last executing test programs: 9.643671023s ago: executing program 3 (id=1551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) 9.508092718s ago: executing program 3 (id=1552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000000000002a00000008002f00000099f6810c34e8749fe96d"], 0x24}, 0x4, 0x700000000000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0xfc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xfffffffffffffe52, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="038097e0680553c94ba5805923c3ad4ac79cc2000000bbbbbbbbbbbb0800450000380000000009019078ac1eac1414aa030490781209183f2500000000680000000100007f0000017f00000100186371ae9b1c030000"], 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000004900010029bd7000fddbdf250a001c00", @ANYRES32=0x0, @ANYBLOB="f9ffffff0800020000000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(r8, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/119, 0x77}, {&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000000640)=""/212, 0xd4}, {&(0x7f0000000740)=""/175, 0xaf}, {&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000800)=""/134, 0x86}, {&(0x7f0000000980)=""/230, 0xe6}], 0x7) pwrite64(r10, &(0x7f00000003c0)="357706f590de2ffc1774860efe23f3a070acd247c68dd4a3be73fa8f61e1851c90d4576061a283d246ec694ad518a5b8210f182d0a3b6b306beb02ef4b8776d199c0435ea3858800a89a948c8bcf7c88cb5ea6bb6f57eef059d7965d40b9a766a430b9101290333efb3c51602d12af5deed743e7bebc4337ef7876280a3f444ba234023bcdfab7131aedbf1fc95baa13e847951e1fc660f61bf54e40d0684454e76811aa107493207f755208b7e4dce85e8582b049ead7502d943323971a9dfc50a10f5378d66702591dcab7b5d80cecb56a99f34a1eea4006443bdc4b9d85b164865de7f70009ee3ffbfd760ad0f2c2b91b3a348a", 0xf5, 0x0) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000d0a01030000000000000000010000050900010073797a30000000008f3707007d191f6c2d54fecf5cce6523e274366ec22a261c5c21067542bb0d65693fa913bd63"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040004) 9.221730357s ago: executing program 3 (id=1557): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) pipe(0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) close(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="798b0b", 0x3}], 0x1}}], 0x2, 0x4) recvfrom(r2, 0x0, 0x0, 0x102, 0x0, 0x0) sendto(r2, 0x0, 0x0, 0x8001, 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000080)={0x4, 0x2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x20, @none}, 0xe) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x5f2, 0x5, 0x5, 0x8001, 0x3, 0x8, 0xb2f}, 0x1c) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 3.467757792s ago: executing program 2 (id=1612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000580080001401b00891708"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3.364352006s ago: executing program 1 (id=1613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x6, 0x9, 0xfffffffc, 0x4, {0x1, 0x2, 0x8, 0x1, 0x200, 0x6}, {0x1, 0x1, 0xb5, 0x0, 0x9, 0x1}, 0x8, 0x80, 0x6f8}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff8e, 0x1fce000, 0x1ff, 0x7b7e, 0xc0, 0xa, 0x401, 0x4, 0x6, 0x0, 0xd3d, 0x6, 0x2, 0x5, 0x4, 0x6, 0x8e01, 0x6, 0x7, 0x4, 0xea7, 0x31, 0x20000000, 0x8001, 0x1, 0x100, 0x6, 0x0, 0x3, 0x7, 0xb7, 0x7, 0x2, 0xc6e, 0x400000, 0xf79, 0xec9e, 0x5, 0x6, 0x6, 0x40, 0x401, 0xffffff54, 0x4, 0x3, 0x95, 0xf, 0x9, 0x4, 0xfffffffa, 0x0, 0x3, 0x3, 0x0, 0x100, 0x200, 0x8, 0x2, 0x5, 0x3, 0x4, 0xffffffa8, 0x0, 0x2, 0x47, 0x85ff, 0x4, 0x0, 0x964d, 0x5f, 0xfffffffd, 0x1, 0x8d5f, 0x4, 0x6, 0xffff, 0x2, 0x80000000, 0x384a, 0x8, 0x3, 0x5, 0x7f, 0x80, 0xffffeb06, 0xf93, 0x9, 0xfffffcfc, 0x5, 0xfffffe00, 0xed, 0x401, 0x80000000, 0x80000001, 0x5a57ee2d, 0xfffffffd, 0x8, 0x6, 0x9, 0x5, 0x0, 0x1, 0xfffffffd, 0x4, 0x8, 0x6, 0x6, 0x2, 0x8, 0x4, 0x4b4, 0x2, 0xc6cd, 0xc4, 0x3, 0x7f, 0x4, 0x0, 0xfe, 0x9, 0x7, 0x6, 0x5, 0x5, 0xfffffffb, 0x6, 0x0, 0x6, 0x4, 0x3, 0x0, 0x6, 0x49a, 0xcb, 0x8, 0x7, 0x2, 0x2, 0x8, 0xa, 0x5, 0x6, 0x30, 0x6, 0x9, 0x85398d5, 0x0, 0xfffffe01, 0x3, 0x0, 0x9, 0x5, 0x7, 0xc, 0xe571, 0x0, 0xfffffff9, 0x2a, 0x0, 0xfffffff7, 0xa4, 0xfffffffe, 0x1000, 0x3d1e, 0x0, 0x0, 0x3, 0x5, 0xec2b, 0x2, 0x2, 0xfffffffb, 0x0, 0x6, 0x9, 0x4, 0x80000000, 0x6, 0x869, 0x1ff, 0x8, 0x8, 0x9, 0x175, 0x9, 0xffffffff, 0x2, 0x7ba, 0x6, 0x0, 0x9, 0x9, 0x10000, 0x5, 0x5, 0x7fff, 0x0, 0x3, 0x5, 0x5, 0x0, 0x4cf, 0xa0000000, 0x8000, 0xc, 0x7, 0x8, 0x9, 0x401, 0x6, 0x9, 0xfffffffa, 0x4c, 0x9, 0x0, 0x8, 0x100, 0x9, 0x9, 0x8, 0xb, 0x7, 0x800, 0x3, 0xff, 0x4, 0x5, 0x0, 0x8, 0xff, 0x1, 0xe, 0x9, 0x2, 0x62, 0x0, 0x1, 0xc, 0x5, 0x7, 0x6, 0x7, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x7f, 0x9, 0xffffffff, 0x0, 0x5ae, 0x3, 0x2, 0x4, 0xfffffffd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x2, 0x9d7b, 0x2, 0xffffffff, 0x2, 0x7, 0x9, 0x2, 0x5, 0x1ff, 0x2, 0xc516, 0x0, 0xfffff0b5, 0x3, 0x3, 0x3, 0x8, 0x3ff, 0x2, 0x2, 0x3, 0xfffffffd, 0x41c, 0x46, 0x3, 0x76, 0x800, 0x3, 0x133, 0x6, 0x8, 0x6, 0x3, 0x9eca, 0x4, 0x8, 0x101, 0xa, 0x8, 0x2, 0x7ff, 0xfffff800, 0x3, 0x8001, 0x4, 0x2, 0x0, 0x0, 0x2, 0xfffffffb, 0x4, 0x82, 0x141, 0x1f8, 0x1000, 0x5, 0x0, 0x7, 0xd3, 0xfffffffc, 0x2, 0x5, 0xc8d, 0x9, 0x6, 0xc, 0x0, 0x6, 0x8, 0x7, 0x5, 0x1, 0x1, 0x2, 0x6, 0xf1, 0xa, 0xfffffff9, 0x5, 0x2, 0x1327d97c, 0xffff527b, 0x9, 0xffffffff, 0x5, 0x7, 0x4, 0x8001, 0xff, 0xffff, 0x8, 0x7, 0x9000000, 0x7, 0x12a, 0xc, 0x8, 0xfffffeff, 0x6, 0x8, 0x76d4, 0x1, 0x7, 0x0, 0xebe2, 0xbe5, 0x3, 0x7f, 0xf, 0x9, 0x2, 0x0, 0x6, 0x8, 0x1, 0x0, 0x3, 0x8, 0x7fff, 0x5, 0xe0d3, 0x3, 0x6, 0x5, 0x9, 0x4, 0x1000, 0x2, 0x5, 0x400, 0x8, 0x8, 0xff, 0x3, 0x0, 0x5, 0x1, 0x1, 0x1000, 0x80000000, 0xc, 0x3, 0x2fb, 0x5, 0x1, 0x9, 0x40, 0x1, 0xb1, 0xb, 0x4, 0x6, 0x4d444d0a, 