[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.94' (ECDSA) to the list of known hosts. 2020/08/28 12:47:54 fuzzer started 2020/08/28 12:47:54 dialing manager at 10.128.0.26:40033 2020/08/28 12:47:55 syscalls: 3161 2020/08/28 12:47:55 code coverage: enabled 2020/08/28 12:47:55 comparison tracing: enabled 2020/08/28 12:47:55 extra coverage: enabled 2020/08/28 12:47:55 setuid sandbox: enabled 2020/08/28 12:47:55 namespace sandbox: enabled 2020/08/28 12:47:55 Android sandbox: /sys/fs/selinux/policy does not exist 2020/08/28 12:47:55 fault injection: enabled 2020/08/28 12:47:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/28 12:47:55 net packet injection: enabled 2020/08/28 12:47:55 net device setup: enabled 2020/08/28 12:47:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/28 12:47:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/28 12:47:55 USB emulation: enabled 2020/08/28 12:47:55 hci packet injection: enabled 12:52:31 executing program 0: syzkaller login: [ 424.263731][ T8508] IPVS: ftp: loaded support on port[0] = 21 [ 424.610049][ T8508] chnl_net:caif_netlink_parms(): no params data found [ 424.771296][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.778695][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.788688][ T8508] device bridge_slave_0 entered promiscuous mode [ 424.803384][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.810630][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.820227][ T8508] device bridge_slave_1 entered promiscuous mode [ 424.870803][ T8508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.888576][ T8508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.937871][ T8508] team0: Port device team_slave_0 added [ 424.951117][ T8508] team0: Port device team_slave_1 added [ 424.993951][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.001057][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.027296][ T8508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.043728][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.050813][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.077261][ T8508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.144103][ T8508] device hsr_slave_0 entered promiscuous mode [ 425.154283][ T8508] device hsr_slave_1 entered promiscuous mode [ 425.449701][ T8508] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 425.486535][ T8508] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 425.521833][ T8508] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 425.542111][ T8508] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 425.856459][ T8508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.888864][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 425.898431][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 425.919883][ T8508] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.941595][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 425.951764][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.962415][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.969859][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.028703][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 426.038911][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 426.048884][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 426.058429][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.065844][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.075132][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 426.086078][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 426.097088][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 426.107738][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 426.121778][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 426.122954][ T3228] Bluetooth: hci0: command 0x0409 tx timeout [ 426.153638][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 426.164264][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 426.201558][ T8508] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 