last executing test programs: 15m46.57311993s ago: executing program 4 (id=60): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba800000", 0x2c}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) 15m46.209613384s ago: executing program 4 (id=63): r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r1 = dup3(r0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) 15m45.052665775s ago: executing program 4 (id=66): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x2, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008040) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x5) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000002640)={'team_slave_0\x00', @random="76e04c34b99d"}) ppoll(&(0x7f0000000140)=[{r0, 0x9200}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 15m41.948659096s ago: executing program 4 (id=77): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f0000000740)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x405}}}, 0x7) setpriority(0x0, 0x1, 0xa7a8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) 15m40.693507899s ago: executing program 4 (id=80): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) 15m39.825218765s ago: executing program 4 (id=82): syz_usb_connect(0x2, 0x36, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 15m24.600662001s ago: executing program 32 (id=82): syz_usb_connect(0x2, 0x36, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 15m6.051530995s ago: executing program 2 (id=184): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f00000004c0), 0x800) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00"/28, @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000680)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) close(0xffffffffffffffff) connect$inet(r0, 0x0, 0x0) 15m0.79115565s ago: executing program 2 (id=195): r0 = shmget$private(0x0, 0xf000, 0x200, &(0x7f0000ff1000/0xf000)=nil) shmat(r0, &(0x7f0000ff1000/0x2000)=nil, 0x3000) 15m0.675829133s ago: executing program 2 (id=197): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x14, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15m0.492636083s ago: executing program 2 (id=199): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x2200890, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 14m59.521315671s ago: executing program 2 (id=204): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f00000004c0), 0x800) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00"/28, @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000680)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) close(0xffffffffffffffff) connect$inet(r0, 0x0, 0x0) 14m56.816756535s ago: executing program 2 (id=216): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 14m56.365231107s ago: executing program 33 (id=216): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 4m32.378881345s ago: executing program 3 (id=1968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4m31.160501479s ago: executing program 3 (id=1973): socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) getpid() getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002400000"], 0xdc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 4m30.324493523s ago: executing program 3 (id=1981): socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000e40)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f0000000402000004002000e10c00000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900"], 0x258) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000340)={0x0, "8527d2413790af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589ddb3c101840af347c1a253ec5fb", 0x18}, 0x48, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 4m30.167638422s ago: executing program 3 (id=1983): syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x8, "f492c9", 0xffff, 0xb0, "e0d2390f577cb1b6abe858b316f559b55e759a2e33e786e6c3ea1ba90389817c419a0ca276fc9523e1ec89f2495fa501840ece6c894b91d0075215ddac8aab2b11e779b625d4a145c075564ba06e48ed757e1bf27492da2ea1ab06df7e886d1bc99096b2f540ba19db3c1fddc4ea84492b54f0619308b55148818aaa8f1f447ee79e27fdc9fd75da342dd86e62f3604abff391122c29feafe613b5f7496a0e818dd21e7b24f99f1bf23725989ec4bc09d79f3be49273bcfe0039a246b141f714d28be72cb1f9de4a9fcadc98eea0331106fd5704e4f801aa8b11bd8a62e0c6a4eaa1d775a56414f69f5d964923bafa79"}]}}}, 0x102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in6={{0xa, 0x4e24, 0x9, @private1, 0x8}}, 0x9, 0x8, 0x6, 0xfffff43e, 0x8}, &(0x7f0000000300)=0x98) 4m27.952543119s ago: executing program 3 (id=1989): signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r0 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) fchdir(r1) r2 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x1595, 0x10100, 0x0, 0x17c, 0x0, r1}, &(0x7f0000000040), &(0x7f00000003c0)) io_uring_enter(r2, 0x44fd, 0x3, 0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000200)=""/179, 0xb3) 4m26.885393042s ago: executing program 3 (id=1993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2000000008b}, 0x0) socket$tipc(0x1e, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 3m45.968603709s ago: executing program 5 (id=2102): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x84c2, 0x2, 0x9, 0xd, 0x602, 0x7be}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x8000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3m45.083097062s ago: executing program 5 (id=2107): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0}, 0x94) bind$netlink(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) 3m41.252617549s ago: executing program 5 (id=2113): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4004040) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x8, 0x4, 0x21, 0xc1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000640), 0xb47, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) 3m40.280643709s ago: executing program 5 (id=2116): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x84c2, 0x2, 0x9, 0xd, 0x602, 0x7be}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x8000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3m39.532656167s ago: executing program 5 (id=2122): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}, 0x106}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x2f, 0x0}, 0xffffff7f}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000540)=""/4124, 0x101c}, {&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f0000000440)=""/247, 0xf7}, {&(0x7f0000000180)=""/61, 0x3d}], 0x4}, 0xb}], 0x4, 0x10100, 0x0) 3m37.095792493s ago: executing program 5 (id=2128): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300", 0x69}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5", 0x9d}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f", 0x5d}], 0x1}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m21.304167912s ago: executing program 34 (id=2128): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300", 0x69}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5", 0x9d}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f", 0x5d}], 0x1}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.855411365s ago: executing program 1 (id=2619): socket$kcm(0x11, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000), &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x9) bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x8}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r0, &(0x7f0000002640), 0x400000000000143, 0x2, 0x0) 6.632584199s ago: executing program 1 (id=2620): openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x40000) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24020844}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB], 0xcdc}}, 0x0) 5.458041564s ago: executing program 1 (id=2623): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000ac0), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x25) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f00000000c0)) recvfrom$unix(r2, &(0x7f0000000240)=""/266, 0xffffffffffffffa6, 0x62, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="7800000019001f05b9409b0dffff000d0207be040205060506144007430005000f000000fac8388827a685a168d9a446040045653600648dcaaf6c26", 0x3c, 0x0, 0x0, 0x0) 5.44926742s ago: executing program 6 (id=2624): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x144}}, 0x0) 3.820632179s ago: executing program 0 (id=2625): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f37e9140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x48, 0x0, 0x0, 0x0) 3.693541064s ago: executing program 1 (id=2626): socket(0x80000000000000a, 0x2, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000e40)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f00000004020000"], 0x258) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000340)={0x0, "8527d2413790af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589ddb3c101840af347c1a253ec5fb", 0x18}, 0x48, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 3.544636738s ago: executing program 0 (id=2627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000007010400000000060000000000000208000540000000030900010073797a31000000006ef0670fedff"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4) 3.413961833s ago: executing program 0 (id=2628): socket$kcm(0x11, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000), &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x9) bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x8}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r0, &(0x7f0000002640), 0x400000000000143, 0x2, 0x0) 3.236550576s ago: executing program 0 (id=2629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x21, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) 2.317656802s ago: executing program 1 (id=2630): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r1, 0x0, 0x0, 0x800, 0x0) gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000880), &(0x7f0000000440)}}, &(0x7f0000bbdffc)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x80000000}, 0x8) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000340)=""/228, 0xe4}], 0x1, 0xfffffff6, 0x9) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) syz_usb_connect(0x2, 0x35, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff70790008240301210126ff0905850308"], 0x0) 1.942210141s ago: executing program 6 (id=2631): openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x40000) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24020844}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB], 0xcdc}}, 0x0) 858.557808ms ago: executing program 6 (id=2632): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(0x0, 0x0, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x2, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 772.537816ms ago: executing program 1 (id=2633): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) r3 = socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$kcm(0x10, 0x2, 0x4) connect(r3, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x65, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1, 0x1}, 0x80) sendmsg$kcm(r4, &(0x7f0000000100), 0x0) fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) ioperm(0x9, 0x40, 0x8001) syz_open_dev$sndmidi(0x0, 0xfffffffffffffffa, 0x18000) 708.517634ms ago: executing program 6 (id=2634): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) 548.487849ms ago: executing program 0 (id=2635): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) read(r0, &(0x7f00000002c0)=""/237, 0xed) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) preadv2(r0, &(0x7f0000000f80), 0x0, 0x2, 0x4, 0x14) 404.639173ms ago: executing program 0 (id=2636): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 113.659516ms ago: executing program 6 (id=2637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ac4000000060a0b0400000000000000000200fffe980004802800018008000100666962001c000280080003400000000608000240000000020800014000000009200001800700010063740000140002800800024000000011080004400000000c400001800d00010073796e70726f7879000000002c000280050002000700000005000200090000000600014090100400050002000200000006000140000800000c00018008000100647570000900010073797a"], 0x100}}, 0x0) 0s ago: executing program 6 (id=2638): socket$can_bcm(0x1d, 0x2, 0x2) memfd_create(0x0, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xd1}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): uetooth: hci3: Malformed LE Event: 0x1d [ 516.053371][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.094756][ T12] bond0 (unregistering): Released all slaves [ 516.118371][T12397] mkiss: ax0: crc mode is auto. [ 516.783635][T12007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.783647][T12007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.783661][T12007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.789957][T12007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.789973][T12007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.789999][T12007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.992784][ T12] hsr_slave_0: left promiscuous mode [ 518.001041][T12412] capability: warning: `syz.0.1157' uses deprecated v2 capabilities in a way that may be insecure [ 518.052884][ T12] hsr_slave_1: left promiscuous mode [ 518.053987][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.110777][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.571190][ T12] hsr_slave_0: left promiscuous mode [ 518.602862][ T12] hsr_slave_1: left promiscuous mode [ 518.603776][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.653704][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.799252][ T5810] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 519.363499][ T12] team0 (unregistering): Port device team_slave_1 removed [ 519.503379][ T12] team0 (unregistering): Port device team_slave_0 removed [ 520.310504][T12435] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 522.723671][ T12] team0 (unregistering): Port device team_slave_1 removed [ 522.843263][ T12] team0 (unregistering): Port device team_slave_0 removed [ 523.703576][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1169'. [ 523.764164][T12007] hsr_slave_0: entered promiscuous mode [ 523.766883][T12007] hsr_slave_1: entered promiscuous mode [ 523.768688][T12007] debugfs: 'hsr0' already exists in 'hsr' [ 523.768721][T12007] Cannot create hsr debugfs directory [ 525.460970][T12298] chnl_net:caif_netlink_parms(): no params data found [ 526.156115][T12491] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 528.454520][T12298] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.454599][T12298] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.454744][T12298] bridge_slave_0: entered allmulticast mode [ 528.456424][T12298] bridge_slave_0: entered promiscuous mode [ 528.461844][T12298] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.461919][T12298] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.462082][T12298] bridge_slave_1: entered allmulticast mode [ 528.484428][T12298] bridge_slave_1: entered promiscuous mode [ 529.016773][ T5117] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 529.104962][T12298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.157439][T12298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.340427][T12298] team0: Port device team_slave_0 added [ 530.409693][T12298] team0: Port device team_slave_1 added [ 531.240547][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 531.255139][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 531.257094][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 531.258758][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 531.263420][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 532.058675][T12298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.058691][T12298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.058717][T12298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.061839][T12298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.061856][T12298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.061881][T12298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.362857][ T5810] Bluetooth: hci4: command tx timeout [ 534.064077][T12298] hsr_slave_0: entered promiscuous mode [ 534.067807][T12298] hsr_slave_1: entered promiscuous mode [ 534.076143][T12298] debugfs: 'hsr0' already exists in 'hsr' [ 534.076173][T12298] Cannot create hsr debugfs directory [ 534.079154][T12539] lo speed is unknown, defaulting to 1000 [ 535.452783][ T5810] Bluetooth: hci4: command tx timeout [ 537.664545][ T5810] Bluetooth: hci4: command tx timeout [ 538.658944][T12606] random: crng reseeded on system resumption [ 538.999224][ T5810] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 539.406066][T12618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1202'. [ 539.406240][T12618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1202'. [ 539.963357][ T5810] Bluetooth: hci4: command tx timeout [ 542.417327][T12639] tipc: Started in network mode [ 542.417355][T12639] tipc: Node identity ac14140f, cluster identity 4711 [ 542.447259][T12639] tipc: New replicast peer: 255.255.255.255 [ 542.470256][T12639] tipc: Enabled bearer , priority 10 [ 542.522869][T12539] chnl_net:caif_netlink_parms(): no params data found [ 542.555130][T12642] random: crng reseeded on system resumption [ 542.813484][ T5810] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 542.946506][ T58] bridge_slave_1: left allmulticast mode [ 542.946527][ T58] bridge_slave_1: left promiscuous mode [ 542.946689][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.343679][ T58] bridge_slave_0: left allmulticast mode [ 543.343702][ T58] bridge_slave_0: left promiscuous mode [ 543.343866][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.565842][ T10] tipc: Node number set to 2886997007 [ 543.643821][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.736652][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.814822][ T58] bond0 (unregistering): Released all slaves [ 544.488486][T12662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1216'. [ 544.489215][T12662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1216'. [ 545.612338][T12664] siw: device registration error -23 [ 546.988949][ T5810] Bluetooth: hci1: Malformed LE Event: 0x1d [ 547.078485][T12681] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1224'. [ 548.489171][ T58] hsr_slave_0: left promiscuous mode [ 549.321565][ T58] hsr_slave_1: left promiscuous mode [ 549.334216][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.794205][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.834037][ T58] team0 (unregistering): Port device team_slave_1 removed [ 550.964174][ T58] team0 (unregistering): Port device team_slave_0 removed [ 551.601243][T12701] netlink: 'syz.1.1229': attribute type 1 has an invalid length. [ 551.601267][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 553.109689][ T5810] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 553.333054][ T5810] Bluetooth: hci1: Malformed LE Event: 0x1d [ 554.155482][T12724] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1234'. [ 554.568131][T12539] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.568260][T12539] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.568499][T12539] bridge_slave_0: entered allmulticast mode [ 554.571378][T12539] bridge_slave_0: entered promiscuous mode [ 555.492935][T12539] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.493066][T12539] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.493317][T12539] bridge_slave_1: entered allmulticast mode [ 555.497578][T12539] bridge_slave_1: entered promiscuous mode [ 555.899583][T12750] netlink: 'syz.0.1240': attribute type 1 has an invalid length. [ 555.899607][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1240'. [ 557.711955][T12539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.775710][T12539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.779069][T12770] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1244'. [ 557.936824][ T5810] Bluetooth: hci1: Malformed LE Event: 0x1d [ 559.064228][T12298] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 559.354993][T12539] team0: Port device team_slave_0 added [ 559.358181][T12298] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 559.457997][T12539] team0: Port device team_slave_1 added [ 559.468162][T12298] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 559.689704][T12786] netlink: 'syz.1.1250': attribute type 1 has an invalid length. [ 559.689729][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 561.198151][T12298] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 561.512884][ T5810] Bluetooth: hci3: Malformed LE Event: 0x1d [ 561.662331][T12806] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1255'. [ 561.724211][T12539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.724229][T12539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.724256][T12539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.872183][T12539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.872203][T12539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.872231][T12539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.142857][T12825] netlink: 'syz.3.1259': attribute type 1 has an invalid length. [ 563.142882][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'. [ 564.489755][T12539] hsr_slave_0: entered promiscuous mode [ 564.491279][T12539] hsr_slave_1: entered promiscuous mode [ 564.492232][T12539] debugfs: 'hsr0' already exists in 'hsr' [ 564.492256][T12539] Cannot create hsr debugfs directory [ 566.261839][ T5810] Bluetooth: hci1: Malformed LE Event: 0x1d [ 566.282441][T12864] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1264'. [ 567.994695][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 568.014076][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 568.023669][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 568.036313][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 568.043693][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 568.184866][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.184939][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.435327][T12891] netlink: 'syz.0.1268': attribute type 1 has an invalid length. [ 568.435352][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'. [ 570.086082][ T5810] Bluetooth: hci0: command tx timeout [ 571.186573][T12917] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1275'. [ 571.239900][T12910] mkiss: ax0: crc mode is auto. [ 571.256322][ T5810] Bluetooth: hci2: Malformed LE Event: 0x1d [ 571.396744][T12885] lo speed is unknown, defaulting to 1000 [ 572.163185][ T5810] Bluetooth: hci0: command tx timeout [ 573.177897][T12539] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 573.527452][T12956] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1284'. [ 573.659448][ T5810] Bluetooth: hci1: Malformed LE Event: 0x1d [ 573.677516][T12539] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 574.064673][T12539] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 574.242864][ T5810] Bluetooth: hci0: command tx timeout [ 574.307294][T12539] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 575.982077][ T3598] bridge_slave_1: left allmulticast mode [ 575.982108][ T3598] bridge_slave_1: left promiscuous mode [ 575.982362][ T3598] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.046502][ T3598] bridge_slave_0: left allmulticast mode [ 576.046531][ T3598] bridge_slave_0: left promiscuous mode [ 576.046784][ T3598] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.329988][ T5810] Bluetooth: hci0: command tx timeout [ 576.722554][ T5810] Bluetooth: hci3: Malformed LE Event: 0x1d [ 576.963764][ T3598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.094890][ T3598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.188942][ T3598] bond0 (unregistering): Released all slaves [ 577.353199][T12885] chnl_net:caif_netlink_parms(): no params data found [ 579.516734][ T3598] hsr_slave_0: left promiscuous mode [ 579.552921][ T3598] hsr_slave_1: left promiscuous mode [ 579.554066][ T3598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.807937][ T3598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.721770][ T3598] team0 (unregistering): Port device team_slave_1 removed [ 582.052060][ T3598] team0 (unregistering): Port device team_slave_0 removed [ 582.068052][ T5810] Bluetooth: hci1: Malformed LE Event: 0x1d [ 587.505017][T13145] fuse: Bad value for 'fd' [ 587.588437][T12885] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.588573][T12885] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.588815][T12885] bridge_slave_0: entered allmulticast mode [ 587.604589][T12885] bridge_slave_0: entered promiscuous mode [ 587.642319][T12885] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.642451][T12885] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.643321][T12885] bridge_slave_1: entered allmulticast mode [ 587.653343][T12885] bridge_slave_1: entered promiscuous mode [ 589.455376][T12885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.472058][T12885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.848896][T12885] team0: Port device team_slave_0 added [ 589.858361][T12885] team0: Port device team_slave_1 added [ 590.255053][T12885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.255071][T12885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.255097][T12885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.257706][T12885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.257723][T12885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.257750][T12885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.221337][T12885] hsr_slave_0: entered promiscuous mode [ 591.252875][T12885] hsr_slave_1: entered promiscuous mode [ 591.253930][T12885] debugfs: 'hsr0' already exists in 'hsr' [ 591.253955][T12885] Cannot create hsr debugfs directory [ 591.391313][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 591.414346][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 591.422513][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 591.440139][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 591.442327][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 592.608216][T13194] lo speed is unknown, defaulting to 1000 [ 593.523485][ T5810] Bluetooth: hci4: command tx timeout [ 594.830236][T13231] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 594.982961][T13234] wireguard0: entered promiscuous mode [ 594.982981][T13234] wireguard0: entered allmulticast mode [ 595.603358][ T5810] Bluetooth: hci4: command tx timeout [ 597.143202][T13194] chnl_net:caif_netlink_parms(): no params data found [ 597.695242][ T5810] Bluetooth: hci4: command tx timeout [ 598.920877][ T3598] bridge_slave_1: left allmulticast mode [ 598.920943][ T3598] bridge_slave_1: left promiscuous mode [ 598.921206][ T3598] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.996608][ T3598] bridge_slave_0: left allmulticast mode [ 598.996628][ T3598] bridge_slave_0: left promiscuous mode [ 598.996789][ T3598] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.299961][ T5810] Bluetooth: hci4: command tx timeout [ 603.433618][ T3598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.513851][ T3598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.577311][ T3598] bond0 (unregistering): Released all slaves [ 604.228266][T13194] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.228349][T13194] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.228506][T13194] bridge_slave_0: entered allmulticast mode [ 604.231561][T13194] bridge_slave_0: entered promiscuous mode [ 604.413314][ T3598] hsr_slave_0: left promiscuous mode [ 604.433083][ T3598] hsr_slave_1: left promiscuous mode [ 604.434191][ T3598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.494765][ T3598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.805365][ T3598] team0 (unregistering): Port device team_slave_1 removed [ 608.503583][ T3598] team0 (unregistering): Port device team_slave_0 removed [ 609.399274][T13194] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.399454][T13194] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.399651][T13194] bridge_slave_1: entered allmulticast mode [ 609.402204][T13194] bridge_slave_1: entered promiscuous mode [ 609.520578][ T5810] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 611.219587][T13194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.235256][T13194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.450723][T13362] tipc: Enabling of bearer rejected, already enabled [ 611.845628][T12885] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 612.019451][T13194] team0: Port device team_slave_0 added [ 612.022583][T12885] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 612.150855][T13194] team0: Port device team_slave_1 added [ 612.165161][T12885] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 613.135302][T12885] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 613.322419][ T5117] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 613.697456][T13194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.697474][T13194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.697500][T13194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.759730][T13194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.759747][T13194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.759772][T13194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.025993][T13194] hsr_slave_0: entered promiscuous mode [ 615.027092][T13194] hsr_slave_1: entered promiscuous mode [ 615.027852][T13194] debugfs: 'hsr0' already exists in 'hsr' [ 615.027871][T13194] Cannot create hsr debugfs directory [ 616.513594][T13427] wireguard0: entered promiscuous mode [ 616.513621][T13427] wireguard0: entered allmulticast mode [ 617.452267][ T5810] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 618.564875][T13454] 9pnet_fd: Insufficient options for proto=fd [ 618.649595][T12885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.711233][T12885] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.303575][ T1397] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.306132][ T1397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.383733][ T1397] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.384835][ T1397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.282990][T13477] wireguard0: entered promiscuous mode [ 620.283018][T13477] wireguard0: entered allmulticast mode [ 620.297903][T13482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1411'. [ 620.297940][T13482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1411'. [ 620.859234][T12885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.356831][T13499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 621.385936][T13194] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 621.458768][T13194] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 621.522460][T13194] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 621.787729][T13194] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 622.239856][T12885] veth0_vlan: entered promiscuous mode [ 622.289403][T12885] veth1_vlan: entered promiscuous mode [ 622.507200][T13194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.659319][T12885] veth0_macvtap: entered promiscuous mode [ 622.694161][T13194] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.739331][T12885] veth1_macvtap: entered promiscuous mode [ 622.745937][ T2160] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.767250][ T2160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.069972][ T5117] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 623.779648][T13528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1423'. [ 623.779686][T13528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1423'. [ 623.781423][ T2160] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.781573][ T2160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.836832][T13533] siw: device registration error -23 [ 