[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 126.450561][ T8374] sshd (8374) used greatest stack depth: 4536 bytes left Warning: Permanently added '10.128.0.250' (ECDSA) to the list of known hosts. 2020/09/06 20:14:49 fuzzer started 2020/09/06 20:14:50 dialing manager at 10.128.0.26:46153 2020/09/06 20:14:50 syscalls: 3166 2020/09/06 20:14:50 code coverage: enabled 2020/09/06 20:14:50 comparison tracing: enabled 2020/09/06 20:14:50 extra coverage: enabled 2020/09/06 20:14:50 setuid sandbox: enabled 2020/09/06 20:14:50 namespace sandbox: enabled 2020/09/06 20:14:50 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/06 20:14:50 fault injection: enabled 2020/09/06 20:14:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/06 20:14:50 net packet injection: enabled 2020/09/06 20:14:50 net device setup: enabled 2020/09/06 20:14:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/06 20:14:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/06 20:14:50 USB emulation: enabled 2020/09/06 20:14:50 hci packet injection: enabled 20:19:43 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f00000000c0)={0x3, "0ca969"}, 0x4) [ 438.841543][ T8488] IPVS: ftp: loaded support on port[0] = 21 [ 439.334304][ T8488] chnl_net:caif_netlink_parms(): no params data found [ 439.541555][ T8488] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.549102][ T8488] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.559477][ T8488] device bridge_slave_0 entered promiscuous mode [ 439.573431][ T8488] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.581727][ T8488] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.591324][ T8488] device bridge_slave_1 entered promiscuous mode [ 439.638500][ T8488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.655408][ T8488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.702697][ T8488] team0: Port device team_slave_0 added [ 439.715888][ T8488] team0: Port device team_slave_1 added [ 439.758880][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.765971][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.793214][ T8488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.809968][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.817046][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.843962][ T8488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.904288][ T8488] device hsr_slave_0 entered promiscuous mode [ 439.913893][ T8488] device hsr_slave_1 entered promiscuous mode [ 440.209025][ T8488] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 440.236213][ T8488] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 440.308669][ T8488] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 440.340089][ T8488] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 440.649586][ T8488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.683784][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 440.693349][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 440.719462][ T8488] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.745319][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 440.755305][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 440.757720][ T3362] Bluetooth: hci0: command 0x0409 tx timeout [ 440.764953][ T3217] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.776612][ T3217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.798162][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 440.814992][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 440.824297][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 440.833799][ T3362] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.841088][ T3362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.905696][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 440.916848][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 440.927903][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 440.938368][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 440.948639][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 440.959027][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 441.014158][ T8488] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 441.025932][ T8488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 441.041837][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 441.050910][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 441.060699][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 441.071290][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 441.081021][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 441.149374][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 441.158474][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.166190][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.180807][ T8488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.245278][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 441.255540][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 441.313742][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 441.324037][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 441.346701][ T8488] device veth0_vlan entered promiscuous mode [ 441.355558][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 441.365116][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 441.398008][ T8488] device veth1_vlan entered promiscuous mode [ 441.478788][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 441.488864][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 441.509445][ T8488] device veth0_macvtap entered promiscuous mode [ 441.533890][ T8488] device veth1_macvtap entered promiscuous mode [ 441.589062][ T8488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.596974][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 441.606683][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 441.616701][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 441.626876][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 441.652854][ T8488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.694330][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 441.705145][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:19:48 executing program 0: clone(0x2000000002808100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000055"], &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20) 20:19:48 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x41, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all='unlock all\x00', 0xb) 20:19:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fchmod(r2, 0x0) 20:19:49 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = mq_open(&(0x7f0000000000)='m$\x00', 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mq_getsetattr(r2, 0x0, &(0x7f0000000180)) [ 442.839222][ T8706] Bluetooth: hci0: command 0x041b tx timeout 20:19:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0xc040000, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r2, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) 20:19:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) r3 = dup(r2) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x10000880) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x400) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x71, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r6, 0x4000}, 0x8) r7 = dup(0xffffffffffffffff) r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x40309410, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x561101, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000000280)) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="129ae2d10ad7e16d77150afbce983d4a26b1c739bbeb1a9d66ba1d4c542f98b490b8dcedd73e783ca7d7428767b7297f547137c64303f4e179"]) [ 443.667884][ T8702] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 444.188750][ T8702] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 444.198258][ T8702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.206335][ T8702] usb 1-1: Product: syz [ 444.210811][ T8702] usb 1-1: Manufacturer: syz [ 444.215506][ T8702] usb 1-1: SerialNumber: syz [ 444.329224][ T8702] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 444.907582][ T4890] Bluetooth: hci0: command 0x040f tx timeout [ 445.088325][ T12] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 20:19:52 executing program 1: ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x9, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={[], 0x39}, @broadcast, @dev={[], 0x33}, @broadcast, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={[], 0x3f}, @broadcast]}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140c, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x40}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040081}, 0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x81}, &(0x7f0000000380)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000003c0)={0x0, 0x1, 0x3ff, {0x2, 0x8}, 0x3, 0x2}) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x800) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000480)) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000500)) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000540)={'icmp6\x00'}, &(0x7f0000000580)=0x1e) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0)='nbd\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000600)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ttyS3\x00', 0x416000, 0x0) ioctl$KDSKBMETA(r5, 0x4b63, &(0x7f0000000700)=0x4) [ 446.108236][ T12] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 446.115382][ T12] ath9k_htc: Failed to initialize the device 20:19:52 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = inotify_init1(0x0) r2 = dup(r1) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x10000880) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000100)) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') sendfile(r3, r4, 0x0, 0x8b84) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) [ 446.558302][ T8706] usb 1-1: USB disconnect, device number 2 [ 446.588445][ T8706] usb 1-1: ath9k_htc: USB layer deinitialized 20:19:53 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) 20:19:53 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="250000001000050fd25a80648c63940d0300fc0010ef12ae2b00a16d053582c137153e3709", 0x25}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002600)=""/254, 0xfe}, {&(0x7f0000000440)=""/217, 0xd9}, {&(0x7f00000028c0)=""/66, 0x42}, {&(0x7f0000002940)=""/34, 0x22}, {&(0x7f0000002980)=""/13, 0xd}, {&(0x7f00000029c0)=""/11, 0xb}, {&(0x7f0000002a00)=""/4109, 0x100d}, {&(0x7f00000001c0)=""/111, 0x6f}], 0x8}, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x9) [ 446.988083][ T8706] Bluetooth: hci0: command 0x0419 tx timeout 20:19:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xce280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bond_slave_1\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 20:19:53 executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect(0x0, 0x58, &(0x7f0000000140)=ANY=[@ANYBLOB="7b01000036ee3808d30b55056a690e00000109024600010c00120009040000000e010000082402ff01022f000952d147697353"], 0x0) [ 447.685087][ T8774] IPVS: ftp: loaded support on port[0] = 21 [ 448.087878][ T8706] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 448.301567][ T8774] chnl_net:caif_netlink_parms(): no params data found [ 448.379782][ T8706] usb 1-1: Using ep0 maxpacket: 8 [ 448.454320][ T8774] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.461891][ T8774] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.471802][ T8774] device bridge_slave_0 entered promiscuous mode [ 448.484896][ T8774] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.492391][ T8774] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.502741][ T8774] device bridge_slave_1 entered promiscuous mode [ 448.520404][ T8706] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 448.548608][ T8774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.566200][ T8774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.611566][ T8774] team0: Port device team_slave_0 added [ 448.627313][ T8774] team0: Port device team_slave_1 added [ 448.633201][ T8706] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 448.643177][ T8706] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 448.651430][ T8706] usb 1-1: Manufacturer: syz [ 448.669453][ T8774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.676584][ T8774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.703387][ T8774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.782201][ T8774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.789534][ T8774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.815724][ T8774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.929650][ T8774] device hsr_slave_0 entered promiscuous mode [ 448.935000][ T12] usb 1-1: USB disconnect, device number 3 [ 448.963769][ T8774] device hsr_slave_1 entered promiscuous mode [ 448.988833][ T8774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.996561][ T8774] Cannot create hsr debugfs directory [ 449.381838][ T8774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 449.399785][ T8774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 449.417020][ T8774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 449.436179][ T8774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 449.547407][ T12] Bluetooth: hci1: command 0x0409 tx timeout 20:19:56 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000280)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100081050e00"/20, @ANYRES32=0x0, @ANYBLOB="f300090000000000c0ecfe3b72a677120012000b0001006970766c616e000004", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000000c0)={0x7, 0xfffffffa}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000240)=0x182a) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg$alg(r4, &(0x7f0000000140), 0x2, 0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x14000, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000001f00), r9, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r7, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x4, {0xa, 0x4e23, 0x3ff, @mcast2, 0x1683}, r9}}, 0x38) [ 449.775685][ T9001] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 449.842400][ T9003] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 20:19:56 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, 0x0, 0xfffffd88) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) r1 = socket(0x6, 0x800, 0xcb) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x7, 0x1577}, 0x9}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) clone3(&(0x7f0000000480)={0x40000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000140), {0xc}, &(0x7f00000001c0)=""/28, 0x1c, &(0x7f0000000380)=""/251, &(0x7f0000000280)=[r3, 0x0], 0x2}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) [ 449.957833][ T8774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.015711][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 450.024843][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 450.056035][ T8774] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.100613][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 450.111462][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 450.120963][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.128316][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.207551][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 450.216706][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 450.227312][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 450.236570][ T8702] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.244546][ T8702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.253633][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 450.264490][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 450.275423][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 450.286003][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 450.326009][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 450.378930][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 450.389093][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 450.461954][ T8774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 450.473024][ T8774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 450.488763][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 450.498525][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 450.508760][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 450.519301][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 450.608118][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 450.680133][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 450.688671][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 450.745702][ T8774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.866457][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 450.876647][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 450.995461][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 451.006252][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 451.041213][ T8774] device veth0_vlan entered promiscuous mode [ 451.050126][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 451.059326][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 451.110948][ T8774] device veth1_vlan entered promiscuous mode [ 451.273038][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 451.283520][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 451.293198][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 451.303231][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 451.336458][ T8774] device veth0_macvtap entered promiscuous mode [ 451.376163][ T8774] device veth1_macvtap entered promiscuous mode [ 451.415320][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 451.425366][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 451.503338][ T8774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 451.514453][ T8774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.528620][ T8774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.539556][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 451.550568][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.607267][ T8774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 451.620261][ T8774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.634115][ T8774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.660693][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 451.671716][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 451.707819][ T8702] Bluetooth: hci1: command 0x041b tx timeout 20:19:59 executing program 1: ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000000)) 20:19:59 executing program 1: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7f) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x5, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x3, 0x6, @link_local}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000037c0)=0x0, &(0x7f0000003800)=0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003940)={&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000002280)=[{&(0x7f0000000040)="49297c67ebe7b51973366304618921b27492bd26a43ce4d12f049bba15211b41aad49fe214e6e0da8952cb1e60f61b8b3cbfd8abc6064df38a198cef9bbca0a53e182faac9cc4262963609179a2deaf0e302a54fc7e5c5e6dcca97681d2b7accb2af4bb71716bfb3343d2422ddfb240cf669532d3d073f94751a8556030cadcb2b4d03cff952e6e43bc9e6ff3cb1e756b16ebc901a9a4c3d290c8033b417ba283627225309da1d5a7c2c75fe1dac1ff8d3094acc2a68a7398c9fee253d44d38e97d4c0f3b55c", 0xc6}, {&(0x7f0000000140)="4396396d124af98cc19b7a29deea3e909ced8f7d4af394db74", 0x19}, {&(0x7f0000000180)="4845266a7f656188b5deda30dbcbb9521fb87dfafd02c74392f2b0fb4b27753f3880e761c4c51cbe9e56ad6b25b08d6eb5f415b04311c9822de45b414fe28bd804a44343603cb2944432d1cae54f9b2db6b99a8f02a240e6039c1763f9d357f8a20d4583d090b54b04b71432ce5fdab7a7370d76b4a1cf4baab8288c07b5db051d1acfad028219", 0x87}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="e9d6e5fbda87ba2409286403964577ed", 0x10}], 0x6, &(0x7f0000003840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @dev={0xac, 0x14, 0x14, 0x23}}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x2d, 0x0, 0x0, [0x5, 0x0, 0x7, 0x1, 0x401, 0xffff]}, @lsrr={0x83, 0x27, 0x2c, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010102, @multicast2, @private=0xa010102, @local, @multicast1]}]}}}], 0xe8}, 0x80c1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000004fc8)={0x0, 0xfffffffffffffed4, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x8, 0x1d}]}, 0x24}}, 0x0) 20:19:59 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x260081, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000004c0)={0x6, &(0x7f0000000140)=[{@none}, {}, {@fixed}, {@fixed}, {@fixed}, {@fixed}]}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080)=0xd6b) [ 453.307968][ T9020] device lo entered promiscuous mode [ 453.332611][ T9019] device lo left promiscuous mode 20:19:59 executing program 1: r0 = syz_usb_connect(0x5, 0x1f, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x1a, 0x56, 0x9f, 0x40, 0x46d, 0x8b0, 0x36b2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x49, 0x0, 0x0, 0x5a, 0x0, 0xdf}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x8, 0xe4}) 20:20:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4(r1, &(0x7f0000000140)=@ethernet={0x0, @remote}, &(0x7f0000000200)=0x80, 0x800) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x950b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r0) socket(0x40000000015, 0x805, 0x0) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r4 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x80000000, 0x80080) vmsplice(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)="c8bfd5b2bd0707", 0x7}, {&(0x7f00000002c0)="6c5e55d1423e833ea75584651414d56381d6cfcbc7f6f7ce33e7468da3ed54e024844955420129dd4ea247da0640f1a839e17c67c7b5b58ea27796c01dc23b40b12d55a413ef089f0404d349b634daaa01d46347aef0083c72ae95199eac6aaf0ae7e85b3bcb865060888a894e0b6bfcec6ed1bc5337c413cfd2d8d06b5afe7d481611c129bc64dac27253212f166d29a6b2ba2b3a3d556881dea92fb7ad30977ddb5c03d300c0323e76dde70550c13c6da549eddb9962191e6e4c13a6fc4a8869b76763fa1de21a472dee500b67f4027a5d565435565accb160bf97e61520c84e3bab5a02ab888d4adb2f67c2a2db5b9da6df", 0xf3}], 0x2, 0x0) [ 453.789285][ T8702] Bluetooth: hci1: command 0x040f tx timeout 20:20:00 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6b) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) [ 453.980355][ T12] usb 2-1: new high-speed USB device number 2 using dummy_hcd 20:20:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140e0000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01050000000000000000000000000400048009000200dd387d300000000008000340000000011400"/109], 0x80}}, 0x0) fcntl$setstatus(r0, 0x4, 0x400) [ 454.347692][ T12] usb 2-1: config index 0 descriptor too short (expected 18, got 13) [ 454.356042][ T12] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 454.366530][ T12] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 454.376026][ T12] usb 2-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=36.b2 [ 454.385363][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.459550][ T12] usb 2-1: config 0 descriptor?? 20:20:00 executing program 0: io_setup(0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xfffffffc}, &(0x7f0000000040)=0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r1 = socket(0x10, 0x3, 0x0) sendfile(r1, r0, &(0x7f0000000100)=0x100000, 0x8001) 20:20:01 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dee5e340ca0404300000000000010902120001000000000904"], 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) [ 455.217450][ T12] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 455.578115][ T12] usb 1-1: New USB device found, idVendor=04ca, idProduct=3004, bcdDevice= 0.00 [ 455.587464][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.601206][ T12] usb 1-1: config 0 descriptor?? [ 455.847853][ T12] Bluetooth: Can't get state to change to load ram patch err [ 455.855328][ T12] Bluetooth: Loading patch file failed [ 455.861296][ T12] ath3k: probe of 1-1:0.0 failed with error -71 [ 455.901156][ T8703] Bluetooth: hci1: command 0x0419 tx timeout [ 455.908290][ T12] usb 1-1: USB disconnect, device number 4 [ 456.637328][ T4890] usb 1-1: new high-speed USB device number 5 using dummy_hcd 20:20:03 executing program 1: r0 = memfd_create(&(0x7f0000001fc1)='Wloposix_acl_a\x0eg\xd8Hs\x04', 0x0) fallocate(r0, 0x0, 0x2000427, 0x40) write(r0, &(0x7f0000000080)='/', 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x80) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000000c0)={0x10, 0x9, {0x56, 0x7, 0x5, {0xdbe0, 0x1}, {0x4, 0x6}, @rumble={0x1, 0x9}}, {0x56, 0x0, 0x2, {0x100, 0x2}, {0x0, 0x6}, @cond=[{0x9, 0x2, 0x9, 0x0, 0xe0, 0x5}, {0x9, 0x0, 0xb014, 0x9, 0x1}]}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xe, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7959, 0x0, 0x0, 0x0, 0x401}, [@ldst={0x2, 0x0, 0x6, 0x4, 0x5, 0x4, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x7, 0x9, 0x4f62f6a46881d69a, 0x6, 0xffffffffffffffff}, @map={0x18, 0x7, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0xc, 0x9, 0x3, 0xffffffffffffffff, 0x4}, @alu={0x4, 0x0, 0x1, 0xa, 0x9, 0xfffffffffffffff0}, @map={0x18, 0xb, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x37}, @map={0x18, 0x7, 0x1, 0x0, r1}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xe9, &(0x7f0000000240)=""/233, 0x41100, 0xe, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x2, 0x2, 0x20}, 0x10, 0xffffffffffffffff, r1}, 0x78) fsetxattr$security_evm(r2, &(0x7f0000000440)='security.evm\x00', &(0x7f0000000480)=@v2={0x5, 0x2, 0x8, 0xfffffff9, 0xf7, "4221e2289c113f1d33b366e33f42f39b98de3a687e6be9175606d9a98fa071c0a7f5b4637159032392022926440ae5b4c487d1332d7c1caf4dd9caac94fd90fc34e5f23501321b275379633c2df94f5d363a9c78889a3d04ef90ce4d6712f4a0b10233589d79d4b7fbf91324d449b3c587a3118a4e7c31ed034d3eaf531abf94ad8e56e9a938289e466c08630f1b6b9306b6138e4725d5aefb34d381c668ef7f5a1ffc53ab79f312e56818c6bbbae2279eadc245b22ceec630636082f48314f3360ee296429f3f3519b2af6c1116e94c718b65c3a97f0e3a7e351d7e2dfd6b41fa59cfea3b68f49bb7fe84294a22a375df4de24c2d301e"}, 0x100, 0x3) sendfile(r0, r0, &(0x7f0000000640), 0xfee) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) fremovexattr(r3, &(0x7f0000000140)=@known='trusted.overlay.metacopy\x00') [ 456.777397][ T8706] usb 2-1: USB disconnect, device number 2 [ 457.027781][ T4890] usb 1-1: New USB device found, idVendor=04ca, idProduct=3004, bcdDevice= 0.00 [ 457.037168][ T4890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.091628][ T4890] usb 1-1: config 0 descriptor?? 20:20:03 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xa, 0x400002172, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil) r3 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r3, &(0x7f0000ff8000/0x8000)=nil, 0x1000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) read$FUSE(r0, 0x0, 0x116) [ 457.347792][ T4890] Bluetooth: Can't get state to change to load ram patch err [ 457.355267][ T4890] Bluetooth: Loading patch file failed [ 457.361144][ T4890] ath3k: probe of 1-1:0.0 failed with error -71 [ 457.442066][ T4890] usb 1-1: USB disconnect, device number 5 20:20:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x2, 0x1}, 0xc) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x94, &(0x7f0000000100)="8464fe1cb70e7080c878005e48bc0dff5d22412163d1e03b69d8899cf309ffd75eaf45f8b260e30b771c1a691b9f118e85206f4ce976d8146c84d0893739152d28f348835937607c004050fb1a2bad0d97f6a64ef153058ed92e229457749cf7660666cf24dbccd789b749fc7233f7570e0149a0f1df7efd4b9f60a3d3299f786b35da77a4d96023a9881ce8e50332bc472651e2", 0xd0, 0x0, &(0x7f00000001c0)="b74dd5de2e2c623ca6daf09c5b7f8c7d10d77ea5f6e19e44d2edb5eb6117e0153cfdb8b67d90bf60d73814b3ab696c19e8884439dfe2d2c30243064ae651d55bb35554ba121fcd867c0b255ee2a216045978b1323a18a28ca09e93d3a7d0d9e573330b5f02f64d89c134b8c093af3a9aba9c5068908342b8f9a9e2cd7606e7c1cf78df3fc717f2892d792cde3a2fc249e651bfb246d9d517cade108136f05112cfd5798d2c63a67d779767a5b873925a5e708951485feac91f92da1457e08b201dd6b96ccb9ae6288d7e884331af237a"}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.nlink\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, 0x0) clone(0x2000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = inotify_init1(0x0) r5 = dup(r4) inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x10000880) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x310, 0x0, 0x98, 0x310, 0x0, 0x3e0, 0x198, 0x198, 0x3e0, 0x198, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf0={{0x230, 'bpf\x00'}, {0x2e, [{0x5, 0x1, 0x0, 0x1000}, {}, {0xfff7, 0x0, 0x6}, {0x3, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x558}, {0x70}, {0x800, 0x0, 0x20, 0x1}, {0x0, 0x0, 0x0, 0x8}, {0x90, 0xcb, 0x8}, {0xfffb, 0x5}, {}, {0x0, 0x7, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3}, {0x3f, 0x8}, {0x0, 0xff, 0xff, 0x1ff}, {0x0, 0x0, 0x5e, 0x7fffffff}, {0x7}, {0x9, 0x0, 0x7, 0x3}, {0x0, 0x0, 0x3, 0x7}, {}, {0x3f, 0xfa, 0x7, 0x101}, {0x0, 0x0, 0x0, 0x2}, {0x10}, {0x0, 0x14, 0x7f, 0x4}, {0x5}, {0x5, 0x8}, {}, {0xae, 0x3}, {0x0, 0x0, 0x0, 0x8}, {}, {0x80, 0x0, 0xde}, {}, {}, {0x3ff, 0x7, 0x66, 0x10000}, {0x0, 0x0, 0x0, 0x1}, {0x3, 0x4}, {0x0, 0x0, 0x2, 0x2}, {0x8, 0x8}, {0x0, 0x80, 0x6, 0x5}, {0x0, 0x3f}, {}, {0x3f, 0x0, 0x3f, 0x1}, {0x0, 0x2, 0x0, 0x1a52}, {}, {}, {0x4, 0x0, 0x73, 0x800}, {0x0, 0x0, 0x80}, {0x0, 0x4d, 0x1, 0xfffffffa}, {}, {}, {0xfff9, 0x5, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x4}, {0x7, 0x5}, {0xb7, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0xd9}, {}, {0x9, 0x3, 0xfc}, {0x0, 0x4, 0x40, 0xea47}, {}, {0x0, 0x6e, 0xcd}]}}, @common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'lo\x00', 'veth1_macvtap\x00', {}, {}, 0x21, 0x2}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "d652"}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4d8) 20:20:03 executing program 1: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000200)={0x8000000, 0x68e6, 0x2}) socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x2c) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket(0x2, 0x2000080003, 0x2) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) openat$vcsa(0xffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x2, 0x1}, 0xc) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000440)={@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x5, @empty}, 0x4, 0x2, 0x0, 0x4}}, {&(0x7f0000000300)=""/195, 0xc3}, &(0x7f0000000400), 0x8}, 0xa0) r6 = socket(0x10, 0x3, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000001c0)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x80, 0x10, 0x401, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x33fc}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x6}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xfffffff9}, @IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3f}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x80}}, 0x0) [ 457.674227][ T9094] xt_bpf: check failed: parse error 20:20:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2}, 0x1c) listen(r0, 0xb9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = inotify_init1(0x0) r3 = dup(r2) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x10000880) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f00000001c0)=0x40, 0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x2, @multicast2}, 0x10) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x40081) r4 = socket$netlink(0x10, 0x3, 0x9) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067f0200ff000000000001000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100020c10000000000000000000", 0x58}, {&(0x7f0000000200)="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", 0xfe}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x290000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r7, 0x4010641c, &(0x7f0000000400)={r8, &(0x7f0000000340)=""/163}) [ 457.722026][ T9097] xt_bpf: check failed: parse error [ 457.786035][ T9100] device gre1 entered promiscuous mode [ 457.795964][ T9100] bond0: (slave gre1): slave is up - this may be due to an out