426.212480][ T8508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 426.231953][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 426.241809][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 426.252517][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 426.262287][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 426.280621][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 426.339455][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 426.347310][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 426.377078][ T8508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.438105][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 426.448302][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 426.510985][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 426.520796][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 426.544693][ T8508] device veth0_vlan entered promiscuous mode [ 426.555137][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 426.564349][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 426.594192][ T8508] device veth1_vlan entered promiscuous mode [ 426.675404][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 426.685471][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 426.706756][ T8508] device veth0_macvtap entered promiscuous mode [ 426.731721][ T8508] device veth1_macvtap entered promiscuous mode [ 426.794981][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.815813][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.824137][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 426.834212][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 426.843841][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 426.854053][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 426.864402][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 426.874486][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:52:36 executing program 0: 12:52:36 executing program 0: 12:52:36 executing program 0: 12:52:36 executing program 0: 12:52:37 executing program 0: [ 428.195299][ T8725] Bluetooth: hci0: command 0x041b tx timeout 12:52:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001280)=[{{&(0x7f0000000200)={0xa, 0x4ea3, 0x3, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="180000001000000029000000360000000020000000000000140000e8ff000000290000003400"/48], 0x30}}], 0x1, 0x800) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000001c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$capi20(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x5e8a, 0x79, 0x80, 0x80e7, 0x20000}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f00000005c0)={0x0, 0x3, 0x6}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000980)={0x1e8, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7d71}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc32}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x53}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4a, @local, 0xfffffe00}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9f17}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000540)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2cf}, {&(0x7f00000002c0)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000880)=""/203, 0x97}}], 0x4000000000003b4, 0x6021, &(0x7f0000003700)={r2, r3+60000000}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) sendmsg$xdp(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, 0x0, r8, 0x25}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)="9264cc28874ec1def5e7be2e8c02dab3b576f2f5da52dc72b0bdce29464f288ebc4f850449d813d72e96795aa81a7f6e341dc5286b862742860a979114300f425e40035f063cef787b350d44e341985b5c1f91231d", 0x55}], 0x1, 0x0, 0x0, 0x4000}, 0x40004) 12:52:37 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa6, 0x76, 0x5a, 0x8, 0x1690, 0x710, 0xc056, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xac, 0xc1, 0xa2, 0x0, [], [{{0x7, 0x5, 0x81, 0x2, 