last executing test programs: 8m42.401652611s ago: executing program 1 (id=14): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m37.313032881s ago: executing program 1 (id=22): socket$inet6(0xa, 0x3, 0xff) symlink(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000180)=ANY=[@ANYBLOB="00898afa94b7795766bd1671e3f75d28873bf49da412555d594b01f9f4ac5635c31999e549f5f8c4e69173d8d3094f54de6d7c7dd9063e1cabc20552041d17c8451ef6988071b125470a96f5dbc648004543642400ad15e70a084ea931b67d64"], 0x1, 0x378, &(0x7f0000000880)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 8m33.574491008s ago: executing program 1 (id=28): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000280)={0xa0, 0x24, 0x0, {{0x0, 0x2, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, r1, 0x0, 0x2, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',privport,access=', @ANYRESDEC=r1]) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14008, &(0x7f0000000380)={[{@bsdgroups}], [{@euid_gt={'euid>', r1}}, {@seclabel}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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") r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22020600) unshare(0x2c020400) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8800, &(0x7f0000000200)={0x5, 0x84, 0x100000}, 0x20) 8m32.927316271s ago: executing program 1 (id=32): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m31.761631183s ago: executing program 1 (id=34): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000003c0)=""/193, 0x2a, 0xc1, 0x0, 0x10}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f00000000c0)='./file1\x00', 0x0, 0x10, r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007000000"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000040), &(0x7f0000000080)=r8}, 0x20) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) unshare(0x62040200) 8m28.277460922s ago: executing program 0 (id=40): socket$inet6(0xa, 0x3, 0xff) symlink(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000180)=ANY=[@ANYBLOB="00898afa94b7795766bd1671e3f75d28873bf49da412555d594b01f9f4ac5635c31999e549f5f8c4e69173d8d3094f54de6d7c7dd9063e1cabc20552041d17c8451ef6988071b125470a96f5dbc648004543642400ad15e70a084ea931b67d64"], 0x1, 0x378, &(0x7f0000000880)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 8m26.079212725s ago: executing program 1 (id=44): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=") 8m25.795618682s ago: executing program 0 (id=46): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m24.572633816s ago: executing program 0 (id=50): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 8m24.225884458s ago: executing program 0 (id=52): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 8m23.173189324s ago: executing program 0 (id=54): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 8m21.711063048s ago: executing program 0 (id=57): signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xd12]}, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={0x0, 0x18}}, 0x40) r6 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x60) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) 8m10.639266399s ago: executing program 32 (id=44): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") 8m5.847629513s ago: executing program 33 (id=57): signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xd12]}, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={0x0, 0x18}}, 0x40) r6 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x60) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) 6m21.938214958s ago: executing program 3 (id=266): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x20, 0xd, 0x10, {0x10, 0xe, "28b0af7716d1e09fb78479ec0419"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6m18.832298228s ago: executing program 3 (id=273): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, 0x0, 0x0}, 0x94) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in=@dev}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x814080, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000180)=';', 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/28, 0x1c}}], 0x1, 0x12141, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 6m17.487759142s ago: executing program 3 (id=275): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x80000002, 0x4) 6m17.183976025s ago: executing program 3 (id=276): memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa1\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x88m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x223a, &(0x7f00000002c0)=ANY=[], 0x0) 6m16.857689605s ago: executing program 3 (id=277): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x8002}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000004}, 0x4048040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d000000000000010902240001000000000904800001030000000921000000012205000905810300000000"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0xb, 'V'}]}}, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB='.wfu`o=', @ANYRESHEX=r5, @ANYBLOB=',version=9p2000.u,msize=0x0000000000000001,cachetag=GPL\x00,\x00']) 6m14.803469522s ago: executing program 3 (id=283): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1000, &(0x7f00000003c0)={[{@auto_da_alloc}, {@i_version}, {@noblock_validity}, {@block_validity}, {@inlinecrypt}, {@dax_never}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@errors_remount}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) request_key(0x0, &(0x7f0000000b00)={'syz', 0x0}, &(0x7f0000000b40)='@\x00', 0xffffffffffffffff) 5m59.337588846s ago: executing program 34 (id=283): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1000, &(0x7f00000003c0)={[{@auto_da_alloc}, {@i_version}, {@noblock_validity}, {@block_validity}, {@inlinecrypt}, {@dax_never}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@errors_remount}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) request_key(0x0, &(0x7f0000000b00)={'syz', 0x0}, &(0x7f0000000b40)='@\x00', 0xffffffffffffffff) 1m59.094731172s ago: executing program 8 (id=877): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) unshare(0x60400) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000), 0x3, 0x453, &(0x7f0000000440)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0xe0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0xffff7ffffffffbff, 0xa, 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1m36.208390266s ago: executing program 8 (id=877): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) unshare(0x60400) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000), 0x3, 0x453, &(0x7f0000000440)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0xe0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0xffff7ffffffffbff, 0xa, 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1m11.688626739s ago: executing program 8 (id=877): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) unshare(0x60400) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000), 0x3, 0x453, &(0x7f0000000440)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0xe0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0xffff7ffffffffbff, 0xa, 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 49.5175601s ago: executing program 8 (id=877): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) unshare(0x60400) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000), 0x3, 0x453, &(0x7f0000000440)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0xe0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0xffff7ffffffffbff, 0xa, 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 26.197919517s ago: executing program 8 (id=877): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) unshare(0x60400) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000), 0x3, 0x453, &(0x7f0000000440)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0xe0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0xffff7ffffffffbff, 0xa, 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 7.888142431s ago: executing program 5 (id=1629): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6, 0x8}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 7.645361243s ago: executing program 5 (id=1632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c80c) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0xb, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 7.644345427s ago: executing program 4 (id=1633): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000a700000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 7.153395093s ago: executing program 4 (id=1635): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 7.064586535s ago: executing program 5 (id=1637): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x38, &(0x7f0000001640)=""/170, &(0x7f0000001700)=0xaa) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x501c6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x2}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r3, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r0, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001d80)={'geneve0\x00', &(0x7f0000001d40)=@ethtool_cmd={0xa}}) sendmsg$802154_raw(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x24}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000001030101000002000000000000000000"], 0x20}}, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) connect$netrom(r8, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r12, @ANYBLOB="080003"], 0x44}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getchain={0x34, 0x66, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xf, 0x1}, {0xc, 0xe}, {0x4, 0x4}}, [{0x8, 0xb, 0x1d98ddb0}, {0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8401) 6.829908529s ago: executing program 4 (id=1639): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020", @ANYRES8=r0], 0x7c}}, 0x0) 5.548847618s ago: executing program 5 (id=1642): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88821000000140012800b00", @ANYRES32], 0x44}}, 0x8000) 5.370736594s ago: executing program 2 (id=1643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket(0x10, 0x4, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x258}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) 5.370143488s ago: executing program 4 (id=1644): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.014060889s ago: executing program 4 (id=1646): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc40102030109021200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 4.801807218s ago: executing program 2 (id=1648): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000a700000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 4.332945392s ago: executing program 2 (id=1651): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 4.282016317s ago: executing program 7 (id=1652): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0cfebdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9234751", 0x81}], 0x1}, 0x0) 4.243342035s ago: executing program 6 (id=1653): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 4.057845574s ago: executing program 7 (id=1654): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x40, r2, 0x411, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0410b8a84c022d6d4664ad56e3086180"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_ID={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) 3.977516471s ago: executing program 2 (id=1655): socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x4a}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000700)={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300)={r2, 0x400}, 0x8) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, r3, 0x1, 0x7}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x0, 0x0, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 3.679667367s ago: executing program 2 (id=1656): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$eJzs281vG0UbAPBn7SR9+/FSU5WPpgUCBRHxkTRpKT1wAYHEASQkOJRjSNIq1G1QEyRaRRAQKkdUiTviiMRfwAkuCDghcYU7qlShXFrgYrTZ3cR27LQOTlzw7ydtMrM7zszj3bFnZ7IB9K2R9EcSsS8ifomI/Vm2scBI9uvmytL0HytL00nUaq//nqyWu7GyNF0ULV63t8gMRJQ+TuJwi3oXLl0+N1Wtzl7M8+OL598ZX7h0+em581NnZ8/OXpg8derE8YlnT04+05U407huDL8/f+TQy29efXX69NW3fvgqKeJviqNLRjY7+Fit1uXqeuv/delkoIcNoSPlrJvG4Gr/3x/lWD95++Olj3raOGBb1Wq12r3tDy/XgP+wJHrdAqA3ii/69P632HZo6HFHuP58dgOUxn0z37IjA1HKyww23d9200hEnF7+8/N0i+2ZhwAAaPBNOv55Kh//NSz8lKJ+XuiufA2lEhF3R8SBiDgZEQcj4p6I1bL3RcT9HdbfvEiycfxTutbhn+xIOv57Ll/bahz/FaO/qJQj/iqGy5UYTM7MVWeP5e/JaAzuSvMTm9Tx7Ys/f9ruWP34L93S+ouxYN6OawO7Gl8zM7U49U9irnf9w4jhgVbxJ2srAellcSgihrdYx9wTXx5pd+zW8Tcaqs90YZ2p9kXE49n5X46m+AvJ5uuT4/+L6uyx8eKq2OjHn6681q7+TuPvtvT872l5/a/FX0nq12sXOq/jyq+ftL2n2er1P5S80bDvvanFxYsTEUPJK1mj6/dPNpWbXC+fxj96tHX/PxDr78ThiEgv4gci4sGIeChv+8MR8UhEHN0k/u9fePTtxj1JB/FvrzT+mY7O/3piKJr3tE6Uz333dUOllegg/vT8n1hNjeZ7bufz73batbWrGQAAAP59ShGxL5LS2Fq6VBoby/6H/2DsKVXnFxafPDP/7oWZ7BmBSgyWipmubD44mw+dyG/ri/xkU/54Pm/8WXn3an5ser460+vgoc/tbdP/U7+Ve906YNt5Xgv6l/4P/Uv/h/6l/0P/atH/d/eiHcDOa/X9/0EP2gHsvKb+b9kP+oj7f+hf+j/0L/0f+tLC7rj1Q/ISEhsSUbojmiGxTYlefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD///1B6is=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x800003d, 0x7ff) 3.621161064s ago: executing program 8 (id=877): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) unshare(0x60400) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000), 0x3, 0x453, &(0x7f0000000440)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0xe0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0xffff7ffffffffbff, 0xa, 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 3.480602583s ago: executing program 7 (id=1657): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000009c0)={'nr0\x00'}) 1.304812426s ago: executing program 7 (id=1658): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000000000000a004e2200000001ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000a009d8400000002fe8000000000000000000000000000bbc90d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000002fe8000000000000000000000000000bb"], 0x510) close_range(r0, 0xffffffffffffffff, 0x0) 1.295825724s ago: executing program 6 (id=1659): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.293540617s ago: executing program 2 (id=1660): syz_open_procfs(0x0, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) 1.29263715s ago: executing program 4 (id=1661): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e0023000069"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x20, 0x13, 0x3, "9f9fd3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.292143004s ago: executing program 5 (id=1662): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.038564709s ago: executing program 5 (id=1663): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.037733486s ago: executing program 7 (id=1664): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2}, 0x94) 1.012808769s ago: executing program 6 (id=1665): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000a700000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 737.118355ms ago: executing program 7 (id=1666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x12, 0x600, 0x0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @inet=@rpfilter={{0x28}, {0x397d920994752ccb}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x1, 0x1}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r9, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 410.118058ms ago: executing program 6 (id=1667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) 137.850699ms ago: executing program 6 (id=1668): close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) 0s ago: executing program 6 (id=1669): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) kernel console output (not intermixed with test programs): rameter 'seclabel' [ 429.378363][ T10] usb 9-1: f81534a converter now attached to ttyUSB0 [ 429.630593][ T8692] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 429.790770][ T5956] usb 9-1: USB disconnect, device number 5 [ 429.834713][ T5956] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 429.888722][ T5956] f81232 9-1:0.0: device disconnected [ 429.960650][ T48] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 430.182409][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 430.211916][ T48] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 