of date ifenslave [ 458.149093][ T9100] device gre1 entered promiscuous mode [ 458.158660][ T9100] bond0: (slave gre1): slave is up - this may be due to an out of date ifenslave 20:20:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000006139157400000000009500000000000000a8b9a8028b68e4c6412c95837cac2baa14d502d45dd5be7174027c14481c4f72cc0aae6b8cae09bcaed41bddad94019c5901c95ccab94732b3fe92c780ceb723386ac39f3cc4c11bb34277a55ac4f4cf48a735bae7c8e13865b139838fd01c90f93ef6c9a02ff4fb8c3f8c1873478a05fbc0ee0b3bbb2068abfc0188a8c028d164a2c624cb5edc947f6a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2e], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5d, 0x10, 0x0}, 0x23) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x2, 0x0) 20:20:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0xa0800, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x600040, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x4, 0x10, 0x240f, 0x8000}, &(0x7f0000000100)=0x18) 20:20:04 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = inotify_init1(0x0) r2 = dup(r1) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x10000880) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x71, &(0x7f0000000000)={r5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={r5, 0x4, 0x7fffffff}, 0x10) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) [ 458.602264][ T9121] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 20:20:05 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfff0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xaa, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="2c0000001200ff8e002000000000005e070014852fb70294898f705a2e2994b564f25a01277eb794629cd7a3c0fa3d4feafb48ec382ac0f2dc56ba00d9cf330e88e872c68d00822b142b61466a037366993fe11f0e80e365427e81d71b48570406e8156c64d8d6d82a60830c3f37f97272b7db5f"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, 0x36, 0x2, 0x70bd27, 0x25dfdbfc, {0x6}, [@nested={0x4d, 0x63, 0x0, 0x1, [@generic="19a419f13590b3b191fba723b4ca162fdb09cf5d489c63fb6f6e037afa247367b4f6abb4fda565e65a37a44db39008e2db4abf0dafa55cfad108dd8a928890fd0a17a2a0ca2c5d826c"]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40054}, 0x10) r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x7ff}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 20:20:05 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="120100007029d7ac62723abb53f311000109028709dbb600000009046300000000000000000036bd3a34398380970c19b41165c8e6b554b105ff161a918c6eb9502e8481b42e2d5119ea402c047225e57cdfdebf372de195ea72f8afbe722a9285500d1f021834d82d49bfb7a48900cfc204320300c6728079c5feeb47e8a4736c1729b64de7c8c1d3eddf32a2b4e93aeb2fc3875750643fca92f0b4d5c3b322a85a114cb3b2d26656455a97e72c079c5091d29668637da6ab746146cda9718a6aaedec414b8440f6728f8f19daf920ed5ccfb444d9be83461d9"], 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5a4, 0x8003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x7fff, 0x1, 0x1, {0x22, 0xbdb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x13, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x1, 0x1}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x2, 0x0, 0x3c, 0x8, 0x4}, 0x2c, &(0x7f0000000140)={0x5, 0xf, 0x2c, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x9, 0x5, 0x80, 0x3f}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x0, 0xf000, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1d, 0xf5, 0x8000}]}, 0x4, [{0xbf, &(0x7f0000000180)=@string={0xbf, 0x3, "027a5e72f13bc75c176d8afe2312287ed79a65bc945f220ef79fde9119a8750e84f457fd97f633e012bd924484b87ad248a5dc5e27ee0efecfa0d184c5aaa86cfeca51a9367c474305c0b881d25a0f43dea376abac6024d628e323447872694035fdbbb3ccd01a6642e1716311ecdea4e15d3befe6ee4e4db73b9061a4b81880177947ac1e9c8c8e886669420c0f88ad47bb82f1b9231acf8428eb4c18985f1eda8ac6d65adc7ee3fc4e058e35fb021817653367838bb5202223d7c562"}}, {0x5c, &(0x7f0000000240)=@string={0x5c, 0x3, "f40f800607c1117c0083e0f9507b17d5798b6c5447bf4956dc2213181fef6e44d0567b1b3a186489cbde89731fc796f946456f14c766196a6761fc387b6fae60326b4bfa811cf45e94b5c71bce14b42475252cdabb5748ee0cb4"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x101, &(0x7f0000000300)=@string={0x101, 0x3, "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"}}]}) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/raw/rawctl\x00', 0x20800, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="2302"], 0x2) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x2, 0x1}, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/partitions\x00', 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) get_mempolicy(&(0x7f0000000540), &(0x7f0000000580), 0x99c, &(0x7f0000fef000/0xf000)=nil, 0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)={0x3}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x4800, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040), 0x4) [ 459.527889][ T8702] usb 2-1: new high-speed USB device number 3 using dummy_hcd 20:20:06 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000040)=0x6) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x20000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x40000) [ 459.797822][ T8702] usb 2-1: device descriptor read/64, error 18 20:20:06 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x30a, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x5c4542c0d45697ae, 0x0) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f00000000c0)={0x3, 0x1, 0x18, 0x20, 0xb6, &(0x7f0000000240)}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x4, {0x4, 0x0, "9ca1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 460.190702][ T8702] usb 2-1: device descriptor read/64, error 18 [ 460.357133][ T12] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 460.466930][ T8702] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 460.717869][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.729079][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.739185][ T12] usb 1-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.40 [ 460.748481][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.767916][ T8702] usb 2-1: device descriptor read/64, error 18 [ 460.833051][ T12] usb 1-1: config 0 descriptor?? [ 461.157014][ T8702] usb 2-1: device descriptor read/64, error 18 [ 461.277367][ T8702] usb usb2-port1: attempt power cycle [ 461.326748][ T12] wacom 0003:056A:030A.0001: hidraw0: USB HID v0.00 Device [HID 056a:030a] on usb-dummy_hcd.0-1/input0 [ 461.527867][ T8703] usb 1-1: USB disconnect, device number 6 20:20:07 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x741380, 0x108) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x109600, 0x0) write$P9_RLINK(r1, &(0x7f0000000080)={0x7, 0x47, 0x1}, 0x7) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f00000000c0)={0x3, 0xfffffffe, 0x1}) bind$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x0, @remote}}, 0x1e) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x18d000, 0x0) r2 = creat(&(0x7f00000001c0)='./file1\x00', 0x140) sendto$rxrpc(r2, &(0x7f0000000200)="02cb3cec5394883c7be8f423d03034aaf254e0696c8028352cba49617752cf6d4f676ca15d104506adcb391634a8a9140ab437d64b473dbea54e4f80c49a3b5df368f62f56b3ade964b44fd6552b705880dc1309429c5e0a1c70452516d5093ab20f9815016d7f038c02fa760e036cdc170a88c9a2a1319a72efb89fb2441df03f86ab41b263771e6a1f3652a6011500bc7cae18fcb29f0e9fa12d2be74cc66b419cd7155c983e", 0xa7, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r3 = accept4$packet(r0, 0x0, &(0x7f00000002c0), 0x100400) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x80000001) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x200400, 0x80, 0x1}, 0x18) write$P9_RMKDIR(r4, &(0x7f00000003c0)={0x14, 0x49, 0x2, {0x4, 0x1, 0x8}}, 0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400)='ethtool\x00') ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x1) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x228400, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, &(0x7f0000000480)) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@dev, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f00000005c0)=0xe8) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x90) [ 461.988453][ T8702] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 462.080853][ T8702] usb 2-1: Invalid ep0 maxpacket: 172 20:20:08 executing program 1: r0 = memfd_create(&(0x7f0000000240)='zDN\xf8){\x86\x87T<\xf6i\xbe{\x14\x10\x1f\xa6J\xa3W\x03\xe3 <\t\xe9\xd2\t%\xdctr\xc65\xba\xcc\x84^\x15\x1dDR\x8c\xaf^\r\xc0V\xf5=\xf1W\x1aF\xcaX\x87\x8c\a\x8a]G5\xf8L\r\xa2\xc8\x90\xc2(hW\\\x96\xd6\xa2~%\x06\x95R\xcd\v\xd7\x98=3b1\xb30xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000fd52926353e527dfefce83023f2dbd6f82ccea624ba88307ccfd25bb60e80f727d64a215408f540d183453fda5e215403085e9b957044f93b9ffde8530a7970224bc57a7fab5ff973e14b471e49bdbeb1f997a63e0799d2fef6bf5f170f122f9eb16120a328f86e77f65d0f3d2b8fe9b278e67645ce20c2d80fbaebd4d8cd0c781afda4ce3a966608f237101c82b73ffcff812fe3e3b98fc233c000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0}) [ 462.678986][ T8703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.690500][ T8703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.700557][ T8703] usb 1-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.40 [ 462.709779][ T8703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.727219][ T8702] usb 2-1: device not accepting address 6, error -71 [ 462.742410][ T8702] usb usb2-port1: unable to enumerate USB device [ 462.775419][ T8703] usb 1-1: config 0 descriptor?? [ 463.126795][ T8702] usb 2-1: new high-speed USB device number 7 using dummy_hcd 20:20:09 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x80, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="2302"], 0x2) close(r4) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800000012003dc1000000000000000019001a0000000000001000000000000000000001e000000200"/56], 0x38}, 0x8}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0x150d, @empty, 0x3f}], 0x2c) [ 463.207318][ T8703] usbhid 1-1:0.0: can't add hid device: -71 [ 463.213652][ T8703] usbhid: probe of 1-1:0.0 failed with error -71 [ 463.250702][ T8703] usb 1-1: USB disconnect, device number 7 [ 463.366869][ T8702] usb 2-1: Using ep0 maxpacket: 16 [ 463.446319][ T9199] IPVS: ftp: loaded support on port[0] = 21 [ 463.487626][ T8702] usb 2-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 463.497516][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.564416][ T8702] usb 2-1: config 0 descriptor?? 20:20:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f00000000c0)) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000000)=0x401, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendfile(r1, r0, 0x0, 0x100000001) [ 464.055010][ T9199] chnl_net:caif_netlink_parms(): no params data found [ 464.266356][ T9199] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.273840][ T9199] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.283585][ T9199] device bridge_slave_0 entered promiscuous mode 20:20:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="2302"], 0x2) close(r3) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="001100000000000004000a000a000100726f757465000000140002000800030000000000080002"], 0x44}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000340)={0x0, 0x0}) r6 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0xac, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x20008800) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 464.390885][ T9199] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.398362][ T9199] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.409191][ T9199] device bridge_slave_1 entered promiscuous mode [ 464.575934][ T9354] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 464.608786][ T9199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.654783][ T9199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.714364][ T9354] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 464.794529][ T9199] team0: Port device team_slave_0 added [ 464.827739][ T9199] team0: Port device team_slave_1 added 20:20:11 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00'}, 0x10) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x40020, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESDEC, @ANYBLOB='G']) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000200)=0xffffff01) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2302"], 0x2) close(r1) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000180)=0x3) [ 464.950917][ T9199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.958212][ T9199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.984666][ T9199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.100980][ T9199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.108237][ T9199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.134452][ T9199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.210592][ T9384] devpts: called with bogus options [ 465.226776][ T8703] Bluetooth: hci2: command 0x0409 tx timeout [ 465.252509][ T9384] devpts: called with bogus options [ 465.382213][ T9199] device hsr_slave_0 entered promiscuous mode 20:20:11 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x64, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_skbedit={0x30, 0x0, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x2, 0x1}, 0xc) ioctl$BTRFS_IOC_DEV_REPLACE(r7, 0xca289435, &(0x7f00000006c0)={0x4, 0xffffffff00000001, @status={[0xfffffffffffffc01, 0xff, 0x7f, 0x401, 0x7, 0x5]}, [0x7, 0x9, 0x80, 0x5, 0xffffffff00000001, 0x4, 0x7, 0x4, 0x1, 0x5, 0x7, 0x8, 0xff, 0x9, 0x4, 0x9, 0x452, 0x1, 0x3, 0xffffffff, 0x80000000, 0x6, 0xd474, 0x6, 0x4, 0x5, 0x22a, 0x3, 0x100000000, 0xffff, 0x2, 0x8001, 0x9, 0x2, 0x1, 0x4, 0x2, 0x1, 0x1000, 0x13, 0x2, 0x5cf2, 0x8, 0x5, 0xafc, 0x7, 0x7, 0x7fff, 0x80000000, 0xc0, 0x3, 0x1, 0xff, 0x3, 0x2, 0x4, 0x100000000, 0xfffffffffffffffc, 0x2, 0x1000, 0xd80, 0xfffffffffffff801, 0x4, 0xa55]}) r8 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 465.426758][ T9199] device hsr_slave_1 entered promiscuous mode [ 465.437233][ T9199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.444956][ T9199] Cannot create hsr debugfs directory [ 465.619611][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 465.719504][ T9418] HTB: quantum of class FFFF0900 is big. Consider r2q change. [ 465.774520][ T9418] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 20:20:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$CHAR_RAW_ROSET(r1, 0x125d, &(0x7f0000000000)=0xc1) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/11, 0xb}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x114, &(0x7f0000000340)="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"}}], 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 466.049907][ T9199] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 466.078703][ T8702] smscufx: Failed to write register index 0x0000700c with value 0x00000000 [ 466.087483][ T8702] smscufx: ufx_reg_clear_and_set_bits error writing 0x700c [ 466.087505][ T8702] smscufx: error clearing output gate in 0x700C [ 466.093670][ T9199] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 466.094760][ T8702] smscufx: error -71 configuring system clock [ 466.095647][ T8702] smscufx: probe of 2-1:0.0 failed with error -71 [ 466.139996][ T9199] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 466.201676][ T8702] usb 2-1: USB disconnect, device number 7 [ 466.217728][ T9199] netdevsim netdevsim2 netdevsim3: renamed from eth3 20:20:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/479], 0x30, 0xfffffffffffffff9) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40011}, 0x0) 20:20:13 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002cd88c408106050007900000000102021b00010000f9ff08040040010ad320f53b88991079aaa78d8b7998e2db615a6fb33732cd23"], 0x0) [ 466.867866][ T8704] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 466.913630][ T9199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.998046][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 467.007473][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 467.043684][ T9199] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.065959][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 467.076053][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 467.086590][ T4890] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.093833][ T4890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.159341][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.168892][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 467.178827][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.188198][ T4890] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.195418][ T4890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.204553][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 467.215470][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 467.226460][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.236935][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 467.247503][ T8704] usb 2-1: Using ep0 maxpacket: 16 [ 467.257256][ T8706] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 467.269924][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 467.280109][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 467.290760][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 467.307522][ T12] Bluetooth: hci2: command 0x041b tx timeout [ 467.331936][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 467.341806][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 467.373701][ T9199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.387260][ T9199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 467.393638][ T8704] usb 2-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 467.397816][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 467.404103][ T8704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.413525][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 467.479623][ T8704] usb 2-1: config 0 descriptor?? [ 467.520476][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 467.529058][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 467.573580][ T9199] 8021q: adding VLAN 0 to HW filter on device batadv0 20:20:14 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000fbb930102404009d490b000000010902120001000000000904"], 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x2, 0x1}, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x2, 0x1}, 0xc) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRESDEC=r1, @ANYRESDEC, @ANYRES16, @ANYBLOB="3aac4b95d350d2a727fb", @ANYRESDEC, @ANYRESHEX=r2, @ANYRESHEX, @ANYRES32=r1, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000080)={0x80000000, 0x0, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000fd52926353e527dfefce83023f2dbd6f82ccea624ba88307ccfd25bb60e80f727d64a215408f540d183453fda5e215403085e9b957044f93b9ffde8530a7970224bc57a7fab5ff973e14b471e49bdbeb1f997a63e0799d2fef6bf5f170f122f9eb16120a328f86e77f65d0f3d2b8fe9b278e67645ce20c2d80fbaebd4d8cd0c781afda4ce3a966608f237101c82b73ffcff812fe3e3b98fc233c000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0}) [ 467.647899][ T8704] usb 2-1: can't set config #0, error -71 [ 467.669446][ T8706] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 467.678166][ T8706] usb 1-1: can't read configurations, error -22 [ 467.692195][ T8704] usb 2-1: USB disconnect, device number 8 [ 467.786950][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 467.797114][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 467.888059][ T8706] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 467.922502][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 467.932564][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 467.968183][ T9199] device veth0_vlan entered promiscuous mode [ 467.976176][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 467.985330][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 468.049060][ T9199] device veth1_vlan entered promiscuous mode [ 468.148968][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 468.158479][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 468.168075][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 468.178230][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 468.222989][ T9199] device veth0_macvtap entered promiscuous mode [ 468.278446][ T9199] device veth1_macvtap entered promiscuous mode [ 468.289879][ T8704] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 468.290257][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 468.298229][ T8706] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 468.306961][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 468.313659][ T8706] usb 1-1: can't read configurations, error -22 [ 468.377934][ T8706] usb usb1-port1: attempt power cycle [ 468.416513][ T9199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 468.427685][ T9199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.437833][ T9199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 468.448416][ T9199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.462238][ T9199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.472927][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 468.483154][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 468.558259][ T8704] usb 2-1: Using ep0 maxpacket: 16 [ 468.561390][ T9199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 468.574259][ T9199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.584406][ T9199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 468.595840][ T9199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.609763][ T9199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.626182][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 468.637171][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 468.717168][ T8704] usb 2-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49 [ 468.726676][ T8704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.790209][ T8704] usb 2-1: config 0 descriptor?? [ 469.139028][ T8706] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 469.360575][ T8706] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 469.369358][ T8706] usb 1-1: can't read configurations, error -22 [ 469.387158][ T8702] Bluetooth: hci2: command 0x040f tx timeout [ 469.579683][ T8706] usb 1-1: new high-speed USB device number 11 using dummy_hcd 20:20:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005fedfa0801200b130174000000010902"], 0x0) [ 469.799585][ T8706] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 469.808279][ T8706] usb 1-1: can't read configurations, error -22 [ 469.861769][ T8706] usb usb1-port1: unable to enumerate USB device 20:20:16 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x80001, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$cont(0x7, 0xffffffffffffffff, 0x9, 0x6) r2 = dup(r1) r3 = fsmount(r2, 0x0, 0x4) sendto(r3, &(0x7f0000000600)="bb8bd6f2c649e364d9dab02b864ecd57024a1d3fac02ad732ed2998b69497c8714057420b0a00c1785d7514fcbacbf286e5551b708b9bfd3decc07ff6c71fdecdb6b54ee85d81ea59fe5b663857cc88094c5a07ae288dfc6fb1e42399fe430506a5e69af930ec5bdc9992d8449b02885923ea6c70cdb1c3b2d9da4395a49c210c211c51d67dba2669758f0ab85fdb80f991777a07d984ba55b9210f6ac4b9d4650d1958b3bbb34ef5266055785e997", 0xaf, 0x4, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x62) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = dup(r5) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}]}}}]}, 0x40}}, 0x0) [ 470.229626][ T9504] device ip6gretap0 entered promiscuous mode [ 470.300684][ T9504] device ip6gretap0 left promiscuous mode [ 470.317218][ T8706] usb 3-1: new high-speed USB device number 2 using dummy_hcd 20:20:16 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004b00007000000000002f9078ac1414bbac1e0001070c0803ac1e000100000000440c0501ac1e000100000000042065580000000000000800000086dd080088be0000f6f2c5e700000100000000000000080022eb000000002000000002000000000000000000000008006558000000007975d204e47e600eb7a863fb0857886bfac70c8fd6afc2de6a25c215a4c96c3f6050fc947431fc02153fe428f0995d28aec7278e08df7605a0f59723f5890e6bdf986b003f50215f11d304b9e5f690fa045f847288fb477c8f81715c03e086c18e6c14af9db1bb52f4df4e65e1353bdb789219c3608d95e43d65d77570d92ff2df941d400c98"], 0x0) r0 = inotify_init1(0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x10000880) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x122, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x5000}, 0x8040000) [ 470.577430][ T8706] usb 3-1: Using ep0 maxpacket: 8 [ 470.709707][ T8706] usb 3-1: config 0 has no interfaces? [ 470.715433][ T8706] usb 3-1: New USB device found, idVendor=2001, idProduct=130b, bcdDevice=74.01 [ 470.725087][ T8706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.795416][ T8706] usb 3-1: config 0 descriptor?? 20:20:17 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000340)="f2a3d9fcea831557ac2bc0b4106d825f65fe86ad6979180629797ef95ed213258899", 0x22, 0xfffffffffffffffa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x119fe8c, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200006) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) r3 = socket$inet6(0xa, 0x5, 0x0) close(r3) r4 = dup(r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@loopback, 0x6, 0x1, 0x1, 0xc, 0x7, 0x6}, 0x20) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f0000000300)={'L+'}, 0x16, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'netdevsim0\x00', {0x1}}) open(&(0x7f0000000200)='./file1\x00', 0x8f002, 0xd7) r5 = accept4$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14, 0x80800) sendfile(r3, r5, 0x0, 0x80001d00c0d0) [ 471.063121][ T9489] usb 3-1: USB disconnect, device number 2 [ 471.238348][ T8704] smscufx: Failed to write register index 0x0000700c with value 0x00000000 [ 471.247270][ T8704] smscufx: ufx_reg_clear_and_set_bits error writing 0x700c [ 471.247292][ T8704] smscufx: error clearing output gate in 0x700C [ 471.254569][ T8704] smscufx: error -71 configuring system clock [ 471.262087][ T8704] smscufx: probe of 2-1:0.0 failed with error -71 [ 471.380475][ T8704] usb 2-1: USB disconnect, device number 9 [ 471.476470][ T8702] Bluetooth: hci2: command 0x0419 tx timeout 20:20:17 executing program 0: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000280)=""/77) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x3f, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x66, 0x8f}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xfd}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="05300f00010a1003000051aa0571b2efca0000000000a18d8d3d9ca498850fad358f37d48502c8d57777fa1bf30c655edca4917f6b475753f1f42fc084972950dd9f0f98945168ef07b0669feba6e1f39f969e62d7c73b311151f2a0f5bc3358102da783f0bff2b05d288288182e59fb7a554158cc3720cf6b5dc9d6d8f572815ec50309215fe487633232ba42336f9ad4f78667"], 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r0 = inotify_init1(0x80000) r1 = dup(r0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x10000880) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000000)="54322f34272690d9e53d5d13259052a9b5faa4b7e2f35720c322b81ab093d544673b3fed036464c515f636923c809781f338d761355db99ff6aaf48b8495ef5950f66f887cbb085646350a4f0cb027a92b87c52951cd23ee687f6f71af8b48c367d4a330", &(0x7f0000000080)=""/61}, 0x20) r2 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 20:20:18 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="000000000000128009000100697069700000000014000280060012000000000006000f000000000000000000"], 0x44}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x5, 0x7ff, 0x100, 0xff, 0x4}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010005ffff9ff05a168f273826149d200843329f342198e4ebaca4535c94a5d55d8ebdffe02b70e445567c56c67dcc1e56b0fec293bde", @ANYRES32=0x0, @ANYBLOB="0000000000000200280012800a00010076786c616e"], 0x3}}, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000180)={0x18, 0xfffffffffffffffe, 0x0, {0x100000001}}, 0x18) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x472100, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) [ 471.966707][ T8702] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 472.047132][ T12] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 472.207562][ T8702] usb 3-1: Using ep0 maxpacket: 8 [ 472.326855][ T8702] usb 3-1: config 0 has no interfaces? [ 472.332669][ T8702] usb 3-1: New USB device found, idVendor=2001, idProduct=130b, bcdDevice=74.01 [ 472.342495][ T8702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.359932][ T8702] usb 3-1: config 0 descriptor?? [ 472.467474][ T12] usb 1-1: unable to get BOS descriptor or descriptor too short [ 472.546813][ T12] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 472.626350][ T8704] usb 3-1: USB disconnect, device number 3 20:20:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) times(&(0x7f00000000c0)) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0xffffffffffffffff, 0x8, [0x28e, 0x5, 0x0, 0x7f], &(0x7f0000000000)=[0x0]}) r2 = socket(0x2, 0x1, 0x0) read$hiddev(r0, &(0x7f0000000100)=""/120, 0x78) listen(r2, 0x0) sendfile(r1, r0, 0x0, 0x1008147c) 20:20:19 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = inotify_init1(0x0) r6 = dup(r5) inotify_add_watch(r6, &(0x7f00000000c0)='./file0\x00', 0x10000880) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r7 = dup2(r4, r4) r8 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000800)="08000000000000003759540d01ab3409d020ce890300000054148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f95615fb62f2aa8e3d83b80658660a467c3631c272c31f4412f90df7203dd222f0652c485463d2253bf6d696e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f56db27671e58c6e40da6da185025fd26fba4f61ea7371bd07f1c58f01f73a978d07cc1cf2a", 0xa1, r8) keyctl$negate(0xd, 0x0, 0xff, r8) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000400)={@remote, @remote, @multicast1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00\a\x00'/20, @ANYRES32=r3, @ANYBLOB="e5ffffff00000000040000000a000100726f757465"], 0x54}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 20:20:19 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6, 0x80}, 0x906, 0x0, 0x0, 0x0, 0x81, 0x80}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gretap0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="73d0fde976ce4221008f0042630a6c00008705fa3ae4e0ced235d9af03b07ceb2f9d6a5b87a0aaec1a11a8f7efe7f64a7e264da54dd7b8671405dc043a588d3bbb26363a49f9c81dfb917c94052b4b36a356ba70d506fcef2175393d8c39ab2c85c9f4a8187e61ab99a655431ffd09d57f812ec70ef2afa780607b8f98196209af638db83a5286cc7ccbd947f63693f6efe23260fe952e4c8d7ba2ee923354f25ed20d09ac28e2fa85136afb6c2f650bec", @ANYRES32=0x0, @ANYBLOB="0000000800000001000000054219008800670000072f9078640101017f0000010713cbe0000001ac1414bbac1414bbe000000283135b640101000a0101020a01010164010100830bb2e0000001e0000002891b9dac141424ffffffffac14141c7f000001e0000001ac1e0001440e6b3136a47c46ae199336f0af8317c1ffffffffac141433ac1414317f000001ffffffff010000"]}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6gre0\x00', r1, 0x4, 0x1, 0x8, 0xb3, 0x25, @mcast1, @mcast2, 0x1, 0x700, 0x9, 0x9}}) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="5300000044a6aeabc81e1506000000000000001000fff64017db9820000000000000d403ffff633b27e59aa19338ac231515ef7cae8c705b6156d23571eacb8df1d2c1249045b8682634dd9d37590a3848499118c9aa66080228727544c62c3d77807e1b8f86746697f682e40feac9fe339eab6cde2b172dee3816906787d4f23632530929cdd3601115f74b3012a081e4af9a1d22a991efdcdfa06f6b4ee99c182cebc355eecfcefaf004dc20b91268c5b989f630ba60526d3db3ce7e9c1a7ca52cdfd2b762bb7c69c34d27752a190d3559ee47b7a3c4cdcbbe7eddeb5fc13a3551d1e27c14501ffaee1d397a3632f1d2"], 0x58) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x100000001]}, 0x8, 0xb1dd66897b6e33cf) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000300)={@none, 0x0, 0x8, 0x7}) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='/dev/kvm\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x7e) r5 = dup3(r2, 0xffffffffffffffff, 0x0) dup2(r5, r4) [ 473.222806][ T9562] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 473.270337][ T9562] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 473.318631][ T9563] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 473.377736][ T12] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 473.387530][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.448060][ T9541] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 473.462454][ C1] sd 0:0:1:0: [sg0] tag#5064 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 473.473400][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB: Test Unit Ready [ 473.480326][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.490294][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.500194][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.510132][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.520482][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.530626][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:20:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = fcntl$getown(r0, 0x9) rt_sigqueueinfo(r7, 0x9, &(0x7f0000000000)={0x2, 0x7, 0x200}) [ 473.540611][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.550593][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.560849][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.570831][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.580714][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.590871][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.600754][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[c0]: 00 00 00 00 00 00 00 00 [ 473.713539][ T12] cdc_ether: probe of 1-1:1.0 failed with error -22 20:20:20 executing program 2: r0 = inotify_init1(0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x10000880) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000080)={0x44, 0x0, 0xfffffffffffffffd, {0x442836fb, 0xffff, 0x56555959, 0x1, 0x4, 0x7, 0x1, 0x7b}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clock_getres(0x6, &(0x7f0000000000)) [ 473.774364][ T12] usb 1-1: USB disconnect, device number 12 20:20:20 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x0, 0x2, 0x0, 0x1, 0x0, 0x8009, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x0, 0xfffc}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64000009820000000000000d42cffff633b27e59aa146175dff95a3f431d7728eded106736d173f0fc7ec6e26560000000049d2e148c6801d2c0945c08ba800004220076538f63acdfe80000000"], 0x3ab) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x1a9000, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x71, &(0x7f0000000000)={r4}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={r4, 0x804, 0x10}, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000004c0), r6, 0x0, 0x2, 0x4}}, 0x20) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000340)={0x0, 0x3, 0x3006}) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x2040000}}}, 0x90) [ 473.928248][ C1] sd 0:0:1:0: [sg0] tag#5065 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 473.938932][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB: Test Unit Ready [ 473.945613][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.955556][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.965546][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.975469][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.985531][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.995424][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.005320][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.015236][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.025375][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.035487][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.045417][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.055500][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.065413][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[c0]: 00 00 00 00 00 00 00 00 [ 474.121090][ T28] audit: type=1326 audit(1599423620.494:2): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7ffc0000 [ 474.176651][ T28] audit: type=1326 audit(1599423620.534:3): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45d5b9 code=0x7ffc0000 [ 474.197975][ T28] audit: type=1326 audit(1599423620.534:4): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7ffc0000 [ 474.219411][ T28] audit: type=1326 audit(1599423620.534:5): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=229 compat=0 ip=0x45d5b9 code=0x7ffc0000 [ 474.240584][ T28] audit: type=1326 audit(1599423620.534:6): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7ffc0000 [ 474.263010][ T28] audit: type=1326 audit(1599423620.534:7): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45d5b9 code=0x7ffc0000 [ 474.289350][ T28] audit: type=1326 audit(1599423620.534:8): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45d5b9 code=0x7ffc0000 [ 474.312341][ T28] audit: type=1326 audit(1599423620.544:9): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7ffc0000 [ 474.333668][ T28] audit: type=1326 audit(1599423620.544:10): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=294 compat=0 ip=0x45d5b9 code=0x7ffc0000 [ 474.355454][ T28] audit: type=1326 audit(1599423620.544:11): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9594 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7ffc0000 20:20:20 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x20080, 0x0) r5 = accept4$inet(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) mmap$fb(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1000009, 0x4010, r4, 0x62000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000024000b0f000000000000000000001200", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b00010074617072696f0000640002005600010002000000000000000000000000000000000008000400000000000000000000000300000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000f8ff070002"], 0x94}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 474.696622][ T4890] usb 1-1: new low-speed USB device number 13 using dummy_hcd 20:20:21 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1000, 0x1) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000100)) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x24, &(0x7f0000000200), &(0x7f0000000240)=0x8) r6 = dup2(r5, r4) dup3(r6, r3, 0x0) 20:20:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x800, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x18b145) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0], 0xd3) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x1806, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x4) r3 = socket(0x10, 0x803, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x200042, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000100)=0x0) ptrace$poke(0x4, r4, &(0x7f0000000140), 0x1) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x15, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) pipe(&(0x7f00000001c0)) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) [ 475.281040][ T4890] usb 1-1: unable to get BOS descriptor or descriptor too short 20:20:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000007000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="66b9c40a00000f320fc75f49baf80c66b80aecae8766efbafc0cb00eeed9fa9a00803000f01015b855000f00d8f30f593c670fc73766b9700b000066b8a785000066ba000000000f30", 0x49}], 0x1, 0x1a, 0x0, 0x0) [ 475.366779][ T4890] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 475.374708][ T4890] usb 1-1: can't read configurations, error -71 20:20:21 executing program 1: r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, r2, r2}, &(0x7f0000000080)=""/107, 0x6b, &(0x7f0000000200)={&(0x7f0000000100)={'poly1305-generic\x00'}}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000280)='.request_key_auth\x00', &(0x7f0000000340)=@builtin='builtin_trusted\x00') r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$RTC_WIE_OFF(r3, 0x7010) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[0xce], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000100)) r5 = signalfd(r3, &(0x7f0000000040)={[0x6]}, 0x8) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r7, 0x711}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r7, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x7}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x10000}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x101}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x1}}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x3}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000001b80)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 475.551927][ T9622] sg_write: data in/out 808464396/169 bytes for SCSI command 0x0-- guessing data in; [ 475.551927][ T9622] program syz-executor.0 not setting count and/or reply_len properly [ 475.706089][ C1] hrtimer: interrupt took 95545 ns [ 475.835719][ T9626] sg_write: data in/out 808464396/169 bytes for SCSI command 0x0-- guessing data in; [ 475.835719][ T9626] program syz-executor.0 not setting count and/or reply_len properly [ 475.906400][ T8702] usb 2-1: new high-speed USB device number 10 using dummy_hcd 20:20:22 executing program 2: pipe(&(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x80001, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe(&(0x7f00000000c0)) pipe(&(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400082, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x1, 0x2, 0xfffffffd, 0x6, 0x7, 0x6b, 0x6, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x70, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 20:20:22 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5}, {0x1d}, {0x6}]}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="2302"], 0x2) close(r0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x157003, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x20}, 0x4) [ 476.176455][ T8702] usb 2-1: device descriptor read/64, error 18 20:20:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = inotify_init1(0x0) r7 = dup(r6) inotify_add_watch(r7, &(0x7f00000000c0)='./file0\x00', 0x10000880) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0xfffffffffffffcba) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xe}}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xa4d}}, 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @private}, &(0x7f0000000380)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xdc, 0x0, 0xe, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xdc}}, 0x24000040) [ 476.576285][ T8702] usb 2-1: device descriptor read/64, error 18 [ 476.705186][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 476.755409][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 476.849073][ T8702] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 476.967855][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 477.021687][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 477.128097][ T8702] usb 2-1: device descriptor read/64, error 18 20:20:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = inotify_init1(0x0) r7 = dup(r6) inotify_add_watch(r7, &(0x7f00000000c0)='./file0\x00', 0x10000880) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0xfffffffffffffcba) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xe}}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xa4d}}, 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @private}, &(0x7f0000000380)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xdc, 0x0, 0xe, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xdc}}, 0x24000040) 20:20:23 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\x00\x00\x00\x00\x00\x00\x02\x9b\xb0\x1ct\x92o\x92\xf41\xf7\xdf\xcf\xe8t%\xfc\x96L\x82\xdb\xbf:\x14\x97\xe3\x82F\xdb\xa9!k\xc8N\xf9\x18w\x95\xa3\x10\xf7U\x1e\xdaeV\x18\x81\x14^n\x18z\xf2\x88iy8\xe1\xe6JK\xde\xad\x03\xec`\x00\xd7\xef\x05\xff\x10\b\xba\xbe3O#\xcc\xbf{/)\xb3~l~\x8fj\xc0\xe2\x9d\x11)\xa4\xd9\a\xb5/\xbcc\xad=a\xab+\xa0\n\xa1\x93\x1f?\xb1\xa7\xaf\nR2\xe1\xad\xfb\xae\xa3m\xb3\x9c\xe3{\x9c\xd8\x0fy?\xa9\xc9\x0eb`\xa0t~\xa0\xcfBaY\xdc\xc8\xb3\x81\xe7\x19\xa1/\xe7\xf0L\"U\x85n\x9c\x9d3\xda\x01\x9a\xfdg\xf1\x15J\x06\xc7fn\xe5{\a\xde\xd7\x03\x1d\x98;\x11Z|\x12A\x9bqbd\xd8\x9bl^\x92:\x9e\x89\xec\xd9\x83\xa1HH\x1b\x8e~`\xe2\x9d\xcdN\x87\xb6\xb2Mt\xed+\xfe\xa3$D\xf7=\x9e`\xf3\x93x\xb9_\xb9\xf7\xc2\x15al\x7f\x13f\fV\x8f\xe6Y\xc3S`C\xe9\xdceQ\xaa\"\x8c\xcc\x1c\xb6N\xa5\x1f\x83\xe7Wq/\xb5\xaaK\x8c\x19\xd6V\xa7u\x19\"\x1a`\x8e\xa1\xad\xc8\xb3\f\xcf\xde\xae\x12R\xf6\xccJ~9\xda\xfcgD\n\\c\xed\x1aZO\xe7\x1e\xe5\xdc\b%\xe8\x06\r\xd2\xb1\xaff\xfa\x01\xf5\xdb@\\\xcb\xde\xec\xf0Y\x13\xaaw\xf7X\'A\x9d\xda\xb4{\xb9\xfa\xd1k;=\xe4\xb3V\xa9c\xf5\xecI\x8e\xadOM#\xf1JB\xc5\x9a\t\xd2\x9ew\xc3\xee9W[\xab\xb5\xc8Y\xa4\x91\xf0)g\xb46\x944_($\n\x1d\xcf\x0e\xd4\x8dCT\xf9\x81b\t7\xed\' \x03``\fy\xf9\xbbFc\xa8&z\xe0y\xdc\xa5Y\xa1\xbc[w\x02\x8a(\xa4\xb9\xb0\xa6j\xd0\"n\x06T\xb7\x94\xec\xec>E\x1aMSs\x88\x1f\x92\x1c\x91I\xe6\v\x17*K_\x98\x06\f*l6\x9e\x86<\x03\xbb6uq\xcf\xa0\xa0\x92\x99\xf2\x92\xaf\x1azE\xac[\x89\xef\x8a\xb1\xef\xc3V\xcfc\xa0j\x94\xd6\x0e\xc6\x16h\x87\x1d\x1eh\xb0\xfa\xc7)*\x18\x01\x91\xb0\xcd?\xbb\x04HV\x85\xe5\vo\x15\xf8S\xd4\x05\xf4\x93\x81\x1c\x1eY\xb2=\x06\x81\x1c0\xff\x01\xa0\x98\xe3\xcdQ', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 477.516814][ T8702] usb 2-1: device descriptor read/64, error 18 [ 477.639955][ T8702] usb usb2-port1: attempt power cycle [ 477.678519][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 477.730321][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 477.790621][ T9670] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.0 proc:/self/fd/3' not defined. 20:20:24 executing program 2: socket$kcm(0x11, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x7, 0x0, 0x0, 0x8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x8000, 0x2) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="73797a31cd8fe2d51e2a7373eebf995c8d718232f9441bfd3fc583124cc44beb76d08809415131322f928cc365f6665be3238393edd816af"], 0x38) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x6611, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000580)=""/4079, &(0x7f0000000040)=0xfef) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r2, 0x0, 0x4, &(0x7f0000000180)='(.)\x00', r3}, 0x30) r4 = shmget$private(0x0, 0x1000, 0x68, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000300)=""/119) [ 478.078001][ T9673] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.086557][ T9673] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.095040][ T9673] device bridge0 entered promiscuous mode [ 478.356612][ T8702] usb 2-1: new high-speed USB device number 12 using dummy_hcd 20:20:24 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="2302"], 0x2) close(r0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000e10f0001040000000000001000000000008d5a7d7a3fc1ac0c14f297dbdd4669ea67dfe19b3c1c4e", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0002e73e5cc3e1b00d00001800028006000f000000000006000e000000000004001200"], 0x48}}, 0x0) r1 = inotify_init1(0x0) r2 = dup(r1) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x10000880) read$fb(r2, &(0x7f00000000c0)=""/87, 0x57) [ 478.527283][ T8702] usb 2-1: device descriptor read/8, error -61 20:20:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syncfs(r1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = inotify_init1(0x0) r5 = dup(r4) inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x10000880) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000000)=0x10000, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$CHAR_RAW_GETSIZE(r3, 0x1260, &(0x7f0000000080)) r7 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xaeb7, 0x0) dup2(r7, r6) 20:20:25 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x10000880) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 478.746523][ T8702] usb 2-1: device descriptor read/8, error -71 [ 478.904042][ C0] sd 0:0:1:0: [sg0] tag#5073 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 478.915049][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB: Test Unit Ready [ 478.922177][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.932214][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.942361][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.952555][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.962673][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.972735][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.982707][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.992610][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.002602][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.012929][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.022870][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.038443][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.048382][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[c0]: 00 00 00 00 00 00 00 00 [ 479.073288][ T9685] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 20:20:25 executing program 1: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000002c0)=ANY=[]) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r2) dup3(r2, r1, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000040)) write$binfmt_misc(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945ab8ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16af8ffffffffffffff0627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000200000000006f6f000000f390d71cc6092cddd3b049f3fc65d61c"], 0x155) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000180), &(0x7f0000000140)=0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/wireless\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0xb0b00, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000008c0)="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", 0x85f}], 0x1) write$capi20(r3, &(0x7f00000001c0)={0x10, 0x3ff, 0x82, 0x83, 0x7}, 0x10) 20:20:25 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x10000880) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:20:26 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = inotify_init1(0x0) r5 = dup(r4) inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x10000880) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="980000002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000a0001"], 0x98}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 479.879763][ C1] sd 0:0:1:0: [sg0] tag#5074 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 479.890748][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB: Test Unit Ready [ 479.897698][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.915540][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.925680][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.935656][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.945616][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.955553][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.965772][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.975707][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.985674][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.995762][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.005664][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.015564][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.025450][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[c0]: 00 00 00 00 00 00 00 00 [ 480.056741][ C1] sd 0:0:1:0: [sg0] tag#5075 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 480.067594][ C1] sd 0:0:1:0: [sg0] tag#5075 CDB: Test Unit Ready [ 480.074378][ C1] sd 0:0:1:0: [sg0] tag#5075 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.084403][ C1] sd 0:0:1:0: [sg0] tag#5075 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.094286][ C1] sd 0:0:1:0: [sg0] tag#5075 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:20:26 executing program 3: getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={r0, 0x6, 0xf94c}, &(0x7f00000000c0)=0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='status\x00') ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000140)=0x1) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f00000011c0)={{r2}, "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"}) r3 = open(&(0x7f00000021c0)='./file0\x00', 0xc0180, 0x0) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) prctl$PR_GET_FP_MODE(0x2e) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002240)={0xa0, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f90a00b03957cf6b95428640b2"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "8eb692cd6a9c03eb0d8a6ae1c193ae"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1d3f550c3f3670f3a7e7dfbf24"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4810}, 0x40800) keyctl$session_to_parent(0x12) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000002380)={0x7, 'syz_tun\x00', {0x6}, 0x1}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000023c0)={r1, 0xf4, "fda6a126091fcfeee3d2722cf7ea8de4c1bea6d8baff80597e4bb90b3719956bef0a602260966e6ab819c5555a3121443fb1e7f2f66eba7a543dad9c73d3b6f8f8be51253b8b556c45bab90074e0196bc627fd1380f81d2213c2037812b3329df791cdf2918f4a3e96b86b31951e5b570955e9fd182efda6e48d64b11c958c88af0d9fcdfae09abcc3b2f36be06ff99da1e75a50126c8a6db1c4785ecdb048b00df2465081be7e3674b348a175007e936dd54ff79fcf5d4a8ed5d033df8881083d0b58e3da78ce853dba1557af424153a71b9cfbb7f4795f9bdd277bfa7111ff1e56966bb0f835c1cd7d106badc86b1e52a891bd"}, &(0x7f00000024c0)=0xfc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000002500)={r4, 0x7f}, &(0x7f0000002540)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000002580)={r1, 0x9}, &(0x7f00000025c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000002600)={r5, 0x0, 0xc46}, 0x8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000002640)={0x1, 0x32315659, 0x3, @stepwise={0x816, 0xe4, 0xff, 0x8, 0x80000000, 0x10000}}) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000002680)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc038563c, &(0x7f00000026c0)={0x1, 0x0, {0x61, 0x2, 0x3ff, 0x20004000}}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000002700)={'bond_slave_1\x00', 0x1}) [ 480.104363][ C1] sd 0:0:1:0: [sg0] tag#5075 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.115397][ C1] sd 0:0:1:0: [sg0] tag#5075 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.125458][ C1] sd 0:0:1:0: [sg0] tag#5075 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.135327][ C1] sd 0:0:1:0: [sg0] tag#5075 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.147201][ C1] sd 0:0:1:0: [sg0] tag#5075 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.158035][ C1] sd 0:0:1:0: [sg0] tag#5075 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.168070][ C1] sd 0:0:1:0: [sg0] tag#5075 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.178106][ C1] sd 0:0:1:0: [sg0] tag#5075 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.188080][ C1] sd 0:0:1:0: [sg0] tag#5075 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.198488][ C1] sd 0:0:1:0: [sg0] tag#5075 CDB[c0]: 00 00 00 00 00 00 00 00 [ 480.260614][ T9709] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 480.363995][ T9716] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 20:20:26 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x10000880) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 480.418972][ T9716] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 20:20:26 executing program 1: socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000002c0)=ANY=[]) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r2) dup3(r2, r1, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000040)) write$binfmt_misc(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945ab8ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16af8ffffffffffffff0627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000200000000006f6f000000f390d71cc6092cddd3b049f3fc65d61c"], 0x155) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000180), &(0x7f0000000140)=0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/wireless\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0xb0b00, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000008c0)="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", 0x85f}], 0x1) write$capi20(r3, &(0x7f00000001c0)={0x10, 0x3ff, 0x82, 0x83, 0x7}, 0x10) [ 480.576045][ T9709] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 480.605634][ T9716] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 480.665354][ T9716] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 480.879292][ C1] sd 0:0:1:0: [sg0] tag#5076 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 480.889985][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB: Test Unit Ready [ 480.896752][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.907278][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.917220][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.927152][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.937033][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.946914][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.956797][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.966658][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:20:27 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x3f}, 0x4, 0x0, 0x3, 0x1}, 0xffffffffffffff37) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f00000000c0)={0x1, 0x7, 0x0}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) [ 480.976537][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.986401][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.996262][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.006159][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.016028][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[c0]: 00 00 00 00 00 00 00 00 [ 481.023881][ C1] sd 0:0:1:0: [sg0] tag#5077 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 481.035231][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB: Test Unit Ready [ 481.041988][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.051888][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.061772][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.071642][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.081598][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.091496][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.101339][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.111296][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.122151][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.132024][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.141903][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.151798][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.161668][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[c0]: 00 00 00 00 00 00 00 00 [ 481.169563][ C1] sd 0:0:1:0: [sg0] tag#5078 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 481.180203][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB: Test Unit Ready [ 481.186957][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.196837][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.206702][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.216558][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.227383][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.237268][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.247153][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.257034][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.266916][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:20:27 executing program 1: r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b24b4a10e60405007701000010010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/225, 0xe1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x0, 0x0, 0x2, 'Aw'}, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 481.276787][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.286668][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.296508][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.306367][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[c0]: 00 00 00 00 00 00 00 00 20:20:28 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8018, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="3f1765cf44a6aeabc81e15c9fb0000000000001000fff64017d998200000"], 0x93) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0xc, 0x8004401f071, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x20000000000001) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) recvmmsg(r1, &(0x7f0000001f4c), 0x209a6b90bb7b17, 0x0, 0x0) [ 481.937935][ T4890] usb 2-1: new high-speed USB device number 14 using dummy_hcd 20:20:28 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x10000880) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 482.178076][ T4890] usb 2-1: Using ep0 maxpacket: 16 [ 482.298767][ T4890] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 482.308742][ T4890] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 482.319008][ T4890] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 482.328996][ T4890] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 482.388390][ C0] sd 0:0:1:0: [sg0] tag#5079 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 482.400874][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB: Test Unit Ready [ 482.407716][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.417678][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.427684][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.437614][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.447545][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.457387][ T4890] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 482.457517][ T4890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 482.466643][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.466802][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.475877][ T4890] usb 2-1: SerialNumber: syz [ 482.485529][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.509549][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.519490][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.529431][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:20:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x280000, 0x0) bind(r1, &(0x7f0000000400)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@private0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x36}}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x480002, r2}) [ 482.539374][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.550138][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[c0]: 00 00 00 00 00 00 00 00 [ 482.681151][ T4890] ums-sddr09 2-1:1.0: USB Mass Storage device detected 20:20:29 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000049db1808450c10105d6d00000040090400000105000400080b", @ANYRES16=0x0], 0x0) [ 483.358362][ T4890] ums-sddr09: probe of 2-1:1.0 failed with error -5 [ 483.417526][ T4890] usb 2-1: USB disconnect, device number 14 20:20:29 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x10000880) [ 483.607904][ T8702] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 483.610272][ T9760] IPVS: ftp: loaded support on port[0] = 21 [ 483.833218][ C0] sd 0:0:1:0: [sg0] tag#5081 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 483.844068][ C0] sd 0:0:1:0: [sg0] tag#5081 CDB: Test Unit Ready [ 483.850876][ C0] sd 0:0:1:0: [sg0] tag#5081 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.860769][ C0] sd 0:0:1:0: [sg0] tag#5081 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.870682][ C0] sd 0:0:1:0: [sg0] tag#5081 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.880632][ C0] sd 0:0:1:0: [sg0] tag#5081 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.890572][ C0] sd 0:0:1:0: [sg0] tag#5081 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.900477][ C0] sd 0:0:1:0: [sg0] tag#5081 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.910388][ C0] sd 0:0:1:0: [sg0] tag#5081 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.920298][ C0] sd 0:0:1:0: [sg0] tag#5081 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.930200][ C0] sd 0:0:1:0: [sg0] tag#5081 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.940100][ C0] sd 0:0:1:0: [sg0] tag#5081 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.950005][ C0] sd 0:0:1:0: [sg0] tag#5081 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.959890][ C0] sd 0:0:1:0: [sg0] tag#5081 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.969777][ C0] sd 0:0:1:0: [sg0] tag#5081 CDB[c0]: 00 00 00 00 00 00 00 00 [ 483.986223][ T8702] usb 1-1: Using ep0 maxpacket: 8 [ 484.029387][ T8702] usb 1-1: too many configurations: 64, using maximum allowed: 8 [ 484.136859][ T8703] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 484.157510][ T8702] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 484.165258][ T8702] usb 1-1: can't read configurations, error -61 20:20:30 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x10000880) [ 484.397701][ T8702] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 484.406727][ T8703] usb 2-1: Using ep0 maxpacket: 16 [ 484.527917][ T8703] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 484.538186][ T8703] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 484.548202][ T8703] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 484.558332][ T8703] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 484.638011][ T8702] usb 1-1: Using ep0 maxpacket: 8 [ 484.640256][ C0] sd 0:0:1:0: [sg0] tag#5099 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 484.653929][ C0] sd 0:0:1:0: [sg0] tag#5099 CDB: Test Unit Ready [ 484.660700][ C0] sd 0:0:1:0: [sg0] tag#5099 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.671114][ C0] sd 0:0:1:0: [sg0] tag#5099 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.681021][ C0] sd 0:0:1:0: [sg0] tag#5099 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.690969][ C0] sd 0:0:1:0: [sg0] tag#5099 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.701841][ C0] sd 0:0:1:0: [sg0] tag#5099 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.711730][ C0] sd 0:0:1:0: [sg0] tag#5099 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.721618][ C0] sd 0:0:1:0: [sg0] tag#5099 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.731512][ C0] sd 0:0:1:0: [sg0] tag#5099 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.741417][ C0] sd 0:0:1:0: [sg0] tag#5099 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.752537][ C0] sd 0:0:1:0: [sg0] tag#5099 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.762449][ C0] sd 0:0:1:0: [sg0] tag#5099 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.772404][ C0] sd 0:0:1:0: [sg0] tag#5099 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.782361][ C0] sd 0:0:1:0: [sg0] tag#5099 CDB[c0]: 00 00 00 00 00 00 00 00 20:20:31 executing program 1: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="1a01000092908108ac051582588f0000000b3db700097b8b494da81f91bf09050502000000000009058b1eff00"/59], 0x0) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xb5e4, 0x101000) r1 = inotify_init1(0x0) r2 = dup(r1) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x10000880) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x2, 0x4) syz_usb_control_io(r0, 0x0, 0x0) [ 484.932694][ T9760] chnl_net:caif_netlink_parms(): no params data found [ 485.209398][ T8703] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 485.218782][ T8703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 485.229066][ T8702] usb 1-1: too many configurations: 64, using maximum allowed: 8 [ 485.316558][ T8706] Bluetooth: hci3: command 0x0409 tx timeout [ 485.334084][ T8703] usb 2-1: can't set config #1, error -71 [ 485.356335][ T8703] usb 2-1: USB disconnect, device number 15 [ 485.403176][ T9760] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.411555][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.421513][ T9760] device bridge_slave_0 entered promiscuous mode [ 485.433405][ T8702] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 485.441951][ T8702] usb 1-1: can't read configurations, error -61 [ 485.480594][ T8702] usb usb1-port1: attempt power cycle [ 485.562057][ T9760] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.569605][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.579336][ T9760] device bridge_slave_1 entered promiscuous mode [ 485.640899][ T9760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.662219][ T9760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.759078][ T8703] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 485.784775][ T9760] team0: Port device team_slave_0 added [ 485.819502][ T9760] team0: Port device team_slave_1 added [ 485.884222][ T9760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.892117][ T9760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.918411][ T9760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.945045][ T9760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.952885][ T9760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.979021][ T9760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.066783][ T8703] usb 2-1: Using ep0 maxpacket: 8 [ 486.081617][ T9760] device hsr_slave_0 entered promiscuous mode [ 486.108072][ T8703] usb 2-1: too many configurations: 11, using maximum allowed: 8 [ 486.139735][ T9760] device hsr_slave_1 entered promiscuous mode [ 486.165444][ T9760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.173271][ T9760] Cannot create hsr debugfs directory [ 486.229636][ T8702] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 486.246296][ T8703] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 486.254072][ T8703] usb 2-1: can't read configurations, error -61 [ 486.436088][ T8702] usb 1-1: device descriptor read/8, error -71 [ 486.476975][ T8703] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 486.647193][ T8702] usb 1-1: device descriptor read/8, error -71 [ 486.720583][ T8703] usb 2-1: Using ep0 maxpacket: 8 [ 486.768586][ T8703] usb 2-1: too many configurations: 11, using maximum allowed: 8 [ 486.851213][ T9760] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 486.871779][ T9760] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 486.892437][ T9760] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 486.903344][ T8703] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 486.913007][ T8703] usb 2-1: can't read configurations, error -61 [ 486.931742][ T9760] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 486.942252][ T8703] usb usb2-port1: attempt power cycle [ 487.337017][ T9760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.379732][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 487.388973][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 487.396144][ T8706] Bluetooth: hci3: command 0x041b tx timeout [ 487.414716][ T9760] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.448419][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 487.459515][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 487.469008][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.476348][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.523397][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 487.533928][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 487.543959][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 487.554792][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.562168][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.571354][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 487.597398][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 487.641592][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 487.652892][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 487.688603][ T8703] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 487.718138][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 487.728019][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 487.738835][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 487.749149][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 487.758998][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 487.788276][ T8703] usb 2-1: Using ep0 maxpacket: 8 [ 487.809413][ T9760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.822931][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 487.828834][ T8703] usb 2-1: too many configurations: 11, using maximum allowed: 8 [ 487.838211][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 487.848140][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 487.911530][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 487.922245][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 487.957005][ T8703] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 487.964845][ T8703] usb 2-1: can't read configurations, error -61 [ 487.966999][ T9760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.039809][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 488.050361][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 488.148836][ T8703] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 488.215432][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 488.226245][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 488.268853][ T9760] device veth0_vlan entered promiscuous mode [ 488.282289][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 488.292246][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 488.372687][ T9760] device veth1_vlan entered promiscuous mode [ 488.449081][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 488.458985][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 488.544331][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 488.554468][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 488.574984][ T9760] device veth0_macvtap entered promiscuous mode [ 488.602140][ T9760] device veth1_macvtap entered promiscuous mode [ 488.637494][ T8703] usb 2-1: device not accepting address 19, error -71 [ 488.657494][ T8703] usb usb2-port1: unable to enumerate USB device [ 488.686280][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 488.696914][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.707004][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 488.719133][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.729216][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 488.740301][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.755062][ T9760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.765320][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 488.775078][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 488.784543][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 488.794745][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 488.866360][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 488.876981][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.887453][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 488.898061][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.908084][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 488.918670][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.932742][ T9760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.942101][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 488.952116][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.469544][T10000] Bluetooth: hci3: command 0x040f tx timeout 20:20:35 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106f36d1f000000ec5800000000000000ffffbaf9459c5c953948c6801f2c0945c08ba80000fc99a7422007653872edb4f63adb415ccdfe8081018f000100000000004f2a88d209ea75e16a61fd063f026ed7360627ecda971f7ee096d74c92fad7e34bd5092d45cc36c2440eac2d224609aba9e600000000128ef922502a35290365194a47871a079262514ddb61c548aa5f64670d375db286b1aa16690cfe6cdda6f9bb47f852571169243fd9b6bcf040eabbd03679ff0d3dd5a1bb2ba71343fcccedf626b0a288bf4edc7153d9b97a25c93905916afe56f4c1ec422bd5903c927a0324759e0ae36d10a4747ced1feb31cdab9819de8ac2365c78"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x10000880) 20:20:35 executing program 0: r0 = inotify_init1(0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x10000880) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x300704cdda2b62d6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="93b20000000000000000010000000000000009df8f15e94f6b3b00020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x40, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x148, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x35}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x142}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "0941a73c4e619b3793ec5fac5dd5cff369ee449c55a8"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004884}, 0x4000080) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r9, r2, 0x0) 20:20:35 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000022c0)=ANY=[@ANYRES32=0x0], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') read$FUSE(r2, &(0x7f0000000280), 0xfffffed3) 20:20:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x4ad8d8d046b6f11c, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000780)={0x0, "f7b457772cb23e7736779ede5cc72aaa"}) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x406100) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xc3, 0x62}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) socket$nl_sock_diag(0x10, 0x3, 0x4) listen(0xffffffffffffffff, 0x0) fsetxattr(r2, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000002c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') [ 489.808307][ C0] sd 0:0:1:0: [sg0] tag#5100 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 489.819038][ C0] sd 0:0:1:0: [sg0] tag#5100 CDB: Test Unit Ready [ 489.825879][ C0] sd 0:0:1:0: [sg0] tag#5100 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.836307][ C0] sd 0:0:1:0: [sg0] tag#5100 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.846268][ C0] sd 0:0:1:0: [sg0] tag#5100 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.856327][ C0] sd 0:0:1:0: [sg0] tag#5100 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.866333][ C0] sd 0:0:1:0: [sg0] tag#5100 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.876269][ C0] sd 0:0:1:0: [sg0] tag#5100 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.886214][ C0] sd 0:0:1:0: [sg0] tag#5100 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.896139][ C0] sd 0:0:1:0: [sg0] tag#5100 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.906122][ C0] sd 0:0:1:0: [sg0] tag#5100 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.916108][ C0] sd 0:0:1:0: [sg0] tag#5100 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.926060][ C0] sd 0:0:1:0: [sg0] tag#5100 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.936014][ C0] sd 0:0:1:0: [sg0] tag#5100 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.945951][ C0] sd 0:0:1:0: [sg0] tag#5100 CDB[c0]: 00 00 00 00 00 00 00 00 20:20:36 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000022c0)=ANY=[@ANYRES32=0x0], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') read$FUSE(r2, &(0x7f0000000280), 0xfffffed3) 20:20:36 executing program 3: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="a400000024000b14000000800000000000001200", @ANYRES32=r4, @ANYBLOB="00000000f8c99d28bc83029a3800010074616b72696f00f87300020056000100718d217c70ecdb78250b1e85e248e91a17041dbeb7f90c8be608388a870863d13aace5fa3d6cc498f0"], 0xa4}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10973, 0x0) [ 490.551321][ C0] sd 0:0:1:0: [sg0] tag#5103 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 490.562007][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB: Test Unit Ready [ 490.568826][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.578719][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.588609][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.598518][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.608421][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.618339][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.628236][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.638218][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.648111][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.657996][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.667901][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.677807][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.687706][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[c0]: 00 00 00 00 00 00 00 00 [ 490.695658][ C0] sd 0:0:1:0: [sg0] tag#5104 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 490.706318][ C0] sd 0:0:1:0: [sg0] tag#5104 CDB: Test Unit Ready [ 490.713018][ C0] sd 0:0:1:0: [sg0] tag#5104 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.722902][ C0] sd 0:0:1:0: [sg0] tag#5104 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.732781][ C0] sd 0:0:1:0: [sg0] tag#5104 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.742667][ C0] sd 0:0:1:0: [sg0] tag#5104 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.752539][ C0] sd 0:0:1:0: [sg0] tag#5104 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.762428][ C0] sd 0:0:1:0: [sg0] tag#5104 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.772324][ C0] sd 0:0:1:0: [sg0] tag#5104 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.782221][ C0] sd 0:0:1:0: [sg0] tag#5104 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.796771][ C0] sd 0:0:1:0: [sg0] tag#5104 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.806655][ C0] sd 0:0:1:0: [sg0] tag#5104 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.816539][ C0] sd 0:0:1:0: [sg0] tag#5104 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.826415][ C0] sd 0:0:1:0: [sg0] tag#5104 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.836280][ C0] sd 0:0:1:0: [sg0] tag#5104 CDB[c0]: 00 00 00 00 00 00 00 00 20:20:37 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000022c0)=ANY=[@ANYRES32=0x0], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') read$FUSE(r2, &(0x7f0000000280), 0xfffffed3) 20:20:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x2, 0x1}, 0xc) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3d8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x340, 0x240, 0x240, 0x340, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x240, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bond_slave_1\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x7}}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) 20:20:37 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106f36d1f000000ec5800000000000000ffffbaf9459c5c953948c6801f2c0945c08ba80000fc99a7422007653872edb4f63adb415ccdfe8081018f000100000000004f2a88d209ea75e16a61fd063f026ed7360627ecda971f7ee096d74c92fad7e34bd5092d45cc36c2440eac2d224609aba9e600000000128ef922502a35290365194a47871a079262514ddb61c548aa5f64670d375db286b1aa16690cfe6cdda6f9bb47f852571169243fd9b6bcf040eabbd03679ff0d3dd5a1bb2ba71343fcccedf626b0a288bf4edc7153d9b97a25c93905916afe56f4c1ec422bd5903c927a0324759e0ae36d10a4747ced1feb31cdab9819de8ac2365c78"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 491.545732][ T4890] Bluetooth: hci3: command 0x0419 tx timeout [ 491.871154][ C1] sd 0:0:1:0: [sg0] tag#5107 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 491.881891][ C1] sd 0:0:1:0: [sg0] tag#5107 CDB: Test Unit Ready [ 491.888676][ C1] sd 0:0:1:0: [sg0] tag#5107 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.898552][ C1] sd 0:0:1:0: [sg0] tag#5107 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.908434][ C1] sd 0:0:1:0: [sg0] tag#5107 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.918320][ C1] sd 0:0:1:0: [sg0] tag#5107 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.928171][ C1] sd 0:0:1:0: [sg0] tag#5107 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.938067][ C1] sd 0:0:1:0: [sg0] tag#5107 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.947951][ C1] sd 0:0:1:0: [sg0] tag#5107 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.957827][ C1] sd 0:0:1:0: [sg0] tag#5107 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:20:38 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001fb2b9409ac00ac9a37b8020", 0x12, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 491.967717][ C1] sd 0:0:1:0: [sg0] tag#5107 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.977594][ C1] sd 0:0:1:0: [sg0] tag#5107 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.987468][ C1] sd 0:0:1:0: [sg0] tag#5107 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.997369][ C1] sd 0:0:1:0: [sg0] tag#5107 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 492.007238][ C1] sd 0:0:1:0: [sg0] tag#5107 CDB[c0]: 00 00 00 00 00 00 00 00 20:20:38 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x7f, 0x4) sendmmsg$inet6(r0, &(0x7f0000004240)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x400d0c5) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2302"], 0x2) close(r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 20:20:38 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x1ff}, 0x8) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r4 = dup3(r3, r0, 0x0) r5 = inotify_init1(0x0) accept4$vsock_stream(r3, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x80800) r6 = dup(r5) inotify_add_watch(r6, &(0x7f00000000c0)='./file0\x00', 0x10000880) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r8, 0x711, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r8, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x1) write$binfmt_script(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="2302"], 0x2) close(r7) sendto$inet(r7, &(0x7f0000000100)="362b3f92630f7d397e48be0e5126e1a2735c922dda92ee2bd9b8c1fe9cf70ae2412d552e334b23b53c87990ff626a4c0894358857e1145b77675a910fd4a6c373bea288e440ce66862a9b06535f322609598bae4ba2701eddcacb9243e04c67679addf85739190f06987158541455df6783e8da25aec5f96a171dc9731df6f4bba08bdc327cef86add63582fbf60a49dd8d4a07131eb83fd3050c29afb96760a566c4c435473e58693ca8081a3937c2f0a6f16debb88f6089a8c", 0xfffffffffffffdf7, 0x0, &(0x7f0000618000)={0x2, 0x4e1c, @remote}, 0x10) 20:20:38 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x1ff}, 0x8) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r4 = dup3(r3, r0, 0x0) r5 = inotify_init1(0x0) accept4$vsock_stream(r3, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x80800) r6 = dup(r5) inotify_add_watch(r6, &(0x7f00000000c0)='./file0\x00', 0x10000880) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r8, 0x711, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r8, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x1) write$binfmt_script(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="2302"], 0x2) close(r7) sendto$inet(r7, &(0x7f0000000100)="362b3f92630f7d397e48be0e5126e1a2735c922dda92ee2bd9b8c1fe9cf70ae2412d552e334b23b53c87990ff626a4c0894358857e1145b77675a910fd4a6c373bea288e440ce66862a9b06535f322609598bae4ba2701eddcacb9243e04c67679addf85739190f06987158541455df6783e8da25aec5f96a171dc9731df6f4bba08bdc327cef86add63582fbf60a49dd8d4a07131eb83fd3050c29afb96760a566c4c435473e58693ca8081a3937c2f0a6f16debb88f6089a8c", 0xfffffffffffffdf7, 0x0, &(0x7f0000618000)={0x2, 0x4e1c, @remote}, 0x10) 20:20:38 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000080)={r1, 0x5, 0xff, "9d32c61c81c2ac01104992283ec26b83e5db349a0cb4c4317814cdd8b43f2426596559dc2487b9dec30f1234eef2132828ae020561ed0faf0b2bd34d602f9de1032c06099482e5a3aefb6abf5926a845ccd04e0573412e864e24fcb0751a6b825034a76c59b442ff8e4cce4b42046be10fce01a70b26485b07c06862326b68dbe59df9420660ac5839eec4bdf90c9e3639c27c766b861500eb49f6eab975d4a037576316237aa46e7c82a58eb80f4d898017c68eadadb5a0c40a8aed1a884831487a93f732"}) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000040), 0x4) [ 492.640795][T10063] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.1'. 20:20:39 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) inotify_init1(0x80000) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:20:39 executing program 3: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106f36d1f000000ec5800000000000000ffffbaf9459c5c953948c6801f2c0945c08ba80000fc99a7422007653872edb4f63adb415ccdfe8081018f000100000000004f2a88d209ea75e16a61fd063f026ed7360627ecda971f7ee096d74c92fad7e34bd5092d45cc36c2440eac2d224609aba9e600000000128ef922502a35290365194a47871a079262514ddb61c548aa5f64670d375db286b1aa16690cfe6cdda6f9bb47f852571169243fd9b6bcf040eabbd03679ff0d3dd5a1bb2ba71343fcccedf626b0a288bf4edc7153d9b97a25c93905916afe56f4c1ec422bd5903c927a0324759e0ae36d10a4747ced1feb31cdab9819de8ac2365c78"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:20:39 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x325, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0023050000000700000000"], 0x0}, 0x0) getpgid(0x0) socket$pppoe(0x18, 0x1, 0x0) [ 493.460220][ C1] sd 0:0:1:0: [sg0] tag#5059 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 493.470904][ C1] sd 0:0:1:0: [sg0] tag#5059 CDB: Test Unit Ready [ 493.477713][ C1] sd 0:0:1:0: [sg0] tag#5059 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.487587][ C1] sd 0:0:1:0: [sg0] tag#5059 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.497508][ C1] sd 0:0:1:0: [sg0] tag#5059 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.507381][ C1] sd 0:0:1:0: [sg0] tag#5059 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.517275][ C1] sd 0:0:1:0: [sg0] tag#5059 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.527157][ C1] sd 0:0:1:0: [sg0] tag#5059 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.537040][ C1] sd 0:0:1:0: [sg0] tag#5059 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.546940][ C1] sd 0:0:1:0: [sg0] tag#5059 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:20:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000507000000100000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300010000000a0005000400000000000000"], 0x5c}}, 0x0) [ 493.556829][ C1] sd 0:0:1:0: [sg0] tag#5059 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.566717][ C1] sd 0:0:1:0: [sg0] tag#5059 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.576592][ C1] sd 0:0:1:0: [sg0] tag#5059 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.586458][ C1] sd 0:0:1:0: [sg0] tag#5059 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.596328][ C1] sd 0:0:1:0: [sg0] tag#5059 CDB[c0]: 00 00 00 00 00 00 00 00 [ 493.603105][ C0] sd 0:0:1:0: [sg0] tag#5060 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 493.614648][ C0] sd 0:0:1:0: [sg0] tag#5060 CDB: Test Unit Ready [ 493.621392][ C0] sd 0:0:1:0: [sg0] tag#5060 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.631297][ C0] sd 0:0:1:0: [sg0] tag#5060 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.641264][ C0] sd 0:0:1:0: [sg0] tag#5060 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.651813][ C0] sd 0:0:1:0: [sg0] tag#5060 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.661787][ C0] sd 0:0:1:0: [sg0] tag#5060 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.671680][ C0] sd 0:0:1:0: [sg0] tag#5060 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.681609][ C0] sd 0:0:1:0: [sg0] tag#5060 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.691514][ C0] sd 0:0:1:0: [sg0] tag#5060 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.701478][ C0] sd 0:0:1:0: [sg0] tag#5060 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.711410][ C0] sd 0:0:1:0: [sg0] tag#5060 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.721421][ C0] sd 0:0:1:0: [sg0] tag#5060 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.731380][ C0] sd 0:0:1:0: [sg0] tag#5060 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.741767][ C0] sd 0:0:1:0: [sg0] tag#5060 CDB[c0]: 00 00 00 00 00 00 00 00 [ 493.973479][T10082] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:20:40 executing program 1: unshare(0x44000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x3a) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xa000004, 0x8) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000080)=""/219, 0xdb) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) 20:20:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="69a19e7139d967b157af66623c7918747409ce8466a2efdf681a5694c5d62f61daab0ccb7b24413b8f6fa537aa2ca289bfcb", 0x32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f0000000440)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfbfbfbfb}) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)={0x8}) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) r2 = inotify_init1(0x0) r3 = dup(r2) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x10000880) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x8, 0x3f, 0x7, 0x12, 0x0, 0x1b2, 0x80300, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x9, 0x4504a246}, 0x14144, 0x8, 0x585, 0x8, 0x100, 0x6, 0x8}, r3, 0xb, 0xffffffffffffffff, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x4, 0x0, @thr={&(0x7f00000004c0)="cc8ccd9e759aea4ce90bd72dab51cf24af341a15b20858cbb900495f8f8f3f6cffd0e6d8831a00601bac1cfea9188c05f94813f1ab3c6bafd93b2489aba4218b1fbbb6594f35f0573ef25b784ac7784c7eaaaf081b042e39b002d85ce073e4dc38c27733495fa7ecf8f2ce9f49b1a57d544f76db5a102fd8c41dc7ff2fe5ac879f8eefa21aa2e6ea295feb0cce9d4dce236b91e12722d4ebde43ecd7c2771be0806d98b1", 0x0}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 494.317396][ T8703] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 494.396801][T10086] IPVS: ftp: loaded support on port[0] = 21 20:20:40 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) inotify_init1(0x80000) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 494.566362][ T8703] usb 1-1: Using ep0 maxpacket: 8 [ 494.688183][ T8703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.699440][ T8703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.710497][ T8703] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.723585][ T8703] usb 1-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.40 [ 494.732924][ T8703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.959654][ T8703] usb 1-1: config 0 descriptor?? [ 494.975102][ C1] sd 0:0:1:0: [sg0] tag#5061 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 494.985803][ C1] sd 0:0:1:0: [sg0] tag#5061 CDB: Test Unit Ready [ 494.992468][ C1] sd 0:0:1:0: [sg0] tag#5061 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.002412][ C1] sd 0:0:1:0: [sg0] tag#5061 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.012287][ C1] sd 0:0:1:0: [sg0] tag#5061 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.022212][ C1] sd 0:0:1:0: [sg0] tag#5061 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.032094][ C1] sd 0:0:1:0: [sg0] tag#5061 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.041983][ C1] sd 0:0:1:0: [sg0] tag#5061 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.051876][ C1] sd 0:0:1:0: [sg0] tag#5061 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.061804][ C1] sd 0:0:1:0: [sg0] tag#5061 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.071777][ C1] sd 0:0:1:0: [sg0] tag#5061 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.081637][ C1] sd 0:0:1:0: [sg0] tag#5061 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.091479][ C1] sd 0:0:1:0: [sg0] tag#5061 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.101313][ C1] sd 0:0:1:0: [sg0] tag#5061 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.111237][ C1] sd 0:0:1:0: [sg0] tag#5061 CDB[c0]: 00 00 00 00 00 00 00 00 20:20:41 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000080)={0x98f90a}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101802, 0x122) [ 495.496855][ T8703] usbhid 1-1:0.0: can't add hid device: -71 [ 495.503195][ T8703] usbhid: probe of 1-1:0.0 failed with error -71 [ 495.584979][ T8703] usb 1-1: USB disconnect, device number 19 20:20:42 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) inotify_init1(0x80000) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:20:42 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x24) ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x100060) tkill(r2, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) [ 496.134920][ C1] sd 0:0:1:0: [sg0] tag#5062 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 496.145641][ C1] sd 0:0:1:0: [sg0] tag#5062 CDB: Test Unit Ready [ 496.152312][ C1] sd 0:0:1:0: [sg0] tag#5062 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.162222][ C1] sd 0:0:1:0: [sg0] tag#5062 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.172125][ C1] sd 0:0:1:0: [sg0] tag#5062 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.182055][ C1] sd 0:0:1:0: [sg0] tag#5062 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.191970][ C1] sd 0:0:1:0: [sg0] tag#5062 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.196594][ T8703] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 496.201816][ C1] sd 0:0:1:0: [sg0] tag#5062 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.219090][ C1] sd 0:0:1:0: [sg0] tag#5062 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.229016][ C1] sd 0:0:1:0: [sg0] tag#5062 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.238952][ C1] sd 0:0:1:0: [sg0] tag#5062 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.248884][ C1] sd 0:0:1:0: [sg0] tag#5062 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.258818][ C1] sd 0:0:1:0: [sg0] tag#5062 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.268779][ C1] sd 0:0:1:0: [sg0] tag#5062 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:20:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x4, 0x18}, 0xc) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010003904000000000000000000000000ca1d9baea2558a2d8839040d629a8cd4cbbd4f8d43b9c3e11adb849654d7ffe382d1d6e384c7da77abdfa4e3605e4846518c0e070ac2c65129e08863e805d4bc25780cb9c733b15dcfda1666ec1c1b6a2608350b3205bca201f04bcdcd7807f39285f0dedb6b83a74f17a2f7157082ccb9334c6f05bcd14c99bf1886fb34a686040d1e75d902f2353036de316c0aab86e9f2870dd845afda2600"/187, @ANYRES32=r3, @ANYBLOB="83080000000000002000128008000100736974001400028008000100", @ANYRES32=r2, @ANYBLOB="06000f0001000000"], 0x40}}, 0x8041) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty}}}], 0x20}}], 0x1, 0x0) [ 496.278694][ C1] sd 0:0:1:0: [sg0] tag#5062 CDB[c0]: 00 00 00 00 00 00 00 00 [ 496.465520][ T8703] usb 1-1: Using ep0 maxpacket: 8 [ 496.587469][ T8703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.599162][ T8703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.609213][ T8703] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 496.622265][ T8703] usb 1-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.40 [ 496.631524][ T8703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.647206][T10143] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 496.880733][ T8703] usb 1-1: config 0 descriptor?? 