[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.34' (ECDSA) to the list of known hosts. 2020/08/31 10:58:53 fuzzer started 2020/08/31 10:58:54 dialing manager at 10.128.0.26:33875 2020/08/31 10:58:55 syscalls: 3166 2020/08/31 10:58:55 code coverage: enabled 2020/08/31 10:58:55 comparison tracing: enabled 2020/08/31 10:58:55 extra coverage: enabled 2020/08/31 10:58:55 setuid sandbox: enabled 2020/08/31 10:58:55 namespace sandbox: enabled 2020/08/31 10:58:55 Android sandbox: /sys/fs/selinux/policy does not exist 2020/08/31 10:58:55 fault injection: enabled 2020/08/31 10:58:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/31 10:58:55 net packet injection: enabled 2020/08/31 10:58:55 net device setup: enabled 2020/08/31 10:58:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/31 10:58:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/31 10:58:55 USB emulation: enabled 2020/08/31 10:58:55 hci packet injection: enabled 11:03:34 executing program 0: syzkaller login: [ 432.694710][ T8485] IPVS: ftp: loaded support on port[0] = 21 [ 433.213293][ T8485] chnl_net:caif_netlink_parms(): no params data found [ 433.346138][ T8485] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.353739][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.363240][ T8485] device bridge_slave_0 entered promiscuous mode [ 433.384802][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.392042][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.401533][ T8485] device bridge_slave_1 entered promiscuous mode [ 433.459026][ T8485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.476731][ T8485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.529028][ T8485] team0: Port device team_slave_0 added [ 433.543397][ T8485] team0: Port device team_slave_1 added [ 433.591002][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.598384][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.625065][ T8485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.648082][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.655269][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.681454][ T8485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.753805][ T8485] device hsr_slave_0 entered promiscuous mode [ 433.782621][ T8485] device hsr_slave_1 entered promiscuous mode [ 434.079178][ T8485] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 434.107230][ T8485] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 434.168038][ T8485] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 434.195955][ T8485] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 434.560369][ T8485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.594580][ T8698] Bluetooth: hci0: command 0x0409 tx timeout [ 434.618364][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 434.627599][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 434.655837][ T8485] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.682237][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 434.692534][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 434.703580][ T8698] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.710825][ T8698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.731969][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 434.751672][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 434.761664][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 434.771381][ T8699] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.778781][ T8699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.843112][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 434.854412][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 434.865954][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 434.876677][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 434.887236][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 434.897982][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 434.911654][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 434.948395][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 434.957947][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 434.997374][ T8485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.011723][ T8485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 435.030286][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 435.040646][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 435.109786][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 435.117874][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 435.159777][ T8485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.242026][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 435.252738][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 435.314138][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 435.325285][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 435.349865][ T8485] device veth0_vlan entered promiscuous mode [ 435.358958][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 435.368784][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 435.407815][ T8485] device veth1_vlan entered promiscuous mode [ 435.487644][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 435.497394][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 435.507065][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 435.517290][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 435.541635][ T8485] device veth0_macvtap entered promiscuous mode [ 435.565278][ T8485] device veth1_macvtap entered promiscuous mode [ 435.627886][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.636323][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 435.646008][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 435.655522][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 435.665569][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 435.695990][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.716034][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 435.726408][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 11:03:39 executing program 0: 11:03:39 executing program 0: clone(0x40077c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '#('}, {0x20, '}**'}], 0xa, "b73f82739f1a6cd8d884ef0e6bad6536e83a0e1859bdd492a7"}, 0x2b) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/229, 0xe5}], 0x1) [ 436.538698][ T8709] sg_write: data in/out 1818846731/1 bytes for SCSI command 0xe-- guessing data in; [ 436.538698][ T8709] program syz-executor.0 not setting count and/or reply_len properly [ 436.676492][ T8698] Bluetooth: hci0: command 0x041b tx timeout 11:03:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x4}}]}, 0x34}}, 0x0) 11:03:41 executing program 0: dup(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x162, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 438.754361][ T8698] Bluetooth: hci0: command 0x040f tx timeout 11:03:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x142, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 11:03:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = dup(r3) ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000080)) ioctl$CHAR_RAW_SECTGET(r4, 0x1267, &(0x7f0000000140)) ustat(0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 440.833701][ T8652] Bluetooth: hci0: command 0x0419 tx timeout [ 441.213980][ T8652] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 441.257178][ T8740] IPVS: ftp: loaded support on port[0] = 21 [ 441.566287][ T8652] usb 1-1: device descriptor read/64, error 18 [ 441.821147][ T8740] chnl_net:caif_netlink_parms(): no params data found [ 441.956300][ T8740] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.963805][ T8740] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.973224][ T8740] device bridge_slave_0 entered promiscuous mode [ 441.986835][ T8652] usb 1-1: device descriptor read/64, error 18 [ 441.996508][ T8740] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.005115][ T8740] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.015120][ T8740] device bridge_slave_1 entered promiscuous mode [ 442.068796][ T8740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.086787][ T8740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.141813][ T8740] team0: Port device team_slave_0 added [ 442.157260][ T8740] team0: Port device team_slave_1 added [ 442.202669][ T8740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.210881][ T8740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.237066][ T8740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.259241][ T8740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.267566][ T8740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.294464][ T8740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.330325][ T8652] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 442.373009][ T8740] device hsr_slave_0 entered promiscuous mode [ 442.385602][ T8740] device hsr_slave_1 entered promiscuous mode [ 442.397829][ T8740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.405603][ T8740] Cannot create hsr debugfs directory [ 442.675397][ T8652] usb 1-1: device descriptor read/64, error 18 [ 442.697772][ T8740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 442.737984][ T8740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 442.790299][ T8740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 442.814700][ T8740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 443.085094][ T8652] usb 1-1: device descriptor read/64, error 18 [ 443.154804][ T8699] Bluetooth: hci1: command 0x0409 tx timeout [ 443.161895][ T8740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.200309][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 443.210260][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 443.220915][ T8652] usb usb1-port1: attempt power cycle [ 443.247124][ T8740] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.290656][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 443.300187][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 443.309930][ T8699] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.317269][ T8699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.389839][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 443.400355][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 443.410541][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 443.420077][ T8699] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.427407][ T8699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.436663][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 443.452506][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 443.485800][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 443.496562][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 443.514927][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 443.530430][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 443.541686][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 