last executing test programs: 16.694668461s ago: executing program 0 (id=249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x481, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r1, 0x0, 0x51}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{0x0}], 0x1) 15.914689036s ago: executing program 0 (id=254): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0xc06c4124, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/54, 0x36) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085508, &(0x7f00000000c0)=0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 11.492675416s ago: executing program 3 (id=269): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x6, 0x0) r1 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r3, r2}) r6 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r6, r5, 0x0) r7 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='gid', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) 11.23486533s ago: executing program 0 (id=270): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) unshare(0x26020480) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xfffffff9, 0x41f, 0x1000, 0x36002, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @value=r0}, 0x50) 8.865738368s ago: executing program 0 (id=273): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x4, &(0x7f0000000040)={0x51, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 8.621008691s ago: executing program 3 (id=275): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_j1939(0x1d, 0x2, 0x7) io_setup(0x8, 0x0) 8.472654921s ago: executing program 4 (id=276): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004808, &(0x7f00000001c0)={0xa, 0x4e20, 0xf, @empty, 0x8000004}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendmmsg$inet6(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="7915", 0x2}], 0x1}}], 0x1, 0x10) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) 8.241810175s ago: executing program 1 (id=278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x481, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r1, 0x0, 0x51}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1) 7.594323497s ago: executing program 4 (id=279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 7.506067398s ago: executing program 1 (id=280): connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r0, &(0x7f0000002f40)=""/4097, 0x1001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.420932132s ago: executing program 4 (id=282): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x50093}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendto$packet(r0, &(0x7f0000000040)="6f67b18ff332b1abdb284700", 0xc, 0x24008000, &(0x7f0000000180)={0x11, 0xf7, r2, 0x1, 0x1, 0x6, @local}, 0x14) 6.334687411s ago: executing program 1 (id=283): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) 6.123795231s ago: executing program 2 (id=284): openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) close(0x3) 5.605927139s ago: executing program 1 (id=285): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x2) r1 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r3, r2}) r6 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r6, r5, 0x0) r7 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='gid', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) 5.582974422s ago: executing program 4 (id=286): syz_open_dev$vbi(0x0, 0x1, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$netlink(r1, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x1d, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="08007800f7ffffff0400468004003080000000000000"], 0x218}, {0x0}], 0x2, 0x0, 0x0, 0x44011}, 0x0) r2 = gettid() r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc728, 0x10108, 0x2}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x80) getdents64(r7, &(0x7f0000000000)=""/25, 0x19) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000900)={{0x0, 0x4, 0x2, 0x0, 'syz0\x00', 0xd3}, 0x1, 0x200, 0x2, r2, 0x0, 0x3, 'syz1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r11}, [@MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x38}}, 0x20044050) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000010) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@mcast2}) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) 5.394909962s ago: executing program 2 (id=287): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '#! '}, {0x20, '}'}, {0x20, 'cpuset\x8c\xd7\xae\x16.ef\x80\"\"\x1e\xb3\xd7\xe6\x9ecpus\x00'}, {0x20, '\x9f\xa7\x92\xb9}8u\xcf\x99v\xdc\n\xb73~|\x00'}, {0x20, '#! \x9d-m\x81G\x8d~_]\x96\x90\xb5\xf7\xe2e\x83\xd0\x0eU\x83\xac^\xc2%)\x96\xb9R\xee\xfa\xe4r\x92\x1f!\xeb\xff\xc9\x02w!xy\xc1\xfc\x15\x97\xd4+\x11\x98e\xe4\xa0\x85\xdc\xd3\xe4<\xee\x19~\xb6st\xd3W\xfb\xd1K\x80V\xf2\xb1\xeb\x8b\xe4W\xf8\xee\x16\xc9\x15\xa3+6\xa1\xdae,Q\x95i\bo?\x1a\xe2@\x96\xab\x04\xa93sR\xe9\xc3K\x88?y\x023\xf2\xec\xb0\x98\x9d/}\xf7\x92\\]\x8a\xf1b\xbf\r\xed\x00\x02D\xa3\xe7\x8f\xb3\x17\xee7\x97\x1cA\x18\n_?\xc2\xaf#l\r\x7f\xd9 \xd1Uw\n2\x94\xc6\xeb\x92\nt\xfb\xb9n\x82\x9b\x82\x9e\xc0\x19\x0fO\x92\x8f(\xa7$\x06\xe5\xde\x12\xeb\xa9\xc2\x10b\x00'/207}, {0x20, '%C\x7f'}, {0x20, 'Ny\x88\xbd\xf2)\x01W|\xae\xcfA\xcel[/1u\xb7\xa0\xdf\xd3\xd5\x82uh\xef@\ns\xd9_\xf1\xead)\xaf\x84\xa8\x0e\x0f\b\xa7\'\xa5u\xedl\xd7?\x81'}]}, 0x14f) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c781265406c7f306003d8a0f4bd0000000300000000002f59911800"}}) 4.705068628s ago: executing program 0 (id=288): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa0}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.426437455s ago: executing program 2 (id=289): set_mempolicy(0x3, 0x0, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = gettid() process_vm_writev(r1, 0x0, 0x0, &(0x7f00000021c0)=[{0xffffffffffffffff}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.941265203s ago: executing program 4 (id=290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x481, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r1, 0x0, 0x51}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1) 3.240076462s ago: executing program 2 (id=291): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004808, &(0x7f00000001c0)={0xa, 0x4e20, 0xf, @empty, 0x8000004}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendmmsg$inet6(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="7915", 0x2}], 0x1}}], 0x1, 0x10) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) 3.23238994s ago: executing program 1 (id=292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.947015921s ago: executing program 4 (id=293): syz_io_uring_setup(0x37a3, &(0x7f0000000000)={0x0, 0x2b53, 0x40, 0x0, 0x292}, &(0x7f0000000100), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x5) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x800, 0x4) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 2.765525574s ago: executing program 3 (id=294): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) r4 = eventfd2(0x1, 0x80800) io_submit(r3, 0x13, &(0x7f00000005c0)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x4000, r2, &(0x7f00000001c0)="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", 0x200, 0x200, 0x0, 0x1, r4}]) 2.400423932s ago: executing program 1 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x100000001, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}}, 0xe8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x2000000, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 2.198825329s ago: executing program 2 (id=296): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x50093}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendto$packet(r0, &(0x7f0000000040)="6f67b18ff332b1abdb2847000000", 0xe, 0x24008000, &(0x7f0000000180)={0x11, 0xf7, r2, 0x1, 0x1, 0x6, @local}, 0x14) 1.937018562s ago: executing program 0 (id=297): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) flock(0xffffffffffffffff, 0x5) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x1000000) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x7, &(0x7f0000000100)={0x14, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47589d"}}) 1.355232534s ago: executing program 2 (id=298): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x4, &(0x7f0000000040)={0x51, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 1.331683143s ago: executing program 3 (id=299): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '#! '}, {0x20, '}'}, {0x20, 'cpuset\x8c\xd7\xae\x16.ef\x80\"\"\x1e\xb3\xd7\xe6\x9ecpus\x00'}, {0x20, '\x9f\xa7\x92\xb9}8u\xcf\x99v\xdc\n\xb73~|\x00'}, {0x20, '#! \x9d-m\x81G\x8d~_]\x96\x90\xb5\xf7\xe2e\x83\xd0\x0eU\x83\xac^\xc2%)\x96\xb9R\xee\xfa\xe4r\x92\x1f!