last executing test programs: 2.940065376s ago: executing program 3 (id=396): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x20, 0x1, 0x10, "a85a407213442fb9e2396636cad7ac66"}, 0x0}) 1.435466379s ago: executing program 0 (id=418): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100000004"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000140)=""/16, 0x10}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000340)=""/187, 0xbb}], 0x8}, 0x80000000}], 0x4, 0x20, 0x0) 1.194258871s ago: executing program 2 (id=424): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x103103) ioctl$TIOCGPGRP(r0, 0x4c08, 0x0) 1.087158509s ago: executing program 2 (id=426): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') lseek(r0, 0x1000004, 0x0) 1.048059328s ago: executing program 2 (id=428): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) recvfrom(r0, &(0x7f0000000380)=""/4096, 0x1000, 0x40000000, &(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x80) userfaultfd(0x80001) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x40, 0x0, 0x0) 967.058363ms ago: executing program 3 (id=429): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30e000b4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df9305959f", 0x6d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x4e2}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000040)=0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 896.348763ms ago: executing program 3 (id=430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb30}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 787.158151ms ago: executing program 2 (id=432): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r2, r3, 0x3, 0x707a, 0x8001, 0x804, {0x1200ac7c, 0x1, 0x3, 0x3, 0xf47, 0x1, 0x2, 0x5, 0x412f, 0xe1d4, 0x4, 0x7f, 0x400a, 0xffffffff, "fe97b17e0600000000000000000000000400"}}) 764.394968ms ago: executing program 3 (id=433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000060000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="35000e00800000000802110000010802110000005050505050500000000000000000000064000100250301040e7206030303030303000000080026006c090000080027000100000008000c00640000000800"], 0x74}}, 0x20000014) 745.928045ms ago: executing program 2 (id=434): r0 = syz_open_dev$sg(0x0, 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000500000052"]) 623.224839ms ago: executing program 2 (id=435): r0 = semget$private(0x0, 0x4000000009, 0x42a) semop(r0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x9b6a}], 0x2) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0xf801, 0x1000}, {0x4, 0x3, 0x1000}], 0x2, 0x0) 596.796658ms ago: executing program 3 (id=437): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 577.825003ms ago: executing program 1 (id=438): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30e000b4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df9305959f", 0x6d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f2a765f8220323add67b2b6695ca41adcda387a4264bcd94c8578a9ccca3b55ebcda45369b56068cfeec34abc2cbd94b9b12d057fa9d4328d57073f40e5ae64443e4a10ed400575bbd1168a170a0134b9ad28735dbd9603a9e417cce864f2141a92f57e1fdfcff4776f94a794d6db8d3e9e0ecc783956c7ab15a8d5639d3df1ac9da6057af913a563bd55b657f37cbf4cae2919aea6ff8a748eb4c036361b8866cc062bbad019f43d02b0c38bd6309f2baa53924466203ab8d00daaac4c9da846e645d64c10e47c32e9824e79ade4eeee7cbf71b1bb48f760800b04334745ab553dea12a85f0671eb07a4cc67ceaffa8269e0b052f25136cfb8a6b9327a2d165c42933642d3171ad00ebf0be485f5ed319021600a94072f251c8905a2451eba3ba7db2ec5fb8613463a796610629719166259ffa3261e06f09b5a69798b88848da9028ff7ed8a729c384374fce0f4f5cda3b61cc4d61da382c5708f26edb16e9b65d667ed61248dfbed35a6a886adec25361c17d9f30f94db7e3085440df135ddec94f3f01fe2e2f9edb9e19fd8ae0b93363f0dbadc858d8e0a93dea50e89b2d7674b7e0f813c38f70a87554f5d0b95b531ec006716207abc5c34bcf447f0e547516d2fa23e2871db3662c8fb30e93b939aaed219ca9ef4b30f79e3d27e1caece83168292a10c0abf24f5fe97ef6fd46045f6ee3fc33d995a79584426fdac0c663d4991364d450dd71cf86e7d298ec8500eae0fa9b26b9ba3077033e643428ec81ae9192174a0dec405dbf63de3a7c2cc037bab06941dc5b13a00f5f861a4a8a335b52de03c4c977af27c02e7f4ee05d602b5b64c2904fc182a6cdf7f64d0641f4302383cf610fb0a357cd9ebcb078e49d3df19cca93a701373970270e4db98bac98a85cc3a5cdf829fc8ecb102a1aae70bf2149cc551703a012cf9c74e3df24ade472c4dc052415ea494aae8a7424360ffdba83ba584e61d0fd66fba41712628abb00cdf370a97e95004c892cfd42e84561ee569f905d487830cc665392295d9399f28cc2c6f01b209c5d1d64e3d685df89cc428922b819974e42b35b277d5a06671b0bf59b77b9b0a3ce41a579cd8b6b9d08df85787fedde4c7a4ba1ad2d5ae95e5fb208d2f9e842655e9e0cb", 0x4e2}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000040)=0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 516.714874ms ago: executing program 0 (id=439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000001c0)={0x6}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000005c0)={"de74794aa32d099df71c4119105323dcbf2664083b842800ea046c6604596422a54fcbe3b0994cd05f6b11594d04491abec0a2906d9218383d8c6864998be25db447308b04aa93446ec9e848eed9724416eaf2af1f2df2c14a4e3ed8874fb616ece79902d9d94733988938099bb925fb7efa05ea0ccf20851cfda9847283ba30b4a12e2de479955d9a547cf52c4ea51c15d381271ad5d6518dad09a3b892e2200f13cda2b444240fce38e9ab63d8cd4c996c2e2dfee2e1457497eeea171a22fca5f653c8053e607c76f14210be60006a1f0ce9e572f2f6d45f7e64218ef63b55f181bcf2771be7f42867e58e91352a139ac17dca04e3c1c0f4299ecfc136d9589cee119da938cb29dbdc51df7aab9d5eb4b317397149a54da379645121dd7729169e7afb57fcfca1241a7db06784cce05f423dfc664d78dc19c7f4b126b04f0f65ca719817afb042beda78632fd811cce5236510d3c21ef7bac044d40ce25106d608227aad2a782a5b0180155f3bbe1b3ea1af1488e45e95b