last executing test programs: 8m17.13481445s ago: executing program 32 (id=9): r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x18e}, &(0x7f0000000000), &(0x7f0000000280)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 8m13.258452189s ago: executing program 33 (id=197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000280)={0x1000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000600)) 5m16.447976934s ago: executing program 2 (id=2769): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) 5m15.73844361s ago: executing program 2 (id=2779): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r1, 0x0, 0x4, 0x10}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000340)={0xa1, 0x1, r1, 0x0, 0xfffffffffffffffd, 0x1101}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r1, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000, 0x80}) 5m15.656027077s ago: executing program 2 (id=2780): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) 5m15.622985223s ago: executing program 2 (id=2781): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 5m15.597090245s ago: executing program 2 (id=2782): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="d5"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 5m15.291471196s ago: executing program 2 (id=2786): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0xb92}, 'syz1\x00', 0x53}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 5m15.166165642s ago: executing program 34 (id=2786): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0xb92}, 'syz1\x00', 0x53}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 5m6.394776716s ago: executing program 6 (id=2914): prlimit64(0x0, 0x4, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000000300000060fc030000382c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0x6e) 5m6.303679241s ago: executing program 6 (id=2916): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xd83ba000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r1, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m6.199521405s ago: executing program 6 (id=2918): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m6.052087877s ago: executing program 6 (id=2919): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x2) 5m6.05161762s ago: executing program 6 (id=2920): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x424) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 5m5.832342809s ago: executing program 6 (id=2925): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x10012, r1, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000500)={0x2, 0x8}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0xb}, 0x2) 5m5.689217912s ago: executing program 35 (id=2925): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x10012, r1, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000500)={0x2, 0x8}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0xb}, 0x2) 4m42.856072202s ago: executing program 7 (id=3193): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x20, 0x30, 0x4, "6714b8df"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4m39.824389767s ago: executing program 7 (id=3243): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x3, 0x200, 0x5, 0xf, 0x2, 0xfffff1c8}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x0, 0x8}]}, 0x10) 4m36.779088468s ago: executing program 7 (id=3305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0xa, 0x800000000000000, 0x10, 0x1, 0xf4, 0x1, 0x0, 0x3, 0x7f, 0x4000000000000004, 0x8000, 0x7ff, 0x8396, 0x200, 0x9, 0xf], 0x80a0000, 0xd7c6}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x1, 0x0, @ioapic={0x3000, 0x7ff, 0x9, 0x6, 0x0, [{0x8, 0x80, 0x9, '\x00', 0x4}, {0x0, 0xfe, 0x8, '\x00', 0x65}, {0x4, 0x81, 0x2, '\x00', 0x4}, {0x9, 0x8, 0xa3, '\x00', 0x4}, {0x0, 0xf, 0x9, '\x00', 0x6}, {0x5, 0x56, 0x5}, {0x5, 0x9, 0x7, '\x00', 0xfd}, {0x6, 0x3, 0xf2, '\x00', 0x5}, {0x66, 0x9, 0xad, '\x00', 0xd}, {0x6, 0x9}, {0x8, 0x2, 0xf8, '\x00', 0x4}, {0x8e, 0x9, 0x3, '\x00', 0x10}, {0x6, 0x6, 0x0, '\x00', 0x8}, {0xb0, 0x4, 0xfc, '\x00', 0x7}, {0x0, 0x8, 0x6, '\x00', 0x1}, {0x81, 0x9, 0xc, '\x00', 0x3}, {0x8, 0x9, 0x2, '\x00', 0x2}, {0x9, 0x3, 0x4, '\x00', 0x1}, {0x0, 0x2, 0x7}, {0x9, 0x3, 0x6, '\x00', 0x8}, {0x5, 0x29, 0x2}, {0x5, 0x4, 0x8, '\x00', 0x80}, {0x6, 0x6, 0x1, '\x00', 0x8}, {0x4, 0x81, 0x10, '\x00', 0x6}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m36.673446363s ago: executing program 7 (id=3306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000017c0)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0x800b, 0xe, 0xfffffffc, 0x0, [{0xc, 0x9, 0x8, '\x00', 0xb4}, {0x83, 0x6, 0x4, '\x00', 0x9b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x5}, {0x1, 0x10, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xd, 0x4a, '\x00', 0x9}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x0, 0x9, 0x0, '\x00', 0x8}, {0x0, 0x4, 0x1, '\x00', 0x3}, {0x1, 0x4, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x7, 0x44, 0x0, '\x00', 0xfd}, {0x6, 0x4, 0x4, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x3, 0x2, '\x00', 0x3}, {0x3, 0x1, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x53, '\x00', 0x1}, {0x9, 0x2, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x1, 0xfd, 0x7, '\x00', 0x2}, {0xac, 0x9, 0xfa, '\x00', 0x1}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m36.511574126s ago: executing program 7 (id=3307): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) chdir(&(0x7f00000005c0)='./file0\x00') 4m36.511352946s ago: executing program 7 (id=3308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000900)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m20.74018331s ago: executing program 36 (id=3308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000900)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m57.228803949s ago: executing program 8 (id=3712): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000001c0)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x18, 0x6a, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010101, @broadcast}, "16b9f077"}}, 0x26) 3m57.070789062s ago: executing program 8 (id=3716): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"], 0x10002) 3m56.976159141s ago: executing program 8 (id=3709): setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, {0x2000, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee0000, 0x4000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80}, {0x4, 0x0, 0xa, 0x6, 0xa, 0x0, 0x2}, {0x8080000, 0x3000, 0x4, 0x0, 0x0, 0x1, 0x10, 0xa, 0x26}, {0x80ac000}, {0x8080000}, 0xddf8ffdb, 0x0, 0x0, 0xf0, 0x8, 0x20be551e656a182e, 0x0, [0xe, 0x0, 0x1]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000000c0)) 3m56.820255668s ago: executing program 8 (id=3717): mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fallocate(r0, 0x1, 0x9, 0x81) syz_clone(0x2000000, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 3m56.758026443s ago: executing program 8 (id=3718): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000280)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_usb_connect(0x3, 0x36, 0x0, 0x0) shutdown(r1, 0x0) 3m56.500156214s ago: executing program 8 (id=3720): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 3m56.453453842s ago: executing program 37 (id=3720): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 3m50.725627773s ago: executing program 5 (id=3779): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r1, 0x0, 0x4, 0x10}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000340)={0xa1, 0x1, r1, 0x0, 0xfffffffffffffffd, 0x1101}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r1, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000, 0x80}) 3m50.596807357s ago: executing program 5 (id=3785): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00"], 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 3m49.107957719s ago: executing program 5 (id=3801): prlimit64(0x0, 0x4, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000000300000060fc030000382c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0x6e) 3m49.039513216s ago: executing program 5 (id=3805): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x2) 3m48.915114954s ago: executing program 5 (id=3809): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xd83ba000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r1, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m48.628143253s ago: executing program 5 (id=3818): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m48.516795001s ago: executing program 38 (id=3818): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m37.064634847s ago: executing program 3 (id=3928): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x8, 0x804, 0x7, 0x1, 0xf, 0x5, 0x0, 0x4000008, 0x7ffffffffffffffd, 0x2, 0x0, 0x8, 0x3, 0x4003], 0x4, 0x100b86}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{0x8000000, 0xeeef0000, 0x0, 0x1, 0x10, 0x4c, 0x3a, 0x1, 0x7, 0x6, 0x3, 0x7}, {0x3000, 0x4000, 0xc, 0x81, 0xf8, 0x80, 0x7, 0x6, 0x2, 0x8, 0x3, 0x8}, {0x1, 0xeeef0000, 0x8, 0xdb, 0x9, 0x0, 0x6, 0x4, 0x9, 0xaf, 0xbc, 0x9}, {0x10000, 0xd000, 0x9, 0xe, 0xfc, 0x3, 0x0, 0x5, 0x7, 0x9, 0x9, 0xd0}, {0x6000, 0x1000, 0xa, 0x0, 0x5, 0x6, 0x81, 0x2, 0x9, 0x3, 0x9, 0xfe}, {0xe6eed003, 0x80a0000, 0x0, 0x4, 0xc, 0x5, 0x8, 0x7, 0x77, 0x3, 0xd, 0x3}, {0xd000, 0xd000, 0xc, 0xf, 0xe, 0x3, 0x7, 0x69, 0x3, 0x1, 0x4, 0x64}, {0x3000, 0x8080000, 0x10, 0x9, 0x3, 0x1, 0xfa, 0x5, 0x0, 0x7, 0xff, 0x6}, {0xeeee0000, 0xd12}, {0x0, 0x6}, 0x20050025, 0x0, 0x1000, 0x6001, 0xb, 0x401, 0x10000, [0x200, 0x8, 0x2, 0xfffffffffffffffc]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) 3m36.94466808s ago: executing program 3 (id=3934): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1c0) getdents(r0, &(0x7f0000000140)=""/30, 0x1e) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) getdents64(r0, &(0x7f0000000280)=""/100, 0x64) 3m36.871710793s ago: executing program 3 (id=3935): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000840)={0x28, 0x2, r1, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffefffffa, 0x3fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r1, 0x0, &(0x7f0000002000/0x4000)=nil, 0x4000, 0xf3}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000000780)="70ee", 0x2, 0xfffffffffffffff7}) 3m36.792019602s ago: executing program 3 (id=3938): sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x33}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010000}, 0x4040001) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001"], 0x7a) 3m36.644271219s ago: executing program 3 (id=3942): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) chdir(&(0x7f00000005c0)='./file0\x00') 3m36.575536748s ago: executing program 3 (id=3944): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 3m21.39744869s ago: executing program 39 (id=3944): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 3m16.589798615s ago: executing program 0 (id=4117): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a38d", 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000300)={0x8, [[0x9, 0xfffffff7, 0x80000001, 0x2, 0xb76d, 0x0, 0x3, 0x2], [0x2, 0x4, 0x6, 0x1, 0x1, 0x5, 0x7, 0x7], [0xed, 0x9, 0x9, 0x0, 0x6, 0x3, 0x200, 0x3]], '\x00', [{0x41c, 0x1b7, 0x0, 0x0, 0x1, 0x1}, {0xa9, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x7ff, 0xffffffff, 0x1}, {0xe, 0x7, 0x1, 0x0, 0x1}, {0x10, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x0, 0x1, 0x0, 0x1}, {0xd, 0xb}, {0x1, 0x1, 0x1, 0x1}, {0x2, 0x7, 0x0, 0x1, 0x1}, {0x7fff, 0x3, 0x1, 0x1, 0x1}, {0x4, 0x6, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x10001}) 3m16.478908165s ago: executing program 0 (id=4121): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a504033007c8d1b93c010902120011000200000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3m16.213256396s ago: executing program 9 (id=4133): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c80)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x4085) read$FUSE(r0, &(0x7f0000003000)={0x2020}, 0x2020) recvfrom$inet(r0, &(0x7f0000000180)=""/37, 0x25, 0x0, 0x0, 0xff04) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001240)="668546927ae520a8f3049a2f50ca1553a5e62dc469b5b2348ffe35a76a94a3ad96f8e87e3bd8a5c3c8ce4da39c468ccfb81bc03e88c8a813e9ce7cb1410024b82b58364f6dc5fbf35e04c17ccb4c793d5578c99cf2e1fe30481bb07c86c6806ad25840494578c1516bc6d6e1942cc9f6d3b5491d949c4b93d7a403ca75cb7bc8fea7d325645cbe4c87da88e362c3ae3206fe2d3d88d62500c4f5ccbc1af04079cc5d49c05f487f40ed97703cf5f46cc9d074e5a8811d3e43b5b4f6456c508e0695433ea9f6", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001800)="db", 0x1}], 0x1}}], 0x2, 0x0) 3m15.290817887s ago: executing program 9 (id=4130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'wg2\x00', 0x400}) close(r1) socket$kcm(0x2, 0x922000000001, 0x106) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 3m13.637120587s ago: executing program 0 (id=4135): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000340)="6611e37a075bcebd5f9bae1f62784873ef32462bd5958374026903ec2f265870895690343d01549e4dd779f93d628daffb", 0x31}], 0x1, 0x4, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x1, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x422f, 0x0, 0x81, 0x9c1, 0x8004, 0x5, 0x800, 0x4db6, 0x10, 0x5], 0x8080000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0xfffffffd, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0x3, 0x4a}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m13.235379155s ago: executing program 4 (id=4138): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={0xfffffff8, 0x0, 0x0, 0x7ff, 0x0, "0000005f9ed6280000000000edfc001900"}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x578}], 0x1) 3m13.141682675s ago: executing program 1 (id=4139): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r2, 0x800, 0x2703d26, 0x25dfdbff, {{}, {@void, @void, @void}}}, 0x14}}, 0x4044057) 3m13.077151392s ago: executing program 4 (id=4140): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000008c0)=""/150, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/76, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeeee0000}) 3m12.964775844s ago: executing program 1 (id=4141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000240)=0x4, 0x4) 3m12.867110719s ago: executing program 1 (id=4142): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c80)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x4085) read$FUSE(r0, &(0x7f0000003000)={0x2020}, 0x2020) recvfrom$inet(r0, &(0x7f0000000180)=""/37, 0x25, 0x0, 0x0, 0xff04) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001240)="668546927ae520a8f3049a2f50ca1553a5e62dc469b5b2348ffe35a76a94a3ad96f8e87e3bd8a5c3c8ce4da39c468ccfb81bc03e88c8a813e9ce7cb1410024b82b58364f6dc5fbf35e04c17ccb4c793d5578c99cf2e1fe30481bb07c86c6806ad25840494578c1516bc6d6e1942cc9f6d3b5491d949c4b93d7a403ca75cb7bc8fea7d325645cbe4c87da88e362c3ae3206fe2d3d88d62500c4f5ccbc1af04079cc5d49c05f487f40ed97703cf5f46cc9d074e5a8811d3e43b5b4f6456c508e0695433ea9f6", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001800)="db", 0x1}], 0x1}}], 0x2, 0x0) 3m12.846838023s ago: executing program 4 (id=4143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b8020000000f23d80f21f835000000300f23f8b9800000c00f3235008000000f30f20f5f48540f01c20f01b700300000c4e3514170d3316766f30f0966b8d6000f00d8660f38829c3f432b00000fc7bc3d00000000", 0x55}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m12.789052837s ago: executing program 4 (id=4144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd00000a0000008d40000064c80f590064110000000000000000000000000000000000ff020000e3ff000000000000000000014e244e22006490"], 0x9a) 3m12.405598595s ago: executing program 4 (id=4145): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 3m12.28719725s ago: executing program 0 (id=4146): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x68, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xeeee0000, 0xb, 0xfefffffb, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x7, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x8, 0xd, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x0, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x16, '\x00', 0x5}, {0x1, 0x9, 0x15, '\x00', 0x8}, {0x0, 0x3, 0x9b, '\x00', 0x7}, {0x1, 0xca, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x8, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x2, 0x4, '\x00', 0xff}, {0xf, 0x41, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x6}, {0xd, 0x40, 0x7, '\x00', 0x4}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x5, 0x6, 0xfa, '\x00', 0x40}]}}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000007c0)={{0x1, 0x0, 0x80, {0x5000, 0xdddd1000}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m10.916154823s ago: executing program 9 (id=4147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r5, @ANYBLOB="0a00340001010101010100000400d0000500190107000100050019010f00000005001801350000000800a0000100000008002600fd160000080026006c0900"], 0x74}}, 0x0) 3m10.915314132s ago: executing program 1 (id=4155): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1d, r1, 0x0, {0x2, 0xff, 0x3}, 0xfe}, 0x18, &(0x7f0000000200)={&(0x7f0000000440)="fd98a2b5d26c75348f", 0x9}, 0x1, 0x0, 0x0, 0x40805}, 0x24000005) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000001680)={&(0x7f0000000000)={0x1d, r3, 0x0, {0x1, 0xfe, 0x3}}, 0x18, &(0x7f0000001880)={&(0x7f0000000440)="fd98a2b5d26c75348f", 0x9}}, 0x15) 3m10.585630508s ago: executing program 9 (id=4148): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x4, 0x0, 0x717e387b, 0x40, "1ae34e06a6ffffff7f0000000040794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)) 3m9.628884391s ago: executing program 0 (id=4149): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={0xfffffff8, 0x0, 0x0, 0x7ff, 0x0, "0000005f9ed6280000000000edfc001900"}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x578}], 0x1) 3m9.626702003s ago: executing program 1 (id=4158): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4140aecd, 0x0) ptrace(0x10, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3m9.325925412s ago: executing program 9 (id=4150): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r2, 0x800, 0x2703d26, 0x25dfdbff, {{}, {@void, @void, @void}}}, 0x14}}, 0x4044057) 3m9.290142243s ago: executing program 0 (id=4151): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000240)=0x4, 0x4) 3m6.952379309s ago: executing program 1 (id=4152): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000008c0)=""/150, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/76, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeeee0000}) 3m6.728022275s ago: executing program 4 (id=4162): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) 3m0.017782312s ago: executing program 9 (id=4153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd00000a0000008d40000064c80f590064110000000000000000000000000000000000ff020000e3ff000000000000000000014e244e22006490"], 0x9a) 2m47.583994102s ago: executing program 40 (id=4151): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000240)=0x4, 0x4) 0s ago: executing program 41 (id=4152): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000008c0)=""/150, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/76, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeeee0000}) kernel console output (not intermixed with test programs): 246.702687][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.710824][ T5906] usb 3-1: Product: syz [ 246.715049][ T5906] usb 3-1: Manufacturer: syz [ 246.719683][ T5906] usb 3-1: SerialNumber: syz [ 246.726484][ T5906] usb 3-1: config 0 descriptor?? [ 246.733487][ T5906] smsc75xx v1.0.0 [ 247.142357][ T5892] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 247.153841][ T5892] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 247.164511][ T5892] asix 6-1:0.251: probe with driver asix failed with error -71 [ 247.174955][ T5892] usb 6-1: USB disconnect, device number 32 [ 247.340023][ T5906] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 247.351219][ T5906] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 247.763617][ T5906] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 247.775157][ T5906] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 247.784921][ T5906] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 247.794550][ T5906] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 247.804744][ T5906] usb 3-1: USB disconnect, device number 34 [ 248.390213][T12732] overlayfs: failed to clone upperpath [ 248.672918][ T6141] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 248.719442][T12756] kvm: kvm [12755]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 248.838515][ T6141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.849608][ T6141] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 248.859332][ T6141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.870654][ T6141] usb 3-1: config 0 descriptor?? [ 249.029793][T12765] input: syz0 as /devices/virtual/input/input21 [ 249.081626][ T6141] usbhid 3-1:0.0: can't add hid device: -71 [ 249.091584][ T6141] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 249.103242][ T6141] usb 3-1: USB disconnect, device number 35 [ 249.522628][ T6141] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 249.672649][ T6141] usb 3-1: Using ep0 maxpacket: 32 [ 249.679676][ T6141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.690735][ T6141] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 249.699898][ T6141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.712849][ T6141] usb 3-1: config 0 descriptor?? [ 249.719855][ T6141] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 249.730054][ T6141] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 249.942106][ C1] ldusb 3-1:0.0: Ring buffer overflow, 8 bytes dropped [ 250.273468][ C0] ldusb 3-1:0.0: Ring buffer overflow, 8 bytes dropped [ 251.444314][ T5892] usb 3-1: USB disconnect, device number 36 [ 251.452352][ T5892] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 251.513722][T12775] syzkaller1: entered promiscuous mode [ 251.522323][T12775] syzkaller1: entered allmulticast mode [ 252.233469][ T5906] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 252.278809][T12805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.409575][ T5906] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 252.417655][ T5906] usb 6-1: can't read configurations, error -71 [ 252.947783][T12815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.142713][ T981] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 253.292639][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 253.298997][ T981] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 253.307295][ T981] usb 3-1: config 0 has no interface number 0 [ 253.313490][ T981] usb 3-1: config 0 interface 184 has no altsetting 0 [ 253.322168][ T981] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 253.331484][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.348252][ T981] usb 3-1: Product: syz [ 253.352473][ T981] usb 3-1: Manufacturer: syz [ 253.357177][ T981] usb 3-1: SerialNumber: syz [ 253.363917][ T981] usb 3-1: config 0 descriptor?? [ 253.374466][ T981] smsc75xx v1.0.0 [ 253.378144][ T981] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 253.389456][ T981] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 253.792590][ T5906] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 253.943945][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 253.954379][ T5906] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 253.962939][ T5906] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.974266][ T5906] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 253.984132][ T5906] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 253.994270][ T5906] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.007395][ T5906] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 254.016864][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.231274][ T5906] usb 6-1: GET_CAPABILITIES returned 0 [ 254.237129][ T5906] usbtmc 6-1:16.0: can't read capabilities [ 254.493034][ T981] usb 6-1: USB disconnect, device number 35 [ 254.499804][T12829] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 255.243002][T12843] netlink: 'syz.1.2619': attribute type 33 has an invalid length. [ 255.244558][T12844] 9pnet: p9_errstr2errno: server reported unknown error 5¦- æuKáD©Ÿ’Ê“#õE‘Yl oÄÞ›‰#ö&[Ø1³Ü [ 255.250964][T12843] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2619'. [ 255.351428][T12850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.855049][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.861479][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.909584][ T981] usb 3-1: USB disconnect, device number 37 [ 255.945281][T12857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.252713][ T981] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 256.332731][ T5906] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 256.412922][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 256.419352][ T981] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 256.427640][ T981] usb 3-1: config 0 has no interface number 0 [ 256.435642][ T981] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 256.444848][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.452946][ T981] usb 3-1: Product: syz [ 256.457143][ T981] usb 3-1: Manufacturer: syz [ 256.461741][ T981] usb 3-1: SerialNumber: syz [ 256.473947][ T981] usb 3-1: config 0 descriptor?? [ 256.484950][ T981] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 256.503639][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 256.515527][ T5906] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 256.530055][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.538710][ T5906] usb 6-1: Product: syz [ 256.544927][ T5906] usb 6-1: Manufacturer: syz [ 256.549558][ T5906] usb 6-1: SerialNumber: syz [ 256.556218][ T5906] usb 6-1: config 0 descriptor?? [ 256.688733][ T981] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 256.700909][ T981] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 256.968961][ T5906] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 256.978387][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 256.988426][ T5906] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 256.996470][ T5906] usb 6-1: media controller created [ 257.010959][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.106465][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 257.114439][ T5892] usb 3-1: USB disconnect, device number 38 [ 257.122189][ T5892] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 257.136953][ T5892] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 257.148785][ T5892] quatech2 3-1:0.51: device disconnected [ 257.562714][ T5906] zl10353_read_register: readreg error (reg=127, ret==0) [ 257.562729][T12861] dtv5100: wlen = 0, aborting. [ 257.574857][ T5906] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 257.582946][ T5906] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 257.593634][ T5906] usb 6-1: USB disconnect, device number 36 [ 257.619726][ T5906] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 257.676374][T12870] netlink: 'syz.2.2623': attribute type 33 has an invalid length. [ 257.684886][T12870] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2623'. [ 257.734977][T12874] 9pnet: p9_errstr2errno: server reported unknown error 5¦- æuKáD©Ÿ’Ê“#õE‘Yl oÄÞ›‰#ö&[Ø1³Ü [ 257.985666][T12885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.994882][T12885] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 258.053066][T12889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.100769][T12906] netlink: 'syz.5.2636': attribute type 33 has an invalid length. [ 259.109545][T12906] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2636'. [ 259.221441][T12918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.542924][ T5892] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 259.702722][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 259.709429][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.720921][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.731240][ T5892] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 259.741062][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.765546][ T5892] usb 3-1: config 0 descriptor?? [ 259.766281][T12924] syzkaller1: entered promiscuous mode [ 259.779918][T12924] syzkaller1: entered allmulticast mode [ 259.937124][T12934] netlink: 'syz.5.2652': attribute type 33 has an invalid length. [ 259.946321][T12934] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2652'. [ 260.357085][T12946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.622205][T12950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.993011][ T5906] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 261.075874][T12974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.084658][T12974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.146691][ T5906] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 261.155928][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.164365][ T5906] usb 6-1: Product: syz [ 261.168656][ T5906] usb 6-1: Manufacturer: syz [ 261.173337][ T5906] usb 6-1: SerialNumber: syz [ 261.179435][ T5906] usb 6-1: config 0 descriptor?? [ 261.525893][T12983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.589525][ T5906] usb 6-1: Firmware: major: 130, minor: 0, hardware type: ATUSB (0) [ 261.791685][ T5906] usb 6-1: no permanent extended address found, random address set [ 261.840679][T12997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.850211][T12997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.014603][ T5906] usb 6-1: USB disconnect, device number 37 [ 262.539254][T13021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.590732][T13023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.599644][T13023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.610825][T13023] syz.2.2690 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 263.330470][T13043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.339434][T13043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.835467][T13057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.914190][T13061] pim6reg1: entered promiscuous mode [ 263.919786][T13061] pim6reg1: entered allmulticast mode [ 264.172833][T13076] input: syz1 as /devices/virtual/input/input22 [ 264.422616][ T981] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 264.423216][T13086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.578365][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.615026][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.628035][ T981] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 264.637875][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.663753][ T981] usb 6-1: config 0 descriptor?? [ 264.813901][ T5892] usbhid 3-1:0.0: can't add hid device: -32 [ 264.820059][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 265.090530][ T981] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 265.890713][ T981] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device [ 265.898293][ T981] pyra 0003:1E7D:2CF6.000D: couldn't install mouse [ 265.906075][ T981] pyra 0003:1E7D:2CF6.000D: probe with driver pyra failed with error -71 [ 265.916634][ T981] usb 6-1: USB disconnect, device number 38 [ 266.025185][T13147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.069121][T13148] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2739'. [ 266.762747][ T5899] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 266.912560][ T5899] usb 6-1: Using ep0 maxpacket: 32 [ 266.920458][ T5899] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 266.930383][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.938474][ T5899] usb 6-1: Product: syz [ 266.942771][ T5899] usb 6-1: Manufacturer: syz [ 266.947412][ T5899] usb 6-1: SerialNumber: syz [ 266.953617][ T5899] usb 6-1: config 0 descriptor?? [ 267.564639][ T5899] peak_usb 6-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 267.574792][ T5899] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 267.581621][ T5899] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 267.633306][ T5899] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 267.767228][ T5899] usb 6-1: USB disconnect, device number 39 [ 268.297966][T13179] binder: 13178:13179 ioctl c0306201 200000000640 returned -22 [ 268.347112][T13186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.358206][T13186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.385594][T13188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.574614][T13186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.584353][T13186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.913846][ T981] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 269.074051][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.084999][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.095073][ T981] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 269.104487][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.114807][ T981] usb 6-1: config 0 descriptor?? [ 269.129817][T13210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.138988][T13210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.568966][T13227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.875945][T13233] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.091291][ T6141] usb 3-1: USB disconnect, device number 39 [ 270.331251][ T981] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #100: -71 [ 270.349595][ T981] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71 [ 270.358923][ T981] uclogic 0003:256C:006D.000E: failed probing pen v1 parameters: -71 [ 270.368486][ T981] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 270.376829][ T981] uclogic 0003:256C:006D.000E: probe with driver uclogic failed with error -71 [ 270.393228][ T981] usb 6-1: USB disconnect, device number 40 [ 270.567217][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.575163][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.582653][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.590547][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.598212][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.622243][T13251] lo speed is unknown, defaulting to 1000 [ 270.628963][T13251] lo speed is unknown, defaulting to 1000 [ 270.699315][T13251] chnl_net:caif_netlink_parms(): no params data found [ 270.769681][T13251] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.778332][T13251] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.788605][T13251] bridge_slave_0: entered allmulticast mode [ 270.796556][T13251] bridge_slave_0: entered promiscuous mode [ 270.806186][T13251] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.813010][T13264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.814027][T13251] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.830360][T13251] bridge_slave_1: entered allmulticast mode [ 270.838601][T13251] bridge_slave_1: entered promiscuous mode [ 270.870737][T13251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.882322][T13251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.909508][T13251] team0: Port device team_slave_0 added [ 270.916703][T13251] team0: Port device team_slave_1 added [ 270.934510][T13251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.941475][T13251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.968198][T13251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.980149][T13251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.987154][T13251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.013947][T13251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.048260][T13251] hsr_slave_0: entered promiscuous mode [ 271.054870][T13251] hsr_slave_1: entered promiscuous mode [ 271.061718][T13251] debugfs: 'hsr0' already exists in 'hsr' [ 271.067604][T13251] Cannot create hsr debugfs directory [ 271.200177][T13251] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 271.214737][T13251] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 271.237898][T13251] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 271.248957][T13251] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 271.348905][T13251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.364214][T13251] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.377570][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.384808][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.398853][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.406030][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.606044][T13251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.782870][T13312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.847485][T13251] veth0_vlan: entered promiscuous mode [ 271.858117][T13251] veth1_vlan: entered promiscuous mode [ 271.877866][T13251] veth0_macvtap: entered promiscuous mode [ 271.886532][T13251] veth1_macvtap: entered promiscuous mode [ 271.898955][T13251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.911705][T13251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.925550][ T42] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.935278][ T42] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.948845][ T42] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.958344][ T42] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.990704][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.004713][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.024165][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.032013][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.476090][T13341] syzkaller1: entered promiscuous mode [ 272.499727][T13341] syzkaller1: entered allmulticast mode [ 272.654404][ T51] Bluetooth: hci0: command tx timeout [ 272.669711][T13352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.449350][ T1118] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 273.602684][ T981] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 273.752580][ T981] usb 6-1: Using ep0 maxpacket: 32 [ 273.763566][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.774999][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.785254][ T981] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 273.794560][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.805789][ T981] usb 6-1: config 0 descriptor?? [ 273.820986][ T981] hub 6-1:0.0: USB hub found [ 274.021332][ T981] hub 6-1:0.0: 1 port detected [ 274.225448][T13403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.338694][T13414] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 274.649933][ T981] hub 6-1:0.0: activate --> -90 [ 274.732651][ T51] Bluetooth: hci0: command tx timeout [ 275.054258][ T981] usb 6-1-port1: config error [ 275.055736][ T5906] usb 6-1: USB disconnect, device number 41 [ 275.462008][T13446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.662575][ T5906] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 275.813893][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.825152][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.835412][ T5906] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 275.844568][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.858054][ T5906] usb 7-1: config 0 descriptor?? [ 276.013009][ T5899] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 276.182971][ T5899] usb 6-1: Using ep0 maxpacket: 32 [ 276.190747][ T5899] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 276.200391][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.208756][ T5899] usb 6-1: Product: syz [ 276.213188][ T5899] usb 6-1: Manufacturer: syz [ 276.217826][ T5899] usb 6-1: SerialNumber: syz [ 276.225311][ T5899] usb 6-1: config 0 descriptor?? [ 276.232667][ T5899] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 276.812664][ T51] Bluetooth: hci0: command tx timeout [ 276.882133][ T5906] input: HID 256c:006d as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000F/input/input23 [ 276.955231][ T5906] input: HID 256c:006d as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000F/input/input24 [ 276.973207][ T5906] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000F/input/input25 [ 277.023123][ T5906] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000F/input/input26 [ 277.068933][ T5906] uclogic 0003:256C:006D.000F: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 277.113395][ T5906] usb 7-1: USB disconnect, device number 2 [ 277.144153][T13496] fido_id[13496]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 277.238819][ T5899] gspca_stk1135: reg_w 0x7 err -71 [ 277.252734][ T5899] gspca_stk1135: serial bus timeout: status=0x00 [ 277.259435][ T5899] gspca_stk1135: Sensor write failed [ 277.263989][T13501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.266857][ T5899] gspca_stk1135: serial bus timeout: status=0x00 [ 277.280863][ T5899] gspca_stk1135: Sensor write failed [ 277.291574][ T5899] gspca_stk1135: serial bus timeout: status=0x00 [ 277.299018][ T5899] gspca_stk1135: Sensor read failed [ 277.304346][ T5899] gspca_stk1135: serial bus timeout: status=0x00 [ 277.310713][ T5899] gspca_stk1135: Sensor read failed [ 277.315990][ T5899] gspca_stk1135: Detected sensor type unknown (0x0) [ 277.322794][ T5899] gspca_stk1135: serial bus timeout: status=0x00 [ 277.329175][ T5899] gspca_stk1135: Sensor read failed [ 277.334556][ T5899] gspca_stk1135: serial bus timeout: status=0x00 [ 277.340921][ T5899] gspca_stk1135: Sensor read failed [ 277.347872][ T5899] gspca_stk1135: serial bus timeout: status=0x00 [ 277.354511][ T5899] gspca_stk1135: Sensor write failed [ 277.360877][ T5899] gspca_stk1135: serial bus timeout: status=0x00 [ 277.368234][ T5899] gspca_stk1135: Sensor write failed [ 277.375435][ T5899] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 277.389911][ T5899] usb 6-1: USB disconnect, device number 42 [ 277.807405][ T1093] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 278.283511][ T5906] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 278.406677][T13542] overlayfs: failed to clone upperpath [ 278.434324][ T5906] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 278.452719][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.466835][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 278.479940][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 278.504741][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.518054][ T5906] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.527790][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.538404][ T5906] usb 6-1: config 0 descriptor?? [ 278.550776][T13533] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 278.571933][T13547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.892684][ T51] Bluetooth: hci0: command tx timeout [ 278.966280][ T5906] plantronics 0003:047F:FFFF.0010: reserved main item tag 0xd [ 278.981637][ T5906] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 279.225033][ T5866] usb 6-1: USB disconnect, device number 43 [ 279.616819][T13592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.794479][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.819540][T13598] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode [ 279.846135][T13598] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode [ 279.865425][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.961128][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.961535][T13603] kvm: Disabled LAPIC found during irq injection [ 280.019252][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.101482][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.109041][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.116505][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.127184][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.135065][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.201296][ T36] bridge_slave_1: left allmulticast mode [ 280.207370][ T36] bridge_slave_1: left promiscuous mode [ 280.213224][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.222751][ T36] bridge_slave_0: left allmulticast mode [ 280.228482][ T36] bridge_slave_0: left promiscuous mode [ 280.234876][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.352752][ T5906] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 280.369807][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.382373][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.392176][ T36] bond0 (unregistering): Released all slaves [ 280.405352][T13608] lo speed is unknown, defaulting to 1000 [ 280.411913][T13608] lo speed is unknown, defaulting to 1000 [ 280.505639][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 280.521258][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 280.544779][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 280.572286][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 280.590899][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 280.606720][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 280.628932][ T5906] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 280.649309][ T36] hsr_slave_0: left promiscuous mode [ 280.655135][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.665103][ T5906] usb 6-1: Product: syz [ 280.669376][ T36] hsr_slave_1: left promiscuous mode [ 280.676423][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.684205][ T5906] usb 6-1: Manufacturer: syz [ 280.688971][ T5906] usb 6-1: SerialNumber: syz [ 280.693766][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.710460][ T5906] usb 6-1: config 0 descriptor?? [ 280.718065][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.726205][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.745611][ T36] veth1_macvtap: left promiscuous mode [ 280.751372][ T36] veth0_macvtap: left promiscuous mode [ 280.762318][ T36] veth1_vlan: left promiscuous mode [ 280.768297][ T36] veth0_vlan: left promiscuous mode [ 280.913665][ T36] team0 (unregistering): Port device team_slave_1 removed [ 280.926886][ T36] team0 (unregistering): Port device team_slave_0 removed [ 281.001333][T13608] chnl_net:caif_netlink_parms(): no params data found [ 281.069483][T13608] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.076775][T13608] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.084560][T13608] bridge_slave_0: entered allmulticast mode [ 281.091388][T13608] bridge_slave_0: entered promiscuous mode [ 281.100170][T13608] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.109623][T13608] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.117591][T13608] bridge_slave_1: entered allmulticast mode [ 281.127425][T13608] bridge_slave_1: entered promiscuous mode [ 281.138862][ T5906] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 281.153066][ T5906] input input28: Device does not respond to id packet M [ 281.173295][ T5906] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 281.179355][ T5906] input input28: Device does not respond to id packet P [ 281.189567][T13608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.200217][ T5906] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 281.210799][T13608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.220084][ T5906] input input28: Device does not respond to id packet B [ 281.249966][T13608] team0: Port device team_slave_0 added [ 281.259412][T13608] team0: Port device team_slave_1 added [ 281.294162][T13608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.301219][T13608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.329216][T13608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.343609][T13608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.350577][T13608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.376880][T13608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.435253][ T5906] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 281.438465][T13608] hsr_slave_0: entered promiscuous mode [ 281.448068][ T5906] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 281.448253][T13608] hsr_slave_1: entered promiscuous mode [ 281.463443][T13608] debugfs: 'hsr0' already exists in 'hsr' [ 281.469204][T13608] Cannot create hsr debugfs directory [ 281.472673][ T5906] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 281.492683][ T5906] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 281.510329][ T5906] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input28 [ 281.531604][ T5906] usb 6-1: USB disconnect, device number 44 [ 281.657462][T13608] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 281.668790][T13608] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 281.678472][T13608] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 281.688575][T13608] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 281.764933][T13608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.791057][T13608] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.804526][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.811684][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.831438][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.838695][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.058805][T13608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.172633][ T5872] Bluetooth: hci0: command tx timeout [ 282.274075][T13608] veth0_vlan: entered promiscuous mode [ 282.287656][T13608] veth1_vlan: entered promiscuous mode [ 282.320132][T13608] veth0_macvtap: entered promiscuous mode [ 282.329904][T13608] veth1_macvtap: entered promiscuous mode [ 282.353225][T13608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.364266][T13608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.384151][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.398530][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.417360][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.431478][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.469456][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.481971][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.501918][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.510994][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.846485][T13720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.229587][T13740] Invalid/unusable