0x100, 0xe5, 0x8, 0xfffffffe, 0x9, 0x100, 0x3, 0x4, 0x9, 0x0, 0x6, 0x0, 0xb, 0x8, 0xffff0001, 0x5, 0x1000, 0x8d9, 0x101, 0x9, 0x8, 0x5, 0x6, 0x8, 0x7, 0x0, 0x57, 0x8, 0x7, 0x3, 0xc, 0x2, 0x0, 0x7, 0x2, 0x2, 0x9, 0x80, 0x9, 0x6, 0x401, 0x0, 0xfae, 0xb6, 0x7, 0x1, 0x2, 0xba8b, 0xe3b426a, 0x1ff, 0x5, 0x6, 0x2, 0x5, 0x931e, 0x5, 0x2, 0x36bf9f05, 0xeb, 0x9, 0x9, 0x1ff, 0x7fff, 0x1, 0x8001, 0x9, 0x8, 0x80, 0x200, 0x8, 0x0, 0x7, 0x100, 0x16, 0x80000000, 0x9, 0x7fffffff, 0x1, 0x4d9, 0x7, 0x5c4, 0x2, 0x6, 0x8, 0x7, 0x4, 0x400000, 0x0, 0x7, 0x9, 0xb20, 0xff, 0x6cb7db37, 0x4, 0x2, 0x7, 0x1, 0x2, 0x4, 0x4, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r10, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x1}], 0x1}, 0x44) 3.309499808s ago: executing program 0 (id=1614): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 3.308748638s ago: executing program 2 (id=1615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x9, 0xfff5}, {0x5, 0xfff1}, {0xffff, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) 3.119575234s ago: executing program 0 (id=1616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56741, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x5, 0x2, 0xf, 0x4, 0x8, 0xb, 0x0, 0x6, 0x1, 0x4], 0x1, [0x4, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0x7, 0x2, 0x800, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0x0, 0x8, 0x1, 0x6]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\'', 0x1}], 0x1}, 0x4005) 3.099169275s ago: executing program 3 (id=1617): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x64, 0x2c, 0xd27, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x2}, "c944f7"}}]}]}]}}]}, 0x64}}, 0x0) 3.024164598s ago: executing program 1 (id=1618): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.973974659s ago: executing program 2 (id=1619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.864357993s ago: executing program 3 (id=1620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000007, 0x6, 0x86}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff8400000066c1532cc10200000003125ce882cbf490d90812533f00000000", 0x31}, {&(0x7f0000001300)="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", 0xcde}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a26954143da754b6b15", 0xb4}, {&(0x7f0000003340)="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", 0x1f6}, {&(0x7f00000008c0)="f60f27117e4a8ca5f38ea69db4650925c916adc0dd9095173532452d876e9f077dddbfab219f37cc4d529aff0800000000000000a8bf82bd297ea1f71e3cd465dc08be", 0x43}], 0x5}, 0x4005) 2.455934817s ago: executing program 1 (id=1621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x7, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r12, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x24040812) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 442.108795ms ago: executing program 0 (id=1622): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 357.924798ms ago: executing program 1 (id=1623): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in=@remote, {0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffd, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 335.356609ms ago: executing program 3 (id=1624): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xedff) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x8000) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)={{0x12, 0x1, 0x110, 0x27, 0xaa, 0x18, 0x8, 0x402, 0x5602, 0x4983, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x52, 0xb4, 0xa6, 0x2c}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 334.453248ms ago: executing program 2 (id=1625): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000", 0xcb}], 0x1}, 0x0) 260.156701ms ago: executing program 0 (id=1626): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x8001) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a"], 0x1c}}, 0x0) 227.514692ms ago: executing program 2 (id=1627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x9, 0xfff5}, {0x5, 0xfff1}, {0xffff, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) 188.397614ms ago: executing program 1 (id=1628): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x64, 0x2c, 0xd27, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x2}, "c944f7"}}]}]}]}}]}, 0x64}}, 0x0) 108.025737ms ago: executing program 0 (id=1629): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000001140)) 51.522928ms ago: executing program 0 (id=1630): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf250100000008000100fcffffff2c00048005000300050000000500030002000000050003000200000005000300000000000500030080ff070008000200"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 41.983399ms ago: executing program 2 (id=1631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef5, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000400), &(0x7f00000004c0)='%pi6 \x00'}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24040084) 0s ago: executing program 1 (id=1632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff9, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xf}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x45aa, 0x2, 0x6}, {0x1, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000600)="1e", 0x1}], 0x1}, 0x4c00c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. [ 70.709239][ T5758] cgroup: Unknown subsys name 'net' [ 