last executing test programs: 17m28.220083764s ago: executing program 4 (id=554): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000000101010100000000000000000a001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0) 17m25.938125095s ago: executing program 4 (id=557): socket$rds(0x15, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) epoll_create(0xd) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 17m23.105163423s ago: executing program 4 (id=561): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 17m22.650412158s ago: executing program 4 (id=564): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0xc) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c58, 0x80, 0x20002, 0x16c}, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) close(r1) 17m19.318626641s ago: executing program 4 (id=570): ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010900000000ffdbdb2502180000ff0000080000000208000100ac1414"], 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) 17m18.977350102s ago: executing program 4 (id=573): getrusage(0xffffffffffffffff, &(0x7f0000000640)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x4000000, 0x7f, 0x10000000007, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) 17m3.664146579s ago: executing program 32 (id=573): getrusage(0xffffffffffffffff, &(0x7f0000000640)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x4000000, 0x7f, 0x10000000007, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) 8m24.356420938s ago: executing program 1 (id=2086): r0 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f00000010c0)=""/150, 0x96) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) syz_usb_disconnect(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x10002, 0xf, 0x3, 0x0, 0x1, 0x3}, 0x30, 0x0) landlock_restrict_self(r6, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1d4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 8m22.566627214s ago: executing program 1 (id=2089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000380)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x87, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000"], &(0x7f0000000440)='GPL\x00', 0x4, 0x99, &(0x7f0000000480)=""/153}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x53a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x5}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r9 = epoll_create1(0x80000) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r9, 0xffffffffffffffff, &(0x7f00000002c0)={0x40000012}}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000440)={0x2e, 0x3f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0xc9e, 0x2ea, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, 0x0) r10 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x14a300, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f0000000300)={'dt2814\x00', [0xfffffff9, 0x5, 0x5, 0xbff7ffff, 0xffff7ffd, 0x0, 0x20000004, 0x6, 0xffd, 0x9, 0x200001, 0x1001, 0x8004, 0x3, 0xfffc, 0x5, 0x8, 0x40000006, 0x3, 0x8, 0x80208, 0x5, 0x800800, 0xeadb, 0xffffffff, 0x1, 0xffff, 0x81, 0x1, 0xd6d, 0x70f]}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 8m21.013122752s ago: executing program 1 (id=2092): socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$9p_fd(0x0, 0x0, 0x0, 0x200c01, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a0302000000000000"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a09000000000000000000020000000900010073797a30000000000900020073797a3000000000740000001c0a01040000000000000000020000020900020073797a30000000000900010073797a3000000000080007400000000240000380080002400000000108000140000000002c000380140001007767300000000000000000000000000014000100767863616e310000000000000000000014000000110001"], 0xc8}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1d, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07"}) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) 8m19.401648423s ago: executing program 1 (id=2099): r0 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f00000010c0)=""/150, 0x96) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) syz_usb_disconnect(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x10002, 0xf, 0x3, 0x0, 0x1, 0x3}, 0x30, 0x0) landlock_restrict_self(r6, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1d4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 8m15.518068744s ago: executing program 1 (id=2104): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) timerfd_create(0x9, 0x800) close(0x3) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f0000000040)=[{r1, 0x644}], 0x1, 0x7f) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[], [], 0x2f}) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 8m13.478434257s ago: executing program 1 (id=2107): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) poll(0x0, 0x0, 0x9) close(0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd9100fedbdf25200000e26efb0000", @ANYRES32=r5, @ANYBLOB="04002d80"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="ac010000100000012dbd7000ffdbdf25fe800000000000000000000000000021fe8000000000000000000000000000aa4e2300004e21", @ANYRES32, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x4814}, 0x80) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r7, 0x0, 0xee01, 0x2, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x9}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getdents(0xffffffffffffffff, 0x0, 0x0) shmget(0x3, 0x4000, 0x1000, &(0x7f0000ffa000/0x4000)=nil) geteuid() 7m57.67778839s ago: executing program 33 (id=2107): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) poll(0x0, 0x0, 0x9) close(0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd9100fedbdf25200000e26efb0000", @ANYRES32=r5, @ANYBLOB="04002d80"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="ac010000100000012dbd7000ffdbdf25fe800000000000000000000000000021fe8000000000000000000000000000aa4e2300004e21", @ANYRES32, @ANYBLOB="ac1e0001000000000000000000000000000004d32b000000e000000200000000000000000000000000100000000000000d00000000000000edc730070000000003000000000000000600000000000000030000000000000084000000000000000200000000000000070000000000000006000000000000000400000000000000030000000000000001000000ffffffff040000002dbd7000003500000a0004012100000000000000aa0001007467723132382d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010030000a926ba8c7759e1dc087773fcd0d04ac5d08a1cb91ea41de9c23e10c79657dda8d97dc2701190808b9de172b0cc5022ee08c64ea4f630a87df8dedf7ac0a0f6f0da8ce3ca33bd4c6da362d3e19971d9078ff2e906aecb82ef3b0e7b3623116abd6457000008000c000400000005001900ff0000003656bbeb2a0dda9961bfe3a21272ab96ab0b61d09b265813d7cd671b07864885894cd4dd8bc26a5c0d5d85f0ddfffe4d65e26ab946a83c1db953465d90001209e45edff3bb6f576a1a4e27af51eeba6110dcc5051afe76f91224487b2579aa4643e2117536207c2a92cba4297101"], 0x1ac}, 0x1, 0x0, 0x0, 0x4814}, 0x80) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r7, 0x0, 0xee01, 0x2, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x9}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getdents(0xffffffffffffffff, 0x0, 0x0) shmget(0x3, 0x4000, 0x1000, &(0x7f0000ffa000/0x4000)=nil) geteuid() 5m17.361834791s ago: executing program 2 (id=2836): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x13, r3, 0x8cee000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0xa9e, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r4, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c54000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 4m46.687930958s ago: executing program 2 (id=2840): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = msgget$private(0x0, 0x4ef) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x8, 0x800) msgrcv(r0, 0x0, 0x0, 0x0, 0x5800) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x1, 0x0, 0x4007) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8881f5c0a000) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_clone(0x16209100, &(0x7f0000000300)="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", 0xfe, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000580)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x4f}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 4m42.241277996s ago: executing program 2 (id=2956): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r6, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x28, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002063, 0x0) 4m41.076884163s ago: executing program 2 (id=2959): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0xfffffffe, 0x4, 0x9}], 0x10, 0xd5}, 0x94) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0x8) 4m40.710542925s ago: executing program 2 (id=2962): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x3, 0x0, 0xc}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 4m34.625546004s ago: executing program 2 (id=2969): close(0x4) unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x379080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x0, 0xaee6, 0x0, 0x0, 0x40f00, 0x6f}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 4m19.544557365s ago: executing program 34 (id=2969): close(0x4) unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x379080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x0, 0xaee6, 0x0, 0x0, 0x40f00, 0x6f}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 13.085621292s ago: executing program 0 (id=3854): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$9p_fd(0x0, 0x0, 0x0, 0x200c01, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a09000000000000000000020000000900010073797a30000000000900020073797a3000000000740000001c0a01040000000000000000020000020900020073797a30000000000900010073797a3000000000080007400000000240000380080002400000000108000140000000002c000380140001007767300000000000000000000000000014000100767863616e31000000000000"], 0xc8}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1d, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07"}) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) 11.604926368s ago: executing program 6 (id=3859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x52}}]}, {0xfffffe8f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r5, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 10.566307351s ago: executing program 0 (id=3861): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x2}, 0x50) socket(0x2b, 0x80801, 0x1) socket$inet6(0xa, 0x800000000000002, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x48041) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 10.049015527s ago: executing program 6 (id=3863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x9, 0x0, 0x8, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="07ddfad8b45bc251e43d3d86", 0xc}], 0x1}, 0x20004014) 10.002715788s ago: executing program 0 (id=3864): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[], 0xdd12}], 0x1}, 0x40) 9.739467137s ago: executing program 5 (id=3866): r0 = socket$kcm(0x29, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000400), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0xf00, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 9.585736771s ago: executing program 0 (id=3867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 9.355672229s ago: executing program 3 (id=3868): r0 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@loopback}, 0x0, @in6=@private0}}, &(0x7f00000009c0)=0xe8) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$kcm(0x11, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x23, 0x8, 0x0, 0x400, 0x0, 0x7e, 0xe7, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x8, 0x0, 0x82000045, [0x2, 0x9]}}) 7.936117313s ago: executing program 7 (id=3869): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x3, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x4, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x7, 0x0, 0x0}], 0x6) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x7, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0xfd}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 6.925290285s ago: executing program 7 (id=3870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000380)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x87, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0x53a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x5}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r10 = epoll_create1(0x80000) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r10, 0xffffffffffffffff, &(0x7f00000002c0)={0x40000012}}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000440)={0x2e, 0x3f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0xc9e, 0x2ea, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, 0x0) r11 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x14a300, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, &(0x7f0000000300)={'dt2814\x00', [0xfffffff9, 0x5, 0x5, 0xbff7ffff, 0xffff7ffd, 0x0, 0x20000004, 0x6, 0xffd, 0x9, 0x200001, 0x1001, 0x8004, 0x3, 0xfffc, 0x5, 0x8, 0x40000006, 0x3, 0x8, 0x80208, 0x5, 0x800800, 0xeadb, 0xffffffff, 0x1, 0xffff, 0x81, 0x1, 0xd6d, 0x70f]}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3.465706392s ago: executing program 3 (id=3871): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$9p_fd(0x0, 0x0, 0x0, 0x200c01, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a09000000000000000000020000000900010073797a30000000000900020073797a3000000000740000001c0a01040000000000000000020000020900020073797a30000000000900010073797a3000000000080007400000000240000380080002400000000108000140000000002c000380140001007767300000000000000000000000000014000100767863616e31000000000000"], 0xc8}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1d, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07"}) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) 3.465230892s ago: executing program 7 (id=3872): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8004, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x2, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x2, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e9, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42b9, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x6, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x0, 0x8, 0x8, 0x10}, {0x5, 0x0, 0x9071, 0xff, 0x100, 0x3}, 0x4, 0x5, 0xa65}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.417097483s ago: executing program 5 (id=3873): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000001200), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ef05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b", 0xd5}], 0x1}, 0x4000000) 3.22468853s ago: executing program 6 (id=3874): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x2}, 0x50) socket(0x2b, 0x80801, 0x1) socket$inet6(0xa, 0x800000000000002, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x48041) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 3.132424563s ago: executing program 0 (id=3875): unshare(0x2020600) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) 3.062698495s ago: executing program 5 (id=3876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000100), &(0x7f0000000200)='%-5lx \x00'}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800000000000000000000000000001812", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) 2.770624994s ago: executing program 3 (id=3877): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000006c0)={'gre0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x700, 0x20, 0x9, 0x8, {{0x2e, 0x4, 0x1, 0x28, 0xb8, 0x68, 0x0, 0xf, 0x2d, 0x0, @remote, @broadcast, {[@timestamp={0x44, 0x10, 0xd6, 0x0, 0x8, [0xffffff7f, 0xc2c, 0x5]}, @ssrr={0x89, 0xf, 0xb7, [@multicast1, @multicast2, @broadcast]}, @rr={0x7, 0xf, 0x6, [@dev={0xac, 0x14, 0x14, 0x40}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1f, 0x39, [@loopback, @private=0xa010100, @remote, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @loopback]}, @cipso={0x86, 0x42, 0x0, [{0x0, 0xf, "dfc30c392ed3e6d759a1925208"}, {0x1, 0x2}, {0x1, 0xb, "d1af32522fc2cb80db"}, {0x7, 0xd, "201495c5e2b8950635a41d"}, {0x2, 0x5, "979ab7"}, {0x1, 0x2}, {0x2, 0x3, 'J'}, {0x7, 0x9, "e77886962b9f86"}]}, @timestamp_addr={0x44, 0x14, 0xe0, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x18}, 0x5}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xf}]}]}}}}}) bpf$PROG_LOAD(0x2, &(0x7f0000000040)={0x3, 0x1ffffffffffffff6, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x3e, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 2.686814857s ago: executing program 6 (id=3878): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @private}, &(0x7f0000000100)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)={0x14, 0x5e, 0xe25, 0x1, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x2, 0x28, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@rr={0x7, 0xb, 0xb2, [@empty, @loopback]}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 2.625957108s ago: executing program 5 (id=3879): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r0, &(0x7f0000000100)="8f4a00332f1db93916b2a01e6cee46d97ab6ceb166e7b29eb4d8d9730e89c7d8f8b0e945076085efed642f168989a777b5dc177406af2568451480f62845a647063119ed6c29241c3668d754120caa9156c158022a451a26f9b263429035d22107688795a9", 0x65, 0x4000, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) 2.474857833s ago: executing program 3 (id=3880): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x3, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x4, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x7, 0x0, 0x0}], 