pipe [ 283.596030][T13760] Invalid/unusable pipe [ 283.639508][T13763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.052687][ T5899] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 284.210359][ T5899] usb 6-1: config 0 has an invalid interface number: 93 but max is 0 [ 284.219751][ T5899] usb 6-1: config 0 has no interface number 0 [ 284.235714][ T5899] usb 6-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 284.245441][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 284.253861][ T5899] usb 6-1: Product: syz [ 284.258195][ T5899] usb 6-1: Manufacturer: syz [ 284.263401][ T5872] Bluetooth: hci0: command tx timeout [ 284.265417][ T5899] usb 6-1: SerialNumber: syz [ 284.281462][ T5899] usb 6-1: config 0 descriptor?? [ 284.495456][ T5899] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 284.506316][ T5899] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 284.515204][ T5899] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 284.524077][ T5899] usb 6-1: media controller created [ 284.531079][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.565181][ T5899] DVB: Unable to find symbol dib7000p_attach() [ 284.571533][ T5899] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 284.580703][ T5899] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 284.589601][ T5899] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 284.598852][ T5899] usb 6-1: media controller created [ 284.605290][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.618995][ T5899] dib0700: the master dib7090 has to be initialized first [ 284.626379][ T5899] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 284.686105][ T5899] rc_core: IR keymap rc-dib0700-rc5 not found [ 284.694522][ T5899] Registered IR keymap rc-empty [ 284.700431][ T5899] dvb-usb: could not initialize remote control. [ 284.707077][ T5899] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 284.727574][T13793] overlayfs: failed to clone upperpath [ 284.786070][T13769] syz.5.2963 (13769): drop_caches: 2 [ 284.807505][ T5899] usb 6-1: USB disconnect, device number 45 [ 284.822764][ T5899] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 285.407951][T13804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.342884][ T5872] Bluetooth: hci0: command tx timeout [ 286.781916][T13837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.412658][ T5872] Bluetooth: hci0: command tx timeout [ 290.390366][T13857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.939183][T13861] overlayfs: failed to clone upperpath [ 291.201058][T13879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.585833][T13922] overlayfs: failed to clone upperpath [ 292.616111][T13924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.152620][ T5872] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 293.561929][T13961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.236626][T14008] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 294.257769][T14008] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 294.508749][T14034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.554674][T14037] MTD: Couldn't look up '/dev/rnullb0': -15 [ 295.113526][T14082] overlayfs: failed to clone upperpath [ 295.462603][ T1213] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 295.612815][ T1213] usb 6-1: Using ep0 maxpacket: 32 [ 295.620656][ T1213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.632526][ T1213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.642290][ T1213] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 295.652940][ T1213] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.662313][ T1213] usb 6-1: config 0 descriptor?? [ 296.075220][ T1213] ft260 0003:0403:6030.0011: unknown main item tag 0x7 [ 296.138694][T14101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.274837][ T1213] ft260 0003:0403:6030.0011: chip code: 6424 8183 [ 296.475412][ T1213] ft260 0003:0403:6030.0011: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 296.687298][ T1213] ft260 0003:0403:6030.0011: failed to retrieve status: -32, no wakeup [ 296.700280][T14137] overlayfs: failed to clone upperpath [ 296.801287][T14148] overlayfs: failed to clone upperpath [ 296.845846][T14150] overlayfs: failed to clone upperpath [ 296.895608][T14156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.899093][ T1213] ft260 0003:0403:6030.0011: failed to reset I2C controller: -71 [ 296.942050][ T1213] usb 6-1: USB disconnect, device number 46 [ 297.496649][T14170] overlayfs: failed to clone upperpath [ 297.676330][T14184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.872636][ T9] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 298.044409][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.055565][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.065466][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 298.074910][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.094241][ T9] usb 6-1: config 0 descriptor?? [ 298.319605][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 298.330521][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 298.344180][ T9] usb 6-1: USB disconnect, device number 47 [ 298.417513][T14215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.638991][ T30] audit: type=1326 audit(1755670909.608:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.7.3130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b878ebe9 code=0x7ffc0000 [ 298.661915][ T30] audit: type=1326 audit(1755670909.638:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.7.3130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b878ebe9 code=0x7ffc0000 [ 298.685343][ T30] audit: type=1326 audit(1755670909.638:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.7.3130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f01b878ebe9 code=0x7ffc0000 [ 298.712589][ T30] audit: type=1326 audit(1755670909.668:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.7.3130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b878ebe9 code=0x7ffc0000 [ 298.765719][ T30] audit: type=1326 audit(1755670909.668:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.7.3130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b878ebe9 code=0x7ffc0000 [ 298.792656][ T30] audit: type=1326 audit(1755670909.668:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.7.3130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f01b878ebe9 code=0x7ffc0000 [ 298.822557][ T30] audit: type=1326 audit(1755670909.668:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.7.3130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b878ebe9 code=0x7ffc0000 [ 298.866450][ T30] audit: type=1326 audit(1755670909.668:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.7.3130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b878ebe9 code=0x7ffc0000 [ 298.895161][ T30] audit: type=1326 audit(1755670909.668:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.7.3130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f01b878ebe9 code=0x7ffc0000 [ 298.919749][ T30] audit: type=1326 audit(1755670909.678:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14221 comm="syz.7.3130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01b872add9 code=0x7ffc0000 [ 299.294613][T14243] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 299.310170][T14243] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 299.329986][T14243] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 299.342451][T14243] overlayfs: failed to look up (tracing) for ino (-66) [ 299.616309][T14253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.137609][T14278] fuse: root generation should be zero [ 300.337910][T14293] overlayfs: failed to clone upperpath [ 300.410444][T14299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.449420][T14301] overlayfs: failed to clone upperpath [ 300.632675][ T1213] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 300.782593][ T1213] usb 6-1: Using ep0 maxpacket: 8 [ 300.791194][ T1213] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 300.800504][ T1213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.808632][ T1213] usb 6-1: Product: syz [ 300.813294][ T1213] usb 6-1: Manufacturer: syz [ 300.817916][ T1213] usb 6-1: SerialNumber: syz [ 300.824716][ T1213] usb 6-1: config 0 descriptor?? [ 300.831234][ T1213] gspca_main: se401-2.14.0 probing 047d:5003 [ 301.136759][T14325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.234798][ T1213] gspca_se401: ExtraFeatures: 208 [ 301.239883][ T1213] gspca_se401: Too many frame sizes [ 301.436976][ T1213] usb 6-1: USB disconnect, device number 48 [ 302.282744][T14343] overlayfs: failed to clone lowerpath [ 302.321245][T14347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.401194][ T1038] Bluetooth: hci4: Frame reassembly failed (-84) [ 302.862753][T14360] overlayfs: failed to clone upperpath [ 303.048962][T14376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.861717][T14411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.413919][ T5872] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 304.473264][T14429] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3227'. [ 304.832559][ T1213] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 304.975290][T14440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.982680][ T1213] usb 6-1: Using ep0 maxpacket: 16 [ 304.991616][ T1213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.003551][ T1213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.014046][ T1213] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 305.023833][ T1213] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.033344][ T1213] usb 6-1: config 0 descriptor?? [ 305.309004][T14449] overlayfs: failed to clone upperpath [ 305.451126][ T1213] playstation 0003:054C:05C4.0012: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 305.636906][T14463] overlayfs: failed to clone upperpath [ 305.851830][ T1213] playstation 0003:054C:05C4.0012: Invalid byte count transferred, expected 49 got 38 [ 305.861779][ T1213] playstation 0003:054C:05C4.0012: Failed to retrieve DualShock4 firmware info: -22 [ 305.873806][ T1213] playstation 0003:054C:05C4.0012: Failed to get firmware info from DualShock4 [ 305.882908][ T1213] playstation 0003:054C:05C4.0012: HW/FW version data in sysfs will be invalid. [ 306.062812][ T1213] playstation 0003:054C:05C4.0012: Invalid byte count transferred, expected 37 got 3 [ 306.072318][ T1213] playstation 0003:054C:05C4.0012: Retrying DualShock 4 get calibration report (0x02) request [ 306.264266][ T1213] playstation 0003:054C:05C4.0012: Failed to retrieve feature with reportID 2: -71 [ 306.273814][ T1213] playstation 0003:054C:05C4.0012: Retrying DualShock 4 get calibration report (0x02) request [ 306.284590][ T1213] playstation 0003:054C:05C4.0012: Failed to retrieve feature with reportID 2: -71 [ 306.293958][ T1213] playstation 0003:054C:05C4.0012: Failed to retrieve DualShock4 calibration info: -71 [ 306.303662][ T1213] playstation 0003:054C:05C4.0012: Invalid gyro calibration data for axis (3), disabling calibration. [ 306.314694][ T1213] playstation 0003:054C:05C4.0012: Invalid gyro calibration data for axis (4), disabling calibration. [ 306.325757][ T1213] playstation 0003:054C:05C4.0012: Invalid gyro calibration data for axis (5), disabling calibration. [ 306.336874][ T1213] playstation 0003:054C:05C4.0012: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 306.348972][ T1213] playstation 0003:054C:05C4.0012: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 306.360821][ T1213] playstation 0003:054C:05C4.0012: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 306.372606][ T1213] playstation 0003:054C:05C4.0012: Failed to get calibration data from DualShock4 [ 306.381803][ T1213] playstation 0003:054C:05C4.0012: Gyroscope and accelerometer will be inaccurate. [ 306.401950][ T1213] input: HID 054c:05c4 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:05C4.0012/input/input30 [ 306.424299][ T1213] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:05C4.0012/input/input31 [ 306.457508][T14474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.472450][ T1213] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:05C4.0012/input/input32 [ 306.523755][ T1213] playstation 0003:054C:05C4.0012: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 306.539181][ T1213] usb 6-1: USB disconnect, device number 49 [ 307.240151][T14506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.302337][T14510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.308177][T14512] overlayfs: failed to clone upperpath [ 307.532221][T14530] overlayfs: failed to clone upperpath [ 307.590195][T14534] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 307.998569][T14555] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 308.235456][T14570] overlayfs: failed to clone lowerpath [ 308.503259][ T5899] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 308.665791][ T5899] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 308.675617][ T5899] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 308.693875][ T5899] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 308.706514][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.714611][ T5899] usb 6-1: Product: syz [ 308.718799][ T5899] usb 6-1: Manufacturer: syz [ 308.724958][ T5899] usb 6-1: SerialNumber: syz [ 308.731122][ T5899] usb 6-1: config 0 descriptor?? [ 308.740467][T14572] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 308.750675][T14572] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 308.849341][T14606] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 308.948114][T14609] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 308.967649][T14609] kvm: Disabled LAPIC found during irq injection [ 308.968712][T14572] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 308.984294][T14572] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 309.398917][ T5899] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 310.007790][ T5899] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 310.024812][ T5899] dm9601 6-1:0.0 eth13: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 46:51:0f:f8:c0:06 [ 310.044528][ T5899] usb 6-1: USB disconnect, device number 50 [ 310.053875][ T5899] dm9601 6-1:0.0 eth13: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 310.856721][T14677] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 312.052618][ T981] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 312.202582][ T981] usb 6-1: Using ep0 maxpacket: 16 [ 312.210275][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.221637][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.231883][ T981] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 312.241348][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.253197][ T981] usb 6-1: config 0 descriptor?? [ 313.069135][ T981] letsketch 0003:6161:4D15.0013: Device info: ᣠ[ 313.269695][ T981] letsketch 0003:6161:4D15.0013: Device info: à° [ 313.470490][ T981] letsketch 0003:6161:4D15.0013: Device info: æ´…æ¤ä—¼ [ 313.703217][ T981] usb 6-1: Max retries (5) exceeded reading string descriptor 1 [ 313.710969][ T981] letsketch 0003:6161:4D15.0013: probe with driver letsketch failed with error -71 [ 313.723002][ T981] usb 6-1: USB disconnect, device number 51 [ 313.937398][T14771] overlayfs: failed to clone upperpath [ 315.462563][ T5899] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 315.621984][ T5899] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 315.634426][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.638253][T14817] overlayfs: failed to clone upperpath [ 315.645596][ T5899] usb 6-1: config 0 descriptor?? [ 315.658081][ T5899] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 316.870389][ T5899] usb 6-1: USB disconnect, device number 52 [ 317.294828][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.301242][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.529831][T14859] lo speed is unknown, defaulting to 1000 [ 317.546576][T14859] lo speed is unknown, defaulting to 1000 [ 317.661206][T14871] overlayfs: failed to clone upperpath [ 318.012584][ T9] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 318.164776][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 318.175728][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 318.188684][ T9] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 318.197901][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.207565][ T9] usb 6-1: config 0 descriptor?? [ 318.218367][T14884] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 318.439479][T14884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.449635][T14884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.461589][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 