443.568513][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 443.578548][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 443.617869][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 443.628062][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 443.646644][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 443.718387][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 443.726162][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 443.779783][ T8740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.844232][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 443.854903][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 443.971783][ T8652] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 444.008640][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 444.018386][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 11:03:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="b9c39dfa54fbe7bdaceb0c609e3c5ef27a4a286db084e39b280d88e87bb295f6aa0866ac4323c897b869396707f8e948899bf6cf8d089d2970", 0x39, 0xfffffffffffffffe) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x100, 0x70bd2a, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000000000000"], 0x8, r2) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="031000000000000208000400", @ANYRES32=r5, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f8474352e3fa53d3038303030303030303430463030303030307500020000e9643d00040000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000006300)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10000}}, 0x50) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0xfffffffffffffff5, r6, {0x40}}, 0x18) [ 444.062660][ T8740] device veth0_vlan entered promiscuous mode [ 444.078172][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 444.087843][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 444.162819][ T8740] device veth1_vlan entered promiscuous mode [ 444.223139][ C1] hrtimer: interrupt took 68236 ns [ 444.357397][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 444.366942][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 444.376682][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 444.386582][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 444.454941][ T8652] usb 1-1: device not accepting address 4, error -71 [ 444.613755][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 444.796355][ T8740] device veth0_macvtap entered promiscuous mode [ 444.891893][ T8740] device veth1_macvtap entered promiscuous mode [ 444.979489][ T8740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 444.990153][ T8740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.004919][ T8740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.105012][ T8740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 445.115968][ T8740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.130055][ T8740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.163366][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 445.174057][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 445.184541][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 445.194951][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 11:03:48 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x14f) r2 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r0, @ANYRESOCT, @ANYRESOCT], 0x5c, 0x2) r3 = open(&(0x7f00000002c0)='./file1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') mkdirat(r3, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x3, 0x5844, 0x1}, 0x40) [ 445.251397][ T8699] Bluetooth: hci1: command 0x041b tx timeout [ 445.661211][ C0] sd 0:0:1:0: [sg0] tag#293 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 445.671860][ C0] sd 0:0:1:0: [sg0] tag#293 CDB: Test Unit Ready [ 445.678631][ C0] sd 0:0:1:0: [sg0] tag#293 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.688472][ C0] sd 0:0:1:0: [sg0] tag#293 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.698309][ C0] sd 0:0:1:0: [sg0] tag#293 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.708134][ C0] sd 0:0:1:0: [sg0] tag#293 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.717957][ C0] sd 0:0:1:0: [sg0] tag#293 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.727802][ C0] sd 0:0:1:0: [sg0] tag#293 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.737611][ C0] sd 0:0:1:0: [sg0] tag#293 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.747424][ C0] sd 0:0:1:0: [sg0] tag#293 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.758784][ C0] sd 0:0:1:0: [sg0] tag#293 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.768589][ C0] sd 0:0:1:0: [sg0] tag#293 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.778364][ C0] sd 0:0:1:0: [sg0] tag#293 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.788153][ C0] sd 0:0:1:0: [sg0] tag#293 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.797950][ C0] sd 0:0:1:0: [sg0] tag#293 CDB[c0]: 00 00 00 00 00 00 00 00 [ 445.829392][ C1] sd 0:0:1:0: [sg0] tag#294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 445.839962][ C1] sd 0:0:1:0: [sg0] tag#294 CDB: Test Unit Ready [ 445.846935][ C1] sd 0:0:1:0: [sg0] tag#294 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.856765][ C1] sd 0:0:1:0: [sg0] tag#294 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.866639][ C1] sd 0:0:1:0: [sg0] tag#294 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.876515][ C1] sd 0:0:1:0: [sg0] tag#294 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.886347][ C1] sd 0:0:1:0: [sg0] tag#294 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.896194][ C1] sd 0:0:1:0: [sg0] tag#294 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.906032][ C1] sd 0:0:1:0: [sg0] tag#294 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.915865][ C1] sd 0:0:1:0: [sg0] tag#294 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.925704][ C1] sd 0:0:1:0: [sg0] tag#294 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.935538][ C1] sd 0:0:1:0: [sg0] tag#294 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.945373][ C1] sd 0:0:1:0: [sg0] tag#294 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.955452][ C1] sd 0:0:1:0: [sg0] tag#294 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.965295][ C1] sd 0:0:1:0: [sg0] tag#294 CDB[c0]: 00 00 00 00 00 00 00 00 11:03:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f00000000c0)=""/149, 0x1000000, 0x1800, 0x800, 0x2}, 0x20) bind$isdn(r1, &(0x7f0000000040)={0x22, 0x7f, 0x69, 0x5, 0x5e}, 0x6) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000080)=[{&(0x7f00000042c0)="1f00000002031900000007000000068100023b0509000100f50000ff3ffe58", 0x1f}], 0x1) 11:03:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x142, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 11:03:50 executing program 0: getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=@random={'system.', '\x05\xd0tR\xc2\xfa\xa6\xc7!X\xd7\x9d>qP\xdb\x81\xa6\xf8b\xf8\xb6(\xe6\x00\xf75\x84\xe7\xfe\xb5\xa7\xc2\xf8D\xbf;\xa32G3\x91\x04\xe6\xc1\xfa@|dK\xa8Wr\x1fz\x98\x1b\xdd\\A\x16)\xd4H\x85d\xabY)\xa2\x8a\x1d\x15\bZY\ac\xf6\xe2\xc7\x17=\x93\x8f]\xce\xa1\xb4Y\x9c\xe1;.iX\x12<\xec\xfc\xbd\x16\x05\xb9\x98\xb7\xb2\xff\x14\x84\xa0\xe0\xbe\xb7\xfa\x98\xc0\x92s\x91\x9b\xdb\xcf\xea\xd4\xc6\xf0n\b\xd0*:\xd4\x9a\xef\xe9>\xc3\x11\x93\xfe\xec\xf7\xd5t\xa1\xe8\xe9!\x1a`\x17\xef\x0e\x8ft\x06\x9b\xf9\xf9KDS\x18\x90\x9b\xbf'}, &(0x7f0000000080)=""/212, 0xd4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x83) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x83) dup3(r2, r3, 0x0) dup3(r2, r1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="5776ae4c9df6afe01434c80e728c22334015ab258e18b7720f520ee1fada3560feeb3e0b3dff2333b94514a2cb85c85fdacc9e4121fb41bb260102a01ecb879d4c78143d661cf8c7206f7841fd0be162566645862149ad23584a269234fd3739a898e5ffce540b98f053428a755fd3ca7874d6f8c4df16f702e5e8b8606d972f0e9383f756f59019234814a2e1995907f3cf998e5e742895ac905d02e426f8502313bad277fc57527e7a"], 0x0) [ 446.714622][ T8981] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 447.097054][ T8702] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 447.316695][ T28] Bluetooth: hci1: command 0x040f tx timeout [ 447.373996][ T8702] usb 1-1: device descriptor read/64, error 18 [ 447.773885][ T8702] usb 1-1: device descriptor read/64, error 18 [ 448.045090][ T8702] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 448.313941][ T8702] usb 1-1: device descriptor read/64, error 18 [ 448.703934][ T8702] usb 1-1: device descriptor read/64, error 18 [ 448.825555][ T8702] usb usb1-port1: attempt power cycle 11:03:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x142, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 449.394858][ T28] Bluetooth: hci1: command 0x0419 tx timeout [ 449.535460][ T8702] usb 1-1: new high-speed USB device number 8 using dummy_hcd 11:03:53 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = inotify_init() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a04, 0x0) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$notify(0xffffffffffffffff, 0x402, 0x10) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 449.744432][ T8702] usb 1-1: device descriptor read/8, error -71 [ 449.954512][ T8702] usb 1-1: device descriptor read/8, error -71 11:03:53 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582ef1000000001020009050212"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8c, &(0x7f0000000b80)=ANY=[@ANYBLOB="8500004e5ded63b7c7b468f009b3bbeed5f241a66177e813c03e95"]) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x9c, 0x4) [ 450.744293][ T8702] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 450.835517][ T8702] usb 1-1: Using ep0 maxpacket: 16 [ 450.954433][ T8702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.964838][ T8702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 450.976135][ T8702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 450.986124][ T8702] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 450.996091][ T8702] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.104434][ T8702] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 451.113681][ T8702] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 451.121819][ T8702] usb 1-1: Manufacturer: syz [ 451.163767][ T8702] usb 1-1: config 0 descriptor?? 