0x200}}]}}]}}]}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @multicast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x1) [ 429.143636][ T8725] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 429.394751][ T8725] usb 1-1: Using ep0 maxpacket: 8 [ 429.523085][ T8725] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.533505][ T8725] usb 1-1: New USB device found, idVendor=1690, idProduct=0710, bcdDevice=c0.56 [ 429.542841][ T8725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.586353][ T8725] usb 1-1: config 0 descriptor?? [ 429.644372][ T8725] usb 1-1: could not send command 0x1, error=-2 [ 429.650736][ T8725] usb 1-1: could not initialize adapter [ 429.662767][ C0] usb 1-1: RX USB error -2. [ 429.667696][ C0] usb 1-1: error -1 when submitting rx urb [ 429.677989][ T8725] ar5523: probe of 1-1:0.0 failed with error -2 [ 429.839097][ T17] usb 1-1: USB disconnect, device number 2 [ 430.272765][ T8725] Bluetooth: hci0: command 0x040f tx timeout [ 430.632815][ T3493] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 430.873383][ T3493] usb 1-1: Using ep0 maxpacket: 8 [ 430.994522][ T3493] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.004933][ T3493] usb 1-1: New USB device found, idVendor=1690, idProduct=0710, bcdDevice=c0.56 [ 431.015262][ T3493] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.070700][ T3493] usb 1-1: config 0 descriptor?? [ 431.118428][ T3493] usb 1-1: could not send command 0x1, error=-2 [ 431.125351][ T3493] usb 1-1: could not initialize adapter [ 431.132653][ C1] usb 1-1: RX USB error -2. [ 431.137500][ C1] usb 1-1: error -1 when submitting rx urb [ 431.148324][ T3493] ar5523: probe of 1-1:0.0 failed with error -2 [ 431.327063][ T17] usb 1-1: USB disconnect, device number 3 12:52:40 executing program 0: ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x14180, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0b0000feffffffffffffff"], 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000080)) clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) 12:52:40 executing program 0: ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x2c, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) socket$inet6(0xa, 0xf, 0x1) 12:52:40 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$6lowpan_enable(r2, &(0x7f0000000240)='1', 0x1) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r3}) recvfrom$inet6(r2, &(0x7f0000000280)=""/83, 0x53, 0x12001, &(0x7f0000000300)={0xa, 0x4e20, 0x7f, @dev={0xfe, 0x80, [], 0x39}, 0x2}, 0x1c) sendmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000080), 0x10, &(0x7f00000001c0)={&(0x7f0000000100)=@can={{0x4, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "512cc2d5b5dff84a"}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 12:52:41 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x610080, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$l2tp6(0xa, 0x2, 0x73) write(r1, &(0x7f0000000140)="088c20e7ff2e1dc491a91cb72193170926432b0bd1df68d053a85426f9ec5ab4f3358fcd6d7d84082e6071d30eb1e643d6d9506a4127e0f59d852c54750f9b457944a05430b2e7241f1b0c0159fc607e64e4d7f0e16d79e9d7a2115c04b79eecb0a571be134c7688cb566811b04d0a30efcddd16b02ddde85b7c6aa09d686af79119d77d2df5a191c2cb15c4be646da30b5fa2082305c32aa9d906734eb58f82c2759cf9bef6558f9cb9d7d2a1749f8f289868b05597dd6b65a61269bac1065c502d9f0b585d0f2f42cf184da071b903", 0xd0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x40, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x1411, 0x104, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000380)) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f00000003c0)={0x6, "994183aefe1182f388d658fdb20039b84173bc372a55547b0ec3597d6508f542eac8aa04e54aac91aabf396b3b6b2af5c4b8f5b68aed561e797a5dacd2318cb6"}) accept4$alg(r0, 0x0, 0x0, 0x80000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcsa\x00', 0x381001, 0x0) ioctl$CHAR_RAW_REPORTZONE(r3, 0xc0101282, &(0x7f0000000480)={0xfff, 0x8, 0x0, [{0x607b, 0x5, 0x3, 0x9, 0x20, 0x1, 0x2}, {0x2, 0xc5f, 0x0, 0x4, 0x6, 0x6, 0x3f}, {0xfffffffffffffff8, 