0x6) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x7, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0xfd}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2.456941864s ago: executing program 7 (id=3881): r0 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@loopback}, 0x0, @in6=@private0}}, &(0x7f00000009c0)=0xe8) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$kcm(0x11, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x23, 0x8, 0x0, 0x400, 0x0, 0x7e, 0xe7, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x8, 0x0, 0x82000045, [0x2, 0x9]}}) 2.448862054s ago: executing program 6 (id=3882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000380)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x87, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0x53a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x5}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r10 = epoll_create1(0x80000) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r10, 0xffffffffffffffff, &(0x7f00000002c0)={0x40000012}}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000440)={0x2e, 0x3f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0xc9e, 0x2ea, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, 0x0) r11 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x14a300, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, &(0x7f0000000300)={'dt2814\x00', [0xfffffff9, 0x5, 0x5, 0xbff7ffff, 0xffff7ffd, 0x0, 0x20000004, 0x6, 0xffd, 0x9, 0x200001, 0x1001, 0x8004, 0x3, 0xfffc, 0x5, 0x8, 0x40000006, 0x3, 0x8, 0x80208, 0x5, 0x800800, 0xeadb, 0xffffffff, 0x1, 0xffff, 0x81, 0x1, 0xd6d, 0x70f]}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.382644216s ago: executing program 5 (id=3883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x2, 0x7945}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.28972034s ago: executing program 6 (id=3884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x9, 0x0, 0x8, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="07ddfad8b45bc251e43d3d86", 0xc}], 0x1}, 0x20004014) 1.138104035s ago: executing program 0 (id=3885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 1.058669927s ago: executing program 7 (id=3886): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5c50fae9d6d8d3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 963.2974ms ago: executing program 3 (id=3887): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$9p_fd(0x0, 0x0, 0x0, 0x200c01, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a09000000000000000000020000000900010073797a30000000000900020073797a3000000000740000001c0a01040000000000000000020000020900020073797a30000000000900010073797a3000000000080007400000000240000380080002400000000108000140000000002c000380140001007767300000000000000000000000000014000100767863616e31000000000000000000001400"], 0xc8}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1d, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07"}) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) 845.656364ms ago: executing program 7 (id=3888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000380)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x87, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000"], &(0x7f0000000440)='GPL\x00', 0x4, 0x99, &(0x7f0000000480)=""/153}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = getpid() process_vm_readv(r4, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x53a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x5}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r9 = epoll_create1(0x80000) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r9, 0xffffffffffffffff, &(0x7f00000002c0)={0x40000012}}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000440)={0x2e, 0x3f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0xc9e, 0x2ea, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x14a300, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 38.043469ms ago: executing program 5 (id=3889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000100), &(0x7f0000000200)='%-5lx \x00'}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800000000000000000000000000001812", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) 0s ago: executing program 3 (id=3890): r0 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f00000010c0)=""/150, 0x96) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x1c, &(0x7f0000000900)=ANY=[@ANYBLOB="050f1c"]}) syz_usb_disconnect(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x10002, 0xf, 0x3, 0x0, 0x1, 0x3}, 0x30, 0x0) landlock_restrict_self(r7, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1d4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) kernel console output (not intermixed with test programs): 9] syz.3.2230 uses obsolete (PF_INET,SOCK_PACKET) [ 881.358320][T12785] tipc: Enabling of bearer rejected, already enabled [ 881.485292][T12785] tipc: Enabling of bearer rejected, failed to enable media [ 881.639012][ T4324] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 881.828444][ T4324] usb 6-1: Using ep0 maxpacket: 32 [ 881.839615][ T4324] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 881.856210][ T4324] usb 6-1: config 0 has no interface number 0 [ 881.863559][ T4324] usb 6-1: config 0 interface 184 has no altsetting 0 [ 881.880174][ T4324] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 881.896927][ T4324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.905439][ T4276] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 881.914646][ T4812] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 881.920398][ T4324] usb 6-1: Product: syz [ 881.932065][ T4324] usb 6-1: Manufacturer: syz [ 881.940513][ T4324] usb 6-1: SerialNumber: syz [ 881.953414][ T4324] usb 6-1: config 0 descriptor?? [ 881.973566][ T4324] smsc75xx v1.0.0 [ 882.219310][ T4812] usb 7-1: Using ep0 maxpacket: 16 [ 882.464924][T12801] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 882.475068][ T4276] usb 1-1: Using ep0 maxpacket: 16 [ 882.494082][ T4276] usb 1-1: config 127 has an invalid interface number: 124 but max is 0 [ 882.526641][ T4276] usb 1-1: config 127 has no interface number 0 [ 882.605919][ T4276] usb 1-1: config 127 interface 124 has no altsetting 0 [ 882.679266][ T4276] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 882.692123][ T4324] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 882.729254][ T4324] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 882.765133][ T4276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.845931][ T4324] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 882.867484][ T4276] usb 1-1: Product: syz [ 882.880479][ T4276] usb 1-1: Manufacturer: syz [ 882.885136][ T4276] usb 1-1: SerialNumber: syz [ 882.895137][ T4324] smsc75xx: probe of 6-1:0.184 failed with error -61 [ 883.064661][ T4812] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.088377][ T4812] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 883.108056][ T4812] usb 7-1: config 0 interface 0 has no altsetting 0 [ 883.114824][ T4812] usb 7-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 883.138160][ T4812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.148634][ T4812] usb 7-1: config 0 descriptor?? [ 883.173017][ T4812] usbhid 7-1:0.0: can't add hid device: -22 [ 883.179112][ T4812] usbhid: probe of 7-1:0.0 failed with error -22 [ 884.513376][T10596] usb 6-1: USB disconnect, device number 49 [ 884.714878][ T4902] usb 7-1: USB disconnect, device number 3 [ 884.919442][ T4276] usb 1-1: USB disconnect, device number 46 [ 886.591944][T12851] tipc: Enabling of bearer rejected, already enabled [ 886.698471][T12851] tipc: Enabling of bearer rejected, failed to enable media [ 886.828188][T10474] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 887.028062][T10474] usb 7-1: Using ep0 maxpacket: 32 [ 887.035287][T10474] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 887.078019][T10474] usb 7-1: config 0 has no interface number 0 [ 887.094520][T10474] usb 7-1: config 0 interface 184 has no altsetting 0 [ 887.117538][T10474] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 887.147252][T10474] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.167513][T10474] usb 7-1: Product: syz [ 887.177645][T10474] usb 7-1: Manufacturer: syz [ 887.197913][T10474] usb 7-1: SerialNumber: syz [ 887.223246][T10474] usb 7-1: config 0 descriptor?? [ 887.253741][T10474] smsc75xx v1.0.0 [ 887.258475][ T4721] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 887.448051][ T4721] usb 1-1: Using ep0 maxpacket: 16 [ 887.465486][ T4721] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.519515][ T4721] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 887.553195][ T4721] usb 1-1: config 0 interface 0 has no altsetting 0 [ 887.577232][ T4721] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 887.606935][ T4721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.654093][ T4721] usb 1-1: config 0 descriptor?? [ 887.665319][T10474] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 887.687687][ T4721] usbhid 1-1:0.0: can't add hid device: -22 [ 887.697544][T10474] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 887.707753][ T4721] usbhid: probe of 1-1:0.0 failed with error -22 [ 887.718877][T10474] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 887.729416][T10474] smsc75xx: probe of 7-1:0.184 failed with error -61 [ 889.665327][T10596] usb 7-1: USB disconnect, device number 4 [ 890.004533][T10474] usb 1-1: USB disconnect, device number 47 [ 892.213465][T12917] netlink: 'syz.3.2277': attribute type 2 has an invalid length. [ 892.466572][T12921] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 893.120250][ T4324] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 893.308222][ T4324] usb 4-1: Using ep0 maxpacket: 16 [ 893.321958][ T4324] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.374256][ T4324] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 893.405623][ T4324] usb 4-1: config 0 interface 0 has no altsetting 0 [ 893.441551][ T4324] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 893.463886][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.516064][ T4324] usb 4-1: config 0 descriptor?? [ 893.609663][ T4324] usbhid 4-1:0.0: can't add hid device: -22 [ 893.615756][ T4324] usbhid: probe of 4-1:0.0 failed with error -22 [ 894.095093][T12950] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2289'. [ 894.135223][T12950] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2289'. [ 894.183699][T12951] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2289'. [ 894.242990][T12950] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2289'. [ 895.185003][T12964] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 895.801489][T12973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2295'. [ 895.919980][ T4370] usb 4-1: USB disconnect, device number 61 [ 896.856721][T12982] Driver unsupported XDP return value 0 on prog (id 218) dev N/A, expect packet loss! [ 897.481100][T12994] tipc: Enabling of bearer rejected, already enabled [ 897.490579][T12994] tipc: Enabling of bearer rejected, failed to enable media [ 898.429800][T13005] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 898.716240][T12999] rdma_rxe: rxe_register_device failed with error -23 [ 898.753891][T12999] rdma_rxe: failed to add lo [ 899.183710][T13014] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2309'. [ 899.438263][ T4812] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 899.638956][ T4812] usb 3-1: Using ep0 maxpacket: 16 [ 899.713213][ T4812] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.052710][ T4812] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 900.085182][ T4812] usb 3-1: config 0 interface 0 has no altsetting 0 [ 900.092315][ T4812] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 900.101831][ T4812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.123573][ T4812] usb 3-1: config 0 descriptor?? [ 900.147029][ T4812] usbhid 3-1:0.0: can't add hid device: -22 [ 900.163430][ T4812] usbhid: probe of 3-1:0.0 failed with error -22 [ 900.980644][T13037] tipc: Enabling of bearer rejected, already enabled [ 900.990271][T13037] tipc: Enabling of bearer rejected, failed to enable media [ 902.286882][T13044] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 902.396905][ T4812] usb 3-1: USB disconnect, device number 46 [ 902.587665][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2320'. [ 903.691407][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2324'. [ 903.799658][T13069] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 905.007639][T13085] tipc: Enabling of bearer rejected, already enabled [ 905.017167][T13085] tipc: Enabling of bearer rejected, failed to enable media [ 906.409238][T13093] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 907.853655][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2339'. [ 908.406996][T13121] tipc: Enabling of bearer rejected, already enabled [ 908.416512][T13121] tipc: Enabling of bearer rejected, failed to enable media [ 909.282298][T13125] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 909.458177][ T4294] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 909.466977][ T4294] Bluetooth: hci1: Injecting HCI hardware error event [ 909.477809][ T4294] Bluetooth: hci1: hardware error 0x00 [ 910.982168][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2352'. [ 911.469476][T13154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2356'. [ 911.538311][ T4294] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 911.860290][T13163] tipc: Enabling of bearer rejected, already enabled [ 912.010420][T13163] tipc: Enabling of bearer rejected, failed to enable media [ 914.314061][T13192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2370'. [ 914.613218][T13199] netlink: 'syz.2.2373': attribute type 29 has an invalid length. [ 914.621986][T13199] netlink: 'syz.2.2373': attribute type 29 has an invalid length. [ 914.641023][T13199] netlink: 'syz.2.2373': attribute type 29 has an invalid length. [ 914.668278][T13199] netlink: 'syz.2.2373': attribute type 29 has an invalid length. [ 918.078162][ T4276] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 918.268193][ T4276] usb 7-1: Using ep0 maxpacket: 32 [ 918.295711][ T4276] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 918.413645][ T4276] usb 7-1: config 0 has no interface number 0 [ 918.530082][ T4276] usb 7-1: config 0 interface 184 has no altsetting 0 [ 918.656059][ T4276] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 918.824831][ T4276] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.957719][ T4276] usb 7-1: Product: syz [ 918.966691][T13237] tipc: Enabling of bearer rejected, already enabled [ 918.986040][ T4276] usb 7-1: Manufacturer: syz [ 919.031629][ T4276] usb 7-1: SerialNumber: syz [ 919.071799][ T4276] usb 7-1: config 0 descriptor?? [ 919.106286][ T4276] smsc75xx v1.0.0 [ 919.111245][T13237] tipc: Enabling of bearer rejected, failed to enable media [ 919.520781][ T4276] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 919.548083][ T4276] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 919.568057][ T4276] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 919.587522][ T4276] smsc75xx: probe of 7-1:0.184 failed with error -61 [ 921.027658][T13260] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2393'. [ 921.108715][T10474] usb 7-1: USB disconnect, device number 5 [ 921.154398][T13260] binder: 13259:13260 ioctl c0306201 0 returned -14 [ 921.582679][T13272] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2397'. [ 921.618720][T13272] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2397'. [ 921.646734][T13272] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2397'. [ 921.657613][T13272] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2397'. [ 921.682626][T13274] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2407'. [ 921.940827][T13271] binder: 13269:13271 ioctl c0306201 0 returned -14 [ 923.427037][T13291] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 923.457029][T13294] netlink: 'syz.5.2406': attribute type 1 has an invalid length. [ 923.469441][T13294] netlink: 6160 bytes leftover after parsing attributes in process `syz.5.2406'. [ 923.728414][T13301] tipc: Enabling of bearer rejected, already enabled [ 923.758105][ T4370] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 923.796902][T13301] tipc: Enabling of bearer rejected, failed to enable media [ 923.947740][T13308] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2411'. [ 923.948060][ T4370] usb 7-1: Using ep0 maxpacket: 32 [ 923.967514][T13308] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2411'. [ 923.984532][ T4370] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 924.013747][ T4370] usb 7-1: config 0 has no interface number 0 [ 924.017279][T13309] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2411'. [ 924.041217][ T4370] usb 7-1: config 0 interface 184 has no altsetting 0 [ 924.071210][ T4370] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 924.095413][ T4370] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.107280][ T4370] usb 7-1: Product: syz [ 924.120833][ T4370] usb 7-1: Manufacturer: syz [ 924.131822][ T4370] usb 7-1: SerialNumber: syz [ 924.140592][ T4370] usb 7-1: config 0 descriptor?? [ 924.191905][ T4370] smsc75xx v1.0.0 [ 924.641031][ T4370] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 924.672356][ T4370] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 924.722293][ T4370] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 