624.370722][T12885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.457532][T12885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.524272][ T87] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.547307][ T87] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.555139][ T87] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.602757][ T87] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.923209][ T5117] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 625.210200][T13557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1434'. [ 626.116213][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.116234][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.321686][T13194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.469696][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1436'. [ 628.290984][T13194] veth0_vlan: entered promiscuous mode [ 628.362117][T13194] veth1_vlan: entered promiscuous mode [ 628.682394][ T5117] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 629.896641][T13194] veth0_macvtap: entered promiscuous mode [ 629.922176][T13194] veth1_macvtap: entered promiscuous mode [ 630.005008][T13194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.045942][T13194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.100075][ T1411] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.102190][ T1411] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.122122][ T1411] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.138874][ T1411] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.167309][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.167378][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.290013][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 630.316862][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 630.319753][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 630.321370][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 630.322253][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 630.645015][T13628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1447'. [ 632.403937][ T61] Bluetooth: hci5: command tx timeout [ 632.433079][ T61] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 634.005362][T13676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1461'. [ 634.778369][ T5117] Bluetooth: hci5: command tx timeout [ 635.163910][T13684] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 636.374093][ T5117] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 636.601168][ T58] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.804753][ T61] Bluetooth: hci5: command tx timeout [ 638.657545][T13622] lo speed is unknown, defaulting to 1000 [ 639.281451][T13712] batadv_slave_1: entered promiscuous mode [ 639.555412][T13707] batadv_slave_1: left promiscuous mode [ 639.649976][ T1411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.650034][ T1411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.483434][ T61] Bluetooth: hci5: command tx timeout [ 641.054980][T13725] tipc: Started in network mode [ 641.055012][T13725] tipc: Node identity ac14140f, cluster identity 4711 [ 641.055353][T13725] tipc: New replicast peer: 255.255.255.255 [ 641.066607][T13725] tipc: Enabled bearer , priority 10 [ 642.105173][ T61] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 642.162878][ T31] tipc: Node number set to 2886997007 [ 642.367652][ T58] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.234537][ T2131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.234558][ T2131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.737127][ T58] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.950848][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.217'. [ 643.950870][T13756] netlink: 24 bytes leftover after parsing attributes in process `syz.6.217'. [ 644.451616][ T58] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.174062][T13767] 9pnet_fd: Insufficient options for proto=fd [ 645.456207][T13776] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1493'. [ 645.578085][T13760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1486'. [ 645.707651][ T5117] Bluetooth: hci1: Malformed LE Event: 0x1d [ 645.755038][T13758] lo speed is unknown, defaulting to 1000 [ 646.191365][T13622] chnl_net:caif_netlink_parms(): no params data found [ 648.159773][T13814] atomic_op ffff888050ca4218 conn xmit_atomic 0000000000000000 [ 648.295791][T13820] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1505'. [ 648.312251][T13815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 648.531248][ T5117] Bluetooth: hci1: Malformed LE Event: 0x1d [ 648.948854][ T58] bridge_slave_1: left allmulticast mode [ 648.948878][ T58] bridge_slave_1: left promiscuous mode [ 648.949027][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.051294][T13845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1513'. [ 649.063798][ T58] bridge_slave_0: left allmulticast mode [ 649.063818][ T58] bridge_slave_0: left promiscuous mode [ 649.063997][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.074039][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.133379][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.156320][ T58] bond0 (unregistering): Released all slaves [ 653.228434][T13862] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1517'. [ 653.340901][T13622] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.341036][T13622] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.341280][T13622] bridge_slave_0: entered allmulticast mode [ 653.375763][T13622] bridge_slave_0: entered promiscuous mode [ 653.568253][T13864] mkiss: ax0: crc mode is auto. [ 653.568573][T13622] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.568684][T13622] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.568822][T13622] bridge_slave_1: entered allmulticast mode [ 653.570338][T13622] bridge_slave_1: entered promiscuous mode [ 653.605649][ T5117] Bluetooth: hci4: Malformed LE Event: 0x1d [ 654.752410][T13622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.911984][T13622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.991352][T13887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1526'. [ 655.287793][T13893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1528'. [ 656.275804][T13622] team0: Port device team_slave_0 added [ 656.317837][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1532'. [ 656.317859][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1532'. [ 656.550318][ T5117] Bluetooth: hci1: Malformed LE Event: 0x1d [ 656.592312][ T58] hsr_slave_0: left promiscuous mode [ 656.624518][ T58] hsr_slave_1: left promiscuous mode [ 656.625642][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.625667][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.674157][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.674186][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.680012][T13919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1537'. [ 656.799435][ T58] veth1_macvtap: left promiscuous mode [ 656.799502][ T58] veth0_macvtap: left promiscuous mode [ 656.799762][ T58] veth1_vlan: left promiscuous mode [ 656.799886][ T58] veth0_vlan: left promiscuous mode [ 659.903934][T13939] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1542'. [ 661.991829][T13946] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 662.836895][ T5117] Bluetooth: hci1: Malformed LE Event: 0x1d [ 664.107677][T13954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1547'. [ 664.553354][ T58] team0 (unregistering): Port device team_slave_1 removed [ 664.854760][ T58] team0 (unregistering): Port device team_slave_0 removed [ 667.334965][T13622] team0: Port device team_slave_1 added [ 667.586045][T13956] veth5: entered promiscuous mode [ 667.586487][T13956] bridge3: port 1(veth5) entered blocking state [ 667.586792][T13956] bridge3: port 1(veth5) entered disabled state [ 667.586998][T13956] veth5: entered allmulticast mode [ 667.793430][T13968] overlayfs: failed to clone upperpath [ 667.951439][T13622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.951457][T13622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.951482][T13622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.958732][T13622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.958751][T13622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.958777][T13622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.035122][ T5117] Bluetooth: hci4: Malformed LE Event: 0x1d [ 669.264674][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1558'. [ 669.264697][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1558'. [ 669.376956][T13622] hsr_slave_0: entered promiscuous mode [ 669.389025][T13622] hsr_slave_1: entered promiscuous mode [ 669.390097][T13622] debugfs: 'hsr0' already exists in 'hsr' [ 669.390121][T13622] Cannot create hsr debugfs directory [ 669.554632][T14002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1562'. [ 669.732771][ T31] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 669.893470][ T31] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 669.893498][ T31] usb 7-1: config 0 has no interface number 0 [ 669.893550][ T31] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 669.926975][ T31] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 669.927006][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.927026][ T31] usb 7-1: Product: syz [ 669.927040][ T31] usb 7-1: Manufacturer: syz [ 669.927054][ T31] usb 7-1: SerialNumber: syz [ 670.806647][T14012] veth3: entered promiscuous mode [ 670.944250][ T31] usb 7-1: config 0 descriptor?? [ 671.163155][ T31] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 671.164277][ T31] usb 7-1: invalid MIDI out EP 0 [ 671.571846][ T31] snd-usb-audio 7-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 671.603457][ T31] usb 7-1: USB disconnect, device number 2 [ 672.178303][T14034] udevd[14034]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 672.933630][T14049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1572'. [ 672.933653][T14049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1572'. [ 676.725554][T14084] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 676.760691][T14079] 9pnet_fd: Insufficient options for proto=fd [ 677.075505][T14091] fuse: Bad value for 'group_id' [ 677.075525][T14091] fuse: Bad value for 'group_id' [ 677.361743][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1582'. [ 677.361768][T14093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1582'. [ 677.531429][T14100] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1584'. [ 677.584531][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1584'. [ 678.262537][T14117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1588'. [ 678.273502][T14106] veth3: entered promiscuous mode [ 678.275055][T14106] bridge1: port 1(veth3) entered blocking state [ 678.281967][T14106] bridge1: port 1(veth3) entered disabled state [ 678.443783][T14106] veth3: entered allmulticast mode [ 679.041019][T14129] 9pnet_fd: Insufficient options for proto=fd [ 679.886886][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1591'. [ 680.050494][T14141] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 680.050494][T14141] program syz.6.1591 not setting count and/or reply_len properly [ 681.101007][T14152] 9pnet_fd: Insufficient options for proto=fd [ 682.496018][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1599'. [ 682.535711][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1599'. [ 682.887150][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.914797][T14173] veth5: entered promiscuous mode [ 682.915211][T14173] bridge4: port 1(veth5) entered blocking state [ 682.915346][T14173] bridge4: port 1(veth5) entered disabled state [ 682.915535][T14173] veth5: entered allmulticast mode [ 683.815917][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.833130][T14184] 9pnet_fd: Insufficient options for proto=fd [ 685.108863][ C0] vkms_vblank_simulate: vblank timer overrun [ 685.187156][ C0] vkms_vblank_simulate: vblank timer overrun [ 685.668101][ T5880] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 685.681359][T13622] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 685.738129][T13622] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 685.819770][T13622] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 685.852191][ T5880] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 685.881320][T13622] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 685.978938][T14215] fido_id[14215]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 686.233138][T14227] syz.1.1613 uses obsolete (PF_INET,SOCK_PACKET) [ 686.253963][T14230] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1614'. [ 686.315889][T14234] 9pnet_fd: Insufficient options for proto=fd [ 686.359889][T14236] 9pnet_fd: Insufficient options for proto=fd [ 686.684075][T14230] veth5: entered promiscuous mode [ 686.684467][T14230] bridge2: port 1(veth5) entered blocking state [ 686.684736][T14230] bridge2: port 1(veth5) entered disabled state [ 686.684936][T14230] veth5: entered allmulticast mode [ 686.746419][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.835262][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.668874][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 689.695550][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 689.698793][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 689.700642][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 689.701575][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 689.755791][T14266] 9pnet_fd: Insufficient options for proto=fd [ 690.998237][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.055329][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.055404][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.284239][T14275] 9pnet_fd: Insufficient options for proto=fd [ 691.415996][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.591346][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.945199][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.381644][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.921142][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.928144][ T5117] Bluetooth: hci0: command tx timeout [ 693.253190][T14297] 9pnet_fd: Insufficient options for proto=fd [ 693.312832][ C0] vkms_vblank_simulate: vblank timer overrun [ 693.486237][T14262] lo speed is unknown, defaulting to 1000 [ 693.810837][ C0] vkms_vblank_simulate: vblank timer overrun [ 693.979182][ C0] vkms_vblank_simulate: vblank timer overrun [ 694.962931][ T5117] Bluetooth: hci0: command tx timeout [ 695.196240][T14329] openvswitch: netlink: Flow actions attr not present in new flow. [ 695.536044][T14262] chnl_net:caif_netlink_parms(): no params data found [ 696.181484][ T13] bridge_slave_1: left allmulticast mode [ 696.181515][ T13] bridge_slave_1: left promiscuous mode [ 696.184754][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.298230][ T13] bridge_slave_0: left allmulticast mode [ 696.298260][ T13] bridge_slave_0: left promiscuous mode [ 696.298533][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.042842][ T5117] Bluetooth: hci0: command tx timeout [ 697.137142][T14371] fuse: Unknown parameter '0x0000000000000006' [ 699.122903][ T5117] Bluetooth: hci0: command tx timeout [ 703.954224][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.073529][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.135689][ T13] bond0 (unregistering): Released all slaves [ 704.262845][ T5889] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 704.332962][T14395] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1666'. [ 704.583276][ T5889] usb 7-1: Using ep0 maxpacket: 16 [ 705.296688][ T5889] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.296752][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 705.296779][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 705.296800][ T5889] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 705.296822][ T5889] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.298368][ T5889] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 705.298394][ T5889] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 705.298414][ T5889] usb 7-1: Manufacturer: syz [ 705.388421][ T5889] usb 7-1: config 0 descriptor?? [ 705.803511][T14406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1667'. [ 706.680436][T14262] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.680667][T14262] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.680922][T14262] bridge_slave_0: entered allmulticast mode [ 706.688936][T14262] bridge_slave_0: entered promiscuous mode [ 706.702819][ T5889] rc_core: IR keymap rc-hauppauge not found [ 706.702845][ T5889] Registered IR keymap rc-empty [ 706.707300][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 706.725255][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 706.755832][ T5889] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 706.818380][ T5889] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input8 [ 706.862919][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 706.883299][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 706.903213][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 706.925498][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 706.943054][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 706.963074][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 706.982887][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 707.002891][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 707.022925][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 707.042875][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 707.153658][ T5889] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 707.153684][ T5889] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 707.372263][ T13] hsr_slave_0: left promiscuous mode [ 707.402911][ T13] hsr_slave_1: left promiscuous mode [ 707.405743][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.450252][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.493490][ T9] usb 7-1: USB disconnect, device number 3 [ 709.829215][T14438] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1677'. [ 710.056104][T14440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1676'. [ 710.056285][T14440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1676'. [ 710.711516][ T13] team0 (unregistering): Port device team_slave_1 removed [ 710.873662][ T13] team0 (unregistering): Port device team_slave_0 removed [ 711.623482][T14262] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.623583][T14262] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.623757][T14262] bridge_slave_1: entered allmulticast mode [ 711.625318][T14262] bridge_slave_1: entered promiscuous mode [ 711.775506][T14445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1679'. [ 712.117987][T14446] veth7: entered promiscuous mode [ 712.118370][T14446] bridge5: port 1(veth7) entered blocking state [ 712.120513][T14446] bridge5: port 1(veth7) entered disabled state [ 712.120839][T14446] veth7: entered allmulticast mode [ 712.378305][T14262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.411506][T14262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.468228][T14262] team0: Port device team_slave_0 added [ 713.487386][T14262] team0: Port device team_slave_1 added [ 713.621093][T14468] Bluetooth: hci4: command 0x0406 tx timeout [ 713.961386][T14262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.961405][T14262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.961432][T14262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.044949][T14262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.044967][T14262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.044994][T14262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.238102][T14481] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1688'. [ 714.850607][T14492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1689'. [ 714.850646][T14492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1689'. [ 714.894627][T14262] hsr_slave_0: entered promiscuous mode [ 714.929513][T14262] hsr_slave_1: entered promiscuous mode [ 714.930739][T14262] debugfs: 'hsr0' already exists in 'hsr' [ 714.930765][T14262] Cannot create hsr debugfs directory [ 714.962971][ T5117] Bluetooth: hci0: command 0x0405 tx timeout [ 715.885733][T14509] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1694'. [ 715.973126][T14509] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1694'. [ 716.279876][T14509] veth7: entered promiscuous mode [ 716.280353][T14509] bridge3: port 1(veth7) entered blocking state [ 716.280489][T14509] bridge3: port 1(veth7) entered disabled state [ 716.280703][T14509] veth7: entered allmulticast mode [ 717.861022][T14531] tipc: Enabling of bearer rejected, already enabled [ 718.854514][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1707'. [ 719.610523][T14553] bridge_slave_1: left allmulticast mode [ 719.610550][T14553] bridge_slave_1: left promiscuous mode [ 719.626317][T14553] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.715746][T14553] bridge_slave_0: left allmulticast mode [ 719.715777][T14553] bridge_slave_0: left promiscuous mode [ 719.716051][T14553] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.602907][T14565] tipc: Enabling of bearer rejected, already enabled [ 720.984535][T14581] 9pnet_fd: Insufficient options for proto=fd [ 721.564300][T14585] siw: device registration error -23 [ 722.770937][ T61] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 725.066791][T14613] tipc: Started in network mode [ 725.066825][T14613] tipc: Node identity ac14140f, cluster identity 4711 [ 725.086515][T14613] tipc: New replicast peer: 255.255.255.255 [ 725.089039][T14613] tipc: Enabled bearer , priority 10 [ 726.586204][T14635] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 727.232534][ T5889] tipc: Node number set to 2886997007 [ 728.738797][T14646] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1730'. [ 728.805656][T14652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1731'. [ 730.000320][T14671] tipc: Enabling of bearer rejected, already enabled [ 730.056606][T14262] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 730.127504][T14262] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 730.212937][T14262] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 730.249260][T14262] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 730.812340][T14262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.860361][T14262] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.886447][ T1397] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.886665][ T1397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.932206][ T1397] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.932476][ T1397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.345421][T14703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1742'. [ 732.147123][ T5902] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 733.242960][ T5902] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 733.242996][ T5902] usb 7-1: config 0 has no interface number 0 [ 733.243045][ T5902] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 733.281787][ T5902] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 733.281817][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.281836][ T5902] usb 7-1: Product: syz [ 733.281849][ T5902] usb 7-1: Manufacturer: syz [ 733.281863][ T5902] usb 7-1: SerialNumber: syz [ 733.380089][ T5902] usb 7-1: config 0 descriptor?? [ 733.854367][ T5902] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 733.854928][ T5902] usb 7-1: invalid MIDI out EP 0 [ 734.062519][T14262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.273993][ T5902] snd-usb-audio 7-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 734.323061][ T5902] usb 7-1: USB disconnect, device number 4 [ 734.588825][T14738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1749'. [ 734.640377][T14739] udevd[14739]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 736.492003][T14262] veth0_vlan: entered promiscuous mode [ 736.657468][T14262] veth1_vlan: entered promiscuous mode [ 736.791236][T14262] veth0_macvtap: entered promiscuous mode [ 736.853360][T14262] veth1_macvtap: entered promiscuous mode [ 737.651541][T14262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.719285][T14262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.784334][T12399] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.785619][T12399] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.786071][T12399] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.786309][T12399] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.901215][T14789] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1760'. [ 739.276108][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.276133][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.219199][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.219221][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.754833][T14816] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1762'. [ 740.754859][T14816] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1762'. [ 740.819447][T14820] siw: device registration error -23 [ 742.739387][T14836] tmpfs: Bad value for 'mpol' [ 743.413862][T14845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1771'. [ 743.528445][ T37] audit: type=1326 audit(1760228130.455:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14846 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0f0eeec9 code=0x7ffc0000 [ 743.528508][ T37] audit: type=1326 audit(1760228130.465:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14846 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f9b0f0eeec9 code=0x7ffc0000 [ 743.528554][ T37] audit: type=1326 audit(1760228130.465:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14846 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0f0eeec9 code=0x7ffc0000 [ 743.532631][ T37] audit: type=1326 audit(1760228130.465:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14846 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f9b0f0eeec9 code=0x7ffc0000 [ 743.532820][ T37] audit: type=1326 audit(1760228130.465:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14846 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0f0eeec9 code=0x7ffc0000 [ 743.532867][ T37] audit: type=1326 audit(1760228130.465:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14846 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b0f0eeec9 code=0x7ffc0000 [ 743.532919][ T37] audit: type=1326 audit(1760228130.465:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14846 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0f0eeec9 code=0x7ffc0000 [ 743.554285][ T37] audit: type=1326 audit(1760228130.485:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14846 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b0f0eeec9 code=0x7ffc0000 [ 743.554344][ T37] audit: type=1326 audit(1760228130.495:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14846 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0f0eeec9 code=0x7ffc0000 [ 743.554390][ T37] audit: type=1326 audit(1760228130.495:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14846 comm="syz.5.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0f0eeec9 code=0x7ffc0000 [ 746.883098][T14891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1786'. [ 749.478292][ C1] vkms_vblank_simulate: vblank timer overrun [ 749.877297][ C1] vkms_vblank_simulate: vblank timer overrun [ 750.206848][ C1] vkms_vblank_simulate: vblank timer overrun [ 750.441703][ C1] vkms_vblank_simulate: vblank timer overrun [ 750.669257][ C1] vkms_vblank_simulate: vblank timer overrun [ 750.956056][ C1] vkms_vblank_simulate: vblank timer overrun [ 751.004760][T14925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1795'. [ 751.444805][ C1] vkms_vblank_simulate: vblank timer overrun [ 751.451130][T14938] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1798'. [ 752.505856][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.505931][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.886997][ C1] vkms_vblank_simulate: vblank timer overrun [ 753.986766][T14955] Mount JFS Failure: -22 [ 753.986785][T14955] jfs_mount failed w/return code = -22 [ 754.143303][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.913781][ T5117] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 756.913834][ T5117] CPU: 0 UID: 0 PID: 5117 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 756.913859][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 756.913873][ T5117] Workqueue: hci4 hci_rx_work [ 756.913912][ T5117] Call Trace: [ 756.913925][ T5117] [ 756.913935][ T5117] dump_stack_lvl+0x189/0x250 [ 756.913967][ T5117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 756.913992][ T5117] ? __pfx__printk+0x10/0x10 [ 756.914022][ T5117] ? kernfs_path_from_node+0x2c/0x280 [ 756.914048][ T5117] ? kernfs_path_from_node+0x243/0x280 [ 756.914072][ T5117] ? kernfs_path_from_node+0x2c/0x280 [ 756.914101][ T5117] sysfs_create_dir_ns+0x259/0x280 [ 756.914126][ T5117] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 756.914151][ T5117] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 756.914181][ T5117] ? rt_spin_unlock+0x161/0x200 [ 756.914208][ T5117] kobject_add_internal+0x5a5/0xb50 [ 756.914240][ T5117] kobject_add+0x155/0x220 [ 756.914267][ T5117] ? __pfx_kobject_add+0x10/0x10 [ 756.914296][ T5117] ? get_device_parent+0x370/0x3a0 [ 756.914326][ T5117] device_add+0x408/0xb50 [ 756.914356][ T5117] hci_conn_add_sysfs+0xd5/0x1e0 [ 756.914382][ T5117] le_conn_complete_evt+0xf39/0x1500 [ 756.914425][ T5117] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 756.914455][ T5117] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 756.914484][ T5117] ? lockdep_hardirqs_on+0x9c/0x150 [ 756.914538][ T5117] ? skb_pull_data+0xfb/0x200 [ 756.914567][ T5117] hci_le_conn_complete_evt+0x187/0x450 [ 756.914604][ T5117] hci_event_packet+0x78f/0x1200 [ 756.914630][ T5117] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 756.914656][ T5117] ? __pfx_hci_event_packet+0x10/0x10 [ 756.914684][ T5117] ? hci_send_to_monitor+0xe2/0x570 [ 756.914713][ T5117] hci_rx_work+0x46a/0xe80 [ 756.914744][ T5117] ? process_scheduled_works+0x9ef/0x17b0 [ 756.914771][ T5117] process_scheduled_works+0xae1/0x17b0 [ 756.914836][ T5117] ? __pfx_process_scheduled_works+0x10/0x10 [ 756.914881][ T5117] worker_thread+0x8a0/0xda0 [ 756.914928][ T5117] kthread+0x711/0x8a0 [ 756.914951][ T5117] ? __pfx_worker_thread+0x10/0x10 [ 756.914969][ T5117] ? __pfx_kthread+0x10/0x10 [ 756.914987][ T5117] ? rt_spin_unlock+0x150/0x200 [ 756.915013][ T5117] ? rt_spin_unlock+0x161/0x200 [ 756.915033][ T5117] ? __pfx_kthread+0x10/0x10 [ 756.915053][ T5117] ret_from_fork+0x4bc/0x870 [ 756.915084][ T5117] ? __pfx_ret_from_fork+0x10/0x10 [ 756.915118][ T5117] ? __switch_to_asm+0x39/0x70 [ 756.915141][ T5117] ? __switch_to_asm+0x33/0x70 [ 756.915160][ T5117] ? __pfx_kthread+0x10/0x10 [ 756.915183][ T5117] ret_from_fork_asm+0x1a/0x30 [ 756.915222][ T5117] [ 757.390504][ T5117] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 757.878651][ T5117] Bluetooth: hci4: failed to register connection device [ 760.862878][T15020] tipc: Enabling of bearer rejected, already enabled [ 761.537706][T15024] netlink: 312 bytes leftover after parsing attributes in process `syz.6.1824'. [ 761.952237][T15031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1825'. [ 763.192800][ T5902] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 763.354727][ T5902] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 763.354756][ T5902] usb 6-1: config 0 has no interface number 0 [ 763.354808][ T5902] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 763.358279][ T5902] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 763.358306][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.358326][ T5902] usb 