [sg0] tag#2152 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.532811][ C0] sd 0:0:1:0: [sg0] tag#2152 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.542687][ C0] sd 0:0:1:0: [sg0] tag#2152 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.552590][ C0] sd 0:0:1:0: [sg0] tag#2152 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.562475][ C0] sd 0:0:1:0: [sg0] tag#2152 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.572337][ C0] sd 0:0:1:0: [sg0] tag#2152 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.582205][ C0] sd 0:0:1:0: [sg0] tag#2152 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.592082][ C0] sd 0:0:1:0: [sg0] tag#2152 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.601955][ C0] sd 0:0:1:0: [sg0] tag#2152 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.611827][ C0] sd 0:0:1:0: [sg0] tag#2152 CDB[c0]: 00 00 00 00 00 00 00 00 [ 470.901573][ T28] audit: type=1800 audit(1598989800.215:5): pid=9612 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15732 res=0 [ 471.051965][ C0] sd 0:0:1:0: [sg0] tag#2169 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 471.062841][ C0] sd 0:0:1:0: [sg0] tag#2169 CDB: Test Unit Ready [ 471.069618][ C0] sd 0:0:1:0: [sg0] tag#2169 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.079506][ C0] sd 0:0:1:0: [sg0] tag#2169 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.089371][ C0] sd 0:0:1:0: [sg0] tag#2169 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:50:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x8}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 471.099248][ C0] sd 0:0:1:0: [sg0] tag#2169 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.109267][ C0] sd 0:0:1:0: [sg0] tag#2169 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.119165][ C0] sd 0:0:1:0: [sg0] tag#2169 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.129063][ C0] sd 0:0:1:0: [sg0] tag#2169 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.138950][ C0] sd 0:0:1:0: [sg0] tag#2169 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.148844][ C0] sd 0:0:1:0: [sg0] tag#2169 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.158723][ C0] sd 0:0:1:0: [sg0] tag#2169 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.168620][ C0] sd 0:0:1:0: [sg0] tag#2169 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.178493][ C0] sd 0:0:1:0: [sg0] tag#2169 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.188370][ C0] sd 0:0:1:0: [sg0] tag#2169 CDB[c0]: 00 00 00 00 00 00 00 00 19:50:00 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010e704090040000000000109022400010000000009040000010340000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = accept(r2, 0x0, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) prctl$PR_SVE_SET_VL(0x32, 0x3dec5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "54f18442"}]}}, 0x0}, 0x0) [ 471.409347][ T8706] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 471.417249][ T4880] Bluetooth: hci2: command 0x0419 tx timeout [ 471.686420][ T8706] usb 3-1: device descriptor read/64, error 18 [ 471.816020][ T4880] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 472.056201][ T4880] usb 2-1: Using ep0 maxpacket: 16 [ 472.076558][ T8706] usb 3-1: device descriptor read/64, error 18 [ 472.178642][ T4880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.189853][ T4880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.199934][ T4880] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.40 [ 472.209242][ T4880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:50:01 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1ff, 0x200000) r0 = socket(0xf, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000058001f000307f4f9002304000a04f51108000100020100020800038005000000", 0x24) r1 = socket$inet(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000002c0)='/'}, 0x20) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007050000000000000b0000008f9b", @ANYRES32=r3, @ANYBLOB="00000000ff8819ff00000000090001007072696f00000000180002000d"], 0x48}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) socket$inet(0x2, 0x3, 0x2) [ 472.277216][ T4880] usb 2-1: config 0 descriptor?? [ 472.378117][ T8706] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 472.606239][ T4880] usbhid 2-1:0.0: can't add hid device: -71 [ 472.612648][ T4880] usbhid: probe of 2-1:0.0 failed with error -71 19:50:02 executing program 0: r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x68, 0xcb, 0xb0, 0x40, 0xcf3, 0x9375, 0x86e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0x29, 0xe6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 472.659686][ T8706] usb 3-1: device descriptor read/64, error 18 [ 472.671494][ T4880] usb 2-1: USB disconnect, device number 4 [ 473.057437][ T8706] usb 3-1: device descriptor read/64, error 18 [ 473.105928][ T12] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 473.136030][ T4880] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 473.176225][ T8706] usb usb3-port1: attempt power cycle 19:50:02 executing program 2: socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000c7000000000000001ad6000000010902120001000000000904000000f6a18100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 473.377719][ T4880] usb 2-1: Using ep0 maxpacket: 16 [ 473.476474][ T12] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 8.6e [ 473.486053][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.505876][ T4880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.517124][ T4880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.527215][ T4880] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.40 [ 473.536518][ T4880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.548250][ T12] usb 1-1: config 0 descriptor?? [ 473.556302][ T4880] usb 2-1: config 0 descriptor?? [ 473.915871][ T8706] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 474.019491][ T8706] usb 3-1: Invalid ep0 maxpacket: 0 [ 474.046010][ T12] ath6kl: Failed to read usb control message: -110 [ 474.052665][ T12] ath6kl: Unable to read the bmi data from the device: -110 [ 474.060242][ T12] ath6kl: Unable to recv target info: -110 [ 474.076902][ T4880] elo 0003:04E7:0009.0002: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.1-1/input0 [ 474.137998][ T12] ath6kl: Failed to init ath6kl core: -110 [ 474.159089][ T12] ath6kl_usb: probe of 1-1:0.0 failed with error -110 [ 474.186013][ T8706] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 474.194430][ T12] usb 1-1: USB disconnect, device number 16 [ 474.240293][ T8708] usb 2-1: USB disconnect, device number 5 [ 474.286983][ T8706] usb 3-1: Invalid ep0 maxpacket: 0 [ 474.296463][ T8706] usb usb3-port1: unable to enumerate USB device [ 474.805962][ T12] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 475.036417][ T8708] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 475.166434][ T12] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 8.6e [ 475.175771][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.200068][ T12] usb 1-1: config 0 descriptor?? [ 475.276372][ T8708] usb 2-1: Using ep0 maxpacket: 16 [ 475.407951][ T8708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.419147][ T8708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.429332][ T8708] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.40 [ 475.438679][ T8708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.465800][ T12] ath6kl: Failed to submit usb control message: -71 [ 475.472592][ T12] ath6kl: unable to send the bmi data to the device: -71 [ 475.479924][ T12] ath6kl: Unable to send get target info: -71 [ 475.513340][ T12] ath6kl: Failed to init ath6kl core: -71 [ 475.533298][ T12] ath6kl_usb: probe of 1-1:0.0 failed with error -71 19:50:04 executing program 0: r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x68, 0xcb, 0xb0, 0x40, 0xcf3, 0x9375, 0x86e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0x29, 0xe6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 475.579190][ T12] usb 1-1: USB disconnect, device number 17 [ 475.607516][ T8708] usb 2-1: config 0 descriptor?? 19:50:05 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x3e) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002400)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000002500)=0xe8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002d80)={'syztnl1\x00', &(0x7f0000002d00)={'syztnl1\x00', 0x0, 0x2f, 0xe2, 0xf3, 0x2, 0x12, @mcast2, @dev={0xfe, 0x80, [], 0x18}, 0x20, 0x700, 0x9, 0x10001}}) sendmmsg$inet(r0, &(0x7f00000033c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @private=0x400}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="c7c59b71cc319f5c285701b75104763122d3806c9ee33efd5908439adb11d4de3506b77817ba920713f34e0508aa848972629e808522fd5445f18394e3fe4c3780b87dcabe61d52fa9db8cddcea24504079653b3c9d5824ac1d5c77f00761aeb217eaa0dec2e089878a08194c46043e0690e4566f9c97bf26932c31aab4c351b9cb4f24af098e3ea333832e5ba949c9b7fab4aef554e21889ac733ffc5732e4ebb811bdb1cf6a022051ec79fd968b96143f1b0b1f3c56728848e1d", 0xbb}], 0x1, &(0x7f0000000400)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x9b, 0x0, 0x8, [0x8be, 0x0, 0xfffffffd, 0x800]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xca, 0x3, 0xf, [{@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x36}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x16f160bc}, {@local, 0x7}]}, @ssrr={0x89, 0x7, 0xc2, [@private=0xa010100]}, @timestamp_addr={0x44, 0xc, 0xa5, 0x1, 0xc, [{@loopback, 0xd0}]}, @end, @rr={0x7, 0xf, 0x2b, [@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xb, 0x6e, [@rand_addr=0x64010101, @rand_addr=0x64010102]}]}}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@ra={0x94, 0x4}, @cipso={0x86, 0x24, 0x3, [{0x6, 0x11, "88cf694df27905593c130c7ab49c55"}, {0x1, 0x2}, {0x7, 0x3, 'S'}, {0x7, 0x8, "8f68ec56a8e9"}]}, @cipso={0x86, 0x31, 0x1, [{0x5, 0xf, "515b9402191185f420cddf8006"}, {0x2, 0xb, "2cdc257f80b0c338e7"}, {0x13fbba782852fc4c, 0x11, "4b1ba0fcd9b2fe9a3e56e3f4b87dfd"}]}, @generic={0x83, 0xf, "ca1b49f5452951de1d155fa29a"}, @rr={0x7, 0x1f, 0x70, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010100, @local, @empty, @multicast2, @local]}, @lsrr={0x83, 