924.779096][ T4370] smsc75xx: probe of 7-1:0.184 failed with error -61 [ 926.807678][ T4370] usb 7-1: USB disconnect, device number 6 [ 926.878763][T13328] sctp: [Deprecated]: syz.5.2416 (pid 13328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 926.878763][T13328] Use struct sctp_sack_info instead [ 927.340395][T13332] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 928.260166][T13351] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 930.020931][T13369] __nla_validate_parse: 1 callbacks suppressed [ 930.020978][T13369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2432'. [ 930.215825][T13371] tipc: Enabling of bearer rejected, already enabled [ 930.225435][T13371] tipc: Enabling of bearer rejected, failed to enable media [ 931.628302][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.634677][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.647314][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2447'. [ 931.666473][T13410] tipc: Enabling of bearer rejected, already enabled [ 931.675774][T13410] tipc: Enabling of bearer rejected, failed to enable media [ 932.636624][T13427] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2455'. [ 932.651130][T13427] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2455'. [ 932.673467][T13427] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2455'. [ 932.719176][T13427] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2455'. [ 933.339251][T13441] tipc: Enabling of bearer rejected, already enabled [ 933.349774][T13441] tipc: Enabling of bearer rejected, failed to enable media [ 934.558491][T13457] sctp: [Deprecated]: syz.6.2466 (pid 13457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 934.558491][T13457] Use struct sctp_sack_info instead [ 937.449575][T13495] sctp: [Deprecated]: syz.2.2480 (pid 13495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 937.449575][T13495] Use struct sctp_sack_info instead [ 937.538181][ T4722] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 937.798180][ T4722] usb 1-1: Using ep0 maxpacket: 16 [ 937.814903][ T4722] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.678963][ T4722] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 938.746931][T13518] tipc: Enabling of bearer rejected, already enabled [ 938.756430][T13518] tipc: Enabling of bearer rejected, failed to enable media [ 939.100383][ T4722] usb 1-1: config 0 interface 0 has no altsetting 0 [ 939.107094][ T4722] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 939.116251][ T4722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.137549][ T4722] usb 1-1: config 0 descriptor?? [ 939.159926][ T4722] usbhid 1-1:0.0: can't add hid device: -22 [ 939.165990][ T4722] usbhid: probe of 1-1:0.0 failed with error -22 [ 939.264577][T13523] netlink: 'syz.5.2490': attribute type 10 has an invalid length. [ 939.288246][T13523] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2490'. [ 939.297548][T13526] netlink: 'syz.6.2491': attribute type 29 has an invalid length. [ 939.303084][T13523] device vxcan0 entered promiscuous mode [ 939.314731][T13523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 939.322946][T13523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 939.343134][T13523] A link change request failed with some changes committed already. Interface vxcan0 may have been left with an inconsistent configuration, please check. [ 939.371745][T13526] netlink: 'syz.6.2491': attribute type 29 has an invalid length. [ 939.382275][T13529] netlink: 'syz.6.2491': attribute type 29 has an invalid length. [ 939.600607][T13535] sctp: [Deprecated]: syz.3.2494 (pid 13535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 939.600607][T13535] Use struct sctp_sack_info instead [ 940.020212][ T4722] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 940.159810][T13551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2500'. [ 940.258027][ T4722] usb 3-1: Using ep0 maxpacket: 32 [ 940.265349][ T4722] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 940.289441][ T4722] usb 3-1: config 0 has no interface number 0 [ 940.315775][ T4722] usb 3-1: config 0 interface 184 has no altsetting 0 [ 940.341247][ T4722] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 940.368462][ T4722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.407898][ T4722] usb 3-1: Product: syz [ 940.418160][ T4722] usb 3-1: Manufacturer: syz [ 940.422935][ T4722] usb 3-1: SerialNumber: syz [ 940.442579][ T4722] usb 3-1: config 0 descriptor?? [ 940.465212][ T4722] smsc75xx v1.0.0 [ 940.605798][ T4724] usb 1-1: USB disconnect, device number 48 [ 941.094734][T13557] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 941.661052][ T4722] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 941.678133][T13564] tipc: Enabling of bearer rejected, failed to enable media [ 941.688299][ T4722] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 941.703402][ T4722] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 941.719115][ T4722] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 943.377221][T13595] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 943.880014][T13597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2515'. [ 944.033388][ T4724] usb 3-1: USB disconnect, device number 47 [ 944.152471][T13604] tipc: Enabling of bearer rejected, already enabled [ 944.162009][T13604] tipc: Enabling of bearer rejected, failed to enable media [ 947.593047][T13644] tipc: Started in network mode [ 947.598171][T13644] tipc: Node identity 7f000001, cluster identity 4711 [ 947.605523][T13644] tipc: Enabled bearer , priority 10 [ 947.613864][T13644] tipc: Enabling of bearer rejected, failed to enable media [ 947.645842][T13647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'. [ 948.777911][T10596] tipc: Node number set to 2130706433 [ 949.093573][T13655] lo speed is unknown, defaulting to 1000 [ 950.289286][T13678] device syzkaller0 entered promiscuous mode [ 950.298327][ T4724] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 950.508058][ T4724] usb 4-1: Using ep0 maxpacket: 16 [ 950.515500][ T4724] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.660996][ T4724] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 950.674454][ T4724] usb 4-1: config 0 interface 0 has no altsetting 0 [ 950.681987][ T4724] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 950.995085][ T4724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.005597][ T4724] usb 4-1: config 0 descriptor?? [ 951.046164][ T4724] usbhid 4-1:0.0: can't add hid device: -22 [ 951.055515][T13684] tipc: Enabling of bearer rejected, already enabled [ 951.056468][ T4724] usbhid: probe of 4-1:0.0 failed with error -22 [ 951.121006][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2552'. [ 951.714119][ T4722] usb 4-1: USB disconnect, device number 62 [ 952.455034][T13721] device syzkaller0 entered promiscuous mode [ 953.774638][T13738] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 954.778071][T10474] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 954.968018][T10474] usb 4-1: Using ep0 maxpacket: 16 [ 954.975293][T10474] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.011828][T10474] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 955.044503][T10474] usb 4-1: config 0 interface 0 has no altsetting 0 [ 955.056277][T10474] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 955.067051][T10474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.082379][T13762] device syzkaller0 entered promiscuous mode [ 955.096232][T10474] usb 4-1: config 0 descriptor?? [ 955.130851][T10474] usbhid 4-1:0.0: can't add hid device: -22 [ 955.137025][T10474] usbhid: probe of 4-1:0.0 failed with error -22 [ 955.339589][ T4722] usb 4-1: USB disconnect, device number 63 [ 956.446948][T13775] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 957.748838][T13794] netlink: 'syz.2.2590': attribute type 29 has an invalid length. [ 957.757077][T13794] netlink: 'syz.2.2590': attribute type 29 has an invalid length. [ 957.815759][T13798] netlink: 'syz.2.2590': attribute type 29 has an invalid length. [ 957.903185][T13794] netlink: 'syz.2.2590': attribute type 29 has an invalid length. [ 957.923725][T13801] device syzkaller0 entered promiscuous mode [ 961.413647][T13846] device syzkaller0 entered promiscuous mode [ 962.028589][T10596] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 962.220373][T10596] usb 1-1: Using ep0 maxpacket: 16 [ 962.245025][T10596] usb 1-1: config 127 has an invalid interface number: 124 but max is 0 [ 962.253954][T10596] usb 1-1: config 127 has no interface number 0 [ 962.260644][T10596] usb 1-1: config 127 interface 124 has no altsetting 0 [ 962.347230][T10596] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 962.436016][T10596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.508596][T10596] usb 1-1: Product: syz [ 962.512842][T10596] usb 1-1: Manufacturer: syz [ 962.547132][T10596] usb 1-1: SerialNumber: syz [ 965.059590][T13879] device syzkaller0 entered promiscuous mode [ 965.272015][T10596] usb 1-1: USB disconnect, device number 49 [ 965.688059][ T4370] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 966.008215][ T4370] usb 4-1: Using ep0 maxpacket: 16 [ 967.204965][T13916] tipc: Enabling of bearer rejected, already enabled [ 967.221722][T13916] tipc: Enabling of bearer rejected, failed to enable media [ 967.870907][T13924] device syzkaller0 entered promiscuous mode [ 968.045235][T13926] lo speed is unknown, defaulting to 1000 [ 968.375346][ T4370] usb 4-1: unable to get BOS descriptor or descriptor too short [ 968.388589][ T4370] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 968.398013][ T4370] usb 4-1: can't read configurations, error -71 [ 968.468256][ T4814] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 968.695017][ T4814] usb 3-1: Using ep0 maxpacket: 16 [ 968.723856][ T4814] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 968.740325][ T4814] usb 3-1: config 127 has no interface number 0 [ 968.746852][ T4814] usb 3-1: config 127 interface 124 has no altsetting 0 [ 968.764091][ T4814] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 968.791743][T13942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2647'. [ 968.793216][ T4814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.813067][ T4814] usb 3-1: Product: syz [ 968.817290][ T4814] usb 3-1: Manufacturer: syz [ 968.822464][ T4814] usb 3-1: SerialNumber: syz [ 970.352179][ T4724] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 970.562777][T13959] device syzkaller0 entered promiscuous mode [ 970.578209][ T4724] usb 1-1: Using ep0 maxpacket: 32 [ 970.585584][ T4724] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 970.601335][ T4814] usb 3-1: USB disconnect, device number 48 [ 970.621202][ T4724] usb 1-1: config 0 has no interface number 0 [ 970.631900][ T4724] usb 1-1: config 0 interface 184 has no altsetting 0 [ 970.658987][ T4724] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 970.677105][ T4724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.694993][ T4724] usb 1-1: Product: syz [ 970.710388][ T4724] usb 1-1: Manufacturer: syz [ 970.732850][ T4724] usb 1-1: SerialNumber: syz [ 970.751844][ T4724] usb 1-1: config 0 descriptor?? [ 970.772704][ T4724] smsc75xx v1.0.0 [ 971.231500][ T4724] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 971.245040][ T4724] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 971.255000][ T4724] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 971.266033][ T4724] smsc75xx: probe of 1-1:0.184 failed with error -61 [ 971.570707][T13978] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 971.602094][T13978] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 971.798415][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2664'. [ 972.479973][T13998] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2668'. [ 972.493765][T13997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2670'. [ 972.549491][T13998] tipc: Enabling of bearer rejected, failed to enable media [ 972.566736][T10474] usb 1-1: USB disconnect, device number 50 [ 972.628614][T14000] device syzkaller0 entered promiscuous mode [ 973.262761][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2676'. [ 973.715491][T10474] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 973.918100][T10474] usb 1-1: Using ep0 maxpacket: 16 [ 973.929004][T10474] usb 1-1: config 127 has an invalid interface number: 124 but max is 0 [ 974.238328][T10474] usb 1-1: config 127 has no interface number 0 [ 974.314794][T10474] usb 1-1: config 127 interface 124 has no altsetting 0 [ 974.439528][T10474] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 974.583333][T10474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.622580][T10474] usb 1-1: Product: syz [ 974.640656][T10474] usb 1-1: Manufacturer: syz [ 974.657424][T10474] usb 1-1: SerialNumber: syz [ 974.805633][T14039] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2683'. [ 978.011868][T10474] usb 1-1: USB disconnect, device number 51 [ 978.326287][T14056] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2689'. [ 978.778463][T14072] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2695'. [ 978.995539][T14074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2694'. [ 979.206610][T14078] device syzkaller0 entered promiscuous mode [ 980.758083][T10596] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 980.808119][ T4370] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 980.938156][T10596] usb 1-1: Using ep0 maxpacket: 32 [ 980.945978][T10596] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 980.977207][T10596] usb 1-1: config 0 has no interface number 0 [ 980.987056][T10596] usb 1-1: config 0 interface 184 has no altsetting 0 [ 980.998146][ T4370] usb 3-1: Using ep0 maxpacket: 16 [ 981.008947][ T4370] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 981.024816][T10596] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 981.034636][ T4370] usb 3-1: config 127 has no interface number 0 [ 981.041466][T10596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.051646][ T4370] usb 3-1: config 127 interface 124 has no altsetting 0 [ 981.059548][T10596] usb 1-1: Product: syz [ 981.064879][T10596] usb 1-1: Manufacturer: syz [ 981.071081][T10596] usb 1-1: SerialNumber: syz [ 981.076939][ T4370] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 981.087788][ T4370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.099088][ T4370] usb 3-1: Product: syz [ 981.103316][ T4370] usb 3-1: Manufacturer: syz [ 981.108486][ T4370] usb 3-1: SerialNumber: syz [ 981.126724][T10596] usb 1-1: config 0 descriptor?? [ 981.149318][T10596] smsc75xx v1.0.0 [ 981.196805][T14108] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2707'. [ 982.395533][T10596] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 982.585969][T10596] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 982.599234][T10596] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 982.610415][T10596] smsc75xx: probe of 1-1:0.184 failed with error -61 [ 982.886454][ T4370] usb 3-1: USB disconnect, device number 49 [ 983.284755][T14130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2712'. [ 984.044215][T10474] usb 1-1: USB disconnect, device number 52 [ 984.145608][T14146] netlink: 'syz.5.2718': attribute type 12 has an invalid length. [ 984.206990][T14152] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2719'. [ 984.261006][T14146] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 985.720894][T14170] device syzkaller0 entered promiscuous mode [ 985.920394][T14170] tipc: Enabled bearer , priority 0 [ 986.105569][T14167] tipc: Resetting bearer [ 986.182304][T14179] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2725'. [ 986.270393][T14179] binder: 14178:14179 ioctl c0306201 0 returned -14 [ 986.296929][T14167] tipc: Disabling bearer [ 986.600561][T14194] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2732'. [ 986.783503][T14200] tipc: Enabled bearer , priority 0 [ 987.134656][T14202] device syzkaller0 entered promiscuous mode [ 987.178175][T10474] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 987.420495][T10474] usb 3-1: Using ep0 maxpacket: 32 [ 987.430046][T10474] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 987.467162][T10474] usb 3-1: config 0 has no interface number 0 [ 987.490570][T10474] usb 3-1: config 0 interface 184 has no altsetting 0 [ 987.523101][T10474] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 987.564266][T10474] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.593755][T10474] usb 3-1: Product: syz [ 987.632210][T10474] usb 3-1: Manufacturer: syz [ 987.636887][T10474] usb 3-1: SerialNumber: syz [ 987.690993][T10474] usb 3-1: config 0 descriptor?? [ 987.699829][T14204] tipc: Resetting bearer [ 987.724485][T10474] smsc75xx v1.0.0 [ 987.733308][T14199] tipc: Resetting bearer [ 987.780714][T14199] tipc: Disabling bearer [ 988.150396][T10474] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 988.173046][T10474] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 988.199603][T10474] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 988.226606][T10474] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 988.288273][T14220] netlink: 'syz.6.2740': attribute type 13 has an invalid length. [ 988.338336][T14220] netlink: 'syz.6.2740': attribute type 17 has an invalid length. [ 988.346180][T14220] netlink: 'syz.6.2740': attribute type 27 has an invalid length. [ 989.524552][T14244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2745'. [ 