7f5669a672ed57be2abe5fd99b65258e552c7caee06894d55f002e46c9219f11a3510c327d765c5ed8872696576b8c8da496992d7823b1ab937ed0e97adf3e2df15efbb2d2b4e1a14f925874c8ed191759a9c412e2e06fb3e6216ca965602a308059cac308e875c88a0558507816620dc4331c70bbd0c8f8b695d769128ed6ea6fdb05a697d3d325fcd1d532fb76ae51549045df58532f93454eb9ddf6248f5e633271d6d1b9b4912b6293d993375e9a7cfafaeb16bea2c9bbdc57e7e3e536e0d15b82799ff56be72d3fcba29862cdc1907e46040c34d88963e5faed50aad28537073cf22a698f0405f6d083ddc601613fcda542730be112d3a115dfed62a632ec867846ec35d636a09855faed5b5be01c84fb49fb148933b843c5290b1ef90e44db76056d1643e95867c068e00d687bb027eff9d9a1b7bafdf389296573803171822f0e28d982702533ac6e7dee08c6c171f8b755226cd141ae431576c13ee8f1f1f0ec4e85fba9c6d90fb442bb49df884fac9fbd5aa9d2f0ac86f5aded3f3cee6e7ea59eede1ca3580c12bbb538bca78fa8143336c9d79e8dfa1c3611fcde7d03331c781881d7ef871df0db3fdebfe72844e57e6d86bb55fb9b9c2f8f07d5680cf13ea4edc0dbae57b03c9a66337bd5f3a44a5cc313f080ef9e009dea462006b7d6a6961a1bea77a8db08e6a0338804a550ed7bc0044ca35799df51e32a048f774dfc319f59d5afa836685afb774f7dab79cf093aa3bca6a806ecad27b1ce86f57a7564efc1ae5dac1c530141f4ad6a5db1e639679d4a61fa9750c9adf79148ffd68ae2efa1f284d259e6bc0f819304972d812ba0a9d6c9b167c3ab46739781d2b187b94ace0878f9177de8a9c4f94156e90d154d36b5ab9f51fc8e5d1dced3094722a1619b98"}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x1, 0xe, 0x7, 0x0, 0x8, 0x1, 0x9, 0x80, 0xe, 0x7, 0x4, 0x9, 0x0, 0x5, 0x3, 0x3, 0x7, 0x0, 0xdb, '\x00', 0x3e, 0x6ea93ba1}) 474.713181ms ago: executing program 1 (id=440): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) open(0x0, 0x143142, 0x166) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x2}) 375.169457ms ago: executing program 3 (id=441): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) epoll_create(0x1) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0xe, &(0x7f0000000000)=0x0) eventfd2(0x347e, 0x800) syz_io_uring_setup(0x5135, &(0x7f0000000100)={0x0, 0x0, 0x13580}, 0x0, 0x0) io_submit(r1, 0x2, &(0x7f00000014c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x6, r0, 0x0, 0x0, 0x4}, 0x0]) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 321.542886ms ago: executing program 1 (id=442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb30}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 254.678307ms ago: executing program 0 (id=443): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r2, r3, 0x3, 0x707a, 0x8001, 0x804, {0x1200ac7c, 0x1, 0x3, 0x3, 0xf47, 0x1, 0x2, 0x5, 0x412f, 0xe1d4, 0x4, 0x7f, 0x400a, 0xffffffff, "fe97b17e0600000000000000000000000400"}}) 247.023432ms ago: executing program 1 (id=444): r0 = syz_open_dev$sg(0x0, 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000500000052"]) 140.860661ms ago: executing program 1 (id=445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000060000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="35000e00800000000802110000010802110000005050505050500000000000000000000064000100250301040e7206030303030303000000080026006c090000080027000100000008000c00640000000800"], 0x74}}, 0x20000014) 140.157331ms ago: executing program 0 (id=446): bind$qrtr(0xffffffffffffffff, &(0x7f00000000c0)={0x2a, 0x0, 0x7fffbffe}, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 97.037539ms ago: executing program 1 (id=447): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000140)=""/16, 0x10}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000340)=""/187, 0xbb}], 0x8}, 0x80000000}], 0x4, 0x20, 0x0) 7.198776ms ago: executing program 0 (id=448): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30e000b4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df9305959f", 0x6d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x4e2}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000040)=0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 0 (id=449): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x14, 0x0, 0x705, 0x70bd23, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) memfd_secret(0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) write$binfmt_format(r2, &(0x7f0000000100)='-1\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg$unix(r0, &(0x7f0000000b40), 0x1, 0x0) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. [ 81.775304][ T5822] cgroup: Unknown subsys name 'net' [ 81.910741][ T5822] cgroup: Unknown subsys name 'cpuset' [ 81.920488][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.710672][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.229506][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.238081][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.246147][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.254719][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.265169][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.279024][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.306324][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.336416][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.368190][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.386255][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.449338][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.463192][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.471945][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.480078][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.488823][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.497383][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.505837][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.508177][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.522002][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.522078][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.026445][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 