last executing test programs: 4m55.568092173s ago: executing program 1 (id=2): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x802) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) 4m53.14443996s ago: executing program 1 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) io_uring_enter(r1, 0x7277, 0x2, 0x43, 0x0, 0x0) 4m37.783667561s ago: executing program 32 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) io_uring_enter(r1, 0x7277, 0x2, 0x43, 0x0, 0x0) 10.788352285s ago: executing program 3 (id=1126): io_setup(0x9, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETVNETLE(r1, 0x40047452, &(0x7f0000001200)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0x3) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000040)) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, 0x0, 0x0) listen(r5, 0x80) mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x5) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x80) splice(r0, 0x0, r2, 0x0, 0x7ffff000, 0x0) 10.671088496s ago: executing program 0 (id=1127): syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280)) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0xfffffffc}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r6 = msgget$private(0x0, 0x6c2) msgsnd(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="03"], 0x2000, 0x0) 10.30153982s ago: executing program 3 (id=1134): mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r1, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000980)=""/255, 0xff}, {0x0}, {&(0x7f00000005c0)=""/18, 0x12}], 0x3, &(0x7f0000000ac0)=""/34, 0x22}, 0xb}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x162, 0x0) 9.988119275s ago: executing program 3 (id=1135): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fccbdf2509000000050007000000000008000100010000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="210f00000000000000002000000008000300", @ANYBLOB="c8fd6524d7db696bc508ee46069a11bce1a80743ca86f421352adad007a66689b2f3fc14faaee8aa490d58bea17b47a528d5f4c862d6a72a47d0333b6e38a18a99d59fcac5a4fee5b89ba054f7d5112b38fdd739cc0b59bb65db259fa2c38c0eef82fbbc70a329fcd01d0d44dc2823c8af504e33635f0a596c324ad1e0f234f8b2a564b60e16aaca6f66f04d5bc8bc7ff4305c0b5174a7b9446d6a33e7053562eafcabf38cf3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)='VAg', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1}}], 0x2, 0x4001) 9.096829684s ago: executing program 0 (id=1137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 8.579398993s ago: executing program 5 (id=1144): io_setup(0x9, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETVNETLE(r1, 0x40047452, &(0x7f0000001200)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0x3) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000040)) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, 0x0, 0x0) listen(r5, 0x80) mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x5) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x80) splice(r0, 0x0, r2, 0x0, 0x7ffff000, 0x0) 7.325999702s ago: executing program 3 (id=1145): mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r1, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000980)=""/255, 0xff}, {0x0}, {&(0x7f00000005c0)=""/18, 0x12}], 0x3, &(0x7f0000000ac0)=""/34, 0x22}, 0xb}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x162, 0x0) 7.324929236s ago: executing program 2 (id=1146): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg(r0, &(0x7f0000000940)={&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0xffffdba3, @remote, 0x8}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)="2c524babd57f8bf1053f7914deacf9e26e2656b5cea94d6c93d4867414f50c1836953e8e7ecdd99d1896e86dd8932d8265f23aed2ba769d104cdba69e1ad31", 0x3f}, {&(0x7f0000000700)="11d91e71a48900bbc221b0e42f249f9af9a1ef318fe79959211e768cf4d58d7d1d4ad8591b03d739b667fb452ee2d7996f3341ee7c3f5d11e300a2c5d94c7a81c09e3f688dfae8867ef3fa530f710e0107109c45a5eb3c7c059c88ed7a8704a12e8eaea42ec34dfbb02c920200005732fbf6968a08a8cb2c3f58d86e6f10c49b44448613028c76c6d47e7206a4308d", 0x8f}, {&(0x7f0000000040)="3568124532031cbefe113c", 0xb}, {&(0x7f0000000b80)="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", 0x111}], 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x140}, 0x20000014) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x4) fanotify_mark(0xffffffffffffffff, 0x84, 0x1000, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 7.214942902s ago: executing program 0 (id=1149): r0 = socket$kcm(0x11, 0x2, 0x300) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000440)="0f6a241dc2cc504f5693389f366563fccd371891d1373af7bb3f3dbc1a6b44073f800cc88d3709c1968a983b612f3e2159d28a9e9a3d33c242884ac9bbb38e7b32aa748a7fc748b0033d09237aced8f62a3e87a2001a0b8573f4add63802f032c5d54125003737f8236430f750ad5eb8d040b14f675911c06f3a24", 0x7b}, {&(0x7f0000000500)}, {0x0}], 0x4, &(0x7f0000000780)=[{0xe0, 0x116, 0x1, "6c7d52d5399ec79ba191ff969784a8a524dc30bed64debbe3a96c3789197c138c70c01f1afc854b6e757fc9a4ce53ed51b7945839eb8a2c91b768a0a43944d06a4110a44b6df48ec2635695e4b1f291fb02f5525d8e1546e0cacc987fe0ed2286706019051b255aa59fbe4770f86c6db0f4c5eaef27108aa4c7c56661068d151f6783bb219a6ad07ddf815f2d8b8e23a2941f79cdb025bb059a143af8cc057d7beea20347865c631d706b8ac0db7cec4535064e4863deff8ebc82ab1acbdf7126a354e4c17460573a55f4f8874"}, {0x30, 0x114, 0xc, "54cff09aa5f33d1d4e3749f21ebb4d5efdfbbd0cf01cedde11"}], 0x110}, 0xc840) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340), 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r3, &(0x7f0000000180)='1\x00', 0x2) 7.027154631s ago: executing program 3 (id=1150): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}], 0x1, 0x2) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) 6.281431549s ago: executing program 5 (id=1151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) 6.168888607s ago: executing program 0 (id=1153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000300)='./bus\x00', 0x1c12c2, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) 4.853154297s ago: executing program 0 (id=1155): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1e) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 4.737113004s ago: executing program 2 (id=1156): bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) 4.528655294s ago: executing program 2 (id=1158): syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280)) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0xfffffffc}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r6 = msgget$private(0x0, 0x6c2) msgsnd(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="03"], 0x2000, 0x0) 3.944958032s ago: executing program 5 (id=1160): mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r1, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000980)=""/255, 0xff}, {0x0}, {&(0x7f00000005c0)=""/18, 0x12}], 0x3, &(0x7f0000000ac0)=""/34, 0x22}, 0xb}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x162, 0x0) 3.770620944s ago: executing program 5 (id=1162): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0xa0044d07, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) fallocate(r5, 0x0, 0x0, 0x1001f0) 3.599173718s ago: executing program 0 (id=1164): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x1, 0xc, 0x7, 0x0}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9, 0x4}}, 0xe8) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x69) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.401336486s ago: executing program 2 (id=1166): r0 = socket(0x18, 0x1, 0x2) getsockname$packet(r0, 0x0, 0x0) 2.591117699s ago: executing program 4 (id=1169): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, 0x0, 0x0, 0x10005, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f", 0xd, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) mkdirat$cgroup_root(0xffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) 2.543387242s ago: executing program 4 (id=1170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) 2.48802363s ago: executing program 5 (id=1171): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x284d026, 0x0) 2.248681751s ago: executing program 4 (id=1172): mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r1, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000980)=""/255, 0xff}, {0x0}, {&(0x7f00000005c0)=""/18, 0x12}], 0x3, &(0x7f0000000ac0)=""/34, 0x22}, 0xb}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x162, 0x0) 2.198519801s ago: executing program 2 (id=1173): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@memory_hugetlb_accounting}, {@favordynmods}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) 1.032445202s ago: executing program 2 (id=1174): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) socket$pptp(0x18, 0x1, 0x2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 927.678165ms ago: executing program 4 (id=1175): r0 = socket$kcm(0x11, 0x2, 0x300) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)}, {&(0x7f0000000440)="0f6a241dc2cc504f5693389f366563fccd371891d1373af7bb3f3dbc1a6b44073f800cc88d3709c1968a983b612f3e2159d28a9e9a3d33c242884ac9bbb38e7b32aa748a7fc748b0033d09237aced8f62a3e87a2001a0b8573f4add63802f032c5d54125003737f8236430f750ad5eb8d040b14f675911c06f3a24", 0x7b}, {&(0x7f0000000500)}, {0x0}], 0x4, &(0x7f0000000780)=[{0xe0, 0x116, 0x1, "6c7d52d5399ec79ba191ff969784a8a524dc30bed64debbe3a96c3789197c138c70c01f1afc854b6e757fc9a4ce53ed51b7945839eb8a2c91b768a0a43944d06a4110a44b6df48ec2635695e4b1f291fb02f5525d8e1546e0cacc987fe0ed2286706019051b255aa59fbe4770f86c6db0f4c5eaef27108aa4c7c56661068d151f6783bb219a6ad07ddf815f2d8b8e23a2941f79cdb025bb059a143af8cc057d7beea20347865c631d706b8ac0db7cec4535064e4863deff8ebc82ab1acbdf7126a354e4c17460573a55f4f8874"}, {0x30, 0x114, 0xc, "54cff09aa5f33d1d4e3749f21ebb4d5efdfbbd0cf01cedde11"}], 0x110}, 0xc840) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340), 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r3, &(0x7f0000000180)='1\x00', 0x2) 842.195185ms ago: executing program 5 (id=1176): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba"], 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, r3, 0x80485dc1c126afb3, 0x0, 0x0, {0x33}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180), 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x108, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xc5}, {0x8, 0x15, 0x3ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xceb}, {0x6, 0x11, 0xcfb5}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0xe}, {0x8, 0x15, 0x6}}]}, 0x108}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@multicast, @random="0426eae7d53d", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="1ad2cc82e409", @empty, @local, @loopback}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x115203, 0x7e) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x94) ioctl$UI_SET_PHYS(r5, 0x4008556c, &(0x7f0000000200)='syz1\x00') r6 = fsmount(r4, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) r8 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETGROUP(r8, 0x400454ce, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) 815.317903ms ago: executing program 4 (id=1177): socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0), 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) setitimer(0x0, 0x0, 0x0) mkdir(0x0, 0x111) close(0xffffffffffffffff) r2 = inotify_init1(0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x20008000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) inotify_add_watch(r2, 