990.105971][ T22] usb 3-1: USB disconnect, device number 50 [ 990.286898][T14249] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 992.332510][T14285] sctp: [Deprecated]: syz.0.2760 (pid 14285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 992.332510][T14285] Use struct sctp_sack_info instead [ 993.072082][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.078527][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.088043][T10474] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 993.288131][T10474] usb 4-1: Using ep0 maxpacket: 16 [ 993.297016][T10474] usb 4-1: config 127 has an invalid interface number: 124 but max is 0 [ 993.326296][T10474] usb 4-1: config 127 has no interface number 0 [ 993.346631][T10474] usb 4-1: config 127 interface 124 has no altsetting 0 [ 993.377800][T10474] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 993.403579][T10474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.422534][T10474] usb 4-1: Product: syz [ 993.426765][T10474] usb 4-1: Manufacturer: syz [ 993.441523][T10474] usb 4-1: SerialNumber: syz [ 993.639742][T14301] tipc: Enabled bearer , priority 0 [ 993.661320][T14301] device syzkaller0 entered promiscuous mode [ 993.738657][T14301] tipc: Resetting bearer [ 993.773123][T14300] tipc: Resetting bearer [ 993.839254][T14300] tipc: Disabling bearer [ 994.071124][T14308] device syzkaller0 entered promiscuous mode [ 994.550849][T10474] usb 4-1: USB disconnect, device number 66 [ 995.314883][T14322] sctp: [Deprecated]: syz.6.2774 (pid 14322) Use of struct sctp_assoc_value in delayed_ack socket option. [ 995.314883][T14322] Use struct sctp_sack_info instead [ 995.885227][T14332] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2778'. [ 995.918028][T14332] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2778'. [ 995.953111][T14332] device syzkaller0 entered promiscuous mode [ 996.563174][T14348] tipc: Enabled bearer , priority 0 [ 996.570830][T14348] device syzkaller0 entered promiscuous mode [ 996.772953][T14356] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2786'. [ 996.783885][T14356] binder: 14355:14356 ioctl c0306201 0 returned -14 [ 998.180553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 999.038474][T14396] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2797'. [ 999.049652][T14396] binder: 14395:14396 ioctl c0306201 0 returned -14 [ 1001.238849][T14352] tipc: Resetting bearer [ 1001.336022][T14347] tipc: Resetting bearer [ 1001.368467][T14347] tipc: Disabling bearer [ 1002.321309][T14424] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1002.898745][T14422] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2808'. [ 1002.924558][T14422] binder: 14421:14422 ioctl c0306201 0 returned -14 [ 1003.103503][T14431] tipc: Enabled bearer , priority 0 [ 1003.189397][T14431] device syzkaller0 entered promiscuous mode [ 1003.475595][T14433] tipc: Resetting bearer [ 1003.505712][T14430] tipc: Resetting bearer [ 1003.534344][T14430] tipc: Disabling bearer [ 1003.715512][T14442] device syzkaller0 entered promiscuous mode [ 1004.912345][T14457] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2822'. [ 1004.929621][T14457] binder: 14455:14457 ioctl c0306201 0 returned -14 [ 1006.543231][T14489] device syzkaller0 entered promiscuous mode [ 1006.627760][T14492] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2833'. [ 1006.710858][T14492] binder: 14491:14492 ioctl c0306201 0 returned -14 [ 1007.465109][T14510] tipc: Enabling of bearer rejected, failed to enable media [ 1010.359935][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1010.377598][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1010.386432][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1010.401727][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1010.409334][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1010.416545][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1010.682360][T14532] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2846'. [ 1011.722366][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.792701][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.881689][T14525] lo speed is unknown, defaulting to 1000 [ 1011.884462][T14546] device syzkaller0 entered promiscuous mode [ 1012.055507][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.067715][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.187148][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.201206][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.354796][T14551] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1012.508974][ T4294] Bluetooth: hci0: command 0x0409 tx timeout [ 1012.543945][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.581459][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.688234][T14562] tipc: Enabled bearer , priority 0 [ 1013.721906][T14559] device syzkaller0 entered promiscuous mode [ 1013.739412][T14559] tipc: Resetting bearer [ 1013.763908][T14557] tipc: Resetting bearer [ 1014.578547][ T4294] Bluetooth: hci0: command 0x041b tx timeout [ 1014.679965][T14557] tipc: Disabling bearer [ 1014.977056][ T46] tipc: Disabling bearer [ 1015.004376][ T46] tipc: Left network mode [ 1015.607602][T14525] chnl_net:caif_netlink_parms(): no params data found [ 1016.430977][T14525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.488196][T14525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.524269][T14525] device bridge_slave_0 entered promiscuous mode [ 1016.558808][T14525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.566252][T14525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.595523][T14525] device bridge_slave_1 entered promiscuous mode [ 1016.659282][ T4294] Bluetooth: hci0: command 0x040f tx timeout [ 1017.179604][T14525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.690457][T14525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.782762][T14621] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 1018.006843][T14525] team0: Port device team_slave_0 added [ 1018.722101][T14525] team0: Port device team_slave_1 added [ 1018.738499][ T4294] Bluetooth: hci0: command 0x0419 tx timeout [ 1019.109595][T14525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.137136][T14525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.215149][T14525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.246295][T14525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.264701][T14525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.292678][T14660] sctp: [Deprecated]: syz.3.2876 (pid 14660) Use of int in max_burst socket option. [ 1019.292678][T14660] Use struct sctp_assoc_value instead [ 1019.308641][T14525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.422978][ T46] device hsr_slave_0 left promiscuous mode [ 1019.463244][ T46] device hsr_slave_1 left promiscuous mode [ 1019.496812][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.521216][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.549118][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.575681][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.594939][ T46] device bridge_slave_1 left promiscuous mode [ 1019.602324][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.616043][ T46] device bridge_slave_0 left promiscuous mode [ 1019.625141][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.404780][ T46] device veth0_macvtap left promiscuous mode [ 1020.480047][ T46] device veth1_vlan left promiscuous mode [ 1020.486067][ T46] device veth0_vlan left promiscuous mode [ 1022.476383][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1022.532129][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1022.586988][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.644981][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.087871][ T46] bond0 (unregistering): Released all slaves [ 1023.292115][T14525] device hsr_slave_0 entered promiscuous mode [ 1023.321865][T14525] device hsr_slave_1 entered promiscuous mode [ 1023.684105][T14711] device syzkaller0 entered promiscuous mode [ 1024.769848][T14730] tipc: Enabling of bearer rejected, failed to enable media [ 1026.507375][T14754] tipc: Enabled bearer , priority 0 [ 1026.576095][T14754] device syzkaller0 entered promiscuous mode [ 1026.812533][T14757] tipc: Resetting bearer [ 1026.912827][T14752] tipc: Resetting bearer [ 1027.002543][T14752] tipc: Disabling bearer [ 1027.160642][T14525] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1027.226177][T14525] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1027.291127][T14525] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1027.333303][T14525] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1028.533557][T14525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.577279][T14783] device syzkaller0 entered promiscuous mode [ 1028.743297][T14789] tipc: Enabling of bearer rejected, failed to enable media [ 1028.876831][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1029.013023][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1029.572158][T14525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.641133][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1029.665295][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1029.696384][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.703695][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.752144][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1029.781314][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1029.800632][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1029.838439][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.845641][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.888470][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1029.938469][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1029.985779][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1030.017416][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1030.036859][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1030.073375][T14810] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1030.229026][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1030.249446][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1030.258318][T14816] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 1030.298868][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1030.339837][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1030.382340][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1030.399221][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1030.418702][T14525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1030.557854][T14824] tipc: Enabling of bearer rejected, failed to enable media [ 1031.651590][T14838] tipc: Enabling of bearer rejected, failed to enable media [ 1032.670151][T14840] sctp: [Deprecated]: syz.6.2922 (pid 14840) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1032.670151][T14840] Use struct sctp_sack_info instead [ 1032.714301][T14843] device syzkaller0 entered promiscuous mode [ 1033.067387][T13915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1033.086008][T13915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1033.134263][T14525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1033.173749][T14857] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1033.275072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1033.290392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1033.318386][ T4812] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1033.370143][T14861] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1033.374037][T13915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1033.404025][T13915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1033.425327][T14525] device veth0_vlan entered promiscuous mode [ 1033.447608][T13915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1033.506634][T13915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1033.520468][ T4812] usb 1-1: Using ep0 maxpacket: 16 [ 1033.530802][ T4812] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.693952][ T4812] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1033.871252][ T4812] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1033.884606][T14525] device veth1_vlan entered promiscuous mode [ 1033.954250][ T4812] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1034.077096][ T4812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.266792][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1034.282799][ T4812] usb 1-1: config 0 descriptor?? [ 1034.312719][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1034.344090][ T4812] usbhid 1-1:0.0: can't add hid device: -22 [ 1034.378223][ T4812] usbhid: probe of 1-1:0.0 failed with error -22 [ 1034.387616][T14525] device veth0_macvtap entered promiscuous mode [ 1034.464836][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1034.508578][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1034.540854][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1034.587497][T14525] device veth1_macvtap entered promiscuous mode [ 1034.655538][T14525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.684573][T14525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.716538][T14525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.747364][T14525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.056975][T14525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.296480][T14525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.583396][T14525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1035.614948][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1035.638438][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1035.666915][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1035.679422][T14889] sctp: [Deprecated]: syz.5.2935 (pid 14889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1035.679422][T14889] Use struct sctp_sack_info instead [ 1035.681656][T14525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.727682][T14525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.745944][T14525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.767978][T14525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.777867][T14525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.807959][T14525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.817879][T14525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.913181][T14525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.960394][T14525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.066408][ T22] usb 1-1: USB disconnect, device number 53 [ 1036.123885][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1036.147246][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1036.166652][T14525] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.246920][T14525] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.324491][T14525] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.493112][T14525] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.892957][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2939'. [ 1037.129204][ T4435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.137142][ T4435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.195125][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1037.257360][ T4433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.282744][ T4433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.303155][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1037.636863][T14924] device syzkaller0 entered promiscuous mode [ 1037.962723][T14931] tipc: Enabled bearer , priority 0 [ 1038.014255][T14931] device syzkaller0 entered promiscuous mode [ 1038.212445][T14931] tipc: Resetting bearer [ 1039.352922][T14929] tipc: Resetting bearer [ 1039.457294][T14929] tipc: Disabling bearer [ 1039.590508][T14951] sctp: [Deprecated]: syz.3.2947 (pid 14951) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1039.590508][T14951] Use struct sctp_sack_info instead [ 1039.623207][ T4435] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.904914][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1041.061618][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1041.070315][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1041.080830][T12496] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1041.088984][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1041.096408][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1041.134608][ T4435] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.285248][T14956] lo speed is unknown, defaulting to 1000 [ 1041.475071][ T4435] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.562039][T14975] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1041.705215][T14977] lo speed is unknown, defaulting to 1000 [ 1041.821155][ T4435] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.874426][T14995] tipc: Enabling of bearer rejected, failed to enable media [ 1043.095286][T14999] tipc: Enabled bearer , priority 0 [ 1043.138217][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 1043.154027][T15001] device syzkaller0 entered promiscuous mode [ 1043.207194][T14999] tipc: Resetting bearer [ 1043.279096][T15003] sctp: [Deprecated]: syz.2.2959 (pid 15003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1043.279096][T15003] Use struct sctp_sack_info instead [ 1043.348882][T14998] tipc: Resetting bearer [ 1043.451816][T14998] tipc: Disabling bearer [ 1044.411579][ T4435] tipc: Disabling bearer [ 1044.429415][T14956] chnl_net:caif_netlink_parms(): no