last executing test programs: 13m54.122887363s ago: executing program 1 (id=246): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000002c0)={0x0, 0xfc, 0x2, &(0x7f00000008c0)={0x0, "cc3df0b97c31c635d41f1db17008852daad3915d105cea6345c0bd492ca56f24ee"}}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r4}) syz_io_uring_setup(0x2775, &(0x7f0000000400)={0x0, 0x86f2, 0x100, 0x10000}, &(0x7f00000003c0), 0x0) 13m48.943831137s ago: executing program 1 (id=254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x260) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000800)={"54a41f7614f42e2f8c19cb810aea5bce", 0x0, 0x0, {0x2, 0x616}, {0x100, 0x4}, 0x2, [0x8, 0x0, 0x2, 0x1, 0x10000000, 0x7, 0x8, 0x5, 0x7, 0x2d, 0x0, 0x7, 0x6f740588, 0x1fffc0000000, 0x10000, 0x4]}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(0xffffffffffffffff) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a) sendmmsg$sock(r2, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="15", 0x1}], 0x1}}], 0x1, 0x40001) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}, 0x12000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) 13m46.630078542s ago: executing program 1 (id=258): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000002c0)={0x0, 0xfc, 0x2, &(0x7f00000008c0)={0x0, "cc3df0b97c31c635d41f1db17008852daad3915d105cea6345c0bd492ca56f24ee"}}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x400) syz_usbip_server_init(0x3) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000700)) r5 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r5}) 13m41.698899114s ago: executing program 1 (id=266): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') unlink(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904000002923350000905f402ff030000000905ba"], 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x8512}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={0xfd00, @l2tp={0x2, 0x0, @local, 0x3, 0x1000000}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1}, 0x4fe, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfd, 0xffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) 13m37.918702536s ago: executing program 1 (id=270): setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffffa}, &(0x7f0000000080), 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) 13m36.269594402s ago: executing program 1 (id=275): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 13m34.906669752s ago: executing program 32 (id=275): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 13m25.122421193s ago: executing program 0 (id=284): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(0x0, 0xfff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0) creat(0x0, 0x16c) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000000c0)=0x7) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a0000", 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 13m24.813041332s ago: executing program 0 (id=285): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) socket(0x10, 0x3, 0x0) 13m22.946918304s ago: executing program 0 (id=287): preadv(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) poll(&(0x7f00000000c0), 0x0, 0x800) 13m19.393582326s ago: executing program 0 (id=291): setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) cachestat(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffffa}, &(0x7f0000000080), 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x20000}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) 13m15.623186139s ago: executing program 0 (id=296): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 13m10.781499363s ago: executing program 0 (id=303): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') unlink(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904000002923350000905f402ff030000000905ba"], 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x8512}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x200, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 12m55.609334492s ago: executing program 33 (id=303): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') unlink(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904000002923350000905f402ff030000000905ba"], 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x8512}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x200, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 12m54.206178968s ago: executing program 2 (id=326): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x1dd}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 12m53.862558549s ago: executing program 2 (id=328): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001) bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000007000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 12m50.759657423s ago: executing program 2 (id=330): setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) cachestat(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffffa}, &(0x7f0000000080), 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x20000}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) 12m46.67311899s ago: executing program 2 (id=335): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500", 0x1a}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f30", 0x1c}], 0x2) 12m44.781727672s ago: executing program 2 (id=337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x260) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(0xffffffffffffffff) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a) sendmmsg$sock(r2, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="15", 0x1}], 0x1}}], 0x1, 0x40001) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}, 0x12000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) 12m40.598459113s ago: executing program 2 (id=343): setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) cachestat(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffffa}, &(0x7f0000000080), 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x20000}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) 12m24.718181266s ago: executing program 34 (id=343): setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) cachestat(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffffa}, &(0x7f0000000080), 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x20000}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) 10.616311059s ago: executing program 4 (id=1121): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYRES64=r0], &(0x7f00000007c0)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) pipe2(0x0, 0x80c80) rt_sigprocmask(0x3, 0x0, &(0x7f0000000240), 0xfea4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRESHEX=r2], 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSIGACCEPT(r3, 0x5607, 0x2c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_ACTIVATE(r5, 0x5606, 0x4) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000080)={0xd, 0x8, 0x2, 0x0, 0x0, 0x1000}) 7.30878483s ago: executing program 4 (id=1123): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, 0x0, 0x0) connect$llc(r5, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x3, 0x2, 0x10, @local}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000007000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 6.090974892s ago: executing program 4 (id=1124): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) fallocate(r0, 0x23, 0x1ff, 0x7f) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x21c) 4.210035947s ago: executing program 4 (id=1126): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) fallocate(r0, 0x23, 0x1ff, 0x7f) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000000000b03000000000000000000030000060500010000000000080003400000000108000340000000000500010000000000080002"], 0x7c}}, 0x4814) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0xffff, 0x1000, 0x3a, 0x1000, 0x0, 0x7}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='ext4_es_remove_extent\x00', r4, 0x0, 0x8003}, 0x18) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.123697576s ago: executing program 3 (id=1127): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13", 0xb2}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x1b5}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.161814917s ago: executing program 4 (id=1128): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4040) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004cc0)={0x2, 0x9, 0x5, 0x9, 0x2, 0x0, 0x70bd25, 0x25dfdbfe}, 0x10}}, 0x40000) r6 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) 3.152704287s ago: executing program 3 (id=1129): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 3.034953055s ago: executing program 3 (id=1130): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) fallocate(r0, 0x23, 0x1ff, 0x7f) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000000000b03000000000000000000030000060500010000000000080003400000000108000340000000000500010000000000080002"], 0x7c}}, 0x4814) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0xffff, 0x1000, 0x3a, 0x1000, 0x0, 0x7}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='ext4_es_remove_extent\x00', r4, 0x0, 0x8003}, 0x18) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.349646041s ago: executing program 3 (id=1131): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x10) sendto$inet(r0, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 1.250578314s ago: executing program 3 (id=1132): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x28e2, &(0x7f0000000140)={0x0, 0xe4d1, 0x800, 0x1, 0x35c}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), 0x0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0) 568.165275ms ago: executing program 3 (id=1133): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000031401002fbd7000fcdbdf250900000000007a3100000000080041007278650014000000767863616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x200008d4}, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 0s ago: executing program 4 (id=1134): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x200000c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000001e00)={0x1000000, 0x8, 0x4, 0x0, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd1f, 0x408000) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r4, r5, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): 52.149409][ T12] bridge_slave_0: left allmulticast mode [ 652.149432][ T12] bridge_slave_0: left promiscuous mode [ 652.149627][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.241228][ T12] bridge_slave_1: left allmulticast mode [ 652.241263][ T12] bridge_slave_1: left promiscuous mode [ 652.241525][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.534021][ T12] bridge_slave_0: left allmulticast mode [ 652.534057][ T12] bridge_slave_0: left promiscuous mode [ 652.564786][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.629311][ T9071] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 653.629311][ T9071] program syz.3.648 not setting count and/or reply_len properly [ 653.994434][ T5847] Bluetooth: hci4: command tx timeout [ 654.051400][ T9074] netlink: 256 bytes leftover after parsing attributes in process `syz.4.649'. [ 654.282530][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.454598][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.497016][ T12] bond0 (unregistering): Released all slaves [ 654.661140][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 654.687609][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 654.703300][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 654.714668][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 654.715589][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 654.776522][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.845005][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.934600][ T12] bond0 (unregistering): Released all slaves [ 656.065464][ T12] hsr_slave_0: left promiscuous mode [ 656.084408][ T5840] Bluetooth: hci4: command tx timeout [ 656.114649][ T12] hsr_slave_1: left promiscuous mode [ 656.115619][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.167514][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.794500][ T5840] Bluetooth: hci1: command tx timeout [ 658.154487][ T5840] Bluetooth: hci4: command tx timeout [ 658.874380][ T5840] Bluetooth: hci1: command tx timeout [ 660.234371][ T5840] Bluetooth: hci4: command tx timeout [ 660.954368][ T5840] Bluetooth: hci1: command tx timeout [ 662.316058][ T12] hsr_slave_0: left promiscuous mode [ 662.366931][ T12] hsr_slave_1: left promiscuous mode [ 662.367643][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.405480][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.066515][ T5840] Bluetooth: hci1: command tx timeout [ 669.855303][ T12] team0 (unregistering): Port device team_slave_1 removed [ 670.015994][ T12] team0 (unregistering): Port device team_slave_0 removed [ 672.196649][ T9113] usb usb8: usbfs: process 9113 (syz.4.658) did not claim interface 0 before use [ 673.353215][ T9116] netlink: 64 bytes leftover after parsing attributes in process `syz.4.659'. [ 673.931644][ T9116] syz.4.659 (9116): drop_caches: 2 [ 673.984437][ T9116] syz.4.659 (9116): drop_caches: 2 [ 674.966721][ T12] team0 (unregistering): Port device team_slave_1 removed [ 675.125441][ T12] team0 (unregistering): Port device team_slave_0 removed [ 676.111505][ T8945] team0: Port device team_slave_0 added [ 676.153213][ T8945] team0: Port device team_slave_1 added [ 676.697129][ T8945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.697148][ T8945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.697174][ T8945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.790029][ T9130] binder: 9129:9130 ioctl c0306201 0 returned -14 [ 676.820464][ T8945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.820476][ T8945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.820492][ T8945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.102730][ T9134] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 677.948433][ T8945] hsr_slave_0: entered promiscuous mode [ 677.952213][ T8945] hsr_slave_1: entered promiscuous mode [ 677.982307][ T8945] debugfs: 'hsr0' already exists in 'hsr' [ 677.982339][ T8945] Cannot create hsr debugfs directory [ 680.013851][ T9162] netlink: 64 bytes leftover after parsing attributes in process `syz.4.671'. [ 680.331694][ T9165] syz.4.671 (9165): drop_caches: 2 [ 680.343772][ T9165] syz.4.671 (9165): drop_caches: 2 [ 682.512827][ T9179] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 682.512827][ T9179] program syz.3.672 not setting count and/or reply_len properly [ 683.394461][ T9178] nbd4: detected capacity change from 0 to 1024 [ 683.394798][ T9175] block nbd4: NBD_DISCONNECT [ 683.394894][ T9175] block nbd4: Send disconnect failed -89 [ 683.396451][ T9175] block nbd4: Send control failed (result -89) [ 683.396474][ T9175] block nbd4: Request send failed, requeueing [ 683.409386][ T9175] block nbd4: Disconnected due to user request. [ 683.411898][ T63] blk_print_req_error: 43 callbacks suppressed [ 683.411916][ T63] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.411941][ T63] buffer_io_error: 43 callbacks suppressed [ 683.411951][ T63] Buffer I/O error on dev nbd4, logical block 0, async page read [ 683.412212][ T9175] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.412240][ T9175] Buffer I/O error on dev nbd4, logical block 0, async page read [ 683.412410][ T9175] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.412435][ T9175] Buffer I/O error on dev nbd4, logical block 0, async page read [ 683.412607][ T9175] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.412632][ T9175] Buffer I/O error on dev nbd4, logical block 0, async page read [ 683.412794][ T9175] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.412818][ T9175] Buffer I/O error on dev nbd4, logical block 0, async page read [ 683.413009][ T9175] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.413033][ T9175] Buffer I/O error on dev nbd4, logical block 0, async page read [ 683.413213][ T9175] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.413238][ T9175] Buffer I/O error on dev nbd4, logical block 0, async page read [ 683.413483][ T9175] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.413516][ T9175] Buffer I/O error on dev nbd4, logical block 0, async page read [ 683.413620][ T9175] ldm_validate_partition_table(): Disk read failed. [ 683.413703][ T9175] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.413729][ T9175] Buffer I/O error on dev nbd4, logical block 0, async page read [ 683.413894][ T9175] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.413919][ T9175] Buffer I/O error on dev nbd4, logical block 0, async page read [ 683.513994][ T9061] chnl_net:caif_netlink_parms(): no params data found [ 683.555559][ T9175] Dev nbd4: unable to read RDB block 0 [ 683.556641][ T9175] nbd4: unable to read partition table [ 683.613561][ T9126] ldm_validate_partition_table(): Disk read failed. [ 683.644656][ T9126] Dev nbd4: unable to read RDB block 0 [ 683.646172][ T9126] nbd4: unable to read partition table [ 683.667737][ T9075] chnl_net:caif_netlink_parms(): no params data found [ 683.677639][ T9126] ldm_validate_partition_table(): Disk read failed. [ 683.678255][ T9126] Dev nbd4: unable to read RDB block 0 [ 683.678958][ T9126] nbd4: unable to read partition table [ 683.887484][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 683.919460][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 683.959234][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 683.975790][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 683.986043][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 684.440674][ T9198] netlink: 'syz.3.678': attribute type 4 has an invalid length. [ 684.440692][ T9198] netlink: 17 bytes leftover after parsing attributes in process `syz.3.678'. [ 686.074587][ T5840] Bluetooth: hci3: command tx timeout [ 686.697595][ T9061] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.697680][ T9061] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.697846][ T9061] bridge_slave_0: entered allmulticast mode [ 686.699420][ T9061] bridge_slave_0: entered promiscuous mode [ 687.053216][ T9061] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.053445][ T9061] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.056672][ T9061] bridge_slave_1: entered allmulticast mode [ 687.067482][ T9061] bridge_slave_1: entered promiscuous mode [ 687.087912][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.088063][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.088284][ T9075] bridge_slave_0: entered allmulticast mode [ 687.092291][ T9075] bridge_slave_0: entered promiscuous mode [ 687.334997][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.335080][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.335290][ T9075] bridge_slave_1: entered allmulticast mode [ 687.339663][ T9075] bridge_slave_1: entered promiscuous mode [ 688.211802][ T5840] Bluetooth: hci3: command tx timeout [ 688.449019][ T9061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.631975][ T9061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.740477][ T9075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.804560][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.804639][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.023006][ T9075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.137104][ T9227] netlink: 64 bytes leftover after parsing attributes in process `syz.4.683'. [ 689.511599][ T9230] syz.4.683 (9230): drop_caches: 2 [ 689.520175][ T9230] syz.4.683 (9230): drop_caches: 2 [ 690.314540][ T5840] Bluetooth: hci3: command tx timeout [ 690.407447][ T9061] team0: Port device team_slave_0 added [ 690.518831][ T9061] team0: Port device team_slave_1 added [ 690.576817][ T9075] team0: Port device team_slave_0 added [ 690.770699][ T9075] team0: Port device team_slave_1 added [ 691.014077][ C1] vkms_vblank_simulate: vblank timer overrun [ 691.188629][ T9241] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 691.188629][ T9241] program syz.4.686 not setting count and/or reply_len properly [ 691.469759][ C1] vkms_vblank_simulate: vblank timer overrun [ 691.958297][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.048236][ T9061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.048256][ T9061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.048283][ T9061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.155036][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.394545][ T5840] Bluetooth: hci3: command tx timeout [ 692.554966][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.387618][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.701783][ T9061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.701801][ T9061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.701828][ T9061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.840644][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.840818][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.840847][ T9075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.656573][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.656625][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.656693][ T9075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.771955][ T12] bridge_slave_1: left allmulticast mode [ 695.771980][ T12] bridge_slave_1: left promiscuous mode [ 695.772143][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.852245][ T12] bridge_slave_0: left allmulticast mode [ 695.852270][ T12] bridge_slave_0: left promiscuous mode [ 695.852454][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.949061][ T12] bridge_slave_1: left allmulticast mode [ 695.952255][ T12] bridge_slave_1: left promiscuous mode [ 695.952447][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.040463][ T12] bridge_slave_0: left allmulticast mode [ 696.040493][ T12] bridge_slave_0: left promiscuous mode [ 696.040658][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.362988][ T9260] usb usb8: usbfs: process 9260 (syz.4.691) did not claim interface 0 before use [ 697.774990][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.906225][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.010688][ T12] bond0 (unregistering): Released all slaves [ 698.045329][ T9268] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 698.045359][ T9268] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 698.045470][ T9268] vhci_hcd vhci_hcd.0: Device attached [ 698.509372][ T9] usb 41-1: new high-speed USB device number 6 using vhci_hcd [ 698.707758][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.774552][ T9270] vhci_hcd: connection reset by peer [ 698.781332][ T8403] vhci_hcd: stop threads [ 698.781351][ T8403] vhci_hcd: release socket [ 698.781438][ T8403] vhci_hcd: disconnect device [ 698.860170][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.944126][ T12] bond0 (unregistering): Released all slaves [ 699.332193][ T9061] hsr_slave_0: entered promiscuous mode [ 699.332980][ T9061] hsr_slave_1: entered promiscuous mode [ 699.333475][ T9061] debugfs: 'hsr0' already exists in 'hsr' [ 699.333490][ T9061] Cannot create hsr debugfs directory [ 699.583415][ T9075] hsr_slave_0: entered promiscuous mode [ 699.586224][ T9075] hsr_slave_1: entered promiscuous mode [ 699.587091][ T9075] debugfs: 'hsr0' already exists in 'hsr' [ 699.587115][ T9075] Cannot create hsr debugfs directory [ 701.523742][ T12] hsr_slave_0: left promiscuous mode [ 701.574870][ T12] hsr_slave_1: left promiscuous mode [ 701.575991][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.598012][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.754510][ T12] hsr_slave_0: left promiscuous mode [ 701.794787][ T12] hsr_slave_1: left promiscuous mode [ 701.795824][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.826524][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.179376][ T12] team0 (unregistering): Port device team_slave_1 removed [ 703.376177][ T12] team0 (unregistering): Port device team_slave_0 removed [ 703.664631][ T9] vhci_hcd: vhci_device speed not set [ 703.927386][ T9296] usb usb8: usbfs: process 9296 (syz.4.699) did not claim interface 0 before use [ 713.662011][ T12] team0 (unregistering): Port device team_slave_1 removed [ 713.723206][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 713.745585][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 713.746935][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 713.748312][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 713.749718][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 715.842231][ T5847] Bluetooth: hci5: command tx timeout [ 715.898487][ T12] team0 (unregistering): Port device team_slave_0 removed [ 716.548111][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 716.571327][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 716.573431][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 716.602854][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 716.603719][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 718.148715][ T5847] Bluetooth: hci5: command tx timeout [ 718.304805][ T9184] chnl_net:caif_netlink_parms(): no params data found [ 718.496820][ T9347] netlink: 64 bytes leftover after parsing attributes in process `syz.4.710'. [ 718.704725][ T9348] syz.4.710 (9348): drop_caches: 2 [ 718.714392][ T5847] Bluetooth: hci6: command tx timeout [ 718.727817][ T9348] syz.4.710 (9348): drop_caches: 2 [ 720.155994][ T5847] Bluetooth: hci5: command tx timeout [ 720.796311][ T5847] Bluetooth: hci6: command tx timeout [ 721.795948][ T9184] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.796046][ T9184] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.796239][ T9184] bridge_slave_0: entered allmulticast mode [ 721.797837][ T9184] bridge_slave_0: entered promiscuous mode [ 721.861520][ T9184] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.861703][ T9184] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.861930][ T9184] bridge_slave_1: entered allmulticast mode [ 721.892208][ T9184] bridge_slave_1: entered promiscuous mode [ 722.234522][ T5847] Bluetooth: hci5: command tx timeout [ 723.095229][ T5847] Bluetooth: hci6: command tx timeout [ 723.379175][ T9184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.553794][ T9184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.867366][ T9375] usb usb8: usbfs: process 9375 (syz.3.715) did not claim interface 0 before use [ 724.950278][ T9377] trusted_key: syz.4.717 sent an empty control message without MSG_MORE. [ 725.115749][ T5847] Bluetooth: hci6: command tx timeout [ 725.347182][ T9381] syz.3.718 (9381): drop_caches: 2 [ 725.347404][ T9381] syz.3.718 (9381): drop_caches: 2 [ 727.838812][ T9184] team0: Port device team_slave_0 added [ 727.920024][ T9184] team0: Port device team_slave_1 added [ 730.619488][ T9394] netlink: 'syz.3.720': attribute type 4 has an invalid length. [ 730.619514][ T9394] netlink: 17 bytes leftover after parsing attributes in process `syz.3.720'. [ 731.593609][ T9184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.593621][ T9184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.593636][ T9184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.756047][ T9184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.756061][ T9184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.756078][ T9184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.419045][ T9184] hsr_slave_0: entered promiscuous mode [ 733.421103][ T9184] hsr_slave_1: entered promiscuous mode [ 733.421669][ T9184] debugfs: 'hsr0' already exists in 'hsr' [ 733.421685][ T9184] Cannot create hsr debugfs directory [ 734.964392][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 735.130839][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 735.130876][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 735.130901][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 735.130925][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 735.178977][ T9] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 735.178996][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.179006][ T9] usb 4-1: Product: syz [ 735.179014][ T9] usb 4-1: Manufacturer: syz [ 735.179022][ T9] usb 4-1: SerialNumber: syz [ 735.234910][ T9] usb 4-1: config 0 descriptor?? [ 735.241271][ T9416] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 735.258427][ T9] usb 4-1: ucan: probing device on interface #0 [ 735.258444][ T9] usb 4-1: ucan: invalid endpoint configuration [ 735.258451][ T9] usb 4-1: ucan: probe failed; try to update the device firmware [ 735.260641][ T9324] chnl_net:caif_netlink_parms(): no params data found [ 735.306063][ T6849] bridge_slave_1: left allmulticast mode [ 735.306188][ T6849] bridge_slave_1: left promiscuous mode [ 735.306442][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.380194][ T6849] bridge_slave_0: left allmulticast mode [ 735.380236][ T6849] bridge_slave_0: left promiscuous mode [ 735.380518][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.449357][ T6849] bridge_slave_1: left allmulticast mode [ 735.449382][ T6849] bridge_slave_1: left promiscuous mode [ 735.449554][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.545483][ T6849] bridge_slave_0: left allmulticast mode [ 735.545584][ T6849] bridge_slave_0: left promiscuous mode [ 735.545817][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.635222][ T6849] bridge_slave_1: left allmulticast mode [ 735.635259][ T6849] bridge_slave_1: left promiscuous mode [ 735.635976][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.719613][ T6849] bridge_slave_0: left allmulticast mode [ 735.719640][ T6849] bridge_slave_0: left promiscuous mode [ 735.719818][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.210673][ T6849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.285246][ T6849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.360421][ T6849] bond0 (unregistering): Released all slaves [ 736.708337][ T6849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.789137][ T6849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.850894][ T6849] bond0 (unregistering): Released all slaves [ 737.267315][ T9423] usb usb8: usbfs: process 9423 (syz.4.725) did not claim interface 0 before use [ 738.646668][ T6849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.786454][ T6849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.869678][ T6849] bond0 (unregistering): Released all slaves [ 738.945102][ T9339] chnl_net:caif_netlink_parms(): no params data found [ 739.074350][ T6009] usb 4-1: USB disconnect, device number 7 [ 739.568364][ T9432] syz.3.727 (9432): drop_caches: 2 [ 739.676666][ T9432] syz.3.727 (9432): drop_caches: 2 [ 740.500031][ T9440] netlink: 'syz.3.728': attribute type 4 has an invalid length. [ 740.500057][ T9440] netlink: 17 bytes leftover after parsing attributes in process `syz.3.728'. [ 741.035912][ T9324] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.036024][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.036164][ T9324] bridge_slave_0: entered allmulticast mode [ 741.037682][ T9324] bridge_slave_0: entered promiscuous mode [ 741.150333][ T9324] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.150424][ T9324] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.150561][ T9324] bridge_slave_1: entered allmulticast mode [ 741.152211][ T9324] bridge_slave_1: entered promiscuous mode [ 741.322898][ T6849] hsr_slave_0: left promiscuous mode [ 741.419109][ T6849] hsr_slave_1: left promiscuous mode [ 741.419950][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.467957][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.709135][ T6849] hsr_slave_0: left promiscuous mode [ 741.788649][ T6849] hsr_slave_1: left promiscuous mode [ 741.790562][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.825844][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.128284][ T6849] hsr_slave_0: left promiscuous mode [ 742.167523][ T6849] hsr_slave_1: left promiscuous mode [ 742.169960][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.234832][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.353927][ T6849] team0 (unregistering): Port device team_slave_1 removed [ 743.423126][ T9454] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 743.423154][ T9454] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 743.423261][ T9454] vhci_hcd vhci_hcd.0: Device attached [ 743.684508][ T5926] usb 39-1: new high-speed USB device number 5 using vhci_hcd [ 744.914877][ T9457] vhci_hcd: connection reset by peer [ 744.932313][ T4538] vhci_hcd: stop threads [ 744.932326][ T4538] vhci_hcd: release socket [ 744.932378][ T4538] vhci_hcd: disconnect device [ 745.220022][ T6849] team0 (unregistering): Port device team_slave_0 removed [ 745.233540][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 745.253267][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 746.260910][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 746.273475][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 746.281674][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 748.314823][ T5847] Bluetooth: hci1: command tx timeout [ 748.718708][ T6849] team0 (unregistering): Port device team_slave_1 removed [ 748.784857][ T5926] vhci_hcd: vhci_device speed not set [ 749.787667][ T6849] team0 (unregistering): Port device team_slave_0 removed [ 749.899033][ T9489] netlink: 64 bytes leftover after parsing attributes in process `syz.3.737'. [ 750.238249][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.238298][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.304666][ T9493] syz.3.737 (9493): drop_caches: 2 [ 750.307627][ T9493] syz.3.737 (9493): drop_caches: 2 [ 750.710473][ T5847] Bluetooth: hci1: command tx timeout [ 750.873885][ T9497] syz.3.738 (9497): drop_caches: 2 [ 750.897698][ T9497] syz.3.738 (9497): drop_caches: 2 [ 752.724427][ T5847] Bluetooth: hci1: command tx timeout [ 753.704520][ T9518] nbd3: detected capacity change from 0 to 1024 [ 753.707604][ T9429] block nbd3: Send control failed (result -89) [ 753.707628][ T9429] block nbd3: Request send failed, requeueing [ 753.710791][ T5847] block nbd3: Receive control failed (result -32) [ 753.714167][ T9518] block nbd3: NBD_DISCONNECT [ 753.714193][ T9518] block nbd3: Send disconnect failed -89 [ 753.716663][ T8620] block nbd3: Dead connection, failed to find a fallback [ 753.716716][ T8620] block nbd3: shutting down sockets [ 753.716732][ T8620] blk_print_req_error: 43 callbacks suppressed [ 753.716744][ T8620] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 753.716768][ T8620] buffer_io_error: 43 callbacks suppressed [ 753.716778][ T8620] Buffer I/O error on dev nbd3, logical block 0, async page read [ 753.717548][ T6849] team0 (unregistering): Port device team_slave_1 removed [ 753.724937][ T9429] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 753.724970][ T9429] Buffer I/O error on dev nbd3, logical block 0, async page read [ 753.725139][ T9429] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 753.725161][ T9429] Buffer I/O error on dev nbd3, logical block 0, async page read [ 753.725311][ T9429] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 753.725333][ T9429] Buffer I/O error on dev nbd3, logical block 0, async page read [ 753.725492][ T9429] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 753.725514][ T9429] Buffer I/O error on dev nbd3, logical block 0, async page read [ 753.725691][ T9429] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 753.725712][ T9429] Buffer I/O error on dev nbd3, logical block 0, async page read [ 753.725879][ T9429] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 753.725900][ T9429] Buffer I/O error on dev nbd3, logical block 0, async page read [ 753.726049][ T9429] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 753.726071][ T9429] Buffer I/O error on dev nbd3, logical block 0, async page read [ 753.726161][ T9429] ldm_validate_partition_table(): Disk read failed. [ 753.726236][ T9429] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 753.726258][ T9429] Buffer I/O error on dev nbd3, logical block 0, async page read [ 753.726499][ T9429] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 753.726521][ T9429] Buffer I/O error on dev nbd3, logical block 0, async page read [ 753.736375][ T9429] Dev nbd3: unable to read RDB block 0 [ 753.737089][ T9429] nbd3: unable to read partition table [ 753.739518][ T9518] ldm_validate_partition_table(): Disk read failed. [ 753.740170][ T9518] Dev nbd3: unable to read RDB block 0 [ 753.740879][ T9518] nbd3: unable to read partition table [ 753.816615][ T5208] ldm_validate_partition_table(): Disk read failed. [ 753.817190][ T5208] Dev nbd3: unable to read RDB block 0 [ 753.817893][ T5208] nbd3: unable to read partition table [ 753.828188][ T9429] ldm_validate_partition_table(): Disk read failed. [ 753.828791][ T9429] Dev nbd3: unable to read RDB block 0 [ 753.829496][ T9429] nbd3: unable to read partition table [ 754.195492][ T6849] team0 (unregistering): Port device team_slave_0 removed [ 754.590296][ T9527] netlink: 64 bytes leftover after parsing attributes in process `syz.4.746'. [ 754.808454][ T5847] Bluetooth: hci1: command tx timeout [ 755.051033][ T9530] syz.4.746 (9530): drop_caches: 2 [ 755.054531][ T9530] syz.4.746 (9530): drop_caches: 2 [ 755.659221][ T9534] netlink: 64 bytes leftover after parsing attributes in process `syz.4.747'. [ 755.859109][ T9537] syz.4.747 (9537): drop_caches: 2 [ 755.861420][ T9537] syz.4.747 (9537): drop_caches: 2 [ 760.180189][ T9339] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.180456][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.180774][ T9339] bridge_slave_0: entered allmulticast mode [ 760.196092][ T9339] bridge_slave_0: entered promiscuous mode [ 760.486915][ T9339] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.487008][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.487181][ T9339] bridge_slave_1: entered allmulticast mode [ 760.491389][ T9339] bridge_slave_1: entered promiscuous mode [ 760.534688][ T9324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.922885][ T9555] netlink: 256 bytes leftover after parsing attributes in process `syz.4.752'. [ 761.205245][ T9324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.866295][ T9339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.551254][ T9339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.281156][ T9324] team0: Port device team_slave_0 added [ 764.936519][ T9324] team0: Port device team_slave_1 added [ 765.481421][ T9339] team0: Port device team_slave_0 added [ 765.947362][ T9339] team0: Port device team_slave_1 added [ 766.230361][ T9571] netlink: 64 bytes leftover after parsing attributes in process `syz.3.756'. [ 766.469306][ T9574] syz.3.756 (9574): drop_caches: 2 [ 766.471251][ T9574] syz.3.756 (9574): drop_caches: 2 [ 766.924628][ T9324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.924645][ T9324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.924672][ T9324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.705228][ T9324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.705240][ T9324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.705256][ T9324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.228000][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.228013][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.228028][ T9339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.255722][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.255741][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.255768][ T9339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.891736][ T9324] hsr_slave_0: entered promiscuous mode [ 769.905890][ T9324] hsr_slave_1: entered promiscuous mode [ 769.920129][ T9324] debugfs: 'hsr0' already exists in 'hsr' [ 769.920157][ T9324] Cannot create hsr debugfs directory [ 776.815983][ T9339] hsr_slave_0: entered promiscuous mode [ 776.821834][ T9339] hsr_slave_1: entered promiscuous mode [ 776.822348][ T9339] debugfs: 'hsr0' already exists in 'hsr' [ 776.822364][ T9339] Cannot create hsr debugfs directory [ 777.688244][ T9466] chnl_net:caif_netlink_parms(): no params data found [ 777.947612][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 777.963562][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 777.966023][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 777.967168][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 777.967883][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 778.366064][ T9618] binder: 9614:9618 ioctl c0306201 0 returned -14 [ 779.106012][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.763'. [ 779.486267][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 779.492610][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 779.521427][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 779.546850][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 779.547530][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 779.986651][ T9466] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.986794][ T9466] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.987052][ T9466] bridge_slave_0: entered allmulticast mode [ 779.989780][ T9466] bridge_slave_0: entered promiscuous mode [ 780.070835][ T9466] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.070975][ T9466] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.071225][ T9466] bridge_slave_1: entered allmulticast mode [ 780.072848][ T9466] bridge_slave_1: entered promiscuous mode [ 780.074472][ T5840] Bluetooth: hci3: command tx timeout [ 780.344012][ T9645] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 780.695017][ T9466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.720928][ T9466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.100502][ T9466] team0: Port device team_slave_0 added [ 781.128340][ T9466] team0: Port device team_slave_1 added [ 781.391269][ T9650] netlink: 64 bytes leftover after parsing attributes in process `syz.3.768'. [ 781.610751][ T9651] syz.3.768 (9651): drop_caches: 2 [ 781.644544][ T9651] syz.3.768 (9651): drop_caches: 2 [ 782.227935][ T5840] Bluetooth: hci4: command tx timeout [ 782.228145][ T5840] Bluetooth: hci3: command tx timeout [ 784.076998][ T9662] netlink: 64 bytes leftover after parsing attributes in process `syz.3.770'. [ 784.234549][ T5847] Bluetooth: hci3: command tx timeout [ 784.234584][ T5847] Bluetooth: hci4: command tx timeout [ 784.884155][ T9667] syz.3.770 (9667): drop_caches: 2 [ 784.897738][ T9667] syz.3.770 (9667): drop_caches: 2 [ 785.898075][ T9466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.898092][ T9466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.898116][ T9466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.019792][ T9466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.019809][ T9466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.019836][ T9466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.326387][ T5840] Bluetooth: hci4: command tx timeout [ 786.326433][ T5847] Bluetooth: hci3: command tx timeout [ 787.110458][ T9466] hsr_slave_0: entered promiscuous mode [ 787.113245][ T9466] hsr_slave_1: entered promiscuous mode [ 787.128141][ T9466] debugfs: 'hsr0' already exists in 'hsr' [ 787.128160][ T9466] Cannot create hsr debugfs directory [ 787.226712][ T6849] bridge_slave_1: left allmulticast mode [ 787.226747][ T6849] bridge_slave_1: left promiscuous mode [ 787.227037][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.306113][ T6849] bridge_slave_0: left allmulticast mode [ 787.306148][ T6849] bridge_slave_0: left promiscuous mode [ 787.306459][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.345309][ T9686] netlink: 'syz.3.775': attribute type 4 has an invalid length. [ 787.345324][ T9686] netlink: 17 bytes leftover after parsing attributes in process `syz.3.775'. [ 787.436958][ T6849] bridge_slave_1: left allmulticast mode [ 787.436983][ T6849] bridge_slave_1: left promiscuous mode [ 787.437149][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.530021][ T6849] bridge_slave_0: left allmulticast mode [ 787.530047][ T6849] bridge_slave_0: left promiscuous mode [ 787.530224][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.584412][ T5840] Bluetooth: hci4: command tx timeout [ 791.075193][ T6849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.185314][ T6849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.246937][ T6849] bond0 (unregistering): Released all slaves [ 791.535800][ T6849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.625462][ T6849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.700321][ T6849] bond0 (unregistering): Released all slaves [ 792.250804][ C1] vkms_vblank_simulate: vblank timer overrun [ 792.780593][ C1] vkms_vblank_simulate: vblank timer overrun [ 793.242100][ T9705] block nbd4: Attempted send on invalid socket [ 793.242129][ T9705] blk_print_req_error: 59 callbacks suppressed [ 793.242142][ T9705] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 793.245053][ C1] vkms_vblank_simulate: vblank timer overrun [ 794.534115][ C1] vkms_vblank_simulate: vblank timer overrun [ 794.667200][ T9607] chnl_net:caif_netlink_parms(): no params data found [ 794.887174][ T9713] syz.3.780 (9713): drop_caches: 2 [ 794.891032][ T9713] syz.3.780 (9713): drop_caches: 2 [ 795.547641][ T6849] hsr_slave_0: left promiscuous mode [ 795.684401][ T6849] hsr_slave_1: left promiscuous mode [ 795.685418][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.735380][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.951711][ T6849] hsr_slave_0: left promiscuous mode [ 795.964554][ T6849] hsr_slave_1: left promiscuous mode [ 795.965559][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.009172][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.513136][ T9730] netlink: 64 bytes leftover after parsing attributes in process `syz.4.785'. [ 798.496250][ T6849] team0 (unregistering): Port device team_slave_1 removed [ 799.843502][ T9745] block nbd4: Attempted send on invalid socket [ 799.843583][ T9745] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 800.019682][ T6849] team0 (unregistering): Port device team_slave_0 removed [ 801.485255][ T6849] team0 (unregistering): Port device team_slave_1 removed [ 801.605491][ T6849] team0 (unregistering): Port device team_slave_0 removed [ 802.106833][ T9754] ptrace attach of ""[9755] was attempted by "./syz-executor exec"[9754] [ 802.719527][ T9635] chnl_net:caif_netlink_parms(): no params data found [ 804.176028][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.176252][ T9607] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.176533][ T9607] bridge_slave_0: entered allmulticast mode [ 