87.123205][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 87.508792][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.516716][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.524166][ T5836] bridge_slave_0: entered allmulticast mode [ 87.531880][ T5836] bridge_slave_0: entered promiscuous mode [ 87.547597][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 87.562035][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.569711][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.577344][ T5832] bridge_slave_0: entered allmulticast mode [ 87.585658][ T5832] bridge_slave_0: entered promiscuous mode [ 87.595003][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.602801][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.610200][ T5836] bridge_slave_1: entered allmulticast mode [ 87.618207][ T5836] bridge_slave_1: entered promiscuous mode [ 87.625944][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 87.645576][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.652878][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.660441][ T5832] bridge_slave_1: entered allmulticast mode [ 87.669857][ T5832] bridge_slave_1: entered promiscuous mode [ 87.768926][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.797792][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.811601][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.823391][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.931402][ T5832] team0: Port device team_slave_0 added [ 87.942211][ T5836] team0: Port device team_slave_0 added [ 87.971139][ T5832] team0: Port device team_slave_1 added [ 87.981233][ T5836] team0: Port device team_slave_1 added [ 88.079363][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.086680][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.094144][ T5841] bridge_slave_0: entered allmulticast mode [ 88.102718][ T5841] bridge_slave_0: entered promiscuous mode [ 88.111124][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.119232][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.126703][ T5841] bridge_slave_1: entered allmulticast mode [ 88.135242][ T5841] bridge_slave_1: entered promiscuous mode [ 88.158605][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.169489][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.197647][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.239782][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.247717][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.275553][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.289755][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.298652][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.325018][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.345314][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.353920][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.362019][ T5843] bridge_slave_0: entered allmulticast mode [ 88.369832][ T5843] bridge_slave_0: entered promiscuous mode [ 88.379133][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.386969][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.394422][ T5843] bridge_slave_1: entered allmulticast mode [ 88.402807][ T5843] bridge_slave_1: entered promiscuous mode [ 88.422988][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.430396][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.457302][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.457393][ T5835] Bluetooth: hci0: command tx timeout [ 88.474740][ T5837] Bluetooth: hci1: command tx timeout [ 88.518736][ T5832] hsr_slave_0: entered promiscuous mode [ 88.525491][ T5832] hsr_slave_1: entered promiscuous mode [ 88.549195][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.562039][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.596289][ T5837] Bluetooth: hci2: command tx timeout [ 88.602255][ T5835] Bluetooth: hci3: command tx timeout [ 88.659824][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.686244][ T5841] team0: Port device team_slave_0 added [ 88.707494][ T5836] hsr_slave_0: entered promiscuous mode [ 88.714034][ T5836] hsr_slave_1: entered promiscuous mode [ 88.721537][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 88.727666][ T5836] Cannot create hsr debugfs directory [ 88.735866][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.747608][ T5841] team0: Port device team_slave_1 added [ 88.826122][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.833667][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.861177][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.909701][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.916955][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.944744][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.965667][ T5843] team0: Port device team_slave_0 added [ 89.005381][ T5843] team0: Port device team_slave_1 added [ 89.147454][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.155767][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.184889][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.210065][ T5841] hsr_slave_0: entered promiscuous mode [ 89.218054][ T5841] hsr_slave_1: entered promiscuous mode [ 89.225413][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 89.231928][ T5841] Cannot create hsr debugfs directory [ 89.248979][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.256456][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.285099][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.464258][ T5843] hsr_slave_0: entered promiscuous mode [ 89.471534][ T5843] hsr_slave_1: entered promiscuous mode [ 89.480348][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 89.486562][ T5843] Cannot create hsr debugfs directory [ 89.625550][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.642258][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.677183][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.721112][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.841912][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.862429][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.887943][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.919827][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.010048][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.039457][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.070127][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.102651][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.197384][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.218726][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.239658][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.262384][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.272177][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.322008][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.364668][ T3901] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.372014][ T3901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.385330][ T3901] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.392544][ T3901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.509158][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.516900][ T5835] Bluetooth: hci0: command tx timeout [ 90.522059][ T5837] Bluetooth: hci1: command tx timeout [ 90.549067][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.582489][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.603811][ T3901] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.611048][ T3901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.623701][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.661276][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.668984][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.684041][ T5837] Bluetooth: hci3: command tx timeout [ 90.684145][ T5835] Bluetooth: hci2: command tx timeout [ 90.699140][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.706426][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.759385][ T3901] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.767212][ T3901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.871703][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.972136][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.025840][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.033203][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.081557][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.088868][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.222036][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.254494][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.353260][ T5832] veth0_vlan: entered promiscuous mode [ 91.409094][ T5832] veth1_vlan: entered promiscuous mode [ 91.505945][ T5832] veth0_macvtap: entered promiscuous mode [ 91.525356][ T5832] veth1_macvtap: entered promiscuous mode [ 91.539423][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.584580][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.624572][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.675299][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.725307][ T5841] veth0_vlan: entered promiscuous mode [ 91.738308][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.747769][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.768654][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.797772][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.814790][ T5836] veth0_vlan: entered promiscuous mode [ 91.827681][ T5841] veth1_vlan: entered promiscuous mode [ 91.872194][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.892710][ T5836] veth1_vlan: entered promiscuous mode [ 91.942617][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.967320][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.997673][ T5841] veth0_macvtap: entered promiscuous mode [ 92.030955][ T5836] veth0_macvtap: entered promiscuous mode [ 92.055110][ T5841] veth1_macvtap: entered promiscuous mode [ 92.080616][ T5836] veth1_macvtap: entered promiscuous mode [ 92.091606][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.100052][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.141598][ T5843] veth0_vlan: entered promiscuous mode [ 92.163180][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.184404][ T5843] veth1_vlan: entered promiscuous mode [ 92.222159][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.229148][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.239386][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.280818][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.294207][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.316319][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.325381][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.374386][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.390759][ T5919] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.406250][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.452639][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.462118][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.513374][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.562711][ T5843] veth0_macvtap: entered promiscuous mode [ 92.581324][ T5843] veth1_macvtap: entered promiscuous mode [ 92.596857][ T5835] Bluetooth: hci0: command tx timeout [ 92.597335][ T5837] Bluetooth: hci1: command tx timeout [ 92.714122][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.760106][ T5837] Bluetooth: hci2: command tx timeout [ 92.760133][ T5835] Bluetooth: hci3: command tx timeout [ 92.769012][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.782721][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.815798][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.873922][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.886340][ T2140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.894223][ T2140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.918763][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.941645][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.037463][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.053071][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.068703][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.092575][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.095828][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.275142][ T5932] kvm: emulating exchange as write [ 93.318385][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.331603][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.502254][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.513873][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.826965][ T5945] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4'. [ 94.001007][ T5945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.013679][ T5945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.025029][ T5945] bond0 (unregistering): Released all slaves [ 94.047463][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.230370][ T10] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 94.240618][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.251550][ T10] usb 3-1: Product: syz [ 94.256382][ T10] usb 3-1: Manufacturer: syz [ 94.261878][ T10] usb 3-1: SerialNumber: syz [ 94.273947][ T10] usb 3-1: config 0 descriptor?? [ 94.676460][ T5835] Bluetooth: hci0: command tx timeout [ 94.678150][ T5837] Bluetooth: hci1: command tx timeout [ 94.715799][ T10] usb 3-1: Firmware version (0.0) predates our first public release. [ 94.724523][ T10] usb 3-1: Please update to version 0.2 or newer [ 94.836733][ T5837] Bluetooth: hci3: command tx timeout [ 94.837950][ T5835] Bluetooth: hci2: command tx timeout [ 95.000755][ T10] usb 3-1: USB disconnect, device number 2 [ 96.296212][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.352178][ T6018] binder: 6017:6018 ioctl c0306201 200000000480 returned -22 [ 96.471856][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 96.482637][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.491881][ T10] usb 2-1: Product: syz [ 96.496514][ T10] usb 2-1: Manufacturer: syz [ 96.501269][ T10] usb 2-1: SerialNumber: syz [ 96.511567][ T10] usb 2-1: config 0 descriptor?? [ 96.932240][ T10] usb 2-1: Firmware version (0.0) predates our first public release. [ 96.941208][ T10] usb 2-1: Please update to version 0.2 or newer [ 97.156903][ T5891] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 97.196846][ T10] usb 2-1: USB disconnect, device number 2 [ 97.244209][ T43] cfg80211: failed to load regulatory.db [ 97.332515][ T5891] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 97.361757][ T5891] usb 1-1: config 0 has no interface number 0 [ 97.381106][ T5891] usb 1-1: config 0 interface 230 has no altsetting 0 [ 97.399602][ T5891] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 97.413222][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.423334][ T5891] usb 1-1: Product: syz [ 97.431971][ T5891] usb 1-1: Manufacturer: syz [ 97.437470][ T5891] usb 1-1: SerialNumber: syz [ 97.445278][ T5891] usb 1-1: config 0 descriptor?? [ 97.463163][ T5891] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 97.475984][ T5891] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 98.430735][ T5891] IPVS: starting estimator thread 0... [ 98.527118][ T6080] IPVS: using max 27 ests per chain, 64800 per kthread [ 98.757914][ T5898] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.923036][ T5898] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 98.933512][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.942196][ T5898] usb 3-1: Product: syz [ 98.946978][ T5898] usb 3-1: Manufacturer: syz [ 98.951646][ T5898] usb 3-1: SerialNumber: syz [ 98.959879][ T5898] usb 3-1: config 0 descriptor?? [ 99.379556][ T5898] usb 3-1: Firmware version (0.0) predates our first public release. [ 99.390890][ T5898] usb 3-1: Please update to version 0.2 or newer [ 99.613495][ T5898] usb 3-1: USB disconnect, device number 3 [ 99.942748][ T43] usb 1-1: USB disconnect, device number 2 [ 100.826278][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.986248][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 100.995845][ T43] usb 1-1: config 0 has no interfaces? [ 101.005264][ T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.015249][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.027667][ T43] usb 1-1: Product: syz [ 101.046072][ T43] usb 1-1: Manufacturer: syz [ 101.050781][ T43] usb 1-1: SerialNumber: syz [ 101.064961][ T43] usb 1-1: config 0 descriptor?? [ 101.278036][ T43] usb 1-1: USB disconnect, device number 3 [ 101.706980][ T6153] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 103.029807][ T6155] syz.1.97 (6155): drop_caches: 2 [ 103.196298][ T6170] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 