11:03:54 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000040)={{0x2, 0x2, 0x7, 0x9}, 0x13e, [0x0, 0x9, 0x3, 0x6, 0x80000001, 0x2800, 0x2, 0x6000, 0x4, 0x1ff, 0x401, 0x3ff, 0x0, 0x7, 0x0, 0x5, 0x6c1, 0x3, 0x1, 0x9, 0x1, 0xefd5, 0x3, 0x8, 0x1e0, 0x7fffffff, 0x5, 0x0, 0x10000, 0xfff, 0x3, 0x100, 0x8, 0x82, 0x3f, 0x9, 0x8, 0xff, 0x0, 0x3, 0x7, 0x5, 0x9, 0xc54, 0x9, 0xaabd, 0xfbae9df8, 0x1, 0x1ffc000, 0x4, 0x6, 0x6, 0x800, 0x2, 0x40, 0x0, 0x8, 0x9, 0x2, 0x1, 0x10000, 0xffffff01, 0x5, 0x7, 0x6, 0x5004, 0x800, 0x9, 0x3, 0xffff, 0xd29, 0x0, 0x8, 0x7fff, 0x400, 0x80000001, 0x0, 0x1, 0x37, 0xaa9e, 0x5, 0x4, 0x1, 0x4, 0xfffff000, 0x8, 0x9, 0x4, 0x1, 0x4, 0xffc00000, 0x9, 0x0, 0x1a, 0x9, 0x4, 0x3, 0x0, 0x3, 0x3f, 0x1f, 0x7f, 0x679, 0x7, 0x3f, 0x4f2b, 0x1000, 0x7f, 0x9, 0x4c7, 0x1, 0x80000000, 0x7fffffff, 0x409, 0x2, 0x39, 0x2, 0xfff, 0x7f, 0x2d, 0x2, 0xed9, 0x8, 0x80000000, 0x1, 0x8, 0x0, 0x5, 0x6, 0x7ff, 0x8, 0x38, 0x9, 0x7fffffff, 0x9, 0x8, 0x3, 0x4, 0x6, 0x9, 0xffffffff, 0xfffff000, 0x4, 0x7f, 0x1, 0x8, 0x100, 0x3, 0x2, 0x80, 0x10001, 0x6, 0x8, 0x7, 0x1, 0x1f31, 0x86, 0x2, 0x7, 0x9, 0x8, 0x9, 0x5, 0x101, 0x0, 0x8, 0xfff, 0x7f, 0x3f, 0x3, 0x9, 0x5, 0xfffeffff, 0x5, 0x80000000, 0x400, 0x81, 0x9, 0x8001, 0x4, 0x8, 0x7fff, 0xfffffffb, 0x7, 0x100, 0x9, 0x120, 0x2, 0xf98, 0xff, 0xffff, 0xfffc0000, 0x80, 0xfffff320, 0xfffffffd, 0x6, 0x9, 0x0, 0x4e89, 0xfffffffb, 0x9, 0x10001, 0x80000001, 0xfffffe6f, 0x7f, 0xffffffff, 0x1, 0x80, 0xffff494a, 0x1ff, 0x8d6, 0x5, 0x0, 0xde24, 0xffffffc1, 0x47, 0x2, 0x3f, 0xfff, 0x7fff, 0x1, 0x6000, 0x3, 0x1, 0x7, 0x1, 0x10001, 0x1, 0x8, 0x97, 0x8000, 0xff, 0x1f, 0xa7c, 0xfffffffe, 0x3, 0x4, 0x7, 0x80, 0x9, 0x400, 0x3, 0x4, 0x4, 0x4, 0x7, 0x1ff, 0x3ff, 0x12, 0x80000000, 0x1a, 0x80000001, 0xc380, 0x9, 0x1, 0x10000, 0x3, 0x6, 0x20, 0x3, 0x3, 0x9, 0x5, 0x800, 0x9, 0x3, 0x7ff, 0x2, 0x7f, 0x6, 0x9, 0xfffffffd, 0x4, 0x4, 0x0, 0xffff, 0x9, 0x40, 0x1, 0x401, 0x80000000, 0x7, 0x5, 0x401, 0x5c, 0x662, 0x3f, 0xffffffff, 0xd945, 0x3, 0x414b498e, 0x1ff, 0x9, 0x400, 0x5, 0x81, 0x3, 0x2800, 0x7fff, 0x1, 0x1, 0x9, 0x0, 0x7, 0x0, 0x4, 0x800, 0x7, 0x4, 0x2, 0x8, 0x3, 0x8, 0x7fff, 0x101, 0x4, 0xb6, 0x2, 0x9, 0x3f, 0x8, 0x7fffffff, 0xfffff801, 0x0, 0x5, 0x0, 0x1f, 0x6, 0x2d, 0x40, 0x2893, 0x5, 0x4, 0xfffffffe, 0x100, 0x7, 0x2e, 0x8, 0x160f1dbb, 0x2f, 0x0, 0x10001, 0x2, 0x4, 0x80, 0x8000, 0x2, 0x0, 0x60cd, 0x10001, 0x3, 0x80000001, 0x5, 0x8, 0x7f, 0x1, 0x2, 0xb0e2, 0x0, 0xfffffff9, 0xf818, 0x7, 0x0, 0x1, 0x4, 0xfffffffd, 0x4, 0x1, 0x9, 0x8, 0x2, 0x4, 0x5, 0xfff, 0x5, 0xe4, 0x1000, 0x1, 0x2, 0x3, 0xffffff75, 0xc680, 0x12a, 0x7, 0x9, 0x7, 0x200, 0x20, 0x23, 0x5, 0x0, 0x3, 0x10001, 0x4, 0x5, 0x7, 0xffff, 0x4, 0x6, 0x10001, 0x10a50f66, 0x1, 0x5c87, 0x4, 0x7fff, 0x8, 0xfffffc00, 0x11c, 0xfffffffb, 0x4, 0x6, 0x3, 0x0, 0x1, 0x80000001, 0x52e, 0x20, 0xfffffffd, 0x9, 0x2, 0x2, 0xdd3, 0x4, 0x8001, 0x3f, 0x5, 0x6, 0x80000000, 0x401, 0xfffffffc, 0x6, 0x1f, 0x5, 0x8, 0x6, 0xb13, 0xfffffffd, 0x7, 0x0, 0x9, 0x2, 0xfd04, 0x81f6, 0x5, 0x8, 0xfffffffa, 0x10001, 0x3, 0x5, 0x7, 0x9, 0xfffffffc, 0x4, 0x8, 0x1000, 0x400, 0x6, 0xfffffffb, 0x7fff, 0x100, 0x3, 0x639, 0x2, 0x8, 0x1, 0x6, 0x9, 0xd002, 0xcf18, 0x7fffffff, 0x3ff, 0xffff8fa2, 0x3, 0xbac1, 0xff, 0xff, 0xc5d, 0x4e1, 0x400, 0x8, 0x5, 0x2, 0x8, 0x7, 0x9, 0x4, 0x9d1a, 0x1, 0x6, 0x3ff, 0xffffffe1, 0x5, 0x4, 0x40000000, 0xff, 0x80000000, 0x2, 0x4, 0x0, 0x6, 0x1, 0x1, 0x8e9f, 0x6, 0x2, 0x2, 0x5, 0x5, 0x1, 0x3, 0x80, 0x80000000, 0x1f, 0x6, 0x2, 0x2, 0xa8ba, 0x92, 0x4, 0x7, 0x1, 0x8, 0x100, 0x10001, 0x6, 0x77, 0x7fff, 0xfffffffb, 0x5, 0x2, 0x3, 0x0, 0x4, 0xc7e1, 0x7, 0x3, 0x0, 0x200, 0x7, 0x0, 0x1, 0x3, 0x953, 0x1, 0x8, 0x740, 0x5, 0x101, 0xffffffff, 0x1f, 0x6, 0xb3, 0x0, 0x1, 0x1, 0x7, 0x8, 0x1ff, 0x7, 0x101, 0x8001, 0x0, 0x101, 0x0, 0x3, 0x1, 0x4, 0x0, 0x0, 0x2, 0x6, 0x7, 0x7, 0x5, 0x5, 0x0, 0x7, 0x2, 0x0, 0x40, 0x0, 0x7f, 0x100, 0x9, 0x4e3, 0x4, 0x864, 0x400, 0x39, 0xfffffc00, 0x5, 0x48, 0x3, 0x40, 0x6, 0x20, 0x4, 0x4a, 0x9, 0xfffff800, 0xfffffff9, 0x1f, 0x1, 0x1, 0x4, 0x7, 0x200, 0x2, 0x6, 0x657, 0x80000, 0xffff, 0x0, 0x8001, 0x9, 0x0, 0x4, 0x4, 0x1, 0x1, 0xcf2e, 0x3, 0xffff, 0x9e, 0x5, 0x200, 0x111, 0x1, 0xaa6, 0x1, 0x4, 0x1, 0x81, 0x10001, 0x1, 0xffffffff, 0x6, 0xfffffff7, 0x1, 0x0, 0x3, 0xffffffff, 0x2, 0x8, 0x8, 0xff, 0x100, 0x2, 0x100, 0x80000, 0x2e6, 0x9, 0x1, 0xffff, 0x3, 0xfffffff8, 0x800, 0x1, 0x100, 0x20, 0x9, 0xfffffffe, 0xfffffffd, 0x435, 0x1, 0x7, 0xffffd8e4, 0x4f13, 0x0, 0x2, 0x2, 0x7, 0x95, 0x1, 0x3, 0x1, 0xfffffffe, 0x8, 0x80, 0x5, 0x3, 0x1, 0xfffffff7, 0x6e, 0x401, 0x3, 0x1, 0xe0000000, 0x5, 0x7, 0xfb, 0x1000, 0x9f6, 0x2, 0xccf, 0x1f, 0x81, 0x67a5, 0x3, 0x729, 0x7fffffff, 0x0, 0x1, 0x1, 0x8, 0x9, 0x4, 0x92, 0x7, 0x1f, 0x6, 0x4, 0x7, 0x8000, 0x87, 0x6, 0x5, 0x1, 0x7e, 0x80000001, 0x0, 0x3, 0x0, 0x40, 0x5, 0x2, 0x2, 0x1, 0x3, 0xee, 0x8000, 0x5, 0x1, 0x5, 0xfffffbff, 0x3ff, 0xdf, 0x3, 0xfffffff9, 0x0, 0x59d3, 0x83, 0x9, 0x4, 0xffffffff, 0x101, 0xbb, 0x7f, 0x31, 0x1, 0x800, 0x8000, 0xb2f, 0x8, 0xef7f, 0x100, 0x1, 0x55, 0x6, 0x200, 0x1, 0x7, 0x9, 0x3f, 0x7ff, 0x9, 0x35, 0x1, 0xffffffff, 0x5, 0x4, 0x80, 0x7, 0x4, 0x3, 0x40, 0x1, 0x8, 0x9, 0x9, 0x6, 0x7, 0x0, 0x3, 0xa1, 0x7fffffff, 0xfffffffc, 0x7ff, 0x99, 0x8000, 0x1, 0x0, 0x7, 0x6, 0xbf9, 0xffffffff, 0x401, 0x81, 0x6, 0x3f, 0x1, 0x8, 0x7, 0x61, 0x10000, 0x0, 0x6, 0x19, 0x38a6, 0x1000, 0x20, 0x400, 0x31, 0x3, 0xfffffffe, 0x20, 0x7d, 0x0, 0x1000, 0x4, 0x1, 0x2, 0x4, 0x6, 0x40, 0x8, 0x8, 0x1, 0x5, 0x2, 0x80000000, 0x6, 0x0, 0x81, 0xd6f, 0x6, 0x9, 0x5, 0x5, 0x20, 0x8000, 0x0, 0x7, 0x81, 0x4, 0x7, 0x80000000, 0x15, 0x1, 0x1f, 0x6, 0x23c7, 0x19c, 0x1, 0x5f, 0x2, 0x2, 0x4, 0x0, 0x4, 0x9d5, 0x400, 0xf4, 0x1f, 0x5, 0xfffff7d6, 0x7, 0x80, 0x7, 0x5, 0x7f, 0x7fffffff, 0x0, 0xce, 0x7fff, 0x40, 0x20, 0x10000, 0xae0, 0x4, 0x8000, 0x9c1, 0x6, 0x5, 0x7, 0x130, 0x4, 0x2, 0x1, 0x9, 0x5, 0x36, 0x8000, 0x6, 0xffff7fff, 0x4, 0x3, 0x8, 0x7f, 0x81, 0x8001, 0xb1, 0xa, 0x3ff, 0x4, 0x7, 0xda09, 0xfff, 0xc2b, 0x8, 0x5, 0x3f, 0x9ae, 0x2, 0x8, 0x81, 0x0, 0x101, 0x36, 0x4, 0x5, 0xed2, 0x7ff, 0x800, 0x0, 0x7, 0x1, 0x1ff, 0xff, 0x1ff, 0xff, 0x3, 0x1, 0x20, 0xffff3f14, 0xbf, 0x5, 0x3, 0x4, 0x3, 0x1, 0x0, 0x9, 0x40, 0x8, 0x2, 0x1000, 0x5, 0x800, 0x1000, 0x5, 0xffffffff, 0x6, 0x0, 0x9, 0x3800, 0xffff, 0x3356, 0x2, 0x1, 0x6, 0x8, 0xffffff0b, 0xfff, 0x6, 0x4, 0xc24, 0x584b, 0xfffffff7, 0x5, 0x8000, 0x7, 0x4, 0x300000, 0x7, 0x6, 0x8001, 0x20, 0x9a, 0x8001, 0xfffffe01, 0xffff, 0x3, 0x7, 0x1, 0x81, 0x80000001, 0x1f, 0xfffffc00, 0x7, 0x40, 0xc4ea, 0x9, 0xffffff81, 0x1ff, 0x6, 0x3f, 0x1000, 0x1, 0x5, 0x5, 0x7, 0x8, 0x20, 0xff, 0x3, 0x3ff, 0xfffffc00, 0x4420ce47, 0x6, 0x101, 0x6, 0x100, 0x7, 0x7, 0x7, 0x1, 0xf92, 0x10001, 0x1, 0x400, 0x8, 0x2, 0x3]}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa775}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x48800) r1 = accept4(r0, &(0x7f0000001180)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000001200)=0x80, 0x0) fcntl$notify(r1, 0x402, 0x23) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000001240)=0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x44, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x81) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000013c0)={0x1}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001400)='/dev/btrfs-control\x00', 0x5080, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000001440)) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000001480)=""/105) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001500)='/dev/vcsa\x00', 0x2080, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbe}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x239}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000001640)=""/5) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001680)=r0, 0x4) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/dlm-monitor\x00', 0xc000, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000001700)={0x8001, {{0xa, 0x4e21, 0x92c, @private0={0xfc, 0x0, [], 0x1}, 0x5}}}, 0x88) sendmsg$can_j1939(r3, &(0x7f00000018c0)={&(0x7f00000017c0)={0x1d, 0x0, 0x0, {0x2, 0xf0}, 0xff}, 0x18, &(0x7f0000001880)={&(0x7f0000001800)="032ba92db56639ecdcf1a82a9d9666f628e965af6f132737fd95e17b9bda0faf4cc4bc93305027b636c3be842a3f1af6c6197d90f8858d5315f6b3eb7871a56f541eaf50e290b036", 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) pidfd_open(0x0, 0x0) getsockname$netlink(r4, &(0x7f0000001900), &(0x7f0000001940)=0xc) [ 451.426182][ T8702] Registered IR keymap rc-hauppauge [ 451.461098][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 451.497799][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 451.535817][ T8702] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 451.550976][ T8702] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 451.648279][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 451.684452][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 451.716380][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 451.756422][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 451.794013][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 451.826301][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 451.865473][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 451.894293][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 451.925736][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 451.954372][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 451.988319][ T8702] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 451.996776][ T8702] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 452.043803][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 452.063779][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 452.076401][ T8702] usb 1-1: USB disconnect, device number 9 [ 452.083946][ C1] mceusb 1-1:0.0: Error: urb status = -71 11:03:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x142, &(0x7f0000000300)="c4fe910c6786ce22000000000000000300dd444e0735e43eb95f6a78e0f25bef50631648b17d02e74cc426446e11176aba0617b927c9589bcca272096d523173440f1ab57b7d5ad152631946fe5a6bbb00549ec19c02f49d6959fdb80300000000000000f1346d8384e900f9af861e417b825ba527e009be6fd7c33dc3859feaad7fa8e75523bc0475b3554d2216b21287fb9357258c7d0ff569b7bb20db5747bc7966f36a1f6588307a55f84dc7ef5e801d71d8241cebb504188d23a906a5061046bebee79427720a029cb9ae3a4a22a5f456ee57486b98d84cb2bacdb54faeec107d34becf6ac1335414cdeca40d4af0ec97788a92bc81821f080b4ea627da0c6f76aa65a38d817442ed2758e85cf9c347a0cdb7c0482974ec4f948f6721dc0d990f230c9355c44ecc865986b69dea90859a7e12c337a9a5335557abe71f376100"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 11:03:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x142, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$cont(0x7, r2, 0x0, 0x0) [ 452.814649][ T8702] usb 1-1: new high-speed USB device number 10 using dummy_hcd 11:03:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x142, &(0x7f0000000300)="c4fe910c6786ce22000000000000000300dd444e0735e43eb95f6a78e0f25bef50631648b17d02e74cc426446e11176aba0617b927c9589bcca272096d523173440f1ab57b7d5ad152631946fe5a6bbb00549ec19c02f49d6959fdb80300000000000000f1346d8384e900f9af861e417b825ba527e009be6fd7c33dc3859feaad7fa8e75523bc0475b3554d2216b21287fb9357258c7d0ff569b7bb20db5747bc7966f36a1f6588307a55f84dc7ef5e801d71d8241cebb504188d23a906a5061046bebee79427720a029cb9ae3a4a22a5f456ee57486b98d84cb2bacdb54faeec107d34becf6ac1335414cdeca40d4af0ec97788a92bc81821f080b4ea627da0c6f76aa65a38d817442ed2758e85cf9c347a0cdb7c0482974ec4f948f6721dc0d990f230c9355c44ecc865986b69dea90859a7e12c337a9a5335557abe71f376100"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$cont(0x7, r2, 0x0, 0x0) [ 453.053749][ T8702] usb 1-1: Using ep0 maxpacket: 16 [ 453.174018][ T8702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.184551][ T8702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 453.195804][ T8702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 453.205766][ T8702] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 453.215718][ T8702] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.304881][ T8702] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 453.314318][ T8702] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 453.322411][ T8702] usb 1-1: Manufacturer: syz [ 453.359572][ T8702] usb 1-1: config 0 descriptor?? 