0x0, 0x404) 53.2099ms ago: executing program 3 (id=1178): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(0xffffffffffffffff, r0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r2, 0x0, 0x0, 0x7600) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) 0s ago: executing program 4 (id=1179): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='lp', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. [ 73.169768][ T5784] cgroup: Unknown subsys name 'net' [ 73.400437][ T5784] cgroup: Unknown subsys name 'cpuset' [ 73.446551][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.013599][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.352225][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.373078][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.374121][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.374848][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.389777][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.391879][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.392570][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.393874][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.394534][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.421059][ T5116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.444564][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.444906][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.462399][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.463081][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.477399][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.529428][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.532888][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.550575][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.550689][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.552833][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.553518][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.555161][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.561353][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.561478][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.566438][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.201840][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 79.345466][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 79.373071][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 79.418879][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 79.522554][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 79.554979][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.563259][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.563416][ T5804] bridge_slave_0: entered allmulticast mode [ 79.564892][ T5804] bridge_slave_0: entered promiscuous mode [ 79.613332][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.613443][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.613621][ T5804] bridge_slave_1: entered allmulticast mode [ 79.614954][ T5804] bridge_slave_1: entered promiscuous mode [ 79.745723][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.745832][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.761751][ T5798] bridge_slave_0: entered allmulticast mode [ 79.763118][ T5798] bridge_slave_0: entered promiscuous mode [ 79.769426][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.795565][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.795680][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.797963][ T5796] bridge_slave_0: entered allmulticast mode [ 79.800280][ T5796] bridge_slave_0: entered promiscuous mode [ 79.802681][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.802807][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.803246][ T5798] bridge_slave_1: entered allmulticast mode [ 79.807786][ T5798] bridge_slave_1: entered promiscuous mode [ 79.812250][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.824855][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.824974][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.825466][ T5807] bridge_slave_0: entered allmulticast mode [ 79.829609][ T5807] bridge_slave_0: entered promiscuous mode [ 79.831831][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.831955][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.832395][ T5796] bridge_slave_1: entered allmulticast mode [ 79.835669][ T5796] bridge_slave_1: entered promiscuous mode [ 79.896803][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.896915][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.897077][ T5807] bridge_slave_1: entered allmulticast mode [ 79.899785][ T5807] bridge_slave_1: entered promiscuous mode [ 79.982018][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.985690][ T5804] team0: Port device team_slave_0 added [ 79.985907][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.987627][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.988096][ T5809] bridge_slave_0: entered allmulticast mode [ 79.990463][ T5809] bridge_slave_0: entered promiscuous mode [ 80.016699][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.020572][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.023409][ T5804] team0: Port device team_slave_1 added [ 80.023676][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.023780][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.023926][ T5809] bridge_slave_1: entered allmulticast mode [ 80.027543][ T5809] bridge_slave_1: entered promiscuous mode [ 80.034114][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.040385][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.100277][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.508215][ T5799] Bluetooth: hci1: command tx timeout [ 80.508219][ T60] Bluetooth: hci2: command tx timeout [ 80.530747][ T5798] team0: Port device team_slave_0 added [ 80.531816][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.531825][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.531838][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.585803][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.586795][ T60] Bluetooth: hci4: command tx timeout [ 80.586902][ T60] Bluetooth: hci0: command tx timeout [ 80.608547][ T5796] team0: Port device team_slave_0 added [ 80.610335][ T5798] team0: Port device team_slave_1 added [ 80.610885][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.610893][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.610906][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.612740][ T5807] team0: Port device team_slave_0 added [ 80.615213][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.628575][ T5796] team0: Port device team_slave_1 added [ 80.656678][ T60] Bluetooth: hci3: command tx timeout [ 80.665199][ T5807] team0: Port device team_slave_1 added [ 80.734343][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.734359][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.734382][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.800110][ T5809] team0: Port device team_slave_0 added [ 80.800864][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.800876][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.800899][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.818675][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.818691][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.818712][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.820781][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.820793][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.820815][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.827217][ T5809] team0: Port device team_slave_1 added [ 80.838613][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.838628][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.838670][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.841276][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.841291][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.841314][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.917717][ T5804] hsr_slave_0: entered promiscuous mode [ 80.919281][ T5804] hsr_slave_1: entered promiscuous mode [ 80.954248][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.954265][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.954288][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.022812][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.022830][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.022853][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.128184][ T5798] hsr_slave_0: entered promiscuous mode [ 81.129459][ T5798] hsr_slave_1: entered promiscuous mode [ 81.130438][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 81.130541][ T5798] Cannot create hsr debugfs directory [ 81.154196][ T5796] hsr_slave_0: entered promiscuous mode [ 81.155570][ T5796] hsr_slave_1: entered promiscuous mode [ 81.157298][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 81.157321][ T5796] Cannot create hsr debugfs directory [ 81.168033][ T5807] hsr_slave_0: entered promiscuous mode [ 81.169649][ T5807] hsr_slave_1: entered promiscuous mode [ 81.170499][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 81.170537][ T5807] Cannot create hsr debugfs directory [ 81.583375][ T5809] hsr_slave_0: entered promiscuous mode [ 81.584114][ T5809] hsr_slave_1: entered promiscuous mode [ 81.584678][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 81.584694][ T5809] Cannot create hsr debugfs directory [ 81.631413][ T809] cfg80211: failed to load regulatory.db [ 82.308198][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.353711][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.371915][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.423068][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.524368][ T5798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.552171][ T5798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.576197][ T60] Bluetooth: hci2: command tx timeout [ 82.576221][ T5799] Bluetooth: hci1: command tx timeout [ 82.600353][ T5798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.634096][ T5798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.656264][ T5799] Bluetooth: hci0: command tx timeout [ 82.656295][ T5799] Bluetooth: hci4: command tx timeout [ 82.736415][ T5799] Bluetooth: hci3: command tx timeout [ 82.756811][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.782376][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.821955][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.877433][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.003822][ T5807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.040828][ T5807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.088818][ T5807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.139104][ T5807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.248943][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.263215][ T5809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.294156][ T5809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.338970][ T5809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.374554][ T5809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.427932][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.459801][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.460469][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.488442][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.519318][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.519500][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.584590][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.618687][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.622074][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.622246][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.668336][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.668739][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.721222][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.750257][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.754810][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.754916][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.811370][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.811526][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.889787][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.911427][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.943405][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.943512][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.001255][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.001386][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.040469][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.095162][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.095327][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.140590][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.140824][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.271630][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.415952][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.545210][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.573120][ T5804] veth0_vlan: entered promiscuous mode [ 84.658404][ T5799] Bluetooth: hci2: command tx timeout [ 84.658435][ T5799] Bluetooth: hci1: command tx timeout [ 84.668314][ T5804] veth1_vlan: entered promiscuous mode [ 84.727620][ T5798] veth0_vlan: entered promiscuous mode [ 84.736256][ T60] Bluetooth: hci0: command tx timeout [ 84.736285][ T60] Bluetooth: hci4: command tx timeout [ 84.742961][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.785873][ T5798] veth1_vlan: entered promiscuous mode [ 84.802190][ T5796] veth0_vlan: entered promiscuous mode [ 84.816267][ T5799] Bluetooth: hci3: command tx timeout [ 84.833889][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.857523][ T5804] veth0_macvtap: entered promiscuous mode [ 84.875055][ T5796] veth1_vlan: entered promiscuous mode [ 84.892612][ T5804] veth1_macvtap: entered promiscuous mode [ 84.991765][ T5798] veth0_macvtap: entered promiscuous mode [ 85.013699][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.025333][ T5807] veth0_vlan: entered promiscuous mode [ 85.039270][ T5798] veth1_macvtap: entered promiscuous mode [ 85.061280][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.105635][ T5796] veth0_macvtap: entered promiscuous mode [ 85.113850][ T5807] veth1_vlan: entered promiscuous mode [ 85.118325][ T142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.124183][ T142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.133042][ T142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.142151][ T142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.143483][ T5796] veth1_macvtap: entered promiscuous mode [ 85.158280][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.230749][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.302867][ T142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.313251][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.323375][ T142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.369357][ T142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.385810][ T142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.390334][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.462583][ T5807] veth0_macvtap: entered promiscuous mode [ 85.480801][ T142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.497619][ T142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.503839][ T142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.542431][ T5807] veth1_macvtap: entered promiscuous mode [ 85.557406][ T142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.559929][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.559951][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.695146][ T5809] veth0_vlan: entered promiscuous mode [ 85.751433][ T204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.751452][ T204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.795604][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.893610][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.893629][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.902255][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.902773][ T5809] veth1_vlan: entered promiscuous mode [ 85.978473][ T204] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.996982][ T204] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.003429][ T204] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.026223][ T204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.050702][ T204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.050722][ T204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.744028][ T5799] Bluetooth: hci1: command tx timeout [ 86.744909][ T5799] Bluetooth: hci2: command tx timeout [ 86.830527][ T60] Bluetooth: hci4: command tx timeout [ 86.830994][ T5799] Bluetooth: hci0: command tx timeout [ 86.883849][ T204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.883867][ T204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.896152][ T5799] Bluetooth: hci3: command tx timeout [ 86.964571][ T5809] veth0_macvtap: entered promiscuous mode [ 86.996414][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.996432][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.022050][ T5809] veth1_macvtap: entered promiscuous mode [ 87.082874][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.082893][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.141112][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.224055][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.278058][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.278076][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.431272][ T1107] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.445073][ T3444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.459914][ T3444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.460467][ T3444] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.559556][ T5923] Malformed UNC in devname [ 87.559556][ T5923] [ 87.559763][ T5923] CIFS: VFS: Malformed UNC in devname [ 88.552596][ T5926] ======================================================= [ 88.552596][ T5926] WARNING: The mand mount option has been deprecated and [ 88.552596][ T5926] and is ignored by this kernel. Remove the mand [ 88.552596][ T5926] option from the mount to silence this warning. [ 88.552596][ T5926] ======================================================= [ 88.629061][ T5926] overlay: Unknown parameter '/' [ 89.216129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.226041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.236022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.356029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.356184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.356338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.356504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.356691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.356909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.357063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.053587][ T5946] Malformed UNC in devname [ 90.053587][ T5946] [ 90.053639][ T5946] CIFS: VFS: Malformed UNC in devname [ 90.904011][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.904030][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.268722][ T5953] usb usb7: usbfs: process 5953 (syz.3.11) did not claim interface 0 before use [ 91.561947][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.561967][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.767712][ T5961] delete_channel: no stack [ 93.459436][ T809] IPVS: starting estimator thread 0... [ 93.896253][ T5967] IPVS: using max 16 ests per chain, 38400 per kthread [ 95.359712][ T5978] overlay: Unknown parameter '/' [ 98.450543][ T6000] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 98.550906][ T6001] Malformed UNC in devname [ 98.550906][ T6001] [ 98.550968][ T6001] CIFS: VFS: Malformed UNC in devname [ 99.676938][ T6009] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.193598][ T6008] syz.0.25 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 103.215596][ T6034] Malformed UNC in devname [ 103.215596][ T6034] [ 103.215614][ T6034] CIFS: VFS: Malformed UNC in devname [ 103.826632][ T6035] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 104.466923][ T31] IPVS: starting estimator thread 0... [ 104.562334][ T6046] warning: `syz.2.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.566154][ T6044] IPVS: using max 8 ests per chain, 19200 per kthread [ 105.361087][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 105.368479][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 105.369877][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 105.370989][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 105.371634][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 107.365185][ T60] block nbd0: Receive control failed (result -32) [ 107.376900][ T60] Bluetooth: hci5: command tx timeout [ 107.998106][ T6057] chnl_net:caif_netlink_parms(): no params data found [ 108.827876][ T6057] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.827999][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.828220][ T6057] bridge_slave_0: entered allmulticast mode [ 108.861303][ T6057] bridge_slave_0: entered promiscuous mode [ 109.152551][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.152730][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.152916][ T6057] bridge_slave_1: entered allmulticast mode [ 109.180659][ T6057] bridge_slave_1: entered promiscuous mode [ 109.796004][ T60] Bluetooth: hci5: command tx timeout [ 110.030339][ T6111] usb usb7: usbfs: process 6111 (syz.4.54) did not claim interface 0 before use [ 110.051918][ T6057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.054024][ T6057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.165838][ T60] block nbd1: Receive control failed (result -32) [ 110.359106][ T6057] team0: Port device team_slave_0 added [ 110.398863][ T6057] team0: Port device team_slave_1 added [ 110.929532][ T6127] Malformed UNC in devname [ 110.929532][ T6127] [ 110.929600][ T6127] CIFS: VFS: Malformed UNC in devname [ 111.436586][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.436604][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.436627][ T6057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.447803][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.447819][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.447844][ T6057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.856491][ T60] Bluetooth: hci5: command tx timeout [ 113.936214][ T60] Bluetooth: hci5: command tx timeout [ 114.420929][ T6169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.68'. [ 114.594632][ T6057] hsr_slave_0: entered promiscuous mode [ 114.628439][ T6057] hsr_slave_1: entered promiscuous mode [ 114.635391][ T6057] debugfs: 'hsr0' already exists in 'hsr' [ 114.635416][ T6057] Cannot create hsr debugfs directory [ 115.341094][ T6179] Malformed UNC in devname [ 115.341094][ T6179] [ 115.341132][ T6179] CIFS: VFS: Malformed UNC in devname [ 116.169428][ T6189] Set syz1 is full, maxelem 0 reached [ 116.349839][ T6192] syz.4.77 (6192): attempted to duplicate a private mapping with mremap. This is not supported. [ 116.644004][ T49] IPVS: starting estimator thread 0... [ 116.742336][ T6199] /dev/nullb0: Can't open blockdev [ 117.320199][ T6198] IPVS: using max 10 ests per chain, 24000 per kthread [ 117.898230][ T6057] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.125495][ T6057] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 118.171957][ T6057] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 118.232988][ T6057] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 118.286343][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.466157][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 118.487464][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.487531][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.487556][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 118.487576][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 118.487598][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.728443][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 118.728473][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 118.728491][ T10] usb 5-1: Manufacturer: syz [ 119.571921][ T10] usb 5-1: config 0 descriptor?? [ 119.644334][ T6057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.674672][ T6057] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.705393][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.705536][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.740991][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.741161][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.806322][ T5877] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.831334][ T49] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.888070][ T10] rc_core: IR keymap rc-hauppauge not found [ 119.888091][ T10] Registered IR keymap rc-empty [ 119.888773][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 119.917606][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 119.941428][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 119.958122][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 120.057173][ T5877] usb 4-1: device descriptor read/64, error -71 [ 120.075308][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 120.088494][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 120.253781][ T6234] overlay: Unknown parameter '/' [ 120.875856][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 120.886295][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 120.906135][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 120.926143][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 121.002610][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 121.018330][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 121.044608][ T49] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 121.044637][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.044655][ T49] usb 1-1: Product: syz [ 121.044668][ T49] usb 1-1: Manufacturer: syz [ 121.044681][ T49] usb 1-1: SerialNumber: syz [ 121.055209][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 121.068309][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 121.086162][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 121.104210][ T5877] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.159056][ T49] usb 1-1: config 0 descriptor?? [ 121.246097][ T5877] usb 4-1: device descriptor read/64, error -71 [ 121.281278][ T10] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 121.281303][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 121.370475][ T5877] usb usb4-port1: attempt power cycle [ 121.393166][ T49] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 121.545035][ T10] usb 5-1: USB disconnect, device number 2 [ 122.622472][ T6057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.915395][ T49] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 122.934706][ T49] usb 1-1: USB disconnect, device number 2 [ 124.103360][ T6057] veth0_vlan: entered promiscuous mode [ 124.121274][ T6057] veth1_vlan: entered promiscuous mode [ 124.261123][ T6057] veth0_macvtap: entered promiscuous mode [ 124.265794][ T6057] veth1_macvtap: entered promiscuous mode [ 124.418437][ T6275] overlay: Unknown parameter '/' [ 125.105669][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.128564][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.223876][ T142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.224777][ T142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.225687][ T142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.225905][ T142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.676094][ T5130] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.506572][ T5130] usb 4-1: device descriptor read/64, error -71 [ 127.746120][ T5130] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.926086][ T5130] usb 4-1: device descriptor read/64, error -71 [ 128.040569][ T5130] usb usb4-port1: attempt power cycle [ 128.072413][ T1286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.072429][ T1286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.566097][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.566116][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.090049][ T6344] input: syz1 as /devices/virtual/input/input6 [ 130.538542][ T6355] overlay: Unknown parameter '/' [ 131.345288][ T6358] usb usb7: usbfs: process 6358 (syz.3.112) did not claim interface 0 before use [ 131.430493][ T60] block nbd2: Receive control failed (result -32) [ 132.837765][ T6375] Malformed UNC in devname [ 132.837765][ T6375] [ 132.837838][ T6375] CIFS: VFS: Malformed UNC in devname [ 133.544116][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.544184][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.471329][ T6390] usb usb7: usbfs: process 6390 (syz.4.125) did not claim interface 0 before use [ 135.590736][ T60] block nbd3: Receive control failed (result -32) [ 137.502268][ T6430] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 139.552459][ T6465] usb usb7: usbfs: process 6465 (syz.4.138) did not claim interface 0 before use [ 139.725063][ T60] block nbd4: Receive control failed (result -32) [ 139.871090][ T36] audit: type=1326 audit(1773703931.744:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6470 comm="syz.0.141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25ef26c799 code=0x0 [ 141.066860][ T6480] block device autoloading is deprecated and will be removed. [ 141.688073][ T6491] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 142.516059][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 142.676213][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 142.681452][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 142.681469][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.681478][ T10] usb 5-1: config 0 has no interface number 0 [ 142.681503][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.681524][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 142.681535][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.694024][ T10] usb 5-1: config 0 descriptor?? [ 142.757376][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 142.789914][ T10] ldusb 5-1:0.55: Interrupt in endpoint not found [ 143.235694][ T10] usb 5-1: USB disconnect, device number 3 [ 143.246164][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 143.247894][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.252703][ T9] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 143.252741][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.252760][ T9] usb 1-1: Product: syz [ 143.252772][ T9] usb 1-1: Manufacturer: syz [ 143.252795][ T9] usb 1-1: SerialNumber: syz [ 143.266954][ T9] usb 1-1: config 0 descriptor?? [ 143.279902][ T9] cdc_ether 1-1:0.0: skipping garbage [ 143.279926][ T9] usb 1-1: bad CDC descriptors [ 143.281410][ T9] usb 1-1: unsupported MDLM descriptors [ 143.282208][ T9] cdc_acm 1-1:0.0: skipping garbage [ 143.433822][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.947645][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 144.851252][ T10] usb 1-1: USB disconnect, device number 3 [ 145.277808][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.717172][ T6509] overlayfs: failed to resolve './file1': -2 [ 145.767519][ T6514] overlayfs: failed to resolve './file1/file0': -2 [ 145.979481][ T6518] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.983572][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.636232][ T5877] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.823987][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.838646][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 146.841332][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 146.844335][ T5877] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 146.844362][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.844380][ T5877] usb 1-1: Product: syz [ 146.844394][ T5877] usb 1-1: Manufacturer: syz [ 146.844407][ T5877] usb 1-1: SerialNumber: syz [ 146.951634][ T5877] usb 1-1: config 0 descriptor?? [ 146.966082][ T5877] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 146.966116][ T5877] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 147.553740][ T5130] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 148.151073][ T36] audit: type=1326 audit(1773703939.974:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6537 comm="syz.4.165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6373afc799 code=0x0 [ 148.286077][ T5130] usb 6-1: Using ep0 maxpacket: 8 [ 148.464793][ T5877] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 148.518908][ T5130] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 148.518935][ T5130] usb 6-1: config 0 has no interface number 0 [ 148.518977][ T5130] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 148.519006][ T5130] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 148.519026][ T5130] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 148.519065][ T5130] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 148.519086][ T5130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.613393][ T5130] usb 6-1: config 0 descriptor?? [ 148.637511][ T5130] ldusb 6-1:0.55: Interrupt in endpoint not found [ 148.965723][ T5877] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 148.965744][ T5877] em28xx 1-1:0.0: board has no eeprom [ 149.276875][ T5864] usb 6-1: USB disconnect, device number 2 [ 149.848643][ T5877] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 149.848814][ T5877] em28xx 1-1:0.0: dvb set to bulk mode. [ 149.901844][ T49] em28xx 1-1:0.0: Binding DVB extension [ 150.288853][ T12] bridge_slave_1: left allmulticast mode [ 150.405104][ T12] bridge_slave_1: left promiscuous mode [ 150.425740][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.605781][ T6563] overlayfs: failed to resolve './file1': -2 [ 150.629604][ T5877] usb 1-1: USB disconnect, device number 4 [ 150.634609][ T49] em28xx 1-1:0.0: Registering input extension [ 150.646505][ T5877] em28xx 1-1:0.0: Disconnecting em28xx [ 150.646667][ T5877] em28xx 1-1:0.0: Closing input extension [ 150.661802][ T6564] overlayfs: failed to resolve './file1/file0': -2 [ 150.760022][ T5877] em28xx 1-1:0.0: Freeing device [ 150.817782][ T12] bridge_slave_0: left allmulticast mode [ 150.817815][ T12] bridge_slave_0: left promiscuous mode [ 150.818456][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.837772][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 151.153662][ T6568] Malformed UNC in devname [ 151.153662][ T6568] [ 151.153680][ T6568] CIFS: VFS: Malformed UNC in devname [ 152.002045][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 152.002097][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 152.002120][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.586633][ T10] usb 4-1: config 0 descriptor?? [ 152.587497][ T6562] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.275915][ T10] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 153.276077][ T10] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 153.276106][ T10] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 153.276131][ T10] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 153.276156][ T10] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 153.276182][ T10] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 153.276706][ T10] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 153.276736][ T10] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 153.276761][ T10] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 153.276786][ T10] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 153.370288][ T10] logitech-djreceiver 0003:046D:C71F.0001: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 153.567771][ T10] usb 4-1: USB disconnect, device number 8 [ 153.890168][ T6585] fido_id[6585]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 154.005357][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.076893][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.129013][ T12] bond0 (unregistering): Released all slaves [ 155.302069][ T6599] Zero length message leads to an empty skb [ 155.302328][ T6599] netlink: 'syz.4.180': attribute type 10 has an invalid length. [ 155.814906][ T6599] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 155.973976][ T6610] overlay: ./file0 is not a directory [ 156.646281][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.800020][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 156.805071][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 156.805098][ T10] usb 5-1: config 0 has no interface number 0 [ 156.805124][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 156.805136][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 156.805146][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 156.805172][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 156.805183][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.833709][ T10] usb 5-1: config 0 descriptor?? [ 156.858108][ T5864] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 156.862950][ T10] ldusb 5-1:0.55: Interrupt in endpoint not found [ 157.006176][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 157.009150][ T5864] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.009179][ T5864] usb 1-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 157.009193][ T5864] usb 1-1: config 1 interface 0 has no altsetting 0 [ 157.014076][ T5864] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 157.014103][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.014122][ T5864] usb 1-1: Product: syz [ 157.014135][ T5864] usb 1-1: Manufacturer: syz [ 157.014148][ T5864] usb 1-1: SerialNumber: syz [ 157.076092][ T10] usb 5-1: USB disconnect, device number 4 [ 158.788647][ T6634] overlayfs: failed to resolve './file1': -2 [ 160.423802][ T31] IPVS: starting estimator thread 0... [ 160.510660][ T6644] IPVS: using max 16 ests per chain, 38400 per kthread [ 161.678857][ T12] hsr_slave_0: left promiscuous mode [ 161.706484][ T12] hsr_slave_1: left promiscuous mode [ 161.707684][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.707735][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.882710][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.882728][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.954067][ T12] veth1_macvtap: left promiscuous mode [ 161.954331][ T12] veth0_macvtap: left promiscuous mode [ 161.954595][ T12] veth1_vlan: left promiscuous mode [ 161.954847][ T12] veth0_vlan: left promiscuous mode [ 162.001115][ T5907] usb 1-1: USB disconnect, device number 5 [ 162.506172][ T5938] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 162.656168][ T5938] usb 3-1: Using ep0 maxpacket: 8 [ 162.658009][ T5938] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 162.658032][ T5938] usb 3-1: config 0 has no interface number 0 [ 162.658071][ T5938] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 162.658092][ T5938] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 162.658110][ T5938] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 162.658149][ T5938] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 162.658171][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.747506][ T5938] usb 3-1: config 0 descriptor?? [ 162.752211][ T5938] ldusb 3-1:0.55: Interrupt in endpoint not found [ 162.754455][ T12] team0 (unregistering): Port device team_slave_1 removed [ 162.826320][ T12] team0 (unregistering): Port device team_slave_0 removed [ 162.956119][ T5938] usb 3-1: USB disconnect, device number 2 [ 163.972875][ T6717] overlay: ./file0 is not a directory [ 166.836148][ T5907] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 167.013560][ T5907] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 167.013579][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.013589][ T5907] usb 4-1: Product: syz [ 167.013596][ T5907] usb 4-1: Manufacturer: syz [ 167.013603][ T5907] usb 4-1: SerialNumber: syz [ 167.067114][ T5907] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 167.293767][ T5877] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 167.918963][ T10] usb 4-1: USB disconnect, device number 9 [ 168.576150][ T5877] usb 4-1: Service connection timeout for: 256 [ 168.576172][ T5877] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 168.585364][ T5877] ath9k_htc: Failed to initialize the device [ 168.620362][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 169.540153][ T60] block nbd5: Receive control failed (result -32) [ 169.912757][ T6811] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 170.702989][ T6820] netlink: 'syz.2.240': attribute type 8 has an invalid length. [ 170.754793][ T6821] netlink: 68 bytes leftover after parsing attributes in process `syz.2.240'. [ 171.678210][ T6838] netlink: 'syz.0.247': attribute type 1 has an invalid length. [ 171.678229][ T6838] netlink: 188 bytes leftover after parsing attributes in process `syz.0.247'. [ 171.968193][ T60] block nbd6: Receive control failed (result -32) [ 172.404930][ T6856] netlink: 'syz.5.255': attribute type 8 has an invalid length. [ 172.455738][ T6857] netlink: 68 bytes leftover after parsing attributes in process `syz.5.255'. [ 173.231772][ T6860] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 173.576610][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 173.921644][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 173.923755][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.923844][ T10] usb 6-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.923870][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 173.983944][ T10] usb 6-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 173.983972][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.983990][ T10] usb 6-1: Product: syz [ 173.984004][ T10] usb 6-1: Manufacturer: syz [ 173.984017][ T10] usb 6-1: SerialNumber: syz [ 176.830657][ T31] usb 6-1: USB disconnect, device number 3 [ 177.010900][ T6925] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 177.766546][ T6942] netlink: 260 bytes leftover after parsing attributes in process `syz.0.285'. [ 180.265608][ T7002] bridge0: port 3(vlan2) entered blocking state [ 180.276994][ T7002] bridge0: port 3(vlan2) entered disabled state [ 180.277243][ T7002] vlan2: entered allmulticast mode [ 180.277259][ T7002] geneve0: entered allmulticast mode [ 180.312558][ T7002] vlan2: entered promiscuous mode [ 180.312580][ T7002] geneve0: entered promiscuous mode [ 181.734417][ T7026] netlink: 260 bytes leftover after parsing attributes in process `syz.2.310'. [ 183.156694][ T7038] netlink: 36 bytes leftover after parsing attributes in process `syz.0.315'. [ 183.499340][ T60] block nbd7: Receive control failed (result -32) [ 184.199972][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.320'. [ 186.134023][ T60] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 186.459445][ T7072] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 186.459471][ T7072] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.485233][ T7072] vhci_hcd vhci_hcd.0: Device attached [ 186.633019][ T7074] Malformed UNC in devname [ 186.633019][ T7074] [ 186.633038][ T7074] CIFS: VFS: Malformed UNC in devname [ 186.661260][ T7073] vhci_hcd: connection closed [ 186.696101][ T1182] vhci_hcd vhci_hcd.2: stop threads [ 186.697661][ T1182] vhci_hcd vhci_hcd.2: release socket [ 186.739449][ T1182] vhci_hcd vhci_hcd.2: disconnect device [ 186.752065][ T5907] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 186.752298][ T5907] usb 37-1: enqueue for inactive port 0 [ 186.816627][ T5907] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 187.675387][ T7100] overlay: ./file0 is not a directory [ 190.411502][ T36] audit: type=1326 audit(1773703982.314:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.5.346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93d001c799 code=0x0 [ 191.295474][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 192.053757][ T7167] bond1: Unable to set down delay as MII monitoring is disabled [ 192.698475][ T5938] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 192.916267][ T5938] usb 6-1: Using ep0 maxpacket: 32 [ 192.918387][ T5938] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.918435][ T5938] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.918460][ T5938] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.918481][ T5938] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 192.918506][ T5938] usb 6-1: config 0 interface 0 has no altsetting 0 [ 192.918536][ T5938] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 192.918558][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.953365][ T5938] usb 6-1: config 0 descriptor?? [ 193.048788][ T7167] bond1 (unregistering): Released all slaves [ 193.634612][ T5938] hid_parser_main: 451 callbacks suppressed [ 193.634628][ T5938] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 193.634646][ T5938] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 193.634661][ T5938] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 193.634676][ T5938] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 193.634691][ T5938] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 