20:20:43 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) ioctl$int_out(r3, 0x5460, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140001"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 20:20:43 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:20:43 executing program 0: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106f36d1f000000ec5800000000000000ffffbaf9459c5c953948c6801f2c0945c08ba80000fc99a7422007653872edb4f63adb415ccdfe8081018f000100000000004f2a88d209ea75e16a61fd063f026ed7360627ecda971f7ee096d74c92fad7e34bd5092d45cc36c2440eac2d224609aba9e600000000128ef922502a35290365194a47871a079262514ddb61c548aa5f64670d375db286b1aa16690cfe6cdda6f9bb47f852571169243fd9b6bcf040eabbd03679ff0d3dd5a1bb2ba71343fcccedf626b0a288bf4edc7153d9b97a25c93905916afe56f4c1ec422bd5903c927a0324759e0ae36d10a4747ced1feb31cdab9819de8ac2365c78"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) inotify_init1(0x80000) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 497.266186][ T8703] usbhid 1-1:0.0: can't add hid device: -71 [ 497.272527][ T8703] usbhid: probe of 1-1:0.0 failed with error -71 [ 497.274074][T10086] IPVS: ftp: loaded support on port[0] = 21 [ 497.321746][ T8703] usb 1-1: USB disconnect, device number 20 [ 497.471063][T10172] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 497.496855][ T8510] tipc: TX() has been purged, node left! [ 497.582318][ C1] sd 0:0:1:0: [sg0] tag#5063 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 497.592989][ C1] sd 0:0:1:0: [sg0] tag#5063 CDB: Test Unit Ready [ 497.599782][ C1] sd 0:0:1:0: [sg0] tag#5063 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.609669][ C1] sd 0:0:1:0: [sg0] tag#5063 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.619575][ C1] sd 0:0:1:0: [sg0] tag#5063 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.629451][ C1] sd 0:0:1:0: [sg0] tag#5063 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.639319][ C1] sd 0:0:1:0: [sg0] tag#5063 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.649214][ C1] sd 0:0:1:0: [sg0] tag#5063 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.659087][ C1] sd 0:0:1:0: [sg0] tag#5063 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.668953][ C1] sd 0:0:1:0: [sg0] tag#5063 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:20:44 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 497.680634][ C1] sd 0:0:1:0: [sg0] tag#5063 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.690503][ C1] sd 0:0:1:0: [sg0] tag#5063 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.700361][ C1] sd 0:0:1:0: [sg0] tag#5063 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.710218][ C1] sd 0:0:1:0: [sg0] tag#5063 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.720131][ C1] sd 0:0:1:0: [sg0] tag#5063 CDB[c0]: 00 00 00 00 00 00 00 00 [ 497.998321][ C0] sd 0:0:1:0: [sg0] tag#5064 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 498.009247][ C0] sd 0:0:1:0: [sg0] tag#5064 CDB: Test Unit Ready [ 498.016067][ C0] sd 0:0:1:0: [sg0] tag#5064 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.026782][ C0] sd 0:0:1:0: [sg0] tag#5064 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.036693][ C0] sd 0:0:1:0: [sg0] tag#5064 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.046699][ C0] sd 0:0:1:0: [sg0] tag#5064 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.056638][ C0] sd 0:0:1:0: [sg0] tag#5064 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.066570][ C0] sd 0:0:1:0: [sg0] tag#5064 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.076496][ C0] sd 0:0:1:0: [sg0] tag#5064 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.086599][ C0] sd 0:0:1:0: [sg0] tag#5064 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.096574][ C0] sd 0:0:1:0: [sg0] tag#5064 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.106535][ C0] sd 0:0:1:0: [sg0] tag#5064 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.116499][ C0] sd 0:0:1:0: [sg0] tag#5064 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.127397][ C0] sd 0:0:1:0: [sg0] tag#5064 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.137352][ C0] sd 0:0:1:0: [sg0] tag#5064 CDB[c0]: 00 00 00 00 00 00 00 00 20:20:44 executing program 3: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) inotify_init1(0x80000) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 498.615333][ C0] sd 0:0:1:0: [sg0] tag#5065 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 498.626083][ C0] sd 0:0:1:0: [sg0] tag#5065 CDB: Test Unit Ready [ 498.632745][ C0] sd 0:0:1:0: [sg0] tag#5065 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.642685][ C0] sd 0:0:1:0: [sg0] tag#5065 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.652624][ C0] sd 0:0:1:0: [sg0] tag#5065 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.662652][ C0] sd 0:0:1:0: [sg0] tag#5065 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.673227][ C0] sd 0:0:1:0: [sg0] tag#5065 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.683188][ C0] sd 0:0:1:0: [sg0] tag#5065 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.693731][ C0] sd 0:0:1:0: [sg0] tag#5065 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.703693][ C0] sd 0:0:1:0: [sg0] tag#5065 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.713643][ C0] sd 0:0:1:0: [sg0] tag#5065 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.723606][ C0] sd 0:0:1:0: [sg0] tag#5065 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.733557][ C0] sd 0:0:1:0: [sg0] tag#5065 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.745441][ C0] sd 0:0:1:0: [sg0] tag#5065 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.755367][ C0] sd 0:0:1:0: [sg0] tag#5065 CDB[c0]: 00 00 00 00 00 00 00 00 20:20:45 executing program 0: syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xc12, 0x5, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000005000300000079a02c"], 0x0, 0x0, 0x0, 0x0}, 0x0) 20:20:45 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r8}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:20:45 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 499.244432][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 499.296429][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 499.370636][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 499.430963][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:20:46 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r8}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:20:46 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r2 = inotify_init1(0x80000) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:20:46 executing program 0: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 500.069518][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 500.143248][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:20:46 executing program 3: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 500.298185][ C0] sd 0:0:1:0: [sg0] tag#5068 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 500.308975][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB: Test Unit Ready [ 500.315789][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.325723][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.331799][ C1] sd 0:0:1:0: [sg0] tag#5069 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 500.335657][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.346188][ C1] sd 0:0:1:0: [sg0] tag#5069 CDB: Test Unit Ready [ 500.355894][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.362390][ C1] sd 0:0:1:0: [sg0] tag#5069 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.372132][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.381867][ C1] sd 0:0:1:0: [sg0] tag#5069 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.392329][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.402038][ C1] sd 0:0:1:0: [sg0] tag#5069 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.411725][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.421431][ C1] sd 0:0:1:0: [sg0] tag#5069 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.431115][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.440816][ C1] sd 0:0:1:0: [sg0] tag#5069 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.450502][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.460202][ C1] sd 0:0:1:0: [sg0] tag#5069 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.469888][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.479597][ C1] sd 0:0:1:0: [sg0] tag#5069 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.489284][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.498987][ C1] sd 0:0:1:0: [sg0] tag#5069 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.508675][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.518374][ C1] sd 0:0:1:0: [sg0] tag#5069 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.528109][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[c0]: 00 00 00 00 00 00 00 00 20:20:46 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r8}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 500.537845][ C1] sd 0:0:1:0: [sg0] tag#5069 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.555587][ C1] sd 0:0:1:0: [sg0] tag#5069 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.565471][ C1] sd 0:0:1:0: [sg0] tag#5069 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.575346][ C1] sd 0:0:1:0: [sg0] tag#5069 CDB[c0]: 00 00 00 00 00 00 00 00 [ 500.890304][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 501.016038][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 501.089539][ C0] sd 0:0:1:0: [sg0] tag#5070 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 501.100466][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB: Test Unit Ready [ 501.107353][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.117275][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.127189][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.137071][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.146972][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.156883][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.166765][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.176656][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:20:47 executing program 3: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x86, 0x8, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x2000000}, 0x0, 0x3, 0xffffffffffffffff, 0xb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1001) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0x7f) [ 501.186550][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.196445][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.206345][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.216241][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.226104][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[c0]: 00 00 00 00 00 00 00 00 20:20:47 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r8}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 501.720494][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:20:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000d3a48f226e21012d1d785db1ff2c90e4c9d8604b40d9ed5760e5e2db7aa724d554d6bed32b8f94fdd2decf6b874fb5391c2ea86af3d61cce023a706eb613c9cce91b4d5fda8ce19093afa703dffa8687dafa198865d71516057220e39ed93580d5435049238a00a98b00c634f75af290f0d6d91a444244df25c75530f07513af73260cb83555ff4865424724bb0d9abf6d5259ed7e5f83120e0502c3bfb0111ee94ad41dbaed1fc53c887f344af1677221c4b6f9b9f5505dcca63825344405d0", @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf2506000000080001007063690011000200303030303a30303a31302e300000000008000300030000000600040002000000080001007063690011000200303030303a30303a31302e300000000008000300030000000600040000000000080001007063690011000200303030303a30303a31302e300000000008000300010000000600040000000000"], 0x98}, 0x1, 0x0, 0x0, 0xd0}, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}]}}}]}, 0x40}}, 0x0) 20:20:48 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r2 = inotify_init1(0x80000) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 501.815091][T10232] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:20:48 executing program 3: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r2 = inotify_init1(0x80000) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:20:48 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 502.099601][T10236] device ipvlan0 entered promiscuous mode [ 502.108177][T10236] device ipvlan0 left promiscuous mode [ 502.402814][ C1] sd 0:0:1:0: [sg0] tag#5071 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 502.413510][ C1] sd 0:0:1:0: [sg0] tag#5071 CDB: Test Unit Ready [ 502.420330][ C1] sd 0:0:1:0: [sg0] tag#5071 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.430202][ C1] sd 0:0:1:0: [sg0] tag#5071 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.440092][ C1] sd 0:0:1:0: [sg0] tag#5071 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.449960][ C1] sd 0:0:1:0: [sg0] tag#5071 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.459846][ C1] sd 0:0:1:0: [sg0] tag#5071 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.469735][ C1] sd 0:0:1:0: [sg0] tag#5071 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.479622][ C1] sd 0:0:1:0: [sg0] tag#5071 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.490201][ C1] sd 0:0:1:0: [sg0] tag#5071 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.500112][ C1] sd 0:0:1:0: [sg0] tag#5071 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.510017][ C1] sd 0:0:1:0: [sg0] tag#5071 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.519904][ C1] sd 0:0:1:0: [sg0] tag#5071 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.529793][ C1] sd 0:0:1:0: [sg0] tag#5071 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.539829][ C1] sd 0:0:1:0: [sg0] tag#5071 CDB[c0]: 00 00 00 00 00 00 00 00 20:20:49 executing program 3: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106f36d1f000000ec5800000000000000ffffbaf9459c5c953948c6801f2c0945c08ba80000fc99a7422007653872edb4f63adb415ccdfe8081018f000100000000004f2a88d209ea75e16a61fd063f026ed7360627ecda971f7ee096d74c92fad7e34bd5092d45cc36c2440eac2d224609aba9e600000000128ef922502a35290365194a47871a079262514ddb61c548aa5f64670d375db286b1aa16690cfe6cdda6f9bb47f852571169243fd9b6bcf040eabbd03679ff0d3dd5a1bb2ba71343fcccedf626b0a288bf4edc7153d9b97a25c93905916afe56f4c1ec422bd5903c927a0324759e0ae36d10a4747ced1feb31cdab9819de8ac2365c78"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r2 = inotify_init1(0x80000) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:20:49 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 502.904698][T10251] device ipvlan0 entered promiscuous mode [ 502.913244][T10251] device ipvlan0 left promiscuous mode 20:20:49 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r2 = inotify_init1(0x80000) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 503.387619][T10259] /med (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 503.490493][ C1] sd 0:0:1:0: [sg0] tag#5072 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 503.501170][ C1] sd 0:0:1:0: [sg0] tag#5072 CDB: Test Unit Ready [ 503.507991][ C1] sd 0:0:1:0: [sg0] tag#5072 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.517865][ C1] sd 0:0:1:0: [sg0] tag#5072 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.527766][ C1] sd 0:0:1:0: [sg0] tag#5072 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.537635][ C1] sd 0:0:1:0: [sg0] tag#5072 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.547518][ C1] sd 0:0:1:0: [sg0] tag#5072 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.557396][ C1] sd 0:0:1:0: [sg0] tag#5072 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.567282][ C1] sd 0:0:1:0: [sg0] tag#5072 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.577157][ C1] sd 0:0:1:0: [sg0] tag#5072 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.587026][ C1] sd 0:0:1:0: [sg0] tag#5072 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.596936][ C1] sd 0:0:1:0: [sg0] tag#5072 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.607499][ C1] sd 0:0:1:0: [sg0] tag#5072 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.617549][ C1] sd 0:0:1:0: [sg0] tag#5072 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.627430][ C1] sd 0:0:1:0: [sg0] tag#5072 CDB[c0]: 00 00 00 00 00 00 00 00 [ 503.708811][ C0] sd 0:0:1:0: [sg0] tag#5073 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 503.719593][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB: Test Unit Ready [ 503.726412][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.736451][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.746374][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.756406][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.766325][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.776280][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.786253][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.796211][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:20:50 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 503.806157][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.816113][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.826057][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.835974][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.845841][ C0] sd 0:0:1:0: [sg0] tag#5073 CDB[c0]: 00 00 00 00 00 00 00 00 20:20:50 executing program 3: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r2 = inotify_init1(0x80000) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 504.175330][T10265] /med (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 504.608815][ C1] sd 0:0:1:0: [sg0] tag#5074 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 504.619528][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB: Test Unit Ready [ 504.626317][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.636185][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.646068][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.655947][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.665821][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.675687][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.687733][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.697618][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:20:51 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:20:51 executing program 3: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r2 = inotify_init1(0x80000) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 504.707496][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.717375][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.727260][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.737176][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.747057][ C1] sd 0:0:1:0: [sg0] tag#5074 CDB[c0]: 00 00 00 00 00 00 00 00 20:20:51 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 505.031201][ T8510] tipc: TX() has been purged, node left! [ 505.072793][T10273] __nla_validate_parse: 3 callbacks suppressed [ 505.072831][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 505.157685][T10277] /med (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 505.158933][ C0] sd 0:0:1:0: [sg0] tag#5080 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 505.179742][ C0] sd 0:0:1:0: [sg0] tag#5080 CDB: Test Unit Ready [ 505.186570][ C0] sd 0:0:1:0: [sg0] tag#5080 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.196486][ C0] sd 0:0:1:0: [sg0] tag#5080 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.206426][ C0] sd 0:0:1:0: [sg0] tag#5080 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.216305][ C0] sd 0:0:1:0: [sg0] tag#5080 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.226197][ C0] sd 0:0:1:0: [sg0] tag#5080 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.236091][ C0] sd 0:0:1:0: [sg0] tag#5080 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.245981][ C0] sd 0:0:1:0: [sg0] tag#5080 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.255876][ C0] sd 0:0:1:0: [sg0] tag#5080 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.265736][ C0] sd 0:0:1:0: [sg0] tag#5080 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.275619][ C0] sd 0:0:1:0: [sg0] tag#5080 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.284919][ C1] sd 0:0:1:0: [sg0] tag#5081 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 505.285477][ C0] sd 0:0:1:0: [sg0] tag#5080 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.296167][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB: Test Unit Ready [ 505.305856][ C0] sd 0:0:1:0: [sg0] tag#5080 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.312366][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.322138][ C0] sd 0:0:1:0: [sg0] tag#5080 CDB[c0]: 00 00 00 00 00 00 00 00 [ 505.331949][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.349253][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.359177][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.369090][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.378993][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.388895][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:20:51 executing program 0: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106f36d1f000000ec5800000000000000ffffbaf9459c5c953948c6801f2c0945c08ba80000fc99a7422007653872edb4f63adb415ccdfe8081018f000100000000004f2a88d209ea75e16a61fd063f026ed7360627ecda971f7ee096d74c92fad7e34bd5092d45cc36c2440eac2d224609aba9e600000000128ef922502a35290365194a47871a079262514ddb61c548aa5f64670d375db286b1aa16690cfe6cdda6f9bb47f852571169243fd9b6bcf040eabbd03679ff0d3dd5a1bb2ba71343fcccedf626b0a288bf4edc7153d9b97a25c93905916afe56f4c1ec422bd5903c927a0324759e0ae36d10a4747ced1feb31cdab9819de8ac2365c78"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r2 = inotify_init1(0x80000) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 505.398822][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.409440][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.419357][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.429257][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.439177][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.449102][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[c0]: 00 00 00 00 00 00 00 00 20:20:51 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:20:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x2, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb9, &(0x7f000000cf3d)=""/185, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 20:20:52 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 505.944512][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 506.003754][T10290] /med (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 506.046730][ C0] sd 0:0:1:0: [sg0] tag#5082 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 506.057433][ C0] sd 0:0:1:0: [sg0] tag#5082 CDB: Test Unit Ready [ 506.064099][ C0] sd 0:0:1:0: [sg0] tag#5082 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.074054][ C0] sd 0:0:1:0: [sg0] tag#5082 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.084006][ C0] sd 0:0:1:0: [sg0] tag#5082 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.093944][ C0] sd 0:0:1:0: [sg0] tag#5082 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.103897][ C0] sd 0:0:1:0: [sg0] tag#5082 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.113849][ C0] sd 0:0:1:0: [sg0] tag#5082 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.123799][ C0] sd 0:0:1:0: [sg0] tag#5082 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.133761][ C0] sd 0:0:1:0: [sg0] tag#5082 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.143738][ C0] sd 0:0:1:0: [sg0] tag#5082 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.153706][ C0] sd 0:0:1:0: [sg0] tag#5082 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.163667][ C0] sd 0:0:1:0: [sg0] tag#5082 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.173609][ C0] sd 0:0:1:0: [sg0] tag#5082 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.183551][ C0] sd 0:0:1:0: [sg0] tag#5082 CDB[c0]: 00 00 00 00 00 00 00 00 20:20:52 executing program 3: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106f36d1f000000ec5800000000000000ffffbaf9459c5c953948c6801f2c0945c08ba80000fc99a7422007653872edb4f63adb415ccdfe8081018f000100000000004f2a88d209ea75e16a61fd063f026ed7360627ecda971f7ee096d74c92fad7e34bd5092d45cc36c2440eac2d224609aba9e600000000128ef922502a35290365194a47871a079262514ddb61c548aa5f64670d375db286b1aa16690cfe6cdda6f9bb47f852571169243fd9b6bcf040eabbd03679ff0d3dd5a1bb2ba71343fcccedf626b0a288bf4edc7153d9b97a25c93905916afe56f4c1ec422bd5903c927a0324759e0ae36d10a4747ced1feb31cdab9819de8ac2365c78"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:20:52 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:20:53 executing program 0: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 506.862982][ C1] sd 0:0:1:0: [sg0] tag#5084 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 506.866773][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 506.873753][ C1] sd 0:0:1:0: [sg0] tag#5084 CDB: Test Unit Ready [ 506.889631][ C1] sd 0:0:1:0: [sg0] tag#5084 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.899495][ C1] sd 0:0:1:0: [sg0] tag#5084 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.909443][ C1] sd 0:0:1:0: [sg0] tag#5084 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.919317][ C1] sd 0:0:1:0: [sg0] tag#5084 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.929182][ C1] sd 0:0:1:0: [sg0] tag#5084 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.939044][ C1] sd 0:0:1:0: [sg0] tag#5084 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.948925][ C1] sd 0:0:1:0: [sg0] tag#5084 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.958788][ C1] sd 0:0:1:0: [sg0] tag#5084 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.968661][ C1] sd 0:0:1:0: [sg0] tag#5084 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.978524][ C1] sd 0:0:1:0: [sg0] tag#5084 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.988382][ C1] sd 0:0:1:0: [sg0] tag#5084 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.998237][ C1] sd 0:0:1:0: [sg0] tag#5084 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.008095][ C1] sd 0:0:1:0: [sg0] tag#5084 CDB[c0]: 00 00 00 00 00 00 00 00 [ 507.016948][T10300] /med (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) 20:20:53 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 507.441022][ C0] sd 0:0:1:0: [sg0] tag#5083 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 507.451720][ C0] sd 0:0:1:0: [sg0] tag#5083 CDB: Test Unit Ready [ 507.459249][ C0] sd 0:0:1:0: [sg0] tag#5083 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.469156][ C0] sd 0:0:1:0: [sg0] tag#5083 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.479060][ C0] sd 0:0:1:0: [sg0] tag#5083 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.488962][ C0] sd 0:0:1:0: [sg0] tag#5083 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.498864][ C0] sd 0:0:1:0: [sg0] tag#5083 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.508733][ C0] sd 0:0:1:0: [sg0] tag#5083 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.518640][ C0] sd 0:0:1:0: [sg0] tag#5083 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.528556][ C0] sd 0:0:1:0: [sg0] tag#5083 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.538565][ C0] sd 0:0:1:0: [sg0] tag#5083 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.548473][ C0] sd 0:0:1:0: [sg0] tag#5083 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.558389][ C0] sd 0:0:1:0: [sg0] tag#5083 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.568295][ C0] sd 0:0:1:0: [sg0] tag#5083 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.578284][ C0] sd 0:0:1:0: [sg0] tag#5083 CDB[c0]: 00 00 00 00 00 00 00 00 [ 507.586223][ C0] sd 0:0:1:0: [sg0] tag#5085 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 507.596897][ C0] sd 0:0:1:0: [sg0] tag#5085 CDB: Test Unit Ready [ 507.603558][ C0] sd 0:0:1:0: [sg0] tag#5085 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.613467][ C0] sd 0:0:1:0: [sg0] tag#5085 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.623374][ C0] sd 0:0:1:0: [sg0] tag#5085 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.638060][ C0] sd 0:0:1:0: [sg0] tag#5085 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.648130][ C0] sd 0:0:1:0: [sg0] tag#5085 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.658039][ C0] sd 0:0:1:0: [sg0] tag#5085 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.668802][ C0] sd 0:0:1:0: [sg0] tag#5085 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.678752][ C0] sd 0:0:1:0: [sg0] tag#5085 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:20:54 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 507.688648][ C0] sd 0:0:1:0: [sg0] tag#5085 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.698559][ C0] sd 0:0:1:0: [sg0] tag#5085 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.708467][ C0] sd 0:0:1:0: [sg0] tag#5085 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.718373][ C0] sd 0:0:1:0: [sg0] tag#5085 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.728257][ C0] sd 0:0:1:0: [sg0] tag#5085 CDB[c0]: 00 00 00 00 00 00 00 00 20:20:54 executing program 3: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x81}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') flock(0xffffffffffffffff, 0x54489ca478c875aa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x7c, 0x31, 0x201, 0x70bd28, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x376}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) eventfd(0x0) msgget$private(0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000000000000000d400000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000000000000086dd73797a6b616c6c65723000000000000074756e6c3000000000000000000000007369743000008000000000000000000069666230000000000000000000000000000000000000000000000000ffffffffffff00000000000000002801000060010000b0010000697036000000000000000000000000000000000000984518bf7748c86400000050000000000000000000000000000000000000000000000000000000000000000000ffffac1414aa0000000000000000000000000000000000007c820000000000400000000000243e881d006cb8ddad03c498fd000000006d61726b5f6d000000000000000000000000a3940000000000000000000000001800000000000000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff000000000000000000004c454400000000007d346b840000000000000000000000000000000000000000280000000000000073797a300000005b00"/576]}, 0x2b8) [ 508.092371][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 508.175119][T10314] /med (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) 20:20:54 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:20:54 executing program 3: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x81}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') flock(0xffffffffffffffff, 0x54489ca478c875aa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x7c, 0x31, 0x201, 0x70bd28, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x376}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) eventfd(0x0) msgget$private(0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/576]}, 0x2b8) 20:20:54 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x17b2e, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x5}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r7}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 508.640920][ C0] sd 0:0:1:0: [sg0] tag#5086 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 508.651634][ C0] sd 0:0:1:0: [sg0] tag#5086 CDB: Test Unit Ready [ 508.658463][ C0] sd 0:0:1:0: [sg0] tag#5086 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.668369][ C0] sd 0:0:1:0: [sg0] tag#5086 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.678265][ C0] sd 0:0:1:0: [sg0] tag#5086 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.688197][ C0] sd 0:0:1:0: [sg0] tag#5086 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.698169][ C0] sd 0:0:1:0: [sg0] tag#5086 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.708081][ C0] sd 0:0:1:0: [sg0] tag#5086 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.717991][ C0] sd 0:0:1:0: [sg0] tag#5086 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.727895][ C0] sd 0:0:1:0: [sg0] tag#5086 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.737776][ C0] sd 0:0:1:0: [sg0] tag#5086 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.748536][ C0] sd 0:0:1:0: [sg0] tag#5086 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.758430][ C0] sd 0:0:1:0: [sg0] tag#5086 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.768336][ C0] sd 0:0:1:0: [sg0] tag#5086 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.778236][ C0] sd 0:0:1:0: [sg0] tag#5086 CDB[c0]: 00 00 00 00 00 00 00 00 [ 508.819502][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:20:55 executing program 0: syz_usb_connect$uac1(0x0, 0x9c, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "52afdf13"}, @feature_unit={0x11, 0x24, 0x6, 0x0, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x0, 0x24, 0x2, 0x1, 0xf7, 0x1, 0xff, 0x0, "6422036c4d20"}, @format_type_ii_discrete={0x0, 0x24, 0x2, 0x2, 0x4, 0x100, 0x81, "5a238a7aef"}, @format_type_i_discrete={0x0, 0x24, 0x2, 0x1, 0x40, 0x3, 0x4, 0x4, "18ed967336bdb5cb83"}, @format_type_i_discrete={0x0, 0x24, 0x2, 0x1, 0x7, 0x4, 0x81, 0xf8, '?'