11:03:57 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="cc4af560d473db35fc43ad502a0ce7159e9a1ea704e440d73ab7c343e65634b37522635a07e894554a9bac50b9d261227ff7142276c4c2c434e1dc5452f9ba71b5f6c6f6451e8736433d720c60e4fe102a63", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB='B0\x00\x00\n\x00', @ANYRESDEC=r0, @ANYRESOCT, @ANYRES64, @ANYBLOB="1000020000001500"], 0x5c, 0x2) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x8000000}) r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r3) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0)="308ceb65386ab2aa8507828a1904cbb3f040faacffc8e90fef1aa322defc8b951e1f2d644f6ad37b1de583a0e6801ec41c081e4e501106a281c186", 0x3b) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x0, 0x5844, 0x1}, 0x40) [ 453.624304][ T8702] Registered IR keymap rc-hauppauge [ 453.658010][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 453.722295][ T9060] IPVS: ftp: loaded support on port[0] = 21 [ 453.737925][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 453.775565][ T8702] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 453.838950][ T8702] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 453.969135][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 453.983836][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.003851][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.023762][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.043762][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.048986][ C0] sd 0:0:1:0: [sg0] tag#295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 454.055577][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 454.060156][ C0] sd 0:0:1:0: [sg0] tag#295 CDB: Test Unit Ready [ 454.067600][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.073977][ C0] sd 0:0:1:0: [sg0] tag#295 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.083912][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.089490][ C0] sd 0:0:1:0: [sg0] tag#295 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.103704][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.104884][ C0] sd 0:0:1:0: [sg0] tag#295 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.120316][ C0] sd 0:0:1:0: [sg0] tag#295 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.123739][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.130068][ C0] sd 0:0:1:0: [sg0] tag#295 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.143758][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.145582][ C0] sd 0:0:1:0: [sg0] tag#295 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.161004][ C0] sd 0:0:1:0: [sg0] tag#295 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.163471][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 454.163840][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.170749][ C0] sd 0:0:1:0: [sg0] tag#295 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.183797][ C0] sd 0:0:1:0: [sg0] tag#295 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.193847][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.202965][ C0] sd 0:0:1:0: [sg0] tag#295 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.219352][ C0] sd 0:0:1:0: [sg0] tag#295 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.229219][ C0] sd 0:0:1:0: [sg0] tag#295 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.238976][ C0] sd 0:0:1:0: [sg0] tag#295 CDB[c0]: 00 00 00 00 00 00 00 00 [ 454.260102][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.284900][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 454.292607][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.335977][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.348025][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 454.388793][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.408780][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 454.463880][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.484696][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 454.499935][ C1] mceusb 1-1:0.0: Error: urb status = -71 11:03:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000300)={@void, @val={0x0, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x84, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00\v\b', 0x0, '\x00\x00$'}, "ccbfc12abc282c27820fd9118600820e010500110000000094ce7f17e89fb5f1912b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbdc1e5bde967a600ca0e2ba1e34aebb68aa9431063000000eaffffffffff000000d8"}}}}, 0x8b) [ 454.594095][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.601165][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 454.635181][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.642114][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 454.683491][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.697105][ T8702] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 454.733819][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.747651][ C0] sd 0:0:1:0: [sg0] tag#296 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 454.758199][ C0] sd 0:0:1:0: [sg0] tag#296 CDB: Test Unit Ready [ 454.761934][ T8702] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 454.764896][ C0] sd 0:0:1:0: [sg0] tag#296 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.772976][ T8702] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 454.782504][ C0] sd 0:0:1:0: [sg0] tag#296 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.800520][ C0] sd 0:0:1:0: [sg0] tag#296 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.810276][ C0] sd 0:0:1:0: [sg0] tag#296 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.820037][ C0] sd 0:0:1:0: [sg0] tag#296 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.829787][ C0] sd 0:0:1:0: [sg0] tag#296 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.839648][ C0] sd 0:0:1:0: [sg0] tag#296 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.849453][ C0] sd 0:0:1:0: [sg0] tag#296 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.859209][ C0] sd 0:0:1:0: [sg0] tag#296 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.868977][ C0] sd 0:0:1:0: [sg0] tag#296 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.873961][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 454.878751][ C0] sd 0:0:1:0: [sg0] tag#296 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.894191][ C0] sd 0:0:1:0: [sg0] tag#296 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.903954][ C0] sd 0:0:1:0: [sg0] tag#296 CDB[c0]: 00 00 00 00 00 00 00 00 [ 454.970124][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 455.009656][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 455.050022][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 455.083073][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 455.095739][ C1] mceusb 1-1:0.0: Error: urb status = -71 [ 455.103306][ T8702] usb 1-1: USB disconnect, device number 10 [ 455.471494][ T9060] chnl_net:caif_netlink_parms(): no params data found [ 455.634648][ T8702] Bluetooth: hci2: command 0x0409 tx timeout 11:03:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="683dcac57b2b7295e00e18b23ee3b4757100a516d94a1be84b57d4f9ba8eb9bca94a74bde005baa3b9467b57d7363b8cf1104788c710e9474a9392d3fd47fca4fd", 0x41) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = accept(r0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) [ 456.187218][ T9060] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.195998][ T9060] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.205627][ T9060] device bridge_slave_0 entered promiscuous mode 11:03:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x142, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$cont(0x7, r2, 0x0, 0x0) [ 456.337322][ T9060] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.344727][ T9060] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.354857][ T9060] device bridge_slave_1 entered promiscuous mode [ 456.437567][ T9060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.474714][ T9060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 11:04:00 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x2, &(0x7f00000001c0)=[{0x3d}, {0x16}]}) r0 = socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r1, &(0x7f0000000980)=[{{&(0x7f0000000400)=@xdp={0x2c, 0x3580, r4, 0x0, 0xfeffffff}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, @can={0x1d, r4}, @l2tp={0x2, 0x0, @empty, 0x3}, 0x100, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='xfrm0\x00', 0x2, 0x7ff, 0x4}) [ 456.575195][ T9060] team0: Port device team_slave_0 added [ 456.604423][ T9060] team0: Port device team_slave_1 added [ 456.665718][ T9060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.672780][ T9060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.701193][ T9060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.786622][ T9060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.794122][ T9060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.820253][ T9060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.958017][ T29] audit: type=1326 audit(1598871840.524:2): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9255 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 [ 457.078712][ T9060] device hsr_slave_0 entered promiscuous mode [ 457.088720][ T9060] device hsr_slave_1 entered promiscuous mode [ 457.115265][ T9060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.122996][ T9060] Cannot create hsr debugfs directory [ 457.673035][ T29] audit: type=1326 audit(1598871841.234:3): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9255 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 [ 457.714802][ T8702] Bluetooth: hci2: command 0x041b tx timeout [ 457.727190][ T9060] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 457.776153][ T9060] netdevsim netdevsim2 netdevsim1: renamed from eth1 11:04:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000050004000000000011000300686173683a6e65742c6e6574000000000500000000000000050001000600000009000200737930000000000c0007800800120000000000"], 0x58}}, 0x0) [ 457.819201][ T9060] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 457.878029][ T9060] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 458.039937][ T9320] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 11:04:01 executing program 0: ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)=0x3ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x0, 0xc8, 0x0, 0x0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @loopback, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000040)={r4, 0xfffffffd, 0x8, 0x7}, 0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={r4, 0xffffffff}, &(0x7f0000000140)=0x8) 11:04:02 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x400, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000200)=@get={0x1, &(0x7f0000000300)=""/86}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r4) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f00000000c0)=0x5) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000002c0)={0x0, 0x100}, 0x8) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f00000003c0)='7', 0x1}], 0x2) [ 458.405986][ T9324] xt_CT: You must specify a L4 protocol and not use inversions on it [ 458.515211][ T9060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.585193][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 458.594399][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 458.638405][ T9060] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.681194][ T9329] new mount options do not match the existing superblock, will be ignored [ 458.721528][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 458.731638][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 458.741478][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.748986][ T8652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.837297][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 458.847060][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 458.857138][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 458.866648][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.873985][ T8652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.883001][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 458.894152][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 459.057442][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 459.068690][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 459.079283][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 459.090479][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 459.100936][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 459.110777][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 459.120410][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 459.130150][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 459.149155][ T9060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 459.171817][ T9330] new mount options do not match the existing superblock, will be ignored [ 459.303148][ T9060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.312000][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 459.322015][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 459.330293][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 459.469884][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 459.480528][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 459.561070][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 459.572011][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 459.605569][ T9060] device veth0_vlan entered promiscuous mode [ 459.621647][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 459.632524][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 459.687769][ T9060] device veth1_vlan entered promiscuous mode [ 459.794347][ T8702] Bluetooth: hci2: command 0x040f tx timeout [ 459.802313][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 459.811942][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 459.822004][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 459.831929][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 459.875341][ T9060] device veth0_macvtap entered promiscuous mode [ 459.901110][ T9060] device veth1_macvtap entered promiscuous mode [ 460.018248][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 460.028879][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.038983][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 460.050020][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.064370][ T9060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.079266][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 460.088861][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 460.098438][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 460.108772][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 460.142377][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 460.152970][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.164895][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 460.175435][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.189565][ T9060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.202560][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 460.213786][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 11:04:04 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/seq\x00', 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0x81, 0x4) dup(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x4e8000, 0xffff, 0x0, r3, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) unshare(0x40000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x10000004}, 0x10040804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e25, 0xc1d4, @initdev={0xfe, 0x88, [], 0xfe, 0x0}, 0x1000}, 0x1c) 11:04:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000200)=0x5, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000030000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6f, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:04:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x142, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 11:04:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x142, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 461.241908][ C0] sd 0:0:1:0: [sg0] tag#297 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 461.252766][ C0] sd 0:0:1:0: [sg0] tag#297 CDB: Test Unit Ready [ 461.259533][ C0] sd 0:0:1:0: [sg0] tag#297 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.269318][ C0] sd 0:0:1:0: [sg0] tag#297 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.279161][ C0] sd 0:0:1:0: [sg0] tag#297 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.282274][ T9345] kvm [9341]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0 [ 461.288968][ C0] sd 0:0:1:0: [sg0] tag#297 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.289109][ C0] sd 0:0:1:0: [sg0] tag#297 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.317036][ C0] sd 0:0:1:0: [sg0] tag#297 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.326789][ C0] sd 0:0:1:0: [sg0] tag#297 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.336581][ C0] sd 0:0:1:0: [sg0] tag#297 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.346350][ C0] sd 0:0:1:0: [sg0] tag#297 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.356111][ C0] sd 0:0:1:0: [sg0] tag#297 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.365881][ C0] sd 0:0:1:0: [sg0] tag#297 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.375623][ C0] sd 0:0:1:0: [sg0] tag#297 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.385380][ C0] sd 0:0:1:0: [sg0] tag#297 CDB[c0]: 00 00 00 00 00 00 00 00 [ 461.476961][ T9351] IPVS: ftp: loaded support on port[0] = 21 [ 461.507144][ T9345] kvm [9341]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0 [ 461.874672][ T8699] Bluetooth: hci2: command 0x0419 tx timeout 11:04:05 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="00020040000000000000"], 0xa) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x3, 0x0, [0x400000f2, 0x0, 0x3, 0x2, 0x48, 0x0, 0x3]}) dup2(r3, 0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, 0xffffffffffffffff, r4, r5], 0x4) close(r2) r6 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4f0a, 0x0) 11:04:06 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x3, 0x0, 0x1000}}, 0x20) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') [ 463.275296][ C0] sd 0:0:1:0: [sg0] tag#308 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 463.285974][ C0] sd 0:0:1:0: [sg0] tag#308 CDB: Test Unit Ready [ 463.292541][ C0] sd 0:0:1:0: [sg0] tag#308 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.302430][ C0] sd 0:0:1:0: [sg0] tag#308 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.312232][ C0] sd 0:0:1:0: [sg0] tag#308 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.322023][ C0] sd 0:0:1:0: [sg0] tag#308 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.331774][ C0] sd 0:0:1:0: [sg0] tag#308 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.341557][ C0] sd 0:0:1:0: [sg0] tag#308 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.351382][ C0] sd 0:0:1:0: [sg0] tag#308 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.361177][ C0] sd 0:0:1:0: [sg0] tag#308 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.370944][ C0] sd 0:0:1:0: [sg0] tag#308 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.380711][ C0] sd 0:0:1:0: [sg0] tag#308 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.390476][ C0] sd 0:0:1:0: [sg0] tag#308 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.400257][ C0] sd 0:0:1:0: [sg0] tag#308 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 463.400516][ T9352] IPVS: ftp: loaded support on port[0] = 21 [ 463.410008][ C0] sd 0:0:1:0: [sg0] tag#308 CDB[c0]: 00 00 00 00 00 00 00 00 11:04:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000001f0000000012000e00010069703665727370616ebfe336ac0000000c0094a206000200009a4bc5d79bd07737ed2b872336c71784e331fd2e6b518b715079388f29eb30"], 0x40}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 463.937291][ T9410] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 463.948940][ T8701] tipc: TX() has been purged, node left! [ 464.087160][ T9416] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 11:04:07 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000880), &(0x7f00000008c0)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x80}, 0x2, 0x0, 0x0, 0x0, 0x81, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="5300000044a6aeabc81e1506000000000000001000fff64017db9820000000000000d403ffff633b27e59aa19338ac231515ef7cae8c705b6156d23571eacb8df1d2c1249045b8682634dd9d37590a3848499118c9aa66080228727544c62c3d77807e1b8f86746697f682e40feac9fe339eab6cde2b172dee3816906787d4f23632530929cdd3601115f74b3012a081e4af9a1d22a991efdcdfa06f6b4ee99c182cebc355eecfcefaf004dc20b91268c5b989f630ba60526d3db3ce7e9c1a7ca52cdfd2b762bb7c69c34d27752a190d3559ee"], 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) clock_nanosleep(0x5, 0x0, &(0x7f0000000040), &(0x7f0000000140)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x80000, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000040)="240000001e005f031400fffffffffff8070037b2b3448647a0e09658dc000208000800ff", 