0x400, 0x6, 0x56, 0x8, 0x6, 0x6}, {0x8000, 0x5272, 0xa111, 0xff, 0x5, 0x0, 0x4}, {0xd95b, 0x8, 0x9, 0xfd, 0x3, 0x1, 0x4}, {0x2, 0x1, 0x6, 0x81, 0x80, 0x3f, 0x1}, {0x7, 0x7fffffff, 0x4, 0x80, 0xdf, 0x0, 0x10}, {0xaf, 0x1, 0x4, 0x1f, 0x6, 0x1, 0x1}]}) fchmod(r2, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000006c0)={[0x9, 0x1, 0x8, 0x4, 0x8000, 0x2, 0x5, 0x5, 0x7, 0x28aa, 0x5, 0xfffffffffffff2cc, 0x1, 0x4, 0x4, 0x6], 0x4, 0x40002}) syz_genetlink_get_family_id$nbd(&(0x7f0000000780)='nbd\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000007c0)={0x2, [0x0, 0x0]}) msgget$private(0x0, 0x10) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000800)=""/162) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000008c0)={0x7fff, 0x2, 0x4, 0xe000, 0x8157200, {0x77359400}, {0x4, 0xc, 0x3, 0xf9, 0x8, 0x1, "c4fb2ced"}, 0x8, 0x2, @fd=r2, 0x8, 0x0, r0}) 12:52:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff009b66299667b70536342623b372d808efa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6a9b4a8dee825286b31a260e60482bb0b4179b314a", 0xff7c}], 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setrlimit(0x2, &(0x7f0000000000)={0x8, 0x81}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 432.356995][ T17] Bluetooth: hci0: command 0x0419 tx timeout [ 432.475245][ T8788] mmap: syz-executor.0 (8788): VmData 37658624 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. 12:52:41 executing program 0: syz_usb_connect(0x2, 0x6d9, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xee, 0xcb, 0x4c, 0x8, 0xb05, 0x1706, 0x165a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c7, 0x4, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x30, 0x9, 0x0, 0x45, 0x3b, 0x64, 0x7, [@generic={0xf1, 0xf, "5ceaa4b5829dc776d418a636c63d59208e0b04329ac6cf9583564f2fc86533aa8429b25d608b24b880138479fea35bc065d6316eb1e77de2d41d96561623e1fc9e195e0ae7fa9c9de14cacda2e30c62ccb5cf6d2c2d45d322e4ab7a37f948274454a1c26ffad5d2c9ce7e0198f6ab35a9a3fdd0e682ef7952ef11247d79f68ad3e37930120cd1995b5043d18b36507f8c6d0115c9dd44d64d6c9f73447ff938bf2d61ac21acf8d450b03e43f94eb41cb86bb12756fa806ed4a56ed047818ac2492412b8494417e60a264fe122c6dbd3d8868c6b46514caacc7c9bf1dccf27be35193a3bc53a0c1a9b63f83f1a5b9c5"}, @generic={0x4f, 0x23, "4a7cb390df44e10b91cc35df5a0b306a2be6e5ba319112e4a42608d1d2022dcdc03838e2034dee0005e9a9badb86c26f8c9f3c6c8a86017e8d73e4f7399dda09437f50eeba6a1eb7667f91881f"}]}}, {{0x9, 0x4, 0xd, 0x9, 0xb, 0xce, 0xa5, 0xa9, 0x1, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x40, 0x1d, 0x5}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "56e6"}, {0x5, 0x24, 0x0, 0xa70}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x6, 0x1}, {0x6, 0x24, 0x1a, 0x8001, 0x20}, [@acm={0x4}, @mdlm_detail={0x82, 0x24, 0x13, 0x4e, "fe9948dd4d2a0273165213bf06ccc2620689f7171eef21ed40f5ecc3769c1520c28914a01172ccf37d0c65385a76a6fa9c9f367fd624e957daca2f5168b269d5737a9912c93c57dc56aa6f5caa099cf32aa196907c82dc51e5199a4d0d5beb34b20df9291eb6c2ddaadd81106a619e558ef9bc758df2149ef85df521d0a3"}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0xf6, 0x9, 0x40}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8a}]}], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0xff, 0xff, 0x3f}}, {{0x9, 0x5, 0x3, 0x1, 0x40, 0x9, 0x1}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0x80, 0x57, 0x7}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x1, 0xfd, 0x5}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x7, 0xaf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x20, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7}]}}, {{0x9, 0x5, 0x2, 0x0, 0x1ff, 0xff, 0x3f, 0x6, [@generic={0x25, 0x9, "380f047f4a609aff8ba8752808ae89081ddf2dd7d6f5375b9bba88a25cc9fa85138487"}, @generic={0xa7, 0x21, "a6e4ff3f9bdfd422602b0de2ac1e27cf6135051ac777505484af1c1a243e48fd39874b6741d4e19b744fd023163b9086824359419652fe53a9dc7a4f45338c355ec1675563abd0371b8f64fa24b9fbeaab5653d3b552b1bf2ecd52d98e31feeadeae524ec6b3c85caed4616a59092681f2b0240da2106dbf7aaf45323bb0e9f2c0edae835f2aadb75904d478abf759d452964ae4f3fad241b138153d8f0d31fe67f51abff7"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x400, 