last executing test programs: 7m1.301450119s ago: executing program 4 (id=2803): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000", @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x120c000, 0x1000, 0x0, 0x7}, 0x20) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7m0.985841592s ago: executing program 4 (id=2805): socket$kcm(0xa, 0x2, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2fffffff}, 0x94) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r2 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @rand_addr, 0xffff}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 6m58.665048502s ago: executing program 4 (id=2808): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x0, 0x2000000}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x1}}], 0x38, 0x4048800}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x6}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) 6m49.992741505s ago: executing program 4 (id=2820): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000002f80)="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", 0xbe8}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df49", 0xa4}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) 6m49.598193673s ago: executing program 4 (id=2822): sendmsg$unix(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x30, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x2004c004) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1, 0x0) timer_create(0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000ffff29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300230a07002c0012800e00010069703667726574617000000018000280140007000002000000000000000000000000000108001f000800"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba8783d0, 0xfa94, 0x4}, 0x9c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r5) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 6m46.860530013s ago: executing program 4 (id=2825): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="8000000040cca000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050009000100000008000a00", @ANYRES32, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000019300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000019580)=ANY=[@ANYBLOB="aaaac3aa4215cf6c044a08aaa10180c2000001fc0b030000e007020000b6dba7a7ff307ddff39b11c20a628f001a2793481a26d2a44b4c127d44ad6f2fc302432e4021167e5e8595ad85d82aaafca1c0daf37caac16b18c38898e4a5949936ae59dafca735e1b40aba699003d5a44b37dab44d438464137a3db34659be1979893cdf1463a9826d509786a0110586f874726f023ca74faf86ff135aabc6bebf"], &(0x7f0000000280)={0x0, 0x3, [0xbb6, 0x3f, 0x4b3, 0xec]}) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582"], 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 6m31.415040766s ago: executing program 32 (id=2825): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="8000000040cca000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050009000100000008000a00", @ANYRES32, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000019300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000019580)=ANY=[@ANYBLOB="aaaac3aa4215cf6c044a08aaa10180c2000001fc0b030000e007020000b6dba7a7ff307ddff39b11c20a628f001a2793481a26d2a44b4c127d44ad6f2fc302432e4021167e5e8595ad85d82aaafca1c0daf37caac16b18c38898e4a5949936ae59dafca735e1b40aba699003d5a44b37dab44d438464137a3db34659be1979893cdf1463a9826d509786a0110586f874726f023ca74faf86ff135aabc6bebf"], &(0x7f0000000280)={0x0, 0x3, [0xbb6, 0x3f, 0x4b3, 0xec]}) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582"], 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 5m40.809577858s ago: executing program 2 (id=2888): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="91945bf3fe18da4e6dcd329251000000000000004c92c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe9", 0x2a}], 0x3}], 0x1, 0x40800) recvmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/134, 0x86}], 0x1}, 0x100) 5m38.888958684s ago: executing program 2 (id=2890): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r5}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@map=r5, 0xffffffffffffffff, 0x6, 0x2020, 0xffffffffffffffff, @void, @void, @value=0xffffffffffffffff}, 0x20) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x40, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="28000000240007012bbd7000ffdbdf2503740000080001800400de800c0004"], 0x28}}, 0x48010) 5m37.286448586s ago: executing program 2 (id=2891): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000005000000b7080000000000007b8af8ff00000000b70800000e0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@map=r5, 0xffffffffffffffff, 0x6, 0x2020, 0xffffffffffffffff, @void, @void, @value=0xffffffffffffffff}, 0x20) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x40, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="28000000240007012bbd7000ffdbdf2503740000080001800400de800c0004"], 0x28}}, 0x48010) 5m36.052781877s ago: executing program 1 (id=2892): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 5m33.633524926s ago: executing program 2 (id=2893): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2a71f0d3fe13be00", "3d0e00000000003efe56890a5b857206", "47eb0b4a89ffff000000000000c94742"}, 0x4, 0x4}) 5m33.454844034s ago: executing program 1 (id=2895): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec6106000440000400000500070006"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_socket_connect_nvme_tcp() syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) close(r4) 5m27.658356616s ago: executing program 2 (id=2899): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x0, 0x2000000}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x1}}], 0x38, 0x4048800}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x6}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) 5m27.448996234s ago: executing program 1 (id=2900): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)={@fallback=r3, r0, 0x2f, 0x0, 0x0, @void, @value=r3}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="2f0000003820000004000000", @ANYRES32=r4], 0x20) 5m25.257989334s ago: executing program 1 (id=2902): sendmsg$unix(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x30, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x2004c004) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1, 0x0) timer_create(0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000ffff29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300230a07002c0012800e00010069703667726574617000000018000280140007000002000000000000000000000000000108001f000800"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba8783d0, 0xfa94, 0x4}, 0x9c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 5m24.33940727s ago: executing program 1 (id=2904): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r5, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000005000000b7080000000000007b8af8ff00000000b70800000e0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@map=r6, 0xffffffffffffffff, 0x6, 0x2020, 0xffffffffffffffff, @void, @void, @value=0xffffffffffffffff}, 0x20) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x40, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="28000000240007012bbd7000ffdbdf2503740000080001800400de800c0004"], 0x28}}, 0x48010) 5m22.584671497s ago: executing program 1 (id=2905): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r5, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r6}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@map=r6, 0xffffffffffffffff, 0x6, 0x2020, 0xffffffffffffffff, @void, @void, @value=0xffffffffffffffff}, 0x20) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x40, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="28000000240007012bbd7000ffdbdf2503740000080001800400de800c0004"], 0x28}}, 0x48010) 5m19.756524034s ago: executing program 2 (id=2909): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec6106000440000400000500070006"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_socket_connect_nvme_tcp() syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) close(r4) 5m7.002701604s ago: executing program 33 (id=2905): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r5, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r6}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@map=r6, 0xffffffffffffffff, 0x6, 0x2020, 0xffffffffffffffff, @void, @void, @value=0xffffffffffffffff}, 0x20) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x40, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="28000000240007012bbd7000ffdbdf2503740000080001800400de800c0004"], 0x28}}, 0x48010) 5m4.445185084s ago: executing program 34 (id=2909): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec6106000440000400000500070006"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_socket_connect_nvme_tcp() syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) close(r4) 11.640491161s ago: executing program 3 (id=3168): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x20000081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000}, 0x37) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r6 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r6, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x4000001, @local}, 0x1c) sendto$inet6(r6, &(0x7f0000000400)="17", 0x1, 0x40000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 10.045888917s ago: executing program 3 (id=3169): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x1) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4c0c8) tkill(r5, 0xb) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 6.163074117s ago: executing program 3 (id=3174): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r0, 0xffffffffffffffff, 0x0) 5.204608616s ago: executing program 3 (id=3177): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="040028bd7000fcdbdf250500000058000780080001000200000008000100040000000800020009000000080002000180ffff0c00030006000000000000000c0003000900000000000000080001000800000008000200050000000cf9296c94420c024efcffff30000180080003000100000008000300070000000d0001007564703a73797a31000000000c00028008"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x4000010) 5.169677954s ago: executing program 3 (id=3178): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e22, 0x4, @mcast1, 0x9}, {0xa, 0x4e23, 0x5c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0xffffffffffffffff, {[0x8, 0x4, 0x0, 0x1, 0xcf1b, 0xb, 0x80c1, 0xe]}}, 0x5c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0xd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r2) socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x26020480) shutdown(r2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) 3.931793527s ago: executing program 3 (id=3180): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000180)=0x1) setresgid(0xee00, 0xee01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x29d, 0x2, 0x2}, 0x4c, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0xfff, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0xb6, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x105, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x5, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x1ee7, 0x0, 0x5, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x108, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xf, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'gre0\x00'}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1301"], 0x16) ppoll(&(0x7f00000000c0)=[{r4, 0x60}], 0x1, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) 3.585631709s ago: executing program 0 (id=3182): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) close(r2) 3.422364007s ago: executing program 0 (id=3183): fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x8, &(0x7f0000000380)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x48}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$inet6(r5, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5) shutdown(r5, 0x1) 2.269238701s ago: executing program 0 (id=3184): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0xa2040, 0x0) read$FUSE(r1, &(0x7f00000024c0)={0x2020}, 0xfffffec1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000016c0)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000400)=""/222, 0xde, 0x0, 0x0}}, 0x10) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) 1.705546331s ago: executing program 0 (id=3185): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="040028bd7000fcdbdf250500000058000780080001000200000008000100040000000800020009000000080002000180ffff0c00030006000000000000000c0003000900000000000000080001000800000008000200050000000cf9296c94420c024efcffff30000180080003000100000008000300070000000d0001007564703a73797a31000000000c00028008"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x4000010) 1.451374957s ago: executing program 0 (id=3186): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x87d4b69a72310a97) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4c0c8) tkill(r5, 0xb) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 0s ago: executing program 0 (id=3187): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1800}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4004c010) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x42000) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff004) kernel console output (not intermixed with test programs): 89] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.351720][T11789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.354427][T11789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.354443][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.354471][T11789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.517264][T11789] hsr_slave_0: entered promiscuous mode [ 325.518807][T11789] hsr_slave_1: entered promiscuous mode [ 325.519857][T11789] debugfs: 'hsr0' already exists in 'hsr' [ 325.519883][T11789] Cannot create hsr debugfs directory [ 325.766745][T11904] ntfs3(nullb0): Primary boot signature is not NTFS. [ 325.820674][T11904] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 327.004083][ T5804] Bluetooth: hci5: command tx timeout [ 327.967106][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2442'. [ 327.967125][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2442'. [ 328.031536][T11918] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2442'. [ 329.912488][T11931] ntfs3(nullb0): Primary boot signature is not NTFS. [ 329.912659][T11931] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 330.279494][T11938] ntfs3(nullb0): Primary boot signature is not NTFS. [ 330.284685][T11938] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 331.986776][T11789] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.340418][T11789] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.445098][T11973] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2462'. [ 334.665465][ T5804] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 334.775205][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2465'. [ 338.223235][T11981] nbd: socks must be embedded in a SOCK_ITEM attr [ 339.007100][T12001] ntfs3(nullb0): Primary boot signature is not NTFS. [ 339.007268][T12001] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 339.029040][T11789] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.384851][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2471'. [ 339.514866][T11992] udevd[11992]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 339.576404][T11991] udevd[11991]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 339.788103][T11789] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.127974][T12022] ntfs3(nullb0): Primary boot signature is not NTFS. [ 340.139714][T12022] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 342.828842][T11789] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 342.904248][T12055] ntfs3(nullb0): Primary boot signature is not NTFS. [ 342.907394][T12055] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 343.652446][T11789] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 343.750480][T11789] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 343.784301][T11789] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 345.647263][T12081] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2493'. [ 345.701918][T11789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.777481][T11789] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.849271][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.849694][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.890255][T12002] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.890401][T12002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.973512][T12089] ntfs3(nullb0): Primary