6-1: Product: syz [ 763.358340][ T5902] usb 6-1: Manufacturer: syz [ 763.358354][ T5902] usb 6-1: SerialNumber: syz [ 763.379341][ T5902] usb 6-1: config 0 descriptor?? [ 763.669961][ T5902] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 763.670452][ T5902] usb 6-1: invalid MIDI out EP 0 [ 763.917295][ T5902] snd-usb-audio 6-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 763.934882][ T5902] usb 6-1: USB disconnect, device number 2 [ 764.005860][T14739] udevd[14739]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 764.082098][T15054] fuse: Unknown parameter '0xffffffffffffffff' [ 765.884837][T15083] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1841'. [ 766.109825][T15090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1846'. [ 766.188917][T15091] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1846'. [ 766.533507][T15090] veth3: entered promiscuous mode [ 766.533943][T15090] bridge2: port 1(veth3) entered blocking state [ 766.534136][T15090] bridge2: port 1(veth3) entered disabled state [ 766.534331][T15090] veth3: entered allmulticast mode [ 769.253222][T15134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 771.471028][T15168] 9pnet_fd: Insufficient options for proto=fd [ 772.574249][ C0] vkms_vblank_simulate: vblank timer overrun [ 772.752581][ C0] vkms_vblank_simulate: vblank timer overrun [ 773.597725][T15199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.597753][T15199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.701876][T15199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.701910][T15199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.060672][ C0] vkms_vblank_simulate: vblank timer overrun [ 774.336760][T15205] netlink: 'syz.3.1880': attribute type 12 has an invalid length. [ 775.947881][ C0] vkms_vblank_simulate: vblank timer overrun [ 776.091634][ C0] vkms_vblank_simulate: vblank timer overrun [ 776.127686][T15222] fuse: Invalid rootmode [ 776.162455][T15221] mkiss: ax0: crc mode is auto. [ 776.181955][ T5117] Bluetooth: hci0: Malformed LE Event: 0x1d [ 776.879713][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1895'. [ 776.879731][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1895'. [ 776.879746][T15232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1895'. [ 777.654604][T15240] rdma_op ffff88803d170a70 conn xmit_rdma 0000000000000000 [ 777.836394][T15250] fuse: Invalid rootmode [ 778.085986][T15259] binder: 15257:15259 ioctl c0306201 2000000001c0 returned -14 [ 779.651974][T15286] fuse: Bad value for 'rootmode' [ 780.115392][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.515690][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.909355][T15306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1926'. [ 781.151236][T15318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1929'. [ 781.254208][T15318] bridge4: port 1(ip6gretap1) entered blocking state [ 781.254351][T15318] bridge4: port 1(ip6gretap1) entered disabled state [ 781.254613][T15318] ip6gretap1: entered allmulticast mode [ 781.262875][T15318] ip6gretap1: entered promiscuous mode [ 781.448176][T15322] veth9: entered promiscuous mode [ 781.595728][T15333] fuse: Unknown parameter '0xffffffffffffffff' [ 782.587926][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.737209][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.799572][ T5117] Bluetooth: hci0: Malformed LE Event: 0x1d [ 786.871585][T15383] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1953'. [ 786.904586][ T5117] Bluetooth: hci3: Malformed LE Event: 0x1d [ 788.578204][T15419] fuse: Unknown parameter '0xffffffffffffffff' [ 788.600479][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.869884][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.532822][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.617813][ C1] vkms_vblank_simulate: vblank timer overrun [ 791.283314][T15443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1973'. [ 791.419956][T15454] fuse: Unknown parameter '0xffffffffffffffff' [ 791.442572][ C1] vkms_vblank_simulate: vblank timer overrun [ 791.967224][T15465] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1982'. [ 792.395545][T15475] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1986'. [ 792.474749][T15477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1987'. [ 792.512204][T15477] bridge3: port 1(ip6gretap1) entered blocking state [ 792.512453][T15477] bridge3: port 1(ip6gretap1) entered disabled state [ 792.530500][T15477] ip6gretap1: entered allmulticast mode [ 792.539867][T15477] ip6gretap1: entered promiscuous mode [ 792.626649][ C1] vkms_vblank_simulate: vblank timer overrun [ 794.039380][ C1] vkms_vblank_simulate: vblank timer overrun [ 794.122199][T15477] veth5: entered promiscuous mode [ 795.176358][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.529299][T15508] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1992'. [ 796.529333][T15508] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1992'. [ 796.703629][T15510] siw: device registration error -23 [ 798.005745][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 798.030551][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 798.032009][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 798.069731][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 798.070588][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 798.668523][T15522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2000'. [ 798.782514][T15515] lo speed is unknown, defaulting to 1000 [ 798.920550][ C1] vkms_vblank_simulate: vblank timer overrun [ 799.233541][T15522] veth7: entered promiscuous mode [ 799.263302][ C1] vkms_vblank_simulate: vblank timer overrun [ 799.664312][ T5117] Bluetooth: hci2: unexpected event for opcode 0x0024 [ 800.143493][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.438529][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.728318][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.792920][ T5117] Bluetooth: hci5: command tx timeout [ 800.878244][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.729326][T15568] fuse: Unknown parameter 'user_i00000000000000000000' [ 802.809726][ T5117] Bluetooth: hci5: command tx timeout [ 802.930426][ C1] vkms_vblank_simulate: vblank timer overrun [ 803.219426][T15573] netlink: 'syz.0.2019': attribute type 16 has an invalid length. [ 803.219441][T15573] netlink: 'syz.0.2019': attribute type 3 has an invalid length. [ 803.219448][T15573] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.2019'. [ 803.641676][ C1] vkms_vblank_simulate: vblank timer overrun [ 803.722420][ C1] vkms_vblank_simulate: vblank timer overrun [ 804.546222][ C1] vkms_vblank_simulate: vblank timer overrun [ 804.883471][ T5117] Bluetooth: hci5: command tx timeout [ 805.185342][T15515] chnl_net:caif_netlink_parms(): no params data found [ 805.502742][ C1] vkms_vblank_simulate: vblank timer overrun [ 805.833891][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.354766][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.681249][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.850447][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.024394][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.028506][ T5117] Bluetooth: hci5: command tx timeout [ 809.001272][ T70] veth5: left allmulticast mode [ 809.001637][ T70] bridge4: port 1(veth5) entered disabled state [ 809.256851][ T70] veth7: left allmulticast mode [ 809.257138][ T70] bridge5: port 1(veth7) entered disabled state [ 810.704729][ T5117] Bluetooth: hci4: Malformed LE Event: 0x1d [ 811.612086][T15637] Falling back ldisc for ttyprintk. [ 812.261181][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.309641][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.400388][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.491352][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.527920][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.627063][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.677089][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.725701][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.777147][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.826120][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.877037][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.926517][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.930304][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.930377][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.133682][ T70] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 814.137687][ T70] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 814.137705][ T70] bond1 (unregistering): (slave macvlan2): the permanent HWaddr of slave - d2:2e:a3:87:09:d5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 814.209896][ C1] vkms_vblank_simulate: vblank timer overrun [ 814.263341][ T70] bond1 (unregistering): (slave macvlan3): Releasing backup interface [ 814.393500][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.463421][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.483772][ T70] bond0 (unregistering): Released all slaves [ 815.205585][ T70] bond1 (unregistering): Released all slaves [ 815.276137][ C1] vkms_vblank_simulate: vblank timer overrun [ 815.365313][ C1] vkms_vblank_simulate: vblank timer overrun [ 816.002859][ T61] Bluetooth: hci0: command 0x0405 tx timeout [ 816.300738][T15672] fuse: Unknown parameter 'user_i00000000000000000000' [ 816.555824][ C1] vkms_vblank_simulate: vblank timer overrun [ 816.694457][ T70] tipc: Disabling bearer [ 816.697037][ T70] tipc: Left network mode [ 816.755156][T15515] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.755285][T15515] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.756306][T15515] bridge_slave_0: entered allmulticast mode [ 816.759144][T15515] bridge_slave_0: entered promiscuous mode [ 816.795072][T15515] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.795242][T15515] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.795452][T15515] bridge_slave_1: entered allmulticast mode [ 816.831029][T15515] bridge_slave_1: entered promiscuous mode [ 816.943485][ C1] vkms_vblank_simulate: vblank timer overrun [ 817.087319][T15676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2048'. [ 818.578688][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2050'. [ 821.606821][T15515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.646098][T15515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.145479][T15718] fuse: Unknown parameter '0xffffffffffffffff' [ 823.734679][T15733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2062'. [ 823.952315][T15745] afs: Unknown parameter 'ìPc' [ 824.167271][T15515] team0: Port device team_slave_0 added [ 824.194416][T15515] team0: Port device team_slave_1 added [ 825.590040][T15515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.590057][T15515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.590081][T15515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.638758][T15515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.638775][T15515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.638802][T15515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.837371][T15782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2079'. [ 827.194992][T15783] bridge1: port 1(ip6gretap1) entered blocking state [ 827.195070][T15783] bridge1: port 1(ip6gretap1) entered disabled state [ 827.195218][T15783] ip6gretap1: entered allmulticast mode [ 827.196943][T15783] ip6gretap1: entered promiscuous mode [ 828.166712][T15515] hsr_slave_0: entered promiscuous mode [ 828.193084][T15515] hsr_slave_1: entered promiscuous mode [ 828.193650][T15515] debugfs: 'hsr0' already exists in 'hsr' [ 828.193665][T15515] Cannot create hsr debugfs directory [ 830.644677][T15818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2092'. [ 833.708230][T15845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2096'. [ 836.344167][T15865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2103'. [ 841.754828][T15912] capability: warning: `syz.0.2114' uses 32-bit capabilities (legacy support in use) [ 841.764220][T15913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2115'. [ 844.861279][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2122'. [ 844.891860][T15951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2126'. [ 845.185534][ T70] hsr_slave_0: left promiscuous mode [ 845.227963][ T70] hsr_slave_1: left promiscuous mode [ 845.228622][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.277774][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.760055][T15960] udevd[15960]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 850.391670][ T5117] Bluetooth: hci2: Malformed LE Event: 0x1d [ 854.663298][ T5117] Bluetooth: hci4: Malformed LE Event: 0x1d [ 854.747446][ T70] team0 (unregistering): Port device team_slave_1 removed [ 854.929286][T16035] Falling back ldisc for ttyprintk. [ 856.072947][T16046] netlink: 'syz.0.2152': attribute type 2 has an invalid length. [ 856.406883][ T70] team0 (unregistering): Port device team_slave_0 removed [ 856.926851][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2156'. [ 857.127143][T16057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 857.215394][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 857.264701][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 857.267967][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 857.270090][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 857.270887][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 858.215673][ C0] vkms_vblank_simulate: vblank timer overrun [ 858.386968][ C0] vkms_vblank_simulate: vblank timer overrun [ 859.351752][ C0] vkms_vblank_simulate: vblank timer overrun [ 859.385209][ C0] vkms_vblank_simulate: vblank timer overrun [ 859.387417][ T5117] Bluetooth: hci3: command tx timeout [ 859.571993][ C0] vkms_vblank_simulate: vblank timer overrun [ 860.662010][ C0] vkms_vblank_simulate: vblank timer overrun [ 860.694065][T16071] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2158'. [ 860.891239][ C0] vkms_vblank_simulate: vblank timer overrun [ 861.086569][ C0] vkms_vblank_simulate: vblank timer overrun [ 861.223749][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 861.244263][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 861.248552][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 861.250451][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 861.251258][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 861.329462][ C0] vkms_vblank_simulate: vblank timer overrun [ 861.395768][ C0] vkms_vblank_simulate: vblank timer overrun [ 861.452914][ T61] Bluetooth: hci3: command tx timeout [ 861.502212][ C0] vkms_vblank_simulate: vblank timer overrun [ 861.592895][ T5902] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 861.619935][ C0] vkms_vblank_simulate: vblank timer overrun [ 861.811713][ C0] vkms_vblank_simulate: vblank timer overrun [ 861.848210][ T5902] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 861.848228][ T5902] usb 7-1: config 0 has no interface number 0 [ 861.848257][ T5902] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 861.850869][ T5902] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 861.850887][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.850898][ T5902] usb 7-1: Product: syz [ 861.850905][ T5902] usb 7-1: Manufacturer: syz [ 861.850912][ T5902] usb 7-1: SerialNumber: syz [ 861.910524][ T5902] usb 7-1: config 0 descriptor?? [ 861.968645][ C0] vkms_vblank_simulate: vblank timer overrun [ 862.078963][ C0] vkms_vblank_simulate: vblank timer overrun [ 862.143492][ T5902] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 862.144054][ T5902] usb 7-1: invalid MIDI out EP 0 [ 862.212402][ C0] vkms_vblank_simulate: vblank timer overrun [ 862.228777][ T5902] snd-usb-audio 7-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 862.232409][ T5902] usb 7-1: USB disconnect, device number 5 [ 