0xfdd6) recvmmsg(r5, &(0x7f0000005180), 0x193, 0x40010042, 0x0) fcntl$dupfd(r5, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f00000000c0)=0x1) setsockopt$inet_int(r4, 0x0, 0x6, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x7e) 11:04:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xf, 0x80000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1410, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x811) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x1000}) [ 464.507749][ C1] sd 0:0:1:0: [sg0] tag#309 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 464.518332][ C1] sd 0:0:1:0: [sg0] tag#309 CDB: Test Unit Ready [ 464.525080][ C1] sd 0:0:1:0: [sg0] tag#309 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.534931][ C1] sd 0:0:1:0: [sg0] tag#309 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.544741][ C1] sd 0:0:1:0: [sg0] tag#309 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.554630][ C1] sd 0:0:1:0: [sg0] tag#309 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.564436][ C1] sd 0:0:1:0: [sg0] tag#309 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.574261][ C1] sd 0:0:1:0: [sg0] tag#309 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.584091][ C1] sd 0:0:1:0: [sg0] tag#309 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.593958][ C1] sd 0:0:1:0: [sg0] tag#309 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.603883][ C1] sd 0:0:1:0: [sg0] tag#309 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.613671][ C1] sd 0:0:1:0: [sg0] tag#309 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.623374][ C1] sd 0:0:1:0: [sg0] tag#309 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.633941][ C1] sd 0:0:1:0: [sg0] tag#309 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.643747][ C1] sd 0:0:1:0: [sg0] tag#309 CDB[c0]: 00 00 00 00 00 00 00 00 [ 464.863809][ C0] sd 0:0:1:0: [sg0] tag#310 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 464.874436][ C0] sd 0:0:1:0: [sg0] tag#310 CDB: Test Unit Ready [ 464.881042][ C0] sd 0:0:1:0: [sg0] tag#310 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.890863][ C0] sd 0:0:1:0: [sg0] tag#310 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.900629][ C0] sd 0:0:1:0: [sg0] tag#310 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.910393][ C0] sd 0:0:1:0: [sg0] tag#310 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.920151][ C0] sd 0:0:1:0: [sg0] tag#310 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.929921][ C0] sd 0:0:1:0: [sg0] tag#310 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.939679][ C0] sd 0:0:1:0: [sg0] tag#310 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.949709][ C0] sd 0:0:1:0: [sg0] tag#310 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.959508][ C0] sd 0:0:1:0: [sg0] tag#310 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.969289][ C0] sd 0:0:1:0: [sg0] tag#310 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.979044][ C0] sd 0:0:1:0: [sg0] tag#310 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.988796][ C0] sd 0:0:1:0: [sg0] tag#310 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.998558][ C0] sd 0:0:1:0: [sg0] tag#310 CDB[c0]: 00 00 00 00 00 00 00 00 11:04:08 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="2f6465762f6e756c1c3882f0871e049df37b2302c06327c045036a4d8ea897"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='aufs\x00', 0x20000, &(0x7f0000000180)='./cgroup.net/syz1\x00') write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0x100, 0xffff, 0x3}) lstat(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000480)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000500)="4ac7fe50ebdcaee95365270a72fa3f3906567daed7700dd3704087dfbe3aa5b35fd636da14214a0906d4ab86fde6284ab66688b4309c29ae793f15421d2c654965bc07c147b963016276b3c842b96281703d0dc401024aab85d80ce7abe6aa14dbcec93986ebcf6c8808d148033a12e819cd708ee64d5fe788d4b0f3d9d5ae1692d4a9f12f1c365b0dc2431a816d05d689f13773c6ea20b31ec80b541a71e89ea4159bfe2a43e27aa9bfe7a287f95daeb766b0f075e381a996f00d621d5c706eb5061343b80909e55bbee2c2205c2b4bd09c9ae02706847b972f865d93a98ec1ead67d22f1aa1b0b671b2727c84487f84376044cc58c037607e339b4bbe5dc827a34ea84c882ef185b19ec53589bcf228a8aeace3c0e284b4bf1c0017774bf8d9bbfa1a37dc64736ad38d921a3601fabbf9d4b9b61fe51aff4fcd0372fba89fcb79cb33a8a57c9468ccdb9c5545892451e6c556f7c37145d49ee47e3464ee96ae1970e195d13f85364bb214d96f25ae4c2130845ca687c7be49f0151f9588cf99a695e9b91d72e0e1f41335c3b8867829bf4e1e606dcdf50eb446c546d1933bcc1d7210eb8e9ecc4a1b0d2b0f02c247a011ca176d4a2866452857587376c6b5fac390150f6da62ba4c896c304c47b3b4995464eb393f33ca4982a02d8cd1a21e973ded13f03dc6ca7f019b14062bf1cf00d7759f5fa239e10ed87c4e34744f3bfa880fcea3d78b831fa1682cd7aba564631f8aa5b37e5d73861eeabf76c002dc8465f6cb07f1cdbc01324e7c65b23c5f43a62c688d8bfff70c4990cd2e63146cc4db1768c361634a3501c67d90c875dab090049a65b11e15f68c6a65765bb5dc0c1cbc414c2a2168c370f8badd8688efc05f45e68a6be66894ec9ae0873ca6babaf8ed1d67147282509026fe3721a24360221d8f38ba86a84e35835189a0d1cd3fa2b5289f6add41c79f0daf0ecf9ba3facf9c22110394729cad987d969a40ff48cb562862a40e0f6d23ce79c24a54852d1cc8e79e56c1eb8ffd7c4506fa5d4589424593076f9b408c8c9d219b91a82b10ceb0b4fd11f0e5938a56b586eec995e59cd6a0e2411de3a1f67a0347912306a2aa7884b2248122732d038589471a5b6a776243aebc63b83169e10a1ca20cd2781f451ed28c6d64ec888fe226f4742636c1c91d12a896671234705912b65b58e2c927dcf4c6d76b2d6fb582626d4bf00f9a15cd1c54ca7a2fe2e0c301457d4067f6eaf84f75766c5a8371702f9d1423af6102c3add2a194a16d0d3e40a7e7655705934f1bb8c3667f21c856b8c01e5ae0135da7e60101127607fad8a91ce5f03995113160b4c8262f0f8254fef83a7d3b09e8f9360957f92dbdfa2e6ff17e021351112090de1ff3ae6e74c8d14f43efee8cb859bfcd64e02cc25ab8ce6e7df83a6a284c70e7c08685f8e10a3bce4e690231dd699dead59196653b47e2aa68cbb28613aa4269a66f69167db270b3f1cf40a3fb6e5f15dfcdabdf5e50cc3cfcb3afcf639c83e287ad3bd2966ddcbec1a40f6532365b9956ec66889c960d17c374fdab6028c04c8aa53f8e83a5ce61f156e1f198cab48049f70c969b8c2d08d1af0f993fc84b7ac8519919a25783032102a65ec2f2ea1c31779ea800d6226bfc58c9dbca8f4eacc9aede323b3ca15513ac406f6d57b17f02f968459e581e2d9bcfeae5aec3580517f89fe06d70335ff8f20cf6d65e5c821d8b9627c960db86e8fbdc81ef72641d72ebe6c89e826a16ab39fb016e783502617083d56cabea7492a3110b1bf0144575b215b013e458a03bbd9bf093c8b64d28872693a8efdad67249389e54ee6c325d723e2ee3d2e122aab19608ae754e51781392379040fcc5381fec088b99c521016eca2825644a2a8285f5f5636b0b1e22133ad8f432ff84e9d173c01930484b7eea77bc3e2384d6ada910d44c436add302b9cba92cb37f168930159764aef35a2bd24101b25d447633c2672ddee85ae33faba7a24bffa90d69a21ec7c947e57811eff2e8b27ca9691321992f9dd38e513dbe24f8c4df3fdaef576674c621d88ea30681dc700c66a1daa6affb2ca18227f46db80a36eb5b19f60e9f7ee26d3d2ee770e0897f8fdf0a9975cdf449c4506b21359f307df2a527b033e8f518a31f969e1914b2b256c09cf72b76fb302f21558ecba1088bc003e907452ac21f47d7e745896a8e7a6e81553ae5221988af8c32c8b30395d53c36024bd03a7293f546e4527820700628f40b427aba4614a6629022e3125e0f4d2c823bdf01e41d352cba4a80c1be32f004eeeec035029b71b1edc154fb20320cdeda16030237e8fad114c99421a6c037e28c1a837fcc8d560ce034d9d8260e862d0fb130c890e60d00c5c6ecc50e7007dbc34e6005422d72dd544e7a79cc4983f8e0a8fde7abab929c38b536a66f45aafe5548fe70e3200e26780f7c604aaf50997192d44aac8fd45e07318607dd72772d7b445beabe9d943054a8d200fdfb963fa487273276e93490eb490469430a8343dffbb72ace6020933f2d1262fa4495207d8b95765320b07090df8cd2781bc1cf9319c6a290a7e769a090b7f5f09c22cd01030304294fda76aaf1254cebcc7696f9920bf711f5f41b6dfc9fcefb2ead621e3c633c6957590dcdc17de440939940e85bead83e7f8217a53cb3bb40bbd067397278a573f96e978901b443284e542789f3868de99cde02625dfd1d25a69c8b747adb1c2958df6623dce76c3e7ab13e456f10970f41a7ef3209647c082e785678ea7a61a846a22acbfbba4e5bf496fec371a632abd25965aef270dfd312b4c177955e95d5922368425a507e2297e3d6dd43f9f21994eac78da2d93843cd2b84871d6323a406831c4234abcab36aa4ff52c62056d04a7785dea97dfd2e223a6e3337523bf0e048bf4645befee306ab470b242b90a304a2e874fe8787196376ebc591b935950de5165111814175806b2d6686d0f74ded903597e08065bade61ae473d8af10fc5058ab97701427141ff3a6949a35e6c8878be8c89728670109782482d86bcf78647696d3e973235bf3d35a21ea4923e2385a1603c055a18548456736a2df921eee3c264da7e6d135e9a97cdff251120cfcb7f8906ef356b7b97336a2470f4b4347e6239c2cb12af08335745391f8d0d1a089ffc20f6ea8068d37114c673ee2ba6a36e3f331417a00b0540dc0b052b233b9f03ad2c32767cb8b4f3880e0c9ad816a5b08e6a77e7a85ba8eec2e712a54116e3d75accae7814375385a840bdcbf272e6a03b154fed42d9209fb721b8356c0f16c0beb2a5f9ae33902cd9ef6ed8207752ba2a0b0665099090e220217c77d3393e39cf33128f3d0bc00fb48db947e0828e8b8eac49d3604e22319a0e685951206844b7dbea0b9716727cc60ec0068f2d09099e095bea9231d02a9c0ed02764deefe80a252497de688c4e38a512cde2089a20928578f1169eeb8df87f514fff160a51bef4a9699bb0b0b8d4212b9e7889dd894106eb2fc904bc8f9f44fcbf64365c239eed8e1bde8f6f7cd9cdee93866bb18191b0641f38e4906d649b546d7af9a905bc2c4049be4c8679bba7172e8402a1c2e0848860f12de70a6298a50bec7005e7b9e2d6701620a211c93d58bafbf341afd3151b0a6cbb3627074e7369ae4bd88592abe522f0079a982505c79dc78f67591b0f20d881820a6d60d3d1886d0b3ee06d03334a32251527ff8345207e5645806e6b0dc5f9e20b12d5e4e4999258086d250c997805aaac5578ec4a594999dfae9a66cadd12425d8d90f19f630b32057e082590655e092da5bc4544752549f531099b769a184995e2c5199c60bb824e320122eb23df783d32bb837051050490b3d8c0472aab8afb2a02777f8826e1486a02b39d6b405086f4bd2601e435bbafc952362fc3cb1bb5018b8e501cb70c0d11bda70a8c73bd4b03c79284865c6ecc1de02a89639858e44478e0c847fe4f823ac9cfb9f3ec9861512ed39d59405ad23faa750585785987f75ae8ca55d4f4834dd0c9ff9b63403c4afd8b3c9f0051ba17c8b6b3952df54876a32a30fac9669304755d85ad814685927b7d7eb9af02bbbd5ad4fadb95eb13d81f12388647523da04d1cd3120d5d77a35383b0d70c7908437274e9ec51263a53872121a658506a8e6130606900b26f376d0fc9bfea6dec3f790e9a99f5feeb4dc738bd17be5373b4741c2aa3a5d8495a708e517cf34a0ddcde5af65b61f1b9c74113dcc1716d59588fb2cbde412df7b128c27dfea52ffad6735eae2fad208b23039d4d66b31593b9fe76cdfe2c5759fdb6ae5c4225513caf973698111b6f3b338318d2839c56b07b02999415245911b875948f30d1cbd8c341b4ff82f8991800a61b83018fac7e711d3890e404e7c651b5397c40c18686250e34e9387ff3bda0e651f8b798b9676634190071e1a47f042dba58c4fd7b2973990dbe76db6840f82b10795b39a4ea65a03155010c47fced1567cd3489990210b568274fdd43747ef1d6ed5f22d50eaaef6797e9e3ebce6f695ebee935cfb9759d9208e1fb1b2fd00b4e8826cb194e4932ac58cccf0b16ead10c593b7df3e3e21f71e21495b0fb2f3f5517e3d4fba722e977d2fc061e5722b38b7d166b511be3bf5a8fee20aeab88a2c8358920ba9e030c03c40c38cac63778580272a0b8569d456510e637b23a1f07431f17c473833dc2826a779948a1f6c6f379e7883d0a893b49b44fa01f73142fe51ca6221a35eb86df103fd38f9dc536a7ffb8bd2f75c0a73cfc6bffc9e951e01546334cdea843cc08b15ce5bb0775337ad8451654c75790cd7ca8dac5f8e7f4e60247048fb5f33343019b0f4cc97fcbc879c9b61bd494eaa5b6dd6a843f47c5dfcd92391cd6d2dab5039a90098e720a2e65fdb0dcfcc761a2fcb5df2c626189aa49885fd8c43ec3133f9a3880bd9b4d79f8273976d6992e2d87eeb7d2e335fd1992909dab94310ef283ff620d544eb2e03c146ced3f19a7d35424123071ee53d531c576c5ef7d241fc390909fd618887c781fe71cea0711969db9fb24088d70357fb0d6246ccab97018c6ce810caa9d58c00251c2406198b8dddc69431fe31a93c4fb54e1859a4c0728056d97d0abe6ade3c1d62cf0a94a350ebd606eb2a152740eb2de50d96447653b28b359b790003c577b94897e3f7a6429cccc20fe9a9e15fe749bd6dfc9e124d29101ec7e6e7c7426d412ed42f7a832c60a34174d6f8b5ec9f966248cf1cd8b89bbb520e5e48142209f28bf31e517c3ed839e4daa74d3f2e60ea7183320d06224de6a4e20802bd26f4703894c6d3c818a1b027978e8bbc6d531cc23ec76ca733e8436b4bff89dca4e1c29afbc599936326132e67c5615a04f5ef96b882e713fbd481fd0afeb4d02ce6785204b7d0f3d01bebbb06fe1571093432925661cb36a636cb5120ee989d960edb4ba068c3cab84ae77b9a04c0fa54ca50e08f539d96bb4d3eac065c37e87ba204c60c544e4dbe548a4192083642c27147c642ffcad0e31377836962af964f6bf6b34ee2ec9685b62eafd68bee31f541bef17b740b1d4dbb3156e17b59e080d86b1a6600b03a57472b085009e53992a48ee48c8d9d6b862a989d1ec84078b178728dbf5242ec9e78975ae82c5f9d7857d6dc0f30dedc920d34ea5b2edefbc480c636e7fd3ee5d1aff94633625762e2973c6b97c8fa03e2c9957cbf944a135808b4da0b8d72c7150a908660c85d86b5c77390072970e9cc0c27ac15886848b9df03be622e9d17df58c6472422995869", 