\xeb\xff\xc9\x02w!xy\xc1\xfc\x15\x97\xd4+\x11\x98e\xe4\xa0\x85\xdc\xd3\xe4<\xee\x19~\xb6st\xd3W\xfb\xd1K\x80V\xf2\xb1\xeb\x8b\xe4W\xf8\xee\x16\xc9\x15\xa3+6\xa1\xdae,Q\x95i\bo?\x1a\xe2@\x96\xab\x04\xa93sR\xe9\xc3K\x88?y\x023\xf2\xec\xb0\x98\x9d/}\xf7\x92\\]\x8a\xf1b\xbf\r\xed\x00\x02D\xa3\xe7\x8f\xb3\x17\xee7\x97\x1cA\x18\n_?\xc2\xaf#l\r\x7f\xd9 \xd1Uw\n2\x94\xc6\xeb\x92\nt\xfb\xb9n\x82\x9b\x82\x9e\xc0\x19\x0fO\x92\x8f(\xa7$\x06\xe5\xde\x12\xeb\xa9\xc2\x10b\x00'/207}, {0x20, '%C\x7f'}, {0x20, 'Ny\x88\xbd\xf2)\x01W|\xae\xcfA\xcel[/1u\xb7\xa0\xdf\xd3\xd5\x82uh\xef@\ns\xd9_\xf1\xead)\xaf\x84\xa8\x0e\x0f\b\xa7\'\xa5u\xedl\xd7?\x81'}]}, 0x14f) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c781265406c7f306003d8a0f4bd0000000300000000002f59911800"}}) 780.452581ms ago: executing program 3 (id=300): syz_open_dev$vbi(0x0, 0x1, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$netlink(r1, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x1d, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="08007800f7ffffff0400468004003080000000000000"], 0x218}, {0x0}], 0x2, 0x0, 0x0, 0x44011}, 0x0) r2 = gettid() r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r4 = syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x80) getdents64(r7, &(0x7f0000000000)=""/25, 0x19) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000900)={{0x0, 0x4, 0x2, 0x0, 'syz0\x00', 0xd3}, 0x1, 0x200, 0x2, r2, 0x0, 0x3, 'syz1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r11}, [@MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x38}}, 0x20044050) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000010) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@mcast2}) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) 0s ago: executing program 3 (id=301): set_mempolicy(0x3, 0x0, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = gettid() process_vm_writev(r1, 0x0, 0x0, &(0x7f00000021c0)=[{0xffffffffffffffff}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. [ 198.891706][ T5783] cgroup: Unknown subsys name 'net' [ 199.009707][ T5783] cgroup: Unknown subsys name 'cpuset' [ 199.026709][ T5783] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 206.342651][ T5783] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 211.441080][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.449333][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.466643][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.477269][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.486281][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.496041][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.513779][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.525943][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.541436][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.556910][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.621516][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.630009][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.632341][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.640293][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.650437][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.654878][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.662177][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.668996][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.680541][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.683242][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.697068][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.704292][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.717594][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.726376][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.747722][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.578506][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 213.623463][ T5810] Bluetooth: hci0: command tx timeout [ 213.629352][ T5801] Bluetooth: hci1: command tx timeout [ 213.670176][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 213.783517][ T5810] Bluetooth: hci4: command tx timeout [ 213.789533][ T5801] Bluetooth: hci3: command tx timeout [ 213.879773][ T5810] Bluetooth: hci2: command tx timeout [ 214.110162][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 214.637640][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 214.676437][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.684857][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.692662][ T5809] bridge_slave_0: entered allmulticast mode [ 214.703608][ T5809] bridge_slave_0: entered promiscuous mode [ 214.766543][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.774586][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.782285][ T5809] bridge_slave_1: entered allmulticast mode [ 214.792851][ T5809] bridge_slave_1: entered promiscuous mode [ 215.019777][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 215.288950][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.461360][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.472014][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.480236][ T5800] bridge_slave_0: entered allmulticast mode [ 215.490353][ T5800] bridge_slave_0: entered promiscuous mode [ 215.513701][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.523673][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.531551][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.542019][ T5800] bridge_slave_1: entered allmulticast mode [ 215.556458][ T5800] bridge_slave_1: entered promiscuous mode [ 215.710053][ T5810] Bluetooth: hci0: command tx timeout [ 215.717476][ T5810] Bluetooth: hci1: command tx timeout [ 215.818978][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.826894][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.842058][ T5799] bridge_slave_0: entered allmulticast mode [ 215.851530][ T5799] bridge_slave_0: entered promiscuous mode [ 215.903638][ T5801] Bluetooth: hci4: command tx timeout [ 215.903696][ T5810] Bluetooth: hci3: command tx timeout [ 215.966381][ T5801] Bluetooth: hci2: command tx timeout [ 216.026036][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.033963][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.041747][ T5799] bridge_slave_1: entered allmulticast mode [ 216.052684][ T5799] bridge_slave_1: entered promiscuous mode [ 216.083575][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.102099][ T5809] team0: Port device team_slave_0 added [ 216.157816][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.177641][ T5809] team0: Port device team_slave_1 added [ 216.225142][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.232815][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.240980][ T5811] bridge_slave_0: entered allmulticast mode [ 216.251506][ T5811] bridge_slave_0: entered promiscuous mode [ 216.443376][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.451017][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.459344][ T5811] bridge_slave_1: entered allmulticast mode [ 216.470265][ T5811] bridge_slave_1: entered promiscuous mode [ 216.506615][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.595402][ T5800] team0: Port device team_slave_0 added [ 216.713227][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.767978][ T5800] team0: Port device team_slave_1 added [ 216.776990][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.784396][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.810943][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.015707][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.022897][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.050279][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.081436][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.089318][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.097439][ T5805] bridge_slave_0: entered allmulticast mode [ 217.106243][ T5805] bridge_slave_0: entered promiscuous mode [ 