104.432586][ T6201] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 104.858626][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805e43e000: rx timeout, send abort [ 105.359369][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805e43d000: rx timeout, send abort [ 105.368245][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805e43e000: abort rx timeout. Force session deactivation [ 105.468567][ T6229] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 105.868059][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805e43d000: abort rx timeout. Force session deactivation [ 105.964740][ T6244] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.604755][ T6263] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 107.066280][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.240684][ T43] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 107.251065][ T43] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.262628][ T43] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 107.273520][ T43] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.288834][ T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.298324][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.330620][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.346155][ T5891] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.362322][ T43] usb 2-1: invalid MIDI out EP 0 [ 107.496518][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 107.505688][ T5891] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 107.517617][ T43] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 107.545848][ T5891] usb 4-1: config 0 has no interface number 0 [ 107.567516][ T5891] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.589387][ T43] usb 2-1: USB disconnect, device number 3 [ 107.603017][ T5891] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 107.620508][ T5891] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 107.630252][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 107.639353][ T5891] usb 4-1: Product: syz [ 107.643883][ T5891] usb 4-1: SerialNumber: syz [ 107.659104][ T5891] usb 4-1: config 0 descriptor?? [ 107.668322][ T5891] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 107.679101][ T5891] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input5 [ 107.864665][ T6287] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 107.889458][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 107.894384][ T9] usb 4-1: USB disconnect, device number 2 [ 107.896493][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 107.930597][ T9] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 108.722454][ T6314] overlayfs: failed to resolve './file1': -2 [ 109.229489][ T6330] overlayfs: failed to resolve './file1': -2 [ 109.788622][ T6355] overlayfs: failed to resolve './file1': -2 [ 110.395739][ T6377] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 110.769440][ T6397] Lens B: ================= START STATUS ================= [ 110.777018][ T6397] Lens B: Focus, Absolute: 0 [ 110.781884][ T6397] Lens B: ================== END STATUS ================== [ 110.923403][ T6404] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 111.063434][ T6411] syz.2.215 uses obsolete (PF_INET,SOCK_PACKET) [ 111.597490][ T6432] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 112.005727][ T6450] netlink: 88 bytes leftover after parsing attributes in process `syz.0.233'. [ 112.522899][ T6470] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.242'. [ 112.639660][ T6472] netlink: 88 bytes leftover after parsing attributes in process `syz.0.244'. [ 112.946600][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 112.997995][ T6487] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.252'. [ 113.148418][ T10] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.159807][ T10] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.189715][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.199836][ T10] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 113.217024][ T6495] netlink: 88 bytes leftover after parsing attributes in process `syz.1.254'. [ 113.236116][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.261090][ T10] usb 4-1: config 0 descriptor?? [ 113.642324][ T6509] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.261'. [ 113.708843][ T10] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 113.730236][ T10] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 113.748829][ T10] hid-steam 0003:28DE:1102.0001: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 113.773216][ T6513] binder_alloc: 6512: binder_alloc_buf, no vma [ 113.785692][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 113.836456][ T10] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' connected [ 113.850761][ T6515] netlink: 88 bytes leftover after parsing attributes in process `syz.0.264'. [ 113.864201][ T10] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0001/input/input6 [ 113.920396][ T10] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 113.929182][ T10] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 113.982299][ T10] hid-steam 0003:28DE:1102.0002: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 114.025742][ T10] usb 4-1: USB disconnect, device number 3 [ 114.086697][ T10] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' disconnected [ 114.156516][ T6518] fido_id[6518]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 114.274640][ T6524] overlayfs: failed to resolve './file0': -2 [ 114.370351][ T6530] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.271'. [ 114.481671][ T6534] netlink: 88 bytes leftover after parsing attributes in process `syz.0.273'. [ 114.679534][ T6546] overlayfs: failed to resolve './file0': -2 [ 114.738425][ T6548] kernel read not supported for file /   (pid: 6548 comm: syz.1.279) [ 114.749830][ T30] audit: type=1800 audit(1751480235.188:2): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.279" name=20042008010208 dev="mqueue" ino=10827 res=0 errno=0 [ 114.873879][ T6552] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.281'. [ 115.086854][ T5837] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 115.096089][ T5837] Bluetooth: hci1: Injecting HCI hardware error event [ 115.104514][ T5837] Bluetooth: hci1: hardware error 0x00 [ 115.651566][ T6568] overlayfs: failed to resolve './file0': -2 [ 115.797269][ T5844] Bluetooth: hci4: command 0x1003 tx timeout [ 115.801196][ T5835] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 116.912343][ T6591] overlay: filesystem on ./bus not supported as upperdir [ 117.148224][ T6603] __nla_validate_parse: 4 callbacks suppressed [ 117.148244][ T6603] netlink: 32 bytes leftover after parsing attributes in process `syz.1.302'. [ 117.166357][ T5837] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 117.312886][ T6613] overlay: filesystem on ./bus not supported as upperdir [ 117.626074][ T6619] overlay: filesystem on ./bus not supported as upperdir [ 117.846787][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.314'. [ 117.879777][ T6630] netlink: 32 bytes leftover after parsing attributes in process `syz.2.315'. [ 118.146191][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.274042][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 118.312821][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 118.325626][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.339405][ T10] usb 2-1: Product: syz [ 118.343773][ T10] usb 2-1: Manufacturer: syz [ 118.350008][ T10] usb 2-1: SerialNumber: syz [ 118.377998][ T10] usb 2-1: config 0 descriptor?? [ 118.557750][ T6659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.330'. [ 118.745071][ T6665] program syz.3.333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.007970][ T10] usb 2-1: Firmware: major: 223, minor: 162, hardware type: ATUSB (1) [ 119.222704][ T10] usb 2-1: failed to fetch extended address, random address set [ 119.318891][ T10] usb 2-1: USB disconnect, device number 4 [ 119.454073][ T6685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.340'. [ 119.582991][ T6689] program syz.0.342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.788396][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 120.107773][ T6707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.351'. [ 120.344205][ T6719] program syz.1.354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.550287][ T6722] kvm: pic: non byte write [ 120.648046][ T6730] overlayfs: failed to resolve './file1': -2 [ 120.868645][ T6742] program syz.3.366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.135525][ T6754] overlayfs: failed to resolve './file1': -2 [ 121.216897][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 121.480053][ T6770] program syz.2.380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.563606][ T6773] overlayfs: failed to resolve './file1': -2 [ 121.658742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.767763][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 122.017749][ T6793] program syz.0.390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.172777][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 122.577548][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.706197][ T5898] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.736097][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 122.744632][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.756220][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.766092][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 122.775613][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.787158][ T10] usb 4-1: config 0 descriptor?? [ 122.876168][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 122.883943][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.895803][ T5898] usb 1-1: config 0 has no interfaces? [ 122.905220][ T5898] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 122.914920][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.924307][ T5898] usb 1-1: Product: syz [ 122.934042][ T5898] usb 1-1: Manufacturer: syz [ 122.941971][ T5898] usb 1-1: SerialNumber: syz [ 122.951196][ T5898] usb 1-1: config 0 descriptor?? [ 123.019777][ T6828] capability: warning: `syz.1.406' uses deprecated v2 capabilities in a way that may be insecure [ 123.177156][ T980] usb 1-1: USB disconnect, device number 4 [ 123.235151][ T10] playstation 0003:054C:05C4.0003: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 123.405088][ T10] playstation 0003:054C:05C4.0003: Invalid reportID received, expected 18 got 168 [ 123.419541][ T10] playstation 0003:054C:05C4.0003: Failed to retrieve DualShock4 pairing info: -22 [ 123.436679][ T10] playstation 0003:054C:05C4.0003: Failed to get MAC address from DualShock4 [ 123.445559][ T10] playstation 0003:054C:05C4.0003: Failed to create dualshock4. [ 123.484658][ T10] playstation 0003:054C:05C4.0003: probe with driver playstation failed with error -22 [ 123.571954][ T30] audit: type=1800 audit(1751480244.008:3): pid=6845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.414" name="file1" dev="overlay" ino=683 res=0 errno=0 [ 123.605828][ T6847] program syz.2.415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.612021][ T10] usb 4-1: USB