0x1000}], 0x1, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r2}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0x40, 0x1}, 0x50) fallocate(r0, 0x8, 0x0, 0x4000003ffe) 11:04:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x142, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 11:04:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='ip6gre0\x00') syz_usb_connect$cdc_ncm(0x0, 0x8c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109027a00549ede89ceeeda124ed9f5cfc7020100c0000904000001020d0000052406000144240000000d04000424cf44127b8000000006241a0000001524120000a317a88b045e4f01a607c0ffcb7e392a04240200052415000009058103000000001f090401000002"], 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0xfffffffb) [ 465.472557][ T29] audit: type=1800 audit(1598871849.034:4): pid=9443 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15733 res=0 [ 465.566304][ T29] audit: type=1800 audit(1598871849.134:5): pid=9443 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15734 res=0 11:04:09 executing program 0: syz_usb_connect(0x0, 0x181, &(0x7f0000000000)=ANY=[@ANYBLOB="1205000097341208720c0d00d3da000000010902120001000000000904"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9) [ 465.883979][ T8652] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 466.125128][ T8652] usb 3-1: Using ep0 maxpacket: 32 [ 466.244814][ T8652] usb 3-1: config 158 has too many interfaces: 84, using maximum allowed: 32 [ 466.253859][ T8652] usb 3-1: config 158 has an invalid descriptor of length 238, skipping remainder of the config [ 466.264667][ T8652] usb 3-1: config 158 has 0 interfaces, different from the descriptor's value: 84 [ 466.363760][ T8698] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 466.466818][ T8652] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.476117][ T8652] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.484551][ T8652] usb 3-1: Product: syz [ 466.488850][ T8652] usb 3-1: Manufacturer: syz [ 466.493674][ T8652] usb 3-1: SerialNumber: syz [ 466.552605][ T8701] tipc: TX() has been purged, node left! [ 466.645994][ T8698] usb 1-1: device descriptor read/64, error 18 [ 466.867358][ T8652] usb 3-1: USB disconnect, device number 2 [ 467.054332][ T8698] usb 1-1: device descriptor read/64, error 18 [ 467.334016][ T8698] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 467.613712][ T8698] usb 1-1: device descriptor read/64, error 18 [ 467.685467][ T8699] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 467.924729][ T8699] usb 3-1: Using ep0 maxpacket: 32 [ 468.013792][ T8698] usb 1-1: device descriptor read/64, error 18 [ 468.045980][ T8699] usb 3-1: config 158 has too many interfaces: 84, using maximum allowed: 32 [ 468.055055][ T8699] usb 3-1: config 158 has an invalid descriptor of length 238, skipping remainder of the config [ 468.065815][ T8699] usb 3-1: config 158 has 0 interfaces, different from the descriptor's value: 84 [ 468.134290][ T8698] usb usb1-port1: attempt power cycle [ 468.235798][ T8699] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 468.245577][ T8699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.253970][ T8699] usb 3-1: Product: syz [ 468.258269][ T8699] usb 3-1: Manufacturer: syz [ 468.263005][ T8699] usb 3-1: SerialNumber: syz 11:04:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x142, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 11:04:12 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000ff014c01fc06000300"], 0x18) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f8}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r3, 0x0, 0x1ffe0, 0x0) 11:04:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x142, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 468.630987][ T8699] usb 3-1: USB disconnect, device number 3 11:04:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x142, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 468.854093][ T8698] usb 1-1: new high-speed USB device number 13 using dummy_hcd 11:04:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x142, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 11:04:12 executing program 0: mknod(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000200)='\xd2 \xf4\x01%\x02\x9d\x92\xe4\x8d\x82\xa0\xe2\xf2Fj\xf8/f\x86)\xc2<\xb3\xc3N\xb6p\xf3\xc9\r\x03\xce5\x83$\xe1h\x88n\xe4\x02\xd3\xc4L\x82\xf6)\xe9\xfa\xc3n\xdc\xd4\xc1\x99s,\xfb\xba\x1c\x02a\x85\xc1t\xdd6\x9f7gF\xc4\x16}t\xb0\x93\xfb\x92\xff\xeb\t\xb55\x1f[\xde1@\x00\x00\x00\x00\x18{\x82\xd9\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x11, '\xb0\x9b\xf4r\x91\xc7cgro\x98ppppP\x97', 0x65, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6[\x94\b\x039\xc0\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf14\xa6f\xa8RH&\xb2\xb4\xa8\x8e\x01zwW\xb2\x06\xf8\xb0\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7'}, 0x5a, '/dev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xb99\x0e\xa8O\x93C\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x981\x9f0\x11\x84G\xaa\x9a\xa5~\xb0\xa0{t'}}, 0x16b) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000}) add_key$keyring(&(0x7f0000000980)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0xfff, 0x3a3600) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 469.135148][ T8698] usb 1-1: device descriptor read/8, error -71 [ 469.280915][ T9492] devpts: called with bogus options [ 469.305506][ T9496] devpts: called with bogus options 11:04:12 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000080)=0x10) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x8, 0x6, 0x801, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004801) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x2}, 0x2c) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000240)={0x2, 0x1}, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) [ 469.355589][ T8698] usb 1-1: device descriptor read/8, error -71 [ 469.375368][ C1] sd 0:0:1:0: [sg0] tag#284 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 469.386051][ C1] sd 0:0:1:0: [sg0] tag#284 CDB: Test Unit Ready [ 469.392623][ C1] sd 0:0:1:0: [sg0] tag#284 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.402534][ C1] sd 0:0:1:0: [sg0] tag#284 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.412318][ C1] sd 0:0:1:0: [sg0] tag#284 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.422920][ C1] sd 0:0:1:0: [sg0] tag#284 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.432727][ C1] sd 0:0:1:0: [sg0] tag#284 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.442525][ C1] sd 0:0:1:0: [sg0] tag#284 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.452326][ C1] sd 0:0:1:0: [sg0] tag#284 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.462418][ C1] sd 0:0:1:0: [sg0] tag#284 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.469797][ T9499] IPVS: ftp: loaded support on port[0] = 21 [ 469.472207][ C1] sd 0:0:1:0: [sg0] tag#284 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.487877][ C1] sd 0:0:1:0: [sg0] tag#284 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.497661][ C1] sd 0:0:1:0: [sg0] tag#284 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.507457][ C1] sd 0:0:1:0: [sg0] tag#284 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.517242][ C1] sd 0:0:1:0: [sg0] tag#284 CDB[c0]: 00 00 00 00 00 00 00 00 11:04:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x142, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 470.067797][ C0] sd 0:0:1:0: [sg0] tag#285 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 470.078361][ C0] sd 0:0:1:0: [sg0] tag#285 CDB: Test Unit Ready [ 470.085067][ C0] sd 0:0:1:0: [sg0] tag#285 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.094932][ C0] sd 0:0:1:0: [sg0] tag#285 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.104695][ C0] sd 0:0:1:0: [sg0] tag#285 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.114477][ C0] sd 0:0:1:0: [sg0] tag#285 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.124248][ C0] sd 0:0:1:0: [sg0] tag#285 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.134010][ C0] sd 0:0:1:0: [sg0] tag#285 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.143764][ C0] sd 0:0:1:0: [sg0] tag#285 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.153464][ C0] sd 0:0:1:0: [sg0] tag#285 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.163235][ C0] sd 0:0:1:0: [sg0] tag#285 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.173014][ C0] sd 0:0:1:0: [sg0] tag#285 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.182775][ C0] sd 0:0:1:0: [sg0] tag#285 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.192567][ C0] sd 0:0:1:0: [sg0] tag#285 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.202351][ C0] sd 0:0:1:0: [sg0] tag#285 CDB[c0]: 00 00 00 00 00 00 00 00 11:04:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) prctl$PR_SET_FPEXC(0xc, 0x80000) socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @loopback}]}}}]}, 0x3c}}, 0x0) [ 470.286176][ T9525] IPVS: ftp: loaded support on port[0] = 21 [ 470.694020][ C0] ===================================================== [ 470.701081][ C0] BUG: KMSAN: uninit-value in geneve_xmit+0x300c/0x3200 [ 470.708298][ C0] CPU: 0 PID: 9505 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 470.716889][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.726952][ C0] Call Trace: [ 470.730246][ C0] [ 470.733208][ C0] dump_stack+0x21c/0x280 [ 470.738303][ C0] kmsan_report+0xf7/0x1e0 [ 470.742760][ C0] __msan_warning+0x58/0xa0 [ 470.747309][ C0] geneve_xmit+0x300c/0x3200 [ 470.751929][ C0] ? kmsan_report+0x1c0/0x1e0 [ 470.756652][ C0] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 470.762777][ C0] ? geneve_stop+0x400/0x400 [ 470.767441][ C0] xmit_one+0x3cf/0x750 [ 470.771625][ C0] ? kmsan_get_metadata+0x116/0x180 [ 470.776847][ C0] __dev_queue_xmit+0x3aad/0x4470 [ 470.781963][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 470.787305][ C0] dev_queue_xmit+0x4b/0x60 [ 470.791883][ C0] ip6_finish_output2+0x23f1/0x2a70 [ 470.797143][ C0] ? kmsan_get_metadata+0x116/0x180 [ 470.802374][ C0] __ip6_finish_output+0x9c0/0xa90 [ 470.807526][ C0] ip6_finish_output+0x14b/0x4b0 [ 470.812517][ C0] ip6_output+0x68d/0x7f0 [ 470.816884][ C0] ? ip6_output+0x7f0/0x7f0 [ 470.821409][ C0] ? ac6_seq_show+0x200/0x200 [ 470.826170][ C0] mld_sendpack+0xf6c/0x1470 [ 470.830805][ C0] ? mld_send_report+0x510/0x510 [ 470.835774][ C0] mld_ifc_timer_expire+0x13b8/0x1b50 [ 470.841168][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 470.847254][ C0] ? rb_insert_color+0xb0/0x1180 [ 470.852211][ C0] ? kmsan_get_metadata+0x116/0x180 [ 470.857446][ C0] ? mld_gq_timer_expire+0x180/0x180 [ 470.862822][ C0] call_timer_fn+0x226/0x550 [ 470.867442][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 470.873267][ C0] expire_timers+0x4fc/0x780 [ 470.877886][ C0] ? mld_gq_timer_expire+0x180/0x180 [ 470.883195][ C0] __run_timers+0xaf4/0xd30 [ 470.887745][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 470.893957][ C0] ? irqtime_account_irq+0xcb/0x2d0 [ 470.899195][ C0] ? kmsan_get_metadata+0x116/0x180 [ 470.904415][ C0] run_timer_softirq+0x2d/0x50 [ 470.909194][ C0] ? migrate_timer_list+0x780/0x780 [ 470.914450][ C0] __do_softirq+0x2ea/0x7f5 [ 470.919003][ C0] asm_call_on_stack+0xf/0x20 [ 470.924121][ C0] [ 470.927123][ C0] do_softirq_own_stack+0x7c/0xa0 [ 470.932173][ C0] __irq_exit_rcu+0x226/0x270 [ 470.936881][ C0] irq_exit_rcu+0xe/0x10 [ 470.941202][ C0] sysvec_apic_timer_interrupt+0x107/0x130 [ 470.947041][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 470.953050][ C0] RIP: 0010:metadata_is_contiguous+0x6/0x1b0 [ 470.959045][ C0] Code: c7 c6 12 62 e1 91 48 89 da 4c 89 f9 31 c0 e8 4a 11 30 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 0f 1f 40 00 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 ec 28 48 c7 c0 2a 4d 02 92 49 c7 c6 f2 [ 470.978663][ C0] RSP: 0018:ffff88802a3f7690 EFLAGS: 00000246 [ 470.984751][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 470.992733][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff8881d550fbd4 [ 471.000715][ C0] RBP: ffff88802a3f7698 R08: ffffea000000000f R09: ffff88812fffa000 [ 471.008696][ C0] R10: 0000000000000004 R11: ffff88803da55b80 R12: ffff88803da56511 [ 471.016680][ C0] R13: 0000000000000000 R14: ffff8881d550fbd4 R15: 0000000000000000 [ 471.024703][ C0] kmsan_get_shadow_origin_ptr+0x5e/0xb0 [ 471.030359][ C0] __msan_metadata_ptr_for_load_2+0x10/0x20 [ 471.036270][ C0] udpv6_sendmsg+0x3e58/0x55c0 [ 471.041056][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 471.046884][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 471.053022][ C0] ? ip_do_fragment+0x3b50/0x3b50 [ 471.058143][ C0] ? aa_sk_perm+0x7da/0xe70 [ 471.062706][ C0] ? kmsan_get_metadata+0x116/0x180 [ 471.067929][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 471.073772][ C0] ? __udp6_lib_rcv+0x4c30/0x4c30 [ 471.078821][ C0] inet6_sendmsg+0x15b/0x1d0 [ 471.083506][ C0] ____sys_sendmsg+0xc82/0x1240 [ 471.088402][ C0] ? inet6_compat_ioctl+0x800/0x800 [ 471.093633][ C0] __sys_sendmmsg+0xa05/0xf70 [ 471.098375][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 471.103676][ C0] ? ktime_get_ts64+0x79f/0x8d0 [ 471.108561][ C0] ? kmsan_copy_to_user+0x81/0x90 [ 471.113648][ C0] ? _copy_to_user+0x1bf/0x260 [ 471.118448][ C0] ? kmsan_get_metadata+0x116/0x180 [ 471.123784][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 471.129635][ C0] ? kmsan_get_metadata+0x116/0x180 [ 471.134859][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 471.140733][ C0] ? __prepare_exit_to_usermode+0x16c/0x560 [ 471.146650][ C0] __se_sys_sendmmsg+0xbd/0xe0 [ 471.151442][ C0] __x64_sys_sendmmsg+0x56/0x70 [ 471.156315][ C0] do_syscall_64+0xad/0x160 [ 471.160847][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 471.166757][ C0] RIP: 0033:0x45d5b9 [ 471.170656][ C0] Code: Bad RIP value. [ 471.174731][ C0] RSP: 002b:00007fa6d7bb0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 471.183154][ C0] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 471.191135][ C0] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 471.199118][ C0] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 [ 471.207102][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 471.215083][ C0] R13: 000000000169fb6f R14: 00007fa6d7bb19c0 R15: 000000000118cf4c [ 471.223772][ C0] [ 471.226109][ C0] Uninit was stored to memory at: [ 471.231153][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 471.236891][ C0] __msan_chain_origin+0x50/0x90 [ 471.241849][ C0] geneve_changelink+0xdb2/0x10f0 [ 471.246944][ C0] rtnl_newlink+0x3384/0x3ed0 [ 471.251678][ C0] rtnetlink_rcv_msg+0x142b/0x18c0 [ 471.256964][ C0] netlink_rcv_skb+0x6d7/0x7e0 [ 471.261764][ C0] rtnetlink_rcv+0x50/0x60 [ 471.266200][ C0] netlink_unicast+0x11c8/0x1490 [ 471.271151][ C0] netlink_sendmsg+0x173a/0x1840 [ 471.276100][ C0] ____sys_sendmsg+0xc82/0x1240 [ 471.280961][ C0] __sys_sendmsg+0x6d1/0x840 [ 471.285560][ C0] __se_sys_sendmsg+0x97/0xb0 [ 471.290249][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 471.295028][ C0] do_syscall_64+0xad/0x160 [ 471.299542][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 471.306481][ C0] [ 471.308819][ C0] Local variable ----df@geneve_changelink created at: [ 471.315596][ C0] geneve_changelink+0x101/0x10f0 [ 471.320631][ C0] geneve_changelink+0x101/0x10f0 [ 471.325657][ C0] ===================================================== [ 471.332588][ C0] Disabling lock debugging due to kernel taint [ 471.338768][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 471.345373][ C0] CPU: 0 PID: 9505 Comm: syz-executor.0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 471.355360][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.365423][ C0] Call Trace: [ 471.368728][ C0] [ 471.371600][ C0] dump_stack+0x21c/0x280 [ 471.376022][ C0] panic+0x4d7/0xef7 [ 471.379968][ C0] ? add_taint+0x17c/0x210 [ 471.384414][ C0] kmsan_report+0x1df/0x1e0 [ 471.388943][ C0] __msan_warning+0x58/0xa0 [ 471.393471][ C0] geneve_xmit+0x300c/0x3200 [ 471.398092][ C0] ? kmsan_report+0x1c0/0x1e0 [ 471.402801][ C0] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 471.408915][ C0] ? geneve_stop+0x400/0x400 [ 471.413526][ C0] xmit_one+0x3cf/0x750 [ 471.417707][ C0] ? kmsan_get_metadata+0x116/0x180 [ 471.422929][ C0] __dev_queue_xmit+0x3aad/0x4470 [ 471.427981][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 471.433315][ C0] dev_queue_xmit+0x4b/0x60 [ 471.437845][ C0] ip6_finish_output2+0x23f1/0x2a70 [ 471.443101][ C0] ? kmsan_get_metadata+0x116/0x180 [ 471.448323][ C0] __ip6_finish_output+0x9c0/0xa90 [ 471.453480][ C0] ip6_finish_output+0x14b/0x4b0 [ 471.458464][ C0] ip6_output+0x68d/0x7f0 [ 471.462845][ C0] ? ip6_output+0x7f0/0x7f0 [ 471.467367][ C0] ? ac6_seq_show+0x200/0x200 [ 471.472060][ C0] mld_sendpack+0xf6c/0x1470 [ 471.476701][ C0] ? mld_send_report+0x510/0x510 [ 471.481692][ C0] mld_ifc_timer_expire+0x13b8/0x1b50 [ 471.487088][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 471.493171][ C0] ? rb_insert_color+0xb0/0x1180 [ 471.498130][ C0] ? kmsan_get_metadata+0x116/0x180 [ 471.503361][ C0] ? mld_gq_timer_expire+0x180/0x180 [ 471.508664][ C0] call_timer_fn+0x226/0x550 [ 471.513281][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 471.519113][ C0] expire_timers+0x4fc/0x780 [ 471.523735][ C0] ? mld_gq_timer_expire+0x180/0x180 [ 471.529041][ C0] __run_timers+0xaf4/0xd30 [ 471.533587][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 471.539761][ C0] ? irqtime_account_irq+0xcb/0x2d0 [ 471.544996][ C0] ? kmsan_get_metadata+0x116/0x180 [ 471.550209][ C0] run_timer_softirq+0x2d/0x50 [ 471.554981][ C0] ? migrate_timer_list+0x780/0x780 [ 471.560186][ C0] __do_softirq+0x2ea/0x7f5 [ 471.564718][ C0] asm_call_on_stack+0xf/0x20 [ 471.569393][ C0] [ 471.572357][ C0] do_softirq_own_stack+0x7c/0xa0 [ 471.577411][ C0] __irq_exit_rcu+0x226/0x270 [ 471.582103][ C0] irq_exit_rcu+0xe/0x10 [ 471.586357][ C0] sysvec_apic_timer_interrupt+0x107/0x130 [ 471.592194][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 471.598189][ C0] RIP: 0010:metadata_is_contiguous+0x6/0x1b0 [ 471.604174][ C0] Code: c7 c6 12 62 e1 91 48 89 da 4c 89 f9 31 c0 e8 4a 11 30 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 0f 1f 40 00 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 ec 28 48 c7 c0 2a 4d 02 92 49 c7 c6 f2 [ 471.624217][ C0] RSP: 0018:ffff88802a3f7690 EFLAGS: 00000246 [ 471.630288][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 471.638277][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff8881d550fbd4 [ 471.646253][ C0] RBP: ffff88802a3f7698 R08: ffffea000000000f R09: ffff88812fffa000 [ 471.654226][ C0] R10: 0000000000000004 R11: ffff88803da55b80 R12: ffff88803da56511 [ 471.662214][ C0] R13: 0000000000000000 R14: ffff8881d550fbd4 R15: 0000000000000000 [ 471.670241][ C0] kmsan_get_shadow_origin_ptr+0x5e/0xb0 [ 471.676512][ C0] __msan_metadata_ptr_for_load_2+0x10/0x20 [ 471.682417][ C0] udpv6_sendmsg+0x3e58/0x55c0 [ 471.687206][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 471.693739][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 471.699840][ C0] ? ip_do_fragment+0x3b50/0x3b50 [ 471.704906][ C0] ? aa_sk_perm+0x7da/0xe70 [ 471.709430][ C0] ? kmsan_get_metadata+0x116/0x180 [ 471.714641][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 471.720475][ C0] ? __udp6_lib_rcv+0x4c30/0x4c30 [ 471.725506][ C0] inet6_sendmsg+0x15b/0x1d0 [ 471.730116][ C0] ____sys_sendmsg+0xc82/0x1240 [ 471.734996][ C0] ? inet6_compat_ioctl+0x800/0x800 [ 471.740211][ C0] __sys_sendmmsg+0xa05/0xf70 [ 471.744951][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 471.750246][ C0] ? ktime_get_ts64+0x79f/0x8d0 [ 471.755132][ C0] ? kmsan_copy_to_user+0x81/0x90 [ 471.760166][ C0] ? _copy_to_user+0x1bf/0x260 [ 471.764962][ C0] ? kmsan_get_metadata+0x116/0x180 [ 471.770173][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 471.775990][ C0] ? kmsan_get_metadata+0x116/0x180 [ 471.781198][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 471.787023][ C0] ? __prepare_exit_to_usermode+0x16c/0x560 [ 471.792928][ C0] __se_sys_sendmmsg+0xbd/0xe0 [ 471.797713][ C0] __x64_sys_sendmmsg+0x56/0x70 [ 471.802574][ C0] do_syscall_64+0xad/0x160 [ 471.807091][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 471.812987][ C0] RIP: 0033:0x45d5b9 [ 471.816878][ C0] Code: Bad RIP value. [ 471.820948][ C0] RSP: 002b:00007fa6d7bb0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 471.829363][ C0] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 471.837346][ C0] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 471.845321][ C0] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 [ 471.853904][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 471.861884][ C0] R13: 000000000169fb6f R14: 00007fa6d7bb19c0 R15: 000000000118cf4c [ 471.871031][ C0] Kernel Offset: disabled [ 471.875354][ C0] Rebooting in 86400 seconds..