804.179237][ T9607] bridge_slave_0: entered promiscuous mode [ 804.237355][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.237500][ T9607] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.237747][ T9607] bridge_slave_1: entered allmulticast mode [ 804.264720][ T9607] bridge_slave_1: entered promiscuous mode [ 805.223420][ T9771] usb usb8: usbfs: process 9771 (syz.3.792) did not claim interface 0 before use [ 808.725765][ T9786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 808.736661][ T9786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 808.739165][ T9786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 808.746437][ T9786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 808.747708][ T9786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 810.174690][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.174827][ T9635] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.175079][ T9635] bridge_slave_0: entered allmulticast mode [ 810.178811][ T9635] bridge_slave_0: entered promiscuous mode [ 810.277044][ T9607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.277393][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.277541][ T9635] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.277720][ T9635] bridge_slave_1: entered allmulticast mode [ 810.283081][ T9635] bridge_slave_1: entered promiscuous mode [ 810.329702][ T9607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.060005][ T5840] Bluetooth: hci1: command tx timeout [ 811.592158][ T9635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.632901][ T9607] team0: Port device team_slave_0 added [ 811.653510][ T9635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.747561][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.747611][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.757701][ T9607] team0: Port device team_slave_1 added [ 813.251842][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.253414][ T5840] Bluetooth: hci1: command tx timeout [ 813.433994][ T9818] block nbd3: Attempted send on invalid socket [ 813.434095][ T9818] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 813.671092][ C1] vkms_vblank_simulate: vblank timer overrun [ 814.030372][ C1] vkms_vblank_simulate: vblank timer overrun [ 814.123982][ C1] vkms_vblank_simulate: vblank timer overrun [ 814.290194][ T9635] team0: Port device team_slave_0 added [ 814.291618][ T9607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.291633][ T9607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.291659][ T9607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.467777][ C1] vkms_vblank_simulate: vblank timer overrun [ 814.508678][ T9635] team0: Port device team_slave_1 added [ 814.509934][ T9607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.509948][ T9607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.509976][ T9607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.625497][ C1] vkms_vblank_simulate: vblank timer overrun [ 815.188429][ C1] vkms_vblank_simulate: vblank timer overrun [ 815.288024][ T5840] Bluetooth: hci1: command tx timeout [ 815.435348][ C1] vkms_vblank_simulate: vblank timer overrun [ 815.514274][ T9823] netlink: 256 bytes leftover after parsing attributes in process `syz.4.805'. [ 817.047165][ T9635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.047178][ T9635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.047193][ T9635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.157730][ T9635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.157743][ T9635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.157759][ T9635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.355281][ T5840] Bluetooth: hci1: command tx timeout [ 817.540281][ T9607] hsr_slave_0: entered promiscuous mode [ 817.541825][ T9607] hsr_slave_1: entered promiscuous mode [ 817.542878][ T9607] debugfs: 'hsr0' already exists in 'hsr' [ 817.542903][ T9607] Cannot create hsr debugfs directory [ 817.668547][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 818.517575][ T9635] hsr_slave_0: entered promiscuous mode [ 818.518962][ T9635] hsr_slave_1: entered promiscuous mode [ 818.520030][ T9635] debugfs: 'hsr0' already exists in 'hsr' [ 818.520055][ T9635] Cannot create hsr debugfs directory [ 818.811929][ T6849] bridge_slave_1: left allmulticast mode [ 818.811963][ T6849] bridge_slave_1: left promiscuous mode [ 818.814167][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.150336][ T6849] bridge_slave_0: left allmulticast mode [ 819.150370][ T6849] bridge_slave_0: left promiscuous mode [ 819.150647][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.989034][ T6849] bridge_slave_1: left allmulticast mode [ 819.989070][ T6849] bridge_slave_1: left promiscuous mode [ 819.989332][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.093035][ C1] vkms_vblank_simulate: vblank timer overrun [ 820.176969][ T6849] bridge_slave_0: left allmulticast mode [ 820.177083][ T6849] bridge_slave_0: left promiscuous mode [ 820.177343][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.469284][ C1] vkms_vblank_simulate: vblank timer overrun [ 820.720013][ C1] vkms_vblank_simulate: vblank timer overrun [ 821.213350][ C1] vkms_vblank_simulate: vblank timer overrun [ 821.367831][ C1] vkms_vblank_simulate: vblank timer overrun [ 824.577401][ C1] vkms_vblank_simulate: vblank timer overrun [ 824.753429][ T6849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.879517][ T6849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.964563][ T6849] bond0 (unregistering): Released all slaves [ 825.537443][ T6849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.620300][ T6849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.771331][ T6849] bond0 (unregistering): Released all slaves [ 826.247574][ T9894] ptrace attach of ""[9895] was attempted by "./syz-executor exec"[9894] [ 827.845830][ T6849] hsr_slave_0: left promiscuous mode [ 827.884653][ T6849] hsr_slave_1: left promiscuous mode [ 827.885766][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.914028][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.074976][ T6849] hsr_slave_0: left promiscuous mode [ 828.139170][ T6849] hsr_slave_1: left promiscuous mode [ 828.167136][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.209448][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.946825][ T6849] team0 (unregistering): Port device team_slave_1 removed [ 832.154519][ T6849] team0 (unregistering): Port device team_slave_0 removed [ 832.236198][ T9925] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 832.635926][ T9930] netlink: 84 bytes leftover after parsing attributes in process `syz.3.826'. [ 834.977686][ T6849] team0 (unregistering): Port device team_slave_1 removed [ 835.170343][ T6849] team0 (unregistering): Port device team_slave_0 removed [ 836.440988][ T9784] chnl_net:caif_netlink_parms(): no params data found [ 837.194777][ T9944] ptrace attach of ""[9945] was attempted by "./syz-executor exec"[9944] [ 839.441636][ T9786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 839.473550][ T9786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 839.499762][ T9786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 839.515621][ T9786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 839.518244][ T9786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 839.590368][ T9784] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.590512][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.590776][ T9784] bridge_slave_0: entered allmulticast mode [ 839.646533][ T9784] bridge_slave_0: entered promiscuous mode [ 839.670188][ T9784] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.670322][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.670571][ T9784] bridge_slave_1: entered allmulticast mode [ 839.690704][ T9784] bridge_slave_1: entered promiscuous mode [ 840.423019][ T9784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.517278][ T9784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.800020][ T9786] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 840.827699][ T9786] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 840.831317][ T9786] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 840.833031][ T9786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 840.833858][ T9786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 841.447270][ T9784] team0: Port device team_slave_0 added [ 841.598843][ T5840] Bluetooth: hci5: command tx timeout [ 841.637824][ T9784] team0: Port device team_slave_1 added [ 843.020233][ T5840] Bluetooth: hci6: command tx timeout [ 843.350371][ T9984] netlink: 64 bytes leftover after parsing attributes in process `syz.3.835'. [ 843.687109][ T5840] Bluetooth: hci5: command tx timeout [ 844.177594][ T9991] netlink: 64 bytes leftover after parsing attributes in process `syz.4.836'. [ 844.774470][ T9995] syz.4.836 (9995): drop_caches: 2 [ 844.777056][ T9995] syz.4.836 (9995): drop_caches: 2 [ 845.034420][ T5840] Bluetooth: hci6: command tx timeout [ 845.754538][ T5840] Bluetooth: hci5: command tx timeout [ 846.458096][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.458114][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.458141][ T9784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.574846][T10013] ptrace attach of ""[10014] was attempted by "./syz-executor exec"[10013] [ 846.761823][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.761841][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.761869][ T9784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.114384][ T5840] Bluetooth: hci6: command tx timeout [ 847.834569][ T5840] Bluetooth: hci5: command tx timeout [ 848.029061][ T6849] bridge_slave_1: left allmulticast mode [ 848.029096][ T6849] bridge_slave_1: left promiscuous mode [ 848.029354][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.196167][ T6849] bridge_slave_0: left allmulticast mode [ 848.196200][ T6849] bridge_slave_0: left promiscuous mode [ 848.196500][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.435836][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'. [ 848.816341][ T6849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.895014][ T6849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.959029][ T6849] bond0 (unregistering): Released all slaves [ 849.194498][ T5840] Bluetooth: hci6: command tx timeout [ 849.256048][ T9784] hsr_slave_0: entered promiscuous mode [ 849.256848][ T9784] hsr_slave_1: entered promiscuous mode [ 849.257335][ T9784] debugfs: 'hsr0' already exists in 'hsr' [ 849.257350][ T9784] Cannot create hsr debugfs directory [ 849.324017][T10025] gtp0: entered promiscuous mode [ 849.766233][ T6849] hsr_slave_0: left promiscuous mode [ 849.796316][ T6849] hsr_slave_1: left promiscuous mode [ 849.797407][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 849.829007][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.216624][ T6849] team0 (unregistering): Port device team_slave_1 removed [ 852.335415][ T6849] team0 (unregistering): Port device team_slave_0 removed [ 852.919013][T10057] syz.4.845 (10057): drop_caches: 2 [ 852.919419][T10057] syz.4.845 (10057): drop_caches: 2 [ 856.545456][ T9959] chnl_net:caif_netlink_parms(): no params data found [ 858.274034][ T9967] chnl_net:caif_netlink_parms(): no params data found [ 859.560858][T10095] syz.3.853 (10095): drop_caches: 2 [ 859.561073][T10095] syz.3.853 (10095): drop_caches: 2 [ 859.684759][T10099] netlink: 64 bytes leftover after parsing attributes in process `syz.4.852'. [ 862.861717][ T9959] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.861854][ T9959] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.862327][ T9959] bridge_slave_0: entered allmulticast mode [ 862.864835][ T9959] bridge_slave_0: entered promiscuous mode [ 863.440904][ T6849] bridge_slave_1: left allmulticast mode [ 863.440930][ T6849] bridge_slave_1: left promiscuous mode [ 863.441104][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.474425][ T5928] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 863.630227][ T6849] bridge_slave_0: left allmulticast mode [ 863.630264][ T6849] bridge_slave_0: left promiscuous mode [ 863.630447][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.744498][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 863.841856][ T5928] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 863.841883][ T5928] usb 4-1: config 0 has no interface number 0 [ 863.841913][ T5928] usb 4-1: config 0 interface 246 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2 [ 863.841927][ T5928] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 863.841941][ T5928] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x2 has invalid maxpacket 58148, setting to 1024 [ 863.906646][ T5928] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 863.906679][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.906709][ T5928] usb 4-1: Product: syz [ 863.906723][ T5928] usb 4-1: Manufacturer: syz [ 863.906738][ T5928] usb 4-1: SerialNumber: syz [ 864.075917][ T5928] usb 4-1: config 0 descriptor?? [ 864.992935][ T5928] msi2500 4-1:0.246: Registered as swradio24 [ 864.992952][ T5928] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 865.255264][ T6849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.404941][ T6849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.489873][ T6849] bond0 (unregistering): Released all slaves [ 865.624517][ T9959] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.624665][ T9959] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.625040][ T9959] bridge_slave_1: entered allmulticast mode [ 865.628048][ T9959] bridge_slave_1: entered promiscuous mode [ 867.413606][ T9786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 867.814596][ T9786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 867.819490][ T9786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 867.848954][ T9786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 867.861704][ T9786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 868.101024][T10140] netlink: 64 bytes leftover after parsing attributes in process `syz.4.860'. [ 868.413786][T10143] syz.4.860 (10143): drop_caches: 2 [ 868.451502][T10143] syz.4.860 (10143): drop_caches: 2 [ 869.055313][ T5926] usb 4-1: USB disconnect, device number 8 [ 869.266179][T10147] syz.4.861 (10147): drop_caches: 2 [ 869.330909][T10147] syz.4.861 (10147): drop_caches: 2 [ 869.437254][ T9959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.914849][ T5840] Bluetooth: hci3: command tx timeout [ 870.013479][T10152] netlink: 64 bytes leftover after parsing attributes in process `syz.3.862'. [ 870.352487][T10155] syz.3.862 (10155): drop_caches: 2 [ 870.354862][T10155] syz.3.862 (10155): drop_caches: 2 [ 870.734771][ T6849] hsr_slave_0: left promiscuous mode [ 870.794835][ T6849] hsr_slave_1: left promiscuous mode [ 870.795806][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.838558][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.892828][T10161] netlink: 64 bytes leftover after parsing attributes in process `syz.4.863'. [ 871.209799][T10164] syz.4.863 (10164): drop_caches: 2 [ 871.228932][T10164] syz.4.863 (10164): drop_caches: 2 [ 872.006658][ T5840] Bluetooth: hci3: command tx timeout [ 873.120951][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 873.121033][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.874463][ T5840] Bluetooth: hci3: command tx timeout [ 875.508786][ T6849] team0 (unregistering): Port device team_slave_1 removed [ 875.677969][ T6849] team0 (unregistering): Port device team_slave_0 removed [ 