disconnect, device number 4 [ 123.920470][ T6861] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.421'. [ 124.170712][ T6872] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3959859366 (126715499712 ns) > initial count (55949202912 ns). Using initial count to start timer. [ 124.346174][ T6879] overlayfs: failed to resolve './file0': -2 [ 124.411701][ T6883] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.431'. [ 124.746534][ T6898] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3959859366 (126715499712 ns) > initial count (55949202912 ns). Using initial count to start timer. [ 124.874168][ T6905] overlayfs: failed to resolve './file0': -2 [ 125.066459][ T5898] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 125.073702][ T6914] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.446'. [ 125.194311][ T6920] [ 125.196682][ T6920] ============================================ [ 125.202836][ T6920] WARNING: possible recursive locking detected [ 125.208996][ T6920] 6.16.0-rc4-next-20250702-syzkaller #0 Not tainted [ 125.215593][ T6920] -------------------------------------------- [ 125.221834][ T6920] syz.0.449/6920 is trying to acquire lock: [ 125.227736][ T6920] ffff888011aec148 (&sb->s_type->i_mutex_key#17){+.+.}-{4:4}, at: __simple_recursive_removal+0x95/0x510 [ 125.238935][ T6920] [ 125.238935][ T6920] but task is already holding lock: [ 125.246334][ T6920] ffff8880230ac650 (&sb->s_type->i_mutex_key#17){+.+.}-{4:4}, at: bm_entry_write+0x289/0x540 [ 125.256686][ T6920] [ 125.256686][ T6920] other info that might help us debug this: [ 125.264850][ T6920] Possible unsafe locking scenario: [ 125.264850][ T6920] [ 125.272323][ T6920] CPU0 [ 125.275622][ T6920] ---- [ 125.279178][ T6920] lock(&sb->s_type->i_mutex_key#17); [ 125.284670][ T6920] lock(&sb->s_type->i_mutex_key#17); [ 125.290238][ T6920] [ 125.290238][ T6920] *** DEADLOCK *** [ 125.290238][ T6920] [ 125.298610][ T6920] May be due to missing lock nesting notation [ 125.298610][ T6920] [ 125.307026][ T6920] 3 locks held by syz.0.449/6920: [ 125.312063][ T6920] #0: ffff88802a02e7f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 125.321161][ T6920] #1: ffff888023936428 (sb_writers#11){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 125.330369][ T6920] #2: ffff8880230ac650 (&sb->s_type->i_mutex_key#17){+.+.}-{4:4}, at: bm_entry_write+0x289/0x540 [ 125.341039][ T6920] [ 125.341039][ T6920] stack backtrace: [ 125.347096][ T6920] CPU: 0 UID: 0 PID: 6920 Comm: syz.0.449 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 125.347121][ T6920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.347141][ T6920] Call Trace: [ 125.347149][ T6920] [ 125.347158][ T6920] dump_stack_lvl+0x189/0x250 [ 125.347184][ T6920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.347204][ T6920] ? __pfx__printk+0x10/0x10 [ 125.347225][ T6920] ? print_lock_name+0xde/0x100 [ 125.347246][ T6920] print_deadlock_bug+0x28b/0x2a0 [ 125.347266][ T6920] validate_chain+0x1a3f/0x2140 [ 125.347286][ T6920] ? lockdep_unlock+0x89/0x120 [ 125.347309][ T6920] ? validate_chain+0x897/0x2140 [ 125.347331][ T6920] __lock_acquire+0xab9/0xd20 [ 125.347359][ T6920] ? __simple_recursive_removal+0x95/0x510 [ 125.347380][ T6920] lock_acquire+0x120/0x360 [ 125.347409][ T6920] ? __simple_recursive_removal+0x95/0x510 [ 125.347435][ T6920] down_write+0x96/0x1f0 [ 125.347461][ T6920] ? __simple_recursive_removal+0x95/0x510 [ 125.347481][ T6920] ? __pfx_down_write+0x10/0x10 [ 125.347510][ T6920] __simple_recursive_removal+0x95/0x510 [ 125.347534][ T6920] bm_entry_write+0x4f7/0x540 [ 125.347559][ T6920] ? __pfx_bm_entry_write+0x10/0x10 [ 125.347590][ T6920] ? __pfx_bm_entry_write+0x10/0x10 [ 125.347614][ T6920] vfs_write+0x27e/0xa90 [ 125.347639][ T6920] ? __pfx_vfs_write+0x10/0x10 [ 125.347659][ T6920] ? __fget_files+0x2a/0x420 [ 125.347685][ T6920] ? __fget_files+0x3a0/0x420 [ 125.347708][ T6920] ? __fget_files+0x2a/0x420 [ 125.347735][ T6920] ksys_write+0x145/0x250 [ 125.347756][ T6920] ? __pfx_ksys_write+0x10/0x10 [ 125.347775][ T6920] ? rcu_is_watching+0x15/0xb0 [ 125.347794][ T6920] ? do_syscall_64+0xbe/0x3b0 [ 125.347819][ T6920] do_syscall_64+0xfa/0x3b0 [ 125.347841][ T6920] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.347863][ T6920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.347880][ T6920] ? clear_bhb_loop+0x60/0xb0 [ 125.347899][ T6920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.347916][ T6920] RIP: 0033:0x7f137318e929 [ 125.347942][ T6920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.347957][ T6920] RSP: 002b:00007f1370ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.347976][ T6920] RAX: ffffffffffffffda RBX: 00007f13733b5fa0 RCX: 00007f137318e929 [ 125.347990][ T6920] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000006 [ 125.348001][ T6920] RBP: 00007f1373210b39 R08: 0000000000000000 R09: 0000000000000000 [ 125.348013][ T6920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.348023][ T6920] R13: 0000000000000000 R14: 00007f13733b5fa0 R15: 00007fffc0b5f608 [ 125.348042][ T6920] [ 125.619202][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.646110][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 125.652824][ T5898] usb 4-1: config 0 has no interfaces? [ 125.658932][ T5898] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.668429][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.680823][ T5898] usb 4-1: config 0 descriptor?? [ 125.947255][ T980] usb 4-1: USB disconnect, device number 5 [ 133.078507][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.085036][ T1301] ieee802154 phy1 wpan1: encryption failed: -22