0x4, 0x81, 0x6}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0xcd, 0x20, 0x2, [@generic={0x78, 0x6, "c5477224039346cf6d969c85e7b147f02f656a13bccd05f06756625a8d31b07ecd7f564ddd86afb54835fb5d4aaee9a50711625c0700f1b01227d2eaaf813c286bd0d5e5a0e554623abf9e848cbb8b6eccc5ba37e5be76f38b7b6bcb3545e0e6f2732b39555433e3f80cc3d0db2204edb7206d6bceb3"}]}}, {{0x9, 0x5, 0x7, 0x14, 0x10, 0x1, 0xfb, 0x3}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x9, 0x13, 0x8}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x80, 0x33, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x2}]}}]}}, {{0x9, 0x4, 0x96, 0x6, 0x8, 0x7a, 0xdd, 0x5a, 0x3f, [], [{{0x9, 0x5, 0x3, 0x0, 0x20, 0x9, 0x0, 0x9}}, {{0x9, 0x5, 0xc, 0xe, 0x200, 0x2, 0x7, 0x3b}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x3, 0x80, 0x40, [@generic={0x78, 0x2, "02471e800ee5747b02442d11dd9852735972673c87900dfcfc05d11421abfa926f298305ba64fd83238f5d46ba72aa54e2e3942cf88af0063075c3d7c2446c5e7df6d9129107954676dfc3b9e70e74cf1d1d010450b47271db3c039a06a82a6a0180c9a90f76b6a6a9198db1e2aafb9a283e8cc9a4fb"}, @generic={0x51, 0xe, "4d6c0242606a0de775e5e0d9ee685f709fdc6120ab4a3571adfc5c265d3a5cbcb2f4ab64c58040205661dae97444415b06e6d42c0bca162eb3911b82e2219e0a9647f4223540d2ec020f29a116cc1d"}]}}, {{0x9, 0x5, 0x4, 0x1d, 0x20, 0x2, 0x1, 0xbf}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x3, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x4}]}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x80, 0x0, 0x9d}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x8, 0xed, 0x4}}, {{0x9, 0x5, 0x9, 0xc, 0x200, 0x7, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x2}, @generic={0x1f, 0x6, "5246ed468a7dce8e101397d08ca8630c50a3de3fb1fe6185eaf308e22c"}]}}]}}, {{0x9, 0x4, 0x5, 0x67, 0x5, 0xb3, 0x12, 0x64, 0xd5, [@hid_hid={0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0xa5e}}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "2745f84f"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x8, 0x3}, [@country_functional={0x6, 0x24, 0x7, 0x20, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x5}]}], [{{0x9, 0x5, 0x80, 0x0, 0x20, 0x40, 0xeb, 0x20, [@generic={0xb, 0xa2c5ee1df8a7a212, "d731e89629f933b090"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x7, 0x6}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x1, 0x8, 0xff}}, {{0x9, 0x5, 0x3, 0x0, 0x1c7, 0x0, 0x6, 0x0, [@generic={0xeb, 0x2, "9feb871500d554fe4cecac1218e785fe193f48543de5e7dc686206b49c1759e267f298ca18a1262a08ec084f2141c69b92a06dcc7c031f91ca58c203f3c3593343d96254b17a041104a618faed4b4e2df717aa4130838b3af417313f3853576c61b85f04bf5d887b770c938f563a23fb15b1283ca6a346dad654a325ccb91e9b4cc94971279452506e2b3634f357fc069e607e4728db9a7c756f0e32c4587417eaac672ddef99b89cc2a0397a7d1ac2fec4e080770dc113f02258930d195b610054ffc79cb2f690cb709a937dbcfc48e052575fdf8f10baee0f8d6a8b1bf9a7f9e0ed31c497dbc01df"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x9, 0x79, 0x4c, [@generic={0x4f, 0x3, "54de6e29a995df6660d32a377febeb383dd5e43fc1fe9d64ba06991ecb08186ca527892b3422d95f605bc5f020a760bcf3c64318c1c414b3b980099c47391ccddc9520509b3cf7d3a015b9afcb"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf9, 0x5}]}}]}}]}}]}}, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvme-fabrics\x00', 0x501000, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xe1c0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000002c0)=r4) [ 432.982757][ T17] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 433.362978][ T17] usb 1-1: config 0 has an invalid interface number: 48 but max is 3 [ 433.371323][ T17] usb 1-1: config 0 has an invalid interface number: 13 but max is 3 [ 433.379874][ T17] usb 1-1: config 0 has an invalid interface number: 150 but max is 3 [ 433.388391][ T17] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 433.397709][ T17] usb 1-1: config 0 has an invalid interface number: 5 but max is 3 [ 433.405997][ T17] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 433.415017][ T17] usb 1-1: config 0 has no interface number 0 [ 433.421182][ T17] usb 1-1: config 0 has no interface number 1 [ 433.427611][ T17] usb 1-1: config 0 has no interface number 2 [ 433.433993][ T17] usb 1-1: config 0 has no interface number 3 [ 433.440190][ T17] usb 1-1: config 0 interface 13 altsetting 9 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 433.451879][ T17] usb 1-1: config 0 interface 13 altsetting 9 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 433.463487][ T17] usb 1-1: config 0 interface 13 altsetting 9 endpoint 0x2 has invalid maxpacket 511, setting to 64 [ 433.477248][ T17] usb 1-1: config 0 interface 13 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 433.488265][ T17] usb 1-1: config 0 interface 13 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 433.499319][ T17] usb 1-1: config 0 interface 13 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 433.510281][ T17] usb 1-1: config 0 interface 13 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 433.521162][ T17] usb 1-1: config 0 interface 150 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 433.532231][ T17] usb 1-1: config 0 interface 150 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 433.543315][ T17] usb 1-1: config 0 interface 150 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 433.554689][ T17] usb 1-1: config 0 interface 150 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 433.565639][ T17] usb 1-1: config 0 interface 150 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 433.576703][ T17] usb 1-1: config 0 interface 5 altsetting 103 has an invalid endpoint with address 0x80, skipping [ 433.587729][ T17] usb 1-1: config 0 interface 5 altsetting 103 endpoint 0xD has invalid maxpacket 1024, setting to 1023 [ 433.599357][ T17] usb 1-1: config 0 interface 5 altsetting 103 has a duplicate endpoint with address 0x5, skipping [ 433.610687][ T17] usb 1-1: config 0 interface 5 altsetting 103 has a duplicate endpoint with address 0x3, skipping [ 433.621714][ T17] usb 1-1: config 0 interface 5 altsetting 103 has a duplicate endpoint with address 0x6, skipping [ 433.632853][ T17] usb 1-1: config 0 interface 48 has no altsetting 0 [ 433.639640][ T17] usb 1-1: config 0 interface 13 has no altsetting 0 [ 433.646682][ T17] usb 1-1: config 0 interface 150 has no altsetting 0 [ 433.653785][ T17] usb 1-1: config 0 interface 5 has no altsetting 0 [ 433.854028][ T17] usb 1-1: New USB device found, idVendor=0b05, idProduct=1706, bcdDevice=16.5a [ 433.863998][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.872060][ T17] usb 1-1: Product: syz [ 433.876599][ T17] usb 1-1: Manufacturer: syz [ 433.881341][ T17] usb 1-1: SerialNumber: syz [ 433.892939][ T17] usb 1-1: config 0 descriptor?? [ 434.060681][ T8805] IPVS: ftp: loaded support on port[0] = 21 [ 434.641081][ T8805] chnl_net:caif_netlink_parms(): no params data found [ 434.820477][ T8805] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.828018][ T8805] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.838282][ T8805] device bridge_slave_0 entered promiscuous mode [ 434.885199][ T8805] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.892711][ T8805] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.901219][ T8805] device bridge_slave_1 entered promiscuous mode [ 434.966705][ T8805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.986609][ T8805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.045191][ T8805] team0: Port device team_slave_0 added [ 435.059636][ T8805] team0: Port device team_slave_1 added [ 435.128712][ T17] usb 1-1: reset full-speed USB device number 4 using dummy_hcd [ 435.145469][ T8805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.153282][ T8805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.179536][ T8805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.199323][ T8805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.207658][ T8805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.234279][ T8805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.302090][ T8805] device hsr_slave_0 entered promiscuous mode [ 435.313113][ T8805] device hsr_slave_1 entered promiscuous mode [ 435.323486][ T8805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.331209][ T8805] Cannot create hsr debugfs directory [ 435.651368][ T8805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 435.669208][ T8805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 435.690126][ T8805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 435.726418][ T8805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 435.822883][ T17] usb 1-1: failed to restore interface 48 altsetting 9 (error=-71) [ 435.838295][ T17] ieee80211 phy5: rt2x00usb_vendor_request: Error - Vendor Request 0x09 failed for offset 0x0000 with error -19 [ 435.850651][ T17] ===================================================== [ 435.857728][ T17] BUG: KMSAN: uninit-value in rt2500usb_bbp_read+0x19f/0x7e0 [ 435.865108][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.8.0-rc5-syzkaller #0 [ 435.873255][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.883369][ T17] Workqueue: usb_hub_wq hub_event [ 435.888395][ T17] Call Trace: [ 435.891768][ T17] dump_stack+0x21c/0x280 [ 435.896168][ T17] kmsan_report+0xf7/0x1e0 [ 435.900611][ T17] __msan_warning+0x58/0xa0 [ 435.905135][ T17] rt2500usb_bbp_read+0x19f/0x7e0 [ 435.910185][ T17] rt2500usb_probe_hw+0x48f/0x2710 [ 435.915403][ T17] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 435.921317][ T17] ? rt2500usb_queue_init+0x200/0x200 [ 435.927177][ T17] rt2x00lib_probe_dev+0xc58/0x3620 [ 435.932394][ T17] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 435.938218][ T17] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 435.944376][ T17] ? kmsan_get_metadata+0x116/0x180 [ 435.949611][ T17] ? kmsan_get_metadata+0x116/0x180 [ 435.954826][ T17] rt2x00usb_probe+0x80a/0xfb0 [ 435.959615][ T17] rt2500usb_probe+0x50/0x60 [ 435.964326][ T17] ? rt2800_brightness_set+0x1090/0x1090 [ 435.970055][ T17] usb_probe_interface+0xece/0x1550 [ 435.975547][ T17] ? usb_register_driver+0x900/0x900 [ 435.980966][ T17] really_probe+0xf20/0x20b0 [ 435.985571][ T17] ? kmsan_get_metadata+0x116/0x180 [ 435.991570][ T17] driver_probe_device+0x293/0x390 [ 435.996878][ T17] __device_attach_driver+0x63f/0x830 [ 436.002270][ T17] bus_for_each_drv+0x2ca/0x3f0 [ 436.007263][ T17] ? coredump_store+0xf0/0xf0 [ 436.011960][ T17] __device_attach+0x4e2/0x7f0 [ 436.016751][ T17] device_initial_probe+0x4a/0x60 [ 436.021972][ T17] bus_probe_device+0x177/0x3d0 [ 436.026836][ T17] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 436.032651][ T17] device_add+0x3b0e/0x40d0 [ 436.037181][ T17] usb_set_configuration+0x380f/0x3f10 [ 436.042741][ T17] ? usb_set_configuration+0xb41/0x3f10 [ 436.048330][ T17] usb_generic_driver_probe+0x138/0x300 [ 436.054055][ T17] ? usb_choose_configuration+0xe70/0xe70 [ 436.059869][ T17] usb_probe_device+0x311/0x490 [ 436.064816][ T17] ? usb_register_device_driver+0x540/0x540 [ 436.070717][ T17] really_probe+0xf20/0x20b0 [ 436.075323][ T17] ? kmsan_get_metadata+0x116/0x180 [ 436.080530][ T17] driver_probe_device+0x293/0x390 [ 436.085652][ T17] __device_attach_driver+0x63f/0x830 [ 436.091033][ T17] bus_for_each_drv+0x2ca/0x3f0 [ 436.096031][ T17] ? coredump_store+0xf0/0xf0 [ 436.100737][ T17] __device_attach+0x4e2/0x7f0 [ 436.105549][ T17] device_initial_probe+0x4a/0x60 [ 436.110591][ T17] bus_probe_device+0x177/0x3d0 [ 436.115454][ T17] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 436.121352][ T17] device_add+0x3b0e/0x40d0 [ 436.125881][ T17] usb_new_device+0x1bd4/0x2a30 [ 436.130752][ T17] hub_event+0x5e7b/0x8a70 [ 436.135205][ T17] ? kmsan_get_metadata+0x116/0x180 [ 436.140406][ T17] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 436.146222][ T17] ? led_work+0x7c0/0x7c0 [ 436.150667][ T17] process_one_work+0x1688/0x2140 [ 436.155718][ T17] worker_thread+0x10bc/0x2730 [ 436.160493][ T17] ? kmsan_get_metadata+0x116/0x180 [ 436.165712][ T17] kthread+0x551/0x590 [ 436.169789][ T17] ? process_one_work+0x2140/0x2140 [ 436.175002][ T17] ? kthread_blkcg+0x110/0x110 [ 436.180492][ T17] ret_from_fork+0x1f/0x30 [ 436.185022][ T17] [ 436.187388][ T17] Local variable ----reg.i.i@rt2500usb_bbp_read created at: [ 436.194677][ T17] rt2500usb_bbp_read+0x98/0x7e0 [ 436.199725][ T17] rt2500usb_bbp_read+0x98/0x7e0 [ 436.204654][ T17] ===================================================== [ 436.211667][ T17] Disabling lock debugging due to kernel taint [ 436.217810][ T17] Kernel panic - not syncing: panic_on_warn set ... [ 436.224574][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 436.234101][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.244250][ T17] Workqueue: usb_hub_wq hub_event [ 436.249266][ T17] Call Trace: [ 436.252566][ T17] dump_stack+0x21c/0x280 [ 436.256969][ T17] panic+0x4d7/0xef7 [ 436.260882][ T17] ? add_taint+0x17c/0x210 [ 436.265309][ T17] kmsan_report+0x1df/0x1e0 [ 436.269818][ T17] __msan_warning+0x58/0xa0 [ 436.274764][ T17] rt2500usb_bbp_read+0x19f/0x7e0 [ 436.279798][ T17] rt2500usb_probe_hw+0x48f/0x2710 [ 436.284909][ T17] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 436.290724][ T17] ? rt2500usb_queue_init+0x200/0x200 [ 436.296188][ T17] rt2x00lib_probe_dev+0xc58/0x3620 [ 436.301392][ T17] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 436.307200][ T17] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 436.313373][ T17] ? kmsan_get_metadata+0x116/0x180 [ 436.318589][ T17] ? kmsan_get_metadata+0x116/0x180 [ 436.323811][ T17] rt2x00usb_probe+0x80a/0xfb0 [ 436.328695][ T17] rt2500usb_probe+0x50/0x60 [ 436.333296][ T17] ? rt2800_brightness_set+0x1090/0x1090 [ 436.339382][ T17] usb_probe_interface+0xece/0x1550 [ 436.344595][ T17] ? usb_register_driver+0x900/0x900 [ 436.349896][ T17] really_probe+0xf20/0x20b0 [ 436.354505][ T17] ? kmsan_get_metadata+0x116/0x180 [ 436.359719][ T17] driver_probe_device+0x293/0x390 [ 436.364844][ T17] __device_attach_driver+0x63f/0x830 [ 436.370235][ T17] bus_for_each_drv+0x2ca/0x3f0 [ 436.375092][ T17] ? coredump_store+0xf0/0xf0 [ 436.379783][ T17] __device_attach+0x4e2/0x7f0 [ 436.385004][ T17] device_initial_probe+0x4a/0x60 [ 436.390034][ T17] bus_probe_device+0x177/0x3d0 [ 436.394898][ T17] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 436.400890][ T17] device_add+0x3b0e/0x40d0 [ 436.405440][ T17] usb_set_configuration+0x380f/0x3f10 [ 436.410911][ T17] ? usb_set_configuration+0xb41/0x3f10 [ 436.416491][ T17] usb_generic_driver_probe+0x138/0x300 [ 436.422045][ T17] ? usb_choose_configuration+0xe70/0xe70 [ 436.427784][ T17] usb_probe_device+0x311/0x490 [ 436.432824][ T17] ? usb_register_device_driver+0x540/0x540 [ 436.438725][ T17] really_probe+0xf20/0x20b0 [ 436.443326][ T17] ? kmsan_get_metadata+0x116/0x180 [ 436.448538][ T17] driver_probe_device+0x293/0x390 [ 436.453668][ T17] __device_attach_driver+0x63f/0x830 [ 436.459057][ T17] bus_for_each_drv+0x2ca/0x3f0 [ 436.464003][ T17] ? coredump_store+0xf0/0xf0 [ 436.468695][ T17] __device_attach+0x4e2/0x7f0 [ 436.473515][ T17] device_initial_probe+0x4a/0x60 [ 436.478555][ T17] bus_probe_device+0x177/0x3d0 [ 436.483859][ T17] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 436.489775][ T17] device_add+0x3b0e/0x40d0 [ 436.494310][ T17] usb_new_device+0x1bd4/0x2a30 [ 436.499233][ T17] hub_event+0x5e7b/0x8a70 [ 436.503707][ T17] ? kmsan_get_metadata+0x116/0x180 [ 436.509103][ T17] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 436.514939][ T17] ? led_work+0x7c0/0x7c0 [ 436.519280][ T17] process_one_work+0x1688/0x2140 [ 436.524344][ T17] worker_thread+0x10bc/0x2730 [ 436.529223][ T17] ? kmsan_get_metadata+0x116/0x180 [ 436.534564][ T17] kthread+0x551/0x590 [ 436.538736][ T17] ? process_one_work+0x2140/0x2140 [ 436.544144][ T17] ? kthread_blkcg+0x110/0x110 [ 436.549184][ T17] ret_from_fork+0x1f/0x30 [ 436.555421][ T17] Kernel Offset: disabled [ 436.559918][ T17] Rebooting in 86400 seconds..