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x0, 0x24, 0x2, 0x1, 0x4, 0x2, 0x8e, 0x1f, "680b9c14ded1b82da7"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x1, 0x25}]}, {{0x9, 0x5, 0x82, 0x9, 0x3bf, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 20:20:55 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x80}, 0x2, 0x0, 0x0, 0x0, 0x81, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f00000002c0)=0x10) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x58) socket(0x8, 0x0, 0xfffff76e) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x100000001]}, 0x8, 0xb1dd66897b6e33cf) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000300)={@none, 0x1ff, 0x8, 0x7}) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='/dev/kvm\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x7e) r4 = dup3(r1, r2, 0x0) dup2(r4, r3) 20:20:55 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r6}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:20:55 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 509.269352][ C1] sd 0:0:1:0: [sg0] tag#5087 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 509.280061][ C1] sd 0:0:1:0: [sg0] tag#5087 CDB: Test Unit Ready [ 509.286893][ C1] sd 0:0:1:0: [sg0] tag#5087 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.296826][ C1] sd 0:0:1:0: [sg0] tag#5087 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.306772][ C1] sd 0:0:1:0: [sg0] tag#5087 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.316817][ C1] sd 0:0:1:0: [sg0] tag#5087 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.326865][ C1] sd 0:0:1:0: [sg0] tag#5087 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.336762][ C1] sd 0:0:1:0: [sg0] tag#5087 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.346669][ C1] sd 0:0:1:0: [sg0] tag#5087 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.356577][ C1] sd 0:0:1:0: [sg0] tag#5087 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.366524][ C1] sd 0:0:1:0: [sg0] tag#5087 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.376480][ C1] sd 0:0:1:0: [sg0] tag#5087 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.386644][ C1] sd 0:0:1:0: [sg0] tag#5087 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.396572][ C1] sd 0:0:1:0: [sg0] tag#5087 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.407185][ C1] sd 0:0:1:0: [sg0] tag#5087 CDB[c0]: 00 00 00 00 00 00 00 00 [ 509.474260][ T8703] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 509.714498][ T8703] usb 1-1: Using ep0 maxpacket: 16 20:20:56 executing program 3: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 509.835374][ T8703] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.845776][ T8703] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 509.855074][ T8703] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 509.868204][ T8703] usb 1-1: config 1 interface 1 has no altsetting 0 20:20:56 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 509.949765][ C1] sd 0:0:1:0: [sg0] tag#5088 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 509.960457][ C1] sd 0:0:1:0: [sg0] tag#5088 CDB: Test Unit Ready [ 509.967258][ C1] sd 0:0:1:0: [sg0] tag#5088 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.977195][ C1] sd 0:0:1:0: [sg0] tag#5088 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.987125][ C1] sd 0:0:1:0: [sg0] tag#5088 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.997050][ C1] sd 0:0:1:0: [sg0] tag#5088 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.006989][ C1] sd 0:0:1:0: [sg0] tag#5088 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.016923][ C1] sd 0:0:1:0: [sg0] tag#5088 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.026860][ C1] sd 0:0:1:0: [sg0] tag#5088 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.036786][ C1] sd 0:0:1:0: [sg0] tag#5088 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.046717][ C1] sd 0:0:1:0: [sg0] tag#5088 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.056634][ C1] sd 0:0:1:0: [sg0] tag#5088 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.066569][ C1] sd 0:0:1:0: [sg0] tag#5088 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.076492][ C1] sd 0:0:1:0: [sg0] tag#5088 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.086408][ C1] sd 0:0:1:0: [sg0] tag#5088 CDB[c0]: 00 00 00 00 00 00 00 00 [ 510.094352][ C1] sd 0:0:1:0: [sg0] tag#5089 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 510.105752][ C1] sd 0:0:1:0: [sg0] tag#5089 CDB: Test Unit Ready [ 510.112453][ C1] sd 0:0:1:0: [sg0] tag#5089 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.122375][ C1] sd 0:0:1:0: [sg0] tag#5089 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.132364][ C1] sd 0:0:1:0: [sg0] tag#5089 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.142305][ C1] sd 0:0:1:0: [sg0] tag#5089 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.153008][ C1] sd 0:0:1:0: [sg0] tag#5089 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.162944][ C1] sd 0:0:1:0: [sg0] tag#5089 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.172889][ C1] sd 0:0:1:0: [sg0] tag#5089 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.182824][ C1] sd 0:0:1:0: [sg0] tag#5089 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.192799][ C1] sd 0:0:1:0: [sg0] tag#5089 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.202731][ C1] sd 0:0:1:0: [sg0] tag#5089 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.212654][ C1] sd 0:0:1:0: [sg0] tag#5089 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.222629][ C1] sd 0:0:1:0: [sg0] tag#5089 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.225975][ T8703] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 510.232561][ C1] sd 0:0:1:0: [sg0] tag#5089 CDB[c0]: 00 00 00 00 00 00 00 00 [ 510.241711][ T8703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.257947][ T8703] usb 1-1: Product: syz [ 510.262199][ T8703] usb 1-1: Manufacturer: syz [ 510.267182][ T8703] usb 1-1: SerialNumber: syz 20:20:57 executing program 3: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:20:57 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:20:57 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 510.874306][ T8703] usb 1-1: 0:2 : does not exist [ 510.945896][ T8703] usb 1-1: USB disconnect, device number 21 20:20:57 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 511.574156][ T8703] usb 1-1: new high-speed USB device number 22 using dummy_hcd 20:20:58 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 511.814557][ T8703] usb 1-1: Using ep0 maxpacket: 16 [ 511.934753][ T8703] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.945243][ T8703] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 511.954541][ T8703] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 511.967679][ T8703] usb 1-1: config 1 interface 1 has no altsetting 0 20:20:58 executing program 4: r0 = fcntl$getown(0xffffffffffffffff, 0x9) getpriority(0x2, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x24000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x7) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20000800) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x110, r1, 0x38000) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x2, 0x0) fremovexattr(r3, &(0x7f0000000200)=@random={'security.', '/dev/vcsa\x00'}) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000240)={0x52c, 0x2, 0x0, [{0x400, 0x9, 0x2000000000, 0x5, 0x0, 0x6, 0x5}, {0x7, 0xee3, 0xfff, 0xc6, 0xff, 0x95, 0x8}]}) openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x101201, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000340)={'mangle\x00', 0xc1, "6bc994ea542b1225aa0a8554f1395f4cb86254e92f054127511b02030493178a33575c98d9285757c9eb35be97291a829fa038ccf5d816754d8e996f22fd40144736b43eede9630dfe0db7278e0c826ba109a2cd2ad845c215678584467515e57cbcc24d1b22a629f73c813440b48a320a53b9baa6eb565929908b4c289d2d960223468237efcb3583281ea59b4c4e83955e65f0e08ede8346a725d601f32f3bfe6f9942b2fcacafe8fea363849f81cc2188e0b3cfee65e30d8559ba718fe72432"}, &(0x7f0000000440)=0xe5) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000480)) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000004c0)=0xaca8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000500)={0x7, {{0xa, 0x4e22, 0x65, @dev={0xfe, 0x80, [], 0x31}, 0x9}}}, 0x88) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000600)={0x0, 0x8, &(0x7f00000005c0)="fcd319ec4c9ac5", {0xd188, 0x9, 0x20493859, 0x9, 0x5, 0x8, 0x6, 0x5}}) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xd0, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9d3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xdc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}]}, 0xd0}}, 0x40800) flistxattr(r1, &(0x7f0000000800)=""/4096, 0x1000) [ 512.408950][ C1] sd 0:0:1:0: [sg0] tag#5092 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 512.419641][ C1] sd 0:0:1:0: [sg0] tag#5092 CDB: Test Unit Ready [ 512.426437][ C1] sd 0:0:1:0: [sg0] tag#5092 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.436345][ C1] sd 0:0:1:0: [sg0] tag#5092 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.446334][ C1] sd 0:0:1:0: [sg0] tag#5092 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.456282][ C1] sd 0:0:1:0: [sg0] tag#5092 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.466215][ C1] sd 0:0:1:0: [sg0] tag#5092 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.476144][ C1] sd 0:0:1:0: [sg0] tag#5092 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.486073][ C1] sd 0:0:1:0: [sg0] tag#5092 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.496003][ C1] sd 0:0:1:0: [sg0] tag#5092 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.505932][ C1] sd 0:0:1:0: [sg0] tag#5092 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.516032][ C1] sd 0:0:1:0: [sg0] tag#5092 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.525968][ C1] sd 0:0:1:0: [sg0] tag#5092 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.535932][ C1] sd 0:0:1:0: [sg0] tag#5092 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.545831][ C1] sd 0:0:1:0: [sg0] tag#5092 CDB[c0]: 00 00 00 00 00 00 00 00 [ 512.553811][ C1] sd 0:0:1:0: [sg0] tag#5093 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 512.564454][ C1] sd 0:0:1:0: [sg0] tag#5093 CDB: Test Unit Ready [ 512.571105][ C1] sd 0:0:1:0: [sg0] tag#5093 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.581040][ C1] sd 0:0:1:0: [sg0] tag#5093 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.590927][ C1] sd 0:0:1:0: [sg0] tag#5093 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.600787][ C1] sd 0:0:1:0: [sg0] tag#5093 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.610676][ C1] sd 0:0:1:0: [sg0] tag#5093 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.620569][ C1] sd 0:0:1:0: [sg0] tag#5093 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.630427][ C1] sd 0:0:1:0: [sg0] tag#5093 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.640301][ C1] sd 0:0:1:0: [sg0] tag#5093 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.650171][ C1] sd 0:0:1:0: [sg0] tag#5093 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:20:59 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106f36d1f000000ec5800000000000000ffffbaf9459c5c953948c6801f2c0945c08ba80000fc99a7422007653872edb4f63adb415ccdfe8081018f000100000000004f2a88d209ea75e16a61fd063f026ed7360627ecda971f7ee096d74c92fad7e34bd5092d45cc36c2440eac2d224609aba9e600000000128ef922502a35290365194a47871a079262514ddb61c548aa5f64670d375db286b1aa16690cfe6cdda6f9bb47f852571169243fd9b6bcf040eabbd03679ff0d3dd5a1bb2ba71343fcccedf626b0a288bf4edc7153d9b97a25c93905916afe56f4c1ec422bd5903c927a0324759e0ae36d10a4747ced1feb31cdab9819de8ac2365c78"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:20:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xa09d, 0x200041) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x0, 0xc, 0x1f}) [ 512.660056][ C1] sd 0:0:1:0: [sg0] tag#5093 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.669937][ C1] sd 0:0:1:0: [sg0] tag#5093 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.679818][ C1] sd 0:0:1:0: [sg0] tag#5093 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.689682][ C1] sd 0:0:1:0: [sg0] tag#5093 CDB[c0]: 00 00 00 00 00 00 00 00 20:20:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = inotify_init1(0x0) r2 = dup(r1) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x10000880) r3 = inotify_init1(0x0) r4 = dup(r3) inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x10000880) r5 = inotify_init1(0x0) r6 = dup(r5) inotify_add_watch(r6, &(0x7f00000000c0)='./file0\x00', 0x10000880) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x100004) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@remote, {@in6=@ipv4={[], [], @multicast2}, @in=@loopback}, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}}}}, 0x128}}, 0x0) 20:20:59 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 512.768969][ T8703] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 512.778265][ T8703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.956028][ T8703] usb 1-1: can't set config #1, error -71 [ 513.029501][ T8703] usb 1-1: USB disconnect, device number 22 20:20:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x0, 0x81, 0x6, 0x8}]}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000200)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000080)="3901ddf551a2eaa74372f9b97b72445cee37cc341765583a", 0xfd3f}, {&(0x7f0000000280)="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", 0x144}, {&(0x7f0000000180)="4179c59ad075aa48eb9ae63c5228ca2c8563a96e0082ee3fdec700254776382ec33e725d4c9bf61de500616039aa4448df40db95e17ba51c1d54e8c5fad94e8721a9a6b90a6d43eebab1b358e8a8970bef74ec615ce1d9579d5a02dcb3dd094136111b1ab244"}, {&(0x7f0000000400)="e3e8cd1c7f3a8af545ff033a139538656e6a4cba44eea065bcd492b82919a5a59a79e7bbe79179c5a3413acd11230e46493338f65ac582bea144e81c1c8486ee565d178124fcea303346ddd20bc076971b43fb8ea721fdcc09903ad49cc563ebbabc3e0bf41148fdb5fd9e200464fee493de"}, {&(0x7f0000000480)="0522d84c51540528f7a070482d3816de33e9c226f0c3d4c5e591d26f0dde0c61ffa56364d64f5a762ea7afd61890a07308ec31b7e6304c86b3bdcd93a1d1d4b5ae751453ca25ed1ed635c1a7d22bc5483b6c52003eda7d9b6c597e24651140acddd66b0f4d41ac4b504539cc3750e1de9e08268e024818da171e85b46b18798fbf264f4e3bfe299ce6673bf680f109eb"}], 0x2) 20:20:59 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x8000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1002, 0x3, &(0x7f0000ffc000/0x1000)=nil) [ 513.571077][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 513.571136][ T28] audit: type=1326 audit(1599423659.937:21): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10401 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 20:21:00 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:21:00 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x8000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1002, 0x3, &(0x7f0000ffc000/0x1000)=nil) 20:21:00 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:21:00 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 514.347937][ T28] audit: type=1326 audit(1599423660.717:22): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10401 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 20:21:00 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x8000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1002, 0x3, &(0x7f0000ffc000/0x1000)=nil) [ 514.737897][ C1] sd 0:0:1:0: [sg0] tag#5094 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 514.748539][ C1] sd 0:0:1:0: [sg0] tag#5094 CDB: Test Unit Ready [ 514.755321][ C1] sd 0:0:1:0: [sg0] tag#5094 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.765199][ C1] sd 0:0:1:0: [sg0] tag#5094 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.775089][ C1] sd 0:0:1:0: [sg0] tag#5094 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.785006][ C1] sd 0:0:1:0: [sg0] tag#5094 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.794850][ C1] sd 0:0:1:0: [sg0] tag#5094 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.804708][ C1] sd 0:0:1:0: [sg0] tag#5094 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.814561][ C1] sd 0:0:1:0: [sg0] tag#5094 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.824423][ C1] sd 0:0:1:0: [sg0] tag#5094 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.834299][ C1] sd 0:0:1:0: [sg0] tag#5094 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.844171][ C1] sd 0:0:1:0: [sg0] tag#5094 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.854070][ C1] sd 0:0:1:0: [sg0] tag#5094 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.863950][ C1] sd 0:0:1:0: [sg0] tag#5094 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.873806][ C1] sd 0:0:1:0: [sg0] tag#5094 CDB[c0]: 00 00 00 00 00 00 00 00 [ 514.881659][ C1] sd 0:0:1:0: [sg0] tag#5095 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 514.892315][ C1] sd 0:0:1:0: [sg0] tag#5095 CDB: Test Unit Ready [ 514.899064][ C1] sd 0:0:1:0: [sg0] tag#5095 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.908945][ C1] sd 0:0:1:0: [sg0] tag#5095 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.918807][ C1] sd 0:0:1:0: [sg0] tag#5095 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.928662][ C1] sd 0:0:1:0: [sg0] tag#5095 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.938537][ C1] sd 0:0:1:0: [sg0] tag#5095 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.948421][ C1] sd 0:0:1:0: [sg0] tag#5095 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.958304][ C1] sd 0:0:1:0: [sg0] tag#5095 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.968162][ C1] sd 0:0:1:0: [sg0] tag#5095 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.978048][ C1] sd 0:0:1:0: [sg0] tag#5095 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.987892][ C1] sd 0:0:1:0: [sg0] tag#5095 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.997744][ C1] sd 0:0:1:0: [sg0] tag#5095 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.007612][ C1] sd 0:0:1:0: [sg0] tag#5095 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.017455][ C1] sd 0:0:1:0: [sg0] tag#5095 CDB[c0]: 00 00 00 00 00 00 00 00 [ 516.314329][T10431] IPVS: ftp: loaded support on port[0] = 21 [ 516.986538][T10431] chnl_net:caif_netlink_parms(): no params data found [ 517.228634][T10431] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.236410][T10431] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.246161][T10431] device bridge_slave_0 entered promiscuous mode [ 517.297525][T10431] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.304965][T10431] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.314846][T10431] device bridge_slave_1 entered promiscuous mode [ 517.435996][T10431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.494238][T10431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.547770][T10431] team0: Port device team_slave_0 added [ 517.562805][T10431] team0: Port device team_slave_1 added [ 517.619413][T10431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.626685][T10431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.652916][T10431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.674303][T10431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.681379][T10431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.707428][T10431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.788868][T10431] device hsr_slave_0 entered promiscuous mode [ 517.809876][T10431] device hsr_slave_1 entered promiscuous mode [ 517.821915][T10431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 517.829852][T10431] Cannot create hsr debugfs directory [ 518.261841][T10431] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 518.263491][ T12] Bluetooth: hci4: command 0x0409 tx timeout [ 518.289762][T10431] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 518.347416][T10431] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 518.392263][T10431] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 518.850957][T10431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.899497][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 518.908616][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 518.946507][T10431] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.994320][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 519.004332][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 519.013858][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.022218][ T8703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.098125][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 519.107767][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 519.117741][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 519.127168][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.134473][ T8703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.143566][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 519.154519][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 519.172223][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 519.183030][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 519.198294][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 519.227336][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 519.237811][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 519.296628][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 519.308512][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 519.318292][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 519.328004][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 519.347670][T10431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 519.416989][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 519.426584][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 519.457461][T10431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.521227][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 519.532308][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 519.610208][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 519.621210][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 519.647657][T10431] device veth0_vlan entered promiscuous mode [ 519.663858][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 519.674257][ T3362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 519.732463][T10431] device veth1_vlan entered promiscuous mode [ 519.865204][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 519.874585][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 519.883990][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 519.894774][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 519.924088][T10431] device veth0_macvtap entered promiscuous mode [ 519.973969][T10431] device veth1_macvtap entered promiscuous mode [ 519.989883][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 519.999598][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 520.052164][T10431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 520.065549][T10431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.076037][T10431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 520.086605][T10431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.096598][T10431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 520.107683][T10431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.117675][T10431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 520.128250][T10431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.142354][T10431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.154107][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 520.164110][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 520.193125][T10431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 520.204392][T10431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.214430][T10431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 520.224994][T10431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.234989][T10431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 520.245543][T10431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.255551][T10431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 520.266112][T10431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.280136][T10431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.290977][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 520.302316][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 520.345853][ T8703] Bluetooth: hci4: command 0x041b tx timeout 20:21:07 executing program 4: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:21:07 executing program 3: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:21:07 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:21:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x3f, 0x3, 0x8, @random="7d191781fb61", 'veth0_to_team\x00'}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='veth0_to_team\x00', &(0x7f0000000280)="2fba4b5f7b5b15da45fdd9350e3bd1103afd19032fbd0489f6713806e601b933cc407194b284e1c9de8f9cc109cd0d1569ac019bbe13ae72ae9affed4b153d0b178b10b8837588737284b4cd99f7364c1d19f1cc33f07b8ab3d37490cd0b217622c5626bed7518322987531fe4d3c8bb54b9d7f1180d42a46dc20c15d716d237215ab446b9111a4533160ca8f29a1faf030572a19e7645a18d104bbc1ab46a2305bdd56b879429c7f8f25a52e4fb9e2eed7e90caeb53c97c904f51de6ffa4b12d3417eae7ca072191d3bd9", 0xcb) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_getattr(r1, &(0x7f00000000c0)={0x38}, 0x38, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x81c, 0xfffffd01) sendmmsg$inet(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000000000000000ccedfdafb6965c"], 0x10}}], 0x1, 0x0) 20:21:07 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 521.273510][ C1] sd 0:0:1:0: [sg0] tag#5100 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 521.284974][ C1] sd 0:0:1:0: [sg0] tag#5100 CDB: Test Unit Ready [ 521.291637][ C1] sd 0:0:1:0: [sg0] tag#5100 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.301568][ C1] sd 0:0:1:0: [sg0] tag#5100 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.311520][ C1] sd 0:0:1:0: [sg0] tag#5100 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.321547][ C1] sd 0:0:1:0: [sg0] tag#5100 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.331518][ C1] sd 0:0:1:0: [sg0] tag#5100 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.342105][ C1] sd 0:0:1:0: [sg0] tag#5100 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.352210][ C1] sd 0:0:1:0: [sg0] tag#5100 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.362257][ C1] sd 0:0:1:0: [sg0] tag#5100 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.372204][ C1] sd 0:0:1:0: [sg0] tag#5100 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.382133][ C1] sd 0:0:1:0: [sg0] tag#5100 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.392061][ C1] sd 0:0:1:0: [sg0] tag#5100 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.401967][ C1] sd 0:0:1:0: [sg0] tag#5100 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.411896][ C1] sd 0:0:1:0: [sg0] tag#5100 CDB[c0]: 00 00 00 00 00 00 00 00 20:21:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x2, 0x1}, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x442000, 0xef) renameat(r2, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="60070b608993"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:21:08 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:21:08 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 522.272687][ T8703] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 522.423180][ T8702] Bluetooth: hci4: command 0x040f tx timeout 20:21:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:21:08 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106f36d1f000000ec5800000000000000ffffbaf9459c5c953948c6801f2c0945c08ba80000fc99a7422007653872edb4f63adb415ccdfe8081018f000100000000004f2a88d209ea75e16a61fd063f026ed7360627ecda971f7ee096d74c92fad7e34bd5092d45cc36c2440eac2d224609aba9e600000000128ef922502a35290365194a47871a079262514ddb61c548aa5f64670d375db286b1aa16690cfe6cdda6f9bb47f852571169243fd9b6bcf040eabbd03679ff0d3dd5a1bb2ba71343fcccedf626b0a288bf4edc7153d9b97a25c93905916afe56f4c1ec422bd5903c927a0324759e0ae36d10a4747ced1feb31cdab9819de8ac2365c78"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 522.543425][ T8703] usb 1-1: device descriptor read/64, error 18 [ 522.726171][ C1] sd 0:0:1:0: [sg0] tag#5101 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 522.736846][ C1] sd 0:0:1:0: [sg0] tag#5101 CDB: Test Unit Ready [ 522.743639][ C1] sd 0:0:1:0: [sg0] tag#5101 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.753501][ C1] sd 0:0:1:0: [sg0] tag#5101 