boot signature is not NTFS. [ 345.975321][T12089] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 346.768630][T11789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.992635][T12119] ntfs3(nullb0): Primary boot signature is not NTFS. [ 347.992842][T12119] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 348.474351][T11789] veth0_vlan: entered promiscuous mode [ 348.496411][T11789] veth1_vlan: entered promiscuous mode [ 348.609409][T11789] veth0_macvtap: entered promiscuous mode [ 348.637950][T11789] veth1_macvtap: entered promiscuous mode [ 348.682885][T11789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.688494][T11789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.746146][ T1206] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.746673][ T1206] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.746717][ T1206] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.749896][ T1206] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.157100][T12095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 349.162267][T12124] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2504'. [ 349.439225][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.439248][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.597734][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.597760][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.013967][T12163] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2517'. [ 352.218144][ T61] Bluetooth: hci1: command 0x1003 tx timeout [ 352.251012][ T5804] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 352.282428][T12177] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2522'. [ 353.689915][ T1821] IPVS: starting estimator thread 0... [ 353.881446][T12193] IPVS: using max 8 ests per chain, 19200 per kthread [ 353.917939][T12199] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2529'. [ 354.789266][T12222] netlink: 'syz.3.2536': attribute type 1 has an invalid length. [ 356.498248][T12235] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2538'. [ 357.245905][T12206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.285669][T12248] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2544'. [ 357.889587][T12250] ntfs3(nullb0): Primary boot signature is not NTFS. [ 357.889807][T12250] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 358.025647][T12260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2548'. [ 359.799213][T12290] ntfs3(nullb0): Primary boot signature is not NTFS. [ 359.799385][T12290] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 361.207424][T12319] ntfs3(nullb0): Primary boot signature is not NTFS. [ 361.214875][T12319] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 362.791433][T12292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.796858][T12314] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2566'. [ 364.683191][T12348] ntfs3(nullb0): Primary boot signature is not NTFS. [ 364.695592][T12348] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 366.523956][T12366] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2583'. [ 367.203837][T12375] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2588'. [ 369.161572][T12406] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2598'. [ 369.305930][ T61] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 369.366176][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2597'. [ 371.681291][T12416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2601'. [ 371.818609][T12407] nbd: socks must be embedded in a SOCK_ITEM attr [ 372.043770][ T5804] Bluetooth: hci4: command 0x0406 tx timeout [ 372.368510][T12420] udevd[12420]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 372.418539][T12419] udevd[12419]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 372.648775][T12453] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2611'. [ 372.653044][T12454] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2609'. [ 373.461774][T12458] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2612'. [ 373.470167][T12460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2613'. [ 375.642612][T12473] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2618'. [ 375.676580][T12475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2619'. [ 376.953986][T12486] Bluetooth: MGMT ver 1.23 [ 377.895149][T12502] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2626'. [ 377.926399][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'. [ 378.653765][T12520] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2634'. [ 378.774830][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.553952][T12544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2641'. [ 380.611314][ T810] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 381.103640][T12552] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2645'. [ 381.169719][T12554] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2643'. [ 381.443702][T12566] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2647'. [ 381.529668][ T61] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 381.632415][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2649'. [ 382.496178][T12570] nbd: socks must be embedded in a SOCK_ITEM attr [ 385.855272][T12588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2653'. [ 385.909314][T12556] udevd[12556]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 385.928341][T12493] udevd[12493]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 386.026761][T12596] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2657'. [ 386.184576][T12605] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2660'. [ 386.219396][T12607] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2661'. [ 386.987134][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2663'. [ 391.206484][T12634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.704212][T12620] nbd: socks must be embedded in a SOCK_ITEM attr [ 393.872107][T12640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.348019][T12493] udevd[12493]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 394.400213][T12661] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2675'. [ 395.561419][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2676'. [ 396.042037][T12669] nbd: socks must be embedded in a SOCK_ITEM attr [ 398.013159][T12674] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2678'. [ 398.219624][T12682] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2682'. [ 398.275759][T12493] udevd[12493]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 398.303376][T12493] udevd[12493]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 399.502481][ T5804] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 399.502514][ T5804] CPU: 1 UID: 0 PID: 5804 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 399.502543][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 399.502558][ T5804] Workqueue: hci5 hci_rx_work [ 399.502772][ T5804] Call Trace: [ 399.502782][ T5804] [ 399.502792][ T5804] dump_stack_lvl+0xe8/0x150 [ 399.502908][ T5804] sysfs_create_dir_ns+0x271/0x2a0 [ 399.502995][ T5804] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 399.503120][ T5804] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 399.503153][ T5804] ? rt_spin_unlock+0x160/0x200 [ 399.503184][ T5804] kobject_add_internal+0x631/0xd10 [ 399.503263][ T5804] kobject_add+0x163/0x240 [ 399.503294][ T5804] ? __pfx_kobject_add+0x10/0x10 [ 399.503327][ T5804] ? get_device_parent+0x370/0x3a0 [ 399.503474][ T5804] device_add+0x408/0xb80 [ 399.503505][ T5804] hci_conn_add_sysfs+0xd5/0x210 [ 399.503571][ T5804] le_conn_complete_evt+0xf1d/0x1430 [ 399.503631][ T5804] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 399.503657][ T5804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 399.503714][ T5804] ? lockdep_hardirqs_on+0x7a/0x110 [ 399.503792][ T5804] ? skb_pull_data+0xfb/0x200 [ 399.503903][ T5804] hci_le_conn_complete_evt+0x187/0x470 [ 399.503937][ T5804] hci_event_packet+0x7af/0x12c0 [ 399.504000][ T5804] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 399.504045][ T5804] ? __pfx_hci_event_packet+0x10/0x10 [ 399.504076][ T5804] ? rt_spin_unlock+0x14f/0x200 [ 399.504115][ T5804] ? hci_send_to_monitor+0xe2/0x590 [ 399.504145][ T5804] hci_rx_work+0x3ee/0x1030 [ 399.504186][ T5804] ? process_scheduled_works+0xa8d/0x18c0 [ 399.504255][ T5804] process_scheduled_works+0xb6e/0x18c0 [ 399.504325][ T5804] ? __pfx_process_scheduled_works+0x10/0x10 [ 399.504365][ T5804] ? assign_work+0x3d5/0x5e0 [ 399.504400][ T5804] worker_thread+0xa53/0xfc0 [ 399.504467][ T5804] kthread+0x388/0x470 [ 399.504493][ T5804] ? __pfx_worker_thread+0x10/0x10 [ 399.504520][ T5804] ? __pfx_kthread+0x10/0x10 [ 399.504540][ T5804] ret_from_fork+0x51e/0xb90 [ 399.504595][ T5804] ? __pfx_ret_from_fork+0x10/0x10 [ 399.504625][ T5804] ? __switch_to+0xc7d/0x1450 [ 399.504673][ T5804] ? __pfx_kthread+0x10/0x10 [ 399.504699][ T5804] ret_from_fork_asm+0x1a/0x30 [ 399.504743][ T5804] [ 399.504904][ T5804] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 399.505075][ T5804] Bluetooth: hci5: failed to register connection device [ 401.883692][T12727] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2693'. [ 402.207837][T12738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2698'. [ 403.736981][T12760] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2707'. [ 403.861965][T12764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2705'. [ 404.689897][T12706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.692717][T12731] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2694'. [ 404.703981][T12764] Can't find ip_set type has [ 405.227785][ T5804] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 405.252732][T12771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2709'. [ 405.340698][T12772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 405.882262][T12771] nbd: socks must be embedded in a SOCK_ITEM attr [ 409.929184][T12781] udevd[12781]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 410.058740][T12810] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2720'. [ 410.273445][ T5127] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 410.372612][T12820] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2724'. [ 410.427324][ T5127] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 410.427368][ T5127] usb 2-1: can't read configurations, error -61 [ 410.674862][ T5127] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 411.326336][T12823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 411.374530][ T5127] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 411.374574][ T5127] usb 2-1: can't read configurations, error -61 [ 411.375182][ T5127] usb usb2-port1: attempt power cycle [ 411.438831][T12833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2727'. [ 411.791137][ T5127] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 411.817974][ T5127] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 411.818019][ T5127] usb 2-1: can't read configurations, error -61 [ 412.254924][ T5127] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 412.798964][ T5127] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 412.799009][ T5127] usb 2-1: can't read configurations, error -61 [ 412.815495][ T5127] usb usb2-port1: unable to enumerate USB device [ 413.038744][T12809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.039024][T12847] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2732'. [ 415.576540][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2740'. [ 415.952738][T12887] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2744'. [ 418.551125][ T5876] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 418.711223][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 418.716765][ T5876] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 418.716829][ T5876] usb 3-1: config 0 has no interface number 0 [ 418.716895][ T5876] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 418.716909][ T5876] usb 3-1: config 0 interface 85 has no altsetting 0 [ 418.759693][ T5876] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 418.759725][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.759744][ T5876] usb 3-1: Product: syz [ 418.759759][ T5876] usb 3-1: Manufacturer: syz [ 418.759771][ T5876] usb 3-1: SerialNumber: syz [ 419.456112][ T5876] usb 3-1: config 0 descriptor?? [ 419.458995][T12914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.476946][ T5876] usb 3-1: can't set config #0, error -71 [ 419.495944][ T5876] usb 3-1: USB disconnect, device number 8 [ 419.521996][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2757'. [ 423.064444][T12953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.102280][T12958] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 423.170544][T12963] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 423.261082][ T5876] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 423.325537][T12968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2774'. [ 424.344549][T12988] blk_print_req_error: 27 callbacks suppressed [ 424.344566][T12988] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 424.344584][T12988] buffer_io_error: 27 callbacks suppressed [ 424.344591][T12988] Buffer I/O error on dev nbd4, logical block 0, async page read [ 424.344634][T12988] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 424.344658][T12988] Buffer I/O error on dev nbd4, logical block 1, async page read [ 424.344693][T12988] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 424.344707][T12988] Buffer I/O error on dev nbd4, logical block 2, async page read [ 424.344739][T12988] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 424.344754][T12988] Buffer I/O error on dev nbd4, logical block 3, async page read [ 424.344794][T12988] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 424.344809][T12988] Buffer I/O error on dev nbd4, logical block 0, async page read [ 424.344841][T12988] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 424.344856][T12988] Buffer I/O error on dev nbd4, logical block 1, async page read [ 424.344887][T12988] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 424.344902][T12988] Buffer I/O error on dev nbd4, logical block 2, async page read [ 424.344933][T12988] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 424.344948][T12988] Buffer I/O error on dev nbd4, logical block 3, async page read [ 424.344985][T12988] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 424.345000][T12988] Buffer I/O error on dev nbd4, logical block 0, async page read [ 424.345031][T12988] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 424.345046][T12988] Buffer I/O error on dev nbd4, logical block 1, async page read [ 424.345618][T12988] ldm_validate_partition_table(): Disk read failed. [ 424.346028][T12988] Dev nbd4: unable to read RDB block 0 [ 424.346849][T12988] nbd4: unable to read partition table [ 424.350848][T12988] block nbd4: Cannot use ioctl interface on a netlink controlled device. [ 424.353041][T12988] ldm_validate_partition_table(): Disk read failed. [ 424.353452][T12988] Dev nbd4: unable to read RDB block 0 [ 424.353976][T12988] nbd4: unable to read partition table [ 424.356876][T12988] block nbd4: NBD_DISCONNECT [ 424.357407][T12988] block nbd4: Send disconnect failed -32 [ 424.783544][ T5165] ldm_validate_partition_table(): Disk read failed. [ 424.783947][ T5165] Dev nbd4: unable to read RDB block 0 [ 424.784436][ T5165] nbd4: unable to read partition table [ 424.804230][ T5165] ldm_validate_partition_table(): Disk read failed. [ 424.804873][ T5165] Dev nbd4: unable to read RDB block 0 [ 424.805688][ T5165] nbd4: unable to read partition table [ 425.015984][T12897] ldm_validate_partition_table(): Disk read failed. [ 425.041573][T12897] Dev nbd4: unable to read RDB block 0 [ 425.081564][T12897] nbd4: unable to read partition table [ 425.093496][T12897] ldm_validate_partition_table(): Disk read failed. [ 425.094136][T12897] Dev nbd4: unable to read RDB block 0 [ 425.094919][T12897] nbd4: unable to read partition table [ 425.626932][T12999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.503874][T12975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 427.382138][ T5804] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 427.457970][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2788'. [ 