862.356589][T16086] udevd[16086]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 862.496771][ C0] vkms_vblank_simulate: vblank timer overrun [ 862.660110][T15994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2137'. [ 863.455385][ T61] Bluetooth: hci6: command tx timeout [ 864.066698][ T61] Bluetooth: hci3: command tx timeout [ 865.525386][ T61] Bluetooth: hci6: command tx timeout [ 865.686433][T16079] lo speed is unknown, defaulting to 1000 [ 865.702890][T16059] lo speed is unknown, defaulting to 1000 [ 866.093029][ T61] Bluetooth: hci3: command tx timeout [ 867.259929][T16125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2168'. [ 867.602821][ T61] Bluetooth: hci6: command tx timeout [ 869.610691][T16059] chnl_net:caif_netlink_parms(): no params data found [ 869.732888][ T61] Bluetooth: hci6: command tx timeout [ 873.654427][T16185] fuse: Unknown parameter 'fd00000000000000000003' [ 874.307729][T16204] Mount JFS Failure: -22 [ 874.307804][T16204] jfs_mount failed w/return code = -22 [ 874.934432][T16079] chnl_net:caif_netlink_parms(): no params data found [ 875.369994][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.370067][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.695253][T16221] openvswitch: netlink: Flow key attr not present in new flow. [ 876.982175][T16059] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.982340][T16059] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.982582][T16059] bridge_slave_0: entered allmulticast mode [ 877.019484][T16059] bridge_slave_0: entered promiscuous mode [ 878.073871][T16238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2190'. [ 878.355779][T16059] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.355913][T16059] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.356133][T16059] bridge_slave_1: entered allmulticast mode [ 878.392172][T16059] bridge_slave_1: entered promiscuous mode [ 878.885755][ T70] IPVS: stop unused estimator thread 0... [ 879.736865][T16059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.938326][T16059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.182417][T16079] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.182584][T16079] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.198599][T16079] bridge_slave_0: entered allmulticast mode [ 880.200404][T16079] bridge_slave_0: entered promiscuous mode [ 880.444634][T16079] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.444785][T16079] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.444982][T16079] bridge_slave_1: entered allmulticast mode [ 880.453863][T16079] bridge_slave_1: entered promiscuous mode [ 880.689220][T16277] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 881.084227][T16281] overlayfs: failed to clone upperpath [ 884.370380][T16059] team0: Port device team_slave_0 added [ 884.577156][T16059] team0: Port device team_slave_1 added [ 885.227524][ T70] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.300949][T16079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.342848][ T5902] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 885.625726][T16309] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2208'. [ 886.335350][ T5902] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 886.335378][ T5902] usb 7-1: config 0 has no interface number 0 [ 886.335425][ T5902] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 886.339757][ T5902] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 886.339784][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.339802][ T5902] usb 7-1: Product: syz [ 886.339816][ T5902] usb 7-1: Manufacturer: syz [ 886.339830][ T5902] usb 7-1: SerialNumber: syz [ 886.345440][ T5902] usb 7-1: config 0 descriptor?? [ 886.387551][T16079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.439135][T16059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.439209][T16059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.439232][T16059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.712775][ T5902] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 886.713128][ T5902] usb 7-1: invalid MIDI out EP 0 [ 887.950496][ T70] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.962168][ T5902] snd-usb-audio 7-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 888.978055][ T5902] usb 7-1: USB disconnect, device number 6 [ 889.246561][T16326] udevd[16326]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 889.255340][T16059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.255357][T16059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.255383][T16059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.475263][T16337] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2217'. [ 891.017497][ T5902] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 891.079593][ T70] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.207364][T16079] team0: Port device team_slave_0 added [ 891.209165][T16337] vlan0: entered promiscuous mode [ 891.225956][T16079] team0: Port device team_slave_1 added [ 891.865889][ T5902] usb 7-1: Using ep0 maxpacket: 16 [ 892.379368][ T5902] usb 7-1: config 252 has an invalid interface number: 15 but max is 0 [ 892.379395][ T5902] usb 7-1: config 252 has no interface number 0 [ 892.379448][ T5902] usb 7-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 892.573301][ T5902] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 892.573331][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.573350][ T5902] usb 7-1: Product: syz [ 892.573365][ T5902] usb 7-1: Manufacturer: syz [ 892.573378][ T5902] usb 7-1: SerialNumber: syz [ 892.837420][ T5902] usb 7-1: can't set config #252, error -71 [ 892.840715][ T5902] usb 7-1: USB disconnect, device number 7 [ 894.655067][ T70] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.760260][T16059] hsr_slave_0: entered promiscuous mode [ 894.763743][T16059] hsr_slave_1: entered promiscuous mode [ 894.775862][T16059] debugfs: 'hsr0' already exists in 'hsr' [ 894.775890][T16059] Cannot create hsr debugfs directory [ 894.779434][T16079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.779448][T16079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.779474][T16079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.813836][T16079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.813852][T16079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.813877][T16079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.356591][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2232'. [ 898.584926][T16079] hsr_slave_0: entered promiscuous mode [ 898.586666][T16079] hsr_slave_1: entered promiscuous mode [ 898.587664][T16079] debugfs: 'hsr0' already exists in 'hsr' [ 898.587688][T16079] Cannot create hsr debugfs directory [ 900.994816][ T70] bridge_slave_1: left allmulticast mode [ 900.994841][ T70] bridge_slave_1: left promiscuous mode [ 900.995559][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.151866][ T70] bridge_slave_0: left allmulticast mode [ 901.151885][ T70] bridge_slave_0: left promiscuous mode [ 901.152049][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.285961][ T70] bridge_slave_1: left allmulticast mode [ 901.285992][ T70] bridge_slave_1: left promiscuous mode [ 901.286279][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.386484][T16447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2250'. [ 901.422421][ T70] bridge_slave_0: left allmulticast mode [ 901.422452][ T70] bridge_slave_0: left promiscuous mode [ 901.429052][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.496547][ T70] ip6gretap1: left allmulticast mode [ 901.496567][ T70] ip6gretap1: left promiscuous mode [ 901.496725][ T70] bridge1: port 1(ip6gretap1) entered disabled state [ 902.504647][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.781334][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.558561][ T70] bond0 (unregistering): Released all slaves [ 905.704523][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.763350][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.785078][ T70] bond0 (unregistering): Released all slaves [ 905.832166][T16447] vlan0: entered promiscuous mode [ 906.632893][ T5902] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 906.800414][T16059] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 906.817568][ T5902] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 906.817597][ T5902] usb 7-1: config 0 has no interface number 0 [ 906.817644][ T5902] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 906.821157][ T5902] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 906.821185][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.821203][ T5902] usb 7-1: Product: syz [ 906.821217][ T5902] usb 7-1: Manufacturer: syz [ 906.821231][ T5902] usb 7-1: SerialNumber: syz [ 906.846901][ T5902] usb 7-1: config 0 descriptor?? [ 907.905073][ T5902] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 907.906845][ T5902] usb 7-1: invalid MIDI out EP 0 [ 908.131610][T16059] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 908.182089][ T5902] snd-usb-audio 7-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 908.373799][T16059] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 908.389963][ T5902] usb 7-1: USB disconnect, device number 8 [ 909.806325][T16059] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 909.899497][T16502] udevd[16502]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 911.836376][T16512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2267'. [ 912.428446][T16512] vlan0: entered promiscuous mode [ 913.108398][T16529] gtp0: entered promiscuous mode [ 913.821070][T16538] fuse: Unknown parameter '0xffffffffffffffff' [ 914.176463][T16536] Mount JFS Failure: -22 [ 914.176481][T16536] jfs_mount failed w/return code = -22 [ 915.403252][T16546] netdevsim netdevsim6: Direct firmware load for ..€ failed with error -2 [ 915.403278][T16546] netdevsim netdevsim6: Falling back to sysfs fallback for: ..€ [ 915.404205][T16541] dvmrp0: entered allmulticast mode [ 915.552622][T16541] dvmrp0: left allmulticast mode [ 915.797550][T16079] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 915.883151][T16079] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 916.079260][T16079] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 916.611020][T16079] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 917.511550][ T70] hsr_slave_0: left promiscuous mode [ 917.543948][ T70] hsr_slave_1: left promiscuous mode [ 917.544912][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.670305][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.869728][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 917.892070][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 917.900550][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 917.901947][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 917.926801][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 918.032830][ T70] hsr_slave_0: left promiscuous mode [ 918.073881][ T70] hsr_slave_1: left promiscuous mode [ 918.076196][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.076224][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.134970][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 918.134999][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.472013][ T70] veth1_macvtap: left promiscuous mode [ 918.472129][ T70] veth0_macvtap: left promiscuous mode [ 918.472411][ T70] veth1_vlan: left promiscuous mode [ 918.490360][ T70] veth0_vlan: left promiscuous mode [ 920.007184][ T61] Bluetooth: hci0: command tx timeout [ 920.395139][ T70] team0 (unregistering): Port device team_slave_1 removed [ 920.565221][ T70] team0 (unregistering): Port device team_slave_0 removed [ 922.082958][ T61] Bluetooth: hci0: command tx timeout [ 922.194217][ T5117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 922.214708][ T5117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 922.216161][ T5117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 922.217947][ T5117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 922.218819][ T5117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 924.165533][ T61] Bluetooth: hci0: command tx timeout [ 924.562824][ T61] Bluetooth: hci5: command tx timeout [ 925.803470][ T70] team0 (unregistering): Port device team_slave_1 removed [ 926.073427][ T70] team0 (unregistering): Port device team_slave_0 removed [ 926.243056][ T61] Bluetooth: hci0: command tx timeout [ 926.642870][ T61] Bluetooth: hci5: command tx timeout [ 929.092689][ T61] Bluetooth: hci5: command tx timeout [ 930.089631][T16079] kthread_run failed with err -4 [ 930.297607][T16564] lo speed is unknown, defaulting to 1000 [ 930.377281][T16590] lo speed is unknown, defaulting to 1000 [ 931.249373][ T61] Bluetooth: hci5: command tx timeout [ 935.288997][T16686] fuse: Unknown parameter '0xffffffffffffffff' [ 936.400294][T16696] netlink: 'syz.0.2311': attribute type 2 has an invalid length. [ 936.840279][ C0] vkms_vblank_simulate: vblank timer overrun [ 937.069714][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.071654][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.382512][ C0] vkms_vblank_simulate: vblank timer overrun [ 937.447426][T16710] fuse: Unknown parameter '0xffffffffffffffff' [ 937.515004][ C0] vkms_vblank_simulate: vblank timer overrun [ 937.708274][T16564] chnl_net:caif_netlink_parms(): no params data found [ 937.850537][T16725] gtp0: entered promiscuous mode [ 938.344744][T16590] chnl_net:caif_netlink_parms(): no params data found [ 938.826181][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.828245][T16740] netlink: 'syz.0.2327': attribute type 2 has an invalid length. [ 938.969229][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.108707][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.405290][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.796502][ C0] vkms_vblank_simulate: vblank timer overrun [ 940.113071][T16751] siw: device registration error -23 [ 944.405230][T16769] netlink: 'syz.6.2337': attribute type 2 has an invalid length. [ 945.235107][T16564] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.235353][T16564] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.235619][T16564] bridge_slave_0: entered allmulticast mode [ 945.238775][T16564] bridge_slave_0: entered promiscuous mode [ 945.299679][T16564] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.299832][T16564] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.300153][T16564] bridge_slave_1: entered allmulticast mode [ 945.304518][T16564] bridge_slave_1: entered promiscuous mode [ 945.669760][T16790] fuse: Unknown parameter '0xffffffffffffffff' [ 946.098783][T16564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.357495][T16564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.480097][T16590] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.480247][T16590] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.480510][T16590] bridge_slave_0: entered allmulticast mode [ 946.514867][T16590] bridge_slave_0: entered promiscuous mode [ 946.617941][T16590] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.618114][T16590] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.618369][T16590] bridge_slave_1: entered allmulticast mode [ 946.621113][T16590] bridge_slave_1: entered promiscuous mode [ 946.836059][T16564] team0: Port device team_slave_0 added [ 946.972587][T16564] team0: Port device team_slave_1 added [ 946.982079][T16590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.159270][T16590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.449568][T16817] netlink: 'syz.6.2347': attribute type 2 has an invalid length. [ 947.532815][T16819] fuse: Unknown parameter '0xffffffffffffffff' [ 948.355987][T16564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.356005][T16564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.356031][T16564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.530844][T16564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.530862][T16564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.530889][T16564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.538327][T16590] team0: Port device team_slave_0 added [ 948.895320][T16590] team0: Port device team_slave_1 added [ 949.955960][T16590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.955977][T16590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.956003][T16590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.020236][T16564] hsr_slave_0: entered promiscuous mode [ 950.021615][T16564] hsr_slave_1: entered promiscuous mode [ 950.022562][T16564] debugfs: 'hsr0' already exists in 'hsr' [ 950.022585][T16564] Cannot create hsr debugfs directory [ 950.351983][T16846] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2360'. [ 950.633929][T16590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.633941][T16590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.633955][T16590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.304684][T16590] hsr_slave_0: entered promiscuous mode [ 953.306046][T16590] hsr_slave_1: entered promiscuous mode [ 953.307011][T16590] debugfs: 'hsr0' already exists in 'hsr' [ 953.307035][T16590] Cannot create hsr debugfs directory [ 953.351576][T16883] 9pnet_fd: Insufficient options for proto=fd [ 954.005580][T16881] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2371'. [ 958.975162][T16942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2385'. [ 961.401437][ T70] bridge_slave_1: left allmulticast mode [ 961.401468][ T70] bridge_slave_1: left promiscuous mode [ 961.401748][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.231544][ T70] bridge_slave_0: left allmulticast mode [ 962.231575][ T70] bridge_slave_0: left promiscuous mode [ 962.232239][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.993644][ T70] bridge_slave_1: left allmulticast mode [ 962.993673][ T70] bridge_slave_1: left promiscuous mode [ 962.993923][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.114377][ T70] bridge_slave_0: left allmulticast mode [ 963.114407][ T70] bridge_slave_0: left promiscuous mode [ 963.114641][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.143908][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.266420][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.108034][ T70] bond0 (unregistering): Released all slaves [ 965.205639][T16996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2396'. [ 965.474929][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.591370][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.659112][ T70] bond0 (unregistering): Released all slaves [ 965.983593][T17005] veth0_to_bridge: entered allmulticast mode [ 967.519156][ T1515] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.050768][ T5818] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 969.395776][ T5818] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 969.395820][ T5818] usb 7-1: config 0 has no interface number 0 [ 969.395935][ T5818] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 969.471221][ T5818] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 969.471258][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.471322][ T5818] usb 7-1: Product: syz [ 969.471375][ T5818] usb 7-1: Manufacturer: syz [ 969.471425][ T5818] usb 7-1: SerialNumber: syz [ 969.749314][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'. [ 970.191137][ T5818] usb 7-1: config 0 descriptor?? [ 971.968989][ T70] hsr_slave_0: left promiscuous mode [ 972.270770][ T70] hsr_slave_1: left promiscuous mode [ 972.395870][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.658958][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.521478][ T5818] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 973.543066][ T5818] usb 7-1: invalid MIDI out EP 0 [ 976.650137][ T5818] snd-usb-audio 7-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 976.664991][ T5818] usb 7-1: USB disconnect, device number 9 [ 976.892824][ T70] hsr_slave_0: left promiscuous mode [ 976.906391][T17049] udevd[17049]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 977.182998][ T70] hsr_slave_1: left promiscuous mode [ 977.183908][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 977.236848][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.100360][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 978.118563][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 978.121931][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 978.133157][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 978.146105][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 980.265009][ T5117] Bluetooth: hci3: command tx timeout [ 982.333044][ T5117] Bluetooth: hci3: command tx timeout [ 982.961801][T17093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2415'. [ 983.665682][ T70] team0 (unregistering): Port device team_slave_1 removed [ 983.787158][T17100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'. [ 984.426808][ T5117] Bluetooth: hci3: command tx timeout [ 985.048795][ T70] team0 (unregistering): Port device team_slave_0 removed [ 985.363829][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 985.373139][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 985.377580][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 985.378798][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 985.379608][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 986.556556][ T5117] Bluetooth: hci3: command tx timeout [ 987.449981][ T5117] Bluetooth: hci6: command tx timeout [ 987.993642][ T70] team0 (unregistering): Port device team_slave_1 removed [ 988.543197][T16955] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 988.820895][T16955] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 988.820957][T16955] usb 7-1: config 0 has no interface number 0 [ 988.821289][T16955] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 988.925862][T16955] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 988.925989][T16955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.926105][T16955] usb 7-1: Product: syz [ 988.926235][T16955] usb 7-1: Manufacturer: syz [ 988.926398][T16955] usb 7-1: SerialNumber: syz [ 989.045736][T16955] usb 7-1: config 0 descriptor?? [ 989.523026][ T5117] Bluetooth: hci6: command tx timeout [ 990.308167][ T70] team0 (unregistering): Port device team_slave_0 removed [ 991.603133][ T5117] Bluetooth: hci6: command tx timeout [ 991.801155][T16955] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 991.801714][T16955] usb 7-1: invalid MIDI out EP 0 [ 992.064654][T16955] snd-usb-audio 7-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 992.136877][T16955] usb 7-1: USB disconnect, device number 10 [ 992.990619][T17132] udevd[17132]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 993.449813][T17123] pim6reg: entered allmulticast mode [ 993.760641][ T5117] Bluetooth: hci6: command tx timeout [ 993.911303][ C0] vkms_vblank_simulate: vblank timer overrun [ 993.949392][ C0] vkms_vblank_simulate: vblank timer overrun [ 994.300864][ C0] vkms_vblank_simulate: vblank timer overrun [ 994.618976][ C0] vkms_vblank_simulate: vblank timer overrun [ 994.646510][ C0] vkms_vblank_simulate: vblank timer overrun [ 994.821884][ C0] vkms_vblank_simulate: vblank timer overrun [ 995.084711][T17123] pim6reg: left allmulticast mode [ 995.164043][ C0] vkms_vblank_simulate: vblank timer overrun [ 995.490253][T17107] lo speed is unknown, defaulting to 1000 [ 995.519950][ C0] vkms_vblank_simulate: vblank timer overrun [ 995.615710][ C0] vkms_vblank_simulate: vblank timer overrun [ 995.637962][T17066] lo speed is unknown, defaulting to 1000 [ 996.067049][T17160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2434'. [ 996.295469][ C0] vkms_vblank_simulate: vblank timer overrun [ 996.371625][T17166] 9pnet_fd: Insufficient options for proto=fd [ 996.382595][T17167] tmpfs: Bad value for 'mpol' [ 996.415325][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.311715][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.383171][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.548191][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.555608][T17189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2444'. [ 997.764375][T17189] macvtap1: entered promiscuous mode [ 997.764398][T17189] bond0: entered promiscuous mode [ 997.765071][T17189] macvtap1: entered allmulticast mode [ 997.765086][T17189] bond0: entered allmulticast mode [ 997.765097][T17189] bond_slave_0: entered allmulticast mode [ 997.765121][T17189] bond_slave_1: entered allmulticast mode [ 997.766759][T17189] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 997.853829][T17190] macvtap1: left promiscuous mode [ 997.853852][T17190] bond0: left promiscuous mode [ 997.856094][T17190] macvtap1: left allmulticast mode [ 997.856113][T17190] bond0: left allmulticast mode [ 997.856126][T17190] bond_slave_0: left allmulticast mode [ 997.856142][T17190] bond_slave_1: left allmulticast mode [ 998.178785][ C0] vkms_vblank_simulate: vblank timer overrun [ 998.455354][ C0] vkms_vblank_simulate: vblank timer overrun [ 998.617832][ T61] Bluetooth: hci6: command 0x0405 tx timeout [ 998.773336][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.773411][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.476571][T17066] chnl_net:caif_netlink_parms(): no params data found [ 1004.113288][T17232] dvmrp0: entered allmulticast mode [ 1004.178585][T17232] dvmrp0: left allmulticast mode [ 1004.573500][T17107] chnl_net:caif_netlink_parms(): no params data found [ 1004.854828][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2457'. [ 1006.193252][T17257] bond_slave_0: entered promiscuous mode [ 1006.193306][T17257] bond_slave_1: entered promiscuous mode [ 1006.193554][T17257] macvtap1: entered promiscuous mode [ 1006.193568][T17257] bond0: entered promiscuous mode [ 1006.194195][T17257] macvtap1: entered allmulticast mode [ 1006.194210][T17257] bond0: entered allmulticast mode [ 1006.194221][T17257] bond_slave_0: entered allmulticast mode [ 1006.194238][T17257] bond_slave_1: entered allmulticast mode [ 1006.196363][T17257] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1006.287018][T17259] macvtap1: left promiscuous mode [ 1006.287091][T17259] bond0: left promiscuous mode [ 1006.287764][T17259] macvtap1: left allmulticast mode [ 1006.287857][T17259] bond0: left allmulticast mode [ 1006.287870][T17259] bond_slave_0: left allmulticast mode [ 1006.287887][T17259] bond_slave_1: left allmulticast mode [ 1006.777763][T17277] comedi comedi1: s526: I/O port conflict (0x5065f1dc,64) [ 1006.901895][T17066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.902208][T17066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.902453][T17066] bridge_slave_0: entered allmulticast mode [ 1006.915918][T17066] bridge_slave_0: entered promiscuous mode [ 1006.973505][T17280] veth0_to_bridge: entered allmulticast mode [ 1007.003085][T17066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.003218][T17066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.003474][T17066] bridge_slave_1: entered allmulticast mode [ 1007.013975][T17066] bridge_slave_1: entered promiscuous mode [ 1007.036188][ T1515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.587695][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2466'. [ 1008.766620][T17066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.625057][T17305] macvtap2: entered promiscuous mode [ 1009.625080][T17305] bond0: entered promiscuous mode [ 1009.625803][T17305] macvtap2: entered allmulticast mode [ 1009.625817][T17305] bond0: entered allmulticast mode [ 1009.625829][T17305] bond_slave_0: entered allmulticast mode [ 1009.625847][T17305] bond_slave_1: entered allmulticast mode [ 1009.627507][T17305] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1009.977603][T17066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.999984][T17107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.000197][T17107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.000461][T17107] bridge_slave_0: entered allmulticast mode [ 1010.020725][T17107] bridge_slave_0: entered promiscuous mode [ 1010.231369][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2467'. [ 1011.207627][T17107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.207790][T17107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.208017][T17107] bridge_slave_1: entered allmulticast mode [ 1011.211208][T17107] bridge_slave_1: entered promiscuous mode [ 1011.213731][T17329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2470'. [ 1011.214633][T17319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1011.396015][T17319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1011.771537][T17066] team0: Port device team_slave_0 added [ 1011.967736][T17066] team0: Port device team_slave_1 added [ 1012.114389][T17107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.405265][T17107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.017510][T17066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.017521][T17066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.017536][T17066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.491052][T17066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.491070][T17066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.491097][T17066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.495369][T17107] team0: Port device team_slave_0 added [ 1014.525834][T17107] team0: Port device team_slave_1 added [ 1016.458912][T17383] /dev/nullb0: Can't lookup blockdev [ 1017.333551][T17107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.333568][T17107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.333595][T17107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.356639][T17066] hsr_slave_0: entered promiscuous mode [ 1017.357966][T17066] hsr_slave_1: entered promiscuous mode [ 1017.358862][T17066] debugfs: 'hsr0' already exists in 'hsr' [ 1017.358887][T17066] Cannot create hsr debugfs directory [ 1017.696692][T17107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.696709][T17107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.696736][T17107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.788978][T17401] 9pnet_fd: Insufficient options for proto=fd [ 1018.351699][T17407] tipc: Enabling of bearer rejected, failed to enable media [ 1018.945114][T17107] hsr_slave_0: entered promiscuous mode [ 1018.946612][T17107] hsr_slave_1: entered promiscuous mode [ 1018.947614][T17107] debugfs: 'hsr0' already exists in 'hsr' [ 1018.947667][T17107] Cannot create hsr debugfs directory [ 1020.533081][T17429] 9pnet_fd: Insufficient options for proto=fd [ 1021.421053][T17438] tipc: Enabling of bearer rejected, already enabled [ 1021.495066][ T70] bridge_slave_1: left allmulticast mode [ 1021.495097][ T70] bridge_slave_1: left promiscuous mode [ 1021.495360][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.594486][ T70] bridge_slave_0: left allmulticast mode [ 1021.594518][ T70] bridge_slave_0: left promiscuous mode [ 1021.594795][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.858163][ T70] bridge_slave_1: left allmulticast mode [ 1021.858193][ T70] bridge_slave_1: left promiscuous mode [ 1021.858950][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.829303][ T70] bridge_slave_0: left allmulticast mode [ 1022.829334][ T70] bridge_slave_0: left promiscuous mode [ 1022.829617][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.613633][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.808719][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.866421][ T70] bond0 (unregistering): Released all slaves [ 1024.447823][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1024.784258][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1024.913309][ T70] bond0 (unregistering): Released all slaves [ 1025.963443][T17472] process '/newroot/765/file0' started with executable stack [ 1026.204732][T17482] 9pnet_fd: Insufficient options for proto=fd [ 1028.293005][ T70] hsr_slave_0: left promiscuous mode [ 1028.798952][ T70] hsr_slave_1: left promiscuous mode [ 1028.808635][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1028.844572][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1029.045072][ T70] hsr_slave_0: left promiscuous mode [ 1029.083084][ T70] hsr_slave_1: left promiscuous mode [ 1029.084159][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.124089][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.033635][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1032.193550][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1033.233338][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1033.393768][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1033.976675][T17499] veth0_to_bridge: entered allmulticast mode [ 1034.405366][ T1515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.824244][T17561] fuse: Unknown parameter '0xffffffffffffffff' [ 1036.365084][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 1036.365103][ T37] audit: type=1326 audit(1760228463.303:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17564 comm="syz.6.