193.810280][ T7195] overlay: ./file0 is not a directory [ 194.321302][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.321367][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.389110][ T5938] hid-thrustmaster 0003:044F:B65D.0002: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 194.389382][ T5938] hid-thrustmaster 0003:044F:B65D.0002: Wrong number of endpoints? [ 194.393874][ C0] hid-thrustmaster 0003:044F:B65D.0002: URB to get model id failed with error -71 [ 194.439901][ T5938] usb 6-1: USB disconnect, device number 4 [ 194.863078][ T7204] fido_id[7204]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 196.506970][ T7232] trusted_key: encrypted_key: key user:syz not found [ 200.431966][ T7283] overlay: ./file0 is not a directory [ 201.556146][ T49] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 201.648927][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 201.648971][ T5803] Bluetooth: hci0: command 0x0406 tx timeout [ 201.649081][ T5803] Bluetooth: hci4: command 0x0406 tx timeout [ 201.649186][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 201.706736][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 201.710652][ T49] usb 4-1: unable to get BOS descriptor or descriptor too short [ 201.712884][ T49] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 201.712909][ T49] usb 4-1: config 4 has an invalid descriptor of length 244, skipping remainder of the config [ 201.712926][ T49] usb 4-1: config 4 has no interface number 0 [ 201.739769][ T49] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 201.739797][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.739815][ T49] usb 4-1: Product: syz [ 201.739828][ T49] usb 4-1: Manufacturer: syz [ 201.739841][ T49] usb 4-1: SerialNumber: syz [ 201.994299][ T49] uvcvideo 4-1:4.147: probe with driver uvcvideo failed with error -22 [ 202.004912][ T49] usb 4-1: USB disconnect, device number 10 [ 205.409210][ T7367] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 205.822130][ T7375] overlay: ./file0 is not a directory [ 208.410979][ T7382] overlayfs: missing 'lowerdir' [ 208.440976][ T7382] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 208.440997][ T7382] overlayfs: failed to set xattr on upper [ 208.441001][ T7382] overlayfs: ...falling back to redirect_dir=nofollow. [ 208.441005][ T7382] overlayfs: ...falling back to index=off. [ 208.441009][ T7382] overlayfs: ...falling back to uuid=null. [ 208.441113][ T7382] overlayfs: conflicting lowerdir path [ 210.425835][ T7414] overlay: ./file0 is not a directory [ 212.324324][ T7432] 9pnet_virtio: no channels available for device syz [ 212.386581][ T7432] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 212.811909][ T7432] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 212.814560][ T7432] overlayfs: failed to look up (tracing) for ino (-66) [ 215.400580][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 215.936712][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 215.938850][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 215.939969][ T10] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 215.939992][ T10] usb 4-1: config 4 has an invalid descriptor of length 244, skipping remainder of the config [ 215.940009][ T10] usb 4-1: config 4 has no interface number 0 [ 215.942232][ T10] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 215.942257][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.942275][ T10] usb 4-1: Product: syz [ 215.942288][ T10] usb 4-1: Manufacturer: syz [ 215.942300][ T10] usb 4-1: SerialNumber: syz [ 216.203148][ T10] uvcvideo 4-1:4.147: probe with driver uvcvideo failed with error -22 [ 216.216102][ T10] usb 4-1: USB disconnect, device number 11 [ 216.228217][ T7460] overlayfs: conflicting lowerdir path [ 216.300203][ T7462] bridge0: port 3(vlan2) entered blocking state [ 216.300407][ T7462] bridge0: port 3(vlan2) entered disabled state [ 216.300643][ T7462] vlan2: entered allmulticast mode [ 216.300658][ T7462] geneve0: entered allmulticast mode [ 216.303259][ T7462] vlan2: entered promiscuous mode [ 216.303288][ T7462] geneve0: entered promiscuous mode [ 217.375001][ T7478] bond1: Unable to set down delay as MII monitoring is disabled [ 217.617476][ T7478] bond1 (unregistering): Released all slaves [ 221.044709][ T7517] overlayfs: conflicting lowerdir path [ 222.459076][ T5799] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 226.694386][ T7570] overlayfs: conflicting lowerdir path [ 229.365847][ T7584] usb usb7: usbfs: process 7584 (syz.5.491) did not claim interface 0 before use [ 229.433225][ T5864] IPVS: starting estimator thread 0... [ 229.477118][ T5799] block nbd8: Receive control failed (result -32) [ 229.516102][ T7590] IPVS: using max 10 ests per chain, 24000 per kthread [ 230.465888][ T7609] overlayfs: failed to resolve './file1': -2 [ 231.800691][ T7623] usb usb7: usbfs: process 7623 (syz.2.506) did not claim interface 0 before use [ 232.176098][ T5806] Bluetooth: hci5: command 0x0406 tx timeout [ 233.001069][ T7645] overlayfs: failed to resolve './file1': -2 [ 235.676068][ T5938] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 235.831168][ T5938] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 235.831185][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.831195][ T5938] usb 6-1: Product: syz [ 235.831202][ T5938] usb 6-1: Manufacturer: syz [ 235.831209][ T5938] usb 6-1: SerialNumber: syz [ 235.886922][ T5938] usb 6-1: config 0 descriptor?? [ 235.902172][ T5938] hub 6-1:0.0: bad descriptor, ignoring hub [ 235.902192][ T5938] hub 6-1:0.0: probe with driver hub failed with error -5 [ 236.424994][ T7682] process 'syz.5.525' launched './file1' with NULL argv: empty string added [ 236.503174][ T7682] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 236.503478][ T7682] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 238.488492][ T5938] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 238.781025][ T5938] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 238.781069][ T5938] dib0700: firmware download failed at 7 with -22 [ 238.881217][ T5938] usb 6-1: USB disconnect, device number 5 [ 240.786824][ T7722] overlayfs: failed to resolve './file1': -2 [ 247.075858][ T7805] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 247.075932][ T7805] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 247.075968][ T7805] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 247.121894][ T7808] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 247.157541][ T7809] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 247.157561][ T7809] overlayfs: failed to set xattr on upper [ 247.157565][ T7809] overlayfs: ...falling back to redirect_dir=nofollow. [ 247.157569][ T7809] overlayfs: ...falling back to index=off. [ 247.157573][ T7809] overlayfs: ...falling back to uuid=null. [ 247.157599][ T7809] overlayfs: conflicting lowerdir path [ 248.983496][ T7836] autofs: Unknown parameter '0x0000000000000000' [ 249.549052][ T7836] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 250.366099][ T7842] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 252.231440][ T7877] netlink: 'syz.2.594': attribute type 8 has an invalid length. [ 252.297852][ T7880] netlink: 68 bytes leftover after parsing attributes in process `syz.2.594'. [ 252.686067][ T7881] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 252.686085][ T7881] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 252.686111][ T7881] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 254.351036][ T7878] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 254.351064][ T7878] overlayfs: failed to set xattr on upper [ 254.351071][ T7878] overlayfs: ...falling back to redirect_dir=nofollow. [ 254.351079][ T7878] overlayfs: ...falling back to index=off. [ 254.351086][ T7878] overlayfs: ...falling back to uuid=null. [ 254.351127][ T7878] overlayfs: conflicting lowerdir path [ 255.011595][ T7910] netlink: 260 bytes leftover after parsing attributes in process `syz.0.611'. [ 256.514439][ T7924] syz.3.618 (7924) used greatest stack depth: 15272 bytes left [ 256.553445][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.553512][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.582808][ T5882] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 257.756403][ T5882] usb 6-1: Using ep0 maxpacket: 16 [ 257.874933][ T5882] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.888810][ T5882] usb 6-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 257.888838][ T5882] usb 6-1: config 1 interface 0 has no altsetting 0 [ 258.012701][ T5882] usb 6-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 258.012730][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.012747][ T5882] usb 6-1: Product: syz [ 258.012761][ T5882] usb 6-1: Manufacturer: syz [ 258.012774][ T5882] usb 6-1: SerialNumber: syz [ 258.568888][ T5864] usb 6-1: USB disconnect, device number 6 [ 258.778655][ T36] audit: type=1326 audit(1773704050.694:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7954 comm="syz.2.630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd5822c799 code=0x0 [ 260.629227][ T7973] overlayfs: missing 'lowerdir' [ 260.740890][ T7979] overlay: ./file0 is not a directory [ 262.510427][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.646'. [ 263.689471][ T8007] overlayfs: conflicting lowerdir path [ 264.746909][ T204] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 264.827528][ T43] Bluetooth: hci2: Frame reassembly failed (-84) [ 266.630746][ T31] libceph: connect (1)[c::]:6789 error -101 [ 266.631615][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 266.746046][ T5799] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 266.894302][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 266.894415][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 267.146134][ T5877] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 267.294707][ T8034] ceph: No mds server is up or the cluster is laggy [ 267.310576][ T5877] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 267.310698][ T5877] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 267.310725][ T5877] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.310749][ T5877] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 267.310775][ T5877] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 267.312045][ T5877] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 267.312089][ T5877] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 267.312114][ T5877] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.312137][ T5877] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 267.312158][ T5877] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 267.313579][ T5877] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 267.313625][ T5877] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 267.313649][ T5877] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.313673][ T5877] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 267.313696][ T5877] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 267.347642][ T5877] usb 4-1: string descriptor 0 read error: -22 [ 267.347773][ T5877] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 267.347794][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.444789][ T5877] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 267.487358][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 