318.469779][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 318.480974][ T9] usb 6-1: USB disconnect, device number 53 [ 318.515174][T14909] overlayfs: failed to clone upperpath [ 318.889658][T14919] overlayfs: failed to clone upperpath [ 318.922822][ T5899] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 319.041960][T14931] overlayfs: failed to clone upperpath [ 319.072653][ T5899] usb 6-1: Using ep0 maxpacket: 32 [ 319.088992][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 319.114516][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 319.128441][ T5899] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 319.141843][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.159291][ T5899] usb 6-1: config 0 descriptor?? [ 319.170305][ T5899] hub 6-1:0.0: bad descriptor, ignoring hub [ 319.176342][ T5899] hub 6-1:0.0: probe with driver hub failed with error -5 [ 319.431105][T14957] overlayfs: failed to clone upperpath [ 319.515567][T14963] overlayfs: failed to clone upperpath [ 319.579178][ T5899] betop 0003:20BC:5500.0014: unknown main item tag 0x0 [ 319.589273][ T5899] betop 0003:20BC:5500.0014: unknown main item tag 0x0 [ 319.596413][ T5899] betop 0003:20BC:5500.0014: unknown main item tag 0x0 [ 319.607636][ T5899] betop 0003:20BC:5500.0014: unknown main item tag 0x0 [ 319.614795][ T5899] betop 0003:20BC:5500.0014: unknown main item tag 0x0 [ 319.621878][T14969] tipc: Enabling of bearer rejected, failed to enable media [ 319.624006][ T5899] betop 0003:20BC:5500.0014: hidraw0: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.5-1/input0 [ 319.630376][ T9] IPVS: starting estimator thread 0... [ 319.642572][ T5899] betop 0003:20BC:5500.0014: no inputs found [ 319.752661][T14970] IPVS: using max 42 ests per chain, 100800 per kthread [ 319.943004][ T5906] usb 6-1: USB disconnect, device number 54 [ 320.842587][ T5899] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 320.992647][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 321.000542][ T5899] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 321.008655][ T5899] usb 6-1: config 0 has no interface number 0 [ 321.017801][ T5899] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 321.027376][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.035502][ T5899] usb 6-1: Product: syz [ 321.039694][ T5899] usb 6-1: Manufacturer: syz [ 321.044308][ T5899] usb 6-1: SerialNumber: syz [ 321.049803][ T5899] usb 6-1: config 0 descriptor?? [ 321.056591][ T5899] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 321.298555][T15018] overlayfs: failed to clone upperpath [ 322.469670][ T5899] gspca_spca1528: reg_w err -71 [ 322.476681][ T5899] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 322.486589][ T5899] usb 6-1: USB disconnect, device number 55 [ 325.061044][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.068606][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.076044][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.084204][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.091664][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.115347][T15064] lo speed is unknown, defaulting to 1000 [ 325.121519][T15064] lo speed is unknown, defaulting to 1000 [ 325.189648][T15064] chnl_net:caif_netlink_parms(): no params data found [ 325.235166][T15064] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.242291][T15064] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.249794][T15064] bridge_slave_0: entered allmulticast mode [ 325.257189][T15064] bridge_slave_0: entered promiscuous mode [ 325.266670][ T1118] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.278540][T15064] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.285986][T15064] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.294174][T15064] bridge_slave_1: entered allmulticast mode [ 325.300750][T15064] bridge_slave_1: entered promiscuous mode [ 325.317103][ T1118] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.337253][T15064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.348758][T15064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.374853][ T1118] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.387516][T15064] team0: Port device team_slave_0 added [ 325.394957][T15064] team0: Port device team_slave_1 added [ 325.412042][T15064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.419233][T15064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.445661][T15064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.457600][T15064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.465171][T15064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.491670][T15064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.506523][ T1118] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.536958][T15064] hsr_slave_0: entered promiscuous mode [ 325.543174][T15064] hsr_slave_1: entered promiscuous mode [ 325.549047][T15064] debugfs: 'hsr0' already exists in 'hsr' [ 325.554967][T15064] Cannot create hsr debugfs directory [ 325.648351][ T1118] bridge_slave_1: left allmulticast mode [ 325.654209][ T1118] bridge_slave_1: left promiscuous mode [ 325.659863][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.668559][ T1118] bridge_slave_0: left allmulticast mode [ 325.674428][ T1118] bridge_slave_0: left promiscuous mode [ 325.680087][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.760117][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.770339][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.780512][ T1118] bond0 (unregistering): Released all slaves [ 325.845991][T15064] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 325.858104][T15064] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 325.880059][T15064] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 325.889911][T15064] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 325.990390][ T1118] hsr_slave_0: left promiscuous mode [ 325.996307][ T1118] hsr_slave_1: left promiscuous mode [ 326.002219][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.012129][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.031652][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.039920][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.055451][ T1118] veth1_macvtap: left promiscuous mode [ 326.061009][ T1118] veth0_macvtap: left promiscuous mode [ 326.068648][ T1118] veth1_vlan: left promiscuous mode [ 326.074439][ T1118] veth0_vlan: left promiscuous mode [ 326.235786][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 326.248445][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 326.350109][T15064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.377175][T15064] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.389519][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.396763][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.427967][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.435136][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.644382][T15064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.875599][T15064] veth0_vlan: entered promiscuous mode [ 326.887750][T15064] veth1_vlan: entered promiscuous mode [ 326.920340][T15064] veth0_macvtap: entered promiscuous mode [ 326.932848][T15064] veth1_macvtap: entered promiscuous mode [ 326.954682][T15064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.969827][T15064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.985990][ T42] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.006484][ T42] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.018917][ T42] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.030311][ T42] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.076952][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.091990][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.117375][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.129777][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.132905][ T5872] Bluetooth: hci0: command tx timeout [ 327.435462][ T9] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 327.594038][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 327.606819][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 327.620251][ T9] usb 9-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 327.629663][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.648668][ T9] usb 9-1: config 0 descriptor?? [ 327.654569][T15133] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 327.867718][T15133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.877357][T15133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.888495][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 327.894852][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 327.906037][ T9] usb 9-1: USB disconnect, device number 2 [ 328.332786][ T5906] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 328.492822][ T5906] usb 9-1: Using ep0 maxpacket: 32 [ 328.499831][ T5906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 328.511346][ T5906] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 328.524361][ T5906] usb 9-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 328.533606][ T5906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.543150][ T5906] usb 9-1: config 0 descriptor?? [ 328.550281][ T5906] hub 9-1:0.0: bad descriptor, ignoring hub [ 328.556349][ T5906] hub 9-1:0.0: probe with driver hub failed with error -5 [ 328.954026][ T5906] betop 0003:20BC:5500.0015: unknown main item tag 0x0 [ 328.960974][ T5906] betop 0003:20BC:5500.0015: unknown main item tag 0x0 [ 328.967912][ T5906] betop 0003:20BC:5500.0015: unknown main item tag 0x0 [ 328.975896][ T5906] betop 0003:20BC:5500.0015: unknown main item tag 0x0 [ 328.982833][ T5906] betop 0003:20BC:5500.0015: unknown main item tag 0x0 [ 328.990679][ T5906] betop 0003:20BC:5500.0015: hidraw0: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.8-1/input0 [ 329.002071][ T5906] betop 0003:20BC:5500.0015: no inputs found [ 329.212580][ T5872] Bluetooth: hci0: command tx timeout [ 329.313543][ T9] usb 9-1: USB disconnect, device number 3 [ 330.123243][ T6141] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 330.305379][ T6141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 330.316608][ T6141] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 330.329567][ T6141] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 330.338894][ T6141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.348403][ T6141] usb 6-1: config 0 descriptor?? [ 330.354133][T15165] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 330.432535][ T5892] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 330.568103][T15165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.577021][T15165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.589821][ T6141] usbhid 6-1:0.0: can't add hid device: -71 [ 330.592696][ T5892] usb 9-1: Using ep0 maxpacket: 32 [ 330.595894][ T6141] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 330.610358][ T5892] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 330.611638][ T6141] usb 6-1: USB disconnect, device number 56 [ 330.626770][ T5892] usb 9-1: config 0 has no interface number 0 [ 330.633432][ T5892] usb 9-1: config 0 interface 184 has no altsetting 0 [ 330.641699][ T5892] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 330.651794][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.659944][ T5892] usb 9-1: Product: syz [ 330.664808][ T5892] usb 9-1: Manufacturer: syz [ 330.669412][ T5892] usb 9-1: SerialNumber: syz [ 330.675259][ T5892] usb 9-1: config 0 descriptor?? [ 330.681736][ T5892] smsc75xx v1.0.0 [ 331.042562][ T5906] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 331.202592][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 331.209706][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 331.222379][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 331.235731][ T5906] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 331.244888][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.255156][ T5906] usb 6-1: config 0 descriptor?? [ 331.262116][ T5906] hub 6-1:0.0: bad descriptor, ignoring hub [ 331.268170][ T5906] hub 6-1:0.0: probe with driver hub failed with error -5 [ 331.292585][ T5872] Bluetooth: hci0: command tx timeout [ 331.666375][ T5906] betop 0003:20BC:5500.0016: unknown main item tag 0x0 [ 331.674647][ T5906] betop 0003:20BC:5500.0016: unknown main item tag 0x0 [ 331.681619][ T5906] betop 0003:20BC:5500.0016: unknown main item tag 0x0 [ 331.688647][ T5906] betop 0003:20BC:5500.0016: unknown main item tag 0x0 [ 331.696138][ T5906] betop 0003:20BC:5500.0016: unknown main item tag 0x0 [ 331.704375][ T5906] betop 0003:20BC:5500.0016: hidraw0: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.5-1/input0 [ 331.715486][ T5906] betop 0003:20BC:5500.0016: no inputs found [ 332.024238][ T6141] usb 6-1: USB disconnect, device number 57 [ 332.091053][ T5892] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 332.102753][ T5892] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 332.112438][ T5892] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 332.124274][ T5892] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 332.135453][ T5892] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 332.146734][ T5892] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 332.156430][ T5892] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 332.167431][ T5892] usb 9-1: USB disconnect, device number 4 [ 333.113298][ T5899] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 333.272653][ T5899] usb 9-1: Using ep0 maxpacket: 16 [ 333.279983][ T5899] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 333.288046][ T5899] usb 9-1: config 0 has no interface number 0 [ 333.297221][ T5899] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 333.306662][ T5899] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.314722][ T5899] usb 9-1: Product: syz [ 333.318903][ T5899] usb 9-1: Manufacturer: syz [ 333.323562][ T5899] usb 9-1: SerialNumber: syz [ 333.334763][ T5899] usb 9-1: config 0 descriptor?? [ 333.346993][ T5899] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 333.382575][ T5872] Bluetooth: hci0: command tx timeout [ 334.755820][ T5899] gspca_spca1528: reg_w err -71 [ 334.760769][ T5899] spca1528 9-1:0.1: probe with driver spca1528 failed with error -71 [ 334.773106][ T5899] usb 9-1: USB disconnect, device number 5 [ 335.636138][T15234] kvm: kvm [15233]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 335.651436][T15234] kvm: kvm [15233]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 335.892606][ T6141] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 336.042565][ T6141] usb 9-1: Using ep0 maxpacket: 8 [ 336.048979][ T6141] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 336.060544][ T6141] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 336.069679][ T6141] usb 9-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 336.077934][ T6141] usb 9-1: Product: syz [ 336.082115][ T6141] usb 9-1: Manufacturer: syz [ 336.086828][ T6141] usb 9-1: SerialNumber: syz [ 336.093246][ T6141] usb 9-1: config 0 descriptor?? [ 336.103845][ T6141] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 336.302213][T15268] input: syz0 as /devices/virtual/input/input33 [ 337.121749][ T6141] gspca_zc3xx: reg_w_i err -71 [ 337.712710][ T6141] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 337.719000][ T6141] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 337.731892][ T6141] usb 9-1: USB disconnect, device number 6 [ 338.081828][T15309] kvm: Disabled LAPIC found during irq injection [ 338.752747][ T1213] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 338.916139][ T1213] usb 6-1: Using ep0 maxpacket: 32 [ 338.925191][ T1213] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 338.933546][ T1213] usb 6-1: config 0 has no interface number 0 [ 338.940094][ T1213] usb 6-1: config 0 interface 184 has no altsetting 0 [ 338.949411][ T1213] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 338.958640][ T1213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.968349][ T1213] usb 6-1: Product: syz [ 338.973182][ T1213] usb 6-1: Manufacturer: syz [ 338.977913][ T1213] usb 6-1: SerialNumber: syz [ 338.984989][ T1213] usb 6-1: config 0 descriptor?? [ 338.991374][ T1213] smsc75xx v1.0.0 [ 339.601100][ T1213] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 339.611966][ T1213] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 340.025693][ T1213] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 340.037141][ T1213] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 340.046917][ T1213] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 340.056560][ T1213] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 