875.714194][T10187] syz.4.870 (10187): drop_caches: 2 [ 875.717109][T10187] syz.4.870 (10187): drop_caches: 2 [ 876.689217][T10190] netlink: 64 bytes leftover after parsing attributes in process `syz.4.871'. [ 876.909724][T10194] syz.4.871 (10194): drop_caches: 2 [ 876.919879][T10194] syz.4.871 (10194): drop_caches: 2 [ 876.954428][ T5840] Bluetooth: hci3: command tx timeout [ 877.389267][ T9959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.768073][ T9967] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.768211][ T9967] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.768450][ T9967] bridge_slave_0: entered allmulticast mode [ 883.795107][ T9967] bridge_slave_0: entered promiscuous mode [ 884.151551][T10224] syz.4.878 (10224): drop_caches: 2 [ 884.187292][T10224] syz.4.878 (10224): drop_caches: 2 [ 884.588722][ T9959] team0: Port device team_slave_0 added [ 884.632951][ T9967] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.633483][ T9967] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.633719][ T9967] bridge_slave_1: entered allmulticast mode [ 884.758911][ T9967] bridge_slave_1: entered promiscuous mode [ 884.830780][T10229] netlink: 64 bytes leftover after parsing attributes in process `syz.3.879'. [ 884.901173][ T9959] team0: Port device team_slave_1 added [ 885.021879][T10229] syz.3.879 (10229): drop_caches: 2 [ 885.022275][T10229] syz.3.879 (10229): drop_caches: 2 [ 885.566371][T10238] netlink: 64 bytes leftover after parsing attributes in process `syz.3.881'. [ 885.711297][T10240] syz.3.881 (10240): drop_caches: 2 [ 885.724913][T10240] syz.3.881 (10240): drop_caches: 2 [ 887.486830][T10247] netlink: 64 bytes leftover after parsing attributes in process `syz.4.883'. [ 887.794782][T10250] syz.4.883 (10250): drop_caches: 2 [ 887.800105][T10250] syz.4.883 (10250): drop_caches: 2 [ 888.339773][ T9967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.340738][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.340753][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.340780][ T9959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.375971][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.375984][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.376000][ T9959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.379072][ T9967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.361851][T10261] syz.3.886 (10261): drop_caches: 2 [ 892.362069][T10261] syz.3.886 (10261): drop_caches: 2 [ 892.570829][ T9967] team0: Port device team_slave_0 added [ 892.852217][ T9967] team0: Port device team_slave_1 added [ 893.024643][T10269] netlink: 64 bytes leftover after parsing attributes in process `syz.4.888'. [ 893.136439][T10273] syz.4.888 (10273): drop_caches: 2 [ 893.141320][T10273] syz.4.888 (10273): drop_caches: 2 [ 893.221033][ T9959] hsr_slave_0: entered promiscuous mode [ 893.221926][ T9959] hsr_slave_1: entered promiscuous mode [ 893.228973][ T9959] debugfs: 'hsr0' already exists in 'hsr' [ 893.229001][ T9959] Cannot create hsr debugfs directory [ 893.563760][ T9967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.563774][ T9967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.563790][ T9967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.749721][ T6849] bridge_slave_1: left allmulticast mode [ 893.749747][ T6849] bridge_slave_1: left promiscuous mode [ 893.749942][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.818384][ T6849] bridge_slave_0: left allmulticast mode [ 893.818407][ T6849] bridge_slave_0: left promiscuous mode [ 893.818592][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.547370][T10277] netlink: 84 bytes leftover after parsing attributes in process `syz.4.889'. [ 895.068533][ T6849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.150022][ T6849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 895.249875][ T6849] bond0 (unregistering): Released all slaves [ 895.428413][ T9967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.428431][ T9967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.428458][ T9967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.937410][ T6849] hsr_slave_0: left promiscuous mode [ 897.974475][ T6849] hsr_slave_1: left promiscuous mode [ 897.975461][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.005041][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.445429][ T5926] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 898.594658][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 898.604864][ T5926] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 898.604892][ T5926] usb 4-1: config 0 has no interface number 0 [ 898.604942][ T5926] usb 4-1: config 0 interface 246 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2 [ 898.604967][ T5926] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 898.604993][ T5926] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x2 has invalid maxpacket 58148, setting to 1024 [ 898.610876][ T5926] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 898.610906][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.610927][ T5926] usb 4-1: Product: syz [ 898.610941][ T5926] usb 4-1: Manufacturer: syz [ 898.610956][ T5926] usb 4-1: SerialNumber: syz [ 898.703003][ T5926] usb 4-1: config 0 descriptor?? [ 898.938590][ T5926] msi2500 4-1:0.246: Registered as swradio24 [ 898.938612][ T5926] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 899.475087][ T6849] team0 (unregistering): Port device team_slave_1 removed [ 899.631636][ T6849] team0 (unregistering): Port device team_slave_0 removed [ 901.526193][ T9786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 901.559213][T10305] netlink: 84 bytes leftover after parsing attributes in process `syz.4.894'. [ 901.559350][ T9786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 901.564496][ T9786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 901.584561][ T9786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 901.598328][ T9786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 901.845130][ T9297] usb 4-1: USB disconnect, device number 9 [ 902.242028][ T9786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 902.255088][ T9786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 902.281519][ T9786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 902.329599][ T9786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 902.348622][ T9786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 902.678496][T10317] netlink: 64 bytes leftover after parsing attributes in process `syz.4.896'. [ 902.861620][T10319] syz.4.896 (10319): drop_caches: 2 [ 902.870913][T10319] syz.4.896 (10319): drop_caches: 2 [ 903.815677][ T9786] Bluetooth: hci1: command tx timeout [ 904.754478][ T9786] Bluetooth: hci4: command tx timeout [ 905.217239][T10133] chnl_net:caif_netlink_parms(): no params data found [ 905.619862][T10328] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 905.620979][T10328] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 905.622051][T10328] vhci_hcd vhci_hcd.0: Device attached [ 905.680102][ T37] audit: type=1800 audit(1757384162.202:6): pid=10328 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.898" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 905.842420][ T9786] Bluetooth: hci1: command tx timeout [ 905.950820][T10329] vhci_hcd: connection closed [ 905.974470][ T13] vhci_hcd: stop threads [ 905.974490][ T13] vhci_hcd: release socket [ 905.977640][ T13] vhci_hcd: disconnect device [ 906.034528][ T8915] usb 42-1: enqueue for inactive port 0 [ 906.527853][ T8915] usb usb42-port1: attempt power cycle [ 906.589133][T10133] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.589357][T10133] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.589534][T10133] bridge_slave_0: entered allmulticast mode [ 906.591145][T10133] bridge_slave_0: entered promiscuous mode [ 906.682570][T10133] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.682652][T10133] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.682835][T10133] bridge_slave_1: entered allmulticast mode [ 906.685570][T10133] bridge_slave_1: entered promiscuous mode [ 906.686808][ T6849] bridge_slave_1: left allmulticast mode [ 906.686836][ T6849] bridge_slave_1: left promiscuous mode [ 906.687060][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.785266][ T6849] bridge_slave_0: left allmulticast mode [ 906.785290][ T6849] bridge_slave_0: left promiscuous mode [ 906.785460][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.794839][ T9786] Bluetooth: hci4: command tx timeout [ 906.879199][ T6849] bridge_slave_1: left allmulticast mode [ 906.879225][ T6849] bridge_slave_1: left promiscuous mode [ 906.879394][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.000665][ T6849] bridge_slave_0: left allmulticast mode [ 907.000766][ T6849] bridge_slave_0: left promiscuous mode [ 907.000945][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.058029][T10341] syz.3.900 (10341): drop_caches: 2 [ 907.058238][T10341] syz.3.900 (10341): drop_caches: 2 [ 907.096647][ T8915] usb usb42-port1: unable to enumerate USB device [ 907.296853][T10344] netlink: 64 bytes leftover after parsing attributes in process `syz.3.901'. [ 908.122947][ T9786] Bluetooth: hci1: command tx timeout [ 908.302633][T10349] netlink: 64 bytes leftover after parsing attributes in process `syz.4.902'. [ 908.409776][T10354] syz.3.903 (10354): drop_caches: 2 [ 908.410109][T10354] syz.3.903 (10354): drop_caches: 2 [ 908.430321][ T6849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 908.433732][T10355] syz.4.902 (10355): drop_caches: 2 [ 908.433934][T10355] syz.4.902 (10355): drop_caches: 2 [ 908.824648][ T6849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 908.874409][ T9786] Bluetooth: hci4: command tx timeout [ 908.918956][ T6849] bond0 (unregistering): Released all slaves [ 909.474946][ T6849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.551520][ T6849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.638090][ T6849] bond0 (unregistering): Released all slaves [ 909.895884][T10362] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 909.895912][T10362] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 909.896037][T10362] vhci_hcd vhci_hcd.0: Device attached [ 910.082289][ T37] audit: type=1800 audit(1757384166.612:7): pid=10362 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.904" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 910.148715][T10133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.158208][ T9786] Bluetooth: hci1: command tx timeout [ 910.204794][ T8915] usb 42-1: SetAddress Request (6) to port 0 [ 910.204880][ T8915] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 910.274910][T10133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.956893][ T9786] Bluetooth: hci4: command tx timeout [ 911.854511][T10363] vhci_hcd: connection reset by peer [ 911.855011][ T4538] vhci_hcd: stop threads [ 911.855027][ T4538] vhci_hcd: release socket [ 911.855100][ T4538] vhci_hcd: disconnect device [ 912.092544][T10133] team0: Port device team_slave_0 added [ 912.861328][T10133] team0: Port device team_slave_1 added [ 912.879774][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.925395][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.071416][ T6849] hsr_slave_0: left promiscuous mode [ 913.104571][ T6849] hsr_slave_1: left promiscuous mode [ 913.105969][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.135462][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.598612][ T6849] team0 (unregistering): Port device team_slave_1 removed [ 913.660343][T10387] netlink: 64 bytes leftover after parsing attributes in process `syz.4.910'. [ 915.277858][ T8915] usb 42-1: device descriptor read/8, error -110 [ 915.820023][ T8915] usb usb42-port1: attempt power cycle [ 915.985274][ T6849] team0 (unregistering): Port device team_slave_0 removed [ 916.058874][T10395] netlink: 64 bytes leftover after parsing attributes in process `syz.4.912'. [ 916.792043][ T8915] usb usb42-port1: unable to enumerate USB device [ 916.950406][T10400] syz.4.912 (10400): drop_caches: 2 [ 916.967700][T10400] syz.4.912 (10400): drop_caches: 2 [ 917.967010][ T6849] team0 (unregistering): Port device team_slave_1 removed [ 918.069170][ T6849] team0 (unregistering): Port device team_slave_0 removed [ 919.051344][T10133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.051361][T10133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.051397][T10133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.052296][T10304] chnl_net:caif_netlink_parms(): no params data found [ 919.126044][T10133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.126063][T10133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.126090][T10133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.497367][T10133] hsr_slave_0: entered promiscuous mode [ 920.498111][T10133] hsr_slave_1: entered promiscuous mode [ 920.498606][T10133] debugfs: 'hsr0' already exists in 'hsr' [ 920.498620][T10133] Cannot create hsr debugfs directory [ 920.667424][T10308] chnl_net:caif_netlink_parms(): no params data found [ 921.026836][T10304] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.027001][T10304] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.027221][T10304] bridge_slave_0: entered allmulticast mode [ 921.029937][T10304] bridge_slave_0: entered promiscuous mode [ 921.251191][T10304] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.251375][T10304] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.251570][T10304] bridge_slave_1: entered allmulticast mode [ 921.265720][T10304] bridge_slave_1: entered promiscuous mode [ 921.789778][T10431] netlink: 64 bytes leftover after parsing attributes in process `syz.3.918'. [ 922.219516][T10434] syz.3.918 (10434): drop_caches: 2 [ 922.236134][T10434] syz.3.918 (10434): drop_caches: 2 [ 923.459076][T10304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.599975][T10304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.092321][T10308] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.092455][T10308] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.092714][T10308] bridge_slave_0: entered allmulticast mode [ 924.115980][T10308] bridge_slave_0: entered promiscuous mode [ 924.141316][T10304] team0: Port device team_slave_0 added [ 924.168903][T10308] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.170069][T10308] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.170215][T10308] bridge_slave_1: entered allmulticast mode [ 924.173036][T10308] bridge_slave_1: entered promiscuous mode [ 924.257005][T10304] team0: Port device team_slave_1 added [ 924.584586][T10450] netlink: 64 bytes leftover after parsing attributes in process `syz.4.921'. [ 925.312175][T10453] syz.4.921 (10453): drop_caches: 2 [ 925.331729][T10453] syz.4.921 (10453): drop_caches: 2 [ 926.050171][T10308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.055607][T10304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.055622][T10304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.055648][T10304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.058492][T10304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.058588][T10304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.058615][T10304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.069122][T10308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.301490][T10308] team0: Port device team_slave_0 added [ 926.378692][T10308] team0: Port device team_slave_1 added [ 930.717912][T10304] hsr_slave_0: entered promiscuous mode [ 930.719314][T10304] hsr_slave_1: entered