430.221467][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.232822][ T48] usb 3-1: config 0 descriptor?? [ 430.242218][ T48] hub 3-1:0.0: USB hub found [ 430.445629][ T48] hub 3-1:0.0: 1 port detected [ 431.215505][ T8721] netlink: 56 bytes leftover after parsing attributes in process `syz.6.681'. [ 431.313328][ T55] usb 3-1: USB disconnect, device number 8 [ 431.324577][ T48] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 432.159237][ T8741] netlink: 'syz.8.689': attribute type 1 has an invalid length. [ 432.181609][ T8741] netlink: 224 bytes leftover after parsing attributes in process `syz.8.689'. [ 432.231825][ T48] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 432.408508][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.460479][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.477498][ T48] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 432.534910][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.606987][ T48] usb 5-1: config 0 descriptor?? [ 433.059773][ T48] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x3 [ 433.141317][ T48] hid-picolcd 0003:04D8:C002.000B: No report with id 0x11 found [ 433.187591][ T8760] Bluetooth: MGMT ver 1.23 [ 433.352134][ T8758] netlink: 'syz.6.696': attribute type 1 has an invalid length. [ 433.360574][ T8758] netlink: 236 bytes leftover after parsing attributes in process `syz.6.696'. [ 435.414501][ T48] usb 5-1: USB disconnect, device number 11 [ 435.819064][ T8794] loop4: detected capacity change from 0 to 256 [ 436.240701][ T8798] ip6t_rpfilter: unknown options [ 438.679929][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 438.803173][ C1] Unknown status report in ack skb [ 440.885593][ T8839] loop5: detected capacity change from 0 to 256 [ 443.323881][ T8862] netlink: 'syz.8.734': attribute type 10 has an invalid length. [ 443.358560][ T8862] netlink: 2 bytes leftover after parsing attributes in process `syz.8.734'. [ 443.433980][ T8862] team0: entered promiscuous mode [ 443.454937][ T8862] team_slave_0: entered promiscuous mode [ 443.478162][ T8862] team_slave_1: entered promiscuous mode [ 443.510937][ T8862] bridge0: port 3(team0) entered blocking state [ 443.550737][ T8862] bridge0: port 3(team0) entered disabled state [ 443.572671][ T8862] team0: entered allmulticast mode [ 443.587758][ T8862] team_slave_0: entered allmulticast mode [ 443.607352][ T8862] team_slave_1: entered allmulticast mode [ 443.666804][ T8862] bridge0: port 3(team0) entered blocking state [ 443.673819][ T8862] bridge0: port 3(team0) entered forwarding state [ 445.930181][ T8890] netlink: 16 bytes leftover after parsing attributes in process `syz.6.742'. [ 446.201004][ T8894] loop8: detected capacity change from 0 to 256 [ 447.520418][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 447.631254][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.8.748'. [ 447.741123][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 447.761173][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.769210][ T10] usb 3-1: Product: syz [ 447.786582][ T8909] netlink: 'syz.5.749': attribute type 25 has an invalid length. [ 447.829408][ T10] usb 3-1: Manufacturer: syz [ 447.839465][ T8909] netlink: 'syz.5.749': attribute type 1 has an invalid length. [ 447.848774][ T10] usb 3-1: SerialNumber: syz [ 447.874925][ T10] usb 3-1: config 0 descriptor?? [ 447.885782][ T8909] bridge0: port 1(bridge_slave_0) entered learning state [ 447.909680][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 447.930884][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 447.963559][ T10] f81232 3-1:0.0: f81534a converter detected [ 448.093520][ T10] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 448.119366][ T10] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 448.207835][ T10] usb 3-1: USB disconnect, device number 9 [ 448.225949][ T10] f81232 3-1:0.0: device disconnected [ 448.260475][ T55] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 448.435158][ T55] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 448.452200][ T55] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.470625][ T55] usb 9-1: Product: syz [ 448.481206][ T55] usb 9-1: Manufacturer: syz [ 448.487007][ T55] usb 9-1: SerialNumber: syz [ 448.504796][ T55] usb 9-1: config 0 descriptor?? [ 448.574659][ T55] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 449.660282][ T55] gspca_sonixj: reg_w1 err -71 [ 449.740488][ T55] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 449.740494][ T5956] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 449.771954][ T55] usb 9-1: USB disconnect, device number 6 [ 449.903198][ T5956] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 449.935228][ T5956] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.970693][ T5956] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 449.989963][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 450.010184][ T5956] usb 3-1: Product: syz [ 450.025498][ T5956] usb 3-1: Manufacturer: syz [ 450.030126][ T5956] usb 3-1: SerialNumber: syz [ 450.424522][ T8947] netlink: 24 bytes leftover after parsing attributes in process `syz.8.762'. [ 450.764842][ T10] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 450.970495][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 451.000126][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.017959][ T10] usb 6-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 451.040268][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.073386][ T8960] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.080834][ T8960] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.083150][ T10] usb 6-1: config 0 descriptor?? [ 451.366411][ T5928] hid-generic 0005:046D:0A0E.000C: collection stack underflow [ 451.390599][ T5928] hid-generic 0005:046D:0A0E.000C: item 0 0 0 12 parsing failed [ 451.408280][ T5928] hid-generic 0005:046D:0A0E.000C: probe with driver hid-generic failed with error -22 [ 451.419064][ T8960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.451397][ T8960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.538267][ T10] hid-generic 0003:04F3:0754.000D: failed to start in urb: -90 [ 451.589590][ T10] hid-generic 0003:04F3:0754.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.5-1/input0 [ 451.945412][ T8960] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.006302][ T8960] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.024582][ T8960] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.041715][ T8960] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.251520][ T8959] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.261071][ T8959] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.271262][ T8959] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.280000][ T8959] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.298944][ T8959] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 452.379168][ T55] usb 6-1: USB disconnect, device number 12 [ 452.487022][ T6016] usb 3-1: USB disconnect, device number 10 [ 452.752287][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.777'. [ 452.857819][ T8996] netlink: 28 bytes leftover after parsing attributes in process `syz.2.777'. [ 452.884402][ T10] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 453.024031][ T8995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 453.033264][ T8995] bond1: (slave bond2): Enslaving as an active interface with an up link [ 453.083945][ T8996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.110545][ T10] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 453.144564][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.182035][ T10] usb 8-1: Product: syz [ 453.186249][ T10] usb 8-1: Manufacturer: syz [ 453.194101][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.778'. [ 453.216366][ T10] usb 8-1: SerialNumber: syz [ 453.239686][ T10] usb 8-1: config 0 descriptor?? [ 453.269902][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 453.434644][ T9006] netlink: 120 bytes leftover after parsing attributes in process `syz.2.781'. [ 453.446852][ T9002] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 453.447331][ T9005] netlink: 'syz.8.780': attribute type 4 has an invalid length. [ 453.622423][ T9002] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 454.873788][ T10] gspca_sonixj: reg_w1 err -71 [ 455.430601][ T9021] Driver unsupported XDP return value 0 on prog (id 318) dev N/A, expect packet loss! [ 455.710638][ T10] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 455.755911][ T10] usb 8-1: USB disconnect, device number 6 [ 455.909515][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.7.789'. [ 456.172663][ T5936] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 456.359600][ T9038] netlink: 'syz.4.793': attribute type 3 has an invalid length. [ 456.388886][ T5936] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 456.419758][ T5936] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 456.469164][ T5936] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 456.484641][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 456.513303][ T5936] usb 3-1: Product: syz [ 456.517510][ T5936] usb 3-1: Manufacturer: syz [ 456.558382][ T5936] usb 3-1: SerialNumber: syz [ 457.907494][ T3086] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 458.004025][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.805'. [ 458.034204][ T9072] netlink: 40 bytes leftover after parsing attributes in process `syz.4.805'. [ 458.160444][ T3086] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 458.175036][ T3086] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.199297][ T3086] usb 6-1: Product: syz [ 458.220441][ T3086] usb 6-1: Manufacturer: syz [ 458.236897][ T3086] usb 6-1: SerialNumber: syz [ 458.276847][ T3086] usb 6-1: config 0 descriptor?? [ 458.329806][ T9076] loop6: detected capacity change from 0 to 512 [ 458.334687][ T3086] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 458.369712][ T9076] EXT4-fs: Ignoring removed i_version option [ 458.398942][ T9076] EXT4-fs: Ignoring removed mblk_io_submit option [ 458.442739][ T9076] ext4: Unknown parameter 'seclabel' [ 458.957280][ T10] usb 3-1: USB disconnect, device number 11 [ 459.346494][ T3086] gspca_sonixj: reg_w1 err -71 [ 459.461978][ T3086] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 459.475778][ T9092] netlink: 'syz.6.813': attribute type 13 has an invalid length. [ 459.508752][ T3086] usb 6-1: USB disconnect, device number 13 [ 459.510619][ T9092] netlink: 'syz.6.813': attribute type 17 has an invalid length. [ 459.621270][ T9092] gretap0: refused to change device tx_queue_len [ 459.628205][ T9092] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 461.159836][ T9116] loop2: detected capacity change from 0 to 512 [ 461.182319][ T9116] EXT4-fs: Ignoring removed i_version option [ 461.188350][ T9116] EXT4-fs: Ignoring removed mblk_io_submit option [ 461.247160][ T9116] ext4: Unknown parameter 'seclabel' [ 461.948548][ T9130] syzkaller0: entered promiscuous mode [ 461.954402][ T9130] syzkaller0: entered allmulticast mode [ 462.000963][ T5857] Bluetooth: hci5: command 0x0406 tx timeout [ 462.051006][ T9136] netlink: 'syz.4.832': attribute type 39 has an invalid length. [ 463.896298][ T9149] netlink: 24 bytes leftover after parsing attributes in process `syz.7.838'. [ 464.648098][ T9170] syz.8.843 uses obsolete (PF_INET,SOCK_PACKET) [ 465.030530][ T55] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 465.210414][ T55] usb 6-1: Using ep0 maxpacket: 16 [ 465.227265][ T55] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 465.235739][ T55] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 465.248121][ T55] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 465.271761][ T55] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 465.280000][ T55] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 465.316657][ T55] usb 6-1: config 0 has no interface number 0 [ 465.330633][ T55] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 465.350400][ T55] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 465.370499][ T55] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 465.400417][ T55] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 465.420412][ T55] usb 6-1: config 0 interface 125 has no altsetting 0 [ 465.427228][ T55] usb 6-1: config 0 interface 125 has no altsetting 2 [ 465.462779][ T55] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 465.480382][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.488409][ T55] usb 6-1: Product: syz [ 465.510383][ T55] usb 6-1: Manufacturer: syz [ 465.515018][ T55] usb 6-1: SerialNumber: syz [ 465.533280][ T55] usb 6-1: config 0 descriptor?? [ 465.547408][ T55] usb 6-1: selecting invalid altsetting 2 [ 466.063831][ T9156] bridge_slave_0: left allmulticast mode [ 466.069691][ T9156] bridge_slave_0: left promiscuous mode [ 466.092437][ T9156] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.133843][ T9156] bridge_slave_1: left allmulticast mode [ 466.139558][ T9156] bridge_slave_1: left promiscuous mode [ 466.152667][ T9156] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.221426][ T9156] bond0: (slave bond_slave_0): Releasing backup interface [ 466.275681][ T9156] bond0: (slave bond_slave_1): Releasing backup interface [ 466.280249][ T9177] Bluetooth: MGMT ver 1.23 [ 466.323120][ T9156] team0: Port device team_slave_0 removed [ 466.353877][ T9156] team0: Port device team_slave_1 removed [ 466.364810][ C1] usb 6-1: async_complete: urb error -71 [ 466.366999][ T9156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.375813][ T55] get_1284_register: usb error -71 [ 466.391012][ T9156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.398407][ T55] uss720 6-1:0.125: probe with driver uss720 failed with error -71 [ 466.421686][ T55] usb 6-1: USB disconnect, device number 14 [ 466.460067][ T9156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.490496][ T9156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.549178][ T9180] loop6: detected capacity change from 0 to 512 [ 466.559467][ T9180] EXT4-fs: Ignoring removed i_version option [ 466.579288][ T9156] bond0: (slave vxlan0): Releasing backup interface [ 466.594942][ T9180] EXT4-fs: Ignoring removed mblk_io_submit option [ 466.612500][ T9180] ext4: Unknown parameter 'seclabel' [ 466.623567][ T9156] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.633318][ T9156] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.642470][ T9156] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.651595][ T9156] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.825449][ T9170] netlink: 550 bytes leftover after parsing attributes in process `syz.8.843'. [ 467.496299][ T9178] loop4: detected capacity change from 0 to 40427 [ 467.612150][ T9178] F2FS-fs (loop4): invalid crc value [ 467.884042][ T9205] loop7: detected capacity change from 0 to 256 [ 468.185086][ T9178] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 470.303870][ T3086] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 470.327324][ T9229] loop5: detected capacity change from 0 to 512 [ 470.384162][ T9229] EXT4-fs: Ignoring removed i_version option [ 470.415904][ T9229] EXT4-fs: Ignoring removed mblk_io_submit option [ 470.464143][ T9229] ext4: Unknown parameter 'seclabel' [ 470.521377][ T3086] usb 7-1: Using ep0 maxpacket: 16 [ 470.553804][ T3086] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 470.628094][ T3086] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 470.699903][ T3086] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 470.811450][ T3086] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 470.832978][ T3086] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 470.853768][ T3086] usb 7-1: config 0 has no interface number 0 [ 470.864950][ T3086] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 470.879242][ T3086] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 470.940014][ T3086] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 470.976067][ T3086] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 471.022382][ T3086] usb 7-1: config 0 interface 125 has no altsetting 0 [ 471.048931][ T3086] usb 7-1: config 0 interface 125 has no altsetting 2 [ 471.072672][ T3086] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 471.250177][ T3086] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.267617][ T3086] usb 7-1: Product: syz [ 471.272046][ T3086] usb 7-1: Manufacturer: syz [ 471.276673][ T3086] usb 7-1: SerialNumber: syz [ 471.301612][ T3086] usb 7-1: config 0 descriptor?? [ 471.325982][ T3086] usb 7-1: selecting invalid altsetting 2 [ 471.966164][ T9253] netlink: 36 bytes leftover after parsing attributes in process `syz.5.875'. [ 472.044226][ T7618] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.134229][ C0] usb 7-1: async_complete: urb error -71 [ 472.141788][ T3086] get_1284_register: usb error -71 [ 472.147084][ T3086] uss720 7-1:0.125: probe with driver uss720 failed with error -71 [ 472.161258][ T5857] Bluetooth: hci0: command 0x0406 tx timeout [ 472.175137][ T3086] usb 7-1: USB disconnect, device number 5 [ 472.314995][ T7618] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.414947][ T7618] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.879531][ T7618] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.380758][ T5936] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 474.786649][ T5936] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 474.859401][ T5936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.900423][ T5936] usb 8-1: Product: syz [ 474.904626][ T5936] usb 8-1: Manufacturer: syz [ 474.948292][ T5936] usb 8-1: SerialNumber: syz [ 474.978642][ T7618] team0: left allmulticast mode [ 474.987982][ T5936] usb 8-1: config 0 descriptor?? [ 475.002536][ T7618] team_slave_0: left allmulticast mode [ 475.014195][ T9284] netlink: 120 bytes leftover after parsing attributes in process `syz.6.885'. [ 475.016072][ T5936] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 475.051572][ T7618] team_slave_1: left allmulticast mode [ 475.087181][ T7618] bridge0: port 3(team0) entered disabled state [ 475.136365][ T7618] bridge_slave_1: left allmulticast mode [ 475.145186][ T7618] bridge_slave_1: left promiscuous mode [ 475.180695][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.261292][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 475.283277][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 475.294633][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 475.298335][ T7618] bridge_slave_0: left allmulticast mode [ 475.327671][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 475.341033][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 475.371581][ T7618] bridge_slave_0: left promiscuous mode [ 475.380430][ T9291] block nbd5: not configured, cannot reconfigure [ 475.420751][ T7618] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.878372][ T5936] gspca_sonixj: reg_r err -32 [ 475.884889][ T5936] sonixj 8-1:0.0: probe with driver sonixj failed with error -32 [ 475.943194][ T5936] usb 8-1: USB disconnect, device number 7 [ 475.980061][ T9301] loop6: detected capacity change from 0 to 256 [ 477.457853][ T5857] Bluetooth: hci1: command tx timeout [ 477.675168][ T7618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.707762][ T7618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.759544][ T7618] bond0 (unregistering): Released all slaves [ 478.601215][ T9336] netlink: 'syz.7.904': attribute type 1 has an invalid length. [ 478.620797][ T9336] netlink: 236 bytes leftover after parsing attributes in process `syz.7.904'. [ 479.521646][ T5857] Bluetooth: hci1: command tx timeout [ 480.406278][ T7618] hsr_slave_0: left promiscuous mode [ 480.421551][ T7618] hsr_slave_1: left promiscuous mode [ 480.447301][ T7618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.466002][ T7618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.486889][ T7618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.515421][ T7618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.629737][ T7618] veth1_macvtap: left promiscuous mode [ 480.653555][ T7618] veth0_macvtap: left promiscuous mode [ 480.659308][ T7618] veth1_vlan: left promiscuous mode [ 480.679111][ T7618] veth0_vlan: left promiscuous mode [ 480.940018][ T9342] loop5: detected capacity change from 0 to 40427 [ 480.963842][ T9342] F2FS-fs (loop5): invalid crc value [ 481.250879][ T9342] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 481.600974][ T5857] Bluetooth: hci1: command tx timeout [ 482.331685][ T7618] team_slave_1 (unregistering): left promiscuous mode [ 482.346946][ T7618] team0 (unregistering): Port device team_slave_1 removed [ 482.392444][ T7618] team_slave_0 (unregistering): left promiscuous mode [ 482.406302][ T7618] team0 (unregistering): Port device team_slave_0 removed [ 483.104096][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.917'. [ 483.175386][ T9385] netlink: 'syz.5.917': attribute type 1 has an invalid length. [ 483.209278][ T9385] netlink: 208 bytes leftover after parsing attributes in process `syz.5.917'. [ 483.750482][ T5857] Bluetooth: hci1: command tx timeout [ 484.350924][ T9394] netlink: 'syz.4.920': attribute type 1 has an invalid length. [ 484.364842][ T9394] netlink: 236 bytes leftover after parsing attributes in process `syz.4.920'. [ 484.617360][ T9288] chnl_net:caif_netlink_parms(): no params data found [ 484.860421][ T5936] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 484.982546][ T9417] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14 [ 485.050535][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 485.066280][ T5936] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 485.095499][ T5936] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 485.114538][ T5936] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 485.134359][ T5936] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 485.171117][ T5936] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 485.180035][ T5936] usb 3-1: config 0 has no interface number 0 [ 485.196780][ T5936] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 485.208389][ T5936] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 485.218799][ T5936] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 485.229058][ T5936] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.243523][ T5936] usb 3-1: config 0 interface 125 has no altsetting 0 [ 485.251486][ T5936] usb 3-1: config 0 interface 125 has no altsetting 2 [ 485.261835][ T5936] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 485.290779][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.302375][ T5936] usb 3-1: Product: syz [ 485.306742][ T5936] usb 3-1: Manufacturer: syz [ 485.311491][ T5936] usb 3-1: SerialNumber: syz [ 485.325892][ T9288] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.362497][ T5936] usb 3-1: config 0 descriptor?? [ 485.370812][ T9288] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.378087][ T9288] bridge_slave_0: entered allmulticast mode [ 485.392408][ T5936] usb 3-1: selecting invalid altsetting 2 [ 485.421900][ T9288] bridge_slave_0: entered promiscuous mode [ 485.470120][ T9288] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.497868][ T9288] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.516706][ T9288] bridge_slave_1: entered allmulticast mode [ 485.536497][ T9288] bridge_slave_1: entered promiscuous mode [ 485.794346][ T9288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.825622][ T9288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.118869][ T9288] team0: Port device team_slave_0 added [ 486.154091][ T9288] team0: Port device team_slave_1 added [ 486.203309][ C1] usb 3-1: async_complete: urb error -71 [ 486.212214][ T5936] get_1284_register: usb error -71 [ 486.217457][ T5936] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 486.250713][ T5936] usb 3-1: USB disconnect, device number 12 [ 486.419760][ T9288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.439141][ T9288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.493447][ T9288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.617627][ T9288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.640755][ T9288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.741988][ T9288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.121002][ T9288] hsr_slave_0: entered promiscuous mode [ 487.144202][ T9288] hsr_slave_1: entered promiscuous mode [ 487.178881][ T9288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.219507][ T9288] Cannot create hsr debugfs directory [ 487.246290][ T9472] veth0_to_team: entered promiscuous mode [ 487.294253][ T9472] veth0_to_team: entered allmulticast mode [ 489.123600][ T9500] tipc: Started in network mode [ 489.151220][ T9500] tipc: Node identity badfc3bd29f1, cluster identity 4711 [ 489.172495][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.960'. [ 489.183645][ T9500] tipc: Enabled bearer , priority 0 [ 489.204118][ T9508] netlink: 28 bytes leftover after parsing attributes in process `syz.5.961'. [ 489.264931][ T9502] syzkaller0: entered promiscuous mode [ 489.283377][ T9502] syzkaller0: entered allmulticast mode [ 489.320293][ T9503] dummy0: entered promiscuous mode [ 489.355907][ T9503] dummy0: left promiscuous mode [ 489.572897][ T9502] tipc: Resetting bearer [ 489.625715][ T9499] tipc: Resetting bearer [ 489.752933][ T9499] tipc: Disabling bearer [ 490.403294][ T9288] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 490.473659][ T9288] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 490.535225][ T9288] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 490.655338][ T9288] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 490.894347][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.970'. [ 491.389834][ T9288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.005343][ T9288] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.124872][ T7621] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.132126][ T7621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.242932][ T7621] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.250120][ T7621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.830828][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.6.980'. [ 493.298013][ T9288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.860050][ T9585] IPVS: Scheduler module ip_vs_sip not found [ 495.693009][ T9611] netlink: 32 bytes leftover after parsing attributes in process `syz.7.992'. [ 496.410036][ T9288] veth0_vlan: entered promiscuous mode [ 496.483760][ T9288] veth1_vlan: entered promiscuous mode [ 496.532009][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1001'. [ 496.613339][ T9288] veth0_macvtap: entered promiscuous mode [ 496.669984][ T9288] veth1_macvtap: entered promiscuous mode [ 496.999661][ T9288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.013174][ T9288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.040274][ T9645] loop7: detected capacity change from 0 to 256 [ 497.916274][ T9288] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.932492][ T9288] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.035168][ T9288] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.822005][ T9288] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.037594][ T7620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.090622][ T7620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.289687][ T7618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.339408][ T7618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.677933][ T9707] loop5: detected capacity change from 0 to 256 [ 503.762868][ T7601] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.931630][ T9721] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1030'. [ 504.041525][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1031'. [ 504.164301][ T7601] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.422453][ T7601] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.559945][ T7601] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.204346][ T7601] bridge_slave_1: left allmulticast mode [ 505.260268][ T7601] bridge_slave_1: left promiscuous mode [ 505.282876][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.340433][ T5936] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 505.389262][ T7601] bridge_slave_0: left allmulticast mode [ 505.428158][ T7601] bridge_slave_0: left promiscuous mode [ 505.461646][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.539610][ T5936] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.570265][ T5936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 505.610361][ T5936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 505.671564][ T5936] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 505.758212][ T5936] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 505.790445][ T5936] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 505.845627][ T5936] usb 8-1: Manufacturer: syz [ 506.124712][ T5936] usb 8-1: config 0 descriptor?? [ 506.247966][ T9773] ip6t_rpfilter: unknown options [ 507.002111][ T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 507.030931][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 507.052643][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 507.061771][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 507.072451][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 507.091259][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 507.250419][ T5936] rc_core: IR keymap rc-hauppauge not found [ 507.266649][ T5936] Registered IR keymap rc-empty [ 507.275236][ T5936] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 507.284294][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1048'. [ 507.293404][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 507.305332][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.313867][ T10] usb 5-1: Product: syz [ 507.318113][ T10] usb 5-1: Manufacturer: syz [ 507.319869][ T5936] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 507.322792][ T10] usb 5-1: SerialNumber: syz [ 507.353367][ T10] usb 5-1: config 0 descriptor?? [ 507.366101][ T5936] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 507.371384][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 507.402973][ T5936] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input15 [ 507.433323][ T5936] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 507.470719][ T5936] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 507.499841][ T5936] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 507.530513][ T5936] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 507.550497][ T5936] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 507.570611][ T5936] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 507.600664][ T5936] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 507.780760][ T5936] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 507.800454][ T5936] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 507.820813][ T5936] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 507.838053][ T7601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.844460][ T5936] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 507.855941][ T5936] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 507.874467][ T5936] usb 8-1: USB disconnect, device number 8 [ 507.889542][ T7601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.912845][ T7601] bond0 (unregistering): Released all slaves [ 508.196210][ T10] gspca_sonixj: reg_r err -32 [ 508.210641][ T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 508.273291][ T10] usb 5-1: USB disconnect, device number 12 [ 509.094581][ T9805] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1056'. [ 509.203199][ T5869] Bluetooth: hci1: command tx timeout [ 509.211015][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 509.282145][ T7601] hsr_slave_0: left promiscuous mode [ 509.299751][ T7601] hsr_slave_1: left promiscuous mode [ 509.321951][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.357045][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.397247][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.401681][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 509.423617][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.429718][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 509.458731][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 509.475724][ T7601] veth1_macvtap: left promiscuous mode [ 509.481958][ T7601] veth0_macvtap: left promiscuous mode [ 509.490605][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 509.492074][ T7601] veth1_vlan: left promiscuous mode [ 509.505842][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 509.521549][ T10] usb 8-1: Product: syz [ 509.523004][ T7601] veth0_vlan: left promiscuous mode [ 509.535118][ T10] usb 8-1: Manufacturer: syz [ 509.540171][ T10] usb 8-1: SerialNumber: syz [ 509.548849][ T9816] netlink: 'syz.5.1058': attribute type 39 has an invalid length. [ 509.799583][ T10] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 510.035212][ T10] usb 8-1: USB disconnect, device number 9 [ 510.068934][ T10] usblp0: removed [ 510.910890][ T5936] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 511.013556][ T7601] team0 (unregistering): Port device team_slave_1 removed [ 511.086552][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.101064][ T7601] team0 (unregistering): Port device team_slave_0 removed [ 511.108857][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 511.133977][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 511.144382][ T5936] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 511.178039][ T5936] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 511.187752][ T5936] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 511.203549][ T5936] usb 3-1: Manufacturer: syz [ 511.226292][ T5936] usb 3-1: config 0 descriptor?? [ 511.280677][ T5869] Bluetooth: hci1: command tx timeout [ 511.532488][ T5936] rc_core: IR keymap rc-hauppauge not found [ 511.538529][ T5936] Registered IR keymap rc-empty [ 511.556851][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 511.581390][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 511.606272][ T5936] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 511.640103][ T5936] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 511.704074][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 511.750515][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 511.820869][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 511.861463][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 511.894575][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 511.934874][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 511.960555][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 512.000615][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 512.080695][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 512.181196][ T5936] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 512.212846][ T5936] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 512.263441][ T5936] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 512.322059][ T5936] usb 3-1: USB disconnect, device number 13 [ 512.386438][ T9771] chnl_net:caif_netlink_parms(): no params data found [ 512.541813][ T9845] loop4: detected capacity change from 0 to 256 [ 512.947440][ T9849] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1070'. [ 513.399906][ T5869] Bluetooth: hci1: command tx timeout [ 513.813659][ T9771] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.860020][ T9771] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.894233][ T9771] bridge_slave_0: entered allmulticast mode [ 513.922962][ T9771] bridge_slave_0: entered promiscuous mode [ 514.013014][ T9771] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.036233][ T9771] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.059062][ T9771] bridge_slave_1: entered allmulticast mode [ 514.110022][ T9771] bridge_slave_1: entered promiscuous mode [ 514.117084][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 514.308859][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 514.353883][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 514.395190][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 514.439312][ T9771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.479973][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 514.493890][ T9771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.510773][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 514.533368][ T10] usb 7-1: Product: syz [ 514.537606][ T10] usb 7-1: Manufacturer: syz [ 514.570359][ T10] usb 7-1: SerialNumber: syz [ 514.662484][ T9877] netlink: 'syz.2.1078': attribute type 39 has an invalid length. [ 514.673473][ T9771] team0: Port device team_slave_0 added [ 514.709526][ T9771] team0: Port device team_slave_1 added [ 514.722348][ T9877] veth0_macvtap: left promiscuous mode [ 514.799197][ T10] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 515.027565][ T10] usb 7-1: USB disconnect, device number 6 [ 515.086632][ T10] usblp0: removed [ 515.106895][ T9771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.174266][ T9771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.361126][ T9771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.425013][ T9771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.450380][ T5869] Bluetooth: hci1: command tx timeout [ 515.480508][ T9771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.506901][ T9771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.764607][ T9883] nbd: must specify a device to reconfigure [ 515.889625][ T9771] hsr_slave_0: entered promiscuous mode [ 515.927636][ T9771] hsr_slave_1: entered promiscuous mode [ 515.941193][ T9771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.948789][ T9771] Cannot create hsr debugfs directory [ 517.111177][ T9898] netlink: 'syz.6.1086': attribute type 1 has an invalid length. [ 517.118976][ T9898] netlink: 'syz.6.1086': attribute type 2 has an invalid length. [ 517.167512][ T9881] loop5: detected capacity change from 0 to 40427 [ 517.320788][ T9881] F2FS-fs (loop5): invalid crc value [ 517.920255][ T9918] netlink: 'syz.6.1093': attribute type 39 has an invalid length. [ 518.010575][ T9881] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 518.018878][ T9918] veth0_macvtap: left promiscuous mode [ 518.903990][ T9928] nbd: must specify a device to reconfigure [ 519.114433][ T9771] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 519.253771][ T9771] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 519.281512][ T5928] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 519.436799][ T9771] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 519.536173][ T9771] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 519.611903][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1098'. [ 519.654733][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 519.657341][ T9933] netlink: 'syz.6.1098': attribute type 1 has an invalid length. [ 519.674265][ T5928] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 519.707013][ T5928] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 519.731584][ T9933] netlink: 208 bytes leftover after parsing attributes in process `syz.6.1098'. [ 519.778450][ T5928] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 519.820874][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 519.853035][ T5928] usb 5-1: Product: syz [ 519.870848][ T5928] usb 5-1: Manufacturer: syz [ 519.893153][ T5928] usb 5-1: SerialNumber: syz [ 519.967009][ T9771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.035286][ T9771] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.069675][ T7621] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.076898][ T7621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.128996][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.136235][ T7617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.175115][ T5928] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 520.415862][ T3086] usb 5-1: USB disconnect, device number 13 [ 520.433069][ T3086] usblp0: removed [ 521.106712][ T9771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.720221][ T5928] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 521.760132][ T9976] nbd: must specify a device to reconfigure [ 521.853100][ T9979] ip6t_rpfilter: unknown options [ 521.995163][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.422654][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.483156][ T5928] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 522.540464][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.619326][ T5928] usb 5-1: config 0 descriptor?? [ 523.077211][ T5928] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x3 [ 523.080209][ T9990] loop5: detected capacity change from 0 to 256 [ 523.133902][ T9771] veth0_vlan: entered promiscuous mode [ 523.186806][ T9771] veth1_vlan: entered promiscuous mode [ 523.195438][ T5928] hid-picolcd 0003:04D8:C002.000E: No report with id 0x11 found [ 523.203289][ T9991] overlayfs: statfs failed on './file0' [ 524.360210][ T974] usb 5-1: USB disconnect, device number 14 [ 524.484568][ T9771] veth0_macvtap: entered promiscuous mode [ 524.538041][ T9771] veth1_macvtap: entered promiscuous mode [ 524.648849][ T9771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.694863][ T9771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.727722][ T9771] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.782409][ T9771] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.812139][ T9771] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.840338][ T9771] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.170509][ T7610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.211088][ T7610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.310075][ T7621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.318746][ T7621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.211630][T10042] loop5: detected capacity change from 0 to 256 [ 528.352151][ T5936] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 528.374977][ T7588] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.524016][ T7588] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.555338][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.582533][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.610342][ T5936] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 528.619419][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.686193][ T5936] usb 7-1: config 0 descriptor?? [ 528.722561][T10056] loop4: detected capacity change from 0 to 512 [ 528.762066][T10056] EXT4-fs: Ignoring removed i_version option [ 528.768103][T10056] EXT4-fs: Ignoring removed mblk_io_submit option [ 528.818184][T10056] ext4: Unknown parameter 'seclabel' [ 529.142284][ T7588] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.160734][ T5936] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x3 [ 529.407914][ T5936] hid-picolcd 0003:04D8:C002.000F: No report with id 0x11 found [ 529.971477][ T48] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 530.159483][ T7588] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.215666][ T48] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 530.258551][ T48] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 530.284060][ T48] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 530.319515][ T48] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 530.332380][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 530.349925][ T48] usb 3-1: Product: syz [ 530.355170][ T48] usb 3-1: Manufacturer: syz [ 530.369371][ T48] usb 3-1: SerialNumber: syz [ 530.408518][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 530.418451][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 530.435981][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 530.452883][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 530.470527][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 530.516521][ T974] usb 7-1: USB disconnect, device number 7 [ 530.691298][ T48] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 530.893284][ T7588] bridge_slave_1: left allmulticast mode [ 530.909714][ T7588] bridge_slave_1: left promiscuous mode [ 530.917393][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.923413][ T10] usb 3-1: USB disconnect, device number 14 [ 530.953865][ T10] usblp0: removed [ 530.992785][ T7588] bridge_slave_0: left allmulticast mode [ 530.999490][ T7588] bridge_slave_0: left promiscuous mode [ 531.026236][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.196361][T10092] loop4: detected capacity change from 0 to 256 [ 532.050499][ T5936] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 532.191100][T10102] loop6: detected capacity change from 0 to 512 [ 532.218911][T10102] EXT4-fs: Ignoring removed i_version option [ 532.250738][T10102] EXT4-fs: Ignoring removed mblk_io_submit option [ 532.274180][ T5936] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 532.295977][T10102] ext4: Unknown parameter 'seclabel' [ 532.300424][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.600850][ T5857] Bluetooth: hci1: command tx timeout [ 532.608815][ T5936] usb 3-1: Product: syz [ 532.614353][ T5936] usb 3-1: Manufacturer: syz [ 532.618984][ T5936] usb 3-1: SerialNumber: syz [ 533.442992][ T5936] usb 3-1: config 0 descriptor?? [ 533.477907][ T5936] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 533.630691][T10113] netlink: 'syz.6.1153': attribute type 1 has an invalid length. [ 533.667364][T10113] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1153'. [ 533.859507][ T5936] gspca_sonixj: reg_r err -32 [ 533.878965][ T5936] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 534.098109][ T7588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.137896][ T7588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.162615][ T7588] bond0 (unregistering): Released all slaves [ 534.641903][ T5857] Bluetooth: hci1: command tx timeout [ 535.102452][ T974] usb 3-1: USB disconnect, device number 15 [ 535.623001][ T5965] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 535.803248][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.820713][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.831546][ T5965] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 535.840684][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.857553][ T5965] usb 5-1: config 0 descriptor?? [ 535.900459][ T7588] hsr_slave_0: left promiscuous mode [ 535.920815][ T7588] hsr_slave_1: left promiscuous mode [ 535.940530][ T7588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.958271][ T7588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.982656][ T7588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.001378][ T7588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.112889][ T7588] veth1_macvtap: left promiscuous mode [ 536.150814][ T7588] veth0_macvtap: left promiscuous mode [ 536.180627][ T7588] veth1_vlan: left promiscuous mode [ 536.186052][ T7588] veth0_vlan: left promiscuous mode [ 536.286279][ T5965] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x3 [ 536.374964][ T5965] hid-picolcd 0003:04D8:C002.0010: No report with id 0x11 found [ 536.386059][T10143] loop7: detected capacity change from 0 to 256 [ 536.447053][T10144] netlink: 'syz.5.1163': attribute type 39 has an invalid length. [ 536.728679][ T5936] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 536.737090][ T5857] Bluetooth: hci1: command tx timeout [ 536.915613][ T5936] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 536.975366][ T5936] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 537.038353][ T5936] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.131388][ T5936] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 537.169721][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 537.189600][ T5936] usb 7-1: Product: syz [ 537.216312][ T5936] usb 7-1: Manufacturer: syz [ 537.226461][ T5936] usb 7-1: SerialNumber: syz [ 537.460650][ T5936] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 537.671429][ T5936] usb 7-1: USB disconnect, device number 8 [ 537.698982][ T5936] usblp0: removed [ 537.832351][ T7588] team0 (unregistering): Port device team_slave_1 removed [ 537.874222][ T7588] team0 (unregistering): Port device team_slave_0 removed [ 538.354580][ T5965] usb 5-1: USB disconnect, device number 15 [ 538.394055][T10154] loop6: detected capacity change from 0 to 256 [ 538.733121][T10075] chnl_net:caif_netlink_parms(): no params data found [ 538.801179][ T5857] Bluetooth: hci1: command tx timeout [ 538.920363][ T974] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 539.107662][ T974] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 539.144030][ T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.167156][ T974] usb 6-1: Product: syz [ 539.176082][ T974] usb 6-1: Manufacturer: syz [ 539.186603][ T974] usb 6-1: SerialNumber: syz [ 539.212829][ T974] usb 6-1: config 0 descriptor?? [ 539.229072][ T974] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 539.332021][T10075] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.369726][T10075] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.379990][T10075] bridge_slave_0: entered allmulticast mode [ 539.420855][T10075] bridge_slave_0: entered promiscuous mode [ 539.459301][T10075] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.503730][T10075] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.530593][T10075] bridge_slave_1: entered allmulticast mode [ 539.556965][T10075] bridge_slave_1: entered promiscuous mode [ 539.631146][ T974] gspca_sonixj: reg_r err -32 [ 539.650661][ T974] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 539.895722][T10075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.910556][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 539.953941][T10075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.052655][T10190] loop2: detected capacity change from 0 to 256 [ 540.060852][ T10] usb 8-1: device descriptor read/64, error -71 [ 540.085954][T10075] team0: Port device team_slave_0 added [ 540.147719][T10075] team0: Port device team_slave_1 added [ 540.447963][T10075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.457377][T10075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.491463][T10075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.529184][T10075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.538064][T10075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.585907][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 540.618406][T10075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.760451][ T10] usb 8-1: device descriptor read/64, error -71 [ 540.928986][ T10] usb usb8-port1: attempt power cycle [ 541.290945][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 541.349716][T10075] hsr_slave_0: entered promiscuous mode [ 541.361632][ T10] usb 8-1: device descriptor read/8, error -71 [ 541.446705][T10075] hsr_slave_1: entered promiscuous mode [ 541.458885][T10075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 541.469004][T10075] Cannot create hsr debugfs directory [ 541.630427][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 541.671718][T10195] ip6t_rpfilter: unknown options [ 541.672016][ T10] usb 8-1: device descriptor read/8, error -71 [ 541.830995][ T974] usb 6-1: USB disconnect, device number 15 [ 542.341969][ T10] usb usb8-port1: unable to enumerate USB device [ 542.860446][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 543.066588][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.180469][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.267799][ T10] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 543.331207][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.371294][ T10] usb 7-1: config 0 descriptor?? [ 543.813636][ T10] hid-picolcd 0003:04D8:C002.0011: unknown main item tag 0x3 [ 543.900424][T10075] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 543.900892][ T10] hid-picolcd 0003:04D8:C002.0011: No report with id 0x11 found [ 543.979360][T10075] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 544.043975][T10075] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 544.081268][T10075] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 544.155329][ T48] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 544.194254][T10234] loop5: detected capacity change from 0 to 256 [ 544.326679][ T48] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 544.345597][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.381044][ T48] usb 5-1: Product: syz [ 544.399461][ T48] usb 5-1: Manufacturer: syz [ 544.426711][ T48] usb 5-1: SerialNumber: syz [ 544.501471][ T48] usb 5-1: config 0 descriptor?? [ 544.535762][ T48] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 544.603534][T10075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.649674][T10075] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.675598][ T7601] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.682888][ T7601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.712511][ T7601] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.719756][ T7601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.932812][T10246] ip6t_rpfilter: unknown options [ 544.938964][ T48] gspca_sonixj: reg_r err -32 [ 544.950589][ T48] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 545.351957][T10075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.057104][ T48] usb 7-1: USB disconnect, device number 9 [ 546.320461][ T5936] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 546.470443][ T5936] usb 8-1: device descriptor read/64, error -71 [ 546.669844][T10272] netlink: 'syz.6.1200': attribute type 1 has an invalid length. [ 546.701858][T10272] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1200'. [ 546.740534][ T5936] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 546.881514][ T5936] usb 8-1: device descriptor read/64, error -71 [ 546.968994][ T974] usb 5-1: USB disconnect, device number 16 [ 547.020929][ T5936] usb usb8-port1: attempt power cycle [ 547.340057][T10075] veth0_vlan: entered promiscuous mode [ 547.390524][ T5936] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 547.425520][T10075] veth1_vlan: entered promiscuous mode [ 547.435226][ T5936] usb 8-1: device descriptor read/8, error -71 [ 547.566917][T10075] veth0_macvtap: entered promiscuous mode [ 547.607425][T10075] veth1_macvtap: entered promiscuous mode [ 547.678288][T10075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.691012][ T5936] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 547.734063][T10075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.746045][ T5936] usb 8-1: device descriptor read/8, error -71 [ 547.871200][T10295] loop4: detected capacity change from 0 to 256 [ 548.034453][ T5936] usb usb8-port1: unable to enumerate USB device [ 548.061422][T10075] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.070182][T10075] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.090737][T10075] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.101380][T10297] ip6t_rpfilter: unknown options [ 548.120416][T10075] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.302174][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.336050][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.422322][ T7601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.440337][ T7601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.016093][T10310] netlink: 'syz.5.1216': attribute type 1 has an invalid length. [ 550.046859][T10310] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1216'. [ 550.546189][ T7618] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.724791][ T7618] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.797777][ T7618] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.889963][ T7618] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.050972][ T7618] bridge_slave_1: left allmulticast mode [ 551.056661][ T7618] bridge_slave_1: left promiscuous mode [ 551.067955][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.077674][ T7618] bridge_slave_0: left allmulticast mode [ 551.085326][ T7618] bridge_slave_0: left promiscuous mode [ 551.092198][ T7618] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.682171][T10321] ip6t_rpfilter: unknown options [ 552.543796][T10352] netlink: 'syz.7.1231': attribute type 1 has an invalid length. [ 552.573540][T10352] netlink: 236 bytes leftover after parsing attributes in process `syz.7.1231'. [ 553.603337][T10362] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 553.613074][T10362] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 553.624700][T10362] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 553.633810][T10362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 553.644352][T10362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 553.767390][ T7618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.778663][ T7618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.789089][ T7618] bond0 (unregistering): Released all slaves [ 554.031754][T10367] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1238'. [ 554.136398][T10371] loop2: detected capacity change from 0 to 256 [ 554.548776][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1239'. [ 554.595801][T10375] netlink: 'syz.4.1239': attribute type 1 has an invalid length. [ 554.637964][T10375] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1239'. [ 554.917984][ T7618] hsr_slave_0: left promiscuous mode [ 554.935896][ T7618] hsr_slave_1: left promiscuous mode [ 554.945264][ T7618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.968720][ T7618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.986553][ T7618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.994769][ T7618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.682098][T10362] Bluetooth: hci1: command tx timeout [ 556.123685][ T7618] veth1_macvtap: left promiscuous mode [ 556.129285][ T7618] veth0_macvtap: left promiscuous mode [ 556.140328][ T7618] veth1_vlan: left promiscuous mode [ 556.145700][ T7618] veth0_vlan: left promiscuous mode [ 557.089589][ T7618] team0 (unregistering): Port device team_slave_1 removed [ 557.138672][ T7618] team0 (unregistering): Port device team_slave_0 removed [ 557.755218][T10419] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1254'. [ 557.764738][ T5857] Bluetooth: hci1: command tx timeout [ 558.308926][T10359] chnl_net:caif_netlink_parms(): no params data found [ 558.476126][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 558.846718][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1262'. [ 558.858140][T10443] netlink: 'syz.4.1262': attribute type 1 has an invalid length. [ 558.867006][T10443] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1262'. [ 558.937609][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.950321][ T10] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 558.969388][ T10] usb 8-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 558.990329][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.998412][ T10] usb 8-1: Product: syz [ 559.019777][ T10] usb 8-1: Manufacturer: syz [ 559.061137][ T10] usb 8-1: SerialNumber: syz [ 559.085913][T10449] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1263'. [ 559.102449][ T10] usb 8-1: config 0 descriptor?? [ 559.139918][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1263'. [ 559.151140][T10359] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.158482][T10359] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.167175][T10359] bridge_slave_0: entered allmulticast mode [ 559.188744][T10359] bridge_slave_0: entered promiscuous mode [ 559.212034][T10359] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.245112][T10359] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.254713][T10359] bridge_slave_1: entered allmulticast mode [ 559.276617][T10359] bridge_slave_1: entered promiscuous mode [ 559.405512][T10359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.425271][T10359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.533777][T10359] team0: Port device team_slave_0 added [ 559.564320][T10359] team0: Port device team_slave_1 added [ 559.698279][T10359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.716025][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.770874][T10359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.809393][T10359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.820341][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.846915][T10362] Bluetooth: hci1: command tx timeout [ 559.869301][T10359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.939708][T10454] loop4: detected capacity change from 0 to 512 [ 559.959080][T10359] hsr_slave_0: entered promiscuous mode [ 559.965987][T10359] hsr_slave_1: entered promiscuous mode [ 559.977402][T10454] EXT4-fs: Ignoring removed i_version option [ 560.007236][T10454] EXT4-fs: Ignoring removed mblk_io_submit option [ 560.018355][T10359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.043229][T10454] ext4: Unknown parameter 'seclabel' [ 560.044469][T10359] Cannot create hsr debugfs directory [ 561.300614][ T974] usb 8-1: USB disconnect, device number 18 [ 561.617895][T10462] syzkaller0: entered promiscuous mode [ 561.623517][T10462] syzkaller0: entered allmulticast mode [ 561.921009][T10362] Bluetooth: hci1: command tx timeout [ 562.745890][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1278'. [ 562.764004][T10491] netlink: 'syz.6.1278': attribute type 1 has an invalid length. [ 562.778192][T10491] netlink: 208 bytes leftover after parsing attributes in process `syz.6.1278'. [ 563.608212][T10359] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 563.647420][T10498] loop2: detected capacity change from 0 to 512 [ 563.682149][T10359] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 563.702605][T10498] EXT4-fs: Ignoring removed i_version option [ 563.750708][T10498] EXT4-fs: Ignoring removed mblk_io_submit option [ 563.757271][T10498] ext4: Unknown parameter 'seclabel' [ 563.948514][T10359] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 564.064922][T10359] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 564.130533][T10259] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 564.300502][T10259] usb 6-1: device descriptor read/64, error -71 [ 564.590448][T10259] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 564.756615][T10259] usb 6-1: device descriptor read/64, error -71 [ 564.915553][T10259] usb usb6-port1: attempt power cycle [ 565.186987][T10359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.207867][T10524] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1290'. [ 565.241958][T10359] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.277526][ T7622] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.280449][ T3086] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 565.284722][ T7622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.303308][T10259] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 565.330921][T10493] loop7: detected capacity change from 0 to 40427 [ 565.352149][T10259] usb 6-1: device descriptor read/8, error -71 [ 565.389801][T10493] F2FS-fs (loop7): invalid crc value [ 565.409698][ T7622] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.416940][ T7622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.495735][ T3086] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.533237][ T3086] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.568089][ T3086] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 565.620390][T10259] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 565.620946][ T3086] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.673279][T10259] usb 6-1: device descriptor read/8, error -71 [ 565.719326][ T3086] usb 3-1: config 0 descriptor?? [ 565.728629][T10493] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 565.757426][T10531] syzkaller0: entered promiscuous mode [ 565.780822][T10531] syzkaller0: entered allmulticast mode [ 565.793173][T10259] usb usb6-port1: unable to enumerate USB device [ 566.745038][T10546] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1295'. [ 566.765313][T10546] netlink: 'syz.6.1295': attribute type 1 has an invalid length. [ 566.775976][T10546] netlink: 208 bytes leftover after parsing attributes in process `syz.6.1295'. [ 566.848540][ T3086] hid-picolcd 0003:04D8:C002.0012: unknown main item tag 0x3 [ 566.968199][ T3086] hid-picolcd 0003:04D8:C002.0012: No report with id 0x11 found [ 567.029116][ T3086] usb 3-1: USB disconnect, device number 16 [ 567.048761][T10548] netlink: 'syz.5.1297': attribute type 1 has an invalid length. [ 567.064944][T10548] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1297'. [ 567.919728][T10555] ip6t_rpfilter: unknown options [ 569.523193][T10587] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1307'. [ 569.619665][T10359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.140393][ T55] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 570.302795][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.362983][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.450521][ T55] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 570.516959][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.547378][ T55] usb 7-1: config 0 descriptor?? [ 570.645858][T10605] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1314'. [ 570.895597][ T974] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 570.988520][ T55] hid-picolcd 0003:04D8:C002.0013: unknown main item tag 0x3 [ 571.060821][ T974] usb 5-1: device descriptor read/64, error -71 [ 571.071712][ T55] hid-picolcd 0003:04D8:C002.0013: No report with id 0x11 found [ 571.191057][T10259] usb 7-1: USB disconnect, device number 10 [ 571.290002][T10359] veth0_vlan: entered promiscuous mode [ 571.325818][T10359] veth1_vlan: entered promiscuous mode [ 571.346732][T10586] loop7: detected capacity change from 0 to 40427 [ 571.353337][ T974] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 571.393760][T10586] F2FS-fs (loop7): invalid crc value [ 571.478343][T10359] veth0_macvtap: entered promiscuous mode [ 571.491679][ T974] usb 5-1: device descriptor read/64, error -71 [ 571.522469][T10359] veth1_macvtap: entered promiscuous mode [ 571.602863][T10359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.619525][ T974] usb usb5-port1: attempt power cycle [ 571.636158][T10359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.670572][T10359] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.689631][T10359] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.704143][T10586] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 571.709867][T10359] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.765214][T10359] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.070349][ T974] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 572.114679][ T974] usb 5-1: device descriptor read/8, error -71 [ 572.493352][ T974] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 572.551180][ T974] usb 5-1: device descriptor read/8, error -71 [ 572.681092][ T974] usb usb5-port1: unable to enumerate USB device [ 572.969068][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.014671][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.143023][ T7621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.168012][ T7621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.226466][T10623] loop5: detected capacity change from 0 to 512 [ 573.238366][T10624] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1320'. [ 573.249320][T10624] netlink: 'syz.6.1320': attribute type 1 has an invalid length. [ 573.252260][T10623] EXT4-fs: Ignoring removed i_version option [ 573.270605][T10624] netlink: 208 bytes leftover after parsing attributes in process `syz.6.1320'. [ 573.370418][T10623] EXT4-fs: Ignoring removed mblk_io_submit option [ 573.377473][T10623] ext4: Unknown parameter 'seclabel' [ 575.005900][T10644] loop6: detected capacity change from 0 to 256 [ 575.077902][ T7608] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.282350][ T7608] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.406573][ T7608] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.489697][ T7608] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.641542][ T7608] bridge_slave_1: left allmulticast mode [ 576.647256][ T7608] bridge_slave_1: left promiscuous mode [ 576.661628][ T7608] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.672901][ T7608] bridge_slave_0: left allmulticast mode [ 576.678546][ T7608] bridge_slave_0: left promiscuous mode [ 576.686401][ T7608] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.888525][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1329'. [ 577.163438][T10664] ip6t_rpfilter: unknown options [ 577.528118][T10673] loop2: detected capacity change from 0 to 512 [ 577.568637][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 577.578436][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 577.587619][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 577.597123][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 577.605660][ T55] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 577.614660][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 577.651451][T10673] EXT4-fs: Ignoring removed i_version option [ 577.657467][T10673] EXT4-fs: Ignoring removed mblk_io_submit option [ 577.728950][T10673] ext4: Unknown parameter 'seclabel' [ 578.035270][ T55] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 578.048281][ T55] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 578.057666][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.066274][ T55] usb 5-1: Product: syz [ 578.070558][ T55] usb 5-1: Manufacturer: syz [ 578.075185][ T55] usb 5-1: SerialNumber: syz [ 578.082976][ T55] usb 5-1: config 0 descriptor?? [ 578.534763][ T7608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.550968][ T7608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.565830][ T7608] bond0 (unregistering): Released all slaves [ 579.016791][T10685] loop5: detected capacity change from 0 to 256 [ 579.681259][ T5857] Bluetooth: hci1: command tx timeout [ 580.481034][ T5965] usb 5-1: USB disconnect, device number 21 [ 580.735338][T10712] loop6: detected capacity change from 0 to 512 [ 580.742476][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1354'. [ 580.761977][T10712] EXT4-fs: Ignoring removed i_version option [ 580.770321][T10712] EXT4-fs: Ignoring removed mblk_io_submit option [ 580.802363][T10712] ext4: Unknown parameter 'seclabel' [ 580.900360][ T7608] hsr_slave_0: left promiscuous mode [ 580.929183][ T7608] hsr_slave_1: left promiscuous mode [ 580.958212][ T7608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.998866][ T7608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.035497][ T7608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.004040][ T5857] Bluetooth: hci1: command tx timeout [ 582.140306][ T7608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.304182][ T7608] veth1_macvtap: left promiscuous mode [ 583.314640][ T7608] veth0_macvtap: left promiscuous mode [ 583.322019][ T7608] veth1_vlan: left promiscuous mode [ 583.327684][ T7608] veth0_vlan: left promiscuous mode [ 583.342072][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1362'. [ 583.351454][ T55] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 583.359656][T10739] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1362'. [ 583.426836][T10740] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1360'. [ 583.501167][ T55] usb 5-1: device descriptor read/64, error -71 [ 583.730576][ T48] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 583.750341][ T55] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 583.880388][ T55] usb 5-1: device descriptor read/64, error -71 [ 583.900399][ T48] usb 7-1: Using ep0 maxpacket: 16 [ 583.907961][ T48] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 583.916654][ T48] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 583.925138][ T48] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.945557][ T48] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 583.965828][ T48] usb 7-1: config 0 has no interface number 0 [ 583.980393][ T48] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 584.000501][ T55] usb usb5-port1: attempt power cycle [ 584.007255][ T48] usb 7-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 584.030316][ T48] usb 7-1: config 0 interface 125 has no altsetting 0 [ 584.050978][ T48] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 584.070493][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.078671][ T48] usb 7-1: Product: syz [ 584.083033][ T5857] Bluetooth: hci1: command tx timeout [ 584.090471][ T48] usb 7-1: Manufacturer: syz [ 584.095096][ T48] usb 7-1: SerialNumber: syz [ 584.103516][ T48] usb 7-1: config 0 descriptor?? [ 584.339395][ T7608] team0 (unregistering): Port device team_slave_1 removed [ 584.372915][ T55] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 584.407406][ T7608] team0 (unregistering): Port device team_slave_0 removed [ 584.411343][ T55] usb 5-1: device descriptor read/8, error -71 [ 584.680476][ T55] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 584.711998][ T55] usb 5-1: device descriptor read/8, error -71 [ 584.836223][ T55] usb usb5-port1: unable to enumerate USB device [ 585.177739][T10674] chnl_net:caif_netlink_parms(): no params data found [ 585.311405][ T55] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 585.463675][T10674] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.474973][T10674] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.484277][ T55] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 585.496189][T10674] bridge_slave_0: entered allmulticast mode [ 585.505583][ T55] usb 8-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 585.517369][T10674] bridge_slave_0: entered promiscuous mode [ 585.523479][ T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.534924][T10674] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.542476][ T55] usb 8-1: Product: syz [ 585.546885][T10674] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.554439][ T55] usb 8-1: Manufacturer: syz [ 585.559138][ T55] usb 8-1: SerialNumber: syz [ 585.564059][T10674] bridge_slave_1: entered allmulticast mode [ 585.576439][ T55] usb 8-1: config 0 descriptor?? [ 585.588402][T10674] bridge_slave_1: entered promiscuous mode [ 585.714344][T10674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.749926][T10674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.848799][T10674] team0: Port device team_slave_0 added [ 585.877003][T10674] team0: Port device team_slave_1 added [ 586.016847][T10674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.026214][T10674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.056062][T10674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.104598][T10674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.121810][T10674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.154595][T10674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.178323][ T5857] Bluetooth: hci1: command tx timeout [ 587.240595][ T6016] usb 7-1: USB disconnect, device number 11 [ 587.304429][T10674] hsr_slave_0: entered promiscuous mode [ 587.311821][T10674] hsr_slave_1: entered promiscuous mode [ 587.329069][T10674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 587.350966][T10674] Cannot create hsr debugfs directory [ 587.505221][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1377'. [ 588.329789][ T5965] usb 8-1: USB disconnect, device number 19 [ 588.435975][T10802] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1380'. [ 590.592879][T10674] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 590.628406][T10674] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 590.707430][T10674] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 590.787702][T10674] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 590.805497][T10805] ip6t_rpfilter: unknown options [ 590.900327][ T974] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 591.057707][ T974] usb 6-1: device descriptor read/64, error -71 [ 591.321519][ T974] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 591.961744][T10674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.084632][T10674] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.187837][ T7608] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.195079][ T7608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.283506][ T7610] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.290761][ T7610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.300074][ T974] usb 6-1: device descriptor read/64, error -71 [ 592.430873][ T974] usb usb6-port1: attempt power cycle [ 592.803988][ T974] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 592.837716][T10848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1398'. [ 592.873467][ T974] usb 6-1: device descriptor read/8, error -71 [ 593.112596][ T974] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 593.171153][ T974] usb 6-1: device descriptor read/8, error -71 [ 593.269676][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1402'. [ 593.301319][ T974] usb usb6-port1: unable to enumerate USB device [ 593.310363][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1402'. [ 593.512522][T10674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.009577][T10869] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1408'. [ 594.170937][T10880] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1409'. [ 594.203380][T10880] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1409'. [ 594.655747][T10890] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1413'. [ 595.023172][T10674] veth0_vlan: entered promiscuous mode [ 595.088247][T10674] veth1_vlan: entered promiscuous mode [ 595.386114][T10674] veth0_macvtap: entered promiscuous mode [ 595.474905][T10674] veth1_macvtap: entered promiscuous mode [ 595.569025][T10674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.580571][T10909] ip6t_rpfilter: unknown options [ 595.633273][T10674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.679168][T10674] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.705507][T10674] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.730376][ T48] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 595.739241][T10674] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.787013][T10674] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.890380][ T48] usb 7-1: device descriptor read/64, error -71 [ 596.154094][ T48] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 596.223216][ T7608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.256889][ T7608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.340328][ T48] usb 7-1: device descriptor read/64, error -71 [ 596.384959][ T7607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.414783][ T7607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.460703][ T48] usb usb7-port1: attempt power cycle [ 596.631314][ T974] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 596.825400][ T48] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 596.837250][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.890291][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.915049][ T48] usb 7-1: device descriptor read/8, error -71 [ 596.960663][ T974] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 597.000195][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.006002][ T7607] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.038400][ T974] usb 3-1: config 0 descriptor?? [ 597.197742][ T7607] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.211316][ T48] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 597.274262][ T48] usb 7-1: device descriptor read/8, error -71 [ 597.411185][ T7607] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.424585][ T48] usb usb7-port1: unable to enumerate USB device [ 597.469141][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 597.490549][ T974] usbhid 3-1:0.0: can't add hid device: -71 [ 597.503288][ T974] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 597.565653][ T974] usb 3-1: USB disconnect, device number 17 [ 597.660539][ T7607] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.870168][ T7607] bridge_slave_1: left allmulticast mode [ 597.875997][ T7607] bridge_slave_1: left promiscuous mode [ 597.884585][ T7607] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.896075][ T7607] bridge_slave_0: left allmulticast mode [ 597.902693][ T7607] bridge_slave_0: left promiscuous mode [ 597.908420][ T7607] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.352281][T10940] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1430'. [ 598.401187][ T7607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.458961][ T7607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.498891][ T7607] bond0 (unregistering): Released all slaves [ 598.902200][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1437'. [ 599.244385][T10362] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 599.256130][T10362] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 599.269035][T10362] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 599.283630][T10362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 599.286820][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1442'. [ 