340.066721][ T1213] usb 6-1: USB disconnect, device number 58 [ 340.731020][T15370] kvm: Disabled LAPIC found during irq injection [ 340.820557][ T1213] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 340.986674][ T1213] usb 6-1: Using ep0 maxpacket: 32 [ 341.001120][ T1213] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 341.013338][ T1213] usb 6-1: config 0 has no interface number 0 [ 341.019463][ T1213] usb 6-1: config 0 interface 184 has no altsetting 0 [ 341.028884][ T1213] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 341.038327][ T1213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.046997][ T1213] usb 6-1: Product: syz [ 341.051264][ T1213] usb 6-1: Manufacturer: syz [ 341.056523][ T1213] usb 6-1: SerialNumber: syz [ 341.068532][ T1213] usb 6-1: config 0 descriptor?? [ 341.078182][ T1213] smsc75xx v1.0.0 [ 341.332779][ T5899] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 341.502635][ T5899] usb 9-1: Using ep0 maxpacket: 32 [ 341.513776][ T5899] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 14385, setting to 1024 [ 341.542634][ T5899] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 341.559223][ T5899] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 341.568962][ T5899] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 341.583417][ T5899] usb 9-1: Product: syz [ 341.587684][ T5899] usb 9-1: Manufacturer: syz [ 341.593791][ T5899] usb 9-1: SerialNumber: syz [ 341.600321][ T5899] usb 9-1: config 0 descriptor?? [ 341.607727][T15381] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 341.836578][ T5899] usb 9-1: USB disconnect, device number 7 [ 342.489978][ T1213] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 342.507150][ T1213] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 342.517780][ T1213] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 342.530261][ T1213] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 342.556499][ T1213] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 342.583807][ T1213] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 342.617481][ T1213] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 342.637594][ T1213] usb 6-1: USB disconnect, device number 59 [ 342.941141][T15444] overlayfs: failed to clone upperpath [ 343.622610][ T1213] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 343.772808][ T1213] usb 6-1: Using ep0 maxpacket: 8 [ 343.779719][T15478] overlayfs: failed to clone lowerpath [ 343.786643][ T1213] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 343.798247][ T1213] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 343.816087][ T1213] usb 6-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 343.828792][ T1213] usb 6-1: Product: syz [ 343.842564][ T1213] usb 6-1: Manufacturer: syz [ 343.847307][ T1213] usb 6-1: SerialNumber: syz [ 343.858529][ T1213] usb 6-1: config 0 descriptor?? [ 344.078590][ T1213] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 345.295110][ T1213] gspca_sunplus: reg_w_riv err -71 [ 345.300337][ T1213] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 345.331410][ T1213] usb 6-1: USB disconnect, device number 60 [ 345.498992][T15570] overlayfs: failed to clone upperpath [ 345.700581][T15582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.891824][T15614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.906937][T15616] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 346.916865][T15614] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 347.209801][T15633] pim6reg1: entered promiscuous mode [ 347.217559][T15633] pim6reg1: entered allmulticast mode [ 348.123332][T15648] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3692'. [ 348.162196][T15651] overlayfs: failed to clone upperpath [ 348.346566][T15665] overlayfs: failed to clone upperpath [ 348.409828][T15670] syzkaller1: entered promiscuous mode [ 348.415481][T15670] syzkaller1: entered allmulticast mode [ 348.490805][T15677] overlayfs: failed to clone upperpath [ 348.547809][ T30] kauditd_printk_skb: 173 callbacks suppressed [ 348.547830][ T30] audit: type=1326 audit(1755670959.518:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15678 comm="syz.5.3707" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34ca98ebe9 code=0x0 [ 348.589782][T15681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3705'. [ 348.661275][ T30] audit: type=1800 audit(1755670959.628:282): pid=15688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3710" name="nullb0" dev="tmpfs" ino=4212 res=0 errno=0 [ 349.049429][ T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.099691][ T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.159471][ T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.218434][ T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.271020][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.278344][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.287307][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.295372][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.306964][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.346222][ T36] bridge_slave_1: left allmulticast mode [ 349.355611][ T36] bridge_slave_1: left promiscuous mode [ 349.361515][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.370800][ T36] bridge_slave_0: left allmulticast mode [ 349.377541][ T36] bridge_slave_0: left promiscuous mode [ 349.383897][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.559482][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.585950][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.599245][ T36] bond0 (unregistering): Released all slaves [ 349.631064][T15708] lo speed is unknown, defaulting to 1000 [ 349.656601][T15708] lo speed is unknown, defaulting to 1000 [ 349.876865][ T36] hsr_slave_0: left promiscuous mode [ 349.883463][ T36] hsr_slave_1: left promiscuous mode [ 349.889398][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.899363][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.910915][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.923976][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.940885][ T36] veth1_macvtap: left promiscuous mode [ 349.948112][ T36] veth0_macvtap: left promiscuous mode [ 349.954355][ T36] veth1_vlan: left promiscuous mode [ 349.959726][ T36] veth0_vlan: left promiscuous mode [ 350.232101][ T36] team0 (unregistering): Port device team_slave_1 removed [ 350.278990][ T36] team0 (unregistering): Port device team_slave_0 removed [ 350.381752][T15708] chnl_net:caif_netlink_parms(): no params data found [ 350.549445][T15708] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.558661][T15708] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.566221][T15708] bridge_slave_0: entered allmulticast mode [ 350.574127][T15708] bridge_slave_0: entered promiscuous mode [ 350.618003][T15708] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.634615][T15708] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.652694][T15708] bridge_slave_1: entered allmulticast mode [ 350.664210][T15708] bridge_slave_1: entered promiscuous mode [ 350.706042][T15708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.719302][T15708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.763567][T15708] team0: Port device team_slave_0 added [ 350.777055][T15708] team0: Port device team_slave_1 added [ 350.840460][T15708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.849861][T15708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.876716][T15708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.891136][T15708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.916400][T15708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.944693][T15708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.994067][T15708] hsr_slave_0: entered promiscuous mode [ 351.000433][T15708] hsr_slave_1: entered promiscuous mode [ 351.006874][T15708] debugfs: 'hsr0' already exists in 'hsr' [ 351.012850][T15708] Cannot create hsr debugfs directory [ 351.269591][T15708] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 351.335094][T15708] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 351.372944][ T5872] Bluetooth: hci0: command tx timeout [ 351.384041][T15708] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 351.418172][T15708] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 351.622960][T15708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.658623][T15708] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.696755][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.703938][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.738615][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.745811][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.106511][T15708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.405539][ T5872] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 352.575948][T15708] veth0_vlan: entered promiscuous mode [ 352.602881][ T6141] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 352.612345][T15708] veth1_vlan: entered promiscuous mode [ 352.668377][T15708] veth0_macvtap: entered promiscuous mode [ 352.680608][T15708] veth1_macvtap: entered promiscuous mode [ 352.735347][T15708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.769480][T15708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.788887][ T1118] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.807725][ T6141] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 352.819915][ T6141] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 352.822556][ T1118] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.840849][ T6141] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 352.858806][ T6141] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 352.871691][ T6141] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 352.886095][ T1118] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.888473][ T6141] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 352.912881][ T6141] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 352.927087][ T1118] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.929084][ T6141] usb 6-1: Product: syz [ 352.948616][ T6141] usb 6-1: Manufacturer: syz [ 352.965654][ T6141] cdc_wdm 6-1:1.0: skipping garbage [ 352.970929][ T6141] cdc_wdm 6-1:1.0: skipping garbage [ 353.007565][ T6141] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 353.023265][ T6141] cdc_wdm 6-1:1.0: Unknown control protocol [ 353.048991][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.083006][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.106406][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.115639][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.183634][ C1] cdc_wdm 6-1:1.0: unknown notification 47 received: index 25964 len 48 [ 353.403306][ T1213] usb 6-1: USB disconnect, device number 61 [ 353.453888][ T5872] Bluetooth: hci0: command tx timeout [ 353.682536][ T5899] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 353.855515][ T5899] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.866849][ T5899] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.876774][ T5899] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 353.885954][ T5899] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.896847][ T5899] usb 10-1: config 0 descriptor?? [ 354.117641][ T5899] usbhid 10-1:0.0: can't add hid device: -71 [ 354.123807][ T5899] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 354.136484][ T5899] usb 10-1: USB disconnect, device number 2 [ 354.933258][T15951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.272543][ T5866] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 355.424195][ T5866] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.452593][ T5866] usb 6-1: config 0 has no interfaces? [ 355.458148][ T5866] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 355.482515][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.498252][ T5866] usb 6-1: config 0 descriptor?? [ 355.533363][ T5872] Bluetooth: hci0: command tx timeout [ 355.938022][T15959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.949388][T15959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.960967][ T5866] usb 6-1: USB disconnect, device number 62 [ 356.752343][T10854] syz_tun (unregistering): left allmulticast mode [ 356.949235][ T42] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.031759][ T42] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.106681][ T42] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.180390][ T42] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.332177][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.348619][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.356041][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.364572][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.372200][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.394055][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.404926][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.414825][ T42] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 357.426548][ T42] bond0 (unregistering): Released all slaves [ 357.455683][T16047] lo speed is unknown, defaulting to 1000 [ 357.462373][T16047] lo speed is unknown, defaulting to 1000 [ 357.469287][ T42] tipc: Disabling bearer [ 357.476184][ T42] tipc: Left network mode [ 357.622135][ T51] Bluetooth: hci0: command tx timeout [ 357.742669][ T42] hsr_slave_0: left promiscuous mode [ 357.769103][ T42] hsr_slave_1: left promiscuous mode [ 357.793410][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.816686][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.831151][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.848810][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.867984][ T42] veth1_macvtap: left promiscuous mode [ 357.875221][ T42] veth0_macvtap: left promiscuous mode [ 357.880942][ T42] veth0_vlan: left promiscuous mode [ 357.988019][ T42] pimreg (unregistering): left allmulticast mode [ 358.044666][T16084] overlayfs: failed to clone upperpath [ 358.146690][ T42] team0 (unregistering): Port device team_slave_1 removed [ 358.168258][ T42] team0 (unregistering): Port device team_slave_0 removed [ 358.228445][T16092] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 358.281988][T16070] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.295408][T16047] chnl_net:caif_netlink_parms(): no params data found [ 358.361716][T16070] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.417445][T16070] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.421061][T16101] overlayfs: failed to clone upperpath [ 358.458389][T16047] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.466262][T16047] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.473841][T16047] bridge_slave_0: entered allmulticast mode [ 358.481042][T16047] bridge_slave_0: entered promiscuous mode [ 358.490105][T16047] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.497947][T16047] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.505497][T16047] bridge_slave_1: entered allmulticast mode [ 358.512895][T16047] bridge_slave_1: entered promiscuous mode [ 358.568001][T16070] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.667568][T16047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.684025][T16047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.731944][T16047] team0: Port device team_slave_0 added [ 358.738622][ T1093] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.753080][T16047] team0: Port device team_slave_1 added [ 358.772270][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.781234][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.810829][ T1093] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.846238][T16047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.862535][T16047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.902848][ T1213] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 358.916618][T16047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.930674][T16047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.938023][T16047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.964382][T16047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.037527][T16047] hsr_slave_0: entered promiscuous mode [ 359.043961][T16047] hsr_slave_1: entered promiscuous mode [ 359.050157][T16047] debugfs: 'hsr0' already exists in 'hsr' [ 359.058367][T16047] Cannot create hsr debugfs directory [ 359.072515][ T1213] usb 10-1: Using ep0 maxpacket: 32 [ 359.082190][ T1213] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 359.096485][ T1213] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 359.109561][ T1213] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 359.121632][ T1213] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 359.160783][ T1213] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 359.174418][ T1213] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 359.187617][ T1213] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.197082][ T1213] usb 10-1: Product: syz [ 359.201377][ T1213] usb 10-1: Manufacturer: syz [ 359.206361][ T1213] usb 10-1: SerialNumber: syz [ 359.216298][ T1213] usb 10-1: config 0 descriptor?? [ 359.452664][ T51] Bluetooth: hci1: command tx timeout [ 359.485544][T16047] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 359.497847][T16047] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 359.508317][T16047] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 359.521227][T16047] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 359.613329][T16047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.636871][T16047] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.639526][ T1213] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 359.650164][ T1213] input input34: Device does not respond to id packet M [ 359.658090][ T1213] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 359.658661][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.664505][ T1213] input input34: Device does not respond to id packet P [ 359.671282][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.679021][ T1213] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 359.688195][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.698793][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.706365][ T1213] input input34: Device does not respond to id packet B [ 359.910639][T16047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.918520][ T1213] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 359.932868][ T1213] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 359.945837][ T1213] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 359.962962][ T1213] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 359.964918][T16047] veth0_vlan: entered promiscuous mode [ 359.978559][ T1213] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input34 [ 359.983224][T16047] veth1_vlan: entered promiscuous mode [ 360.010062][ T1213] usb 10-1: USB disconnect, device number 3 [ 360.053033][T16047] veth0_macvtap: entered promiscuous mode [ 360.075084][T16047] veth1_macvtap: entered promiscuous mode [ 360.109650][T16047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.134893][T16047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.159589][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.170490][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.180461][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.195304][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.249305][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.276539][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.299228][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.310466][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.446511][T16181] kvm: Disabled LAPIC found during irq injection [ 361.009442][T16214] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.532807][ T51] Bluetooth: hci1: command tx timeout [ 361.778204][T16271] overlayfs: failed to clone upperpath [ 361.942816][ T5892] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 362.042137][T16214] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.112749][ T5892] usb 10-1: Using ep0 maxpacket: 32 [ 362.121113][ T5892] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 362.133211][ T5892] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.141322][ T5892] usb 10-1: Product: syz [ 362.151765][ T5892] usb 10-1: Manufacturer: syz [ 362.160825][ T5892] usb 10-1: SerialNumber: syz [ 362.167767][ T5892] usb 10-1: config 0 descriptor?? [ 362.181498][ T5892] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 362.404167][ T51] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 363.200981][ T5892] gspca_stk1135: reg_w 0x7 err -71 [ 363.209740][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 363.219082][ T5892] gspca_stk1135: Sensor write failed [ 363.224716][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 363.231168][ T5892] gspca_stk1135: Sensor write failed [ 363.239524][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 363.246344][ T5892] gspca_stk1135: Sensor read failed [ 363.251606][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 363.263409][ T5892] gspca_stk1135: Sensor read failed [ 363.268825][ T5892] gspca_stk1135: Detected sensor type unknown (0x0) [ 363.277836][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 363.284589][ T5892] gspca_stk1135: Sensor read failed [ 363.290939][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 363.299955][ T5892] gspca_stk1135: Sensor read failed [ 363.306048][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 363.313063][ T5892] gspca_stk1135: Sensor write failed [ 363.318529][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 363.325515][ T5892] gspca_stk1135: Sensor write failed [ 363.331015][ T5892] stk1135 10-1:0.0: probe with driver stk1135 failed with error -71 [ 363.342848][ T5892] usb 10-1: USB disconnect, device number 4 [ 363.358271][T16214] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.398933][T16214] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.476013][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.501191][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.509679][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.524400][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.617820][ T51] Bluetooth: hci1: command tx timeout [ 364.149933][T16401] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.230871][T16401] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.281182][T16401] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.350655][T16401] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.434804][ T6400] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.455149][ T36] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.479153][ T36] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.506119][ T1093] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.599897][ T30] audit: type=1326 audit(1755670975.568:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573058ebe9 code=0x7ffc0000 [ 364.632569][ T30] audit: type=1326 audit(1755670975.598:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f573058ebe9 code=0x7ffc0000 [ 364.664843][ T30] audit: type=1326 audit(1755670975.638:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573058ebe9 code=0x7ffc0000 [ 364.689361][ T30] audit: type=1326 audit(1755670975.638:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573058ebe9 code=0x7ffc0000 [ 364.744184][ T30] audit: type=1326 audit(1755670975.638:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f573058ebe9 code=0x7ffc0000 [ 364.919335][ T30] audit: type=1326 audit(1755670975.638:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573058ebe9 code=0x7ffc0000 [ 364.975845][ T30] audit: type=1326 audit(1755670975.638:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f573058ebe9 code=0x7ffc0000 [ 364.998684][ T30] audit: type=1326 audit(1755670975.688:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f573052add9 code=0x7ffc0000 [ 365.022059][ T30] audit: type=1326 audit(1755670975.688:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573058ebe9 code=0x7ffc0000 [ 365.056221][ T30] audit: type=1326 audit(1755670975.688:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16425 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f573052add9 code=0x7ffc0000 [ 365.645812][T16471] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.696756][T16471] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.706720][ T51] Bluetooth: hci1: command tx timeout [ 365.729129][T16471] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.795684][T16471] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.930301][T16488] overlayfs: failed to clone upperpath [ 366.031027][T16494] overlayfs: failed to clone upperpath [ 367.103639][T16519] overlayfs: failed to clone upperpath [ 367.151852][T16523] overlayfs: failed to clone upperpath [ 368.124707][ T1093] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.151214][ T1093] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.168137][ T1093] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.192991][ T36] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.293453][T16588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.867269][T16629] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 369.177227][T16654] overlayfs: failed to clone upperpath [ 369.184514][T16652] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 371.814978][T16674] overlayfs: failed to clone upperpath [ 371.907073][T16684] overlayfs: failed to clone upperpath [ 372.063589][ T6698] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 372.212701][ T6698] usb 10-1: Using ep0 maxpacket: 16 [ 372.219460][ T6698] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.230619][ T6698] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.240505][ T6698] usb 10-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 372.249667][ T6698] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.259292][ T6698] usb 10-1: config 0 descriptor?? [ 372.565351][T16701] overlayfs: failed to clone upperpath [ 372.687849][ T6698] playstation 0003:054C:05C4.0017: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.9-1/input0 [ 372.750852][T16710] overlayfs: failed to clone upperpath [ 373.085027][ T6698] playstation 0003:054C:05C4.0017: Invalid byte count transferred, expected 49 got 38 [ 373.096911][ T6698] playstation 0003:054C:05C4.0017: Failed to retrieve DualShock4 firmware info: -22 [ 373.106840][ T6698] playstation 0003:054C:05C4.0017: Failed to get firmware info from DualShock4 [ 373.115902][ T6698] playstation 0003:054C:05C4.0017: HW/FW version data in sysfs will be invalid. [ 373.286077][ T6698] playstation 0003:054C:05C4.0017: Invalid byte count transferred, expected 37 got 3 [ 373.295770][ T6698] playstation 0003:054C:05C4.0017: Retrying DualShock 4 get calibration report (0x02) request [ 373.487400][ T6698] playstation 0003:054C:05C4.0017: Failed to retrieve feature with reportID 2: -71 [ 373.498489][ T6698] playstation 0003:054C:05C4.0017: Retrying DualShock 4 get calibration report (0x02) request [ 373.509084][ T6698] playstation 0003:054C:05C4.0017: Failed to retrieve feature with reportID 2: -71 [ 373.519222][ T6698] playstation 0003:054C:05C4.0017: Failed to retrieve DualShock4 calibration info: -71 [ 373.528956][ T6698] playstation 0003:054C:05C4.0017: Invalid gyro calibration data for axis (3), disabling calibration. [ 373.539982][ T6698] playstation 0003:054C:05C4.0017: Invalid gyro calibration data for axis (4), disabling calibration. [ 373.551014][ T6698] playstation 0003:054C:05C4.0017: Invalid gyro calibration data for axis (5), disabling calibration. [ 373.562000][ T6698] playstation 0003:054C:05C4.0017: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 373.573789][ T6698] playstation 0003:054C:05C4.0017: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 373.585598][ T6698] playstation 0003:054C:05C4.0017: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 373.597663][ T6698] playstation 0003:054C:05C4.0017: Failed to get calibration data from DualShock4 [ 373.607017][ T6698] playstation 0003:054C:05C4.0017: Gyroscope and accelerometer will be inaccurate. [ 373.621002][ T6698] input: HID 054c:05c4 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:054C:05C4.0017/input/input35 [ 373.642601][ T6698] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:054C:05C4.0017/input/input36 [ 373.671392][ T6698] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:054C:05C4.0017/input/input37 [ 373.726341][ T6698] playstation 0003:054C:05C4.0017: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 373.743825][ T6698] usb 10-1: USB disconnect, device number 5 [ 374.684576][T16754] overlayfs: failed to clone upperpath [ 375.262779][ T1213] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 375.414985][ T1213] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.429503][ T1213] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 375.438993][ T1213] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.454870][ T1213] usb 10-1: Product: syz [ 375.465302][ T1213] usb 10-1: Manufacturer: syz [ 375.474549][ T1213] usb 10-1: SerialNumber: syz [ 375.594436][T16811] overlayfs: failed to clone upperpath [ 376.501221][ T1213] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 376.510589][ T1213] cdc_ncm 10-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 376.519884][ T1213] cdc_ncm 10-1:1.0: setting rx_max = 2048 [ 376.909226][ T1213] cdc_ncm 10-1:1.0: setting tx_max = 88 [ 376.928625][ T1213] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 376.947548][ T1213] usb 10-1: USB disconnect, device number 6 [ 376.960159][ T1213] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP) [ 377.882552][ T1213] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 378.042601][ T1213] usb 10-1: Using ep0 maxpacket: 16 [ 378.049313][ T1213] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 378.058700][ T1213] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.068960][ T1213] usb 10-1: config 0 has no interface number 0 [ 378.077406][ T1213] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 378.087083][ T1213] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.095815][ T1213] usb 10-1: Product: syz [ 378.100419][ T1213] usb 10-1: Manufacturer: syz [ 378.105166][ T1213] usb 10-1: SerialNumber: syz [ 378.110989][ T1213] usb 10-1: config 0 descriptor?? [ 378.118400][ T1213] usb 10-1: Found UVC 0.00 device syz (046d:08f3) [ 378.125355][ T1213] usb 10-1: No valid video chain found. [ 378.319845][ T1213] usb 10-1: USB disconnect, device number 7 [ 378.546191][ T51] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 378.735523][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.742007][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.322517][ T5892] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 379.474488][ T5892] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 379.483041][ T5892] usb 10-1: config 0 has no interface number 0 [ 379.489232][ T5892] usb 10-1: config 0 interface 41 has no altsetting 0 [ 379.497798][ T5892] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 379.507000][ T5892] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.515168][ T5892] usb 10-1: Product: syz [ 379.519419][ T5892] usb 10-1: Manufacturer: syz [ 379.524421][ T5892] usb 10-1: SerialNumber: syz [ 379.530326][ T5892] usb 10-1: config 0 descriptor?? [ 380.344881][ T5892] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 380.558093][ T5892] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 380.568834][ T5892] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 380.579372][ T5892] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 380.590714][ T5892] usb 10-1: USB disconnect, device number 8 [ 384.536037][T16980] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 384.544967][T16980] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 384.552219][T16980] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 384.561105][T16980] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 384.570635][T16980] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 384.626599][T16977] lo speed is unknown, defaulting to 1000 [ 384.640205][T16977] lo speed is unknown, defaulting to 1000 [ 384.693821][ T1093] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.714544][T16987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.753049][ T1093] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.809321][ T1093] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.872137][T16977] chnl_net:caif_netlink_parms(): no params data found [ 384.913289][ T1093] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.078486][T16977] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.094795][T16977] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.102042][T16977] bridge_slave_0: entered allmulticast mode [ 385.111910][T16977] bridge_slave_0: entered promiscuous mode [ 385.125116][ T6698] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 385.147471][T16977] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.159799][T16977] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.167955][T16977] bridge_slave_1: entered allmulticast mode [ 385.177755][T16977] bridge_slave_1: entered promiscuous mode [ 385.184931][ T1093] bridge_slave_1: left allmulticast mode [ 385.191226][ T1093] bridge_slave_1: left promiscuous