0x7, 0x97, [@dev={0xac, 0x14, 0x14, 0x11}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0x71, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1}, {@multicast1, 0x6}, {@multicast2, 0x1}, {@rand_addr=0x64010101, 0x5}, {@broadcast, 0xc791}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private=0xa010101}}}], 0x200}}, {{&(0x7f0000000200)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000240)="c854e0098bdd58d11e119442f290432fea811b082c613231", 0x18}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000280)="1d1faa147dcfd2d4c1aef9fdab170dd32374963f73c04f18bf1846279ba847594b02dbc99034e1133d90786b3a261621e1633d8c073783794c99f1d35b07b023ef7013ffcb05eae5228d71a203986170b458c99e35e79bf52403b35f170a725ae135c86a75ffede0f92575af5f60e8c1278ca8238fa9b3d9c63063ff215bdf305c5ac0e2a173d5dd5f1510462263a89289d38b100728163a0db0fa5b9682487ab1567c56dc6862f7a6da2e071b116158779938f8bdb7bef85415ae2905aa878969e5a2c7d121ec4840ab219445231e02c79613518d491714fec680f826b5", 0xde}, {&(0x7f0000001600)="f1e1c1994b265cbec5d0c02b053a94d3eb8483c8feb34092218374d82e0d7277ce3bc70aba958ce24389d56af82b9931d6032174769f2482356c8ad490a3c0714e6e2457fa31baeff11d462f212e1c62ca90a63a510eaafd44dbb01a5719ba24fc527be7623859bdd1d80c62aee7dcb987c7591c1b95f8f0d19de2a67c39822a492cc8c4a033e96cf4e0d5f4af88fc9d33cef345a32faf95f9441b8f70", 0x9d}, {&(0x7f00000016c0)="17de95bcd8d7a61b835e1d11c104d359cad87c94ce62beaee0633a831ad8a877ffd14cfd982857482e08535bcd98fb8dba797d0c7c91a8785d0c7a59f3e47fe5b90f838357481d102152346812860a1823ad02b707eacecbe225fcaeac927ca45c0e9516f80813e74962666d62fc4efda9943857e50a57c54f7da7fef00a", 0x7e}], 0x5, &(0x7f0000002540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}}}}], 0x20}}, {{&(0x7f0000002580)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000002a00)=[{&(0x7f00000025c0)="1074bca3e6cd405124400d56b924c1e5f4436dc9a3827eb4854b1f8367d3e58a8c01409d0633988d4c5bfc8d205ecd2879315624ef7dfa5d8aceee0c6cda41b50c0b8edc9e2d36310f4e7320738f4742e364d8064e758ce549e3db284860563e1b502f6d15bd2d3216c4e1a4f8e8b5ddaea57aff71a1badcb032f35698b85f49818dc0bea2a84d96e011998ba9c81a430ca2", 0x92}, {&(0x7f0000002680)="386835228a8646be229ae4325835dcdb1a38cf86f441d07ab335767ca5670a949d094b525c8d2ed8593db40b9df9c7c5579499bf3993f097fae7f0cc3ac395329ffa1b5688a6eccc23e5d8bedaff8510bbc812728c1374a2d89d73c1ac66e5df99bacea8e41ff94a9dab586c9d8f1f36b036d1b4b1", 0x75}, {&(0x7f0000002700)="d65b60b70cc7378b48069a0ef61819b9670b9e9f7b0bc6e6bf1777a456e90229e40d67b5d52e0961a76781fa403bd181cfe6cac6acff496992acaaf38312099cdd09523424ea23997605dd4d92ac913234941b9cad3d559b1dd84b932a4716ac6238feb51b217b6aade5847b44cd35ffc680b16b681ff80cee3263550e3f6e", 0x7f}, {&(0x7f0000002780)="de2e3a9c4441faf06aa60263cef4bb4f245c30501a4a7c22360005af83f46bb416888f66cbf2d4224bb6cf56a73dddb084742539a06279a76010a1d9342cc963313dd181ea5663e3918521ddb283519da46698ded9101f81d8800801a568ae8ea7fa4829d1a6ca43f7d34ae011491eb751fa0aa7b7c8ce2d518b179273fc6bd45dcdb09ae80090dd4de23070e897fd2cc7e78534ad9c19bc4bb7265842", 0x9d}, {&(0x7f0000002840)="0f9a03164fefd4af6f1f8e2531fcdd346a5f765ecd92755f5a84ad5cb74ebdd9b9c93ea85e71904919ea01e8914b426f19c7f0c7d0f0d9c8291d5ae966b5f41a885f0977e1d71ad15d97b2aeafea91ecc500f6b827af033b32df77d1ed93cceffae2c18d0e75074bbd31431bab49f141a9eabc173b71782b00b81a22d65e3bfe328935369e90d7616c1adc2df7e34aaad066b7fc7b891f07391098734f90f3ba5e2aee25ab411c56589304f872ed8c12e5befe8f2493a3fac4a21eac877a9d94a9477e2b54117854a463064ec0c80392c0ff302404ebdf99c9eb141b5ac57f9434f662153b54d1197fad18456bcc3a20e0fbc778", 0xf4}, {&(0x7f0000002940)="299d87752107e27fedf801ab1a674c963412d45e122465b9d1b2ea9a89260ab8e721fc3202c70a9a51f616c55b3e674c44083fa3a7a754fa154557595edf0ea761feca06c06868a7a327268f285318f774d71f3574a3cec192b9036acf5ea1ef9175b480b5d893f7f9a19b2e001acf168436731b4953bd7996b5a6e10bf6a022b23e41444db888524475ced4e0b0b27656789365ac", 0x95}], 0x6, &(0x7f0000002a80)=[@ip_retopts={{0x54, 0x0, 0x7, {[@end, @end, @noop, @ssrr={0x89, 0xf, 0x59, [@broadcast, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0xe}]}, @end, @rr={0x7, 0x23, 0x1e, [@local, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @empty, @empty, @loopback]}, @generic={0x44, 0xc, "d134af55a9128a422c7c"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@end, @end, @cipso={0x86, 0x57, 0x1, [{0x1, 0x10, "2a21874d7234306b5db17cb2cec2"}, {0x0, 0x11, "5880235391e0842a86ce6fb41bd604"}, {0x2, 0x12, "6b30f04dafbb6cdc444ce5c1ec4b00be"}, {0x2, 0xf, "d216a3122958e3f5f1425f6fec"}, {0x2, 0xf, "946f8bac5b3cc46cd5422bfd77"}]}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @rand_addr=0x64010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x138}}, {{&(0x7f0000002bc0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000002cc0)=[{&(0x7f0000002c00)="160abf0c2eb80af8da12f96b5723bfe47888f219d707cb9d379798dc722206f9e2b67c98bcf4b275fbcd8e60eab9728083bd0bf667c89e9b5c0e7cf3a5926262f3eb6e753a97967be8f2bb67", 0x4c}, {&(0x7f0000002c80)="e20a4c9dd57d2b04af36c6a069b4b7de8038c024264ec0855c065729743690929e9e95274db7a7daf607d9559e64ec10df90096a7aa34e0f5ad5e6e3d0", 0x3d}], 