promiscuous mode [ 930.720193][T10304] debugfs: 'hsr0' already exists in 'hsr' [ 930.720215][T10304] Cannot create hsr debugfs directory [ 931.945339][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 931.947460][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 931.949888][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 931.951094][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 932.009731][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 932.319829][T10308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.319846][T10308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.319874][T10308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.465809][ T43] bridge_slave_1: left allmulticast mode [ 932.465841][ T43] bridge_slave_1: left promiscuous mode [ 932.466120][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.525969][ T43] bridge_slave_0: left allmulticast mode [ 932.526004][ T43] bridge_slave_0: left promiscuous mode [ 932.526291][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.194181][T10481] netlink: 64 bytes leftover after parsing attributes in process `syz.3.927'. [ 933.335787][T10481] syz.3.927 (10481): drop_caches: 2 [ 933.336190][T10481] syz.3.927 (10481): drop_caches: 2 [ 933.701844][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 933.841159][T10488] netlink: 64 bytes leftover after parsing attributes in process `syz.4.928'. [ 934.074393][ T5840] Bluetooth: hci3: command tx timeout [ 934.105421][T10492] syz.4.928 (10492): drop_caches: 2 [ 934.117925][T10492] syz.4.928 (10492): drop_caches: 2 [ 934.574669][ C0] vkms_vblank_simulate: vblank timer overrun [ 934.590300][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.590379][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.692507][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.799339][T10497] netlink: 64 bytes leftover after parsing attributes in process `syz.4.931'. [ 935.051381][T10500] syz.4.931 (10500): drop_caches: 2 [ 935.054397][T10500] syz.4.931 (10500): drop_caches: 2 [ 935.747276][ C0] vkms_vblank_simulate: vblank timer overrun [ 936.032159][ C0] vkms_vblank_simulate: vblank timer overrun [ 936.053017][ T43] bond0 (unregistering): Released all slaves [ 936.063697][T10501] netlink: 84 bytes leftover after parsing attributes in process `syz.3.930'. [ 936.115788][T10308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 936.115805][T10308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 936.188375][ C0] vkms_vblank_simulate: vblank timer overrun [ 936.189046][ T5840] Bluetooth: hci3: command tx timeout [ 936.233932][T10308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.781302][ T43] hsr_slave_0: left promiscuous mode [ 936.814572][ T43] hsr_slave_1: left promiscuous mode [ 936.815756][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.870999][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.032701][ C0] vkms_vblank_simulate: vblank timer overrun [ 937.283444][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.182590][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.234583][ T5840] Bluetooth: hci3: command tx timeout [ 939.565788][ T43] team0 (unregistering): Port device team_slave_1 removed [ 939.895349][ T43] team0 (unregistering): Port device team_slave_0 removed [ 940.314749][ T5840] Bluetooth: hci3: command tx timeout [ 941.056852][T10308] hsr_slave_0: entered promiscuous mode [ 941.058413][T10308] hsr_slave_1: entered promiscuous mode [ 941.059560][T10308] debugfs: 'hsr0' already exists in 'hsr' [ 941.059585][T10308] Cannot create hsr debugfs directory [ 941.387176][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.583667][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.278503][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.448382][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.434385][T10304] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 944.522810][T10304] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 944.641827][T10304] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 945.094732][T10304] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 945.371527][T10463] chnl_net:caif_netlink_parms(): no params data found [ 945.507398][T10308] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 945.724304][T10308] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 945.811926][T10308] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 946.224367][T10308] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 946.509501][T10463] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.510194][T10463] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.510452][T10463] bridge_slave_0: entered allmulticast mode [ 946.514138][T10463] bridge_slave_0: entered promiscuous mode [ 946.523652][T10463] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.524755][T10463] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.524963][T10463] bridge_slave_1: entered allmulticast mode [ 946.527717][T10463] bridge_slave_1: entered promiscuous mode [ 946.952765][T10463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.980873][T10463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.014453][ T5926] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 947.205139][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 947.227938][ T5926] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 947.227967][ T5926] usb 4-1: config 0 has no interface number 0 [ 947.233155][ T5926] usb 4-1: config 0 interface 246 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2 [ 947.233188][ T5926] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 947.233216][ T5926] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x2 has invalid maxpacket 58148, setting to 1024 [ 947.243367][ T5926] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 947.243398][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.243419][ T5926] usb 4-1: Product: syz [ 947.243434][ T5926] usb 4-1: Manufacturer: syz [ 947.243527][ T5926] usb 4-1: SerialNumber: syz [ 947.357155][ T5926] usb 4-1: config 0 descriptor?? [ 947.488833][ T5926] msi2500 4-1:0.246: Registered as swradio24 [ 947.488849][ T5926] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 947.661802][T10463] team0: Port device team_slave_0 added [ 947.710016][T10463] team0: Port device team_slave_1 added [ 947.934132][T10463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.934145][T10463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.934160][T10463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.941906][T10463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.941924][T10463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.942049][T10463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.691649][ C0] vkms_vblank_simulate: vblank timer overrun [ 949.260213][ C0] vkms_vblank_simulate: vblank timer overrun [ 950.691834][ C0] vkms_vblank_simulate: vblank timer overrun [ 950.738203][ C0] vkms_vblank_simulate: vblank timer overrun [ 950.993196][T10463] hsr_slave_0: entered promiscuous mode [ 951.009578][T10463] hsr_slave_1: entered promiscuous mode [ 951.010258][T10463] debugfs: 'hsr0' already exists in 'hsr' [ 951.010282][T10463] Cannot create hsr debugfs directory [ 952.138271][ C0] vkms_vblank_simulate: vblank timer overrun [ 953.613143][ T9297] usb 4-1: USB disconnect, device number 10 [ 953.959105][T10304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.393706][T10304] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.567437][ T6850] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.567624][ T6850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.656581][T10308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.672446][ T6850] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.672589][ T6850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.136854][T10308] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.228833][T10463] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 955.232085][T10622] netlink: 64 bytes leftover after parsing attributes in process `syz.3.958'. [ 955.302363][T10463] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 955.367013][T10622] syz.3.958 (10622): drop_caches: 2 [ 955.367225][T10622] syz.3.958 (10622): drop_caches: 2 [ 955.502851][ T4538] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.503006][ T4538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.572664][T10463] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 955.690592][T10627] syz.4.959 (10627): drop_caches: 2 [ 955.693861][T10627] syz.4.959 (10627): drop_caches: 2 [ 956.063554][T10463] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 956.158378][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.164524][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.827509][T10463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.029365][T10463] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.072120][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.072430][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.158309][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.158449][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.324433][T10304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.599074][T10308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.581127][T10463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.323799][ T9786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 962.351123][ T9786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 962.363693][ T9786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 962.386394][ T9786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 962.388926][ T9786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 963.738723][ T9786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 963.742562][ T9786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 963.777107][ T9786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 963.806587][ T9786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 963.808765][ T9786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 964.404425][ T9786] Bluetooth: hci1: command tx timeout [ 965.030688][T10731] syz.4.968 (10731): drop_caches: 2 [ 965.032620][T10731] syz.4.968 (10731): drop_caches: 2 [ 965.914925][ T9786] Bluetooth: hci4: command tx timeout [ 966.477536][ T9786] Bluetooth: hci1: command tx timeout [ 968.002468][ T9786] Bluetooth: hci4: command tx timeout [ 968.556058][ T9786] Bluetooth: hci1: command tx timeout [ 969.099163][T10463] veth0_vlan: entered promiscuous mode [ 969.668302][T10463] veth1_vlan: entered promiscuous mode [ 969.938349][T10694] chnl_net:caif_netlink_parms(): no params data found [ 970.011983][ T13] bridge_slave_1: left allmulticast mode [ 970.012019][ T13] bridge_slave_1: left promiscuous mode [ 970.012372][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.074826][ T9786] Bluetooth: hci4: command tx timeout [ 970.179873][ T13] bridge_slave_0: left allmulticast mode [ 970.179908][ T13] bridge_slave_0: left promiscuous mode [ 970.183543][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.634408][ T9786] Bluetooth: hci1: command tx timeout [ 972.154488][ T9786] Bluetooth: hci4: command tx timeout [ 974.806822][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.896628][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.917525][ T13] bond0 (unregistering): Released all slaves [ 975.736753][ T13] hsr_slave_0: left promiscuous mode [ 975.774801][ T13] hsr_slave_1: left promiscuous mode [ 975.775484][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.805875][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.842805][T10821] netlink: 64 bytes leftover after parsing attributes in process `syz.4.985'. [ 977.076310][T10822] syz.4.985 (10822): drop_caches: 2 [ 977.085808][T10822] syz.4.985 (10822): drop_caches: 2 [ 978.506235][ T13] team0 (unregistering): Port device team_slave_1 removed [ 979.897490][ T13] team0 (unregistering): Port device team_slave_0 removed [ 980.112523][T10841] syz.4.991 (10841): drop_caches: 2 [ 980.113439][T10841] syz.4.991 (10841): drop_caches: 2 [ 984.837589][T10869] netlink: 64 bytes leftover after parsing attributes in process `syz.3.999'. [ 987.485037][T10694] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.507169][T10694] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.507433][T10694] bridge_slave_0: entered allmulticast mode [ 987.521958][T10694] bridge_slave_0: entered promiscuous mode [ 987.558584][T10722] chnl_net:caif_netlink_parms(): no params data found [ 987.590093][T10694] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.590466][T10694] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.590721][T10694] bridge_slave_1: entered allmulticast mode [ 987.629558][T10694] bridge_slave_1: entered promiscuous mode [ 989.767741][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 989.836681][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 989.864669][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 989.865962][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 989.867588][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 990.117311][T10694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.157128][T10904] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1006'. [ 990.489122][T10694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.880624][T10904] syz.4.1006 (10904): drop_caches: 2 [ 990.883201][T10904] syz.4.1006 (10904): drop_caches: 2 [ 991.915629][ T9786] Bluetooth: hci3: command tx timeout [ 992.063108][T10919] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1008'. [ 992.242748][T10921] syz.3.1008 (10921): drop_caches: 2 [ 992.284574][T10921] syz.3.1008 (10921): drop_caches: 2 [ 993.229021][T10694] team0: Port device team_slave_0 added [ 993.390240][T10694] team0: Port device team_slave_1 added [ 993.402483][T10722] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.403108][T10722] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.403378][T10722] bridge_slave_0: entered allmulticast mode [ 993.433985][T10722] bridge_slave_0: entered promiscuous mode [ 993.580680][T10722] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.583273][T10722] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.583534][T10722] bridge_slave_1: entered allmulticast mode [ 993.592595][T10722] bridge_slave_1: entered promiscuous mode [ 993.922364][T10694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.922382][T10694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.922409][T10694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.994619][ T9786] Bluetooth: hci3: command tx timeout [ 994.156833][T10694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.156850][T10694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.156969][T10694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.161949][T10722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.264825][T10722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.510769][ T9786] Bluetooth: hci3: command tx timeout [ 996.516410][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 996.516484][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.579168][T10722] team0: Port device team_slave_0 added [ 996.875184][T10967] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1018'. [ 997.146101][T10971] syz.4.1018 (10971): drop_caches: 2 [ 997.148707][T10971] syz.4.1018 (10971): drop_caches: 2 [ 997.698357][T10722] team0: Port device team_slave_1 added [ 998.517438][T10694] hsr_slave_0: entered promiscuous mode [ 998.521360][T10694] hsr_slave_1: entered promiscuous mode [ 998.539261][T10694] debugfs: 