217.181958][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.194841][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.202000][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.229029][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.250185][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.257605][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.284280][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.326000][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.333995][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.341965][ T5805] bridge_slave_1: entered allmulticast mode [ 217.352822][ T5805] bridge_slave_1: entered promiscuous mode [ 217.376819][ T5799] team0: Port device team_slave_0 added [ 217.397216][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.422284][ T5799] team0: Port device team_slave_1 added [ 217.665239][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.785444][ T5801] Bluetooth: hci1: command tx timeout [ 217.791345][ T5801] Bluetooth: hci0: command tx timeout [ 217.828293][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.858502][ T5811] team0: Port device team_slave_0 added [ 217.876375][ T5811] team0: Port device team_slave_1 added [ 217.885212][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.892535][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.919701][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.950058][ T5809] hsr_slave_0: entered promiscuous mode [ 217.961172][ T5809] hsr_slave_1: entered promiscuous mode [ 218.004000][ T5810] Bluetooth: hci4: command tx timeout [ 218.009713][ T5801] Bluetooth: hci3: command tx timeout [ 218.023692][ T5801] Bluetooth: hci2: command tx timeout [ 218.116211][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.124539][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.152286][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.210070][ T5800] hsr_slave_0: entered promiscuous mode [ 218.219617][ T5800] hsr_slave_1: entered promiscuous mode [ 218.228850][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 218.234816][ T5800] Cannot create hsr debugfs directory [ 218.321552][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.328850][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.355686][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.391661][ T5805] team0: Port device team_slave_0 added [ 218.437086][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.444462][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.471262][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.568977][ T5805] team0: Port device team_slave_1 added [ 218.814164][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.821337][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.849626][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.935477][ T5799] hsr_slave_0: entered promiscuous mode [ 218.945921][ T5799] hsr_slave_1: entered promiscuous mode [ 218.954588][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 218.960534][ T5799] Cannot create hsr debugfs directory [ 218.977389][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.988320][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.015499][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.294442][ T5811] hsr_slave_0: entered promiscuous mode [ 219.305758][ T5811] hsr_slave_1: entered promiscuous mode [ 219.315309][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 219.321345][ T5811] Cannot create hsr debugfs directory [ 219.522431][ T5805] hsr_slave_0: entered promiscuous mode [ 219.534204][ T5805] hsr_slave_1: entered promiscuous mode [ 219.544592][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 219.550683][ T5805] Cannot create hsr debugfs directory [ 219.873607][ T5801] Bluetooth: hci0: command tx timeout [ 219.879555][ T5801] Bluetooth: hci1: command tx timeout [ 220.023536][ T5810] Bluetooth: hci3: command tx timeout [ 220.029607][ T5810] Bluetooth: hci4: command tx timeout [ 220.119546][ T5801] Bluetooth: hci2: command tx timeout [ 220.679416][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.786437][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.894811][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.975276][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.148307][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 221.178355][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 221.200092][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 221.256877][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 221.462690][ T5809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.497328][ T5805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.542104][ T5809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.585940][ T5805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.660155][ T5809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.701703][ T5805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.732941][ T5805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.754386][ T5809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.993812][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.085637][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.211629][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.274917][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.594390][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.796744][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.896129][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.029164][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.037119][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.134277][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.222133][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.230016][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.290378][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.298230][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.404137][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.411918][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.451611][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.474598][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.705780][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.747429][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.876483][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.884334][ T3728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.902357][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.910106][ T3728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.976254][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.984018][ T3728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.187911][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.195763][ T3728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.393490][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.678767][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.770868][ T5805] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.783012][ T5805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.828651][ T5809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.840950][ T5809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.111385][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.119148][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.136859][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.144827][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.647205][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.682393][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.326864][ T5799] veth0_vlan: entered promiscuous mode [ 227.346384][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.473717][ T5800] veth0_vlan: entered promiscuous mode [ 227.491043][ T5799] veth1_vlan: entered promiscuous mode [ 227.524559][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.691977][ T5800] veth1_vlan: entered promiscuous mode [ 227.838344][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.038404][ T5799] veth0_macvtap: entered promiscuous mode [ 228.091234][ T5799] veth1_macvtap: entered promiscuous mode [ 228.206474][ T5805] veth0_vlan: entered promiscuous mode [ 228.313806][ T5800] veth0_macvtap: entered promiscuous mode [ 228.376936][ T5805] veth1_vlan: entered promiscuous mode [ 228.430050][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.439815][ T5800] veth1_macvtap: entered promiscuous mode [ 228.552425][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.644311][ T5811] veth0_vlan: entered promiscuous mode [ 228.721701][ T3792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.790148][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.801759][ T3792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.878428][ T3792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.904613][ T5811] veth1_vlan: entered promiscuous mode [ 228.917135][ T3792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.950519][ T5805] veth0_macvtap: entered promiscuous mode [ 228.988520][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.076896][ T5805] veth1_macvtap: entered promiscuous mode [ 229.204554][ T3792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.239034][ T3792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.313877][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.336966][ T3792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.389217][ T3792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.445553][ T5811] veth0_macvtap: entered promiscuous mode [ 229.484845][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.531105][ T5811] veth1_macvtap: entered promiscuous mode [ 229.588962][ T3445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.695093][ T3445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.766457][ T3445] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.812180][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.842064][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.956384][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.154539][ T3491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.176896][ T3491] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.242515][ T3491] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.288597][ T3491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.928750][ T5809] veth0_vlan: entered promiscuous mode [ 231.052334][ T5809] veth1_vlan: entered promiscuous mode [ 231.478677][ T5809] veth0_macvtap: entered promiscuous mode [ 231.608803][ T5809] veth1_macvtap: entered promiscuous mode [ 231.897996][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.054503][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.196948][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.259998][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.303952][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.369497][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.932416][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.939598][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 236.215094][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.226946][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.484147][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.492214][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.120618][ T5799] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 237.174744][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.182814][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.342125][ T3618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.350822][ T3618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.517611][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.526347][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.733160][ T4156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.741329][ T4156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.061938][ T4156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.070691][ T4156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.135987][ T5985] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 238.431905][ T4156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.440142][ T4156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.413516][ T5865] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 239.625016][ T5865] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 239.634979][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.715527][ T5865] usb 4-1: config 0 descriptor?? [ 239.804345][ T5996] Zero length message leads to an empty skb [ 240.028659][ T5865] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 240.097651][ T5865] [drm:udl_init] *ERROR* Selecting channel failed [ 240.158271][ T5865] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 240.165373][ T5865] [drm] Initialized udl on minor 2 [ 240.250231][ T5865] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 240.259687][ T5865] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 240.274852][ T42] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 240.304223][ T42] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 240.318669][ T42] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 240.377229][ T5865] usb 4-1: USB disconnect, device number 2 [ 240.578499][ T4156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.587479][ T4156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.852190][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.860744][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.760407][ T6018] loop8: detected capacity change from 0 to 8 [ 241.814360][ T6018] Dev loop8: unable to read RDB block 8 [ 241.820465][ T6018] loop8: unable to read partition table [ 241.840063][ T6018] loop8: partition table beyond EOD, truncated [ 241.854110][ T6018] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 241.863556][ T5858] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 242.126828][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 90, changing to 10 [ 242.138468][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.149336][ T5858] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 242.163003][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.270081][ T5858] usb 4-1: config 0 descriptor?? [ 242.798370][ T5858] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 242.836031][ T5858] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 242.959220][ T5858] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 243.335461][ T5865] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 243.553777][ T5865] usb 5-1: device descriptor read/64, error -71 [ 243.829330][ T5865] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 243.845365][ T42] usb 4-1: USB disconnect, device number 3 [ 243.887206][ T6028] fido_id[6028]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 244.024244][ T5865] usb 5-1: device descriptor read/64, error -71 [ 244.150874][ T5865] usb usb5-port1: attempt power cycle [ 244.546859][ T5865] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 244.604686][ T5865] usb 5-1: device descriptor read/8, error -71 [ 244.901078][ T5865] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 244.984734][ T5865] usb 5-1: device descriptor read/8, error -71 [ 245.104800][ T5865] usb usb5-port1: unable to enumerate USB device [ 245.108409][ T6038] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 245.234150][ T42] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 245.485677][ T42] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 245.495433][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.556194][ T42] usb 1-1: config 0 descriptor?? [ 245.876760][ T42] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 245.913714][ T42] [drm:udl_init] *ERROR* Selecting channel failed [ 245.972264][ T42] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 245.979623][ T42] [drm] Initialized udl on minor 2 [ 246.022367][ T42] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 246.032989][ T42] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 246.074212][ T5865] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 246.093719][ T5865] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 246.102644][ T5865] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 246.162883][ T42] usb 1-1: USB disconnect, device number 2 [ 246.823579][ T6054] loop8: detected capacity change from 0 to 8 [ 246.839976][ T6054] Dev loop8: unable to read RDB block 8 [ 246.846334][ T6054] loop8: unable to read partition table [ 246.914859][ T6054] loop8: partition table beyond EOD, truncated [ 246.921597][ T6054] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 247.459065][ T6059] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 247.469369][ T6059] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 