params data found [ 1044.436405][ T4435] tipc: Left network mode [ 1044.653433][T15017] device syzkaller0 entered promiscuous mode [ 1045.218325][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 1047.309705][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 1049.379456][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 1049.546112][T15065] device syzkaller0 entered promiscuous mode [ 1049.554360][T15077] tipc: Enabling of bearer rejected, already enabled [ 1049.810048][T15090] sctp: [Deprecated]: syz.5.2971 (pid 15090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1049.810048][T15090] Use struct sctp_sack_info instead [ 1053.306271][T15085] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2970'. [ 1053.332992][T15083] lo speed is unknown, defaulting to 1000 [ 1053.555586][T14956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.573909][T14956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.587324][T14956] device bridge_slave_0 entered promiscuous mode [ 1054.458714][T14956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.473926][T14956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.522207][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.529113][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.568654][T14956] device bridge_slave_1 entered promiscuous mode [ 1055.355736][T15105] device syzkaller0 entered promiscuous mode [ 1058.888466][T15124] tipc: Enabling of bearer rejected, already enabled [ 1058.992569][T15150] sctp: [Deprecated]: syz.5.2981 (pid 15150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1058.992569][T15150] Use struct sctp_sack_info instead [ 1059.022886][T14956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.146835][T14956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.326969][T14956] team0: Port device team_slave_0 added [ 1059.386287][T14956] team0: Port device team_slave_1 added [ 1060.033273][T14956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.058004][T14956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.170066][T14956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.186995][T15159] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1060.231843][T15159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1060.258776][T15159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1060.287060][T14956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.317241][T14956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.458134][T14956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.756247][T14956] device hsr_slave_0 entered promiscuous mode [ 1060.775566][T14956] device hsr_slave_1 entered promiscuous mode [ 1060.786391][T14956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1060.818301][T14956] Cannot create hsr debugfs directory [ 1060.826561][T15179] device syzkaller0 entered promiscuous mode [ 1062.439621][T15196] tipc: Enabling of bearer rejected, already enabled [ 1062.575241][ T4435] device hsr_slave_0 left promiscuous mode [ 1062.608027][ T4435] device hsr_slave_1 left promiscuous mode [ 1062.688441][ T4435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1062.708285][ T4435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1062.737455][ T4435] device bridge_slave_1 left promiscuous mode [ 1062.766647][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.810095][T15206] sctp: [Deprecated]: syz.3.2992 (pid 15206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1062.810095][T15206] Use struct sctp_sack_info instead [ 1062.830121][ T4435] device bridge_slave_0 left promiscuous mode [ 1062.836548][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.944943][ T4435] device veth1_macvtap left promiscuous mode [ 1062.956158][ T4435] device veth0_macvtap left promiscuous mode [ 1062.962422][ T4435] device veth1_vlan left promiscuous mode [ 1062.986262][ T4435] device veth0_vlan left promiscuous mode [ 1063.558115][ T4370] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1063.764742][ T4370] usb 7-1: Using ep0 maxpacket: 16 [ 1063.771778][ T4370] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.795368][ T4370] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1063.809118][ T4370] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1063.815835][ T4370] usb 7-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1063.825234][ T4370] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.855119][ T4370] usb 7-1: config 0 descriptor?? [ 1063.869797][ T4370] usbhid 7-1:0.0: can't add hid device: -22 [ 1063.875793][ T4370] usbhid: probe of 7-1:0.0 failed with error -22 [ 1064.256969][ T4435] team0 (unregistering): Port device team_slave_1 removed [ 1064.325297][ T4435] team0 (unregistering): Port device team_slave_0 removed [ 1064.388383][ T4435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.453862][ T4435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.992490][ T4294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1065.014746][ T4294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1065.028246][ T4294] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1065.053478][ T4294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1065.059802][ T4435] bond0 (unregistering): Released all slaves [ 1065.067273][ T4294] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1065.081813][ T4294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1065.255508][T15204] lo speed is unknown, defaulting to 1000 [ 1065.469596][T15223] lo speed is unknown, defaulting to 1000 [ 1065.681935][T15230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2997'. [ 1065.750555][T15230] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 1065.938755][T15235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2998'. [ 1065.948656][T15235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2998'. [ 1065.957783][T15235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2998'. [ 1065.967006][T15235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2998'. [ 1066.355016][T10474] usb 7-1: USB disconnect, device number 7 [ 1066.887661][T15251] tipc: Enabling of bearer rejected, already enabled [ 1067.392391][ T4294] Bluetooth: hci4: command 0x0409 tx timeout [ 1067.452482][T15223] chnl_net:caif_netlink_parms(): no params data found [ 1067.715747][ T4435] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.536196][T15275] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1068.540053][ T4435] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.670294][T15279] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3007'. [ 1068.671057][T14956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1068.686740][T15279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3007'. [ 1068.726685][T15279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3007'. [ 1068.768631][T15279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3007'. [ 1068.780961][ T4435] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.833548][T15223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.852121][T15223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.883256][T15223] device bridge_slave_0 entered promiscuous mode [ 1068.926484][T14956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1069.020366][ T4435] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.076194][T15223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.088441][T15223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.097091][T15223] device bridge_slave_1 entered promiscuous mode [ 1069.143264][T14956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1069.193276][T14956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1069.235733][T15223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.308329][T15223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.328341][T10474] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1069.392735][T15223] team0: Port device team_slave_0 added [ 1069.460879][ T4294] Bluetooth: hci4: command 0x041b tx timeout [ 1069.493233][T15223] team0: Port device team_slave_1 added [ 1069.518073][T10474] usb 4-1: Using ep0 maxpacket: 16 [ 1069.525792][T10474] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.538550][T10474] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1069.552432][T10474] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1069.559980][T10474] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1069.570285][T10474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.584495][T10474] usb 4-1: config 0 descriptor?? [ 1069.595543][T10474] usbhid 4-1:0.0: can't add hid device: -22 [ 1069.602175][T10474] usbhid: probe of 4-1:0.0 failed with error -22 [ 1069.682399][T15223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.718190][T15223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1069.800274][T15223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.969194][T15223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.976347][T15223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.004281][T15223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.139663][T14956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.364980][T15223] device hsr_slave_0 entered promiscuous mode [ 1070.407175][T15223] device hsr_slave_1 entered promiscuous mode [ 1070.446398][T15223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1070.462684][T15223] Cannot create hsr debugfs directory [ 1070.573602][T14956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.634327][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1070.646065][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1070.670209][T15308] netlink: 'syz.5.3012': attribute type 1 has an invalid length. [ 1070.705178][T15308] netlink: 'syz.5.3012': attribute type 3 has an invalid length. [ 1070.730610][T15308] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3012'. [ 1070.911951][T15315] Bluetooth: MGMT ver 1.22 [ 1070.950255][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1070.963514][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1070.998488][ T4415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.005697][ T4415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.046618][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1071.080846][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1071.098518][ T4415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.105710][ T4415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.274964][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1071.293574][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1071.420723][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1071.452191][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1071.472572][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1071.544539][ T4294] Bluetooth: hci4: command 0x040f tx timeout [ 1071.658450][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1071.688857][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1071.719427][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1071.731882][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1071.764488][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1071.787261][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1071.804854][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1071.897484][T14956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1072.137195][T10474] usb 4-1: USB disconnect, device number 67 [ 1072.327327][T15352] netlink: 'syz.3.3021': attribute type 29 has an invalid length. [ 1072.469362][T15352] netlink: 'syz.3.3021': attribute type 29 has an invalid length. [ 1072.515364][T15353] netlink: 'syz.3.3021': attribute type 29 has an invalid length. [ 1073.301604][ T4435] device hsr_slave_0 left promiscuous mode [ 1073.424331][ T4435] device hsr_slave_1 left promiscuous mode [ 1073.561929][ T4435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.662058][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 1073.702339][ T4435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.744857][ T4435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.778340][ T4435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.797202][ T4435] device bridge_slave_1 left promiscuous mode [ 1073.818975][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.829842][ T4435] device bridge_slave_0 left promiscuous mode [ 1073.836127][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.885111][ T4435] device veth1_macvtap left promiscuous mode [ 1073.891712][ T4435] device veth0_macvtap left promiscuous mode [ 1073.901454][ T4435] device veth1_vlan left promiscuous mode [ 1073.907714][ T4435] device veth0_vlan left promiscuous mode [ 1074.883607][T15334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1075.119571][T15391] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1075.480413][ T4435] team0 (unregistering): Port device team_slave_1 removed [ 1075.601550][ T4435] team0 (unregistering): Port device team_slave_0 removed [ 1075.664071][ T4435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1075.733615][ T4435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1076.226551][ T4435] bond0 (unregistering): Released all slaves [ 1076.413366][T15379] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3023'. [ 1076.470016][T15223] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1076.557781][T15397] device syzkaller0 entered promiscuous mode [ 1080.967019][T15223] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1081.017422][T14956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.039551][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1081.047109][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1081.188091][T15425] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1081.196121][T15425] device syzkaller0 entered promiscuous mode [ 1081.225061][T15223] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1081.272308][T15223] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1081.495201][T15473] tipc: Enabling of bearer rejected, already enabled [ 1081.849638][T13915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1081.943272][T13915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1082.328328][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1082.357225][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1082.376534][T14956] device veth0_vlan entered promiscuous mode [ 1082.424377][T15477] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1082.542249][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1082.559404][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1082.604739][T14956] device veth1_vlan entered promiscuous mode [ 1082.744962][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1082.780315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1082.820138][T15223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1082.828597][T14956] device veth0_macvtap entered promiscuous mode [ 1082.884921][T14956] device veth1_macvtap entered promiscuous mode [ 1082.976831][T13915] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1083.020099][T13915] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1083.111786][T13915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1083.180255][T13915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1083.321880][T15223] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.446737][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.508982][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.562967][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.588129][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.628166][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.658026][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.705168][T14956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1083.723487][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1083.735960][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1083.779117][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.786290][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.803710][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1083.837627][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1084.099416][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.157190][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.978433][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.089701][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.105728][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.119138][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.155815][T14956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1085.189492][T14956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.219219][T14956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.255291][T14956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.285825][T14956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.319631][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1085.344222][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1085.357304][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1085.370343][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.377565][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.395430][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1085.407238][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1085.419202][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1085.430162][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1085.449309][T15523] tipc: Enabling of bearer rejected, already