'hsr0' already exists in 'hsr' [ 998.539295][T10694] Cannot create hsr debugfs directory [ 998.557586][ T9786] Bluetooth: hci3: command tx timeout [ 998.884486][ T5928] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 999.044424][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 999.276889][ T5928] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 999.276918][ T5928] usb 4-1: config 0 has no interface number 0 [ 999.276969][ T5928] usb 4-1: config 0 interface 246 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2 [ 999.276997][ T5928] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 999.277023][ T5928] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x2 has invalid maxpacket 58148, setting to 1024 [ 1000.104964][ T5928] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1000.104997][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.105017][ T5928] usb 4-1: Product: syz [ 1000.105032][ T5928] usb 4-1: Manufacturer: syz [ 1000.105046][ T5928] usb 4-1: SerialNumber: syz [ 1000.139001][ T5928] usb 4-1: config 0 descriptor?? [ 1000.232992][ T5928] msi2500 4-1:0.246: Registered as swradio24 [ 1000.233015][ T5928] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 1000.320980][T10722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.320998][T10722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.321023][T10722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.374564][T10722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.374582][T10722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.374607][T10722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.379060][ T9297] usb 4-1: USB disconnect, device number 11 [ 1002.192762][T10722] hsr_slave_0: entered promiscuous mode [ 1002.193865][T10722] hsr_slave_1: entered promiscuous mode [ 1002.195497][T10722] debugfs: 'hsr0' already exists in 'hsr' [ 1002.195523][T10722] Cannot create hsr debugfs directory [ 1003.532912][T10900] chnl_net:caif_netlink_parms(): no params data found [ 1005.801689][ C1] vkms_vblank_simulate: vblank timer overrun [ 1005.998650][T11080] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1032'. [ 1006.859649][ C1] vkms_vblank_simulate: vblank timer overrun [ 1007.180531][ C1] vkms_vblank_simulate: vblank timer overrun [ 1007.407957][ C1] vkms_vblank_simulate: vblank timer overrun [ 1007.747963][T10900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.748167][T10900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.748502][T10900] bridge_slave_0: entered allmulticast mode [ 1007.751220][T10900] bridge_slave_0: entered promiscuous mode [ 1007.936631][ C1] vkms_vblank_simulate: vblank timer overrun [ 1008.199731][T11097] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1035'. [ 1009.026547][T10900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.026713][T10900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.027009][T10900] bridge_slave_1: entered allmulticast mode [ 1009.029764][T10900] bridge_slave_1: entered promiscuous mode [ 1009.998958][T10900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.136328][T11113] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1037'. [ 1010.456929][T11116] syz.3.1037 (11116): drop_caches: 2 [ 1010.460051][T11116] syz.3.1037 (11116): drop_caches: 2 [ 1011.239390][T10900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.050755][T10900] team0: Port device team_slave_0 added [ 1013.066791][T10900] team0: Port device team_slave_1 added [ 1013.353548][T10900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.353565][T10900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.353591][T10900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.358159][T10900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.358174][T10900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.358195][T10900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.453498][T11140] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1042'. [ 1014.777772][T11145] syz.4.1042 (11145): drop_caches: 2 [ 1014.817860][T11145] syz.4.1042 (11145): drop_caches: 2 [ 1015.296603][ C1] vkms_vblank_simulate: vblank timer overrun [ 1015.472642][T11152] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1043'. [ 1015.641536][T10900] hsr_slave_0: entered promiscuous mode [ 1015.658305][T10900] hsr_slave_1: entered promiscuous mode [ 1015.675839][T10900] debugfs: 'hsr0' already exists in 'hsr' [ 1015.675868][T10900] Cannot create hsr debugfs directory [ 1016.708178][ T13] bridge_slave_1: left allmulticast mode [ 1016.708216][ T13] bridge_slave_1: left promiscuous mode [ 1016.708499][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.822699][ T13] bridge_slave_0: left allmulticast mode [ 1016.822733][ T13] bridge_slave_0: left promiscuous mode [ 1016.823024][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.936407][ T13] bridge_slave_1: left allmulticast mode [ 1016.936443][ T13] bridge_slave_1: left promiscuous mode [ 1016.936775][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.038575][ T13] bridge_slave_0: left allmulticast mode [ 1017.038612][ T13] bridge_slave_0: left promiscuous mode [ 1017.038880][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.650193][T11188] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1047'. [ 1020.685332][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.746823][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.789389][ T13] bond0 (unregistering): Released all slaves [ 1021.707707][ C0] vkms_vblank_simulate: vblank timer overrun [ 1022.120364][ C0] vkms_vblank_simulate: vblank timer overrun [ 1022.375306][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1022.455163][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.483598][ T13] bond0 (unregistering): Released all slaves [ 1023.344481][ T13] hsr_slave_0: left promiscuous mode [ 1023.402591][ T13] hsr_slave_1: left promiscuous mode [ 1023.403598][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.437340][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.645798][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1023.649022][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1023.652740][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1023.668765][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1023.669611][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1023.688499][ T13] hsr_slave_0: left promiscuous mode [ 1023.760948][ T13] hsr_slave_1: left promiscuous mode [ 1023.761878][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.795527][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.928067][ T13] veth1_vlan: left promiscuous mode [ 1023.928323][ T13] veth0_vlan: left promiscuous mode [ 1024.466769][T11222] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1051'. [ 1024.887881][T11225] syz.4.1051 (11225): drop_caches: 2 [ 1024.909990][T11225] syz.4.1051 (11225): drop_caches: 2 [ 1025.755099][ T9786] Bluetooth: hci5: command tx timeout [ 1025.804515][ C0] vkms_vblank_simulate: vblank timer overrun [ 1025.880129][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1025.962888][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1025.980413][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1026.002043][T11236] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1026.002067][T11236] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1026.002454][T11236] vhci_hcd vhci_hcd.0: Device attached [ 1026.020240][ T37] audit: type=1800 audit(1757384511.564:8): pid=11236 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1053" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1026.063140][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1026.065551][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1026.306988][ T9297] usb 40-1: SetAddress Request (2) to port 0 [ 1026.307071][ T9297] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1026.551196][T11237] vhci_hcd: connection reset by peer [ 1026.557301][ T57] vhci_hcd: stop threads [ 1026.557329][ T57] vhci_hcd: release socket [ 1026.557417][ T57] vhci_hcd: disconnect device [ 1027.846797][ T9786] Bluetooth: hci5: command tx timeout [ 1028.485719][ T9786] Bluetooth: hci6: command tx timeout [ 1028.645361][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1059'. [ 1028.685280][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1028.831528][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1059'. [ 1028.995054][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1029.914647][ T9786] Bluetooth: hci5: command tx timeout [ 1030.554380][ T9786] Bluetooth: hci6: command tx timeout [ 1031.374503][ T9297] usb 40-1: device descriptor read/8, error -110 [ 1031.795387][ T9297] usb usb40-port1: attempt power cycle [ 1031.859137][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1063'. [ 1032.004612][ T9786] Bluetooth: hci5: command tx timeout [ 1032.373243][ T9297] usb usb40-port1: unable to enumerate USB device [ 1032.652193][ T9786] Bluetooth: hci6: command tx timeout [ 1033.015396][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1033.245364][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1034.714430][ T9786] Bluetooth: hci6: command tx timeout [ 1038.961388][T11301] syz.4.1067 (11301): drop_caches: 2 [ 1038.963006][T11301] syz.4.1067 (11301): drop_caches: 2 [ 1040.074645][T11316] netlink: 'syz.4.1070': attribute type 1 has an invalid length. [ 1040.074718][T11316] netlink: 'syz.4.1070': attribute type 4 has an invalid length. [ 1041.202518][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1072'. [ 1044.384023][T11234] chnl_net:caif_netlink_parms(): no params data found [ 1046.487848][T11234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.487991][T11234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.488258][T11234] bridge_slave_0: entered allmulticast mode [ 1046.491067][T11234] bridge_slave_0: entered promiscuous mode [ 1046.514438][T11212] chnl_net:caif_netlink_parms(): no params data found [ 1046.577888][T11234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.578077][T11234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.578438][T11234] bridge_slave_1: entered allmulticast mode [ 1046.596033][T11234] bridge_slave_1: entered promiscuous mode [ 1047.373631][T11364] netlink: 'syz.3.1079': attribute type 1 has an invalid length. [ 1047.373703][T11364] netlink: 'syz.3.1079': attribute type 4 has an invalid length. [ 1048.673374][T11234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.712790][T11234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.176373][T11234] team0: Port device team_slave_0 added [ 1049.318064][T11234] team0: Port device team_slave_1 added [ 1049.456225][T11212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.456373][T11212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.456561][T11212] bridge_slave_0: entered allmulticast mode [ 1049.459424][T11212] bridge_slave_0: entered promiscuous mode [ 1049.850282][T11374] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1080'. [ 1050.545423][T11377] syz.3.1080 (11377): drop_caches: 2 [ 1050.548974][T11377] syz.3.1080 (11377): drop_caches: 2 [ 1050.734519][T11212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.734670][T11212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.734938][T11212] bridge_slave_1: entered allmulticast mode [ 1050.779364][T11212] bridge_slave_1: entered promiscuous mode [ 1051.166210][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1051.282081][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1051.304625][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1051.308149][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1051.310194][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1052.400469][T11390] syz.3.1083 (11390): drop_caches: 2 [ 1052.403286][T11390] syz.3.1083 (11390): drop_caches: 2 [ 1053.319668][T11399] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1086'. [ 1053.485626][ T5840] Bluetooth: hci1: command tx timeout [ 1053.534091][T11401] syz.3.1086 (11401): drop_caches: 2 [ 1053.541413][T11401] syz.3.1086 (11401): drop_caches: 2 [ 1054.359705][T11407] netlink: 'syz.4.1087': attribute type 1 has an invalid length. [ 1054.359728][T11407] netlink: 'syz.4.1087': attribute type 4 has an invalid length. [ 1055.514592][ T5840] Bluetooth: hci1: command tx timeout [ 1055.587323][T11234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.587344][T11234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.587371][T11234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.639564][T11234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.639577][T11234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.639593][T11234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.672801][ T5840] Bluetooth: hci1: command tx timeout [ 1057.768996][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1057.769052][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.837225][T11212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.883213][T11212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.937603][T11424] syz.4.1092 (11424): drop_caches: 2 [ 1057.937840][T11424] syz.4.1092 (11424): drop_caches: 2 [ 1059.147665][T11212] team0: Port device team_slave_0 added [ 1059.499873][T11212] team0: Port device team_slave_1 added [ 1059.615289][T11234] hsr_slave_0: entered promiscuous mode [ 1059.616708][T11234] hsr_slave_1: entered promiscuous mode [ 1059.617725][T11234] debugfs: 'hsr0' already exists in 'hsr' [ 1059.617749][T11234] Cannot create hsr debugfs directory [ 1059.669590][T11439] nbd4: detected capacity change from 0 to 1024 [ 1059.674462][ T9786] Bluetooth: hci1: command tx timeout [ 1059.675258][T11440] block nbd4: NBD_DISCONNECT [ 1059.675336][T11440] block nbd4: Send disconnect failed -89 [ 1059.678079][T11441] block nbd4: Send control failed (result -89) [ 1059.678185][T11441] block nbd4: Request send failed, requeueing [ 1059.679356][T11441] block nbd4: Disconnected due to user request. [ 1059.679785][ T8620] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1059.679816][ T8620] buffer_io_error: 59 callbacks suppressed [ 1059.679831][ T8620] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1059.680173][T11441] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1059.680204][T11441] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1059.680379][T11441] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1059.680405][T11441] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1059.680567][T11441] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1059.680592][T11441] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1059.680818][T11441] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1059.680843][T11441] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1059.681103][T11441] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1059.681128][T11441] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1059.681311][T11441] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1059.681336][T11441] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1059.681498][T11441] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1059.681522][T11441] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1059.681619][T11441] ldm_validate_partition_table(): Disk read failed. [ 1059.681718][T11441] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1059.681743][T11441] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1059.681905][T11441] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1059.681932][T11441] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1059.682333][T11441] Dev nbd4: unable to read RDB