249.376942][ T6082] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 249.664716][ T5865] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 249.805278][ T42] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 249.824030][ T5865] usb 2-1: device descriptor read/64, error -71 [ 249.978973][ T42] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 249.989259][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.997867][ T42] usb 5-1: Product: syz [ 250.002389][ T42] usb 5-1: Manufacturer: syz [ 250.007336][ T42] usb 5-1: SerialNumber: syz [ 250.055182][ T42] usb 5-1: config 0 descriptor?? [ 250.083468][ T5865] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 250.102362][ T42] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 006 [ 250.248850][ T5865] usb 2-1: device descriptor read/64, error -71 [ 250.366280][ T5865] usb usb2-port1: attempt power cycle [ 250.496702][ T42] (null): failure reading functionality [ 250.527999][ T42] i2c i2c-1: failure reading functionality [ 250.565764][ T42] i2c i2c-1: connected i2c-tiny-usb device [ 250.584236][ T42] usb 5-1: USB disconnect, device number 6 [ 250.762584][ T5865] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 250.807416][ T5865] usb 2-1: device descriptor read/8, error -71 [ 251.069848][ T5865] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 251.145669][ T5865] usb 2-1: device descriptor read/8, error -71 [ 251.274994][ T5865] usb usb2-port1: unable to enumerate USB device [ 251.329644][ T6098] loop8: detected capacity change from 0 to 8 [ 251.366338][ T6098] Dev loop8: unable to read RDB block 8 [ 251.379152][ T6098] loop8: unable to read partition table [ 251.421193][ T6098] loop8: partition table beyond EOD, truncated [ 251.429277][ T6098] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 252.095327][ T6102] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 252.273722][ T5865] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 252.417381][ T5865] usb 4-1: device descriptor read/64, error -71 [ 252.676292][ T5865] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 252.909251][ T5865] usb 4-1: device descriptor read/64, error -71 [ 253.035086][ T5865] usb usb4-port1: attempt power cycle [ 253.408040][ T5865] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 253.429147][ T6116] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 253.556496][ T5865] usb 4-1: device descriptor read/8, error -71 [ 253.844327][ T5865] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 253.911469][ T5865] usb 4-1: device descriptor read/8, error -71 [ 254.058709][ T5865] usb usb4-port1: unable to enumerate USB device [ 254.525246][ T6129] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 255.151801][ T6138] overlayfs: missing 'lowerdir' [ 255.835193][ T6141] ptrace attach of "./syz-executor exec"[6142] was attempted by "./syz-executor exec"[6141] [ 256.413646][ T5858] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 256.614636][ T5858] usb 5-1: device descriptor read/64, error -71 [ 256.867533][ T5858] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 257.046959][ T5858] usb 5-1: device descriptor read/64, error -71 [ 257.090353][ T6157] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 257.170565][ T5858] usb usb5-port1: attempt power cycle [ 257.549199][ T5858] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 257.628177][ T5858] usb 5-1: device descriptor read/8, error -71 [ 257.883737][ T5858] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 257.932373][ T5858] usb 5-1: device descriptor read/8, error -71 [ 258.029456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 258.415806][ T5865] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 258.597534][ T5858] usb usb5-port1: unable to enumerate USB device [ 258.624949][ T5865] usb 2-1: device descriptor read/64, error -71 [ 258.920855][ T5865] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 259.172858][ T5865] usb 2-1: device descriptor read/64, error -71 [ 259.206325][ T6176] overlayfs: missing 'lowerdir' [ 259.293738][ T5865] usb usb2-port1: attempt power cycle [ 259.723544][ T5865] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 259.778807][ T5865] usb 2-1: device descriptor read/8, error -71 [ 260.023647][ T5865] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 260.055417][ T6184] ptrace attach of "./syz-executor exec"[6186] was attempted by "./syz-executor exec"[6184] [ 260.092523][ T5865] usb 2-1: device descriptor read/8, error -71 [ 260.205362][ T5865] usb usb2-port1: unable to enumerate USB device [ 261.539028][ T6201] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 262.854009][ T5865] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 263.018075][ T5865] usb 4-1: device descriptor read/64, error -71 [ 263.307497][ T5865] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 263.473754][ T5865] usb 4-1: device descriptor read/64, error -71 [ 263.587087][ T5865] usb usb4-port1: attempt power cycle [ 263.727263][ T6227] ptrace attach of "./syz-executor exec"[6229] was attempted by "./syz-executor exec"[6227] [ 263.825808][ T6230] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 263.939107][ T5865] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 264.022444][ T5865] usb 4-1: device descriptor read/8, error -71 [ 264.277647][ T5865] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 264.332115][ T5865] usb 4-1: device descriptor read/8, error -71 [ 264.451246][ T5865] usb usb4-port1: unable to enumerate USB device [ 264.689690][ T5858] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 264.854574][ T5858] usb 5-1: device descriptor read/64, error -71 [ 265.123651][ T5858] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 265.303651][ T5858] usb 5-1: device descriptor read/64, error -71 [ 265.423929][ T5858] usb usb5-port1: attempt power cycle [ 265.813703][ T5858] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 265.861078][ T5858] usb 5-1: device descriptor read/8, error -71 [ 266.063624][ T5865] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 266.129717][ T5858] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 266.186139][ T5858] usb 5-1: device descriptor read/8, error -71 [ 266.308789][ T5858] usb usb5-port1: unable to enumerate USB device [ 266.354323][ T5865] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 266.364114][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.372380][ T5865] usb 2-1: Product: syz [ 266.377210][ T5865] usb 2-1: Manufacturer: syz [ 266.382051][ T5865] usb 2-1: SerialNumber: syz [ 266.486999][ T5865] usb 2-1: config 0 descriptor?? [ 266.539055][ T5865] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 010 [ 266.916698][ T5865] (null): failure reading functionality [ 266.955761][ T5865] i2c i2c-1: failure reading functionality [ 266.995731][ T5865] i2c i2c-1: connected i2c-tiny-usb device [ 267.055880][ T5865] usb 2-1: USB disconnect, device number 10 [ 267.257980][ T6255] ptrace attach of "./syz-executor exec"[6258] was attempted by "./syz-executor exec"[6255] [ 267.355534][ T6257] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 269.613772][ T5858] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 269.783653][ T5858] usb 3-1: device descriptor read/64, error -71 [ 270.026162][ T5858] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 270.194013][ T5858] usb 3-1: device descriptor read/64, error -71 [ 270.324127][ T5858] usb usb3-port1: attempt power cycle [ 270.373943][ T11] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 270.495302][ T6293] ptrace attach of "./syz-executor exec"[6294] was attempted by "./syz-executor exec"[6293] [ 270.564196][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 270.593975][ T11] usb 1-1: no configurations [ 270.598852][ T11] usb 1-1: can't read configurations, error -22 [ 270.736272][ T5858] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 270.783915][ T11] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 270.814133][ T5858] usb 3-1: device descriptor read/8, error -71 [ 270.953368][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 270.973808][ T11] usb 1-1: no configurations [ 270.978660][ T11] usb 1-1: can't read configurations, error -22 [ 271.005400][ T11] usb usb1-port1: attempt power cycle [ 271.089304][ T5858] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 271.157001][ T5858] usb 3-1: device descriptor read/8, error -71 [ 271.202087][ T6298] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 271.299640][ T5858] usb usb3-port1: unable to enumerate USB device [ 271.363518][ T11] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 271.394396][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 271.410214][ T11] usb 1-1: no configurations [ 271.415285][ T11] usb 1-1: can't read configurations, error -22 [ 271.571389][ T11] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 271.637236][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 271.683725][ T11] usb 1-1: no configurations [ 271.688595][ T11] usb 1-1: can't read configurations, error -22 [ 271.734103][ T11] usb usb1-port1: unable to enumerate USB device [ 273.238085][ T5865] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 273.469434][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 273.536779][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.549000][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.560919][ T5865] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 273.570731][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.706968][ T5865] usb 4-1: config 0 descriptor?? [ 274.197372][ T5865] usbhid 4-1:0.0: can't add hid device: -71 [ 274.215735][ T5865] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 274.304962][ T5865] usb 4-1: USB disconnect, device number 12 [ 274.330234][ T6325] ptrace attach of ""[6331] was attempted by "./syz-executor exec"[6325] [ 275.707224][ T11] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 276.043722][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 276.062305][ T11] usb 5-1: no configurations [ 276.067913][ T11] usb 5-1: can't read configurations, error -22 [ 276.500042][ T11] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 276.713828][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 276.723560][ T11] usb 5-1: no configurations [ 276.728509][ T11] usb 5-1: can't read configurations, error -22 [ 276.782686][ T11] usb usb5-port1: attempt power cycle [ 277.178415][ T11] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 277.296137][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 277.319335][ T11] usb 5-1: no configurations [ 277.325185][ T11] usb 5-1: can't read configurations, error -22 [ 277.475171][ T11] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 277.616309][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 277.634819][ T11] usb 5-1: no configurations [ 277.639753][ T11] usb 5-1: can't read configurations, error -22 [ 277.700695][ T11] usb usb5-port1: unable to enumerate USB device [ 277.856141][ T5865] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 278.013471][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 278.042560][ T5865] usb 4-1: no configurations [ 278.048039][ T5865] usb 4-1: can't read configurations, error -22 [ 278.210197][ T5865] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 279.574448][ T6368] ptrace attach of "./syz-executor exec"[6374] was attempted by "./syz-executor exec"[6368] [ 279.607054][ T6373] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 280.764198][ T5865] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 280.982555][ T5865] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 280.992795][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.012426][ T5865] usb 5-1: config 0 descriptor?? [ 281.072009][ T6397] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 281.092592][ T11] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 281.264832][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 281.304377][ T11] usb 3-1: no configurations [ 281.309424][ T11] usb 3-1: can't read configurations, error -22 [ 281.486322][ T5865] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 281.503720][ T11] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 281.503747][ T5865] [drm:udl_init] *ERROR* Selecting channel failed [ 281.542921][ T5865] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 281.550647][ T5865] [drm] Initialized udl on minor 2 [ 281.601681][ T5865] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 281.611813][ T5865] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 281.626141][ T42] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 281.639551][ T42] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 281.648757][ T42] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 281.660268][ T5865] usb 5-1: USB disconnect, device number 19 [ 281.708810][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 281.728361][ T11] usb 3-1: no configurations [ 281.733610][ T11] usb 3-1: can't read configurations, error -22 [ 281.742335][ T11] usb usb3-port1: attempt power cycle [ 281.888210][ T5858] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 282.054552][ T5858] usb 4-1: Using ep0 maxpacket: 32 [ 282.084397][ T5858] usb 4-1: no configurations [ 282.093300][ T5858] usb 4-1: can't read configurations, error -22 [ 282.111100][ T11] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 282.158497][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 282.180504][ T11] usb 3-1: no configurations [ 282.185838][ T11] usb 3-1: can't read configurations, error -22 [ 282.277279][ T5858] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 282.364607][ T11] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 282.406451][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 282.443805][ T11] usb 3-1: no configurations [ 282.448895][ T11] usb 3-1: can't read configurations, error -22 [ 282.477665][ T11] usb usb3-port1: unable to enumerate USB device [ 282.492207][ T5858] usb 4-1: Using ep0 maxpacket: 32 [ 282.530721][ T5858] usb 4-1: no configurations [ 282.536126][ T5858] usb 4-1: can't read configurations, error -22 [ 282.573872][ T5858] usb usb4-port1: attempt power cycle [ 282.642623][ T6410] ptrace attach of "./syz-executor exec"[6411] was attempted by "./syz-executor exec"[6410] [ 282.924414][ T5858] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 282.956533][ T5858] usb 4-1: Using ep0 maxpacket: 32 [ 282.966021][ T5858] usb 4-1: no configurations [ 282.971017][ T5858] usb 4-1: can't read configurations, error -22 [ 283.103573][ T5858] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 283.145776][ T6417] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 283.155467][ T5858] usb 4-1: Using ep0 maxpacket: 32 [ 283.176450][ T5858] usb 4-1: no configurations [ 283.181462][ T5858] usb 4-1: can't read configurations, error -22 [ 283.190601][ T5858] usb usb4-port1: unable to enumerate USB device [ 285.133997][ T5858] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 285.412056][ T6440] ptrace attach of "./syz-executor exec"[6443] was attempted by "./syz-executor exec"[6440] [ 285.441522][ T5858] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 285.451052][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.496546][ T5858] usb 5-1: config 0 descriptor?? [ 285.939370][ T5858] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 285.962186][ T5858] [drm:udl_init] *ERROR* Selecting channel failed [ 286.037931][ T5858] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 286.045554][ T5858] [drm] Initialized udl on minor 2 [ 286.072967][ T5858] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 286.089862][ T5858] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 286.109426][ T11] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 286.119602][ T11] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 286.128381][ T11] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 286.164965][ T5858] usb 5-1: USB disconnect, device number 20 [ 287.727580][ T42] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 287.933986][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 287.949483][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.960442][ T42] usb 4-1: config 0 has no interfaces? [ 287.970933][ T42] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 287.981224][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.038972][ T42] usb 4-1: config 0 descriptor?? [ 288.620295][ T6480] ptrace attach of "./syz-executor exec"[6485] was attempted by "./syz-executor exec"[6480] [ 289.576478][ T42] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 289.764772][ T42] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 