267.490232][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 269.534185][ T31] usb 4-1: USB disconnect, device number 12 [ 270.871832][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 270.872016][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 271.138897][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 271.139013][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 271.648267][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 271.648396][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 271.677842][ T8086] ceph: No mds server is up or the cluster is laggy [ 272.588929][ T8113] overlayfs: missing 'workdir' [ 273.341013][ T8113] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 273.341038][ T8113] overlayfs: failed to set xattr on upper [ 273.341046][ T8113] overlayfs: ...falling back to redirect_dir=nofollow. [ 273.341053][ T8113] overlayfs: ...falling back to index=off. [ 273.341060][ T8113] overlayfs: ...falling back to uuid=null. [ 273.341098][ T8113] overlayfs: conflicting lowerdir path [ 274.412664][ T1056] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 274.421791][ T1056] Bluetooth: hci2: Frame reassembly failed (-84) [ 275.938597][ T5806] Bluetooth: hci2: command 0x1003 tx timeout [ 275.947534][ T5799] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 276.111596][ T8134] netlink: 260 bytes leftover after parsing attributes in process `syz.2.695'. [ 277.511644][ T31] libceph: connect (1)[c::]:6789 error -101 [ 277.511867][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 277.774020][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 277.774181][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 277.996584][ T8161] netlink: 20 bytes leftover after parsing attributes in process `syz.5.703'. [ 278.147462][ T8144] ceph: No mds server is up or the cluster is laggy [ 280.966122][ T5938] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 281.147252][ T5938] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 281.150829][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.152452][ T5938] usb 4-1: Product: syz [ 281.152467][ T5938] usb 4-1: Manufacturer: syz [ 281.152510][ T5938] usb 4-1: SerialNumber: syz [ 281.205055][ T5938] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 281.358228][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 281.552624][ T8204] netlink: 40 bytes leftover after parsing attributes in process `syz.0.717'. [ 281.877752][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 282.496353][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 282.498857][ T10] ath9k_htc: Failed to initialize the device [ 282.947463][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 283.068716][ T5938] usb 4-1: USB disconnect, device number 13 [ 283.248135][ T8236] dvmrp9: entered allmulticast mode [ 283.698611][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.734'. [ 284.016098][ T810] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 284.182339][ T810] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 284.182368][ T810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.182386][ T810] usb 4-1: Product: syz [ 284.182399][ T810] usb 4-1: Manufacturer: syz [ 284.182413][ T810] usb 4-1: SerialNumber: syz [ 284.189543][ T810] usb 4-1: config 0 descriptor?? [ 284.208438][ T810] hub 4-1:0.0: bad descriptor, ignoring hub [ 284.208472][ T810] hub 4-1:0.0: probe with driver hub failed with error -5 [ 284.627617][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'. [ 286.746099][ T810] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 286.749220][ T810] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 286.749265][ T810] dib0700: firmware download failed at 7 with -22 [ 286.796771][ T810] usb 4-1: USB disconnect, device number 14 [ 288.338258][ T8308] Malformed UNC in devname [ 288.338258][ T8308] [ 288.338302][ T8308] CIFS: VFS: Malformed UNC in devname [ 292.947270][ T5877] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 293.101461][ T5877] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 293.101489][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.101509][ T5877] usb 1-1: Product: syz [ 293.101522][ T5877] usb 1-1: Manufacturer: syz [ 293.101535][ T5877] usb 1-1: SerialNumber: syz [ 293.158741][ T5877] usb 1-1: config 0 descriptor?? [ 293.171424][ T5877] hub 1-1:0.0: bad descriptor, ignoring hub [ 293.171460][ T5877] hub 1-1:0.0: probe with driver hub failed with error -5 [ 295.710422][ T5877] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 295.712928][ T5877] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 295.712974][ T5877] dib0700: firmware download failed at 7 with -22 [ 295.853844][ T5877] usb 1-1: USB disconnect, device number 6 [ 298.560501][ T8405] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 306.714619][ T36] audit: type=1326 audit(1773704098.614:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef26c799 code=0x7fc00000 [ 306.714666][ T36] audit: type=1326 audit(1773704098.614:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f25ef26c799 code=0x7fc00000 [ 306.714708][ T36] audit: type=1326 audit(1773704098.614:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef26c799 code=0x7fc00000 [ 306.714744][ T36] audit: type=1326 audit(1773704098.614:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef26c799 code=0x7fc00000 [ 306.714779][ T36] audit: type=1326 audit(1773704098.614:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef26c799 code=0x7fc00000 [ 306.714816][ T36] audit: type=1326 audit(1773704098.614:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef26c799 code=0x7fc00000 [ 306.714851][ T36] audit: type=1326 audit(1773704098.614:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef26c799 code=0x7fc00000 [ 306.714886][ T36] audit: type=1326 audit(1773704098.614:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef26c799 code=0x7fc00000 [ 306.714922][ T36] audit: type=1326 audit(1773704098.614:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef26c799 code=0x7fc00000 [ 306.714958][ T36] audit: type=1326 audit(1773704098.614:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8482 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef26c799 code=0x7fc00000 [ 308.996629][ T8532] Malformed UNC in devname [ 308.996629][ T8532] [ 308.996648][ T8532] CIFS: VFS: Malformed UNC in devname [ 309.781086][ T8547] netlink: 'syz.0.845': attribute type 8 has an invalid length. [ 309.838786][ T8548] netlink: 68 bytes leftover after parsing attributes in process `syz.0.845'. [ 312.041110][ T8578] trusted_key: encrypted_key: key user:syz not found [ 312.444710][ T8592] netlink: 'syz.5.862': attribute type 8 has an invalid length. [ 312.496219][ T8593] netlink: 68 bytes leftover after parsing attributes in process `syz.5.862'. [ 312.623847][ T43] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 312.641104][ T1056] Bluetooth: hci2: Frame reassembly failed (-84) [ 314.658692][ T5806] Bluetooth: hci2: command 0x1003 tx timeout [ 314.744966][ T5799] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 316.858296][ T8672] overlay: Unknown parameter '/' [ 317.145346][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.145411][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.113641][ T8685] netlink: 'syz.2.899': attribute type 4 has an invalid length. [ 322.357606][ T8749] overlay: Unknown parameter '/' [ 324.512726][ T8769] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 328.276412][ T8821] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 329.416098][ T810] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 329.565987][ T810] usb 4-1: Using ep0 maxpacket: 8 [ 329.567636][ T810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.569773][ T810] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 329.569797][ T810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.569813][ T810] usb 4-1: Product: syz [ 329.569820][ T810] usb 4-1: Manufacturer: syz [ 329.569827][ T810] usb 4-1: SerialNumber: syz [ 329.578131][ T810] usb 4-1: config 0 descriptor?? [ 329.591445][ T810] cdc_ether 4-1:0.0: skipping garbage [ 329.591464][ T810] usb 4-1: bad CDC descriptors [ 329.592516][ T810] usb 4-1: unsupported MDLM descriptors [ 329.616759][ T810] cdc_acm 4-1:0.0: skipping garbage [ 330.086034][ T10] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 330.238021][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 330.238074][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 330.238100][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 330.238124][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 330.238149][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 330.239206][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 330.239253][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 330.239277][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 330.239301][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 330.239323][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 330.240516][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 330.240572][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 330.240597][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 330.240621][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 330.240645][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 330.243997][ T10] usb 1-1: string descriptor 0 read error: -22 [ 330.244142][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 330.244164][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.479513][ T10] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 331.736120][ T9] usb 4-1: USB disconnect, device number 15 [ 331.738255][ T10] usb 1-1: USB disconnect, device number 7 [ 332.456070][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 332.611182][ T10] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 332.611211][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.611230][ T10] usb 4-1: Product: syz [ 332.611243][ T10] usb 4-1: Manufacturer: syz [ 332.611256][ T10] usb 4-1: SerialNumber: syz [ 332.684848][ T10] usb 4-1: config 0 descriptor?? [ 332.706534][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 332.706570][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 335.190713][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 335.192965][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 335.193010][ T10] dib0700: firmware download failed at 7 with -22 [ 335.256595][ T8915] netlink: 40 bytes leftover after parsing attributes in process `syz.2.980'. [ 335.288043][ T10] usb 4-1: USB disconnect, device number 16 [ 336.196091][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 336.368323][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 336.368371][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 336.368393][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.752810][ T10] usb 4-1: config 0 descriptor?? [ 336.761833][ T8917] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 337.527252][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 337.527326][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 337.551181][ T10] usb 4-1: USB disconnect, device number 17 [ 339.704279][ T8969] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 342.097148][ T8983] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1004'. [ 