0x2, &(0x7f0000002dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x70}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x34, 0x0, 0x1, [0x1, 0x1, 0x6, 0x9, 0x3774, 0x3, 0x80000001, 0x7]}, @rr={0x7, 0x7, 0x5f, [@rand_addr=0x64010101]}, @timestamp={0x44, 0x28, 0xb7, 0x0, 0x0, [0x1, 0x3f, 0x6, 0xfffffffe, 0x80000001, 0x7, 0x4, 0x1, 0x7fffffff]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0xd8}}, {{&(0x7f0000002ec0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000003240)=[{&(0x7f0000002f00)="09df275ddbaaaa200a941445b9337d92567f59422bb3ad8aafc826ac43c0b86a2e2e3abb302a46f3d178cb2628a59609b49ea62d9bad71cb26b91e5b25eb1e6f114e42c32471d153b1b2a75be7", 0x4d}, {&(0x7f0000002f80)="835fad63226757779adb654bc90abd982202dc686600678395bfcf3e144ecbe42bbafbca36467ecda6a9c50aa6f9df827f40c524bc859c1661ec7a5fee3970f64613610dc73e802a5b44324e4a6665cd3d10356047", 0x55}, {&(0x7f0000003000)="dd03d098a69658f120aedc69e402d1bcdc55d374bc0b722c3f03c3be644e3e3f1bd926904237be98952699a1e999f98b26e7c8a4d7c4f5c079bed5d264a2eff5c3b4b78bc9061c3424e3b7af303b65cfd483ccb54dc47c4dff27807cc74410206c7bfb8b3a087462fd3fa6c7c6906188a04354396b07f303ef5cd682b7624440284e5e4ef9fa67936035078f5a951656d2618236a0ccf3a66489858afe97f87ffb6e4d49ced88501c5f3e793b0c90f88b9fec137342820201d11cf1d8f9165eb7af24209604f81c62d6a514c049c3af76f74a3d6dd48184781476120f8d4686266a89f9b1d75bdc257ec26c8", 0xec}, {&(0x7f0000003100)="b16af0f64319b108afa564b177eb0ab48237f964a6ee826d8b7431ce1911f4ce9a648dc7b4018f8871b36bb23dce169bcdfcdff15ce9a59230a1e93cbdbea3a573d4ae11ff44c70ae9674b098caf513faaea6014f0be90d8a37dad7ad75aa920770b947ded56b7110e250d24fd990ecba3998933a96f6f0ba5ffc4207797477b70be0ba45b4207006263064dcc9e4bbe669b", 0x92}, {&(0x7f00000031c0)="3a780bb70a34618eb83aa57539a921fca28f83ee3c93729d61c706a63719390c1b574f323524e9b0a2e1216a2ee9d3d9922c268ee0ed50c33d5bea1a1dce437a6ab2bb779f7754fbd13d1c15b3a09e86c919baaff4672581774b900b", 0x5c}], 0x5, &(0x7f00000032c0)=[@ip_retopts={{0xb8, 0x0, 0x7, {[@cipso={0x86, 0x21, 0x0, [{0x1, 0xd, "1c8504c4863ce4ce109aaf"}, {0x5, 0xe, "4cddd990078b0f53c7d4df43"}]}, @noop, @rr={0x7, 0x2b, 0x17, [@private=0xa010102, @remote, @broadcast, @multicast2, @private=0xa010102, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x20, 0x0, 0x9, [0x4]}, @timestamp_addr={0x44, 0x4c, 0x59, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x31}, {@private=0xa010101, 0x9}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast2, 0x2da00000}, {@loopback, 0x8}, {@private=0xa010102, 0x7}, {@remote, 0x1}, {@remote, 0xffffffff}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffb9}}], 0xd0}}], 0x5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfdef) [ 475.737999][ T8708] usb 2-1: can't set config #0, error -71 [ 475.763431][ T8708] usb 2-1: USB disconnect, device number 6 19:50:05 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x6}, 0x108d8, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000019940)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff6400edb9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ad7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2"], 0x1a3) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xa2b02, 0x0) write$P9_RSTATu(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x16b) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000}) add_key$keyring(0x0, &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) syz_open_dev$vcsa(0x0, 0x6, 0x0) sysfs$1(0x1, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 476.186541][ T12] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 476.394163][ C1] sd 0:0:1:0: [sg0] tag#2125 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 476.404918][ C1] sd 0:0:1:0: [sg0] tag#2125 CDB: Test Unit Ready [ 476.411776][ C1] sd 0:0:1:0: [sg0] tag#2125 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.421702][ C1] sd 0:0:1:0: [sg0] tag#2125 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.431603][ C1] sd 0:0:1:0: [sg0] tag#2125 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.441495][ C1] sd 0:0:1:0: [sg0] tag#2125 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.451406][ C1] sd 0:0:1:0: [sg0] tag#2125 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.461315][ C1] sd 0:0:1:0: [sg0] tag#2125 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.471314][ C1] sd 0:0:1:0: [sg0] tag#2125 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.481202][ C1] sd 0:0:1:0: [sg0] tag#2125 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:50:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', r4, 0x2f, 0xbe, 0xc3, 0x9, 0x41, @mcast1, @local, 0x1, 0x7, 0x2, 0x7fffffff}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @loopback}]}}}]}, 0x3c}}, 0x0) [ 476.491124][ C1] sd 0:0:1:0: [sg0] tag#2125 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.501029][ C1] sd 0:0:1:0: [sg0] tag#2125 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.510926][ C1] sd 0:0:1:0: [sg0] tag#2125 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.520825][ C1] sd 0:0:1:0: [sg0] tag#2125 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.530714][ C1] sd 0:0:1:0: [sg0] tag#2125 CDB[c0]: 00 00 00 00 00 00 00 00 [ 476.538892][ T9714] IPVS: ftp: loaded support on port[0] = 21 [ 476.554304][ T12] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 8.6e [ 476.563819][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.665057][ T12] usb 1-1: config 0 descriptor?? [ 476.675665][ C1] ===================================================== [ 476.682687][ C1] BUG: KMSAN: uninit-value in geneve_xmit+0x300c/0x3200 [ 476.689631][ C1] CPU: 1 PID: 9714 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 476.698212][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.708276][ C1] Call Trace: [ 476.711563][ C1] [ 476.714492][ C1] dump_stack+0x21c/0x280 [ 476.718889][ C1] kmsan_report+0xf7/0x1e0 [ 476.723322][ C1] __msan_warning+0x58/0xa0 [ 476.727846][ C1] geneve_xmit+0x300c/0x3200 [ 476.732451][ C1] ? kmsan_report+0x1c0/0x1e0 [ 476.737147][ C1] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 476.743235][ C1] ? geneve_stop+0x400/0x400 [ 476.751965][ C1] xmit_one+0x3cf/0x750 [ 476.756140][ C1] ? kmsan_get_metadata+0x116/0x180 [ 476.761356][ C1] __dev_queue_xmit+0x3aad/0x4470 [ 476.766478][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 476.771798][ C1] dev_queue_xmit+0x4b/0x60 [ 476.776326][ C1] ip6_finish_output2+0x23f1/0x2a70 [ 476.781558][ C1] ? kmsan_get_metadata+0x116/0x180 [ 476.786774][ C1] __ip6_finish_output+0x9c0/0xa90 [ 476.791905][ C1] ip6_finish_output+0x14b/0x4b0 [ 476.796971][ C1] ip6_output+0x68d/0x7f0 [ 476.801324][ C1] ? ip6_output+0x7f0/0x7f0 [ 476.805841][ C1] ? ac6_seq_show+0x200/0x200 [ 476.810585][ C1] mld_sendpack+0xf6c/0x1470 [ 476.815201][ C1] ? mld_send_report+0x510/0x510 [ 476.820154][ C1] mld_ifc_timer_expire+0x13b8/0x1b50 [ 476.825546][ C1] ? mld_gq_timer_expire+0x180/0x180 [ 476.830895][ C1] call_timer_fn+0x226/0x550 [ 476.835501][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 476.841314][ C1] expire_timers+0x4fc/0x780 [ 476.845917][ C1] ? mld_gq_timer_expire+0x180/0x180 [ 476.851214][ C1] __run_timers+0xaf4/0xd30 [ 476.855741][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 476.861961][ C1] ? irqtime_account_irq+0xcb/0x2d0 [ 476.867175][ C1] ? kmsan_get_metadata+0x116/0x180 [ 476.872383][ C1] run_timer_softirq+0x2d/0x50 [ 476.877240][ C1] ? migrate_timer_list+0x780/0x780 [ 476.882503][ C1] __do_softirq+0x2ea/0x7f5 [ 476.887028][ C1] asm_call_on_stack+0xf/0x20 [ 476.891713][ C1] [ 476.894722][ C1] do_softirq_own_stack+0x7c/0xa0 [ 476.899758][ C1] __irq_exit_rcu+0x226/0x270 [ 476.904441][ C1] irq_exit_rcu+0xe/0x10 [ 476.908759][ C1] sysvec_apic_timer_interrupt+0x107/0x130 [ 476.914580][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 476.920570][ C1] RIP: 0010:kmsan_internal_is_vmalloc_addr+0x26/0x30 [ 476.927253][ C1] Code: 31 c0 5d c3 55 48 89 e5 48 89 f8 48 c1 e8 28 3d c8 ff ff 00 0f 97 c1 48 b8 ff ff ff ff ff d0 ff ff 48 39 c7 0f 92 c0 20 c8 5d 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 48 81 ff ff ff ff 9f 0f [ 476.946864][ C1] RSP: 0018:ffff88801f8fb180 EFLAGS: 00000246 [ 476.952946][ C1] RAX: ffffd0ffffffff00 RBX: ffffffff920c7b20 RCX: 0000000000000001 [ 476.960926][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff920c7b20 [ 476.968903][ C1] RBP: ffff88801f8fb1a0 R08: ffffffff829b11a3 R09: ffff88812fffa000 [ 476.976881][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 476.984867][ C1] R13: ffff888126e909d8 R14: 0000000000000000 R15: 0000000000000000 [ 476.992936][ C1] ? internal_create_group+0xb23/0x1de0 [ 476.998505][ C1] ? kmsan_get_metadata+0x29/0x180 [ 477.003630][ C1] kmsan_get_shadow_origin_ptr+0x6c/0xb0 [ 477.009274][ C1] __msan_metadata_ptr_for_load_8+0x10/0x20 [ 477.015181][ C1] internal_create_group+0xb65/0x1de0 [ 477.020596][ C1] sysfs_create_groups+0xee/0x2d0 [ 477.025730][ C1] device_add+0x13ee/0x40d0 [ 477.030262][ C1] ? device_add+0x1ac1/0x40d0 [ 477.035044][ C1] netdev_register_kobject+0x32b/0x760 [ 477.040572][ C1] register_netdevice+0x2a7c/0x37d0 [ 477.045870][ C1] __ip_tunnel_create+0x522/0x760 [ 477.050920][ C1] ip_tunnel_init_net+0x327/0xdf0 [ 477.056023][ C1] ipgre_init_net+0x7f/0x90 [ 477.060538][ C1] ? ipgre_tap_exit_batch_net+0x80/0x80 [ 477.066161][ C1] ops_init+0x579/0x7d0 [ 477.070338][ C1] setup_net+0x289/0x1330 [ 477.074679][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 477.080499][ C1] copy_net_ns+0x619/0xbe0 [ 477.084989][ C1] create_new_namespaces+0xc42/0x13c0 [ 477.090383][ C1] copy_namespaces+0x3ec/0x590 [ 477.095155][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 477.100736][ C1] copy_process+0x3fec/0x96c0 [ 477.105492][ C1] ? __list_add_valid+0xb8/0x420 [ 477.110440][ C1] ? kmsan_get_metadata+0x116/0x180 [ 477.115668][ C1] _do_fork+0x2fa/0x11b0 [ 477.119923][ C1] ? kmsan_get_metadata+0x116/0x180 [ 477.125138][ C1] __se_sys_clone+0x3d9/0x420 [ 477.129842][ C1] __x64_sys_clone+0x62/0x80 [ 477.134446][ C1] do_syscall_64+0xad/0x160 [ 477.136643][ T12] ath6kl: Failed to read usb control message: -110 [ 477.138953][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.138968][ C1] RIP: 0033:0x45d5b9 [ 