enabled [ 1085.579630][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1085.593379][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1085.628635][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1085.656141][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1085.701560][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1085.716792][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1085.727752][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1085.736503][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1085.745518][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1085.762960][T15223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1085.791225][T15532] device syzkaller0 entered promiscuous mode [ 1086.024160][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.044681][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.076039][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1086.132475][T15543] device syzkaller0 entered promiscuous mode [ 1086.242694][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.258003][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.269488][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1086.970304][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1086.996799][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1087.007656][T15223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.040194][T15585] tipc: Started in network mode [ 1088.045509][T15585] tipc: Node identity 7f000001, cluster identity 4711 [ 1088.060275][T15585] tipc: Enabled bearer , priority 10 [ 1088.164640][T15585] tipc: Enabling of bearer rejected, failed to enable media [ 1088.990531][T15584] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1089.068377][ T4276] tipc: Node number set to 2130706433 [ 1089.113408][T15593] device syzkaller0 entered promiscuous mode [ 1089.480264][T15602] device syzkaller0 entered promiscuous mode [ 1089.902170][T15612] tipc: Enabling of bearer rejected, already enabled [ 1090.826410][T15624] device syzkaller0 entered promiscuous mode [ 1091.256453][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1091.321046][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1091.883897][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1091.912439][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1091.965900][T15223] device veth0_vlan entered promiscuous mode [ 1092.029000][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1092.057792][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1092.086944][T15223] device veth1_vlan entered promiscuous mode [ 1092.346670][T15644] tipc: Enabling of bearer rejected, already enabled [ 1092.362291][T15644] tipc: Enabling of bearer rejected, failed to enable media [ 1093.108319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1093.119146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1093.197519][T15223] device veth0_macvtap entered promiscuous mode [ 1093.266312][T15223] device veth1_macvtap entered promiscuous mode [ 1093.371772][T15223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1093.425336][T15223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.456709][T15223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1093.467625][T15223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.477792][T15223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1093.618679][T15223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.669617][T15223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1093.680286][T15223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.886966][T15223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1094.399399][T15657] tipc: Enabling of bearer rejected, already enabled [ 1094.460906][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1094.505640][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1094.567398][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1094.613272][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1094.649211][T15673] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1094.666001][T15223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.693560][T15223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.718034][T15223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.755204][T15223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.792838][T15223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.834157][T15223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.884090][T15223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.985188][T15223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.084437][T15223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.828076][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1095.859207][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1095.951002][T15223] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.976815][T15223] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.074975][T15223] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.116271][T15223] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.375872][T15708] tipc: Enabling of bearer rejected, already enabled [ 1097.124309][T15708] tipc: Enabling of bearer rejected, failed to enable media [ 1097.375486][ T4407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.152054][ T4407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.358506][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1098.542860][ T7857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.562643][ T7857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.628602][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1098.867831][T15734] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1099.009044][T15732] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1100.365080][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3084'. [ 1100.440304][T15757] device syzkaller0 entered promiscuous mode [ 1100.774715][T15767] tipc: Started in network mode [ 1100.779936][T15767] tipc: Node identity 7f000001, cluster identity 4711 [ 1100.788512][T15767] tipc: Enabled bearer , priority 10 [ 1100.803468][T15767] tipc: Enabling of bearer rejected, failed to enable media [ 1101.799973][ T4370] tipc: Node number set to 2130706433 [ 1101.954304][T15778] tipc: Enabling of bearer rejected, already enabled [ 1101.969048][T15778] tipc: Enabling of bearer rejected, failed to enable media [ 1103.120048][T15791] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1104.618918][T15815] device syzkaller0 entered promiscuous mode [ 1106.494061][T15821] tipc: Enabling of bearer rejected, already enabled [ 1108.270827][ T4340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.473900][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1108.484645][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1108.494416][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1108.502501][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1108.553294][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1108.560744][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1109.494460][ T4340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.972798][T15856] lo speed is unknown, defaulting to 1000 [ 1110.170767][ T4340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.552741][ T4340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.579614][ T4294] Bluetooth: hci0: command 0x0409 tx timeout [ 1110.893378][T15883] tipc: Enabling of bearer rejected, already enabled [ 1112.657313][ T4340] tipc: Disabling bearer [ 1112.663265][ T4340] tipc: Left network mode [ 1112.683292][ T4294] Bluetooth: hci0: command 0x041b tx timeout [ 1112.709291][T10474] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1112.948334][T10474] usb 1-1: Using ep0 maxpacket: 16 [ 1112.987764][T10474] usb 1-1: config 127 has an invalid interface number: 124 but max is 0 [ 1113.136598][T10474] usb 1-1: config 127 has no interface number 0 [ 1113.296272][T10474] usb 1-1: config 127 interface 124 has no altsetting 0 [ 1113.407568][T10474] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1113.458794][T10474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.496389][T10474] usb 1-1: Product: syz [ 1113.538097][T10474] usb 1-1: Manufacturer: syz [ 1113.588071][T10474] usb 1-1: SerialNumber: syz [ 1113.729149][T15856] chnl_net:caif_netlink_parms(): no params data found [ 1115.085474][ T4294] Bluetooth: hci0: command 0x040f tx timeout [ 1115.592358][T10474] usb 1-1: USB disconnect, device number 54 [ 1115.806287][T15856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.880722][T15856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.948609][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.981561][T15856] device bridge_slave_0 entered promiscuous mode [ 1116.038495][T15948] tipc: Enabling of bearer rejected, already enabled [ 1116.288233][T15856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.303315][T15856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.337319][T15856] device bridge_slave_1 entered promiscuous mode [ 1116.555787][T15856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.186682][T15856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.218798][ T4294] Bluetooth: hci0: command 0x0419 tx timeout [ 1117.801089][T15856] team0: Port device team_slave_0 added [ 1117.838426][T15856] team0: Port device team_slave_1 added [ 1117.935527][T15973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3139'. [ 1117.953429][T15973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3139'. [ 1118.166105][T15856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.189867][T15856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.222245][T15856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.242202][T15856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.278539][T15856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.313629][T15856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.478152][T10474] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1119.126132][T16002] tipc: Enabling of bearer rejected, already enabled [ 1119.440825][T10474] usb 6-1: Using ep0 maxpacket: 16 [ 1119.449686][T10474] usb 6-1: config 127 has an invalid interface number: 124 but max is 0 [ 1119.459935][T10474] usb 6-1: config 127 has no interface number 0 [ 1119.466259][T10474] usb 6-1: config 127 interface 124 has no altsetting 0 [ 1119.480558][ T4340] device hsr_slave_0 left promiscuous mode [ 1119.481195][T10474] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1119.542139][T10474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.552025][ T4340] device hsr_slave_1 left promiscuous mode [ 1119.566613][T10474] usb 6-1: Product: syz [ 1119.602001][T10474] usb 6-1: Manufacturer: syz [ 1119.606750][T10474] usb 6-1: SerialNumber: syz [ 1119.650259][ T4340] device veth0_macvtap left promiscuous mode [ 1119.667962][ T4340] device veth1_vlan left promiscuous mode [ 1119.676799][ T4340] device veth0_vlan left promiscuous mode [ 1120.784301][T10474] usb 6-1: USB disconnect, device number 50 [ 1122.449352][ T4340] bond0 (unregistering): Released all slaves [ 1122.876103][T15856] device hsr_slave_0 entered promiscuous mode [ 1123.019979][T15856] device hsr_slave_1 entered promiscuous mode [ 1123.110138][T16011] netlink: 'syz.6.3146': attribute type 1 has an invalid length. [ 1123.274809][T16020] tipc: Enabling of bearer rejected, failed to enable media [ 1124.589778][T16053] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1125.167253][T16059] tipc: Enabling of bearer rejected, already enabled [ 1125.182794][T16059] tipc: Enabling of bearer rejected, failed to enable media [ 1126.294082][T16068] device syzkaller0 entered promiscuous mode [ 1130.849193][T16093] device syzkaller0 entered promiscuous mode [ 1131.198768][T16114] tipc: Enabled bearer , priority 0 [ 1131.261400][T16113] tipc: Disabling bearer [ 1131.301344][T15856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1131.321002][T15856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1131.349829][T15856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1131.451622][T15856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1131.603058][T16129] tipc: Enabling of bearer rejected, already enabled [ 1132.544262][T16132] binder: 16125:16132 ioctl c0306201 0 returned -14 [ 1132.961746][T15856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.011495][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1133.031142][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1133.059370][T15856] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.101714][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1133.115876][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1133.244821][ T7857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.252116][ T7857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.333590][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1133.362523][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1133.646680][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1133.968397][ T7857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.975601][ T7857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.265566][T16146] device syzkaller0 entered promiscuous mode [ 1134.362988][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1134.379100][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1134.491618][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1134.502662][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1134.511620][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1134.522312][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1134.532628][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1139.634599][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1139.646386][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1139.655855][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1139.667622][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1139.684256][T16185] tipc: Enabled bearer , priority 0 [ 1139.745676][T15856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1139.773867][T16179] tipc: Disabling bearer [ 1140.001687][T16207] binder: 16204:16207 ioctl c0306201 0 returned -14 [ 1142.215753][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1142.230508][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1142.239780][ T4724] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1142.395086][T15856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1142.965401][ T4724] usb 8-1: Using ep0 maxpacket: 16 [ 1143.285533][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1143.299386][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1143.412283][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1143.427515][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1143.519453][T15856] device veth0_vlan entered promiscuous mode [ 1143.651581][T16253] tipc: Enabled bearer , priority 0 [ 1143.708919][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1144.622747][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1144.704254][T15856] device veth1_vlan entered promiscuous mode [ 1144.715547][T16259] binder: 16255:16259 ioctl c0306201 0 returned -14 [ 1144.930988][T16250] tipc: Disabling bearer [ 1145.082221][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1145.105269][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1145.164178][T15856] device veth0_macvtap entered promiscuous mode [ 1145.227770][T15856] device veth1_macvtap entered promiscuous mode [ 1145.433438][T15856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1145.464049][T15856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.481149][T15856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1145.499541][T15856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.520517][T15856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1145.542475][T15856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.555042][T15856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1145.577339][T15856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.721749][ T4724] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1145.874253][ T4724] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1145.943366][T15856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.014800][ T4724] usb 8-1: can't read configurations, error -71 [ 1146.096813][T15856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.214365][T15856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1146.274351][T15856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.315831][T15856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.448186][T15856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.517941][T15856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.530759][T15856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.542131][T15856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.553528][T15856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.564528][T15856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.575306][T15856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.585907][T15856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.602048][T15856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1146.610327][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1146.623604][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1146.644378][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1146.658511][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1146.659879][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1146.691712][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1146.701082][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1146.723805][T15856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.756182][T15856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.788255][T15856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.835440][T15856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.912078][ T4419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.933936][ T4419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.090406][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1149.010215][T16299] binder: 16293:16299 ioctl c0306201 0 returned -14 [ 1149.331924][ T4407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.371418][ T4407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.397032][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1149.437140][T16305] tipc: Enabled bearer , priority 0 [ 1149.476248][T16305] device syzkaller0 entered promiscuous mode [ 1149.658924][T16314] tipc: Resetting bearer [ 1149.715622][T16304] tipc: Resetting bearer [ 1149.776089][T16304] tipc: Disabling bearer [ 1149.803787][T16320] device syzkaller0 entered promiscuous mode [ 1149.814794][ T22] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1150.008103][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 1152.042908][T16348] binder: 16346:16348 ioctl c0306201 0 returned -14 [ 1152.508751][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1152.754659][ T22] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1152.762568][ T22] usb 1-1: can't read configurations, error -71 [ 1153.313848][T16359] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1153.463834][T16363] netlink: 'syz.5.3220': attribute type 15 has an invalid length. [ 1153.955762][T16376] device syzkaller0 entered promiscuous mode [ 1154.698725][T16398] binder: 16395:16398 ioctl c0306201 0 returned -14 [ 1156.246603][T16419] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1156.547067][T16423] device syzkaller0 entered promiscuous mode [ 1156.828629][T16430] device syzkaller0 entered promiscuous mode [ 1157.043661][T16442] binder: 16436:16442 ioctl c0306201 0 returned -14 [ 1158.110217][T16450] tipc: Enabled bearer , priority 0 [ 1158.165399][T16449] tipc: Disabling bearer [ 1159.594221][T16491] binder: 16479:16491 ioctl c0306201 0 returned -14 [ 1160.598631][T16512] tipc: Started in network mode [ 1160.603612][T16512] tipc: Node identity 729a5cffbb03, cluster identity 4711 [ 1160.631640][T16512] tipc: Enabled bearer , priority 0 [ 1160.723418][T16511] tipc: Disabling bearer [ 1163.380076][T16554] binder: 16546:16554 ioctl c0306201 0 returned -14 [ 1164.178685][ T4294] Bluetooth: hci3: command 0x0406 tx timeout [ 1164.192789][T16560] device syzkaller0 entered promiscuous mode [ 1164.258539][T16571] tipc: Enabled bearer , priority 0 [ 1168.487313][T16568] tipc: Disabling bearer [ 1168.498958][ T4294] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1168.509744][ T4294] Bluetooth: hci3: Injecting HCI hardware error event [ 1168.520422][ T4275] Bluetooth: hci3: hardware error 0x00 [ 1168.892937][T16618] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1169.645893][T16646] device syzkaller0 entered promiscuous mode [ 1169.710370][T16655] tipc: Enabling of bearer rejected, failed to enable media [ 1170.578024][ T4275] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1174.474805][T16712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3306'. [ 1175.154364][T16719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3307'. [ 1175.715875][T16730] tipc: Enabling of bearer rejected, failed to enable media [ 1176.291477][T16743] device syzkaller0 entered promiscuous mode [ 1177.381713][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.301971][T16778] device syzkaller0 entered promiscuous mode [ 1184.269232][T16814] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3321'. [ 1184.392378][T16840] netlink: 'syz.3.3324': attribute type 1 has an invalid length. [ 1184.654014][T16849] tipc: Enabling of bearer rejected, failed to enable media [ 1185.861175][T16878] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1186.071360][T16887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3337'. [ 1186.116584][T16889] netlink: 'syz.6.3335': attribute type 29 has an invalid length. [ 1186.282813][T16885] device syzkaller0 entered promiscuous mode [ 1186.293972][T16889] netlink: 'syz.6.3335': attribute type 29 has an invalid length. [ 1186.328948][T16891] netlink: 'syz.6.3335': attribute type 29 has an invalid length. [ 1189.706944][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 1190.107582][T16930] device syzkaller0 entered promiscuous mode [ 1190.150561][T16931] tipc: Enabling of bearer rejected, failed to enable media [ 1190.337794][T16936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3348'. [ 1190.596246][T16945] device syzkaller0 entered promiscuous mode [ 1190.960083][T16959] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1195.201492][T16997] device syzkaller0 entered promiscuous mode [ 1195.218906][T17006] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1195.607050][ T22] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1195.739381][T17021] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1195.798053][ T22] usb 7-1: Using ep0 maxpacket: 16 [ 1195.806117][ T22] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1195.826717][ T22] usb 7-1: config 127 has an invalid interface number: 124 but max is 0 [ 1195.848465][ T22] usb 7-1: config 127 has no interface number 0 [ 1195.855319][ T22] usb 7-1: config 127 interface 124 has no altsetting 0 [ 1195.865763][ T22] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1195.875426][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.883795][ T22] usb 7-1: Product: syz [ 1195.890800][ T22] usb 7-1: Manufacturer: syz [ 1195.895579][ T22] usb 7-1: SerialNumber: syz [ 1198.715045][T17030] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1198.976842][ T22] usb 7-1: USB disconnect, device number 8 [ 1202.067775][T17019] tipc: Enabled bearer , priority 0 [ 1202.076258][T17021] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1202.102356][T17035] device syzkaller0 entered promiscuous mode [ 1202.199122][T17015] tipc: Disabling bearer [ 1202.896692][T17049] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1203.248194][T17054] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1203.274522][T17054] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 1203.405874][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3371'. [ 1203.456550][T17060] device syzkaller0 entered promiscuous mode [ 1204.794833][T17083] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1208.331866][T17096] device syzkaller0 entered promiscuous mode [ 1212.529125][T17125] tipc: Enabling of bearer rejected, already enabled [ 1212.588914][T17140] netlink: 'syz.0.3391': attribute type 10 has an invalid length. [ 1212.664303][T17140] team0: Port device netdevsim0 added [ 1213.404484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1214.673923][T17181] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1216.402396][T17197] device syzkaller0 entered promiscuous mode [ 1216.420812][T17201] tipc: Enabled bearer , priority 10 [ 1218.522734][T17243] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1221.736194][ T22] tipc: Node number set to 3382271231 [ 1222.258358][T17272] tipc: Enabling of bearer rejected, already enabled [ 1224.555888][T17302] device syzkaller0 entered promiscuous mode [ 1229.000398][T17338] lo speed is unknown, defaulting to 1000 [ 1230.578522][T17366] Bluetooth: MGMT ver 1.22 [ 1230.814710][T17371] device syzkaller0 entered promiscuous mode [ 1235.777990][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 1236.035489][T17450] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3482'. [ 1236.432645][T17453] tipc: Enabling of bearer rejected, already enabled [ 1237.985135][T17499] tipc: Enabling of bearer rejected, already enabled [ 1238.000959][T17499] tipc: Enabling of bearer rejected, failed to enable media [ 1238.961520][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.331881][T17544] netlink: 'syz.6.3510': attribute type 4 has an invalid length. [ 1241.562242][T17546] netlink: 'syz.6.3510': attribute type 4 has an invalid length. [ 1243.248431][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1243.302382][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1243.348198][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1243.503005][T17581] device bridge_slave_0 left promiscuous mode [ 1243.528201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1243.566913][T17581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.619671][T17581] device bridge_slave_1 left promiscuous mode [ 1243.743060][T17581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.083081][T17581] bond0: (slave bond_slave_0): Releasing backup interface [ 1244.435036][T17581] bond0: (slave bond_slave_1): Releasing backup interface [ 1244.740912][T17581] team0: Port device team_slave_0 removed [ 1244.849661][T17581] team0: Port device team_slave_1 removed [ 1244.856288][T17581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1244.888016][T17581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.921641][T17581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1244.950648][T17581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1245.265043][T17612] device syzkaller0 entered promiscuous mode [ 1248.695324][T17666] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3535'. [ 1249.897248][T17691] device syzkaller0 entered promiscuous mode [ 1251.461335][T17762] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3558'. [ 1251.491783][T17762] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3558'. [ 1254.098405][T17724] tipc: Enabled bearer , priority 0 [ 1254.116955][T17727] device syzkaller0 entered promiscuous mode [ 1254.125539][T17740] tipc: Resetting bearer [ 1254.159373][T17716] tipc: Resetting bearer [ 1254.248866][T17716] tipc: Disabling bearer [ 1255.252923][T17803] tipc: Enabling of bearer rejected, already enabled [ 1255.267964][T17803] tipc: Enabling of bearer rejected, failed to enable media [ 1263.089658][T17920] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1263.939776][T17939] device syzkaller0 entered promiscuous mode [ 1264.016114][T17940] TC_ACT_REPEAT abuse ? [ 1265.904784][T17965] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1267.987683][T18005] device syzkaller0 entered promiscuous mode [ 1268.618565][T18027] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3641'. [ 1270.377073][T18052] device syzkaller0 entered promiscuous mode [ 1270.400770][T18055] device syzkaller0 entered promiscuous mode [ 1270.642375][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3657'. [ 1270.934624][ T4294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1270.945106][ T4294] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1270.962031][ T4294] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1270.970074][ T4294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1270.979470][ T4294] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1270.987041][ T4294] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1271.064858][T18067] lo speed is unknown, defaulting to 1000 [ 1272.874490][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3669'. [ 1272.912566][T18105] device syzkaller0 entered promiscuous mode [ 1273.058498][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 1273.131699][T18067] chnl_net:caif_netlink_parms(): no params data found [ 1273.365907][T18067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.484472][T18067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.661879][T18067] device bridge_slave_0 entered promiscuous mode [ 1273.915574][T18067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.085882][T18067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.260190][T18067] device bridge_slave_1 entered promiscuous mode [ 1274.390259][T18067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1274.416186][T18067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1274.797784][T18067] team0: Port device team_slave_0 added [ 1275.175567][T18067] team0: Port device team_slave_1 added [ 1275.332413][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 1275.484643][T18067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1275.528716][T18067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1275.577645][T18067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1275.598294][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3681'. [ 1275.624686][T18067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1275.638253][T18067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1275.667257][T18067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.739975][T18159] device syzkaller0 entered promiscuous mode [ 1275.757550][T18067] device hsr_slave_0 entered promiscuous mode [ 1275.767019][T18067] device hsr_slave_1 entered promiscuous mode [ 1275.776076][T18067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1275.793046][T18067] Cannot create hsr debugfs directory [ 1277.061147][T18067] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.388052][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 1277.403831][T18067] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.243642][T18202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3694'. [ 1278.500869][T18067] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.780142][T18067] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.458548][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 1280.017065][T18067] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1280.056981][T18067] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1280.095908][T18067] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1280.119181][T18067] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1283.672385][T18254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3707'. [ 1283.845010][T18067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.923588][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1283.932691][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1283.973555][T18067] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.029945][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1284.040828][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1284.077947][ T4423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.085174][ T4423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.145758][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1284.186424][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1284.206269][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1284.236467][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.243734][ T4423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.285258][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1284.334325][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1284.356369][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1284.383980][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1284.454498][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1284.491035][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1284.652517][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1284.750610][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1284.848089][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1285.002103][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1285.108520][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1285.120120][T18067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1286.572847][T18314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3723'. [ 1287.252695][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1287.296180][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1287.446236][T18067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1289.680638][T18374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3737'. [ 1291.627154][T18398] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1292.879849][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1292.896249][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1292.940903][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3751'. [ 1292.993292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1293.012422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1293.040138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1293.071943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1293.091914][T18067] device veth0_vlan entered promiscuous mode [ 1293.174271][T18067] device veth1_vlan entered promiscuous mode [ 1293.249978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1293.261347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1293.296082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1293.334242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1293.369555][T18067] device veth0_macvtap entered promiscuous mode [ 1293.502162][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1293.518688][T18067] device veth1_macvtap entered promiscuous mode [ 