599.301137][T10362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 599.592096][T10966] vlan2: entered promiscuous mode [ 599.640763][T10966] gretap0: entered promiscuous mode [ 599.788229][T10978] ip6t_rpfilter: unknown options [ 599.872651][ T7607] hsr_slave_0: left promiscuous mode [ 599.889759][ T7607] hsr_slave_1: left promiscuous mode [ 599.902915][ T974] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 599.922718][ T7607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.953398][ T7607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.989436][ T7607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.008510][ T7607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.113105][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.157032][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.245260][ T7607] veth1_macvtap: left promiscuous mode [ 600.288969][ T974] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 600.322188][ T7607] veth0_macvtap: left promiscuous mode [ 600.327973][T10984] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1448'. [ 600.346921][ T7607] veth1_vlan: left promiscuous mode [ 600.348559][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.352590][ T7607] veth0_vlan: left promiscuous mode [ 601.151910][ T974] usb 3-1: config 0 descriptor?? [ 601.360914][ T5857] Bluetooth: hci1: command tx timeout [ 601.568713][ T974] usbhid 3-1:0.0: can't add hid device: -71 [ 601.584262][ T974] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 601.624125][ T974] usb 3-1: USB disconnect, device number 18 [ 602.137609][ T7607] team0 (unregistering): Port device team_slave_1 removed [ 602.294833][ T7607] team0 (unregistering): Port device team_slave_0 removed [ 602.334330][T11008] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1454'. [ 602.463642][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1455'. [ 602.475496][T11013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1453'. [ 602.489302][T11013] netlink: 'syz.2.1453': attribute type 1 has an invalid length. [ 602.498585][T11013] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1453'. [ 602.767293][T10992] netlink: 'syz.4.1450': attribute type 1 has an invalid length. [ 602.778686][T10992] netlink: 'syz.4.1450': attribute type 2 has an invalid length. [ 603.288688][T11025] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1462'. [ 603.440587][ T5857] Bluetooth: hci1: command tx timeout [ 603.792459][T10963] chnl_net:caif_netlink_parms(): no params data found [ 604.333176][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1470'. [ 604.421721][T11059] ip6t_rpfilter: unknown options [ 605.134838][T11053] netlink: 'syz.6.1469': attribute type 12 has an invalid length. [ 605.474149][T11073] loop6: detected capacity change from 0 to 256 [ 605.521204][ T5857] Bluetooth: hci1: command tx timeout [ 605.631781][T11070] netlink: 'syz.5.1472': attribute type 1 has an invalid length. [ 605.695735][T11070] netlink: 'syz.5.1472': attribute type 2 has an invalid length. [ 605.826634][T10963] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.843591][T11082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1476'. [ 606.424131][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1474'. [ 606.462360][T11084] netlink: 'syz.7.1474': attribute type 1 has an invalid length. [ 606.470132][T11084] netlink: 208 bytes leftover after parsing attributes in process `syz.7.1474'. [ 606.640546][T10963] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.647849][T10963] bridge_slave_0: entered allmulticast mode [ 606.656709][T10963] bridge_slave_0: entered promiscuous mode [ 606.856700][T10963] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.893535][T10963] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.913274][T10963] bridge_slave_1: entered allmulticast mode [ 606.930203][T10963] bridge_slave_1: entered promiscuous mode [ 607.131826][T10963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.164876][T10963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.399751][T10963] team0: Port device team_slave_0 added [ 607.432716][T11111] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1486'. [ 607.466271][T10963] team0: Port device team_slave_1 added [ 607.604093][ T5857] Bluetooth: hci1: command tx timeout [ 607.682133][T11116] ip6t_rpfilter: unknown options [ 608.551403][T10963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.580032][T10963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.580138][T11126] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1490'. [ 608.727024][T10963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.785777][T10963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.810441][T10963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.104085][T10963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.078773][T10963] hsr_slave_0: entered promiscuous mode [ 610.141633][T10963] hsr_slave_1: entered promiscuous mode [ 610.171166][T10963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 610.210404][T10963] Cannot create hsr debugfs directory [ 610.235091][T11150] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1496'. [ 610.900486][ T5965] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 611.105892][ T5965] usb 7-1: Using ep0 maxpacket: 16 [ 611.119615][ T5965] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 611.144500][ T5965] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 611.172520][ T5965] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.192221][ T5965] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 611.208118][ T5965] usb 7-1: config 0 has no interface number 0 [ 611.215612][ T5965] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 611.233730][ T5965] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 611.246792][ T5965] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 611.276434][ T5965] usb 7-1: config 0 interface 125 has no altsetting 0 [ 611.310526][ T6016] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 611.326111][ T5965] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 611.336340][ T5965] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.346327][ T5965] usb 7-1: Product: syz [ 611.351077][ T5965] usb 7-1: Manufacturer: syz [ 611.355984][ T5965] usb 7-1: SerialNumber: syz [ 611.373654][ T5965] usb 7-1: config 0 descriptor?? [ 611.448487][T10963] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 611.478527][T10963] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 611.494215][ T6016] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.497161][T10963] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 611.513777][ T6016] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 611.528254][T10963] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 611.542742][ T6016] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 611.550369][ T974] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 611.558125][ T6016] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 611.568493][ T6016] usb 5-1: Manufacturer: syz [ 611.596253][ T6016] usb 5-1: config 0 descriptor?? [ 611.712732][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.723419][T10963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.743573][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.752373][T10963] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.768049][ T974] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 611.777965][ T7601] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.785206][ T7601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.790334][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.819674][ T7607] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.826851][ T7607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.846036][ T974] usb 3-1: config 0 descriptor?? [ 612.089764][T11179] loop7: detected capacity change from 0 to 512 [ 612.107772][T11179] EXT4-fs: Ignoring removed i_version option [ 612.130494][T11179] EXT4-fs: Ignoring removed mblk_io_submit option [ 612.153512][T11179] ext4: Unknown parameter 'seclabel' [ 612.495396][ T974] usbhid 3-1:0.0: can't add hid device: -71 [ 612.502888][ T974] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 612.515078][ T974] usb 3-1: USB disconnect, device number 19 [ 613.612671][T10963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.856773][ T6016] usb 7-1: USB disconnect, device number 16 [ 614.685236][T11211] netlink: 'syz.6.1513': attribute type 1 has an invalid length. [ 614.727513][T11211] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1513'. [ 614.797839][ T974] usb 5-1: USB disconnect, device number 26 [ 615.483808][T11228] loop7: detected capacity change from 0 to 512 [ 615.508870][T11228] EXT4-fs: Ignoring removed i_version option [ 615.540524][T11228] EXT4-fs: Ignoring removed mblk_io_submit option [ 615.547131][T11228] ext4: Unknown parameter 'seclabel' [ 617.603770][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1522'. [ 618.016490][T10963] veth0_vlan: entered promiscuous mode [ 618.084822][T10963] veth1_vlan: entered promiscuous mode [ 618.766552][T10963] veth0_macvtap: entered promiscuous mode [ 618.779430][T10963] veth1_macvtap: entered promiscuous mode [ 618.828485][ T55] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 618.950508][T10963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.987764][T10963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.031704][T10963] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.060423][T10963] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.069208][T10963] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.119237][T10963] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.301633][ T55] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.320352][ T55] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 619.339092][ T55] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 619.363771][ T55] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 619.380762][ T55] usb 6-1: Manufacturer: syz [ 619.412701][ T55] usb 6-1: config 0 descriptor?? [ 619.436482][T11270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1532'. [ 619.558674][ T7588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.602745][ T7588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.703863][ T7588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.715366][ T7588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.369176][ T7588] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.468153][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1538'. [ 620.553928][ T7588] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.852769][ T7588] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.970162][ T7588] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.257204][ T7588] bridge_slave_1: left allmulticast mode [ 621.263093][ T7588] bridge_slave_1: left promiscuous mode [ 621.268882][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.285019][ T7588] bridge_slave_0: left allmulticast mode [ 621.291978][ T7588] bridge_slave_0: left promiscuous mode [ 621.297711][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.552358][ T6016] usb 6-1: USB disconnect, device number 24 [ 621.927272][T11295] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1544'. [ 622.036002][ T7588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.058034][ T7588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.070126][ T7588] bond0 (unregistering): Released all slaves [ 622.170007][T11300] vlan2: entered promiscuous mode [ 622.202345][ T3086] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 622.238035][T11300] vlan0: entered promiscuous mode [ 622.274387][T11300] gretap0: entered promiscuous mode [ 622.385720][ T3086] usb 7-1: Using ep0 maxpacket: 16 [ 622.415476][ T3086] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 622.439890][ T3086] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 622.500257][ T3086] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 622.530500][ T3086] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.551078][ T3086] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 622.587326][ T3086] usb 7-1: config 0 has no interface number 0 [ 622.598793][ T3086] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 622.637980][ T3086] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 622.656149][ T3086] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 622.656606][T10362] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 622.676316][T10362] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 622.685398][T10362] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 622.701134][T10362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 622.710019][T10362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 622.734836][ T3086] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 622.817789][ T3086] usb 7-1: config 0 interface 125 has no altsetting 0 [ 622.849254][ T3086] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 622.897169][ T3086] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.939494][ T3086] usb 7-1: Product: syz [ 622.951023][ T3086] usb 7-1: Manufacturer: syz [ 622.966137][ T3086] usb 7-1: SerialNumber: syz [ 623.007059][ T3086] usb 7-1: config 0 descriptor?? [ 623.044506][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1552'. [ 623.217679][ T7588] hsr_slave_0: left promiscuous mode [ 623.236457][ T7588] hsr_slave_1: left promiscuous mode [ 623.248934][ T7588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.269415][ T7588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.297378][ T7588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.315025][ T7588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.325816][T11325] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1553'. [ 623.367022][T11325] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1553'. [ 623.394274][ T7588] veth1_macvtap: left promiscuous mode [ 623.399957][ T7588] veth0_macvtap: left promiscuous mode [ 623.406029][ T7588] veth1_vlan: left promiscuous mode [ 623.413129][ T7588] veth0_vlan: left promiscuous mode [ 623.839393][T11332] netlink: 'syz.4.1556': attribute type 39 has an invalid length. [ 624.703532][ T7588] team0 (unregistering): Port device team_slave_1 removed [ 624.753814][ T7588] team0 (unregistering): Port device team_slave_0 removed [ 624.800864][T10362] Bluetooth: hci1: command tx timeout [ 625.021029][T11189] usb 7-1: USB disconnect, device number 17 [ 626.278414][T11310] chnl_net:caif_netlink_parms(): no params data found [ 626.422903][T11367] netlink: 'syz.4.1568': attribute type 1 has an invalid length. [ 626.889253][T10362] Bluetooth: hci1: command tx timeout [ 627.991110][T11310] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.998312][T11310] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.040070][T11310] bridge_slave_0: entered allmulticast mode [ 628.072719][T11310] bridge_slave_0: entered promiscuous mode [ 628.135504][T11310] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.173844][T11310] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.206259][T11310] bridge_slave_1: entered allmulticast mode [ 628.227393][T11310] bridge_slave_1: entered promiscuous mode [ 628.353588][T11399] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1576'. [ 628.415210][T11399] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1576'. [ 628.704554][T11403] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1575'. [ 628.782031][T11403] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1575'. [ 628.926488][T11310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.974458][T10362] Bluetooth: hci1: command tx timeout [ 629.142968][T11310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.432831][T11310] team0: Port device team_slave_0 added [ 629.477489][T11310] team0: Port device team_slave_1 added [ 629.837124][T11423] loop2: detected capacity change from 0 to 512 [ 629.858713][T11423] EXT4-fs: Ignoring removed i_version option [ 629.897583][T11423] EXT4-fs: Ignoring removed mblk_io_submit option [ 629.908938][T11310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.931198][T11423] ext4: Unknown parameter 'seclabel' [ 629.950484][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.280294][T11310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.288243][T10362] Bluetooth: hci1: command tx timeout [ 631.664125][T11310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.672386][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.572218][T11310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.829336][T11310] hsr_slave_0: entered promiscuous mode [ 632.871528][T11310] hsr_slave_1: entered promiscuous mode [ 632.878416][T11310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 632.950492][T11310] Cannot create hsr debugfs directory [ 633.230502][T11437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1591'. [ 633.274653][T11437] netlink: 'syz.2.1591': attribute type 1 has an invalid length. [ 633.298793][T11437] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1591'. [ 633.550364][ T10] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 633.736236][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.770321][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 633.803858][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 633.829877][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 633.862897][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 633.879412][T11461] loop4: detected capacity change from 0 to 512 [ 633.890364][ T10] usb 6-1: Manufacturer: syz [ 633.930839][T11461] EXT4-fs: Ignoring removed i_version option [ 633.953966][ T10] usb 6-1: config 0 descriptor?? [ 633.960996][T11461] EXT4-fs: Ignoring removed mblk_io_submit option [ 633.989083][T11461] ext4: Unknown parameter 'seclabel' [ 635.427571][T11483] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1610'. [ 635.440098][T11310] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 635.483803][T11310] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 635.527779][T11310] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 635.579851][T11310] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 635.912044][T11310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.988665][T11310] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.017011][ T7621] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.024243][ T7621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.084751][ T7610] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.091993][ T7610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.238969][T11310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 636.317216][T11310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 636.427826][ T6016] usb 6-1: USB disconnect, device number 25 [ 636.577008][T11509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1616'. [ 636.664461][T11509] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1616'. [ 636.919786][T11515] loop5: detected capacity change from 0 to 512 [ 636.940030][T11515] EXT4-fs: Ignoring removed i_version option [ 636.971550][T11515] EXT4-fs: Ignoring removed mblk_io_submit option [ 636.988464][T11515] ext4: Unknown parameter 'seclabel' [ 637.443493][ T974] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 637.921356][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.980332][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.036263][ T974] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 638.094662][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.226316][ T974] usb 3-1: config 0 descriptor?? [ 638.282921][T11533] vlan3: entered promiscuous mode [ 638.320579][T11533] vlan2: entered promiscuous mode [ 638.340350][T11533] gretap0: entered promiscuous mode [ 638.493728][T11310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.870626][ T974] usbhid 3-1:0.0: can't add hid device: -71 [ 638.888681][ T974] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 638.939926][ T974] usb 3-1: USB disconnect, device number 20 [ 639.601062][T11565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1637'. [ 639.661532][T11565] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1637'. [ 639.695115][T11568] loop2: detected capacity change from 0 to 512 [ 639.718879][T11310] veth0_vlan: entered promiscuous mode [ 639.762085][T11310] veth1_vlan: entered promiscuous mode [ 639.774422][T11568] EXT4-fs: Ignoring removed i_version option [ 639.792509][T11568] EXT4-fs: Ignoring removed mblk_io_submit option [ 639.827591][T11568] ext4: Unknown parameter 'seclabel' [ 640.184471][T11310] veth0_macvtap: entered promiscuous mode [ 640.596449][T11570] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1639'. [ 640.659930][T11310] veth1_macvtap: entered promiscuous mode [ 640.849189][T11310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.935237][T11310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.025435][T11310] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.100619][T11310] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.109406][T11310] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.157982][T11310] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.535609][T11592] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1642'. [ 641.585765][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1642'. [ 641.621038][ T7621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.628892][ T7621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.790352][T10259] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 641.973039][ T7617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.995910][T10259] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.027818][ T7617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.035269][T10259] usb 5-1: config 0 has no interfaces? [ 642.044796][T10259] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 642.064160][T10259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.082005][T10259] usb 5-1: Product: syz [ 642.092131][T10259] usb 5-1: Manufacturer: syz [ 642.100468][T10259] usb 5-1: SerialNumber: syz [ 642.208482][T10259] usb 5-1: config 0 descriptor?? [ 642.499963][T11608] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.674831][T11608] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.842540][T11618] loop2: detected capacity change from 0 to 512 [ 642.866068][T11618] EXT4-fs: Ignoring removed i_version option [ 642.883521][T11618] EXT4-fs: Ignoring removed mblk_io_submit option [ 642.920924][T11618] ext4: Unknown parameter 'seclabel' [ 642.922812][ T7601] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.705010][T11608] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.152608][ T7601] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.279571][T11608] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.338341][ T7601] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.394906][T11608] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.416959][T11608] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.434643][T11608] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.452095][T11608] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.503183][ T7601] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.601992][T10259] usb 5-1: USB disconnect, device number 27 [ 644.708861][ T7601] bridge_slave_1: left allmulticast mode [ 644.714648][ T7601] bridge_slave_1: left promiscuous mode [ 644.721615][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.732998][ T7601] bridge_slave_0: left allmulticast mode [ 644.738649][ T7601] bridge_slave_0: left promiscuous mode [ 644.746249][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.034938][ T7601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.049297][ T7601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.060725][ T7601] bond0 (unregistering): Released all slaves [ 645.480453][T11189] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 645.669741][T11189] usb 5-1: Using ep0 maxpacket: 16 [ 645.738530][T11189] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 645.761804][T11189] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 645.770026][T11189] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 645.821667][T11189] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.860395][T11189] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 645.869312][T11189] usb 5-1: config 0 has no interface number 0 [ 645.930458][T11189] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 645.980366][T11189] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 646.020299][T11189] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 646.040679][T11189] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 646.110764][T11189] usb 5-1: config 0 interface 125 has no altsetting 0 [ 646.127107][T11189] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 646.150441][T11189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.158539][T11189] usb 5-1: Product: syz [ 646.183351][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 646.199446][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 646.211011][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 646.260563][T11189] usb 5-1: Manufacturer: syz [ 646.265238][T11189] usb 5-1: SerialNumber: syz [ 646.270877][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 646.283828][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 646.336817][T11189] usb 5-1: config 0 descriptor?? [ 646.586440][ T7601] hsr_slave_0: left promiscuous mode [ 646.609336][T11657] [ 646.612506][T11657] ============================= [ 646.617373][T11657] WARNING: suspicious RCU usage [ 646.623014][T11657] 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 Not tainted [ 646.630150][T11657] ----------------------------- [ 646.630461][ T7601] hsr_slave_1: left promiscuous mode [ 646.635040][T11657] net/core/netclassid_cgroup.c:23 suspicious rcu_dereference_check() usage! [ 646.649070][T11657] [ 646.649070][T11657] other info that might help us debug this: [ 646.649070][T11657] [ 646.659388][T11657] [ 646.659388][T11657] rcu_scheduler_active = 2, debug_locks = 1 [ 646.661202][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.667514][T11657] 1 lock held by syz.6.1669/11657: [ 646.680377][T11657] #0: ffffffff8e5c4500 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x344/0x780 [ 646.691634][T11657] [ 646.691634][T11657] stack backtrace: [ 646.697561][T11657] CPU: 0 UID: 0 PID: 11657 Comm: syz.6.1669 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 646.697610][T11657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 646.697631][T11657] Call Trace: [ 646.697646][T11657] [ 646.697659][T11657] dump_stack_lvl+0x16c/0x1f0 [ 646.697717][T11657] lockdep_rcu_suspicious+0x166/0x260 [ 646.697780][T11657] task_cls_state+0x1c9/0x1f0 [ 646.697818][T11657] bpf_get_cgroup_classid_curr+0x1a/0x60 [ 646.697869][T11657] ? sched_clock+0x38/0x60 [ 646.697914][T11657] bpf_prog_841aec7193f618b3+0x1b/0x21 [ 646.697944][T11657] bpf_prog_test_run_syscall+0x5b3/0x780 [ 646.697985][T11657] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 646.698023][T11657] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.698066][T11657] ? fput+0x70/0xf0 [ 646.698114][T11657] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.698156][T11657] ? __bpf_prog_get+0x97/0x2a0 [ 646.698213][T11657] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 646.698250][T11657] __sys_bpf+0x1488/0x4d80 [ 646.698299][T11657] ? __pfx___sys_bpf+0x10/0x10 [ 646.698354][T11657] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.698395][T11657] ? do_futex+0x122/0x350 [ 646.698449][T11657] ? __pfx_do_futex+0x10/0x10 [ 646.698522][T11657] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.698568][T11657] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.698609][T11657] ? xfd_validate_state+0x61/0x180 [ 646.698674][T11657] __x64_sys_bpf+0x78/0xc0 [ 646.698716][T11657] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.698757][T11657] ? lockdep_hardirqs_on+0x7c/0x110 [ 646.698809][T11657] do_syscall_64+0xcd/0x4c0 [ 646.698867][T11657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.698902][T11657] RIP: 0033:0x7f2448b8e929 [ 646.698928][T11657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.698962][T11657] RSP: 002b:00007f24499d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 646.698993][T11657] RAX: ffffffffffffffda RBX: 00007f2448db5fa0 RCX: 00007f2448b8e929 [ 646.699015][T11657] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 646.699037][T11657] RBP: 00007f2448c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 646.699058][T11657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.699078][T11657] R13: 0000000000000000 R14: 00007f2448db5fa0 R15: 00007ffde411ff58 [ 646.699124][T11657] [ 646.950597][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.061397][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.068865][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.353083][ T7601] veth1_macvtap: left promiscuous mode [ 647.358697][ T7601] veth0_macvtap: left promiscuous mode [ 647.390497][ T7601] veth1_vlan: left promiscuous mode [ 647.395904][ T7601] veth0_vlan: left promiscuous mode [ 648.400670][ T5857] Bluetooth: hci1: command tx timeout [ 649.064956][ T7601] team0 (unregistering): Port device team_slave_1 removed [ 649.097355][ T7601] team0 (unregistering): Port device team_slave_0 removed [ 649.589644][ T10] usb 5-1: USB disconnect, device number 28 [ 650.388872][ T7601] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.521042][ T7601] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.598219][ T7601] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.677992][ T7601] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.826693][ T7601] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.896316][ T7601] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.987167][ T7601] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.046026][ T7601] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.507870][ T7601] bridge_slave_1: left allmulticast mode [ 651.515816][ T7601] bridge_slave_1: left promiscuous mode [ 651.522162][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.534268][ T7601] bridge_slave_0: left allmulticast mode [ 651.540343][ T7601] bridge_slave_0: left promiscuous mode [ 651.546145][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.559839][ T7601] bridge_slave_1: left allmulticast mode [ 651.565638][ T7601] bridge_slave_1: left promiscuous mode [ 651.572153][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.582282][ T7601] bridge_slave_0: left allmulticast mode [ 651.587930][ T7601] bridge_slave_0: left promiscuous mode [ 651.594417][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.059744][ T7601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.072740][ T7601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.086101][ T7601] bond0 (unregistering): Released all slaves [ 652.304839][ T7601] bond0 (unregistering): Released all slaves [ 652.635776][ T7601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.646094][ T7601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.656973][ T7601] bond0 (unregistering): Released all slaves [ 652.798034][ T7601] tipc: Left network mode [ 653.267857][ T7601] hsr_slave_0: left promiscuous mode [ 653.276914][ T7601] hsr_slave_1: left promiscuous mode [ 653.283295][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.294288][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.303317][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.310868][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.323123][ T7601] hsr_slave_0: left promiscuous mode [ 653.329100][ T7601] hsr_slave_1: left promiscuous mode [ 653.341294][ T7601] hsr_slave_0: left promiscuous mode [ 653.347368][ T7601] hsr_slave_1: left promiscuous mode [ 653.353543][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.366198][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.397991][ T7601] veth1_vlan: left promiscuous mode [ 653.403518][ T7601] veth0_vlan: left promiscuous mode [ 653.410402][ T7601] veth1_macvtap: left promiscuous mode [ 653.415958][ T7601] veth0_macvtap: left promiscuous mode [ 653.421980][ T7601] veth1_vlan: left promiscuous mode [ 653.427296][ T7601] veth0_vlan: left promiscuous mode [ 653.844327][ T7601] team0 (unregistering): Port device team_slave_1 removed [ 653.884301][ T7601] team0 (unregistering): Port device team_slave_0 removed [ 655.086455][ T7601] team0 (unregistering): Port device team_slave_1 removed [ 655.117963][ T7601] team0 (unregistering): Port device team_slave_0 removed