477.138975][ C1] Code: Bad RIP value. [ 477.138985][ C1] RSP: 002b:00007fc5eefb3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 477.139031][ C1] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 477.145853][ T12] ath6kl: Unable to read the bmi data from the device: -110 [ 477.151381][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004412c500 [ 477.151393][ C1] RBP: 000000000118d0d0 R08: 0000000000000000 R09: 0000000000000000 [ 477.151403][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118d08c [ 477.151415][ C1] R13: 000000000169fb6f R14: 00007fc5eefb49c0 R15: 000000000118d08c [ 477.151434][ C1] [ 477.151440][ C1] Uninit was stored to memory at: [ 477.151462][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 477.151479][ C1] __msan_chain_origin+0x50/0x90 [ 477.151496][ C1] geneve_changelink+0xdb2/0x10f0 [ 477.151514][ C1] rtnl_newlink+0x3384/0x3ed0 [ 477.151531][ C1] rtnetlink_rcv_msg+0x142b/0x18c0 [ 477.151646][ C1] netlink_rcv_skb+0x6d7/0x7e0 [ 477.151783][ C1] rtnetlink_rcv+0x50/0x60 [ 477.155942][ T12] ath6kl: Unable to recv target info: -110 [ 477.159708][ C1] netlink_unicast+0x11c8/0x1490 [ 477.159726][ C1] netlink_sendmsg+0x173a/0x1840 [ 477.159742][ C1] ____sys_sendmsg+0xc82/0x1240 [ 477.159757][ C1] __sys_sendmsg+0x6d1/0x840 [ 477.159772][ C1] __se_sys_sendmsg+0x97/0xb0 [ 477.159788][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 477.159805][ C1] do_syscall_64+0xad/0x160 [ 477.160025][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.302218][ C1] [ 477.304544][ C1] Local variable ----df@geneve_changelink created at: [ 477.311310][ C1] geneve_changelink+0x101/0x10f0 [ 477.316335][ C1] geneve_changelink+0x101/0x10f0 [ 477.321348][ C1] ===================================================== [ 477.328276][ C1] Disabling lock debugging due to kernel taint [ 477.334424][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 477.341016][ C1] CPU: 1 PID: 9714 Comm: syz-executor.1 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 477.350993][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.353595][ T12] ath6kl: Failed to init ath6kl core: -110 [ 477.361056][ C1] Call Trace: [ 477.361067][ C1] [ 477.361092][ C1] dump_stack+0x21c/0x280 [ 477.361120][ C1] panic+0x4d7/0xef7 [ 477.361155][ C1] ? add_taint+0x17c/0x210 [ 477.361180][ C1] kmsan_report+0x1df/0x1e0 [ 477.361205][ C1] __msan_warning+0x58/0xa0 [ 477.361226][ C1] geneve_xmit+0x300c/0x3200 [ 477.361245][ C1] ? kmsan_report+0x1c0/0x1e0 [ 477.361270][ C1] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 477.361303][ C1] ? geneve_stop+0x400/0x400 [ 477.361324][ C1] xmit_one+0x3cf/0x750 [ 477.361346][ C1] ? kmsan_get_metadata+0x116/0x180 [ 477.361371][ C1] __dev_queue_xmit+0x3aad/0x4470 [ 477.361392][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 477.361431][ C1] dev_queue_xmit+0x4b/0x60 [ 477.361455][ C1] ip6_finish_output2+0x23f1/0x2a70 [ 477.361492][ C1] ? kmsan_get_metadata+0x116/0x180 [ 477.361516][ C1] __ip6_finish_output+0x9c0/0xa90 [ 477.361574][ C1] ip6_finish_output+0x14b/0x4b0 [ 477.459359][ C1] ip6_output+0x68d/0x7f0 [ 477.463712][ C1] ? ip6_output+0x7f0/0x7f0 [ 477.467634][ T12] ath6kl_usb: probe of 1-1:0.0 failed with error -110 [ 477.468222][ C1] ? ac6_seq_show+0x200/0x200 [ 477.468242][ C1] mld_sendpack+0xf6c/0x1470 [ 477.468278][ C1] ? mld_send_report+0x510/0x510 [ 477.468308][ C1] mld_ifc_timer_expire+0x13b8/0x1b50 [ 477.468349][ C1] ? mld_gq_timer_expire+0x180/0x180 [ 477.468402][ C1] call_timer_fn+0x226/0x550 [ 477.504506][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 477.510353][ C1] expire_timers+0x4fc/0x780 [ 477.514960][ C1] ? mld_gq_timer_expire+0x180/0x180 [ 477.520262][ C1] __run_timers+0xaf4/0xd30 [ 477.524792][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 477.530955][ C1] ? irqtime_account_irq+0xcb/0x2d0 [ 477.536167][ C1] ? kmsan_get_metadata+0x116/0x180 [ 477.541379][ C1] run_timer_softirq+0x2d/0x50 [ 477.546164][ C1] ? migrate_timer_list+0x780/0x780 [ 477.551367][ C1] __do_softirq+0x2ea/0x7f5 [ 477.555896][ C1] asm_call_on_stack+0xf/0x20 [ 477.560562][ C1] [ 477.563510][ C1] do_softirq_own_stack+0x7c/0xa0 [ 477.568545][ C1] __irq_exit_rcu+0x226/0x270 [ 477.573241][ C1] irq_exit_rcu+0xe/0x10 [ 477.577494][ C1] sysvec_apic_timer_interrupt+0x107/0x130 [ 477.583313][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 477.589311][ C1] RIP: 0010:kmsan_internal_is_vmalloc_addr+0x26/0x30 [ 477.595992][ C1] Code: 31 c0 5d c3 55 48 89 e5 48 89 f8 48 c1 e8 28 3d c8 ff ff 00 0f 97 c1 48 b8 ff ff ff ff ff d0 ff ff 48 39 c7 0f 92 c0 20 c8 5d 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 48 81 ff ff ff ff 9f 0f [ 477.615600][ C1] RSP: 0018:ffff88801f8fb180 EFLAGS: 00000246 [ 477.621669][ C1] RAX: ffffd0ffffffff00 RBX: ffffffff920c7b20 RCX: 0000000000000001 [ 477.625585][ T12] usb 1-1: USB disconnect, device number 18 [ 477.629649][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff920c7b20 [ 477.629662][ C1] RBP: ffff88801f8fb1a0 R08: ffffffff829b11a3 R09: ffff88812fffa000 [ 477.629672][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 