1293.954178][T18436] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1294.304697][T18067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1294.362760][T18067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.397960][T18067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1294.468206][T18067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.536269][T18067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1294.555681][T18067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.576278][T18067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1294.615698][T18067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.645112][T18067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1294.666245][T18067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.695311][T18067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1294.736180][T18067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.808587][T18067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.838408][T18067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.864474][T18067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.883952][T18067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.902209][T18067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.913240][T18067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.936424][T18067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.946795][T18067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.973539][T18067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.992755][T18067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.013448][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1295.048528][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1295.154432][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1295.276508][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1295.440180][T18067] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.502322][T18067] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.582917][T18067] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.611410][T18067] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.871169][ T4435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.896566][ T4435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.950709][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1295.998405][ T4433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.006409][ T4433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.049763][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1296.787586][T18492] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1297.636783][T18506] device syzkaller0 entered promiscuous mode [ 1299.222693][T18550] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1299.961083][T18562] device syzkaller0 entered promiscuous mode [ 1300.260704][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.468109][T18602] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1301.903003][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3803'. [ 1302.299406][T18617] device syzkaller0 entered promiscuous mode [ 1303.755322][T18657] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1304.259501][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3819'. [ 1304.842408][T18682] device syzkaller0 entered promiscuous mode [ 1305.118048][ T4359] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1305.398036][ T4359] usb 4-1: Using ep0 maxpacket: 16 [ 1305.406910][ T4359] usb 4-1: config 127 has an invalid interface number: 124 but max is 0 [ 1305.504327][ T4359] usb 4-1: config 127 has no interface number 0 [ 1305.849013][T18703] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1305.911063][ T4359] usb 4-1: config 127 interface 124 has no altsetting 0 [ 1305.924293][ T4359] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1305.945274][ T4359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.050334][ T4359] usb 4-1: Product: syz [ 1306.075913][ T4359] usb 4-1: Manufacturer: syz [ 1306.168247][ T4359] usb 4-1: SerialNumber: syz [ 1306.803198][T18716] xt_bpf: check failed: parse error [ 1307.311384][ T4359] usb 4-1: USB disconnect, device number 68 [ 1307.627573][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3834'. [ 1308.575436][T18737] device syzkaller0 entered promiscuous mode [ 1309.432435][T18744] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1310.010415][T18747] tipc: Enabled bearer , priority 0 [ 1310.098792][T18747] device syzkaller0 entered promiscuous mode [ 1310.154572][T18747] tipc: Resetting bearer [ 1310.308131][T18742] tipc: Resetting bearer [ 1310.476561][T18742] tipc: Disabling bearer [ 1310.555613][T18770] device geneve0 entered promiscuous mode [ 1310.586084][T18770] device geneve0 left promiscuous mode [ 1310.688145][T18772] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3848'. [ 1311.489458][T18797] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3854'. [ 1311.869319][T18796] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1312.166053][T18799] binder: 18789:18799 ioctl c0306201 0 returned -14 [ 1312.547874][ T4721] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1312.732409][T18803] device syzkaller0 entered promiscuous mode [ 1313.137546][T18807] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1313.261059][ T4721] usb 8-1: Using ep0 maxpacket: 16 [ 1313.603885][ T4721] usb 8-1: config 127 has an invalid interface number: 124 but max is 0 [ 1313.637871][ T4721] usb 8-1: config 127 has no interface number 0 [ 1313.644222][ T4721] usb 8-1: config 127 interface 124 has no altsetting 0 [ 1313.693761][ T4721] usb 8-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1313.718356][ T4721] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.746816][T18813] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3861'. [ 1313.788219][ T4721] usb 8-1: Product: syz [ 1313.798512][ T4721] usb 8-1: Manufacturer: syz [ 1313.816893][ T4721] usb 8-1: SerialNumber: syz [ 1314.534422][T18819] device syzkaller0 entered promiscuous mode [ 1314.994618][ T4721] usb 8-1: USB disconnect, device number 4 [ 1317.866701][T18848] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1321.150199][T18854] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3871'. [ 1321.247723][T18854] binder: 18853:18854 ioctl c0306201 0 returned -14 [ 1321.279093][T18870] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3874'. [ 1322.247691][T18894] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1322.990229][T18892] device syzkaller0 entered promiscuous mode [ 1323.357177][T18912] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3887'. [ 1323.395681][T18912] binder: 18908:18912 ioctl c0306201 0 returned -14 [ 1324.186638][T18911] device syzkaller0 entered promiscuous mode [ 1324.316746][T18910] ------------[ cut here ]------------ [ 1324.322820][T18910] WARNING: CPU: 0 PID: 18910 at net/sched/sch_taprio.c:1026 taprio_get_start_time+0x139/0x160 [ 1324.333296][T18910] Modules linked in: [ 1324.337230][T18910] CPU: 0 PID: 18910 Comm: syz.0.3885 Not tainted syzkaller #0 [ 1324.344873][T18910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1324.355020][T18910] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 1324.361217][T18910] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9c 21 72 f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 47 f9 20 f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 1324.380983][T18910] RSP: 0000:ffffc90003446d68 EFLAGS: 00010287 [ 1324.387190][T18910] RAX: ffffffff886127c9 RBX: ffffc90003446e78 RCX: 0000000000080000 [ 1324.395259][T18910] RDX: ffffc9000e499000 RSI: 000000000000674f RDI: 0000000000006750 [ 1324.403386][T18910] RBP: 0000000000000002 R08: ffffffff90af2417 R09: 1ffffffff215e482 [ 1324.411462][T18910] R10: dffffc0000000000 R11: fffffbfff215e483 R12: 18bbc91cc9ddcaa9 [ 1324.419525][T18910] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1324.427551][T18910] FS: 00007f64e7af16c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1324.436582][T18910] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1324.443263][T18910] CR2: 00007fddb45ee6a0 CR3: 00000000293b6000 CR4: 00000000003506f0 [ 1324.451333][T18910] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1324.459395][T18910] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1324.467504][T18910] Call Trace: [ 1324.470874][T18910] [ 1324.473907][T18910] taprio_change+0x3f99/0x5390 [ 1324.478807][T18910] ? taprio_destroy+0x4b0/0x4b0 [ 1324.483741][T18910] ? lockdep_init_map_type+0x98/0x8d0 [ 1324.489234][T18910] ? rtnetlink_rcv_msg+0x863/0xfb0 [ 1324.494445][T18910] ? memset+0x1e/0x40 [ 1324.498557][T18910] ? fifo_init+0x3f6/0x6d0 [ 1324.503106][T18910] ? qdisc_peek_head+0x40/0x40 [ 1324.507997][T18910] ? rcu_is_watching+0x11/0xa0 [ 1324.512903][T18910] ? taprio_peek+0x590/0x590 [ 1324.517544][T18910] qdisc_create+0x7ef/0x10c0 [ 1324.522267][T18910] ? qdisc_notify+0x370/0x370 [ 1324.527003][T18910] ? lockdep_rtnl_is_held+0x22/0x30 [ 1324.532347][T18910] ? qdisc_lookup+0x35d/0x6b0 [ 1324.537078][T18910] tc_modify_qdisc+0xb43/0x1de0 [ 1324.542039][T18910] ? qdisc_offload_query_caps+0x150/0x150 [ 1324.547885][T18910] ? qdisc_offload_query_caps+0x150/0x150 [ 1324.553651][T18910] rtnetlink_rcv_msg+0x863/0xfb0 [ 1324.558694][T18910] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 1324.563876][T18910] ? rtnetlink_bind+0x80/0x80 [ 1324.568735][T18910] ? __local_bh_enable_ip+0x136/0x1c0 [ 1324.574230][T18910] ? lockdep_hardirqs_on+0x94/0x140 [ 1324.579556][T18910] ? __local_bh_enable_ip+0x136/0x1c0 [ 1324.584978][T18910] ? _local_bh_enable+0xa0/0xa0 [ 1324.589984][T18910] ? __dev_queue_xmit+0x281/0x3810 [ 1324.595166][T18910] ? __dev_queue_xmit+0x281/0x3810 [ 1324.600382][T18910] ? __dev_queue_xmit+0x1d84/0x3810 [ 1324.605654][T18910] ? __dev_queue_xmit+0x281/0x3810 [ 1324.610874][T18910] ? ref_tracker_free+0x682/0x830 [ 1324.616102][T18910] ? refcount_inc+0x70/0x70 [ 1324.620700][T18910] ? memcpy+0x3c/0x60 [ 1324.624820][T18910] ? __copy_skb_header+0x3ba/0x4f0 [ 1324.630039][T18910] ? __skb_clone+0x446/0x6c0 [ 1324.634688][T18910] netlink_rcv_skb+0x1ef/0x440 [ 1324.637973][ T22] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1324.639567][T18910] ? rtnetlink_bind+0x80/0x80 [ 1324.651976][T18910] ? netlink_ack+0x1160/0x1160 [ 1324.656795][T18910] ? netlink_deliver_tap+0x2e/0x1b0 [ 1324.662063][T18910] netlink_unicast+0x7ad/0x920 [ 1324.666876][T18910] netlink_sendmsg+0x8ad/0xbd0 [ 1324.671732][T18910] ? netlink_getsockopt+0x550/0x550 [ 1324.676979][T18910] ? aa_sock_msg_perm+0x94/0x150 [ 1324.682059][T18910] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1324.687445][T18910] ? security_socket_sendmsg+0x7c/0xa0 [ 1324.693034][T18910] ? netlink_getsockopt+0x550/0x550 [ 1324.698333][T18910] ____sys_sendmsg+0x5ed/0x9a0 [ 1324.703205][T18910] ? __sys_sendmsg_sock+0x30/0x30 [ 1324.708335][T18910] ? __import_iovec+0x306/0x510 [ 1324.713267][T18910] ? import_iovec+0x6f/0xa0 [ 1324.717898][T18910] ___sys_sendmsg+0x2a2/0x360 [ 1324.722639][T18910] ? __sys_sendmsg+0x2a0/0x2a0 [ 1324.727523][T18910] __se_sys_sendmsg+0x1c3/0x2b0 [ 1324.732469][T18910] ? __x64_sys_sendmsg+0x80/0x80 [ 1324.737488][T18910] ? lockdep_hardirqs_on+0x94/0x140 [ 1324.742808][T18910] do_syscall_64+0x4c/0xa0 [ 1324.747267][T18910] ? clear_bhb_loop+0x60/0xb0 [ 1324.752075][T18910] ? clear_bhb_loop+0x60/0xb0 [ 1324.756791][T18910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1324.762827][T18910] RIP: 0033:0x7f64e6b9ce59 [ 1324.767284][T18910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1324.786991][T18910] RSP: 002b:00007f64e7af1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1324.795569][T18910] RAX: ffffffffffffffda RBX: 00007f64e6e16090 RCX: 00007f64e6b9ce59 [ 1324.803607][T18910] RDX: 0000000000008010 RSI: 00002000000012c0 RDI: 0000000000000006 [ 1324.811655][T18910] RBP: 00007f64e6c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1324.819731][T18910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1324.827748][T18910] R13: 00007f64e6e16128 R14: 00007f64e6e16090 R15: 00007ffd0dc0b248 [ 1324.835835][T18910] [ 1324.838945][T18910] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1324.846380][T18910] CPU: 0 PID: 18910 Comm: syz.0.3885 Not tainted syzkaller #0 [ 1324.853877][T18910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1324.863949][T18910] Call Trace: [ 1324.867237][T18910] [ 1324.870196][T18910] dump_stack_lvl+0x188/0x24e [ 1324.874890][T18910] ? memcpy+0x3c/0x60 [ 1324.878904][T18910] ? show_regs_print_info+0x12/0x12 [ 1324.884146][T18910] ? load_image+0x410/0x410 [ 1324.888717][T18910] panic+0x2d3/0x710 [ 1324.892645][T18910] ? bpf_jit_dump+0xd0/0xd0 [ 1324.897191][T18910] __warn+0x2f8/0x4f0 [ 1324.901194][T18910] ? taprio_get_start_time+0x139/0x160 [ 1324.906698][T18910] ? taprio_get_start_time+0x139/0x160 [ 1324.912177][T18910] report_bug+0x2ba/0x4f0 [ 1324.916544][T18910] ? taprio_get_start_time+0x139/0x160 [ 1324.922026][T18910] handle_bug+0x3a/0x70 [ 1324.926195][T18910] exc_invalid_op+0x16/0x40 [ 1324.930718][T18910] asm_exc_invalid_op+0x16/0x20 [ 1324.935583][T18910] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 1324.941688][T18910] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9c 21 72 f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 47 f9 20 f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 1324.961367][T18910] RSP: 0000:ffffc90003446d68 EFLAGS: 00010287 [ 1324.967481][T18910] RAX: ffffffff886127c9 RBX: ffffc90003446e78 RCX: 0000000000080000 [ 1324.975572][T18910] RDX: ffffc9000e499000 RSI: 000000000000674f RDI: 0000000000006750 [ 1324.983571][T18910] RBP: 0000000000000002 R08: ffffffff90af2417 R09: 1ffffffff215e482 [ 1324.991554][T18910] R10: dffffc0000000000 R11: fffffbfff215e483 R12: 18bbc91cc9ddcaa9 [ 1324.999532][T18910] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1325.007629][T18910] ? taprio_get_start_time+0x139/0x160 [ 1325.013119][T18910] ? taprio_get_start_time+0x139/0x160 [ 1325.018691][T18910] taprio_change+0x3f99/0x5390 [ 1325.023509][T18910] ? taprio_destroy+0x4b0/0x4b0 [ 1325.028373][T18910] ? lockdep_init_map_type+0x98/0x8d0 [ 1325.033777][T18910] ? rtnetlink_rcv_msg+0x863/0xfb0 [ 1325.038900][T18910] ? memset+0x1e/0x40 [ 1325.042896][T18910] ? fifo_init+0x3f6/0x6d0 [ 1325.047329][T18910] ? qdisc_peek_head+0x40/0x40 [ 1325.052121][T18910] ? rcu_is_watching+0x11/0xa0 [ 1325.056917][T18910] ? taprio_peek+0x590/0x590 [ 1325.061524][T18910] qdisc_create+0x7ef/0x10c0 [ 1325.066134][T18910] ? qdisc_notify+0x370/0x370 [ 1325.070822][T18910] ? lockdep_rtnl_is_held+0x22/0x30 [ 1325.076035][T18910] ? qdisc_lookup+0x35d/0x6b0 [ 1325.080737][T18910] tc_modify_qdisc+0xb43/0x1de0 [ 1325.085616][T18910] ? qdisc_offload_query_caps+0x150/0x150 [ 1325.091364][T18910] ? qdisc_offload_query_caps+0x150/0x150 [ 1325.097096][T18910] rtnetlink_rcv_msg+0x863/0xfb0 [ 1325.102054][T18910] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 1325.107181][T18910] ? rtnetlink_bind+0x80/0x80 [ 1325.111869][T18910] ? __local_bh_enable_ip+0x136/0x1c0 [ 1325.117364][T18910] ? lockdep_hardirqs_on+0x94/0x140 [ 1325.122587][T18910] ? __local_bh_enable_ip+0x136/0x1c0 [ 1325.127970][T18910] ? _local_bh_enable+0xa0/0xa0 [ 1325.132834][T18910] ? __dev_queue_xmit+0x281/0x3810 [ 1325.137971][T18910] ? __dev_queue_xmit+0x281/0x3810 [ 1325.143184][T18910] ? __dev_queue_xmit+0x1d84/0x3810 [ 1325.148411][T18910] ? __dev_queue_xmit+0x281/0x3810 [ 1325.153545][T18910] ? ref_tracker_free+0x682/0x830 [ 1325.158587][T18910] ? refcount_inc+0x70/0x70 [ 1325.163106][T18910] ? memcpy+0x3c/0x60 [ 1325.167099][T18910] ? __copy_skb_header+0x3ba/0x4f0 [ 1325.172321][T18910] ? __skb_clone+0x446/0x6c0 [ 1325.176929][T18910] netlink_rcv_skb+0x1ef/0x440 [ 1325.181710][T18910] ? rtnetlink_bind+0x80/0x80 [ 1325.186406][T18910] ? netlink_ack+0x1160/0x1160 [ 1325.191194][T18910] ? netlink_deliver_tap+0x2e/0x1b0 [ 1325.196582][T18910] netlink_unicast+0x7ad/0x920 [ 1325.201370][T18910] netlink_sendmsg+0x8ad/0xbd0 [ 1325.206165][T18910] ? netlink_getsockopt+0x550/0x550 [ 1325.211409][T18910] ? aa_sock_msg_perm+0x94/0x150 [ 1325.216446][T18910] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1325.221743][T18910] ? security_socket_sendmsg+0x7c/0xa0 [ 1325.227236][T18910] ? netlink_getsockopt+0x550/0x550 [ 1325.232451][T18910] ____sys_sendmsg+0x5ed/0x9a0 [ 1325.237237][T18910] ? __sys_sendmsg_sock+0x30/0x30 [ 1325.242270][T18910] ? __import_iovec+0x306/0x510 [ 1325.247158][T18910] ? import_iovec+0x6f/0xa0 [ 1325.251676][T18910] ___sys_sendmsg+0x2a2/0x360 [ 1325.256373][T18910] ? __sys_sendmsg+0x2a0/0x2a0 [ 1325.261193][T18910] __se_sys_sendmsg+0x1c3/0x2b0 [ 1325.266058][T18910] ? __x64_sys_sendmsg+0x80/0x80 [ 1325.271036][T18910] ? lockdep_hardirqs_on+0x94/0x140 [ 1325.276256][T18910] do_syscall_64+0x4c/0xa0 [ 1325.280684][T18910] ? clear_bhb_loop+0x60/0xb0 [ 1325.285368][T18910] ? clear_bhb_loop+0x60/0xb0 [ 1325.290055][T18910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1325.295974][T18910] RIP: 0033:0x7f64e6b9ce59 [ 1325.300413][T18910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.320118][T18910] RSP: 002b:00007f64e7af1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1325.328544][T18910] RAX: ffffffffffffffda RBX: 00007f64e6e16090 RCX: 00007f64e6b9ce59 [ 1325.336527][T18910] RDX: 0000000000008010 RSI: 00002000000012c0 RDI: 0000000000000006 [ 1325.344510][T18910] RBP: 00007f64e6c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1325.352516][T18910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1325.360516][T18910] R13: 00007f64e6e16128 R14: 00007f64e6e16090 R15: 00007ffd0dc0b248 [ 1325.368518][T18910] [ 1325.371691][T18910] Kernel Offset: disabled [ 1325.376113][T18910] Rebooting in 86400 seconds..