342.108893][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1004'. [ 347.825061][ T9047] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 348.497403][ T5799] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 353.250909][ T9118] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1042'. [ 353.286194][ T5907] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 353.441883][ T5907] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 353.441912][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.441931][ T5907] usb 6-1: Product: syz [ 353.441944][ T5907] usb 6-1: Manufacturer: syz [ 353.441966][ T5907] usb 6-1: SerialNumber: syz [ 353.484278][ T5907] usb 6-1: config 0 descriptor?? [ 354.012410][ T5907] hub 6-1:0.0: bad descriptor, ignoring hub [ 354.012768][ T5907] hub 6-1:0.0: probe with driver hub failed with error -5 [ 355.197091][ T9135] trusted_key: encrypted_key: insufficient parameters specified [ 356.610454][ T9142] overlayfs: failed to resolve './file1': -2 [ 356.931978][ T5907] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 356.933134][ T5907] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 356.933229][ T5907] dib0700: firmware download failed at 7 with -22 [ 357.310232][ T5907] usb 6-1: USB disconnect, device number 7 [ 357.497172][ T9157] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1055'. [ 357.812922][ T9166] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1060'. [ 358.722781][ T9172] netlink: 'syz.2.1062': attribute type 1 has an invalid length. [ 358.722801][ T9172] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1062'. [ 358.771914][ T9180] overlayfs: failed to resolve './file1': -2 [ 359.067222][ T9186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1068'. [ 360.960112][ T9213] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 360.960185][ T9213] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 362.191466][ T9226] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 363.569981][ T9246] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 363.570007][ T9246] overlayfs: failed to set xattr on upper [ 363.570015][ T9246] overlayfs: ...falling back to redirect_dir=nofollow. [ 363.570022][ T9246] overlayfs: ...falling back to index=off. [ 363.570029][ T9246] overlayfs: ...falling back to uuid=null. [ 363.625185][ T9247] overlayfs: missing 'lowerdir' [ 365.023300][ T9263] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 365.157373][ T9266] usb usb7: usbfs: process 9266 (syz.5.1100) did not claim interface 0 before use [ 367.762191][ T9289] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 367.762219][ T9289] overlayfs: failed to set xattr on upper [ 367.762226][ T9289] overlayfs: ...falling back to redirect_dir=nofollow. [ 367.762234][ T9289] overlayfs: ...falling back to index=off. [ 367.762241][ T9289] overlayfs: ...falling back to uuid=null. [ 367.823230][ T9293] overlayfs: missing 'lowerdir' [ 368.623866][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 369.385940][ T9316] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 369.634606][ T9325] block nbd5: Cannot use ioctl interface on a netlink controlled device. [ 370.615189][ T5806] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 370.634926][ T9339] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 370.634944][ T9339] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 370.636726][ T9339] vhci_hcd vhci_hcd.0: Device attached [ 370.907755][ T5907] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 371.202127][ T9341] vhci_hcd: connection reset by peer [ 371.225585][ T6333] vhci_hcd vhci_hcd.2: stop threads [ 371.225608][ T6333] vhci_hcd vhci_hcd.2: release socket [ 371.225743][ T6333] vhci_hcd vhci_hcd.2: disconnect device [ 371.469653][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'. [ 372.087349][ T9370] bond1: Unable to set down delay as MII monitoring is disabled [ 372.629713][ T9370] bond1 (unregistering): Released all slaves [ 374.937896][ T3444] Bluetooth: hci2: Frame reassembly failed (-84) [ 374.940528][ T3444] Bluetooth: hci2: Frame reassembly failed (-84) [ 374.940812][ T3444] Bluetooth: hci2: Frame reassembly failed (-84) [ 374.941218][ T3444] Bluetooth: hci2: Frame reassembly failed (-84) [ 374.942469][ T3444] Bluetooth: hci2: Frame reassembly failed (-84) [ 374.942817][ T3444] Bluetooth: hci2: Frame reassembly failed (-84) [ 375.586857][ T9420] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 375.586875][ T9420] overlayfs: failed to set xattr on upper [ 375.586879][ T9420] overlayfs: ...falling back to redirect_dir=nofollow. [ 375.586883][ T9420] overlayfs: ...falling back to index=off. [ 375.586886][ T9420] overlayfs: ...falling back to uuid=null. [ 375.758024][ T9425] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 375.758055][ T9425] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 375.874204][ T9427] overlayfs: failed to resolve './file1': -2 [ 376.693711][ T5907] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 376.736000][ T5806] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 379.036210][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.602922][ T5130] ------------[ cut here ]------------ [ 381.602934][ T5130] in_task() && kcov_mode_enabled(mode) [ 381.602948][ T5130] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#0: kworker/0:3/5130 [ 381.603064][ T5130] Modules linked in: [ 381.603099][ T5130] CPU: 0 UID: 0 PID: 5130 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 381.603183][ T5130] Tainted: [L]=SOFTLOCKUP [ 381.603191][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.603203][ T5130] Workqueue: usb_hub_wq hub_event [ 381.603316][ T5130] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 381.603350][ T5130] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a2 7b d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 fa 65 5e 09 89 c0 48 c7 c7 20 d4 4e [ 381.603366][ T5130] RSP: 0000:ffffc900113577c8 EFLAGS: 00010202 [ 381.603414][ T5130] RAX: 0000000000000002 RBX: ffff888037c51e80 RCX: 0000000000000000 [ 381.603436][ T5130] RDX: 0000000000000000 RSI: ffffffff8ba666e0 RDI: ffffffff8ba666a0 [ 381.603449][ T5130] RBP: ffffc90011357ad0 R08: ffffffff8b2521d0 R09: ffffffff8ddcb980 [ 381.603464][ T5130] R10: dffffc0000000000 R11: fffffbfff1ed4797 R12: ffff888029c10000 [ 381.603478][ T5130] R13: dffffc0000000000 R14: 0100000000000006 R15: ffff888029bf4000 [ 381.603493][ T5130] FS: 0000000000000000(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 [ 381.603509][ T5130] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.603522][ T5130] CR2: 00005555877744e8 CR3: 000000005d08a000 CR4: 00000000003526f0 [ 381.603543][ T5130] Call Trace: [ 381.603551][ T5130] [ 381.603564][ T5130] hub_event+0x150/0x4f60 [ 381.603593][ T5130] ? __lock_acquire+0x6b5/0x2cf0 [ 381.603666][ T5130] ? look_up_lock_class+0x57/0x110 [ 381.603778][ T5130] ? register_lock_class+0x31/0x2e0 [ 381.603812][ T5130] ? __lock_acquire+0x6b5/0x2cf0 [ 381.603846][ T5130] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 381.603876][ T5130] ? __pfx_hub_event+0x10/0x10 [ 381.603908][ T5130] ? process_scheduled_works+0xa8d/0x18c0 [ 381.603944][ T5130] ? process_scheduled_works+0xa8d/0x18c0 [ 381.603973][ T5130] process_scheduled_works+0xb6e/0x18c0 [ 381.604031][ T5130] ? __pfx_process_scheduled_works+0x10/0x10 [ 381.604065][ T5130] ? assign_work+0x3d5/0x5e0 [ 381.604096][ T5130] worker_thread+0xa53/0xfc0 [ 381.604150][ T5130] kthread+0x388/0x470 [ 381.604171][ T5130] ? __pfx_worker_thread+0x10/0x10 [ 381.604196][ T5130] ? __pfx_kthread+0x10/0x10 [ 381.604219][ T5130] ret_from_fork+0x51e/0xb90 [ 381.604263][ T5130] ? __pfx_ret_from_fork+0x10/0x10 [ 381.604288][ T5130] ? __switch_to+0xc7d/0x1450 [ 381.604333][ T5130] ? __pfx_kthread+0x10/0x10 [ 381.604353][ T5130] ret_from_fork_asm+0x1a/0x30 [ 381.604398][ T5130] [ 381.604424][ T5130] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 381.604442][ T5130] CPU: 0 UID: 0 PID: 5130 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 381.604469][ T5130] Tainted: [L]=SOFTLOCKUP [ 381.604477][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.604490][ T5130] Workqueue: usb_hub_wq hub_event [ 381.604516][ T5130] Call Trace: [ 381.604523][ T5130] [ 381.604530][ T5130] vpanic+0x56c/0xa60 [ 381.604569][ T5130] ? __pfx__printk+0x10/0x10 [ 381.604591][ T5130] ? __pfx_vpanic+0x10/0x10 [ 381.604619][ T5130] ? is_bpf_text_address+0x292/0x2b0 [ 381.604659][ T5130] ? is_bpf_text_address+0x26/0x2b0 [ 381.604691][ T5130] panic+0xc5/0xd0 [ 381.604715][ T5130] ? __pfx_panic+0x10/0x10 [ 381.604746][ T5130] ? ret_from_fork_asm+0x1a/0x30 [ 381.604768][ T5130] __warn+0x315/0x4f0 [ 381.604790][ T5130] ? kcov_remote_start+0x5d8/0x710 [ 381.604811][ T5130] ? kcov_remote_start+0x5d8/0x710 [ 381.604831][ T5130] __report_bug+0x29a/0x540 [ 381.604928][ T5130] ? kcov_remote_start+0x5d8/0x710 [ 381.604951][ T5130] ? __pfx___report_bug+0x10/0x10 [ 381.604982][ T5130] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 381.605066][ T5130] ? do_raw_spin_lock+0x12b/0x2f0 [ 381.605102][ T5130] ? kcov_remote_start+0x5d8/0x710 [ 381.605125][ T5130] report_bug+0x16a/0x220 [ 381.605152][ T5130] ? kcov_remote_start+0x5d8/0x710 [ 381.605172][ T5130] ? kcov_remote_start+0x5da/0x710 [ 381.605194][ T5130] handle_bug+0x9c/0x200 [ 381.605213][ T5130] exc_invalid_op+0x1a/0x50 [ 381.605233][ T5130] asm_exc_invalid_op+0x1a/0x20 [ 381.605269][ T5130] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 381.605293][ T5130] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a2 7b d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 fa 65 5e 09 89 c0 48 c7 c7 20 d4 4e [ 381.605309][ T5130] RSP: 0000:ffffc900113577c8 EFLAGS: 00010202 [ 381.605324][ T5130] RAX: 0000000000000002 RBX: ffff888037c51e80 RCX: 0000000000000000 [ 381.605335][ T5130] RDX: 0000000000000000 RSI: ffffffff8ba666e0 RDI: ffffffff8ba666a0 [ 381.605349][ T5130] RBP: ffffc90011357ad0 R08: ffffffff8b2521d0 R09: ffffffff8ddcb980 [ 381.605364][ T5130] R10: dffffc0000000000 R11: fffffbfff1ed4797 R12: ffff888029c10000 [ 381.605379][ T5130] R13: dffffc0000000000 R14: 0100000000000006 R15: ffff888029bf4000 [ 381.605401][ T5130] ? rt_spin_lock+0x1e0/0x400 [ 381.605439][ T5130] ? kcov_remote_start+0xe0/0x710 [ 381.605464][ T5130] hub_event+0x150/0x4f60 [ 381.605494][ T5130] ? __lock_acquire+0x6b5/0x2cf0 [ 381.605518][ T5130] ? look_up_lock_class+0x57/0x110 [ 381.605546][ T5130] ? register_lock_class+0x31/0x2e0 [ 381.605577][ T5130] ? __lock_acquire+0x6b5/0x2cf0 [ 381.605611][ T5130] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 381.605638][ T5130] ? __pfx_hub_event+0x10/0x10 [ 381.605666][ T5130] ? process_scheduled_works+0xa8d/0x18c0 [ 381.605690][ T5130] ? process_scheduled_works+0xa8d/0x18c0 [ 381.605718][ T5130] process_scheduled_works+0xb6e/0x18c0 [ 381.605773][ T5130] ? __pfx_process_scheduled_works+0x10/0x10 [ 381.605802][ T5130] ? assign_work+0x3d5/0x5e0 [ 381.605835][ T5130] worker_thread+0xa53/0xfc0 [ 381.605885][ T5130] kthread+0x388/0x470 [ 381.605907][ T5130] ? __pfx_worker_thread+0x10/0x10 [ 381.605988][ T5130] ? __pfx_kthread+0x10/0x10 [ 381.606015][ T5130] ret_from_fork+0x51e/0xb90 [ 381.606044][ T5130] ? __pfx_ret_from_fork+0x10/0x10 [ 381.606071][ T5130] ? __switch_to+0xc7d/0x1450 [ 381.606101][ T5130] ? __pfx_kthread+0x10/0x10 [ 381.606131][ T5130] ret_from_fork_asm+0x1a/0x30 [ 381.606164][ T5130] [ 381.606420][ T5130] Kernel Offset: disabled