477.629683][ C1] R13: ffff888126e909d8 R14: 0000000000000000 R15: 0000000000000000 [ 477.629717][ C1] ? internal_create_group+0xb23/0x1de0 [ 477.629744][ C1] ? kmsan_get_metadata+0x29/0x180 [ 477.629765][ C1] kmsan_get_shadow_origin_ptr+0x6c/0xb0 [ 477.629789][ C1] __msan_metadata_ptr_for_load_8+0x10/0x20 [ 477.629810][ C1] internal_create_group+0xb65/0x1de0 [ 477.629850][ C1] sysfs_create_groups+0xee/0x2d0 [ 477.629881][ C1] device_add+0x13ee/0x40d0 [ 477.629929][ C1] ? device_add+0x1ac1/0x40d0 [ 477.709288][ C1] netdev_register_kobject+0x32b/0x760 [ 477.714768][ C1] register_netdevice+0x2a7c/0x37d0 [ 477.719996][ C1] __ip_tunnel_create+0x522/0x760 [ 477.725046][ C1] ip_tunnel_init_net+0x327/0xdf0 [ 477.730095][ C1] ipgre_init_net+0x7f/0x90 [ 477.734611][ C1] ? ipgre_tap_exit_batch_net+0x80/0x80 [ 477.740168][ C1] ops_init+0x579/0x7d0 [ 477.744345][ C1] setup_net+0x289/0x1330 [ 477.748682][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 477.754502][ C1] copy_net_ns+0x619/0xbe0 [ 477.758939][ C1] create_new_namespaces+0xc42/0x13c0 [ 477.764335][ C1] copy_namespaces+0x3ec/0x590 [ 477.769107][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 477.774672][ C1] copy_process+0x3fec/0x96c0 [ 477.779369][ C1] ? __list_add_valid+0xb8/0x420 [ 477.784317][ C1] ? kmsan_get_metadata+0x116/0x180 [ 477.789551][ C1] _do_fork+0x2fa/0x11b0 [ 477.793809][ C1] ? kmsan_get_metadata+0x116/0x180 [ 477.799031][ C1] __se_sys_clone+0x3d9/0x420 [ 477.803737][ C1] __x64_sys_clone+0x62/0x80 [ 477.808347][ C1] do_syscall_64+0xad/0x160 [ 477.812872][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.818880][ C1] RIP: 0033:0x45d5b9 [ 477.822766][ C1] Code: Bad RIP value. [ 477.826836][ C1] RSP: 002b:00007fc5eefb3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 477.835253][ C1] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 477.843255][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004412c500 [ 477.851233][ C1] RBP: 000000000118d0d0 R08: 0000000000000000 R09: 0000000000000000 [ 477.859213][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118d08c [ 477.867190][ C1] R13: 000000000169fb6f R14: 00007fc5eefb49c0 R15: 000000000118d08c [ 477.876002][ C1] ------------[ cut here ]------------ [ 477.881529][ C1] kernel BUG at mm/kmsan/kmsan.h:87! [ 477.886879][ C1] invalid opcode: 0000 [#1] SMP [ 477.891756][ C1] CPU: 1 PID: 9714 Comm: syz-executor.1 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 477.901699][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.911830][ C1] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 477.918613][ C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 18 03 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 e2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 477.938446][ C1] RSP: 0018:ffff88812fd04ee8 EFLAGS: 00010046 [ 477.944492][ C1] RAX: 0000000000000002 RBX: 000000000428010e RCX: 000000000428010e [ 477.952441][ C1] RDX: 0000000000000000 RSI: 00000000000004a0 RDI: ffff88812fd04fcc [ 477.960400][ C1] RBP: ffff88812fd04f90 R08: ffffea000000000f R09: ffff88812fffa000 [ 477.968351][ C1] R10: 0000000000000002 R11: ffff888126e90000 R12: 0000000000000000 [ 477.976299][ C1] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 477.984259][ C1] FS: 00007fc5eefb4700(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 477.993171][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 477.999739][ C1] CR2: 0000000000400200 CR3: 0000000021d90000 CR4: 00000000001406e0 [ 478.007698][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 478.015656][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 478.023607][ C1] Call Trace: [ 478.026884][ C1] [ 478.029725][ C1] kmsan_check_memory+0xd/0x10 [ 478.034466][ C1] iowrite8+0x99/0x300 [ 478.038590][ C1] pvpanic_panic_notify+0xb7/0xe0 [ 478.043593][ C1] ? pvpanic_mmio_remove+0x60/0x60 [ 478.048683][ C1] atomic_notifier_call_chain+0x123/0x290 [ 478.054393][ C1] panic+0x560/0xef7 [ 478.058286][ C1] ? add_taint+0x17c/0x210 [ 478.062739][ C1] kmsan_report+0x1df/0x1e0 [ 478.067228][ C1] __msan_warning+0x58/0xa0 [ 478.071712][ C1] geneve_xmit+0x300c/0x3200 [ 478.076285][ C1] ? kmsan_report+0x1c0/0x1e0 [ 478.080943][ C1] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 478.086995][ C1] ? geneve_stop+0x400/0x400 [ 478.091563][ C1] xmit_one+0x3cf/0x750 [ 478.095699][ C1] ? kmsan_get_metadata+0x116/0x180 [ 478.100918][ C1] __dev_queue_xmit+0x3aad/0x4470 [ 478.105918][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 478.111189][ C1] dev_queue_xmit+0x4b/0x60 [ 478.115682][ C1] ip6_finish_output2+0x23f1/0x2a70 [ 478.120891][ C1] ? kmsan_get_metadata+0x116/0x180 [ 478.126065][ C1] __ip6_finish_output+0x9c0/0xa90 [ 478.131171][ C1] ip6_finish_output+0x14b/0x4b0 [ 478.136089][ C1] ip6_output+0x68d/0x7f0 [ 478.140399][ C1] ? ip6_output+0x7f0/0x7f0 [ 478.144899][ C1] ? ac6_seq_show+0x200/0x200 [ 478.149552][ C1] mld_sendpack+0xf6c/0x1470 [ 478.154136][ C1] ? mld_send_report+0x510/0x510 [ 478.159070][ C1] mld_ifc_timer_expire+0x13b8/0x1b50 [ 478.164424][ C1] ? mld_gq_timer_expire+0x180/0x180 [ 478.169684][ C1] call_timer_fn+0x226/0x550 [ 478.174251][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 478.180033][ C1] expire_timers+0x4fc/0x780 [ 478.184614][ C1] ? mld_gq_timer_expire+0x180/0x180 [ 478.189886][ C1] __run_timers+0xaf4/0xd30 [ 478.194369][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 478.200494][ C1] ? irqtime_account_irq+0xcb/0x2d0 [ 478.205666][ C1] ? kmsan_get_metadata+0x116/0x180 [ 478.210852][ C1] run_timer_softirq+0x2d/0x50 [ 478.215604][ C1] ? migrate_timer_list+0x780/0x780 [ 478.220779][ C1] __do_softirq+0x2ea/0x7f5 [ 478.225262][ C1] asm_call_on_stack+0xf/0x20 [ 478.229909][ C1] [ 478.232829][ C1] do_softirq_own_stack+0x7c/0xa0 [ 478.237840][ C1] __irq_exit_rcu+0x226/0x270 [ 478.242493][ C1] irq_exit_rcu+0xe/0x10 [ 478.246725][ C1] sysvec_apic_timer_interrupt+0x107/0x130 [ 478.252507][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 478.258462][ C1] RIP: 0010:kmsan_internal_is_vmalloc_addr+0x26/0x30 [ 478.265109][ C1] Code: 31 c0 5d c3 55 48 89 e5 48 89 f8 48 c1 e8 28 3d c8 ff ff 00 0f 97 c1 48 b8 ff ff ff ff ff d0 ff ff 48 39 c7 0f 92 c0 20 c8 5d 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 48 81 ff ff ff ff 9f 0f [ 478.284699][ C1] RSP: 0018:ffff88801f8fb180 EFLAGS: 00000246 [ 478.290750][ C1] RAX: ffffd0ffffffff00 RBX: ffffffff920c7b20 RCX: 0000000000000001 [ 478.298695][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff920c7b20 [ 478.306653][ C1] RBP: ffff88801f8fb1a0 R08: ffffffff829b11a3 R09: ffff88812fffa000 [ 478.314602][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 478.322547][ C1] R13: ffff888126e909d8 R14: 0000000000000000 R15: 0000000000000000 [ 478.330515][ C1] ? internal_create_group+0xb23/0x1de0 [ 478.336049][ C1] ? kmsan_get_metadata+0x29/0x180 [ 478.341135][ C1] kmsan_get_shadow_origin_ptr+0x6c/0xb0 [ 478.346749][ C1] __msan_metadata_ptr_for_load_8+0x10/0x20 [ 478.352618][ C1] internal_create_group+0xb65/0x1de0 [ 478.357988][ C1] sysfs_create_groups+0xee/0x2d0 [ 478.362992][ C1] device_add+0x13ee/0x40d0 [ 478.367477][ C1] ? device_add+0x1ac1/0x40d0 [ 478.372238][ C1] netdev_register_kobject+0x32b/0x760 [ 478.377676][ C1] register_netdevice+0x2a7c/0x37d0 [ 478.382858][ C1] __ip_tunnel_create+0x522/0x760 [ 478.387863][ C1] ip_tunnel_init_net+0x327/0xdf0 [ 478.392872][ C1] ipgre_init_net+0x7f/0x90 [ 478.397352][ C1] ? ipgre_tap_exit_batch_net+0x80/0x80 [ 478.402915][ C1] ops_init+0x579/0x7d0 [ 478.407053][ C1] setup_net+0x289/0x1330 [ 478.411359][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 478.417144][ C1] copy_net_ns+0x619/0xbe0 [ 478.421544][ C1] create_new_namespaces+0xc42/0x13c0 [ 478.426917][ C1] copy_namespaces+0x3ec/0x590 [ 478.431657][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 478.437191][ C1] copy_process+0x3fec/0x96c0 [ 478.441844][ C1] ? __list_add_valid+0xb8/0x420 [ 478.446755][ C1] ? kmsan_get_metadata+0x116/0x180 [ 478.451941][ C1] _do_fork+0x2fa/0x11b0 [ 478.456170][ C1] ? kmsan_get_metadata+0x116/0x180 [ 478.461349][ C1] __se_sys_clone+0x3d9/0x420 [ 478.466011][ C1] __x64_sys_clone+0x62/0x80 [ 478.470576][ C1] do_syscall_64+0xad/0x160 [ 478.475055][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 478.480931][ C1] RIP: 0033:0x45d5b9 [ 478.484800][ C1] Code: Bad RIP value. [ 478.488851][ C1] RSP: 002b:00007fc5eefb3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 478.497268][ C1] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 478.505240][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004412c500 [ 478.513191][ C1] RBP: 000000000118d0d0 R08: 0000000000000000 R09: 0000000000000000 [ 478.521140][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118d08c [ 478.529088][ C1] R13: 000000000169fb6f R14: 00007fc5eefb49c0 R15: 000000000118d08c [ 478.537039][ C1] Modules linked in: [ 478.540915][ C1] ---[ end trace 352b325ee52d726c ]--- [ 478.546355][ C1] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 478.552939][ C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 18 03 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 e2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 478.572538][ C1] RSP: 0018:ffff88812fd04ee8 EFLAGS: 00010046 [ 478.578581][ C1] RAX: 0000000000000002 RBX: 000000000428010e RCX: 000000000428010e [ 478.586546][ C1] RDX: 0000000000000000 RSI: 00000000000004a0 RDI: ffff88812fd04fcc [ 478.594505][ C1] RBP: ffff88812fd04f90 R08: ffffea000000000f R09: ffff88812fffa000 [ 478.602461][ C1] R10: 0000000000000002 R11: ffff888126e90000 R12: 0000000000000000 [ 478.610419][ C1] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 478.618368][ C1] FS: 00007fc5eefb4700(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 478.627271][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.633828][ C1] CR2: 0000000000400200 CR3: 0000000021d90000 CR4: 00000000001406e0 [ 478.641775][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 478.649741][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 478.657688][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 478.665596][ C1] Kernel Offset: disabled [ 478.669926][ C1] Rebooting in 86400 seconds..