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.763375][ C1] sd 0:0:1:0: [sg0] tag#5101 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.773250][ C1] sd 0:0:1:0: [sg0] tag#5101 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.783132][ C1] sd 0:0:1:0: [sg0] tag#5101 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.793009][ C1] sd 0:0:1:0: [sg0] tag#5101 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.802883][ C1] sd 0:0:1:0: [sg0] tag#5101 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.813010][ C1] sd 0:0:1:0: [sg0] tag#5101 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.822971][ C1] sd 0:0:1:0: [sg0] tag#5101 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.832844][ C1] sd 0:0:1:0: [sg0] tag#5101 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.842728][ C1] sd 0:0:1:0: [sg0] tag#5101 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.852594][ C1] sd 0:0:1:0: [sg0] tag#5101 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.862449][ C1] sd 0:0:1:0: [sg0] tag#5101 CDB[c0]: 00 00 00 00 00 00 00 00 [ 522.932853][ T8703] usb 1-1: device descriptor read/64, error 18 20:21:09 executing program 3: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 523.163727][T10676] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 523.202503][ T8703] usb 1-1: new high-speed USB device number 24 using dummy_hcd 20:21:09 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="39f497f23f87694a71cf5a688c30574e6dd24873cb16797ff9811cdbc33a788aa234c4a0ed06bedb567af78fc2846812b858df1b6cd0dc247ff847a121429bba78d4d55ad6f7c94bf5d5d303d25acdf8e11e405bf5972282a4baae5187ec35e0930e1643987a9775f5b42ce4abda7275674e39f93ce91581fc7e3c8826c924d4978b7ea78d44a1aee75dfd8e04cf5eaffbc598dfe3ba28a066348641ab634fefb3400bcfa7888afd206862a48838f4e66bce402ee948edd50fc6f261d37632a1fb08b835c24a5253f35732ce9b3a64c7c7ca91b7a9d286c0ec3be88ee738f2ea0a5d73e1464961736d0c6165ccdc1fa1bd2f22", 0xfffffffffffffce9, 0x0, &(0x7f0000000100)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}], 0x10) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x40, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x4800, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f00000001c0)=0x14) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x0, 0x1, @mcast2}, {0xa, 0x0, 0x8, @mcast2}, 0x100, [0x9, 0x0, 0x0, 0x204, 0x4, 0x4, 0x6, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat2(r2, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x541000, 0x58, 0x3}, 0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000003c0)={0x0, 0x55, "95f1fbe76df05517e38a2614614662a936699a48301284de51ca619beaadc19fe4fd06902076f4d80eb8826e3bf702dcb6dd8f0dddd1eebc6d7ad385fb3894a946e35a5afa248cd5abf67e17d26ebb4084c89b50f9"}, &(0x7f0000000440)=0x5d) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300250069000007a2e407edab1d0558100000003e038107a2770e1419000a0010000000000003f5000000000000ef38bf461e59d7", 0x330}], 0x1) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x3a, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}, {0xa, 0x4e24, 0x0, @mcast1, 0x3ff}, 0x7, [0x9, 0x2, 0x1, 0x1, 0x4d0e, 0x800, 0x8, 0x8ab4]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0xfffffffd, @dev={0xfe, 0x80, [], 0x33}, 0x5}, {0xa, 0x4e23, 0x0, @mcast1, 0x2}, 0x7, [0x6, 0x0, 0x1, 0x1, 0x7ff, 0x7fff, 0x5, 0x1]}, 0x5c) 20:21:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 523.472401][ T8703] usb 1-1: device descriptor read/64, error 18 [ 523.556205][T10680] IPVS: ftp: loaded support on port[0] = 21 [ 523.626172][ C0] sd 0:0:1:0: [sg0] tag#5103 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 523.627657][T10681] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 523.636908][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB: Test Unit Ready [ 523.645097][T10681] device team0 entered promiscuous mode [ 523.645220][T10681] device team_slave_0 entered promiscuous mode [ 523.651732][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.657764][T10681] device team_slave_1 entered promiscuous mode [ 523.663665][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.676875][T10681] team0: Cannot enslave team device to itself [ 523.680368][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.706622][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.717204][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.727162][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.737122][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.747088][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.757052][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.767038][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.777017][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.786980][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.796931][ C0] sd 0:0:1:0: [sg0] tag#5103 CDB[c0]: 00 00 00 00 00 00 00 00 [ 523.826412][T10685] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 524.145174][ C1] sd 0:0:1:0: [sg0] tag#5102 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 524.155840][ C1] sd 0:0:1:0: [sg0] tag#5102 CDB: Test Unit Ready [ 524.162636][ C1] sd 0:0:1:0: [sg0] tag#5102 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.172503][ C1] sd 0:0:1:0: [sg0] tag#5102 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.182348][ C1] sd 0:0:1:0: [sg0] tag#5102 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.192235][ C1] sd 0:0:1:0: [sg0] tag#5102 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.202043][ C1] sd 0:0:1:0: [sg0] tag#5102 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.211924][ C1] sd 0:0:1:0: [sg0] tag#5102 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.221814][ C1] sd 0:0:1:0: [sg0] tag#5102 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.231701][ C1] sd 0:0:1:0: [sg0] tag#5102 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.241589][ C1] sd 0:0:1:0: [sg0] tag#5102 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.251503][ C1] sd 0:0:1:0: [sg0] tag#5102 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.261390][ C1] sd 0:0:1:0: [sg0] tag#5102 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.271280][ C1] sd 0:0:1:0: [sg0] tag#5102 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.281158][ C1] sd 0:0:1:0: [sg0] tag#5102 CDB[c0]: 00 00 00 00 00 00 00 00 20:21:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:21:10 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 524.512495][T10681] IPVS: ftp: loaded support on port[0] = 21 [ 524.553339][T10683] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 524.612451][T10711] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 524.856301][ T8510] tipc: TX() has been purged, node left! [ 524.871856][T10732] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) 20:21:11 executing program 1: syz_open_dev$media(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:21:11 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010000104000d32000000000000000000", @ANYRES32=0x0, @ANYBLOB="1d00000000400000240012000c00010062726964676500001400020008000008000100e4999ec963e8649d7b2659860eaa2d5c0ec175434e3334bfc514818e2017f168b937d57c29ba91295387a624408c56420bb7be3425c9a44ce4c6fc414d0a287b9d50200bc39cfa2c4a84499779ae51dcdb210dec5881e874fd17d78f870152e3c686649e41f9623e767131508997c6b8620b42a497ca7fee8565ac82b28dc6e8a7b44e06319adc5258d85ef8a39af4df51c85dc72906d52d5dba71bb03411b3f3cd734e112f60a2b2ee104d1d9129cc76c6f9120939b0b3f993f217a0f74193c97c3a814ceb8542af50f8152456b1a352f8336c1"], 0x44}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x2f, &(0x7f0000000100)}], 0x492492492492642, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000000c0)=""/116, 0x74}, {&(0x7f00000002c0)=""/186, 0xba}], 0x3) setxattr$trusted_overlay_opaque(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='trusted.overlay.opaque\x00', &(0x7f0000000440)='y\x00', 0x2, 0x2) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/222, 0xde}, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 20:21:11 executing program 1: syz_open_dev$media(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 525.286888][ T12] Bluetooth: hci4: command 0x0419 tx timeout 20:21:11 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:21:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)={0x41}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x2, 0x1}, 0xc) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES64=r7], 0x7a) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000004300)={0x0, 0x0}, &(0x7f0000004340)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x30, 0x1, 0x1, [r4, r1, 0xffffffffffffffff, r3, r3, r7, 0xffffffffffffffff, r6]}}], 0x30}], 0x1, 0x0) quotactl(0x8, &(0x7f0000000140)='./file0\x00', r9, &(0x7f0000000200)="30eff12ab2c45b6b173640581072f52e8a1eccd4d5c253755fa6716514713c31ba7173bf13dd8e1f89d89df0368a54fef477b0ab71454338") splice(r3, 0x0, r5, 0x0, 0x18102, 0x0) 20:21:11 executing program 3: wait4(0x0, 0x0, 0x40000000, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x11, 0x2}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100000000000ada270f0000000a20000075d20647000000000000000000000000000900010073797a30000000002c000000060a05000000000000000000000000000900010073797a30000000000c000240000000000000000014000000110002000000000000000000000d000a8c788fefb4fb3a9aa8994360df8b28cc8627ac8b5dd8a88bfd61deade502cd0381750fb79cd5eb84d842b95535f82f3a84a39724ab93f2573406df4ff0b8438223a08f68d1b7eb7c141db65ed7"], 0x74}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) setns(r3, 0x0) clone(0x70024000, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x7a04, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MTU={0x8, 0x4, 0x1}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x72, 0x0, 0x100, 0x70bd2d, 0x7, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044044) [ 525.514136][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 525.693988][T10753] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 525.930801][ C0] sd 0:0:1:0: [sg0] tag#5061 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 525.941659][ C0] sd 0:0:1:0: [sg0] tag#5061 CDB: Test Unit Ready [ 525.948493][ C0] sd 0:0:1:0: [sg0] tag#5061 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.959135][ C0] sd 0:0:1:0: [sg0] tag#5061 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.969942][ C0] sd 0:0:1:0: [sg0] tag#5061 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.979922][ C0] sd 0:0:1:0: [sg0] tag#5061 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.989887][ C0] sd 0:0:1:0: [sg0] tag#5061 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.999874][ C0] sd 0:0:1:0: [sg0] tag#5061 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.009826][ C0] sd 0:0:1:0: [sg0] tag#5061 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.019774][ C0] sd 0:0:1:0: [sg0] tag#5061 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:21:12 executing program 1: syz_open_dev$media(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:21:12 executing program 3: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:21:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000180)={0x97, 0xffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x401, 0x101340) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x9e0000, 0x80000000, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9b0905, 0x0, [], @value64=0x7e62}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffffffffffe93, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x3c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) [ 526.029730][ C0] sd 0:0:1:0: [sg0] tag#5061 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.039723][ C0] sd 0:0:1:0: [sg0] tag#5061 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.050364][ C0] sd 0:0:1:0: [sg0] tag#5061 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.060349][ C0] sd 0:0:1:0: [sg0] tag#5061 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.070289][ C0] sd 0:0:1:0: [sg0] tag#5061 CDB[c0]: 00 00 00 00 00 00 00 00 [ 526.979920][T10763] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 527.167789][ C0] sd 0:0:1:0: [sg0] tag#5062 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 527.179447][ C0] sd 0:0:1:0: [sg0] tag#5062 CDB: Test Unit Ready [ 527.186251][ C0] sd 0:0:1:0: [sg0] tag#5062 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.196240][ C0] sd 0:0:1:0: [sg0] tag#5062 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.206166][ C0] sd 0:0:1:0: [sg0] tag#5062 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.216103][ C0] sd 0:0:1:0: [sg0] tag#5062 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.226042][ C0] sd 0:0:1:0: [sg0] tag#5062 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.235981][ C0] sd 0:0:1:0: [sg0] tag#5062 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.246778][ C0] sd 0:0:1:0: [sg0] tag#5062 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.256698][ C0] sd 0:0:1:0: [sg0] tag#5062 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.266633][ C0] sd 0:0:1:0: [sg0] tag#5062 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.276827][ C0] sd 0:0:1:0: [sg0] tag#5062 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.286884][ C0] sd 0:0:1:0: [sg0] tag#5062 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.296808][ C0] sd 0:0:1:0: [sg0] tag#5062 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 527.306722][ C0] sd 0:0:1:0: [sg0] tag#5062 CDB[c0]: 00 00 00 00 00 00 00 00 20:21:13 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:21:13 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:21:14 executing program 4: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:21:14 executing program 0: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000200)={'mangle\x00'}, &(0x7f0000000000)=0x54) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}, 0x20000050) ioctl$sock_ifreq(r1, 0x8937, &(0x7f00000015c0)={'bridge_slave_1\x00', @ifru_mtu=0x1}) [ 527.984970][T10779] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 528.015028][ C0] sd 0:0:1:0: [sg0] tag#5063 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 528.025773][ C0] sd 0:0:1:0: [sg0] tag#5063 CDB: Test Unit Ready [ 528.032611][ C0] sd 0:0:1:0: [sg0] tag#5063 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.042548][ C0] sd 0:0:1:0: [sg0] tag#5063 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.052496][ C0] sd 0:0:1:0: [sg0] tag#5063 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.062472][ C0] sd 0:0:1:0: [sg0] tag#5063 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.073190][ C0] sd 0:0:1:0: [sg0] tag#5063 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.083172][ C0] sd 0:0:1:0: [sg0] tag#5063 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.093138][ C0] sd 0:0:1:0: [sg0] tag#5063 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.103057][ C0] sd 0:0:1:0: [sg0] tag#5063 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.113008][ C0] sd 0:0:1:0: [sg0] tag#5063 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.122937][ C0] sd 0:0:1:0: [sg0] tag#5063 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.132883][ C0] sd 0:0:1:0: [sg0] tag#5063 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.142826][ C0] sd 0:0:1:0: [sg0] tag#5063 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.152743][ C0] sd 0:0:1:0: [sg0] tag#5063 CDB[c0]: 00 00 00 00 00 00 00 00 20:21:14 executing program 3: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 528.434296][ C1] sd 0:0:1:0: [sg0] tag#5064 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 528.444970][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB: Test Unit Ready [ 528.451756][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.461628][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.471509][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.482421][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.492295][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.502171][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.512033][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.522602][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:21:14 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 528.532470][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.542345][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.552211][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.562083][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.571967][ C1] sd 0:0:1:0: [sg0] tag#5064 CDB[c0]: 00 00 00 00 00 00 00 00 20:21:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000200)) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x1a, 0x1a, 0x9a004dee9c2022d1}, 0x1c}}, 0x0) 20:21:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x81}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 528.994346][T10796] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) 20:21:15 executing program 3: clone(0x2000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x50, 0x4, 0x4c8, 0xd0, 0x0, 0x0, 0xd0, 0xd0, 0x2f0, 0x3f8, 0x3f8, 0x3f8, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [0x0, 0xff000000, 0x0, 0xffffff00], [], 'wg0\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x9, [0x6, 0x4], 0x10001, 0x1, 0x2, [@empty, @dev={0xfe, 0x80, [], 0x22}, @private2, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x2c}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, @local, @empty, @dev={0xfe, 0x80, [], 0x35}, @local, @ipv4={[], [], @multicast2}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1={0xfc, 0x1, [], 0x1}]}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x0, 0xb558efd157527ef4}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) 20:21:15 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x8a, 0x8, 0x727}) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x80, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7c}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 20:21:15 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:21:15 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 529.574748][T10802] kvm: pic: single mode not supported 20:21:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x400}, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgrp(0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) kcmp(r1, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) ptrace(0x8, r1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x7f048bc21dea0b92, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 529.574772][T10802] kvm: pic: level sensitive irq not supported [ 529.927668][T10819] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 530.140849][ C1] sd 0:0:1:0: [sg0] tag#5065 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 530.151735][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB: Test Unit Ready [ 530.158405][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.169310][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.179313][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.189256][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.199358][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.209313][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.219248][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.229196][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.239132][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.249159][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.259098][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.269037][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.278955][ C1] sd 0:0:1:0: [sg0] tag#5065 CDB[c0]: 00 00 00 00 00 00 00 00 20:21:16 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="020000000100060000000000020002c0304edb22351cb2d9febac8b2d2ed7e8a9b9e5041998c7996dfc637f385af3814ee1a96d400f067e35593e8fa55a93aa89e625a064e6c382b40a3d3045dc2f3ef0f3f2d93ca280b2abd8f2da2b2dbee57009c534b283da89199cf854e759131d305be62d1cebc11f662a3284f765a415851badda58e7293bb7faf4e38a70be2a532125115765c3ee97e55d5b6d7f06435784d26bfd06239670deff4812eca57df3a55cc9bb31fc761bf558313e4eaacca5531a2baf053ea31b6e9a165e708799b9923118874d4bf793e28f612", @ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="0fa21f41646567c8a40dfaa2a42be02c66801d79b8", @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYBLOB], 0x5c, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x3, 0x5844, 0x1}, 0x40) 20:21:17 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:21:17 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 530.773044][ C0] sd 0:0:1:0: [sg0] tag#5068 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 530.783760][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB: Test Unit Ready [ 530.790428][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.800367][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.810280][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.820188][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.830109][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.840031][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.849966][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.859866][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.869776][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.879822][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.889715][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.899621][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.909511][ C0] sd 0:0:1:0: [sg0] tag#5068 CDB[c0]: 00 00 00 00 00 00 00 00 20:21:17 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="000000fbff000000280012800a00010076786c616e00000018000280140016e2bf36a3a1f603b58208765b67e1b3913053dba851a7efe048459ec32d17773a60e3cdd65165c78bb4eee885818c9dc4fb32145a54cf650836cbc66573617a68805584e337338f407527aa750aecb63f78374ecf4aef2ae394d03771f8c655a1a0dba32ee1d6c31d609ec3dc81a7679882bf5a8289ad624a8a26dca359f0360ae3a79fee52596a0fdb7838b95c6a2991acbeccc56bc61638a28d9f59db7d2765a1975fe8f0261351f93a9e562e8049b6d5e26521fd7d4a4e5e86e78f9b796f9d9f5870fa2200"/251], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000040)={'sit0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 531.144393][T10837] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) 20:21:17 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:21:17 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:21:17 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000018000100000000000000000002000000000000065c"], 0x40}}, 0x0) r1 = inotify_init1(0x0) r2 = dup(r1) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x10000880) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0xd0, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x6c5}, {0xc, 0x90, 0xd327}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4081}, 0x8840) umount2(&(0x7f0000000140)='./file0\x00', 0x4) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000380)={0x10000, {{0xa, 0x4e23, 0x1, @mcast2, 0x1f}}}, 0x88) [ 531.476005][ C0] sd 0:0:1:0: [sg0] tag#5069 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 531.486735][ C0] sd 0:0:1:0: [sg0] tag#5069 CDB: Test Unit Ready [ 531.493528][ C0] sd 0:0:1:0: [sg0] tag#5069 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.503419][ C0] sd 0:0:1:0: [sg0] tag#5069 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.513311][ C0] sd 0:0:1:0: [sg0] tag#5069 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.523239][ C0] sd 0:0:1:0: [sg0] tag#5069 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.533142][ C0] sd 0:0:1:0: [sg0] tag#5069 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.543163][ C0] sd 0:0:1:0: [sg0] tag#5069 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.554036][ C0] sd 0:0:1:0: [sg0] tag#5069 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.563993][ C0] sd 0:0:1:0: [sg0] tag#5069 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.573874][ C0] sd 0:0:1:0: [sg0] tag#5069 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.585537][ C0] sd 0:0:1:0: [sg0] tag#5069 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.595438][ C0] sd 0:0:1:0: [sg0] tag#5069 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.605376][ C0] sd 0:0:1:0: [sg0] tag#5069 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 531.615275][ C0] sd 0:0:1:0: [sg0] tag#5069 CDB[c0]: 00 00 00 00 00 00 00 00 20:21:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'veth0_to_batadv\x00', {0x2, 0x4e22, @rand_addr=0x64010101}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000100)=0x9, 0x4) socket(0xf, 0x5, 0x8) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000002c00270d000000b60000000000000000", @ANYRES32=r2, @ANYBLOB="00000001000000000e0000000c0001007463696e646578000c0002000800030090"], 0x3c}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e23, @private=0xa010102}, 0x10) write$binfmt_script(r5, &(0x7f0000000540)=ANY=[], 0x2) close(r6) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f0000000400)={0x0, 0x0, [], @bt={0x343, 0x9, 0x2, 0x8, 0x100, 0x7f, 0x18, 0x2}}) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 531.744004][T10849] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 531.870931][T10852] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 20:21:18 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 531.913702][T10854] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 532.066181][T10858] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:21:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005ff000000000000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r10, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104f2bdaf5c6900000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4000, r3}}, 0x24}}, 0x0) [ 532.206817][T10860] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 532.246734][T10862] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 532.594408][ T8510] tipc: TX() has been purged, node left! 20:21:19 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:21:19 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x2b41, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000100)="c80da0e81e06860b6c74032e1b33339fdf287e08102cc815205833189651221ed66500fd5c1a47e2cbfc2f7882c08e8c5d50f19536d7a8d83cd2c48245c4315354732a8702a8220c22b421784ebea0a10bc73b0384c79a0bddc0cdfcf179c98962414451bdba1716d1ef454828431aeddf003b3e49bfdac65d4c197a0bf75677e6c799e53c607511b3af71381484e05f3478dc7511ad1d004b00") fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioprio_set$pid(0x0, r1, 0xbc42b2119fcfbdb2) clone(0x20008579, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x225500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:21:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x3ff, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="03040000000000002800128008000100677470001c000280080001"], 0x48}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="0503460008003e0000000200c52cf7c25975e605b02f050000002ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816167fd8f24286a57c3fe259f3314a3974bb654697f462f4c73", 0x50, 0x0, 0x0, 0x0) [ 532.724056][T10866] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 532.860206][T10874] bridge1: port 1(vlan2) entered blocking state [ 532.866930][T10874] bridge1: port 1(vlan2) entered disabled state [ 532.876043][T10874] device vlan2 entered promiscuous mode [ 532.906533][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 20:21:19 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x8c2b, 0x4900) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@dev={0xfe, 0x80, [], 0x14}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0xe7, 0x7ff, 0x9, 0x100, 0x2, 0x4310200}) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000140)="77c733f88c40654b8e78426b038ab5e5d40e9246b30e92fa980ee65efea73da5868632d1ae0c5ca81fdf6bb3330ecab286709edaaf1606c9cfb084b0e6f54f7a13a3c4a335f45c9ffe4d2e980d05f42095c080335fa45d9e", 0x58, 0xc000, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x24) [ 533.052617][T10875] device vlan2 left promiscuous mode [ 533.058293][T10875] bridge1: port 1(vlan2) entered disabled state 20:21:19 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 533.400411][T10879] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 533.453279][T10866] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 20:21:19 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 533.557055][T10866] bridge1: port 1(vlan2) entered blocking state [ 533.564020][T10866] bridge1: port 1(vlan2) entered disabled state [ 533.572988][T10866] device vlan2 entered promiscuous mode [ 533.584199][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 20:21:20 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="2302"], 0x2) close(r4) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000080)={0x2, 0x400}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_REMOTE={0x14, 0x7, @dev}]}}}]}, 0x54}}, 0x0) [ 533.671382][T10871] device vlan2 left promiscuous mode [ 533.676993][T10871] bridge1: port 1(vlan2) entered disabled state 20:21:20 executing program 4: rmdir(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, @perf_bp={0x0, 0x3}, 0x4, 0xd3d6, 0xdf6, 0x8, 0x2a0, 0x0, 0x9}, 0x0, 0xffffffffffffff7b, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000006a0002002abd7000fcdb0025020000000000000004000b0008000a000200000008000200000008dfd8175a35be0ee40500000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00\x00\x00\x00\x00'], 0x44}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2302"], 0x2) close(r2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x2) close(r1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) [ 533.866422][T10906] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 534.001197][ C0] sd 0:0:1:0: [sg0] tag#5070 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 534.012010][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB: Test Unit Ready [ 534.018677][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.028636][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.038551][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.048512][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.059022][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.068920][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.078802][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.088726][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.098603][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.108502][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.118386][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.128274][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.138147][ C0] sd 0:0:1:0: [sg0] tag#5070 CDB[c0]: 00 00 00 00 00 00 00 00 20:21:20 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:21:20 executing program 3: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0xffffffffffffffff) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000000c0)={0x2, 0x1, 0x6ea2, 0x7, 0x800, 0xffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x44001) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1a010000000000403810101440000000000109022400010000000009040000010301000009250000000122050009058103"], 0x0) 20:21:20 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4002, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x41) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x100000001, 0x82841) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000180)=""/28) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x89e0, 0x0) [ 534.558514][T10924] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) 20:21:21 executing program 4: r0 = syz_usb_connect$hid(0x4, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0481c0400000080007090224000100003000090400000103010000092100000001220500090581030000000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x22, {0x22, 0xe, "eb2b20da341f5b2aae21c107b91850b0b1600ab5c5b31fc6c16e3d012890917f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 534.891415][ T8702] usb 4-1: new high-speed USB device number 2 using dummy_hcd 20:21:21 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:21:21 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xeb49) r1 = inotify_init1(0x0) r2 = dup(r1) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x10000880) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000080)=0xffff, 0x8) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000040)=0x5) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) write$dsp(r0, 0x0, 0x0) 20:21:21 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 535.252239][ T8702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.263795][ T8702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.273902][ T8702] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 535.283258][ T8702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.364381][T10935] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 535.476102][ T8702] usb 4-1: config 0 descriptor?? [ 535.592094][ T8703] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 535.648119][ C1] sd 0:0:1:0: [sg0] tag#5076 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 535.658795][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB: Test Unit Ready [ 535.665587][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.675576][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.685505][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.695475][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.705383][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.715312][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.725237][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.727251][ T8702] usb 4-1: USB disconnect, device number 2 20:21:22 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 535.735085][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.735208][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.760520][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.770393][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.780282][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.790160][ C1] sd 0:0:1:0: [sg0] tag#5076 CDB[c0]: 00 00 00 00 00 00 00 00 [ 535.882559][ T8703] usb 5-1: device descriptor read/64, error 18 20:21:22 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:21:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x3, 0x8, 0x3, 0xff, 0x8, 0x1f, 0x1, 0x3f}, &(0x7f0000000340)=0x20) socket$inet(0x2, 0x80001, 0xffffeffe) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req={0xff, 0xfdb, 0x3, 0x80000001}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) pipe(&(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000a00)={0x0, 0x9, 0x2, 0x3}, &(0x7f0000000a40)=0x10) socket(0x1, 0x80000, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = inotify_init1(0x0) r7 = dup(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00'}) inotify_add_watch(r7, &(0x7f00000000c0)='./file0\x00', 0x10000880) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000440)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c00000010000104000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="03c50000000000002c00128009000100766c616e000000001c00060000000000000000000c0002001c0000001b0000000400038008000500", @ANYRES32=r5, @ANYBLOB="76b5c7e27d0732cdd849533c2fcc29b204701af8652620ca07c8c395285c00"/47, @ANYRES32=r5], 0x5c}}, 0x0) [ 536.271130][ T8703] usb 5-1: device descriptor read/64, error 18 [ 536.272692][T10953] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 536.366948][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 536.468925][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 536.533162][ T8702] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 536.551574][ T8703] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 536.569179][ C1] sd 0:0:1:0: [sg0] tag#5077 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 536.579940][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB: Test Unit Ready [ 536.586735][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.596608][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.606479][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.616537][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.626413][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.636283][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.646162][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.656050][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.665932][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:21:23 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 536.675835][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.685714][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.695593][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.706412][ C1] sd 0:0:1:0: [sg0] tag#5077 CDB[c0]: 00 00 00 00 00 00 00 00 20:21:23 executing program 0: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 536.821136][ T8703] usb 5-1: device descriptor read/64, error 18 [ 536.911733][ T8702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.922965][ T8702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.933266][ T8702] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 536.942638][ T8702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.164313][T10965] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 537.222590][ T8702] usb 4-1: config 0 descriptor?? [ 537.228072][ T8703] usb 5-1: device descriptor read/64, error 18 [ 537.352038][ T8703] usb usb5-port1: attempt power cycle [ 537.471068][ T12] usb 4-1: USB disconnect, device number 3 20:21:23 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 537.662060][ C1] sd 0:0:1:0: [sg0] tag#5078 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 537.672736][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB: Test Unit Ready [ 537.679408][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.689338][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.699221][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.709116][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.719003][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.728866][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.738729][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.748617][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:21:24 executing program 3: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 537.758501][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.768381][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.778264][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.788155][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.798034][ C1] sd 0:0:1:0: [sg0] tag#5078 CDB[c0]: 00 00 00 00 00 00 00 00 [ 537.903819][T10977] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 537.942495][T10979] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 538.071084][ T8703] usb 5-1: new high-speed USB device number 4 using dummy_hcd 20:21:24 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:21:24 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100), 0xc, &(0x7f00000005c0)={0x0, 0x58}}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/29, 0x1d}, {&(0x7f0000000700)=""/24, 0x18}, {&(0x7f0000000d40)=""/151, 0x97}], 0x3}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/91, 0x5b}], 0x1}}], 0x2, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000b80)={0x0, 0x0, 0x67}, 0x0, 0x0, &(0x7f0000000e00)=""/103) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000980)={0x0, 0x1c}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000900)={{&(0x7f0000000ac0)=""/105, 0x69}, 0x0, 0x10}, 0x20) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000280), 0xc, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 20:21:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000001c0)={@void, @val, @mpls={[], @ipv4=@gre={{0x7, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @empty=0xffffffff, {[@lsrr={0x83, 0x7, 0xa2, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0, 0x0]}, {}, {0x8, 0x88be, 0x20020000, {{}, 0x5700}}, {0x2c}}}}}, 0x6e) select(0x40, &(0x7f0000000040)={0x9, 0x736, 0xffffffff, 0x7f, 0x5, 0x3, 0x8, 0x1}, &(0x7f0000000100)={0x5, 0x60000000000, 0x7, 0x8, 0x4, 0x8, 0x40, 0x2f}, &(0x7f0000000140)={0xfff, 0x8, 0x6, 0xfffffffeffffffff, 0x7ff, 0x5, 0x3, 0x3fffc00}, &(0x7f0000000180)={0x77359400}) [ 538.220970][ T8703] usb 5-1: device descriptor read/8, error -71 20:21:24 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106f36d1f000000ec5800000000000000ffffbaf9459c5c953948c6801f2c0945c08ba80000fc99a7422007653872edb4f63adb415ccdfe8081018f000100000000004f2a88d209ea75e16a61fd063f026ed7360627ecda971f7ee096d74c92fad7e34bd5092d45cc36c2440eac2d224609aba9e600000000128ef922502a35290365194a47871a079262514ddb61c548aa5f64670d375db286b1aa16690cfe6cdda6f9bb47f852571169243fd9b6bcf040eabbd03679ff0d3dd5a1bb2ba71343fcccedf626b0a288bf4edc7153d9b97a25c93905916afe56f4c1ec422bd5903c927a0324759e0ae36d10a4747ced1feb31cdab9819de8ac2365c78"], 0xab) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 538.460886][ T8703] usb 5-1: device descriptor read/8, error -71 20:21:24 executing program 0: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 538.557426][T10985] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 538.774345][ C0] sd 0:0:1:0: [sg0] tag#5079 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 538.785051][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB: Test Unit Ready [ 538.791830][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.801826][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.811874][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.822839][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.832787][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.842747][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.852728][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.862632][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.872537][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.882450][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.892381][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.902302][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.912213][ C0] sd 0:0:1:0: [sg0] tag#5079 CDB[c0]: 00 00 00 00 00 00 00 00 [ 538.978260][ C1] sd 0:0:1:0: [sg0] tag#5080 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 538.988992][ C1] sd 0:0:1:0: [sg0] tag#5080 CDB: Test Unit Ready [ 538.995788][ C1] sd 0:0:1:0: [sg0] tag#5080 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.005711][ C1] sd 0:0:1:0: [sg0] tag#5080 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.015644][ C1] sd 0:0:1:0: [sg0] tag#5080 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.025628][ C1] sd 0:0:1:0: [sg0] tag#5080 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.035561][ C1] sd 0:0:1:0: [sg0] tag#5080 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.045485][ C1] sd 0:0:1:0: [sg0] tag#5080 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.055430][ C1] sd 0:0:1:0: [sg0] tag#5080 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.065350][ C1] sd 0:0:1:0: [sg0] tag#5080 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:21:25 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 539.075278][ C1] sd 0:0:1:0: [sg0] tag#5080 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.085210][ C1] sd 0:0:1:0: [sg0] tag#5080 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.095172][ C1] sd 0:0:1:0: [sg0] tag#5080 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.105641][ C1] sd 0:0:1:0: [sg0] tag#5080 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.115605][ C1] sd 0:0:1:0: [sg0] tag#5080 CDB[c0]: 00 00 00 00 00 00 00 00 20:21:26 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r2 = inotify_init1(0x80000) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 540.702890][T11003] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) 20:21:27 executing program 4: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:21:27 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:21:27 executing program 3: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106f36d1f000000ec5800000000000000ffffbaf9459c5c953948c6801f2c0945c08ba80000fc99a7422007653872edb4f63adb415ccdfe8081018f000100000000004f2a88d209ea75e16a61fd063f026ed7360627ecda971f7ee096d74c92fad7e34bd5092d45cc36c2440eac2d224609aba9e600000000128ef922502a35290365194a47871a079262514ddb61c548aa5f64670d375db286b1aa16690cfe6cdda6f9bb47f852571169243fd9b6bcf040eabbd03679ff0d3dd5a1bb2ba71343fcccedf626b0a288bf4edc7153d9b97a25c93905916afe56f4c1ec422bd5903c927a0324759e0ae36d10a4747ced1feb31cdab9819de8ac2365c78"], 0xab) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:21:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x5, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r5, 0x3, 0x6, @link_local}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x40) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x3fcd}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}]}, 0x4c}}, 0x0) [ 541.356995][ C1] sd 0:0:1:0: [sg0] tag#5081 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 541.367672][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB: Test Unit Ready [ 541.374590][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 541.384528][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 541.394455][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 541.404418][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 541.414347][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 541.424261][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 541.434192][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 541.444116][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 541.454004][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 541.463895][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 541.473800][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 541.483720][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 541.493570][ C1] sd 0:0:1:0: [sg0] tag#5081 CDB[c0]: 00 00 00 00 00 00 00 00 [ 541.655628][T11021] device lo entered promiscuous mode [ 541.701309][T11019] device lo left promiscuous mode [ 541.757310][T11024] device lo entered promiscuous mode [ 541.863410][T11019] device lo left promiscuous mode 20:21:28 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r2 = inotify_init1(0x80000) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:21:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0005, 0x4, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c866b94d0900000f320f0133f30f01e80f69e8650f01c883dd000f0131ba400c3ef20f2c2b66efbafc0ced", 0x33}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x0, 0x4ca]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 20:21:28 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 542.651989][ C1] sd 0:0:1:0: [sg0] tag#5082 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 542.662646][ C1] sd 0:0:1:0: [sg0] tag#5082 CDB: Test Unit Ready [ 542.669304][ C1] sd 0:0:1:0: [sg0] tag#5082 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.679221][ C1] sd 0:0:1:0: [sg0] tag#5082 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.689114][ C1] sd 0:0:1:0: [sg0] tag#5082 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.699002][ C1] sd 0:0:1:0: [sg0] tag#5082 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.708857][ C1] sd 0:0:1:0: [sg0] tag#5082 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.718734][ C1] sd 0:0:1:0: [sg0] tag#5082 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.728631][ C1] sd 0:0:1:0: [sg0] tag#5082 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.738510][ C1] sd 0:0:1:0: [sg0] tag#5082 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:21:29 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6e}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) [ 542.748391][ C1] sd 0:0:1:0: [sg0] tag#5082 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.758277][ C1] sd 0:0:1:0: [sg0] tag#5082 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.768153][ C1] sd 0:0:1:0: [sg0] tag#5082 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.778033][ C1] sd 0:0:1:0: [sg0] tag#5082 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.787895][ C1] sd 0:0:1:0: [sg0] tag#5082 CDB[c0]: 00 00 00 00 00 00 00 00 20:21:29 executing program 4: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db9820000000000000d403ffff635427e59aa146175dd106f36d1f000000ec5800000000000000ffffbaf9459c5c953948c6801f2c0945c08ba80000fc99a7422007653872edb4f63adb415ccdfe8081018f000100000000004f2a88d209ea75e16a61fd063f026ed7360627ecda971f7ee096d74c92fad7e34bd5092d45cc36c2440eac2d224609aba9e600000000128ef922502a35290365194a47871a079262514ddb61c548aa5f64670d375db286b1aa16690cfe6cdda6f9bb47f852571169243fd9b6bcf040eabbd03679ff0d3dd5a1bb2ba71343fcccedf626b0a288bf4edc7153d9b97a25c93905916afe56f4c1ec422bd5903c927a0324759e0ae36d10a4747ced1feb31cdab9819de8ac2365c78"], 0xab) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:21:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$inet(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000000080)}, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0) write(r2, &(0x7f0000000100)="c320", 0x2) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000010000000000400"}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "dce172d7fad41a8b8a41c5b91704b0248b6652"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x0, "a56d354501acaa0884667e1560acbc5b4aab9e"}) readv(r3, &(0x7f00000001c0), 0xce) 20:21:30 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, 0x0, 0x4804) [ 543.683163][ C1] sd 0:0:1:0: [sg0] tag#5083 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 543.694806][ C1] sd 0:0:1:0: [sg0] tag#5083 CDB: Test Unit Ready [ 543.701577][ C1] sd 0:0:1:0: [sg0] tag#5083 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 543.711458][ C1] sd 0:0:1:0: [sg0] tag#5083 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 543.721342][ C1] sd 0:0:1:0: [sg0] tag#5083 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:21:30 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = getpid() tkill(r2, 0x2f) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x2, r2}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10000880) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000001c0)={0x4, 0x1000, 0x2}) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipmr_getroute={0x71, 0x1a, 0x800, 0x70bd28, 0x25dfdbfc, {0x80, 0x14, 0x10, 0x6d, 0xfd, 0x2, 0xff, 0x9, 0x2400}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x0) 20:21:30 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r2 = inotify_init1(0x80000) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 543.731198][ C1] sd 0:0:1:0: [sg0] tag#5083 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 543.741043][ C1] sd 0:0:1:0: [sg0] tag#5083 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 543.750904][ C1] sd 0:0:1:0: [sg0] tag#5083 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 543.760766][ C1] sd 0:0:1:0: [sg0] tag#5083 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 543.770585][ C1] sd 0:0:1:0: [sg0] tag#5083 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 543.780457][ C1] sd 0:0:1:0: [sg0] tag#5083 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 543.790330][ C1] sd 0:0:1:0: [sg0] tag#5083 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 543.800208][ C1] sd 0:0:1:0: [sg0] tag#5083 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 543.810059][ C1] sd 0:0:1:0: [sg0] tag#5083 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 543.819926][ C1] sd 0:0:1:0: [sg0] tag#5083 CDB[c0]: 00 00 00 00 00 00 00 00 20:21:30 executing program 3: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r2 = inotify_init1(0x80000) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:21:30 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x2, 0x1}, 0xc) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000000)={0x0, 0x9d, 0xfffffffeffffffff}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000040)={@empty}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@getneigh={0x14, 0x1e, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8884}, 0x0) 20:21:30 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, 0x0, 0x4804) 20:21:30 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r2 = inotify_init1(0x80000) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:21:31 executing program 0: syz_usb_connect(0x5, 0x7c, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4, 0xb0, 0x3d, 0x20, 0x148f, 0x1706, 0xecb2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x34, 0x0, 0x0, 0xa0, 0x9c, 0xdc, 0x0, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "0809e621a7"}, {0x5, 0x24, 0x0, 0xf1d}, {0xd, 0x24, 0xf, 0x1, 0xb91a, 0x2, 0x401, 0x8}, {0x6, 0x24, 0x1a, 0xf001, 0x4}, [@acm={0x4, 0x24, 0x2, 0x2}, @mdlm_detail={0x21, 0x24, 0x13, 0x4, "897e6b789474469bda80024303a6706ea5de91e9d3d55fb0f487228a52"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1}, @dmm={0x7, 0x24, 0x14, 0x5, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x4}]}]}}]}}]}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_getoverrun(r0) 20:21:31 executing program 4: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r3 = inotify_init1(0x80000) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:21:31 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, 0x0, 0x4804) [ 545.500364][ T9473] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 545.759890][ T9473] usb 1-1: Using ep0 maxpacket: 32 20:21:32 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7f, 0xdb, 0x3, 0x40, 0x45e, 0x7c6, 0x5656, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000080)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_io_uring_complete(0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0x1ff, 0x5c40, 0x6, 0x1ff, 0x54f4f873, 0x9c71}) [ 545.904310][ T9473] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 545.912853][ T9473] usb 1-1: config 0 has no interface number 0 [ 545.919093][ T9473] usb 1-1: New USB device found, idVendor=148f, idProduct=1706, bcdDevice=ec.b2 [ 545.928438][ T9473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:21:32 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r2 = inotify_init1(0x80000) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) 20:21:32 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:21:32 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = getpid() r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x2, 0x7fffffff}, 0xc) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000140)=0x1, 0x4) r7 = inotify_init1(0x0) r8 = dup(r7) inotify_add_watch(r8, &(0x7f00000000c0)='./file0\x00', 0x10000880) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x2, 0x1}, 0xc) kcmp$KCMP_EPOLL_TFD(0x0, r5, 0x7, r6, &(0x7f0000000040)={r8, r9, 0x3ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000900e9726964676500000c00028008001a000081"], 0x3c}}, 0x0) splice(r0, 0x0, r4, 0x0, 0x1420000a77, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00"], 0x3}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 546.181954][ T9473] usb 1-1: config 0 descriptor?? [ 546.327825][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 546.376562][ T9473] usb 1-1: reset high-speed USB device number 25 using dummy_hcd [ 546.554615][ T8706] usb 5-1: new high-speed USB device number 6 using dummy_hcd 20:21:33 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:21:33 executing program 2: unshare(0x2040400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xab) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x610c00, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440), 0xc, 0x0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r2 = inotify_init1(0x80000) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={0x9, 0x100, 0x81, 0x80000001, 0x4, 0x1, 0x3}) [ 546.983535][ T8706] usb 5-1: New USB device found, idVendor=045e, idProduct=07c6, bcdDevice=56.56 [ 546.992891][ T8706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.049977][ T8706] usb 5-1: config 0 descriptor?? 20:21:33 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 20:21:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000014000000030a000000000000000000000000000028000000000a0300000000000000000002000000090001007379ff0f00000000080002400000090014"], 0x84}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x7f, 0x6], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x71, &(0x7f0000000000)={r5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={r5, 0x9}, 0x8) [ 547.320859][ T8706] r8152 5-1:0.0: Unknown version 0x0000 [ 547.337539][ T9473] ieee80211 phy4: rt2x00usb_vendor_request: Error - Vendor Request 0x09 failed for offset 0x0000 with error -19 [ 547.349569][ T9473] ===================================================== [ 547.356645][ T9473] BUG: KMSAN: uninit-value in rt2500usb_bbp_read+0x19f/0x7e0 [ 547.364035][ T9473] CPU: 1 PID: 9473 Comm: kworker/1:4 Not tainted 5.8.0-rc5-syzkaller #0 [ 547.372368][ T9473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 547.382569][ T9473] Workqueue: usb_hub_wq hub_event [ 547.387737][ T9473] Call Trace: [ 547.391120][ T9473] dump_stack+0x21c/0x280 [ 547.395527][ T9473] kmsan_report+0xf7/0x1e0 [ 547.399971][ T9473] __msan_warning+0x58/0xa0 [ 547.404503][ T9473] rt2500usb_bbp_read+0x19f/0x7e0 [ 547.409558][ T9473] rt2500usb_probe_hw+0x48f/0x2710 [ 547.414688][ T9473] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 547.420507][ T9473] ? rt2500usb_queue_init+0x200/0x200 [ 547.425875][ T9473] rt2x00lib_probe_dev+0xc58/0x3620 [ 547.431172][ T9473] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 547.436975][ T9473] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 547.443642][ T9473] ? kmsan_get_metadata+0x116/0x180 [ 547.448835][ T9473] ? kmsan_get_metadata+0x116/0x180 [ 547.454034][ T9473] rt2x00usb_probe+0x80a/0xfb0 [ 547.458801][ T9473] rt2500usb_probe+0x50/0x60 [ 547.463386][ T9473] ? rt2800_brightness_set+0x1090/0x1090 [ 547.469076][ T9473] usb_probe_interface+0xece/0x1550 [ 547.474284][ T9473] ? usb_register_driver+0x900/0x900 [ 547.479642][ T9473] really_probe+0xf20/0x20b0 [ 547.484234][ T9473] ? kmsan_get_metadata+0x116/0x180 [ 547.489695][ T9473] driver_probe_device+0x293/0x390 [ 547.494810][ T9473] __device_attach_driver+0x63f/0x830 [ 547.500198][ T9473] bus_for_each_drv+0x2ca/0x3f0 [ 547.505046][ T9473] ? coredump_store+0xf0/0xf0 [ 547.509728][ T9473] __device_attach+0x4e2/0x7f0 [ 547.514521][ T9473] device_initial_probe+0x4a/0x60 [ 547.519561][ T9473] bus_probe_device+0x177/0x3d0 [ 547.524437][ T9473] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 547.530252][ T9473] device_add+0x3b0e/0x40d0 [ 547.534772][ T9473] usb_set_configuration+0x380f/0x3f10 [ 547.540270][ T9473] ? usb_set_configuration+0xb41/0x3f10 [ 547.545846][ T9473] usb_generic_driver_probe+0x138/0x300 [ 547.551391][ T9473] ? usb_choose_configuration+0xe70/0xe70 [ 547.557131][ T9473] usb_probe_device+0x311/0x490 [ 547.561993][ T9473] ? usb_register_device_driver+0x540/0x540 [ 547.567882][ T9473] really_probe+0xf20/0x20b0 [ 547.572475][ T9473] ? kmsan_get_metadata+0x116/0x180 [ 547.580536][ T9473] driver_probe_device+0x293/0x390 [ 547.585674][ T9473] __device_attach_driver+0x63f/0x830 [ 547.591054][ T9473] bus_for_each_drv+0x2ca/0x3f0 [ 547.595900][ T9473] ? coredump_store+0xf0/0xf0 [ 547.600582][ T9473] __device_attach+0x4e2/0x7f0 [ 547.605357][ T9473] device_initial_probe+0x4a/0x60 [ 547.610377][ T9473] bus_probe_device+0x177/0x3d0 [ 547.615254][ T9473] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 547.621058][ T9473] device_add+0x3b0e/0x40d0 [ 547.625575][ T9473] usb_new_device+0x1bd4/0x2a30 [ 547.630432][ T9473] hub_event+0x5e7b/0x8a70 [ 547.634889][ T9473] ? kmsan_get_metadata+0x116/0x180 [ 547.640082][ T9473] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 547.645879][ T9473] ? led_work+0x7c0/0x7c0 [ 547.650318][ T9473] process_one_work+0x1688/0x2140 [ 547.655356][ T9473] worker_thread+0x10bc/0x2730 [ 547.661688][ T9473] ? kmsan_get_metadata+0x116/0x180 [ 547.666881][ T9473] ? kmsan_get_metadata+0x116/0x180 [ 547.672082][ T9473] kthread+0x551/0x590 [ 547.676148][ T9473] ? process_one_work+0x2140/0x2140 [ 547.681361][ T9473] ? kthread_blkcg+0x110/0x110 [ 547.686144][ T9473] ret_from_fork+0x1f/0x30 [ 547.690553][ T9473] [ 547.692868][ T9473] Local variable ----reg.i.i@rt2500usb_bbp_read created at: [ 547.700144][ T9473] rt2500usb_bbp_read+0x98/0x7e0 [ 547.705073][ T9473] rt2500usb_bbp_read+0x98/0x7e0 [ 547.709990][ T9473] ===================================================== [ 547.716916][ T9473] Disabling lock debugging due to kernel taint [ 547.723053][ T9473] Kernel panic - not syncing: panic_on_warn set ... [ 547.729637][ T9473] CPU: 1 PID: 9473 Comm: kworker/1:4 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 547.739335][ T9473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 547.749996][ T9473] Workqueue: usb_hub_wq hub_event [ 547.755097][ T9473] Call Trace: [ 547.758394][ T9473] dump_stack+0x21c/0x280 [ 547.762794][ T9473] panic+0x4d7/0xef7 [ 547.766695][ T9473] ? add_taint+0x17c/0x210 [ 547.771133][ T9473] kmsan_report+0x1df/0x1e0 [ 547.775634][ T9473] __msan_warning+0x58/0xa0 [ 547.780143][ T9473] rt2500usb_bbp_read+0x19f/0x7e0 [ 547.785167][ T9473] rt2500usb_probe_hw+0x48f/0x2710 [ 547.790281][ T9473] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 547.796089][ T9473] ? rt2500usb_queue_init+0x200/0x200 [ 547.801455][ T9473] rt2x00lib_probe_dev+0xc58/0x3620 [ 547.806651][ T9473] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 547.812462][ T9473] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 547.818611][ T9473] ? kmsan_get_metadata+0x116/0x180 [ 547.823808][ T9473] ? kmsan_get_metadata+0x116/0x180 [ 547.829005][ T9473] rt2x00usb_probe+0x80a/0xfb0 [ 547.833778][ T9473] rt2500usb_probe+0x50/0x60 [ 547.838453][ T9473] ? rt2800_brightness_set+0x1090/0x1090 [ 547.844082][ T9473] usb_probe_interface+0xece/0x1550 [ 547.849302][ T9473] ? usb_register_driver+0x900/0x900 [ 547.854586][ T9473] really_probe+0xf20/0x20b0 [ 547.859174][ T9473] ? kmsan_get_metadata+0x116/0x180 [ 547.864387][ T9473] driver_probe_device+0x293/0x390 [ 547.869500][ T9473] __device_attach_driver+0x63f/0x830 [ 547.874876][ T9473] bus_for_each_drv+0x2ca/0x3f0 [ 547.879721][ T9473] ? coredump_store+0xf0/0xf0 [ 547.884399][ T9473] __device_attach+0x4e2/0x7f0 [ 547.889182][ T9473] device_initial_probe+0x4a/0x60 [ 547.894203][ T9473] bus_probe_device+0x177/0x3d0 [ 547.899052][ T9473] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 547.904852][ T9473] device_add+0x3b0e/0x40d0 [ 547.909369][ T9473] usb_set_configuration+0x380f/0x3f10 [ 547.914830][ T9473] ? usb_set_configuration+0xb41/0x3f10 [ 547.920393][ T9473] usb_generic_driver_probe+0x138/0x300 [ 547.925932][ T9473] ? usb_choose_configuration+0xe70/0xe70 [ 547.931645][ T9473] usb_probe_device+0x311/0x490 [ 547.936494][ T9473] ? usb_register_device_driver+0x540/0x540 [ 547.942380][ T9473] really_probe+0xf20/0x20b0 [ 547.946967][ T9473] ? kmsan_get_metadata+0x116/0x180 [ 547.952163][ T9473] driver_probe_device+0x293/0x390 [ 547.957270][ T9473] __device_attach_driver+0x63f/0x830 [ 547.962643][ T9473] bus_for_each_drv+0x2ca/0x3f0 [ 547.967487][ T9473] ? coredump_store+0xf0/0xf0 [ 547.972171][ T9473] __device_attach+0x4e2/0x7f0 [ 547.976937][ T9473] device_initial_probe+0x4a/0x60 [ 547.981958][ T9473] bus_probe_device+0x177/0x3d0 [ 547.986806][ T9473] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 547.992606][ T9473] device_add+0x3b0e/0x40d0 [ 547.997119][ T9473] usb_new_device+0x1bd4/0x2a30 [ 548.001975][ T9473] hub_event+0x5e7b/0x8a70 [ 548.006422][ T9473] ? kmsan_get_metadata+0x116/0x180 [ 548.011615][ T9473] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 548.017431][ T9473] ? led_work+0x7c0/0x7c0 [ 548.021754][ T9473] process_one_work+0x1688/0x2140 [ 548.026788][ T9473] worker_thread+0x10bc/0x2730 [ 548.031569][ T9473] ? kmsan_get_metadata+0x116/0x180 [ 548.036769][ T9473] ? kmsan_get_metadata+0x116/0x180 [ 548.041970][ T9473] kthread+0x551/0x590 [ 548.046051][ T9473] ? process_one_work+0x2140/0x2140 [ 548.051247][ T9473] ? kthread_blkcg+0x110/0x110 [ 548.056008][ T9473] ret_from_fork+0x1f/0x30 [ 548.061676][ T9473] Kernel Offset: disabled [ 548.066006][ T9473] Rebooting in 86400 seconds..