289.780201][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.836414][ T42] usb 5-1: config 0 descriptor?? [ 290.300058][ T42] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 290.334085][ T42] [drm:udl_init] *ERROR* Selecting channel failed [ 290.430325][ T42] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 290.438291][ T42] [drm] Initialized udl on minor 2 [ 290.473893][ T42] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 290.483628][ T42] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 290.514378][ T5865] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 290.533590][ T5865] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 290.542411][ T5865] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 290.580394][ T42] usb 5-1: USB disconnect, device number 21 [ 290.711751][ T5858] usb 4-1: USB disconnect, device number 19 [ 291.295818][ T6507] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 291.883570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 291.936471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 292.024750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 292.425811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 292.779600][ T6520] ptrace attach of "./syz-executor exec"[6526] was attempted by "./syz-executor exec"[6520] [ 292.849661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 293.825786][ T5858] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 294.036040][ T5858] usb 5-1: Using ep0 maxpacket: 8 [ 294.066271][ T5858] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.080858][ T5858] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 294.091470][ T5858] usb 5-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.7e [ 294.101678][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.218988][ T5858] usb 5-1: config 0 descriptor?? [ 294.461296][ T5865] usb 5-1: USB disconnect, device number 22 [ 294.587432][ T42] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 294.793618][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 294.808522][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.819427][ T42] usb 3-1: config 0 has no interfaces? [ 294.825349][ T42] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 294.835055][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.906145][ T42] usb 3-1: config 0 descriptor?? [ 294.985204][ T6540] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 295.135181][ T6544] netlink: 212 bytes leftover after parsing attributes in process `syz.1.203'. [ 296.324739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 296.377801][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.384756][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 297.375956][ T6558] ptrace attach of "./syz-executor exec"[6563] was attempted by "./syz-executor exec"[6558] [ 297.599644][ T5858] usb 3-1: USB disconnect, device number 10 [ 298.464788][ T6574] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 298.483559][ T42] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 298.685567][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 298.702488][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.713350][ T42] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 298.722733][ T42] usb 4-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.7e [ 298.732185][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.860625][ T42] usb 4-1: config 0 descriptor?? [ 299.001965][ T6578] netlink: 212 bytes leftover after parsing attributes in process `syz.1.216'. [ 299.106043][ T42] usb 4-1: USB disconnect, device number 20 [ 300.456421][ T42] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 300.501879][ T6596] ptrace attach of "./syz-executor exec"[6598] was attempted by "./syz-executor exec"[6596] [ 300.643599][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 300.690611][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.702744][ T42] usb 3-1: config 0 has no interfaces? [ 300.708746][ T42] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 300.718303][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.855238][ T42] usb 3-1: config 0 descriptor?? [ 300.977336][ T6603] capability: warning: `syz.1.227' uses 32-bit capabilities (legacy support in use) [ 301.227341][ T6605] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 301.269279][ T6609] netlink: 212 bytes leftover after parsing attributes in process `syz.4.230'. [ 301.982482][ T6616] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 302.443676][ T42] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 302.642153][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 302.685620][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.698232][ T42] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 302.708562][ T42] usb 2-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.7e [ 302.719066][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.856372][ T42] usb 2-1: config 0 descriptor?? [ 303.145376][ T42] usb 2-1: USB disconnect, device number 11 [ 303.431248][ T5858] usb 3-1: USB disconnect, device number 11 [ 304.388155][ T6636] ptrace attach of ""[6638] was attempted by "./syz-executor exec"[6636] [ 304.704408][ T6642] netlink: 212 bytes leftover after parsing attributes in process `syz.1.242'. [ 305.206327][ T6644] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 307.080842][ T42] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 307.185767][ T5865] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 307.289908][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 307.315661][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.326899][ T42] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 307.337144][ T42] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 307.346756][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.421305][ T5865] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 307.430925][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.536211][ T42] usb 3-1: config 0 descriptor?? [ 307.560981][ T5865] usb 2-1: config 0 descriptor?? [ 307.577853][ T6674] netlink: 212 bytes leftover after parsing attributes in process `syz.4.255'. [ 308.213989][ T5865] ath6kl: Failed to read usb control message: -71 [ 308.221034][ T5865] ath6kl: Unable to read the bmi data from the device: -71 [ 308.229289][ T5865] ath6kl: Unable to recv target info: -71 [ 308.416168][ T6675] ptrace attach of ""[6677] was attempted by "./syz-executor exec"[6675] [ 308.451703][ T5865] ath6kl: Failed to init ath6kl core: -71 [ 308.460767][ T5865] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 308.482159][ T5865] usb 2-1: USB disconnect, device number 12 [ 309.301523][ T6683] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 309.899126][ T6691] loop8: detected capacity change from 0 to 8 [ 309.914696][ T6691] Dev loop8: unable to read RDB block 8 [ 309.920888][ T6691] loop8: unable to read partition table [ 309.975649][ T6691] loop8: partition table beyond EOD, truncated [ 309.982159][ T6691] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 310.022226][ T5865] usb 3-1: USB disconnect, device number 12 [ 311.908973][ T5865] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 312.226859][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 312.645452][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.682091][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.729698][ T5865] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 312.770126][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.104818][ T5865] usb 2-1: config 0 descriptor?? [ 313.696348][ T6719] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 313.750421][ T5865] usbhid 2-1:0.0: can't add hid device: -71 [ 313.757663][ T5865] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 313.801053][ T6711] ptrace attach of ""[6712] was attempted by "./syz-executor exec"[6711] [ 313.887519][ T5865] usb 2-1: USB disconnect, device number 13 [ 314.752183][ T5858] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 315.013566][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 315.026071][ T5858] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.036715][ T5858] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 315.046408][ T5858] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 315.056393][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.159587][ T5858] usb 1-1: config 0 descriptor?? [ 315.679475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 315.781854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 316.113782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 318.027410][ T6760] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 318.145072][ T5865] usb 1-1: USB disconnect, device number 7 [ 318.761196][ T6757] ptrace attach of ""[6762] was attempted by "./syz-executor exec"[6757] [ 319.187834][ T5858] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 319.390664][ T5858] usb 1-1: Using ep0 maxpacket: 16 [ 319.456193][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.473887][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.485966][ T5858] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 319.495727][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.596420][ T5858] usb 1-1: config 0 descriptor?? [ 320.064182][ T5858] usbhid 1-1:0.0: can't add hid device: -71 [ 320.070928][ T5858] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 320.140617][ T5858] usb 1-1: USB disconnect, device number 8 [ 321.493752][ T5865] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 321.713398][ T5865] usb 1-1: Using ep0 maxpacket: 32 [ 321.740740][ T5865] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 321.750541][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.811796][ T5865] usb 1-1: config 0 descriptor?? [ 322.001739][ T5858] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 322.064063][ T5865] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 322.091209][ T5865] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 322.135930][ T5865] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 322.143774][ T5865] usb 1-1: media controller created [ 322.204441][ T5858] usb 3-1: Using ep0 maxpacket: 32 [ 322.225325][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 322.258298][ T5858] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.269180][ T5858] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.278990][ T5858] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 322.288638][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.360600][ T5858] usb 3-1: config 0 descriptor?? [ 322.495154][ T6791] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 322.547295][ T5865] az6027: usb out operation failed. (-71) [ 322.555459][ T5865] az6027: usb out operation failed. (-71) [ 322.561557][ T5865] stb0899_attach: Driver disabled by Kconfig [ 322.568222][ T5865] az6027: no front-end attached [ 322.568222][ T5865] [ 322.603742][ T5865] az6027: usb out operation failed. (-71) [ 322.610061][ T5865] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 322.620564][ T5865] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 322.689241][ T5865] dvb-usb: schedule remote query interval to 400 msecs. [ 322.699006][ T5865] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 322.756030][ T5865] usb 1-1: USB disconnect, device number 9 [ 322.977470][ T6793] ===================================================== [ 322.985347][ T6793] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 322.992715][ T6793] _copy_to_user+0xcc/0x120 [ 322.997720][ T6793] i2cdev_ioctl_smbus+0x586/0x660 [ 323.003289][ T6793] compat_i2cdev_ioctl+0x48f/0xb40 [ 323.008668][ T6793] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 323.014860][ T6793] ia32_sys_call+0x25d9/0x4340 [ 323.019897][ T6793] __do_fast_syscall_32+0x15a/0x330 [ 323.025629][ T6793] do_fast_syscall_32+0x38/0x80 [ 323.032070][ T6793] do_SYSENTER_32+0x1f/0x30 [ 323.037036][ T6793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.043869][ T6793] [ 323.046316][ T6793] Uninit was stored to memory at: [ 323.056697][ T6793] __i2c_smbus_xfer+0x2545/0x2f40 [ 323.062222][ T6793] i2c_smbus_xfer+0x31d/0x4d0 [ 323.069411][ T6793] i2cdev_ioctl_smbus+0x4a1/0x660 [ 323.076540][ T6793] compat_i2cdev_ioctl+0x48f/0xb40 [ 323.081996][ T6793] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 323.088261][ T6793] ia32_sys_call+0x25d9/0x4340 [ 323.093464][ T6793] __do_fast_syscall_32+0x15a/0x330 [ 323.098929][ T6793] do_fast_syscall_32+0x38/0x80 [ 323.104249][ T6793] do_SYSENTER_32+0x1f/0x30 [ 323.109015][ T6793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.116920][ T6793] [ 323.119380][ T6793] Local variable msgbuf1.i created at: [ 323.125333][ T6793] __i2c_smbus_xfer+0x891/0x2f40 [ 323.131521][ T6793] i2c_smbus_xfer+0x31d/0x4d0 [ 323.136942][ T6793] [ 323.139378][ T6793] Bytes 0-1 of 2 are uninitialized [ 323.144983][ T6793] Memory access of size 2 starts at ffff8880553bbc76 [ 323.157900][ T6793] Data copied to user address 0000000080000040 [ 323.167007][ T6793] [ 323.169574][ T6793] CPU: 1 UID: 0 PID: 6793 Comm: syz.2.298 Not tainted syzkaller #0 PREEMPT(none) [ 323.180265][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.191171][ T6793] ===================================================== [ 323.199336][ T6793] Disabling lock debugging due to kernel taint [ 323.206318][ T6793] Kernel panic - not syncing: kmsan.panic set ... [ 323.213008][ T6793] CPU: 1 UID: 0 PID: 6793 Comm: syz.2.298 Tainted: G B syzkaller #0 PREEMPT(none) [ 323.224021][ T6793] Tainted: [B]=BAD_PAGE [ 323.228297][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.238507][ T6793] Call Trace: [ 323.242002][ T6793] [ 323.245034][ T6793] __dump_stack+0x26/0x30 [ 323.249572][ T6793] dump_stack_lvl+0x53/0x270 [ 323.254371][ T6793] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 323.260462][ T6793] dump_stack+0x1e/0x25 [ 323.264935][ T6793] vpanic+0x435/0xd30 [ 323.269251][ T6793] panic+0x15d/0x160 [ 323.273414][ T6793] kmsan_report+0x31c/0x320 [ 323.278161][ T6793] ? kmsan_internal_check_memory+0x1e1/0x230 [ 323.284382][ T6793] ? kmsan_copy_to_user+0xf1/0x190 [ 323.289858][ T6793] ? _copy_to_user+0xcc/0x120 [ 323.294851][ T6793] ? i2cdev_ioctl_smbus+0x586/0x660 [ 323.300476][ T6793] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 323.306023][ T6793] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 323.311971][ T6793] ? ia32_sys_call+0x25d9/0x4340 [ 323.317251][ T6793] ? __do_fast_syscall_32+0x15a/0x330 [ 323.322958][ T6793] ? do_fast_syscall_32+0x38/0x80 [ 323.328219][ T6793] ? do_SYSENTER_32+0x1f/0x30 [ 323.333141][ T6793] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.339969][ T6793] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 323.345497][ T6793] ? __i2c_transfer+0x11d0/0x3110 [ 323.350875][ T6793] ? kmsan_get_metadata+0xfb/0x160 [ 323.356232][ T6793] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 323.362912][ T6793] ? kmsan_get_metadata+0xfb/0x160 [ 323.368276][ T6793] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 323.374351][ T6793] ? __i2c_smbus_xfer+0x1ed7/0x2f40 [ 323.379851][ T6793] ? kmsan_get_metadata+0xfb/0x160 [ 323.385212][ T6793] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 323.391562][ T6793] kmsan_internal_check_memory+0x1e1/0x230 [ 323.398022][ T6793] kmsan_copy_to_user+0xf1/0x190 [ 323.403773][ T6793] _copy_to_user+0xcc/0x120 [ 323.408596][ T6793] i2cdev_ioctl_smbus+0x586/0x660 [ 323.414097][ T6793] compat_i2cdev_ioctl+0x48f/0xb40 [ 323.419512][ T6793] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 323.425405][ T6793] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 323.431272][ T6793] ? kmsan_get_metadata+0xfb/0x160 [ 323.436633][ T6793] ? kmsan_get_metadata+0xfb/0x160 [ 323.442019][ T6793] ia32_sys_call+0x25d9/0x4340 [ 323.447134][ T6793] __do_fast_syscall_32+0x15a/0x330 [ 323.452705][ T6793] do_fast_syscall_32+0x38/0x80 [ 323.457835][ T6793] do_SYSENTER_32+0x1f/0x30 [ 323.462584][ T6793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.469329][ T6793] RIP: 0023:0xf7f06539 [ 323.473538][ T6793] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 323.493609][ T6793] RSP: 002b:00000000f53d555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 323.502407][ T6793] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 323.510732][ T6793] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.518959][ T6793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.527085][ T6793] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 323.535419][ T6793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.543617][ T6793] [ 323.547263][ T6793] Kernel Offset: disabled [ 323.551657][ T6793] Rebooting in 86400 seconds..