429.372814][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'. [ 430.523079][T13012] nbd: socks must be embedded in a SOCK_ITEM attr [ 434.076509][T13041] overlayfs: failed to resolve './file0': -2 [ 435.493589][T13025] udevd[13025]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 435.519245][T13024] udevd[13024]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 436.239131][T13053] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2799'. [ 437.931121][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 438.081198][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 438.083877][ T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 438.083907][ T10] usb 2-1: config 0 has no interface number 0 [ 438.083956][ T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 438.083981][ T10] usb 2-1: config 0 interface 85 has no altsetting 0 [ 438.093051][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 438.093080][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.093100][ T10] usb 2-1: Product: syz [ 438.093114][ T10] usb 2-1: Manufacturer: syz [ 438.093127][ T10] usb 2-1: SerialNumber: syz [ 438.098916][ T10] usb 2-1: config 0 descriptor?? [ 438.107665][ T10] appletouch 2-1:0.85: Could not find int-in endpoint [ 438.107703][ T10] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 438.109409][ T10] usbhid 2-1:0.85: couldn't find an input interrupt endpoint [ 438.357002][ T10] usb 2-1: USB disconnect, device number 9 [ 440.218128][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.281636][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 442.652162][T13094] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2810'. [ 442.838721][T13096] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2811'. [ 443.497950][T13099] overlayfs: failed to resolve './file0': -2 [ 448.709465][T13120] blk_print_req_error: 394 callbacks suppressed [ 448.709508][T13120] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.709556][T13120] buffer_io_error: 394 callbacks suppressed [ 448.709588][T13120] Buffer I/O error on dev nbd0, logical block 0, async page read [ 448.709779][T13120] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.709823][T13120] Buffer I/O error on dev nbd0, logical block 1, async page read [ 448.710188][T13120] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.710256][T13120] Buffer I/O error on dev nbd0, logical block 2, async page read [ 448.710688][T13120] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.710741][T13120] Buffer I/O error on dev nbd0, logical block 3, async page read [ 448.711539][T13120] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.711587][T13120] Buffer I/O error on dev nbd0, logical block 0, async page read [ 448.711739][T13120] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.711817][T13120] Buffer I/O error on dev nbd0, logical block 1, async page read [ 448.711923][T13120] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.711968][T13120] Buffer I/O error on dev nbd0, logical block 2, async page read [ 448.712196][T13120] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.712242][T13120] Buffer I/O error on dev nbd0, logical block 3, async page read [ 448.712425][T13120] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.712470][T13120] Buffer I/O error on dev nbd0, logical block 0, async page read [ 448.712616][T13120] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.712663][T13120] Buffer I/O error on dev nbd0, logical block 1, async page read [ 448.717210][T13120] ldm_validate_partition_table(): Disk read failed. [ 448.721563][T13120] Dev nbd0: unable to read RDB block 0 [ 448.752401][T13120] nbd0: unable to read partition table [ 449.424885][T13120] ldm_validate_partition_table(): Disk read failed. [ 449.425542][T13120] Dev nbd0: unable to read RDB block 0 [ 449.426528][T13120] nbd0: unable to read partition table [ 449.673679][ T5165] ldm_validate_partition_table(): Disk read failed. [ 449.674403][ T5165] Dev nbd0: unable to read RDB block 0 [ 449.682103][ T5165] nbd0: unable to read partition table [ 449.686951][ T5165] ldm_validate_partition_table(): Disk read failed. [ 449.687593][ T5165] Dev nbd0: unable to read RDB block 0 [ 449.697588][ T5165] nbd0: unable to read partition table [ 449.815643][T13133] ldm_validate_partition_table(): Disk read failed. [ 449.816049][T13133] Dev nbd0: unable to read RDB block 0 [ 449.816533][T13133] nbd0: unable to read partition table [ 450.274140][T13133] ldm_validate_partition_table(): Disk read failed. [ 450.280666][T13133] Dev nbd0: unable to read RDB block 0 [ 450.283372][T13133] nbd0: unable to read partition table [ 451.938713][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2822'. [ 455.979689][T13160] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2824'. [ 459.196349][ T810] IPVS: starting estimator thread 0... [ 459.311191][T13170] IPVS: using max 13 ests per chain, 31200 per kthread [ 463.445000][ T31] IPVS: starting estimator thread 0... [ 463.624022][T13190] IPVS: using max 8 ests per chain, 19200 per kthread [ 463.673361][T13192] netlink: 'syz.2.2828': attribute type 1 has an invalid length. [ 467.431429][T13200] netlink: 'syz.3.2836': attribute type 4 has an invalid length. [ 468.568783][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 468.607863][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 468.631292][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 468.654541][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 468.676937][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 470.658879][T13211] gre0 speed is unknown, defaulting to 1000 [ 470.841131][ T61] Bluetooth: hci1: command tx timeout [ 474.141385][T13226] netlink: 'syz.0.2843': attribute type 4 has an invalid length. [ 474.261055][ T61] Bluetooth: hci1: command tx timeout [ 476.287129][ T61] Bluetooth: hci1: command tx timeout [ 476.302076][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2842'. [ 476.882574][ T61] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 478.971840][T13253] netlink: 'syz.1.2850': attribute type 4 has an invalid length. [ 479.051008][ T61] Bluetooth: hci1: command tx timeout [ 479.490545][T13261] blk_print_req_error: 394 callbacks suppressed [ 479.490566][T13261] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 479.490595][T13261] buffer_io_error: 394 callbacks suppressed [ 479.490606][T13261] Buffer I/O error on dev nbd2, logical block 0, async page read [ 479.490669][T13261] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 479.490694][T13261] Buffer I/O error on dev nbd2, logical block 1, async page read [ 479.490745][T13261] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 479.490768][T13261] Buffer I/O error on dev nbd2, logical block 2, async page read [ 479.490816][T13261] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 479.490993][T13261] Buffer I/O error on dev nbd2, logical block 3, async page read [ 479.491067][T13261] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 479.491091][T13261] Buffer I/O error on dev nbd2, logical block 0, async page read [ 479.491140][T13261] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 479.491163][T13261] Buffer I/O error on dev nbd2, logical block 1, async page read [ 479.491210][T13261] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 479.491233][T13261] Buffer I/O error on dev nbd2, logical block 2, async page read [ 479.491280][T13261] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 479.491303][T13261] Buffer I/O error on dev nbd2, logical block 3, async page read [ 479.491359][T13261] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 479.491382][T13261] Buffer I/O error on dev nbd2, logical block 0, async page read [ 479.491430][T13261] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 479.491453][T13261] Buffer I/O error on dev nbd2, logical block 1, async page read [ 479.492514][T13261] ldm_validate_partition_table(): Disk read failed. [ 479.497371][T13261] Dev nbd2: unable to read RDB block 0 [ 479.498329][T13261] nbd2: unable to read partition table [ 479.702830][T13264] ldm_validate_partition_table(): Disk read failed. [ 479.703236][T13264] Dev nbd3: unable to read RDB block 0 [ 479.703769][T13264] nbd3: unable to read partition table [ 479.704712][T13264] block nbd3: Cannot use ioctl interface on a netlink controlled device. [ 479.789461][T13264] ldm_validate_partition_table(): Disk read failed. [ 479.789923][T13264] Dev nbd3: unable to read RDB block 0 [ 479.790459][T13264] nbd3: unable to read partition table [ 479.825451][ T43] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.879266][T13259] block nbd2: Cannot use ioctl interface on a netlink controlled device. [ 479.934700][ T5165] ldm_validate_partition_table(): Disk read failed. [ 479.935409][ T5165] Dev nbd3: unable to read RDB block 0 [ 479.936354][ T5165] nbd3: unable to read partition table [ 479.963612][T13259] ldm_validate_partition_table(): Disk read failed. [ 479.964029][T13259] Dev nbd2: unable to read RDB block 0 [ 479.964572][T13259] nbd2: unable to read partition table [ 479.997812][T13259] block nbd2: NBD_DISCONNECT [ 479.997838][T13259] block nbd2: Send disconnect failed -32 [ 479.997850][T13259] block nbd2: Send disconnect failed -32 [ 480.000376][ T5165] ldm_validate_partition_table(): Disk read failed. [ 480.025282][ T5165] Dev nbd3: unable to read RDB block 0 [ 480.026219][ T5165] nbd3: unable to read partition table [ 480.084644][T13267] ldm_validate_partition_table(): Disk read failed. [ 480.085270][T13267] Dev nbd3: unable to read RDB block 0 [ 480.086062][T13267] nbd3: unable to read partition table [ 480.198517][T13267] ldm_validate_partition_table(): Disk read failed. [ 480.199224][T13267] Dev nbd3: unable to read RDB block 0 [ 480.200108][T13267] nbd3: unable to read partition table [ 480.216314][ T5165] ldm_validate_partition_table(): Disk read failed. [ 480.216970][ T5165] Dev nbd2: unable to read RDB block 0 [ 480.217750][ T5165] nbd2: unable to read partition table [ 480.257679][ T5165] ldm_validate_partition_table(): Disk read failed. [ 480.258393][ T5165] Dev nbd2: unable to read RDB block 0 [ 480.259316][ T5165] nbd2: unable to read partition table [ 480.443693][T13267] ldm_validate_partition_table(): Disk read failed. [ 480.444420][T13267] Dev nbd2: unable to read RDB block 0 [ 480.445374][T13267] nbd2: unable to read partition table [ 480.495945][T13267] ldm_validate_partition_table(): Disk read failed. [ 480.496703][T13267] Dev nbd2: unable to read RDB block 0 [ 480.497639][T13267] nbd2: unable to read partition table [ 480.785146][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2853'. [ 481.196289][ T43] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.280032][ T61] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 481.280062][ T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 481.280087][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 481.280100][ T61] Workqueue: hci0 hci_rx_work [ 481.280143][ T61] Call Trace: [ 481.280151][ T61] [ 481.280161][ T61] dump_stack_lvl+0xe8/0x150 [ 481.280202][ T61] sysfs_create_dir_ns+0x271/0x2a0 [ 481.280230][ T61] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 481.280264][ T61] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 481.280295][ T61] ? rt_spin_unlock+0x160/0x200 [ 481.280326][ T61] kobject_add_internal+0x631/0xd10 [ 481.280362][ T61] kobject_add+0x163/0x240 [ 481.280393][ T61] ? __pfx_kobject_add+0x10/0x10 [ 481.280436][ T61] ? get_device_parent+0x370/0x3a0 [ 481.280469][ T61] device_add+0x408/0xb80 [ 481.280499][ T61] hci_conn_add_sysfs+0xd5/0x210 [ 481.280533][ T61] le_conn_complete_evt+0xf1d/0x1430 [ 481.280569][ T61] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 481.280594][ T61] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 481.280628][ T61] ? lockdep_hardirqs_on+0x7a/0x110 [ 481.280664][ T61] ? skb_pull_data+0xfb/0x200 [ 481.280698][ T61] hci_le_conn_complete_evt+0x187/0x470 [ 481.280730][ T61] hci_event_packet+0x7af/0x12c0 [ 481.280767][ T61] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 481.280803][ T61] ? __pfx_hci_event_packet+0x10/0x10 [ 481.280833][ T61] ? rt_spin_unlock+0x14f/0x200 [ 481.280871][ T61] ? hci_send_to_monitor+0xe2/0x590 [ 481.280901][ T61] hci_rx_work+0x3ee/0x1030 [ 481.280939][ T61] ? process_scheduled_works+0xa8d/0x18c0 [ 481.280975][ T61] process_scheduled_works+0xb6e/0x18c0 [ 481.281041][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 481.281079][ T61] ? assign_work+0x3d5/0x5e0 [ 481.281116][ T61] worker_thread+0xa53/0xfc0 [ 481.281181][ T61] kthread+0x388/0x470 [ 481.281206][ T61] ? __pfx_worker_thread+0x10/0x10 [ 481.281235][ T61] ? __pfx_kthread+0x10/0x10 [ 481.281260][ T61] ret_from_fork+0x51e/0xb90 [ 481.281297][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 481.281326][ T61] ? __switch_to+0xc7d/0x1450 [ 481.281360][ T61] ? __pfx_kthread+0x10/0x10 [ 481.281385][ T61] ret_from_fork_asm+0x1a/0x30 [ 481.281437][ T61] [ 481.284088][ T61] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 481.284143][ T61] Bluetooth: hci0: failed to register connection device [ 481.463083][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2844'. [ 482.218201][T13278] nbd: socks must be embedded in a SOCK_ITEM attr [ 482.281184][ T43] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.111252][T13294] netlink: 'syz.3.2857': attribute type 4 has an invalid length. [ 485.851247][T13295] netlink: 'syz.2.2858': attribute type 4 has an invalid length. [ 486.406125][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2861'. [ 486.825537][T13267] udevd[13267]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 487.057063][ T43] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.881308][T13311] netlink: 'syz.1.2852': attribute type 4 has an invalid length. [ 489.152910][T13211] chnl_net:caif_netlink_parms(): no params data found [ 492.085484][ T43] bridge_slave_1: left allmulticast mode [ 492.085682][ T43] bridge_slave_1: left promiscuous mode [ 492.113812][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.234942][ T43] bridge_slave_0: left allmulticast mode [ 492.234975][ T43] bridge_slave_0: left promiscuous mode [ 492.235248][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.032914][ T5127] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 494.183943][ T5127] usb 4-1: config 0 has no interfaces? [ 494.183987][ T5127] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 494.184013][ T5127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.226658][ T5127] usb 4-1: config 0 descriptor?? [ 496.011348][T13338] netlink: 'syz.1.2863': attribute type 4 has an invalid length. [ 496.252167][ T5127] usb 4-1: string descriptor 0 read error: -71 [ 496.284349][ T5127] usb 4-1: USB disconnect, device number 5 [ 496.798747][T13346] blk_print_req_error: 798 callbacks suppressed [ 496.798799][T13346] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.798915][T13346] buffer_io_error: 798 callbacks suppressed [ 496.798952][T13346] Buffer I/O error on dev nbd3, logical block 0, async page read [ 496.800193][T13346] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.800339][T13346] Buffer I/O error on dev nbd3, logical block 1, async page read [ 496.801394][T13346] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.801553][T13346] Buffer I/O error on dev nbd3, logical block 2, async page read [ 496.803174][T13346] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.803290][T13346] Buffer I/O error on dev nbd3, logical block 3, async page read [ 496.813216][T13346] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.813255][T13346] Buffer I/O error on dev nbd3, logical block 0, async page read [ 496.814423][T13346] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.814677][T13346] Buffer I/O error on dev nbd3, logical block 1, async page read [ 496.819242][T13346] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.819404][T13346] Buffer I/O error on dev nbd3, logical block 2, async page read [ 496.823893][T13346] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.824046][T13346] Buffer I/O error on dev nbd3, logical block 3, async page read [ 496.831338][T13346] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.831719][T13346] Buffer I/O error on dev nbd3, logical block 0, async page read [ 496.849332][T13346] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.849755][T13346] Buffer I/O error on dev nbd3, logical block 1, async page read [ 496.980729][T13346] ldm_validate_partition_table(): Disk