mode [ 385.198111][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.207809][ T1093] bridge_slave_0: left allmulticast mode [ 385.217032][ T1093] bridge_slave_0: left promiscuous mode [ 385.223401][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.303897][ T6698] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.322752][ T6698] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 385.341105][ T6698] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 385.353769][ T6698] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 385.365488][ T6698] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 385.381461][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.381729][ T6698] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 385.400190][ T6698] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 385.408671][ T6698] usb 10-1: Product: syz [ 385.409034][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.416307][ T6698] usb 10-1: Manufacturer: syz [ 385.426613][ T6698] usb 10-1: SerialNumber: syz [ 385.427710][ T1093] bond0 (unregistering): Released all slaves [ 385.439864][ T6698] usb 10-1: config 0 descriptor?? [ 385.487816][T16977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.500924][T16977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.549519][T16977] team0: Port device team_slave_0 added [ 385.568873][T16977] team0: Port device team_slave_1 added [ 385.620624][T16977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.638537][T16977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.651730][ T6698] radio-si470x 10-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 385.666709][T16977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.694635][T16977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.698588][ T6698] radio-si470x 10-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 385.707533][T16977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.741876][T16977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.761631][ T1093] hsr_slave_0: left promiscuous mode [ 385.767694][ T1093] hsr_slave_1: left promiscuous mode [ 385.778999][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.786729][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.800049][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.812551][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.834821][ T1093] veth1_macvtap: left promiscuous mode [ 385.840385][ T1093] veth0_macvtap: left promiscuous mode [ 385.850069][ T1093] veth1_vlan: left promiscuous mode [ 385.852820][ T6698] radio-si470x 10-1:0.0: software version 0, hardware version 0 [ 385.855854][ T1093] veth0_vlan: left promiscuous mode [ 385.894311][ T6698] radio-si470x 10-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 385.927611][ T6698] radio-si470x 10-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 386.053577][ T6698] radio-si470x 10-1:0.0: submitting int urb failed (-90) [ 386.152200][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 386.168382][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 386.297493][T16977] hsr_slave_0: entered promiscuous mode [ 386.308048][T16977] hsr_slave_1: entered promiscuous mode [ 386.314308][T16977] debugfs: 'hsr0' already exists in 'hsr' [ 386.330426][T16977] Cannot create hsr debugfs directory [ 386.653704][ T51] Bluetooth: hci4: command tx timeout [ 386.860724][ T6698] radio-si470x 10-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 386.883870][ T6698] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -22 [ 386.910452][ T6698] usb 10-1: USB disconnect, device number 9 [ 386.923435][T16977] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 386.937718][T16977] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 386.950377][T16977] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 386.963601][T16977] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 387.078451][T16977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.098603][T16977] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.110812][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.118004][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.146296][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.153476][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.318518][T16977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.362045][T16977] veth0_vlan: entered promiscuous mode [ 387.376415][T16977] veth1_vlan: entered promiscuous mode [ 387.401575][T16977] veth0_macvtap: entered promiscuous mode [ 387.411301][T16977] veth1_macvtap: entered promiscuous mode [ 387.428081][T16977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.448745][T16977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.484587][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.518608][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.566031][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.584600][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.660032][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.684446][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.709598][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.722352][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.490788][T17167] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 388.502998][T17167] block device autoloading is deprecated and will be removed. [ 388.619383][T17177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4111'. [ 388.735730][ T51] Bluetooth: hci4: command tx timeout [ 388.806064][T17194] overlayfs: failed to clone upperpath [ 389.185371][T17213] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 389.403444][ T5906] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 389.572616][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 389.585574][ T5906] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 389.614211][ T5906] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 389.642100][ T5906] usb 1-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 389.696591][ T5906] usb 1-1: Product: syz [ 389.715071][ T5906] usb 1-1: Manufacturer: syz [ 389.731574][ T5906] usb 1-1: SerialNumber: syz [ 389.762073][ T5906] usb 1-1: config 0 descriptor?? [ 390.005143][ T5906] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 390.819011][ T51] Bluetooth: hci4: command tx timeout [ 391.410215][ T5906] gspca_sunplus: reg_r err -71 [ 391.433255][ T5906] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 391.461959][ T5906] usb 1-1: USB disconnect, device number 4 [ 392.061108][T17309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4136'. [ 392.893406][ T51] Bluetooth: hci4: command tx timeout [ 394.820914][T17371] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4147'. [ 400.752150][ C1] sched: DL replenish lagged too much [ 443.504175][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.515284][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 481.725310][T16980] Bluetooth: hci0: command tx timeout [ 501.743878][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.755038][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 549.579297][ T51] Bluetooth: hci4: command tx timeout [ 565.272799][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.293993][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 606.839798][ T31] INFO: task kworker/u8:9:6400 blocked for more than 149 seconds. [ 606.852910][ T31] Not tainted syzkaller #0 [ 606.857887][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 607.234990][ T31] task:kworker/u8:9 state:D stack:23528 pid:6400 tgid:6400 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 607.382393][ T31] Workqueue: events_unbound linkwatch_event [ 607.388412][ T31] Call Trace: [ 607.391713][ T31] [ 607.502406][ T31] __schedule+0x1798/0x4cc0 [ 607.506989][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 607.511974][ T31] ? do_raw_spin_lock+0x121/0x290 [ 607.592403][ T31] ? __pfx___schedule+0x10/0x10 [ 607.597336][ T31] ? schedule+0x91/0x360 [ 607.601745][ T31] ? rcu_is_watching+0x15/0xb0 [ 607.702510][ T31] ? lock_release+0x4b/0x3e0 [ 607.707320][ T31] ? wq_worker_sleeping+0x63/0x250 [ 607.756331][ T31] schedule+0x165/0x360 [ 607.760569][ T31] schedule_preempt_disabled+0x13/0x30 [ 607.828783][ T31] __mutex_lock+0x7e6/0x1350 [ 607.852375][ T31] ? __mutex_lock+0x5bb/0x1350 [ 607.857201][ T31] ? linkwatch_event+0xe/0x60 [ 607.861906][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 607.983940][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 607.989736][ T31] ? rcu_is_watching+0x15/0xb0 [ 608.134071][ T31] ? rcu_is_watching+0x15/0xb0 [ 608.138909][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 608.272390][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 608.278279][ T31] linkwatch_event+0xe/0x60 [ 608.402420][ T31] process_scheduled_works+0xade/0x17b0 [ 608.408059][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 608.538381][ T31] worker_thread+0x8a0/0xda0 [ 608.607476][ T31] kthread+0x70e/0x8a0 [ 608.611622][ T31] ? __pfx_worker_thread+0x10/0x10 [ 608.692416][ T31] ? __pfx_kthread+0x10/0x10 [ 608.697085][ T31] ? rcu_is_watching+0x15/0xb0 [ 608.701880][ T31] ? __pfx_kthread+0x10/0x10 [ 608.762447][ T31] ret_from_fork+0x3f9/0x770 [ 608.767119][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 608.772266][ T31] ? __switch_to_asm+0x39/0x70 [ 608.830626][ T31] ? __switch_to_asm+0x33/0x70 [ 608.853866][ T31] ? __pfx_kthread+0x10/0x10 [ 608.858515][ T31] ret_from_fork_asm+0x1a/0x30 [ 608.902669][ T31] [ 608.905853][ T31] INFO: lockdep is turned off. [ 608.910627][ T31] NMI backtrace for cpu 1 [ 608.910647][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 608.910670][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 608.910681][ T31] Call Trace: [ 608.910689][ T31] [ 608.910697][ T31] dump_stack_lvl+0x189/0x250 [ 608.910731][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 608.910758][ T31] ? __pfx__printk+0x10/0x10 [ 608.910787][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 608.910810][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 608.910833][ T31] ? __pfx__printk+0x10/0x10 [ 608.910860][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 608.910888][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 608.910912][ T31] watchdog+0xf60/0xfa0 [ 608.910937][ T31] ? watchdog+0x1e2/0xfa0 [ 608.910960][ T31] kthread+0x70e/0x8a0 [ 608.910983][ T31] ? __pfx_watchdog+0x10/0x10 [ 608.911002][ T31] ? __pfx_kthread+0x10/0x10 [ 608.911018][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 608.911040][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.911067][ T31] ? __pfx_kthread+0x10/0x10 [ 608.911086][ T31] ret_from_fork+0x3f9/0x770 [ 608.911114][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 608.911141][ T31] ? __switch_to_asm+0x39/0x70 [ 608.911159][ T31] ? __switch_to_asm+0x33/0x70 [ 608.911177][ T31] ? __pfx_kthread+0x10/0x10 [ 608.911196][ T31] ret_from_fork_asm+0x1a/0x30 [ 608.911223][ T31] [ 608.911229][ T31] Sending NMI from CPU 1 to CPUs 0: [ 609.058378][ C0] NMI backtrace for cpu 0 [ 609.058397][ C0] CPU: 0 UID: 0 PID: 17412 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 609.058415][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.058426][ C0] Workqueue: bat_events batadv_nc_worker [ 609.058453][ C0] RIP: 0010:__kasan_check_write+0x0/0x20 [ 609.058472][ C0] Code: 48 8b 0c 24 31 d2 e9 ef e4 ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 89 f6 48 8b 0c 24 ba 01 00 00 00 e9 bc e4 ff ff 66 66 [ 609.058486][ C0] RSP: 0018:ffffc90000007b38 EFLAGS: 00000286 [ 609.058500][ C0] RAX: 00000000ffffffff RBX: ffff8880b863bf00 RCX: 0000000000000000 [ 609.058511][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b863bf00 [ 609.058521][ C0] RBP: ffffc90000007be8 R08: 0000000000000001 R09: 0000000000000000 [ 609.058531][ C0] R10: dffffc0000000000 R11: ffffffff89f58ab0 R12: ffff8880b863bf10 [ 609.058542][ C0] R13: ffff8880b863bf08 R14: 1ffff110170c77e2 R15: 1ffff110170c77e1 [ 609.058554][ C0] FS: 0000000000000000(0000) GS:ffff8881257cc000(0000) knlGS:0000000000000000 [ 609.058567][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.058578][ C0] CR2: 00007f5160ee56c0 CR3: 000000007acee000 CR4: 00000000003526f0 [ 609.058594][ C0] Call Trace: [ 609.058600][ C0] [ 609.058605][ C0] do_raw_spin_lock+0x112/0x290 [ 609.058625][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 609.058641][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 609.058660][ C0] ? ipv4_dst_destroy+0x105/0x230 [ 609.058679][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 609.058697][ C0] ipv4_dst_destroy+0x105/0x230 [ 609.058716][ C0] ? dst_destroy+0xcb/0x350 [ 609.058733][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 609.058751][ C0] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 609.058768][ C0] dst_destroy+0xd4/0x350 [ 609.058786][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 609.058803][ C0] ? rcu_core+0xc37/0x1770 [ 609.058822][ C0] rcu_core+0xcab/0x1770 [ 609.058846][ C0] ? __pfx_rcu_core+0x10/0x10 [ 609.058865][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 609.058887][ C0] ? sched_clock_cpu+0x74/0x430 [ 609.058906][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 609.058926][ C0] ? rcu_is_watching+0x15/0xb0 [ 609.058947][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 609.058965][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 609.058987][ C0] ? try_to_wake_up+0x7f5/0x12b0 [ 609.059005][ C0] handle_softirqs+0x283/0x870 [ 609.059027][ C0] ? do_softirq+0xec/0x180 [ 609.059048][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 609.059069][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 609.059090][ C0] do_softirq+0xec/0x180 [ 609.059109][ C0] [ 609.059115][ C0] [ 609.059121][ C0] ? __pfx_do_softirq+0x10/0x10 [ 609.059140][ C0] ? __switch_to+0xdae/0x1670 [ 609.059160][ C0] ? rcu_is_watching+0x15/0xb0 [ 609.059180][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 609.059200][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 609.059221][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 609.059236][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 609.059256][ C0] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 609.059278][ C0] batadv_nc_purge_paths+0x318/0x3b0 [ 609.059298][ C0] ? rcu_is_watching+0x15/0xb0 [ 609.059321][ C0] batadv_nc_worker+0x328/0x610 [ 609.059341][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 609.059370][ C0] process_scheduled_works+0xade/0x17b0 [ 609.059399][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 609.059425][ C0] worker_thread+0x8a0/0xda0 [ 609.059453][ C0] kthread+0x70e/0x8a0 [ 609.059470][ C0] ? __pfx_worker_thread+0x10/0x10 [ 609.059490][ C0] ? __pfx_kthread+0x10/0x10 [ 609.059506][ C0] ? rcu_is_watching+0x15/0xb0 [ 609.059526][ C0] ? __pfx_kthread+0x10/0x10 [ 609.059542][ C0] ret_from_fork+0x3f9/0x770 [ 609.059563][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 609.059585][ C0] ? __switch_to_asm+0x39/0x70 [ 609.059601][ C0] ? __switch_to_asm+0x33/0x70 [ 609.059616][ C0] ? __pfx_kthread+0x10/0x10 [ 609.059631][ C0] ret_from_fork_asm+0x1a/0x30 [ 609.059652][ C0] [ 609.962381][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 609.969336][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 609.978480][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.988652][ T31] Call Trace: [ 609.991957][ T31] [ 609.994906][ T31] dump_stack_lvl+0x99/0x250 [ 609.999529][ T31] ? __asan_memcpy+0x40/0x70 [ 610.004139][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.009374][ T31] ? __pfx__printk+0x10/0x10 [ 610.014017][ T31] vpanic+0x281/0x750 [ 610.018026][ T31] ? __pfx_vpanic+0x10/0x10 [ 610.022554][ T31] ? preempt_schedule+0xae/0xc0 [ 610.027434][ T31] ? preempt_schedule_common+0x83/0xd0 [ 610.032921][ T31] panic+0xb9/0xc0 [ 610.036667][ T31] ? __pfx_panic+0x10/0x10 [ 610.041108][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 610.046504][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 610.052778][ T31] watchdog+0xf9f/0xfa0 [ 610.056965][ T31] ? watchdog+0x1e2/0xfa0 [ 610.061349][ T31] kthread+0x70e/0x8a0 [ 610.065445][ T31] ? __pfx_watchdog+0x10/0x10 [ 610.070146][ T31] ? __pfx_kthread+0x10/0x10 [ 610.074760][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 610.079994][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.085225][ T31] ? __pfx_kthread+0x10/0x10 [ 610.089837][ T31] ret_from_fork+0x3f9/0x770 [ 610.094458][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 610.099599][ T31] ? __switch_to_asm+0x39/0x70 [ 610.104378][ T31] ? __switch_to_asm+0x33/0x70 [ 610.109164][ T31] ? __pfx_kthread+0x10/0x10 [ 610.113789][ T31] ret_from_fork_asm+0x1a/0x30 [ 610.118581][ T31] [ 610.121924][ T31] Kernel Offset: disabled [ 610.126243][ T31] Rebooting in 86400 seconds..