block 0 [ 1059.683094][T11441] nbd4: unable to read partition table [ 1059.749698][T11421] ldm_validate_partition_table(): Disk read failed. [ 1059.751914][T11421] Dev nbd4: unable to read RDB block 0 [ 1059.752653][T11421] nbd4: unable to read partition table [ 1059.789065][T11421] ldm_validate_partition_table(): Disk read failed. [ 1059.789637][T11421] Dev nbd4: unable to read RDB block 0 [ 1059.790311][T11421] nbd4: unable to read partition table [ 1062.044938][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1100'. [ 1062.156697][T11212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.156715][T11212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.156742][T11212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.232996][T11457] syz.3.1101 (11457): drop_caches: 2 [ 1062.247539][T11457] syz.3.1101 (11457): drop_caches: 2 [ 1062.392341][T11212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.392359][T11212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.392386][T11212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.393984][ T13] bridge_slave_1: left allmulticast mode [ 1062.394014][ T13] bridge_slave_1: left promiscuous mode [ 1062.394411][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.521178][T11462] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1102'. [ 1062.668347][T11462] syz.3.1102 (11462): drop_caches: 2 [ 1062.668744][T11462] syz.3.1102 (11462): drop_caches: 2 [ 1063.299265][ T13] bridge_slave_0: left allmulticast mode [ 1063.299427][ T13] bridge_slave_0: left promiscuous mode [ 1063.299714][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.552508][ T13] bridge_slave_1: left allmulticast mode [ 1063.552546][ T13] bridge_slave_1: left promiscuous mode [ 1063.552810][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.935267][ T13] bridge_slave_0: left allmulticast mode [ 1063.935303][ T13] bridge_slave_0: left promiscuous mode [ 1063.935502][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.460110][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.554188][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.621126][ T13] bond0 (unregistering): Released all slaves [ 1065.138347][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.269199][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.366732][ T13] bond0 (unregistering): Released all slaves [ 1065.818577][T11477] syz.4.1105 (11477): drop_caches: 2 [ 1065.828571][T11477] syz.4.1105 (11477): drop_caches: 2 [ 1068.513952][T11212] hsr_slave_0: entered promiscuous mode [ 1068.521883][T11212] hsr_slave_1: entered promiscuous mode [ 1068.522788][T11212] debugfs: 'hsr0' already exists in 'hsr' [ 1068.522813][T11212] Cannot create hsr debugfs directory [ 1068.834520][ T13] hsr_slave_0: left promiscuous mode [ 1068.915249][T11493] overlayfs: failed to resolve './file0': -2 [ 1068.941308][ T13] hsr_slave_1: left promiscuous mode [ 1068.942264][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.985420][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.263066][ T13] hsr_slave_0: left promiscuous mode [ 1069.286194][ T13] hsr_slave_1: left promiscuous mode [ 1069.286887][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.307896][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.774815][T11499] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1110'. [ 1071.939176][T11502] syz.3.1110 (11502): drop_caches: 2 [ 1071.939581][T11502] syz.3.1110 (11502): drop_caches: 2 [ 1075.955057][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1076.055644][T11513] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1112'. [ 1076.177537][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1077.933391][ C1] vkms_vblank_simulate: vblank timer overrun [ 1078.198357][ C1] vkms_vblank_simulate: vblank timer overrun [ 1078.648723][ C1] vkms_vblank_simulate: vblank timer overrun [ 1079.267884][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1079.465578][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1079.904258][ C1] vkms_vblank_simulate: vblank timer overrun [ 1080.085795][ C1] vkms_vblank_simulate: vblank timer overrun [ 1080.855216][T11534] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1118'. [ 1081.271129][T11537] syz.4.1118 (11537): drop_caches: 2 [ 1081.276530][T11537] syz.4.1118 (11537): drop_caches: 2 [ 1082.688502][T11546] syz.3.1120 (11546): drop_caches: 2 [ 1082.776664][T11546] syz.3.1120 (11546): drop_caches: 2 [ 1083.977367][T11381] chnl_net:caif_netlink_parms(): no params data found [ 1084.162736][ C0] vkms_vblank_simulate: vblank timer overrun [ 1084.298140][T11234] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1084.546626][ C0] vkms_vblank_simulate: vblank timer overrun [ 1084.776251][ C0] vkms_vblank_simulate: vblank timer overrun [ 1084.784453][T11234] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1085.224583][T11381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.224729][T11381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.224978][T11381] bridge_slave_0: entered allmulticast mode [ 1085.227877][T11381] bridge_slave_0: entered promiscuous mode [ 1085.231388][T11381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.231517][T11381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.295431][T11381] bridge_slave_1: entered allmulticast mode [ 1085.298117][T11381] bridge_slave_1: entered promiscuous mode [ 1085.338657][ T9786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1085.355227][ T9786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1085.357567][ T9786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1085.359271][ T9786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1085.360649][ T9786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1085.656785][T11381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.666637][T11381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.259366][ C0] vkms_vblank_simulate: vblank timer overrun [ 1087.313247][ T9786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1087.334624][ T9786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1087.336308][ T9786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1087.337571][ T9786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1087.338347][ T9786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1087.434531][ T5840] Bluetooth: hci3: command tx timeout [ 1087.747223][ C0] vkms_vblank_simulate: vblank timer overrun [ 1087.831190][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.009471][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.087297][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.109294][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.263855][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.328426][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.391207][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.998666][T11601] syz.4.1124 (11601): drop_caches: 2 [ 1089.072674][T11601] syz.4.1124 (11601): drop_caches: 2 [ 1089.346916][T11610] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1126'. [ 1089.436323][ T5840] Bluetooth: hci4: command tx timeout [ 1089.517238][ T5840] Bluetooth: hci3: command tx timeout [ 1089.622492][T11613] syz.4.1126 (11613): drop_caches: 2 [ 1089.630456][T11613] syz.4.1126 (11613): drop_caches: 2 [ 1090.493283][T11623] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1130'. [ 1090.637020][T11624] syz.3.1130 (11624): drop_caches: 2 [ 1090.639543][T11624] syz.3.1130 (11624): drop_caches: 2 [ 1091.593602][ T5840] Bluetooth: hci4: command tx timeout [ 1091.610233][ T9786] Bluetooth: hci3: command tx timeout [ 1091.846122][T11381] team0: Port device team_slave_0 added [ 1091.968403][T11381] team0: Port device team_slave_1 added [ 1092.625286][T11381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1092.625305][T11381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.625331][T11381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1092.863994][T11381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1092.864009][T11381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.864032][T11381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.569910][T11381] hsr_slave_0: entered promiscuous mode [ 1093.570762][T11381] hsr_slave_1: entered promiscuous mode [ 1093.571262][T11381] debugfs: 'hsr0' already exists in 'hsr' [ 1093.571276][T11381] Cannot create hsr debugfs directory [ 1093.646818][T11640] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1134'. [ 1093.676972][ T9786] Bluetooth: hci4: command tx timeout [ 1093.754406][ T9786] Bluetooth: hci3: command tx timeout [ 1093.865774][T11643] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1093.865804][T11643] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1093.865922][T11643] vhci_hcd vhci_hcd.0: Device attached [ 1094.164542][ T8915] usb 40-1: SetAddress Request (6) to port 0 [ 1094.164575][ T8915] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 1094.164588][ T8915] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 8915, name: kworker/1:1 [ 1094.164603][ T8915] preempt_count: 0, expected: 0 [ 1094.164611][ T8915] RCU nest depth: 0, expected: 0 [ 1094.164635][ T8915] 6 locks held by kworker/1:1/8915: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1094.164657][ T8915] #0: ffff8881436c9138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1094.164972][ T8915] #1: ffffc90004af7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1094.165053][ T8915] #2: ffff8881467dd188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1094.165174][ T8915] #3: ffff8881467e95b8 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 1094.165218][ T8915] #4: ffff888028a90558 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 1094.165257][ T8915] #5: ffff888028b5b668 (&mbus->lock#2){+.+.}-{3:3}, at: mon_complete+0x5c/0x200 [ 1094.165379][ T8915] irq event stamp: 1452330 [ 1094.165414][ T8915] hardirqs last enabled at (1452329): [] _raw_spin_unlock_irqrestore+0x85/0x110 [ 1094.165539][ T8915] hardirqs last disabled at (1452330): [] vhci_urb_enqueue+0xb2c/0xe70 [ 1094.165627][ T8915] softirqs last enabled at (1450022): [] __local_bh_enable_ip+0x1a4/0x270 [ 1094.165665][ T8915] softirqs last disabled at (1450016): [] wg_packet_decrypt_worker+0xcd/0xce0 [ 1094.165852][ T8915] CPU: 1 UID: 0 PID: 8915 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1094.165875][ T8915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1094.165888][ T8915] Workqueue: usb_hub_wq hub_event [ 1094.165936][ T8915] Call Trace: [ 1094.165951][ T8915] [ 1094.166008][ T8915] dump_stack_lvl+0x189/0x250 [ 1094.166143][ T8915] ? wg_packet_decrypt_worker+0xcd/0xce0 [ 1094.166194][ T8915] ? wg_packet_decrypt_worker+0xcd/0xce0 [ 1094.166222][ T8915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1094.166250][ T8915] ? rtlock_slowlock_locked+0xd8/0x4010 [ 1094.166285][ T8915] ? print_lock_name+0xde/0x100 [ 1094.166316][ T8915] __might_resched+0x44b/0x5d0 [ 1094.166350][ T8915] ? __pfx___might_resched+0x10/0x10 [ 1094.166372][ T8915] ? mon_complete+0x5c/0x200 [ 1094.166398][ T8915] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1094.166437][ T8915] rt_spin_lock+0xc7/0x2c0 [ 1094.166464][ T8915] ? __pfx_rt_spin_lock+0x10/0x10 [ 1094.166486][ T8915] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1094.166510][ T8915] ? reacquire_held_locks+0x127/0x1d0 [ 1094.166603][ T8915] ? __pfx_migrate_enable+0x10/0x10 [ 1094.166659][ T8915] mon_complete+0x5c/0x200 [ 1094.166688][ T8915] __usb_hcd_giveback_urb+0x254/0x5e0 [ 1094.166722][ T8915] vhci_urb_enqueue+0xb4f/0xe70 [ 1094.166751][ T8915] ? __pfx_vhci_urb_enqueue+0x10/0x10 [ 1094.166773][ T8915] ? usb_hcd_map_urb_for_dma+0x3c1/0xd80 [ 1094.166806][ T8915] usb_hcd_submit_urb+0x320/0x1a80 [ 1094.166845][ T8915] usb_start_wait_urb+0x114/0x4c0 [ 1094.166899][ T8915] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1094.166923][ T8915] ? trace_kmalloc+0x1f/0xd0 [ 1094.167026][ T8915] usb_control_msg+0x232/0x3e0 [ 1094.167048][ T8915] hub_port_init+0xe24/0x2800 [ 1094.167085][ T8915] hub_event+0x2532/0x4a20 [ 1094.167148][ T8915] ? __pfx_hub_event+0x10/0x10 [ 1094.167165][ T8915] ? process_scheduled_works+0x9ef/0x17b0 [ 1094.167188][ T8915] ? _raw_spin_unlock_irq+0x23/0x50 [ 1094.167208][ T8915] ? process_scheduled_works+0x9ef/0x17b0 [ 1094.167224][ T8915] ? process_scheduled_works+0x9ef/0x17b0 [ 1094.167244][ T8915] process_scheduled_works+0xade/0x17b0 [ 1094.167292][ T8915] ? __pfx_process_scheduled_works+0x10/0x10 [ 1094.167326][ T8915] worker_thread+0x8a0/0xda0 [ 1094.167347][ T8915] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1094.167375][ T8915] ? __kthread_parkme+0x7b/0x200 [ 1094.167407][ T8915] kthread+0x70e/0x8a0 [ 1094.167431][ T8915] ? __pfx_worker_thread+0x10/0x10 [ 1094.167448][ T8915] ? __pfx_kthread+0x10/0x10 [ 1094.167472][ T8915] ? __rcu_read_unlock+0x84/0xe0 [ 1094.167544][ T8915] ? __pfx_kthread+0x10/0x10 [ 1094.167566][ T8915] ret_from_fork+0x3f9/0x770 [ 1094.167607][ T8915] ? __pfx_ret_from_fork+0x10/0x10 [ 1094.167631][ T8915] ? __switch_to_asm+0x39/0x70 [ 1094.167649][ T8915] ? __switch_to_asm+0x33/0x70 [ 1094.167661][ T8915] ? __pfx_kthread+0x10/0x10 [ 1094.167683][ T8915] ret_from_fork_asm+0x1a/0x30 [ 1094.167712][ T8915] [ 1094.168517][ T8915] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1094.821879][T11644] vhci_hcd: connection reset by peer [ 1094.830648][ T4538] vhci_hcd: stop threads [ 1094.830665][ T4538] vhci_hcd: release socket [ 1094.830891][ T4538] vhci_hcd: disconnect device [ 1095.755047][ T9786] Bluetooth: hci4: command tx timeout [ 1097.794703][ T13] bridge_slave_1: left allmulticast mode [ 1097.794731][ T13] bridge_slave_1: left promiscuous mode [ 1097.794935][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.866287][ T13] bridge_slave_0: left allmulticast mode [ 1097.866320][ T13] bridge_slave_0: left promiscuous mode [ 1097.866672][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.965773][ T13] bridge_slave_1: left allmulticast mode [ 1097.975058][ T13] bridge_slave_1: left promiscuous mode [ 1097.975327][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.025968][ T13] bridge_slave_0: left allmulticast mode [ 1098.026001][ T13] bridge_slave_0: left promiscuous mode [ 1098.026262][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.366042][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.465109][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.528725][ T13] bond0 (unregistering): Released all slaves [ 1098.755239][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.855202][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.928444][ T13] bond0 (unregistering): Released all slaves [ 1099.274684][ T8915] usb 40-1: device descriptor read/8, error -110 [ 1099.384529][ T13] hsr_slave_0: left promiscuous mode [ 1099.444479][ T13] hsr_slave_1: left promiscuous mode [ 1099.446513][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.505117][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1099.686000][ T8915] usb usb40-port1: attempt power cycle [ 1099.755991][ T13] hsr_slave_0: left promiscuous mode [ 1099.794430][ T13] hsr_slave_1: left promiscuous mode [ 1099.795432][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.843062][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.296865][ T8915] usb usb40-port1: unable to enumerate USB device [ 1100.395299][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1100.568295][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1101.714959][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1101.855152][ T13] team0 (unregistering): Port device team_slave_0 removed