read failed. [ 497.121608][T13346] Dev nbd3: unable to read RDB block 0 [ 497.296820][T13346] nbd3: unable to read partition table [ 497.443465][T13347] ldm_validate_partition_table(): Disk read failed. [ 497.444140][T13347] Dev nbd3: unable to read RDB block 0 [ 497.445054][T13347] nbd3: unable to read partition table [ 497.707071][ T5165] ldm_validate_partition_table(): Disk read failed. [ 497.707466][ T5165] Dev nbd3: unable to read RDB block 0 [ 497.710034][ T5165] nbd3: unable to read partition table [ 497.735039][ T5804] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 497.747856][ T5165] ldm_validate_partition_table(): Disk read failed. [ 497.781345][ T5165] Dev nbd3: unable to read RDB block 0 [ 497.794580][ T5165] nbd3: unable to read partition table [ 497.797614][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2865'. [ 498.047990][T13290] ldm_validate_partition_table(): Disk read failed. [ 498.066228][T13290] Dev nbd3: unable to read RDB block 0 [ 498.082967][T13290] nbd3: unable to read partition table [ 498.239945][T13351] nbd: socks must be embedded in a SOCK_ITEM attr [ 498.263911][T13290] ldm_validate_partition_table(): Disk read failed. [ 498.273443][T13290] Dev nbd3: unable to read RDB block 0 [ 498.287780][T13290] nbd3: unable to read partition table [ 499.519901][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2866'. [ 500.322433][T13290] udevd[13290]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 500.383876][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.463181][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.483480][ T43] bond0 (unregistering): Released all slaves [ 500.526245][T13211] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.526410][T13211] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.526673][T13211] bridge_slave_0: entered allmulticast mode [ 500.530107][T13211] bridge_slave_0: entered promiscuous mode [ 500.669859][T13211] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.669995][T13211] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.670279][T13211] bridge_slave_1: entered allmulticast mode [ 500.738248][T13211] bridge_slave_1: entered promiscuous mode [ 501.781078][T13374] netlink: 'syz.0.2870': attribute type 4 has an invalid length. [ 502.537570][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.602783][T13211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.622055][T13211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.543971][T13381] netlink: 'syz.2.2871': attribute type 4 has an invalid length. [ 506.134785][T13386] netlink: 'syz.1.2874': attribute type 4 has an invalid length. [ 506.193440][T13385] blk_print_req_error: 394 callbacks suppressed [ 506.193466][T13385] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 506.193495][T13385] buffer_io_error: 394 callbacks suppressed [ 506.193506][T13385] Buffer I/O error on dev nbd3, logical block 0, async page read [ 506.193577][T13385] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 506.193602][T13385] Buffer I/O error on dev nbd3, logical block 1, async page read [ 506.193658][T13385] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 506.193683][T13385] Buffer I/O error on dev nbd3, logical block 2, async page read [ 506.194053][T13385] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 506.194080][T13385] Buffer I/O error on dev nbd3, logical block 3, async page read [ 506.194227][T13385] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 506.194253][T13385] Buffer I/O error on dev nbd3, logical block 0, async page read [ 506.194310][T13385] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 506.194334][T13385] Buffer I/O error on dev nbd3, logical block 1, async page read [ 506.201087][T13385] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 506.201120][T13385] Buffer I/O error on dev nbd3, logical block 2, async page read [ 506.201177][T13385] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 506.201314][T13385] Buffer I/O error on dev nbd3, logical block 3, async page read [ 506.201402][T13385] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 506.201429][T13385] Buffer I/O error on dev nbd3, logical block 0, async page read [ 506.201484][T13385] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 506.201511][T13385] Buffer I/O error on dev nbd3, logical block 1, async page read [ 506.202328][T13385] ldm_validate_partition_table(): Disk read failed. [ 506.812026][T13385] Dev nbd3: unable to read RDB block 0 [ 506.812599][T13385] nbd3: unable to read partition table [ 506.932450][ T5165] ldm_validate_partition_table(): Disk read failed. [ 506.933090][ T5165] Dev nbd3: unable to read RDB block 0 [ 506.933898][ T5165] nbd3: unable to read partition table [ 506.963470][ T5165] ldm_validate_partition_table(): Disk read failed. [ 506.964127][ T5165] Dev nbd3: unable to read RDB block 0 [ 506.964898][ T5165] nbd3: unable to read partition table [ 507.154221][T13392] ldm_validate_partition_table(): Disk read failed. [ 507.188393][T13392] Dev nbd3: unable to read RDB block 0 [ 507.190234][T13392] nbd3: unable to read partition table [ 507.344171][T13392] ldm_validate_partition_table(): Disk read failed. [ 507.344812][T13392] Dev nbd3: unable to read RDB block 0 [ 507.345648][T13392] nbd3: unable to read partition table [ 508.797005][T13211] team0: Port device team_slave_0 added [ 508.847580][T13211] team0: Port device team_slave_1 added [ 508.988309][T13400] ptrace attach of "./syz-executor exec"[5800] was attempted by "./syz-executor exec"[13400] [ 509.551628][T13211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.551649][T13211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.551679][T13211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.554622][T13211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.554638][T13211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.554666][T13211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.513499][T13403] netlink: 'syz.0.2873': attribute type 4 has an invalid length. [ 511.961939][T13412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2875'. [ 511.961974][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2875'. [ 512.144707][T13211] hsr_slave_0: entered promiscuous mode [ 512.172124][T13211] hsr_slave_1: entered promiscuous mode [ 512.176829][T13211] debugfs: 'hsr0' already exists in 'hsr' [ 512.176857][T13211] Cannot create hsr debugfs directory [ 515.553464][T13438] netlink: 'syz.3.2885': attribute type 4 has an invalid length. [ 517.911215][T13446] netlink: 'syz.2.2887': attribute type 4 has an invalid length. [ 519.131099][ T43] hsr_slave_0: left promiscuous mode [ 519.211119][ T43] hsr_slave_1: left promiscuous mode [ 519.213327][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.213437][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.291150][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.291183][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.527907][ T43] veth1_macvtap: left promiscuous mode [ 519.528315][ T43] veth0_macvtap: left promiscuous mode [ 519.528768][ T43] veth1_vlan: left promiscuous mode [ 519.529216][ T43] veth0_vlan: left promiscuous mode [ 520.081065][ T5876] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 520.176595][T13466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2886'. [ 520.240901][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.240965][ T5876] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 520.240991][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.253963][ T5876] usb 2-1: config 0 descriptor?? [ 520.287653][ T5876] pwc: Askey VC010 type 2 USB webcam detected. [ 521.379001][T13471] netlink: 'syz.2.2890': attribute type 4 has an invalid length. [ 522.351755][ T5876] pwc: recv_control_msg error -32 req 02 val 2b00 [ 522.356326][ T5876] pwc: recv_control_msg error -32 req 02 val 2700 [ 522.360046][ T5876] pwc: recv_control_msg error -32 req 02 val 2c00 [ 522.381283][ T5876] pwc: recv_control_msg error -32 req 04 val 1000 [ 522.383212][ T5876] pwc: recv_control_msg error -32 req 04 val 1300 [ 522.392361][ T5876] pwc: recv_control_msg error -32 req 04 val 1400 [ 522.397440][ T5876] pwc: recv_control_msg error -32 req 02 val 2000 [ 522.404591][ T5876] pwc: recv_control_msg error -32 req 02 val 2100 [ 522.406446][ T5876] pwc: recv_control_msg error -32 req 04 val 1500 [ 522.411543][ T5876] pwc: recv_control_msg error -32 req 02 val 2500 [ 522.414030][ T5876] pwc: recv_control_msg error -32 req 02 val 2400 [ 522.415062][ T5876] pwc: recv_control_msg error -32 req 02 val 2600 [ 522.416093][ T5876] pwc: recv_control_msg error -32 req 02 val 2900 [ 522.622945][ T5876] pwc: recv_control_msg error -71 req 04 val 1100 [ 522.623620][ T5876] pwc: recv_control_msg error -71 req 04 val 1200 [ 522.727362][ T5876] pwc: Registered as video103. [ 522.771115][ T5876] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 522.842436][ T5876] usb 2-1: USB disconnect, device number 10 [ 522.982087][ T43] team0 (unregistering): Port device team_slave_1 removed [ 523.048495][ T43] team0 (unregistering): Port device team_slave_0 removed [ 525.423167][T13480] netlink: 'syz.2.2891': attribute type 4 has an invalid length. [ 529.139142][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 529.164654][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 529.168756][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 529.169771][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 529.170531][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 529.487823][T13506] gre0 speed is unknown, defaulting to 1000 [ 530.123214][ T43] IPVS: stop unused estimator thread 0... [ 531.241042][ T5804] Bluetooth: hci5: command tx timeout [ 533.321095][ T5804] Bluetooth: hci5: command tx timeout [ 534.249007][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2902'. [ 535.814547][T13545] netlink: 'syz.1.2904': attribute type 4 has an invalid length. [ 536.656322][ T5804] Bluetooth: hci5: command tx timeout [ 537.174387][ T5804] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 537.336979][T13552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2907'. [ 538.682959][ T61] Bluetooth: hci5: command tx timeout [ 541.596263][T13556] udevd[13556]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 541.604380][T13554] udevd[13554]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 545.413498][T13575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2911'. [ 546.592248][T13575] nbd: socks must be embedded in a SOCK_ITEM attr [ 550.066475][T13582] udevd[13582]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 550.097770][T13582] udevd[13582]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 550.124132][T13506] chnl_net:caif_netlink_parms(): no params data found [ 550.365155][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 551.154808][T13600] overlayfs: failed to resolve './file1': -2 [ 551.317390][T13602] netlink: 'syz.1.2905': attribute type 4 has an invalid length. [ 552.127958][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.128030][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 552.128055][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.170677][ T9] usb 4-1: config 0 descriptor?? [ 552.371414][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 552.916739][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 552.917610][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 552.918335][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 552.919034][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 552.949344][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 552.958091][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 552.959054][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 552.959779][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 552.960478][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 553.934216][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 554.221048][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 554.367439][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 554.367979][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 554.369428][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 554.370162][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 554.370662][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 554.394352][ T57] bridge_slave_1: left allmulticast mode [ 554.394381][ T57] bridge_slave_1: left promiscuous mode [ 554.394773][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.433970][ T9] pwc: Registered as video103. [ 554.453768][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 554.494273][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 554.514715][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 554.516292][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 554.517996][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 554.518859][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 554.573907][ T9] usb 4-1: USB disconnect, device number 6 [ 554.685406][ T57] bridge_slave_0: left allmulticast mode [ 554.685442][ T57] bridge_slave_0: left promiscuous mode [ 554.685747][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.057371][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 556.069910][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 556.086422][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 556.095076][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 556.110600][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 556.400452][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.545882][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.673280][ T57] bond0 (unregistering): Released all slaves [ 556.762297][ T5804] Bluetooth: hci1: command tx timeout [ 557.311746][T13643] ptrace attach of "./syz-executor exec"[5800] was attempted by "./syz-executor exec"[13643] [ 558.021620][T13506] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.021780][T13506] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.022055][T13506] bridge_slave_0: entered allmulticast mode [ 558.025038][T13506] bridge_slave_0: entered promiscuous mode [ 558.215678][ T5804] Bluetooth: hci6: command tx timeout [ 558.603548][T13506] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.603627][T13506] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.603814][T13506] bridge_slave_1: entered allmulticast mode [ 558.642673][T13506] bridge_slave_1: entered promiscuous mode [ 558.843386][ T5804] Bluetooth: hci1: command tx timeout [ 559.521067][ T57] hsr_slave_0: left promiscuous mode [ 559.800423][ T57] hsr_slave_1: left promiscuous mode [ 559.818222][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.428741][ T5804] Bluetooth: hci6: command tx timeout [ 560.921066][ T5804] Bluetooth: hci1: command tx timeout [ 560.958032][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.221001][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 562.426466][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.426530][ T31] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 562.426553][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.441621][ T5804] Bluetooth: hci6: command tx timeout [ 562.502057][ T31] usb 4-1: config 0 descriptor?? [ 562.552092][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 562.787614][ T57] team0 (unregistering): Port device team_slave_1 removed [ 562.886823][ T57] team0 (unregistering): Port device team_slave_0 removed [ 562.916922][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 562.918077][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 562.918958][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 562.953329][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 562.954071][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 562.954794][ T31] pwc: recv_control_msg error -32 req 04 val 1400 [ 562.955475][ T31] pwc: recv_control_msg error -32 req 02 val 2000 [ 562.957613][ T31] pwc: recv_control_msg error -32 req 02 val 2100 [ 562.958288][ T31] pwc: recv_control_msg error -32 req 04 val 1500 [ 562.958970][ T31] pwc: recv_control_msg error -32 req 02 val 2500 [ 562.959654][ T31] pwc: recv_control_msg error -32 req 02 val 2400 [ 562.960335][ T31] pwc: recv_control_msg error -32 req 02 val 2600 [ 563.000991][ T5804] Bluetooth: hci1: command tx timeout [ 563.030990][ T31] pwc: recv_control_msg error -32 req 02 val 2900 [ 563.089435][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.235350][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 