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc215fceec9 code=0x7ffc0000 [ 1036.365359][ T37] audit: type=1326 audit(1760228463.303:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17564 comm="syz.6.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc215fceec9 code=0x7ffc0000 [ 1036.365503][ T37] audit: type=1326 audit(1760228463.303:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17564 comm="syz.6.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc215fceec9 code=0x7ffc0000 [ 1036.369272][ T37] audit: type=1326 audit(1760228463.303:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17564 comm="syz.6.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc215fceec9 code=0x7ffc0000 [ 1036.369597][ T37] audit: type=1326 audit(1760228463.303:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17564 comm="syz.6.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc215fceec9 code=0x7ffc0000 [ 1036.370381][ T37] audit: type=1326 audit(1760228463.303:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17564 comm="syz.6.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc215fceec9 code=0x7ffc0000 [ 1036.670564][T17066] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1036.817517][T17066] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1036.891073][T17066] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1037.332431][T17066] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1037.927259][T17066] kthread_run failed with err -4 [ 1038.076301][T17107] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1038.192808][T17107] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1038.348234][T17107] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1038.500087][T17107] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1039.314050][ T37] audit: type=1326 audit(1760228466.223:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17612 comm="syz.6.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc215fceec9 code=0x7ffc0000 [ 1039.314115][ T37] audit: type=1326 audit(1760228466.223:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17612 comm="syz.6.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc215fceec9 code=0x7ffc0000 [ 1039.314163][ T37] audit: type=1326 audit(1760228466.223:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17612 comm="syz.6.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc215fceec9 code=0x7ffc0000 [ 1039.314209][ T37] audit: type=1326 audit(1760228466.223:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17612 comm="syz.6.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc215fceec9 code=0x7ffc0000 [ 1039.325439][T17574] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1039.339999][T17574] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1039.344357][T17574] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1039.348963][T17574] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1039.349951][T17574] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1041.257278][T17618] lo speed is unknown, defaulting to 1000 [ 1041.442816][T17574] Bluetooth: hci0: command tx timeout [ 1042.114021][T17642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2570'. [ 1043.499047][T17649] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2572'. [ 1043.532903][T17574] Bluetooth: hci0: command tx timeout [ 1043.872884][T17658] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2577'. [ 1044.986685][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1044.999561][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1045.000990][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1045.002118][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1045.012280][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1046.361355][ T5117] Bluetooth: hci0: command tx timeout [ 1046.433014][T17681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2582'. [ 1047.064833][ T5117] Bluetooth: hci3: command tx timeout [ 1048.022046][T17667] lo speed is unknown, defaulting to 1000 [ 1048.403013][ T5117] Bluetooth: hci0: command tx timeout [ 1049.123057][ T5117] Bluetooth: hci3: command tx timeout [ 1049.447252][T17740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2602'. [ 1049.653085][ T5880] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1049.888730][T17744] gtp0: entered promiscuous mode [ 1050.465779][ T5880] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 1050.465806][ T5880] usb 7-1: config 0 has no interface number 0 [ 1050.465850][ T5880] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1050.531291][ T5880] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1050.531321][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.531340][ T5880] usb 7-1: Product: syz [ 1050.531355][ T5880] usb 7-1: Manufacturer: syz [ 1050.531368][ T5880] usb 7-1: SerialNumber: syz [ 1050.610734][ T5880] usb 7-1: config 0 descriptor?? [ 1051.202769][ T5117] Bluetooth: hci3: command tx timeout [ 1052.588439][ T5880] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1052.589029][ T5880] usb 7-1: invalid MIDI out EP 0 [ 1052.601755][T17618] chnl_net:caif_netlink_parms(): no params data found [ 1052.756975][ T5880] snd-usb-audio 7-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 1052.825125][ T5880] usb 7-1: USB disconnect, device number 11 [ 1053.286589][ T5117] Bluetooth: hci3: command tx timeout [ 1053.321077][T17765] udevd[17765]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1054.848227][T17618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.848451][T17618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.848709][T17618] bridge_slave_0: entered allmulticast mode [ 1054.851578][T17618] bridge_slave_0: entered promiscuous mode [ 1054.972940][T17618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.973163][T17618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.973410][T17618] bridge_slave_1: entered allmulticast mode [ 1054.991131][T17618] bridge_slave_1: entered promiscuous mode [ 1056.647717][T17618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.647972][ T70] bridge_slave_1: left allmulticast mode [ 1056.647994][ T70] bridge_slave_1: left promiscuous mode [ 1056.648249][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.894292][ T70] bridge_slave_0: left allmulticast mode [ 1056.894323][ T70] bridge_slave_0: left promiscuous mode [ 1056.894610][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.714432][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.714502][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.763651][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1059.888410][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1059.946236][ T70] bond0 (unregistering): Released all slaves [ 1059.986809][T17618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.987094][T17832] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2624'. [ 1060.414856][T17667] chnl_net:caif_netlink_parms(): no params data found [ 1061.424997][T17618] team0: Port device team_slave_0 added [ 1061.464387][T17618] team0: Port device team_slave_1 added [ 1061.648574][T17868] netlink: 'syz.0.2636': attribute type 10 has an invalid length. [ 1061.884147][ T70] hsr_slave_0: left promiscuous mode [ 1061.923988][ T70] hsr_slave_1: left promiscuous mode [ 1061.925151][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.969250][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.978484][T17873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2637'. [ 1062.373090][T17875] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 1062.373114][T17875] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 17875, name: syz.6.2638 [ 1062.373132][T17875] preempt_count: 1, expected: 0 [ 1062.373142][T17875] RCU nest depth: 2, expected: 2 [ 1062.373161][T17875] 5 locks held by syz.6.2638/17875: [ 1062.373174][T17875] #0: ffff8880502ec3d0 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connect+0x152/0xe20 [ 1062.373239][T17875] #1: ffffffff8d7aa4c0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run9+0x1ec/0x500 [ 1062.373297][T17875] #2: ffff8880b8832c88 ((stream_local_lock)){+.+.}-{3:3}, at: __bpf_stream_push_str+0x211/0xbe0 [ 1062.373351][T17875] #3: ffffffff8d7aa4c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10d/0x2b0 [ 1062.373405][T17875] #4: ffff8880b883f6e8 (&s->lock_key#5){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x13f0 [ 1062.373462][T17875] Preemption disabled at: [ 1062.373467][T17875] [] __slab_alloc+0xea/0x1f0 [ 1062.373517][T17875] CPU: 0 UID: 0 PID: 17875 Comm: syz.6.2638 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1062.373540][T17875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1062.373558][T17875] Call Trace: [ 1062.373567][T17875] [ 1062.373583][T17875] dump_stack_lvl+0x189/0x250 [ 1062.373613][T17875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1062.373638][T17875] ? __pfx__printk+0x10/0x10 [ 1062.373667][T17875] ? print_lock_name+0xde/0x100 [ 1062.373708][T17875] ? __slab_alloc+0xea/0x1f0 [ 1062.373736][T17875] __might_resched+0x44b/0x5d0 [ 1062.373768][T17875] ? __slab_alloc+0xea/0x1f0 [ 1062.373791][T17875] ? __pfx___might_resched+0x10/0x10 [ 1062.373818][T17875] ? ___slab_alloc+0x12f/0x13f0 [ 1062.373847][T17875] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1062.373877][T17875] ? lockdep_hardirqs_on+0x9c/0x150 [ 1062.373911][T17875] rt_spin_lock+0xc7/0x3e0 [ 1062.373939][T17875] ? __pfx_rt_spin_lock+0x10/0x10 [ 1062.373962][T17875] ? __lock_acquire+0xab9/0xd20 [ 1062.373993][T17875] ___slab_alloc+0x12f/0x13f0 [ 1062.374023][T17875] ? __set_page_owner+0x25c/0x490 [ 1062.374056][T17875] __slab_alloc+0xc6/0x1f0 [ 1062.374080][T17875] ? __set_page_owner+0x25c/0x490 [ 1062.374102][T17875] __kmalloc_cache_noprof+0xec/0x6c0 [ 1062.374124][T17875] ? __set_page_owner+0x25c/0x490 [ 1062.374149][T17875] __set_page_owner+0x25c/0x490 [ 1062.374173][T17875] ? __pfx___set_page_owner+0x10/0x10 [ 1062.374193][T17875] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1062.374227][T17875] post_alloc_hook+0x240/0x2a0 [ 1062.374254][T17875] get_page_from_freelist+0x28c0/0x2960 [ 1062.374296][T17875] ? lockdep_unlock+0x89/0x120 [ 1062.374347][T17875] alloc_frozen_pages_nolock_noprof+0xbc/0x150 [ 1062.374385][T17875] alloc_pages_nolock_noprof+0xa/0x30 [ 1062.374411][T17875] bpf_stream_page_replace+0x19/0x1e0 [ 1062.374440][T17875] __bpf_stream_push_str+0x35c/0xbe0 [ 1062.374473][T17875] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 1062.374518][T17875] bpf_stream_stage_printk+0x14e/0x1c0 [ 1062.374542][T17875] ? __pfx_find_from_stack_cb+0x10/0x10 [ 1062.374565][T17875] ? arch_bpf_stack_walk+0x112/0x170 [ 1062.374595][T17875] ? __pfx_bpf_stream_stage_printk+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1062.374627][T17875] ? arch_stack_walk+0xfc/0x150 [ 1062.374660][T17875] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 1062.374690][T17875] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 1062.374720][T17875] ? irqentry_exit+0x74/0x90 [ 1062.374752][T17875] ? read_tsc+0x9/0x20 [ 1062.374786][T17875] bpf_check_timed_may_goto+0xaa/0xb0 [ 1062.374817][T17875] arch_bpf_timed_may_goto+0x21/0x40 [ 1062.374849][T17875] bpf_prog_6fd842a53d323cc5+0x53/0x5f [ 1062.374877][T17875] bpf_trace_run9+0x2de/0x500 [ 1062.374902][T17875] ? bpf_trace_run9+0x1ec/0x500 [ 1062.374923][T17875] ? __pfx_bpf_trace_run9+0x10/0x10 [ 1062.374972][T17875] __bpf_trace_virtio_transport_alloc_pkt+0x2d7/0x340 [ 1062.375010][T17875] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 1062.375034][T17875] ? kmem_cache_alloc_node_noprof+0x291/0x6e0 [ 1062.375068][T17875] ? __alloc_skb+0x112/0x2d0 [ 1062.375111][T17875] ? __alloc_skb+0x1bc/0x2d0 [ 1062.375146][T17875] ? __local_bh_enable+0x28c/0x410 [ 1062.375183][T17875] virtio_transport_alloc_skb+0x10cc/0x1130 [ 1062.375231][T17875] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 1062.375264][T17875] ? rt_spin_unlock+0x150/0x200 [ 1062.375292][T17875] virtio_transport_send_pkt_info+0x6be/0x1100 [ 1062.375344][T17875] virtio_transport_connect+0xa7/0x100 [ 1062.375369][T17875] ? __pfx_virtio_transport_connect+0x10/0x10 [ 1062.375399][T17875] ? __pfx_vsock_auto_bind+0x10/0x10 [ 1062.375429][T17875] ? vsock_assign_transport+0x5ed/0x770 [ 1062.375462][T17875] vsock_connect+0xb8b/0xe20 [ 1062.375508][T17875] ? __might_fault+0xb0/0x130 [ 1062.375530][T17875] ? __pfx_vsock_connect+0x10/0x10 [ 1062.375561][T17875] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1062.375602][T17875] ? bpf_lsm_socket_connect+0x9/0x20 [ 1062.375628][T17875] __sys_connect+0x323/0x450 [ 1062.375659][T17875] ? __pfx___sys_connect+0x10/0x10 [ 1062.375699][T17875] ? rcu_is_watching+0x15/0xb0 [ 1062.375733][T17875] __x64_sys_connect+0x7a/0x90 [ 1062.375761][T17875] do_syscall_64+0xfa/0xfa0 [ 1062.375787][T17875] ? lockdep_hardirqs_on+0x9c/0x150 [ 1062.375816][T17875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.375836][T17875] ? clear_bhb_loop+0x60/0xb0 [ 1062.375861][T17875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.375880][T17875] RIP: 0033:0x7fc215fceec9 [ 1062.375898][T17875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1062.375917][T17875] RSP: 002b:00007fc21422e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1062.375938][T17875] RAX: ffffffffffffffda RBX: 00007fc216225fa0 RCX: 00007fc215fceec9 [ 1062.375953][T17875] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000006 [ 1062.375967][T17875] RBP: 00007fc216051f91 R08: 0000000000000000 R09: 0000000000000000 [ 1062.375979][T17875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1062.375991][T17875] R13: 00007fc216226038 R14: 00007fc216225fa0 R15: 00007ffd62a1d1c8 [ 1062.376029][T17875] [ 1064.254691][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1064.423437][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1065.237211][T17868] dummy0: entered promiscuous mode [ 1065.237856][T17868] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1068.156314][ T70] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.458988][ T70] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.730384][ T70] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.017921][ T70] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.601487][ T70] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.948933][ T70] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.231841][ T70] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.498404][ T70] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.196035][ T70] bridge_slave_1: left allmulticast mode [ 1072.196065][ T70] bridge_slave_1: left promiscuous mode [ 1072.196418][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.274387][ T70] bridge_slave_0: left allmulticast mode [ 1072.274416][ T70] bridge_slave_0: left promiscuous mode [ 1072.274714][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.369893][ T70] veth3: left allmulticast mode [ 1072.370153][ T70] bridge2: port 1(veth3) entered disabled state