563.235890][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 563.262033][ T31] pwc: Registered as video103. [ 563.266893][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 563.295812][ T31] usb 4-1: USB disconnect, device number 7 [ 563.580036][T13506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.638469][T13506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.660606][T13634] gre0 speed is unknown, defaulting to 1000 [ 563.903698][T13506] team0: Port device team_slave_0 added [ 564.111860][T13506] team0: Port device team_slave_1 added [ 565.280968][ T5804] Bluetooth: hci6: command tx timeout [ 565.504212][T13671] ptrace attach of "./syz-executor exec"[5800] was attempted by "./syz-executor exec"[13671] [ 566.057822][T13506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.057841][T13506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.057867][T13506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.060434][T13506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.060450][T13506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.060477][T13506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.128756][T13506] hsr_slave_0: entered promiscuous mode [ 568.134097][T13506] hsr_slave_1: entered promiscuous mode [ 568.135269][T13506] debugfs: 'hsr0' already exists in 'hsr' [ 568.135295][T13506] Cannot create hsr debugfs directory [ 568.247964][T13616] gre0 speed is unknown, defaulting to 1000 [ 569.492800][ T810] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 569.772939][ T810] usb 1-1: config 0 has no interfaces? [ 569.772974][ T810] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 569.772988][ T810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.777472][ T810] usb 1-1: config 0 descriptor?? [ 571.032814][ T810] usb 1-1: string descriptor 0 read error: -71 [ 571.040557][ T810] usb 1-1: USB disconnect, device number 15 [ 571.077177][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.139894][T13701] ptrace attach of "./syz-executor exec"[5800] was attempted by "./syz-executor exec"[13701] [ 573.916788][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.377871][T13727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2939'. [ 582.465734][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.822952][T13721] udevd[13721]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 583.932785][T13718] udevd[13718]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 587.575741][ T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.095883][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 591.126458][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 591.142445][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 591.189253][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 591.190564][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 591.242510][T13634] chnl_net:caif_netlink_parms(): no params data found [ 591.474163][T13799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 591.711833][T13799] ======================================================= [ 591.711833][T13799] WARNING: The mand mount option has been deprecated and [ 591.711833][T13799] and is ignored by this kernel. Remove the mand [ 591.711833][T13799] option from the mount to silence this warning. [ 591.711833][T13799] ======================================================= [ 593.776812][ T5127] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 594.831356][ T61] Bluetooth: hci3: command tx timeout [ 594.933402][ T5127] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.933466][ T5127] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 594.933491][ T5127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.994054][ T5127] usb 1-1: config 0 descriptor?? [ 595.050650][ T5127] pwc: Askey VC010 type 2 USB webcam detected. [ 595.375602][T13789] gre0 speed is unknown, defaulting to 1000 [ 595.496954][ T5127] pwc: recv_control_msg error -32 req 02 val 2b00 [ 595.498273][ T5127] pwc: recv_control_msg error -32 req 02 val 2700 [ 595.499946][ T5127] pwc: recv_control_msg error -32 req 02 val 2c00 [ 595.529479][ T5127] pwc: recv_control_msg error -32 req 04 val 1000 [ 595.530427][ T5127] pwc: recv_control_msg error -32 req 04 val 1300 [ 595.547941][ T5127] pwc: recv_control_msg error -32 req 04 val 1400 [ 595.549047][ T5127] pwc: recv_control_msg error -32 req 02 val 2000 [ 595.572479][ T5127] pwc: recv_control_msg error -32 req 02 val 2100 [ 595.588365][ T5127] pwc: recv_control_msg error -32 req 04 val 1500 [ 595.589246][ T5127] pwc: recv_control_msg error -32 req 02 val 2500 [ 595.605375][ T5127] pwc: recv_control_msg error -32 req 02 val 2400 [ 595.607468][ T5127] pwc: recv_control_msg error -32 req 02 val 2600 [ 595.610707][T13616] chnl_net:caif_netlink_parms(): no params data found [ 595.636023][ T5127] pwc: recv_control_msg error -32 req 02 val 2900 [ 595.850243][ T5127] pwc: recv_control_msg error -71 req 04 val 1100 [ 595.850771][ T5127] pwc: recv_control_msg error -71 req 04 val 1200 [ 595.936751][ T5127] pwc: Registered as video103. [ 595.961809][ T5127] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 596.041589][ T5127] usb 1-1: USB disconnect, device number 16 [ 596.113029][T13634] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.113177][T13634] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.113458][T13634] bridge_slave_0: entered allmulticast mode [ 596.152363][T13634] bridge_slave_0: entered promiscuous mode [ 596.328164][T13634] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.328309][T13634] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.328554][T13634] bridge_slave_1: entered allmulticast mode [ 596.363264][T13634] bridge_slave_1: entered promiscuous mode [ 596.878555][ T61] Bluetooth: hci3: command tx timeout [ 599.350535][ T61] Bluetooth: hci3: command tx timeout [ 599.857349][T13634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.405372][ T61] Bluetooth: hci3: command tx timeout [ 601.478313][T13634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.509179][ T57] bridge_slave_1: left allmulticast mode [ 601.509213][ T57] bridge_slave_1: left promiscuous mode [ 601.509484][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.592316][ T57] bridge_slave_0: left allmulticast mode [ 601.592340][ T57] bridge_slave_0: left promiscuous mode [ 601.592533][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.332823][T13836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 604.774571][T13839] ntfs3(nullb0): Primary boot signature is not NTFS. [ 604.825058][T13839] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 605.326383][T13843] ptrace attach of "./syz-executor exec"[5795] was attempted by "./syz-executor exec"[13843] [ 605.861540][ T57] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 605.919935][ T57] ip6gretap1 (unregistering): left allmulticast mode [ 606.201106][T13849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 608.349394][T13850] ptrace attach of "./syz-executor exec"[5800] was attempted by "./syz-executor exec"[13850] [ 611.672045][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.731399][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.801548][ T57] bond0 (unregistering): (slave team0): Releasing backup interface [ 611.883165][ T57] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 611.954778][ T57] bond0 (unregistering): Released all slaves [ 612.187949][ T57] bond1 (unregistering): Released all slaves [ 612.350757][T13874] ptrace attach of "./syz-executor exec"[5795] was attempted by "./syz-executor exec"[13874] [ 612.956002][ T57] bond2 (unregistering): Released all slaves [ 613.265742][ T57] bond3 (unregistering): Released all slaves [ 614.772455][T13634] team0: Port device team_slave_0 added [ 614.824206][T13634] team0: Port device team_slave_1 added [ 614.877683][T13884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2966'. [ 618.611963][T13896] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 618.951078][T13896] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 618.955514][T13896] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 618.996529][T13896] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 618.998610][T13896] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 619.152080][T13634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.152115][T13634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.152143][T13634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.030948][ T5127] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 620.037023][T13891] udevd[13891]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 620.067299][T13894] udevd[13894]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 620.113898][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 620.128102][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 620.129531][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 620.132044][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 620.140471][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 620.210272][ T5127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.210337][ T5127] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 620.210362][ T5127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.273412][ T5127] usb 4-1: config 0 descriptor?? [ 620.323380][ T5127] pwc: Askey VC010 type 2 USB webcam detected. [ 621.803218][ T61] Bluetooth: hci4: command tx timeout [ 621.822057][ T5127] pwc: recv_control_msg error -32 req 02 val 2b00 [ 621.827537][ T5127] pwc: recv_control_msg error -32 req 02 val 2700 [ 621.881108][ T5127] pwc: recv_control_msg error -32 req 02 val 2c00 [ 621.883849][ T5127] pwc: recv_control_msg error -32 req 04 val 1000 [ 621.884562][ T5127] pwc: recv_control_msg error -32 req 04 val 1300 [ 621.886110][ T5127] pwc: recv_control_msg error -32 req 04 val 1400 [ 621.889490][ T5127] pwc: recv_control_msg error -32 req 02 val 2000 [ 621.891262][ T5127] pwc: recv_control_msg error -32 req 02 val 2100 [ 621.893931][ T5127] pwc: recv_control_msg error -32 req 04 val 1500 [ 621.895296][ T5127] pwc: recv_control_msg error -32 req 02 val 2500 [ 621.899738][ T5127] pwc: recv_control_msg error -32 req 02 val 2400 [ 621.900462][ T5127] pwc: recv_control_msg error -32 req 02 val 2600 [ 621.913184][ T5127] pwc: recv_control_msg error -32 req 02 val 2900 [ 622.116131][ T5127] pwc: recv_control_msg error -71 req 04 val 1100 [ 622.116675][ T5127] pwc: recv_control_msg error -71 req 04 val 1200 [ 622.148329][ T5127] pwc: Registered as video103. [ 622.162376][ T5127] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 622.201017][ T61] Bluetooth: hci5: command tx timeout [ 622.208474][ T5127] usb 4-1: USB disconnect, device number 8 [ 623.043069][T13888] gre0 speed is unknown, defaulting to 1000 [ 624.105294][ T61] Bluetooth: hci4: command tx timeout [ 624.281176][T13896] Bluetooth: hci5: command tx timeout [ 624.365687][T13923] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2973'. [ 624.528637][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.896281][T13930] netlink: 'syz.3.2975': attribute type 4 has an invalid length. [ 626.121200][T13896] Bluetooth: hci4: command tx timeout [ 626.268170][T13789] chnl_net:caif_netlink_parms(): no params data found [ 626.360970][T13896] Bluetooth: hci5: command tx timeout [ 626.599256][T13905] gre0 speed is unknown, defaulting to 1000 [ 628.203955][T13896] Bluetooth: hci4: command tx timeout [ 628.363820][T13789] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.364051][T13789] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.364312][T13789] bridge_slave_0: entered allmulticast mode [ 628.371811][T13789] bridge_slave_0: entered promiscuous mode [ 628.395733][T13789] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.395881][T13789] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.396105][T13789] bridge_slave_1: entered allmulticast mode [ 628.401690][T13789] bridge_slave_1: entered promiscuous mode [ 628.440977][T13896] Bluetooth: hci5: command tx timeout [ 628.745390][T13789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.083776][T13789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.497932][T13959] overlayfs: missing 'lowerdir' [ 631.805995][T13789] team0: Port device team_slave_0 added [ 632.019826][T13964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 635.011023][ T57] hsr_slave_0: left promiscuous mode [ 635.012265][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.012292][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.055575][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.055597][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.301274][ T57] veth1_macvtap: left promiscuous mode [ 635.301392][ T57] veth0_macvtap: left promiscuous mode [ 635.301686][ T57] veth1_vlan: left promiscuous mode [ 635.301884][ T57] veth0_vlan: left promiscuous mode [ 638.695584][T13987] ntfs3(nullb0): Primary boot signature is not NTFS. [ 638.695756][T13987] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 639.391945][ T57] team0 (unregistering): Port device team_slave_1 removed [ 639.436520][ T57] team0 (unregistering): Port device team_slave_0 removed [ 641.397979][T13789] team0: Port device team_slave_1 added [ 641.638176][T13789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.638196][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.638227][T13789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.721219][T14002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2988'. [ 641.739169][T13789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.739186][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.739212][T13789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.080537][T13789] hsr_slave_0: entered promiscuous mode [ 642.183061][T13789] hsr_slave_1: entered promiscuous mode [ 642.225909][T13789] debugfs: 'hsr0' already exists in 'hsr' [ 642.225943][T13789] Cannot create hsr debugfs directory [ 645.309507][T14015] netlink: 'syz.0.2990': attribute type 4 has an invalid length. [ 645.745472][T14009] udevd[14009]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 645.844604][T14009] udevd[14009]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 645.881333][T13888] chnl_net:caif_netlink_parms(): no params data found [ 649.551378][T13905] chnl_net:caif_netlink_parms(): no params data found [ 649.728335][T13888] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.728474][T13888] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.728754][T13888] bridge_slave_0: entered allmulticast mode [ 649.737358][T13888] bridge_slave_0: entered promiscuous mode [ 649.798778][T13888] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.798986][T13888] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.799203][T13888] bridge_slave_1: entered allmulticast mode [ 649.823949][T13888] bridge_slave_1: entered promiscuous mode [ 650.425491][T13888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.168752][T13888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.631122][T14065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.682120][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 652.711137][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 652.712763][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 652.715196][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 652.716600][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 653.997617][ T57] bridge_slave_1: left allmulticast mode [ 653.997647][ T57] bridge_slave_1: left promiscuous mode [ 653.997920][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.231995][ T810] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 654.235488][ T57] bridge_slave_0: left allmulticast mode [ 654.235508][ T57] bridge_slave_0: left promiscuous mode [ 654.235688][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.366555][ T57] bridge_slave_1: left allmulticast mode [ 655.366589][ T57] bridge_slave_1: left promiscuous mode [ 655.366856][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.373644][T13896] Bluetooth: hci1: command tx timeout [ 655.504713][ T810] usb 4-1: config 0 has no interfaces? [ 655.504755][ T810] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 655.504780][ T810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.538819][ T810] usb 4-1: config 0 descriptor?? [ 655.549038][ T57] bridge_slave_0: left allmulticast mode [ 655.549071][ T57] bridge_slave_0: left promiscuous mode [ 655.549364][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.759082][ T810] usb 4-1: string descriptor 0 read error: -71 [ 655.817516][ T810] usb 4-1: USB disconnect, device number 9 [ 655.991617][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.152039][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.220714][T14081] netlink: 'syz.0.2999': attribute type 4 has an invalid length. [ 656.428156][ T57] bond0 (unregistering): Released all slaves [ 656.653702][ T57] bond0 (unregistering): Released all slaves [ 656.864210][T14087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 658.070842][T13896] Bluetooth: hci1: command tx timeout [ 659.211312][T14091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 660.389329][T13896] Bluetooth: hci1: command tx timeout [ 661.442910][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.701706][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.555220][T13896] Bluetooth: hci1: command tx timeout [ 662.677509][T14098] ntfs3(nullb0): Primary boot signature is not NTFS. [ 662.713935][ T57] bond0 (unregistering): Released all slaves [ 662.716902][T14098] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 662.795456][T13905] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.795537][T13905] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.795696][T13905] bridge_slave_0: entered allmulticast mode [ 662.800234][T13905] bridge_slave_0: entered promiscuous mode [ 662.912135][T13888] team0: Port device team_slave_0 added [ 662.927368][T13905] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.927497][T13905] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.927774][T13905] bridge_slave_1: entered allmulticast mode [ 662.933568][T13905] bridge_slave_1: entered promiscuous mode [ 662.947174][T13888] team0: Port device team_slave_1 added [ 663.440239][T13905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.552889][T13905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.555461][T13888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.555473][T13888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.555489][T13888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.592842][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3006'. [ 663.631268][T14066] gre0 speed is unknown, defaulting to 1000 [ 663.636831][T13888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.636849][T13888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.636875][T13888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.022478][T13905] team0: Port device team_slave_0 added [ 664.026642][T13905] team0: Port device team_slave_1 added [ 664.349844][T14112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 666.613042][T13905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.613062][T13905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.613092][T13905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.802079][T13905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.802099][T13905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.802129][T13905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.961017][T14116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 667.815829][T13888] hsr_slave_0: entered promiscuous mode [ 667.817355][T13888] hsr_slave_1: entered promiscuous mode [ 667.818409][T13888] debugfs: 'hsr0' already exists in 'hsr' [ 667.818436][T13888] Cannot create hsr debugfs directory [ 669.284380][T14121] ntfs3(nullb0): Primary boot signature is not NTFS. [ 669.285756][T14121] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 670.923403][T13905] hsr_slave_0: entered promiscuous mode [ 670.924263][T13905] hsr_slave_1: entered promiscuous mode [ 670.924883][T13905] debugfs: 'hsr0' already exists in 'hsr' [ 670.924898][T13905] Cannot create hsr debugfs directory [ 673.057980][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.291122][ T57] hsr_slave_0: left promiscuous mode [ 673.351064][ T57] hsr_slave_1: left promiscuous mode [ 673.352142][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.394835][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.592929][ T57] team0 (unregistering): Port device team_slave_1 removed [ 675.346683][ T57] team0 (unregistering): Port device team_slave_0 removed [ 675.360831][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 675.373563][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 675.375235][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 675.381454][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 675.395909][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 677.561137][ T61] Bluetooth: hci3: command tx timeout [ 678.855083][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3016'. [ 679.641044][T13896] Bluetooth: hci3: command tx timeout [ 679.752650][T14164] nbd: socks must be embedded in a SOCK_ITEM attr [ 680.841470][T13896] Bluetooth: hci0: command 0x0406 tx timeout [ 681.869944][T13896] Bluetooth: hci3: command tx timeout [ 683.002094][T14168] udevd[14168]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 683.009828][T14168] udevd[14168]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 683.129684][T13896] Bluetooth: hci0: command 0x0406 tx timeout [ 683.159142][ T5804] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 683.161870][ T57] team0 (unregistering): Port device team_slave_1 removed [ 683.175318][ T5804] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 683.205037][ T5804] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 683.206327][ T5804] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 683.207524][ T5804] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 683.321985][ T57] team0 (unregistering): Port device team_slave_0 removed [ 683.882209][T13896] Bluetooth: hci3: command tx timeout [ 684.168417][T14194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.242272][T13896] Bluetooth: hci6: command tx timeout [ 685.390851][T14180] gre0 speed is unknown, defaulting to 1000 [ 685.969101][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.081254][T14210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 687.416448][T14066] chnl_net:caif_netlink_parms(): no params data found [ 688.170864][T13896] Bluetooth: hci6: command tx timeout [ 689.586470][T14220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 690.323449][T14149] gre0 speed is unknown, defaulting to 1000 [ 690.532971][T14066] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.533118][T14066] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.533764][T14066] bridge_slave_0: entered allmulticast mode [ 690.571106][T14066] bridge_slave_0: entered promiscuous mode [ 690.641095][T14066] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.641239][T14066] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.644356][T14066] bridge_slave_1: entered allmulticast mode [ 690.671602][T14066] bridge_slave_1: entered promiscuous mode [ 690.963405][T14066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.966228][T14066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.180704][T13896] Bluetooth: hci6: command tx timeout [ 691.922627][T14066] team0: Port device team_slave_0 added [ 693.675257][T13896] Bluetooth: hci6: command tx timeout [ 694.989394][T14066] team0: Port device team_slave_1 added [ 700.521975][T14066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.521995][T14066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.522025][T14066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.614933][T14066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.614951][T14066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.614981][T14066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.387173][T14066] hsr_slave_0: entered promiscuous mode [ 702.388202][T14066] hsr_slave_1: entered promiscuous mode [ 702.388867][T14066] debugfs: 'hsr0' already exists in 'hsr' [ 702.388892][T14066] Cannot create hsr debugfs directory [ 705.722191][T14180] chnl_net:caif_netlink_parms(): no params data found [ 706.117422][T14149] chnl_net:caif_netlink_parms(): no params data found [ 707.055820][T14180] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.056019][T14180] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.056288][T14180] bridge_slave_0: entered allmulticast mode [ 707.117097][T14180] bridge_slave_0: entered promiscuous mode [ 707.314366][T14180] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.314617][T14180] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.314899][T14180] bridge_slave_1: entered allmulticast mode [ 707.365519][T14180] bridge_slave_1: entered promiscuous mode [ 708.996542][T14180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.075409][T14149] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.075715][T14149] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.076025][T14149] bridge_slave_0: entered allmulticast mode [ 709.115699][T14149] bridge_slave_0: entered promiscuous mode [ 709.145500][T14180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.053992][T14149] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.055202][T14149] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.059847][T14149] bridge_slave_1: entered allmulticast mode [ 711.083493][T14149] bridge_slave_1: entered promiscuous mode [ 711.590453][T14180] team0: Port device team_slave_0 added [ 711.593202][T14149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.643836][T14180] team0: Port device team_slave_1 added [ 711.647738][T14149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.125189][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 712.133691][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 712.155968][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 712.161768][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 712.164259][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 714.717532][ T5804] Bluetooth: hci4: command tx timeout [ 716.880824][ T5804] Bluetooth: hci4: command tx timeout [ 716.902036][T14149] team0: Port device team_slave_0 added [ 718.868757][T14180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.868773][T14180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.868790][T14180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.921276][ T5804] Bluetooth: hci4: command tx timeout [ 719.019862][T14149] team0: Port device team_slave_1 added [ 719.031996][T14180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.032008][T14180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.032024][T14180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.163696][T14149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.163725][T14149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.163752][T14149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.292025][T14149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.292043][T14149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.292072][T14149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.311058][ T57] bridge_slave_1: left allmulticast mode [ 719.311091][ T57] bridge_slave_1: left promiscuous mode [ 719.311383][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.402754][ T57] bridge_slave_0: left allmulticast mode [ 719.402788][ T57] bridge_slave_0: left promiscuous mode [ 719.403083][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.485892][ T57] bridge_slave_1: left allmulticast mode [ 719.485928][ T57] bridge_slave_1: left promiscuous mode [ 719.486213][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.582804][ T57] bridge_slave_0: left allmulticast mode [ 719.582838][ T57] bridge_slave_0: left promiscuous mode [ 719.583108][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.740406][ T57] bridge_slave_1: left allmulticast mode [ 719.740440][ T57] bridge_slave_1: left promiscuous mode [ 719.740700][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.856687][ T57] bridge_slave_0: left allmulticast mode [ 719.856710][ T57] bridge_slave_0: left promiscuous mode [ 719.856882][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.195084][T14396] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 723.890891][ T5804] Bluetooth: hci4: command tx timeout [ 728.378270][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.491644][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.597992][ T57] bond0 (unregistering): Released all slaves [ 728.925514][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.071894][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.161194][ T57] bond0 (unregistering): Released all slaves [ 729.821390][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.997696][T14416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3049'. [ 732.394943][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.464079][ T57] bond0 (unregistering): Released all slaves [ 732.618074][T14425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 734.969656][T13896] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 735.023714][T13896] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 735.025477][T13896] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 735.028411][T13896] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 735.030486][T13896] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 735.117415][T14180] hsr_slave_0: entered promiscuous mode [ 735.119150][T14180] hsr_slave_1: entered promiscuous mode [ 735.120314][T14180] debugfs: 'hsr0' already exists in 'hsr' [ 735.120341][T14180] Cannot create hsr debugfs directory [ 735.151824][T14357] gre0 speed is unknown, defaulting to 1000 [ 735.599173][T14439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.680676][T14180] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 738.346268][T13896] Bluetooth: hci1: command tx timeout [ 738.532549][T14180] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 738.716819][T14446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 740.361974][T13896] Bluetooth: hci1: command tx timeout [ 740.371250][T14180] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 741.975998][T14457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 743.386155][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 743.400556][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 743.402583][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 743.404022][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 743.404935][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 744.325875][ T5804] Bluetooth: hci1: command tx timeout [ 744.656642][T14465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 745.546130][ T5804] Bluetooth: hci3: command tx timeout [ 746.620869][ T5804] Bluetooth: hci1: command tx timeout [ 746.884069][ T57] hsr_slave_0: left promiscuous mode [ 746.921247][ T57] hsr_slave_1: left promiscuous mode [ 746.922524][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.026773][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.211073][ T57] hsr_slave_0: left promiscuous mode [ 747.251376][ T57] hsr_slave_1: left promiscuous mode [ 747.252471][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.301735][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.497431][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.561047][ T5804] Bluetooth: hci3: command tx timeout [ 747.643383][ T57] hsr_slave_0: left promiscuous mode [ 747.759960][ T57] hsr_slave_1: left promiscuous mode [ 747.799359][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.827016][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.532700][ T57] team0 (unregistering): Port device team_slave_1 removed [ 748.591654][ T57] team0 (unregistering): Port device team_slave_0 removed [ 748.751456][T14491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 749.640871][ T5804] Bluetooth: hci3: command tx timeout [ 751.103981][ T57] team0 (unregistering): Port device team_slave_1 removed [ 751.163111][ T57] team0 (unregistering): Port device team_slave_0 removed [ 751.720923][ T5804] Bluetooth: hci3: command tx timeout [ 751.931799][ T57] team0 (unregistering): Port device team_slave_1 removed [ 751.993219][ T57] team0 (unregistering): Port device team_slave_0 removed [ 752.173843][T14431] gre0 speed is unknown, defaulting to 1000 [ 754.081657][T14458] gre0 speed is unknown, defaulting to 1000 [ 754.083452][T14357] chnl_net:caif_netlink_parms(): no params data found [ 756.695331][T14357] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.695477][T14357] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.695727][T14357] bridge_slave_0: entered allmulticast mode [ 756.699460][T14357] bridge_slave_0: entered promiscuous mode [ 756.790133][T14357] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.790275][T14357] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.790544][T14357] bridge_slave_1: entered allmulticast mode [ 756.867390][T14357] bridge_slave_1: entered promiscuous mode [ 757.149290][T14357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.223314][T14357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.345542][T14431] chnl_net:caif_netlink_parms(): no params data found [ 757.448274][T14357] team0: Port device team_slave_0 added [ 757.684038][T14357] team0: Port device team_slave_1 added [ 757.866350][T14357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.866364][T14357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.866379][T14357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.990539][T14357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.990558][T14357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.990583][T14357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.229066][T14431] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.229213][T14431] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.229607][T14431] bridge_slave_0: entered allmulticast mode [ 758.235844][T14431] bridge_slave_0: entered promiscuous mode [ 758.453932][T14431] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.454021][T14431] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.454217][T14431] bridge_slave_1: entered allmulticast mode [ 758.455962][T14431] bridge_slave_1: entered promiscuous mode [ 758.605879][T14531] syz.0.3067 (14531) used greatest stack depth: 17632 bytes left [ 758.620577][T14357] hsr_slave_0: entered promiscuous mode [ 758.648141][T14357] hsr_slave_1: entered promiscuous mode [ 758.844324][T14357] debugfs: 'hsr0' already exists in 'hsr' [ 758.844456][T14357] Cannot create hsr debugfs directory [ 760.359311][T14431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.464006][T14542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3069'. [ 761.415886][T14431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.234107][T14431] team0: Port device team_slave_0 added [ 762.258479][T14431] team0: Port device team_slave_1 added [ 762.371556][T14458] chnl_net:caif_netlink_parms(): no params data found [ 763.913039][T14431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.913053][T14431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.913070][T14431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.967882][T14431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.967901][T14431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.967930][T14431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.999030][T14572] capability: warning: `syz.0.3076' uses deprecated v2 capabilities in a way that may be insecure [ 768.750002][T14431] hsr_slave_0: entered promiscuous mode [ 768.751922][T14431] hsr_slave_1: entered promiscuous mode [ 768.753006][T14431] debugfs: 'hsr0' already exists in 'hsr' [ 768.753032][T14431] Cannot create hsr debugfs directory [ 768.789169][T14458] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.789322][T14458] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.789646][T14458] bridge_slave_0: entered allmulticast mode [ 768.794559][T14458] bridge_slave_0: entered promiscuous mode [ 768.838482][T14458] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.838625][T14458] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.838913][T14458] bridge_slave_1: entered allmulticast mode [ 768.862504][T14458] bridge_slave_1: entered promiscuous mode [ 769.667096][T14458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.037527][T14458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.252415][T14458] team0: Port device team_slave_0 added [ 771.336804][T14458] team0: Port device team_slave_1 added [ 771.374275][T14357] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 771.448581][T14357] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 771.679676][T14357] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 772.046848][T14458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.046862][T14458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.046878][T14458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.135079][T14357] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 772.207691][T14458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.207703][T14458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.207720][T14458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.640562][T14458] hsr_slave_0: entered promiscuous mode [ 773.680167][T14458] hsr_slave_1: entered promiscuous mode [ 773.689521][T14458] debugfs: 'hsr0' already exists in 'hsr' [ 773.689551][T14458] Cannot create hsr debugfs directory [ 773.726429][T13896] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 773.741154][T13896] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 773.751977][T13896] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 773.753120][T13896] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 773.754452][T13896] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 777.520860][ T5804] Bluetooth: hci5: command tx timeout [ 777.948726][ T57] bridge_slave_1: left allmulticast mode [ 777.948763][ T57] bridge_slave_1: left promiscuous mode [ 777.949060][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.032944][ T57] bridge_slave_0: left allmulticast mode [ 778.032979][ T57] bridge_slave_0: left promiscuous mode [ 778.033281][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.128806][ T57] bridge_slave_1: left allmulticast mode [ 778.128841][ T57] bridge_slave_1: left promiscuous mode [ 778.129115][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.212758][ T57] bridge_slave_0: left allmulticast mode [ 778.212791][ T57] bridge_slave_0: left promiscuous mode [ 778.213073][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.566159][ T57] bridge_slave_1: left allmulticast mode [ 778.566181][ T57] bridge_slave_1: left promiscuous mode [ 778.566358][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.444625][T14644] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 779.561441][T13896] Bluetooth: hci5: command tx timeout [ 779.589915][ T57] bridge_slave_0: left allmulticast mode [ 779.589956][ T57] bridge_slave_0: left promiscuous mode [ 779.590237][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.861096][T14650] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 781.322432][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.733448][T14657] ceph: No mds server is up or the cluster is laggy [ 782.066928][T13896] Bluetooth: hci5: command tx timeout [ 782.351929][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.277282][T13896] Bluetooth: hci5: command tx timeout [ 784.412663][ T57] bond0 (unregistering): Released all slaves [ 784.692008][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.812659][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.858653][ T57] bond0 (unregistering): Released all slaves [ 785.281648][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.222435][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.302752][ T57] bond0 (unregistering): Released all slaves [ 786.632669][T14626] gre0 speed is unknown, defaulting to 1000 [ 786.764775][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3096'. [ 786.766453][T14431] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 787.974832][T14431] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 789.281182][T13896] Bluetooth: hci2: command 0x0406 tx timeout [ 789.701539][T14680] nbd: socks must be embedded in a SOCK_ITEM attr [ 789.778694][T14431] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 790.060292][T14431] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 791.449132][T14700] ceph: No mds server is up or the cluster is laggy [ 791.705570][T13896] Bluetooth: hci2: command 0x0406 tx timeout [ 796.869380][T13896] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 796.888485][T13896] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 796.890011][T13896] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 796.908359][T13896] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 796.909169][T13896] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 798.080926][ T57] hsr_slave_0: left promiscuous mode [ 798.301030][ T57] hsr_slave_1: left promiscuous mode [ 798.302353][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.352011][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.532446][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.597962][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.403032][ T5804] Bluetooth: hci4: command tx timeout [ 800.561086][ T57] hsr_slave_0: left promiscuous mode [ 800.600850][ T57] hsr_slave_1: left promiscuous mode [ 800.601541][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.801979][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.594139][ T5804] Bluetooth: hci4: command tx timeout [ 802.131753][ T57] team0 (unregistering): Port device team_slave_1 removed [ 802.174592][ T57] team0 (unregistering): Port device team_slave_0 removed [ 802.543171][T13896] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 802.562002][T13896] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 802.665924][T13896] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 802.717019][T13896] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 802.750009][T13896] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 803.471789][ T57] team0 (unregistering): Port device team_slave_1 removed [ 803.541849][ T57] team0 (unregistering): Port device team_slave_0 removed [ 803.670916][ T5804] Bluetooth: hci4: command tx timeout [ 804.731590][ T57] team0 (unregistering): Port device team_slave_1 removed [ 804.762170][ T57] team0 (unregistering): Port device team_slave_0 removed [ 805.081163][ T5804] Bluetooth: hci1: command tx timeout [ 805.731757][ T5804] Bluetooth: hci4: command tx timeout [ 807.165371][ T5804] Bluetooth: hci1: command tx timeout [ 807.581738][T14776] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 808.581951][T14722] gre0 speed is unknown, defaulting to 1000 [ 809.794452][ T5804] Bluetooth: hci1: command tx timeout [ 810.267497][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.222296][T14626] chnl_net:caif_netlink_parms(): no params data found [ 812.342224][ T5804] Bluetooth: hci1: command tx timeout [ 812.545731][T14626] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.551172][T14626] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.551469][T14626] bridge_slave_0: entered allmulticast mode [ 812.581519][T14626] bridge_slave_0: entered promiscuous mode [ 812.591114][T14626] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.591431][T14626] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.591709][T14626] bridge_slave_1: entered allmulticast mode [ 812.594736][T14626] bridge_slave_1: entered promiscuous mode [ 813.985692][T14751] gre0 speed is unknown, defaulting to 1000 [ 814.224728][T14626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.284422][T14626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.864028][T14626] team0: Port device team_slave_0 added [ 817.442670][T14626] team0: Port device team_slave_1 added [ 817.783265][T14626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.783284][T14626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.783311][T14626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.862821][T14626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.862840][T14626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.862937][T14626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.267065][T14626] hsr_slave_0: entered promiscuous mode [ 818.271549][T14626] hsr_slave_1: entered promiscuous mode [ 818.284085][T14626] debugfs: 'hsr0' already exists in 'hsr' [ 818.284116][T14626] Cannot create hsr debugfs directory [ 819.560526][T14722] chnl_net:caif_netlink_parms(): no params data found [ 819.743228][T14751] chnl_net:caif_netlink_parms(): no params data found [ 820.121250][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 822.228690][T13896] Bluetooth: hci0: command 0x0406 tx timeout [ 823.221225][T14722] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.221364][T14722] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.221948][T14722] bridge_slave_0: entered allmulticast mode [ 823.230579][T14722] bridge_slave_0: entered promiscuous mode [ 824.202791][T14898] ceph: No mds server is up or the cluster is laggy [ 824.259250][T14722] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.259494][T14722] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.259811][T14722] bridge_slave_1: entered allmulticast mode [ 824.265303][T14722] bridge_slave_1: entered promiscuous mode [ 825.786864][T14909] ceph: No mds server is up or the cluster is laggy [ 825.980999][T14751] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.981146][T14751] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.981451][T14751] bridge_slave_0: entered allmulticast mode [ 825.984527][T14751] bridge_slave_0: entered promiscuous mode [ 827.230657][T14751] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.239007][T14751] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.239315][T14751] bridge_slave_1: entered allmulticast mode [ 827.278772][T14751] bridge_slave_1: entered promiscuous mode [ 827.588097][T14722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.624981][T14722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.905301][T14751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.953590][T14751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.065702][T14722] team0: Port device team_slave_0 added [ 830.954500][T14722] team0: Port device team_slave_1 added [ 831.733339][T14953] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 832.249248][T14751] team0: Port device team_slave_0 added [ 832.729209][T14751] team0: Port device team_slave_1 added [ 833.604976][T14722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.604991][T14722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.605008][T14722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.635083][T14722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.635102][T14722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.635127][T14722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.655150][T14751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.655169][T14751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.655196][T14751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.672395][T14751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.672414][T14751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.672439][T14751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.847323][T14722] hsr_slave_0: entered promiscuous mode [ 833.849989][T14722] hsr_slave_1: entered promiscuous mode [ 833.854182][T14722] debugfs: 'hsr0' already exists in 'hsr' [ 833.854208][T14722] Cannot create hsr debugfs directory [ 833.889283][T14751] hsr_slave_0: entered promiscuous mode [ 833.890227][T14751] hsr_slave_1: entered promiscuous mode [ 833.891746][T14751] debugfs: 'hsr0' already exists in 'hsr' [ 833.891771][T14751] Cannot create hsr debugfs directory [ 836.628855][T13896] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 836.643087][T13896] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 836.660040][T13896] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 836.672269][T13896] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 836.673209][T13896] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 837.905864][T14985] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 839.438667][ T37] audit: type=1326 audit(1773774778.556:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14999 comm="syz.0.3152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8468a4c799 code=0x0 [ 839.479533][T14976] gre0 speed is unknown, defaulting to 1000 [ 839.677682][ T5804] Bluetooth: hci3: command tx timeout [ 839.725138][ T57] bridge_slave_1: left allmulticast mode [ 839.725170][ T57] bridge_slave_1: left promiscuous mode [ 839.725444][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.754571][ T57] bridge_slave_0: left allmulticast mode [ 840.754607][ T57] bridge_slave_0: left promiscuous mode [ 840.754917][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.969398][ T57] bridge_slave_1: left allmulticast mode [ 840.969434][ T57] bridge_slave_1: left promiscuous mode [ 840.969735][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.053869][ T57] bridge_slave_0: left allmulticast mode [ 841.053901][ T57] bridge_slave_0: left promiscuous mode [ 841.054166][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.144160][ T5804] Bluetooth: hci3: command tx timeout [ 842.632817][ T57] bridge_slave_1: left allmulticast mode [ 842.632852][ T57] bridge_slave_1: left promiscuous mode [ 842.633125][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.702026][ T57] bridge_slave_0: left allmulticast mode [ 842.702049][ T57] bridge_slave_0: left promiscuous mode [ 842.702225][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.133790][ T5804] Bluetooth: hci3: command tx timeout [ 845.162415][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.261945][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.323581][ T57] bond0 (unregistering): Released all slaves [ 845.491627][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.584009][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.644786][ T57] bond0 (unregistering): Released all slaves [ 845.811607][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.891591][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.952694][ T57] bond0 (unregistering): Released all slaves [ 846.649398][ T37] audit: type=1326 audit(1773774785.786:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15045 comm="syz.3.3164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb89954c799 code=0x0 [ 847.168134][ T5804] Bluetooth: hci3: command tx timeout [ 849.367728][T15063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3170'. [ 849.509744][T14976] chnl_net:caif_netlink_parms(): no params data found [ 849.720878][T14751] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 851.371465][ T57] hsr_slave_0: left promiscuous mode [ 851.451000][ T57] hsr_slave_1: left promiscuous mode [ 851.452219][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.522629][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.897733][T15074] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 853.071958][ T57] hsr_slave_0: left promiscuous mode [ 853.121964][ T57] hsr_slave_1: left promiscuous mode [ 853.127786][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.156606][ T37] audit: type=1326 audit(1773774792.286:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15077 comm="syz.3.3174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb89954c799 code=0x0 [ 853.191721][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.359187][T14921] IPVS: starting estimator thread 0... [ 853.370865][ T57] hsr_slave_0: left promiscuous mode [ 853.391280][ T57] hsr_slave_1: left promiscuous mode [ 853.392107][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.441936][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.459231][T15086] IPVS: using max 8 ests per chain, 19200 per kthread [ 853.821735][ T57] team0 (unregistering): Port device team_slave_1 removed [ 853.892378][ T57] team0 (unregistering): Port device team_slave_0 removed [ 854.492975][ T57] team0 (unregistering): Port device team_slave_1 removed [ 854.542272][ T57] team0 (unregistering): Port device team_slave_0 removed [ 855.001725][ T57] team0 (unregistering): Port device team_slave_1 removed [ 855.042813][ T57] team0 (unregistering): Port device team_slave_0 removed [ 855.265946][T14751] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 855.309107][T15091] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 855.361305][T14751] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 855.549216][T14751] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 855.794994][T14976] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.795228][T14976] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.795504][T14976] bridge_slave_0: entered allmulticast mode [ 855.797810][T14976] bridge_slave_0: entered promiscuous mode [ 855.876055][T14976] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.876191][T14976] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.876473][T14976] bridge_slave_1: entered allmulticast mode [ 855.879695][T14976] bridge_slave_1: entered promiscuous mode [ 857.085861][T14976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.149071][T14722] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 857.239690][T14976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.370001][T14976] team0: Port device team_slave_0 added [ 857.384386][T14976] team0: Port device team_slave_1 added [ 857.480926][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 857.498222][T14976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.498236][T14976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.498253][T14976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.506781][T14976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.506799][T14976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.506824][T14976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.136526][T14976] hsr_slave_0: entered promiscuous mode [ 858.139914][T14976] hsr_slave_1: entered promiscuous mode [ 858.140914][T14976] debugfs: 'hsr0' already exists in 'hsr' [ 858.140939][T14976] Cannot create hsr debugfs directory [ 859.094634][T15129] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 859.372458][T13896] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 859.393451][T13896] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 859.395016][T13896] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 859.396111][T13896] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 859.404292][T13896] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 859.569696][T13896] Bluetooth: hci2: command 0x0406 tx timeout [ 860.506667][ T5804] ================================================================== [ 860.506690][ T5804] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 860.506807][ T5804] Read of size 8 at addr ffff88802b6ce7b0 by task kworker/u9:3/5804 [ 860.506827][ T5804] [ 860.506840][ T5804] CPU: 1 UID: 0 PID: 5804 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 860.506866][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 860.506881][ T5804] Workqueue: hci5 hci_rx_work [ 860.506915][ T5804] Call Trace: [ 860.506923][ T5804] [ 860.506935][ T5804] dump_stack_lvl+0xe8/0x150 [ 860.506972][ T5804] print_report+0xba/0x230 [ 860.507018][ T5804] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 860.507047][ T5804] kasan_report+0x117/0x150 [ 860.507117][ T5804] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 860.507152][ T5804] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 860.507184][ T5804] l2cap_connect_cfm+0x368/0x1390 [ 860.507216][ T5804] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 860.507241][ T5804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 860.507276][ T5804] ? lockdep_hardirqs_on+0x7a/0x110 [ 860.507310][ T5804] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 860.507340][ T5804] ? mutex_lock_nested+0x152/0x1d0 [ 860.507366][ T5804] ? hci_connect_cfm+0x2c/0x140 [ 860.507387][ T5804] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 860.507411][ T5804] hci_connect_cfm+0x95/0x140 [ 860.507434][ T5804] le_conn_complete_evt+0xf65/0x1430 [ 860.507464][ T5804] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 860.507488][ T5804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 860.507518][ T5804] ? lockdep_hardirqs_on+0x7a/0x110 [ 860.507550][ T5804] ? skb_pull_data+0xfb/0x200 [ 860.507580][ T5804] hci_le_conn_complete_evt+0x187/0x470 [ 860.507608][ T5804] hci_event_packet+0x7af/0x12c0 [ 860.507641][ T5804] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 860.507674][ T5804] ? __pfx_hci_event_packet+0x10/0x10 [ 860.507703][ T5804] ? rt_spin_unlock+0x14f/0x200 [ 860.507735][ T5804] ? hci_send_to_monitor+0xe2/0x590 [ 860.507763][ T5804] hci_rx_work+0x3ee/0x1030 [ 860.507806][ T5804] ? process_scheduled_works+0xa8d/0x18c0 [ 860.507840][ T5804] process_scheduled_works+0xb6e/0x18c0 [ 860.507891][ T5804] ? __pfx_process_scheduled_works+0x10/0x10 [ 860.507926][ T5804] ? assign_work+0x3d5/0x5e0 [ 860.507958][ T5804] worker_thread+0xa53/0xfc0 [ 860.508008][ T5804] kthread+0x388/0x470 [ 860.508031][ T5804] ? __pfx_worker_thread+0x10/0x10 [ 860.508059][ T5804] ? __pfx_kthread+0x10/0x10 [ 860.508082][ T5804] ret_from_fork+0x51e/0xb90 [ 860.508116][ T5804] ? __pfx_ret_from_fork+0x10/0x10 [ 860.508145][ T5804] ? __switch_to+0xc7d/0x1450 [ 860.508173][ T5804] ? __pfx_kthread+0x10/0x10 [ 860.508197][ T5804] ret_from_fork_asm+0x1a/0x30 [ 860.508230][ T5804] [ 860.508238][ T5804] [ 860.508243][ T5804] Allocated by task 5804: [ 860.508285][ T5804] kasan_save_track+0x3e/0x80 [ 860.508348][ T5804] __kasan_kmalloc+0x93/0xb0 [ 860.508377][ T5804] __kmalloc_noprof+0x3e7/0x7b0 [ 860.508455][ T5804] sk_prot_alloc+0xe7/0x210 [ 860.508510][ T5804] sk_alloc+0x3a/0x390 [ 860.508538][ T5804] bt_sock_alloc+0x3b/0x310 [ 860.508591][ T5804] l2cap_sock_new_connection_cb+0xe2/0x2e0 [ 860.508617][ T5804] l2cap_connect_cfm+0x368/0x1390 [ 860.508638][ T5804] hci_connect_cfm+0x95/0x140 [ 860.508656][ T5804] le_conn_complete_evt+0xf65/0x1430 [ 860.508675][ T5804] hci_le_conn_complete_evt+0x187/0x470 [ 860.508694][ T5804] hci_event_packet+0x7af/0x12c0 [ 860.508719][ T5804] hci_rx_work+0x3ee/0x1030 [ 860.508745][ T5804] process_scheduled_works+0xb6e/0x18c0 [ 860.508770][ T5804] worker_thread+0xa53/0xfc0 [ 860.508805][ T5804] kthread+0x388/0x470 [ 860.508825][ T5804] ret_from_fork+0x51e/0xb90 [ 860.508850][ T5804] ret_from_fork_asm+0x1a/0x30 [ 860.508868][ T5804] [ 860.508873][ T5804] Freed by task 15098: [ 860.508881][ T5804] kasan_save_track+0x3e/0x80 [ 860.508909][ T5804] kasan_save_free_info+0x46/0x50 [ 860.509011][ T5804] __kasan_slab_free+0x5c/0x80 [ 860.509039][ T5804] kfree+0x1c1/0x6c0 [ 860.509064][ T5804] __sk_destruct+0x626/0x880 [ 860.509093][ T5804] l2cap_sock_cleanup_listen+0xe0/0x440 [ 860.509118][ T5804] l2cap_sock_release+0x6e/0x270 [ 860.509140][ T5804] sock_close+0xc3/0x240 [ 860.509161][ T5804] __fput+0x461/0xa90 [ 860.509206][ T5804] task_work_run+0x1d9/0x270 [ 860.509227][ T5804] get_signal+0x11c3/0x1310 [ 860.509260][ T5804] arch_do_signal_or_restart+0xbc/0x830 [ 860.509284][ T5804] exit_to_user_mode_loop+0x86/0x480 [ 860.509334][ T5804] do_syscall_64+0x32d/0xf80 [ 860.509363][ T5804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.509409][ T5804] [ 860.509414][ T5804] The buggy address belongs to the object at ffff88802b6ce000 [ 860.509414][ T5804] which belongs to the cache kmalloc-2k of size 2048 [ 860.509432][ T5804] The buggy address is located 1968 bytes inside of [ 860.509432][ T5804] freed 2048-byte region [ffff88802b6ce000, ffff88802b6ce800) [ 860.509454][ T5804] [ 860.509460][ T5804] The buggy address belongs to the physical page: [ 860.509470][ T5804] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b6c8 [ 860.509490][ T5804] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 860.509509][ T5804] flags: 0x80000000000040(head|node=0|zone=1) [ 860.509527][ T5804] page_type: f5(slab) [ 860.509547][ T5804] raw: 0080000000000040 ffff88813fe1d000 dead000000000100 dead000000000122 [ 860.509565][ T5804] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 860.509584][ T5804] head: 0080000000000040 ffff88813fe1d000 dead000000000100 dead000000000122 [ 860.509602][ T5804] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 860.509621][ T5804] head: 0080000000000003 ffffea0000adb201 00000000ffffffff 00000000ffffffff [ 860.509637][ T5804] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 860.509648][ T5804] page dumped because: kasan: bad access detected [ 860.509658][ T5804] page_owner tracks the page as allocated [ 860.509666][ T5804] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1019, tgid 1019 (kworker/u8:8), ts 15836036095, free_ts 0 [ 860.509703][ T5804] post_alloc_hook+0x231/0x280 [ 860.509787][ T5804] get_page_from_freelist+0x28bb/0x2950 [ 860.509808][ T5804] __alloc_frozen_pages_noprof+0x18d/0x380 [ 860.509829][ T5804] allocate_slab+0x77/0x660 [ 860.509852][ T5804] refill_objects+0x334/0x3c0 [ 860.509873][ T5804] __pcs_replace_empty_main+0x35c/0x710 [ 860.509897][ T5804] __kmalloc_noprof+0x530/0x7b0 [ 860.509926][ T5804] scsi_alloc_target+0x138/0xbd0 [ 860.510023][ T5804] __scsi_scan_target+0x164/0xe10 [ 860.510049][ T5804] scsi_scan_host_selected+0x375/0x690 [ 860.510075][ T5804] do_scan_async+0x124/0x760 [ 860.510101][ T5804] async_run_entry_fn+0xa8/0x440 [ 860.510130][ T5804] process_scheduled_works+0xb6e/0x18c0 [ 860.510156][ T5804] worker_thread+0xa53/0xfc0 [ 860.510182][ T5804] kthread+0x388/0x470 [ 860.510200][ T5804] ret_from_fork+0x51e/0xb90 [ 860.510227][ T5804] page_owner free stack trace missing [ 860.510234][ T5804] [ 860.510239][ T5804] Memory state around the buggy address: [ 860.510251][ T5804] ffff88802b6ce680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 860.510265][ T5804] ffff88802b6ce700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 860.510277][ T5804] >ffff88802b6ce780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 860.510288][ T5804] ^ [ 860.510299][ T5804] ffff88802b6ce800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 860.510313][ T5804] ffff88802b6ce880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 860.510323][ T5804] ================================================================== [ 860.510347][ T5804] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 860.510364][ T5804] CPU: 1 UID: 0 PID: 5804 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 860.510388][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 860.510403][ T5804] Workqueue: hci5 hci_rx_work [ 860.510434][ T5804] Call Trace: [ 860.510442][ T5804] [ 860.510451][ T5804] vpanic+0x56c/0xa60 [ 860.510486][ T5804] ? __pfx_vpanic+0x10/0x10 [ 860.510517][ T5804] ? __pfx___schedule+0x10/0x10 [ 860.510549][ T5804] panic+0xc5/0xd0 [ 860.510580][ T5804] ? __pfx_panic+0x10/0x10 [ 860.510612][ T5804] ? preempt_schedule_common+0x82/0xd0 [ 860.510645][ T5804] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 860.510673][ T5804] check_panic_on_warn+0x89/0xb0 [ 860.510697][ T5804] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 860.510718][ T5804] end_report+0x73/0x180 [ 860.510736][ T5804] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 860.510765][ T5804] kasan_report+0x128/0x150 [ 860.510796][ T5804] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 860.510829][ T5804] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 860.510858][ T5804] l2cap_connect_cfm+0x368/0x1390 [ 860.510889][ T5804] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 860.510913][ T5804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 860.510944][ T5804] ? lockdep_hardirqs_on+0x7a/0x110 [ 860.510974][ T5804] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 860.511004][ T5804] ? mutex_lock_nested+0x152/0x1d0 [ 860.511028][ T5804] ? hci_connect_cfm+0x2c/0x140 [ 860.511048][ T5804] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 860.511073][ T5804] hci_connect_cfm+0x95/0x140 [ 860.511094][ T5804] le_conn_complete_evt+0xf65/0x1430 [ 860.511122][ T5804] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 860.511144][ T5804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 860.511175][ T5804] ? lockdep_hardirqs_on+0x7a/0x110 [ 860.511205][ T5804] ? skb_pull_data+0xfb/0x200 [ 860.511231][ T5804] hci_le_conn_complete_evt+0x187/0x470 [ 860.511256][ T5804] hci_event_packet+0x7af/0x12c0 [ 860.511293][ T5804] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 860.511326][ T5804] ? __pfx_hci_event_packet+0x10/0x10 [ 860.511354][ T5804] ? rt_spin_unlock+0x14f/0x200 [ 860.511383][ T5804] ? hci_send_to_monitor+0xe2/0x590 [ 860.511409][ T5804] hci_rx_work+0x3ee/0x1030 [ 860.511441][ T5804] ? process_scheduled_works+0xa8d/0x18c0 [ 860.511471][ T5804] process_scheduled_works+0xb6e/0x18c0 [ 860.511514][ T5804] ? __pfx_process_scheduled_works+0x10/0x10 [ 860.511546][ T5804] ? assign_work+0x3d5/0x5e0 [ 860.511576][ T5804] worker_thread+0xa53/0xfc0 [ 860.511619][ T5804] kthread+0x388/0x470 [ 860.511640][ T5804] ? __pfx_worker_thread+0x10/0x10 [ 860.511667][ T5804] ? __pfx_kthread+0x10/0x10 [ 860.511690][ T5804] ret_from_fork+0x51e/0xb90 [ 860.511721][ T5804] ? __pfx_ret_from_fork+0x10/0x10 [ 860.511749][ T5804] ? __switch_to+0xc7d/0x1450 [ 860.511783][ T5804] ? __pfx_kthread+0x10/0x10 [ 860.511805][ T5804] ret_from_fork_asm+0x1a/0x30 [ 860.511833][ T5804] [ 860.512120][ T5804] Kernel Offset: disabled