70.842781][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.810999][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.817891][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.541426][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.129927][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.139100][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.147811][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.156920][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.165025][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.211858][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.221089][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.229108][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.234590][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.236986][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.243944][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.251642][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.267823][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.275482][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.276586][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.284002][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.298374][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.307420][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.315927][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.325742][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.333761][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.344446][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.352922][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.360483][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.627800][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 74.785558][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.793254][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.800857][ T5771] bridge_slave_0: entered allmulticast mode [ 74.808098][ T5771] bridge_slave_0: entered promiscuous mode [ 74.822498][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.829951][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.837755][ T5771] bridge_slave_1: entered allmulticast mode [ 74.844883][ T5771] bridge_slave_1: entered promiscuous mode [ 74.954683][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 74.969933][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.994768][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.016688][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 75.082198][ T5771] team0: Port device team_slave_0 added [ 75.089577][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 75.115047][ T5771] team0: Port device team_slave_1 added [ 75.228722][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.236105][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.262589][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.289194][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.296961][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.304462][ T5772] bridge_slave_0: entered allmulticast mode [ 75.311717][ T5772] bridge_slave_0: entered promiscuous mode [ 75.320458][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.328002][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.335640][ T5772] bridge_slave_1: entered allmulticast mode [ 75.342956][ T5772] bridge_slave_1: entered promiscuous mode [ 75.350330][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.357600][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.384135][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.403988][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.411734][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.421521][ T5770] bridge_slave_0: entered allmulticast mode [ 75.428713][ T5770] bridge_slave_0: entered promiscuous mode [ 75.437744][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.444939][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.452436][ T5770] bridge_slave_1: entered allmulticast mode [ 75.460519][ T5770] bridge_slave_1: entered promiscuous mode [ 75.531340][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.544840][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.564474][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.571981][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.581992][ T5773] bridge_slave_0: entered allmulticast mode [ 75.589037][ T5773] bridge_slave_0: entered promiscuous mode [ 75.598947][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.606201][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.613513][ T5773] bridge_slave_1: entered allmulticast mode [ 75.621739][ T5773] bridge_slave_1: entered promiscuous mode [ 75.650765][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.680472][ T5771] hsr_slave_0: entered promiscuous mode [ 75.687080][ T5771] hsr_slave_1: entered promiscuous mode [ 75.707373][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.742936][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.754782][ T5772] team0: Port device team_slave_0 added [ 75.782209][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.801873][ T5772] team0: Port device team_slave_1 added [ 75.825501][ T5770] team0: Port device team_slave_0 added [ 75.861139][ T5770] team0: Port device team_slave_1 added [ 75.897140][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.904480][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.931591][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.957247][ T5773] team0: Port device team_slave_0 added [ 75.964001][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.971327][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.998036][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.014195][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.021615][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.048353][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.061684][ T5773] team0: Port device team_slave_1 added [ 76.077702][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.084801][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.111396][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.185118][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.192327][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.219078][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.231620][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.239124][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.265621][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.296392][ T5781] Bluetooth: hci2: command tx timeout [ 76.340871][ T5770] hsr_slave_0: entered promiscuous mode [ 76.347321][ T5770] hsr_slave_1: entered promiscuous mode [ 76.353496][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.361779][ T5770] Cannot create hsr debugfs directory [ 76.408846][ T5772] hsr_slave_0: entered promiscuous mode [ 76.415994][ T5772] hsr_slave_1: entered promiscuous mode [ 76.422761][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.430755][ T5772] Cannot create hsr debugfs directory [ 76.445948][ T5781] Bluetooth: hci0: command tx timeout [ 76.451654][ T5781] Bluetooth: hci1: command tx timeout [ 76.458008][ T5784] Bluetooth: hci3: command tx timeout [ 76.497644][ T5773] hsr_slave_0: entered promiscuous mode [ 76.504605][ T5773] hsr_slave_1: entered promiscuous mode [ 76.511313][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.519712][ T5773] Cannot create hsr debugfs directory [ 76.762545][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.807177][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.818203][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.834420][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.942544][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.964388][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.978056][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.990544][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.078353][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.112074][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.122537][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.132641][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.204443][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.214916][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.229432][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.239709][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.348068][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.369820][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.408846][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.446608][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.453999][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.489411][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.496625][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.509164][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.537410][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.563020][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.570180][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.591636][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.598785][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.627233][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.658198][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.689241][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.696647][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.712164][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.752130][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.759480][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.770064][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.777794][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.802635][ T3530] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.809853][ T3530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.931415][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.341928][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.365931][ T5781] Bluetooth: hci2: command tx timeout [ 78.382182][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.451139][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.525848][ T5781] Bluetooth: hci1: command tx timeout [ 78.531920][ T5781] Bluetooth: hci3: command tx timeout [ 78.538058][ T5777] Bluetooth: hci0: command tx timeout [ 78.564293][ T5772] veth0_vlan: entered promiscuous mode [ 78.586977][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.600909][ T5772] veth1_vlan: entered promiscuous mode [ 78.629671][ T5771] veth0_vlan: entered promiscuous mode [ 78.657196][ T5771] veth1_vlan: entered promiscuous mode [ 78.696283][ T5773] veth0_vlan: entered promiscuous mode [ 78.723215][ T5772] veth0_macvtap: entered promiscuous mode [ 78.748023][ T5773] veth1_vlan: entered promiscuous mode [ 78.763006][ T5772] veth1_macvtap: entered promiscuous mode [ 78.793325][ T5770] veth0_vlan: entered promiscuous mode [ 78.811598][ T5771] veth0_macvtap: entered promiscuous mode [ 78.823364][ T5771] veth1_macvtap: entered promiscuous mode [ 78.840820][ T5770] veth1_vlan: entered promiscuous mode [ 78.876831][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.904643][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.919986][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.933307][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.950740][ T5773] veth0_macvtap: entered promiscuous mode [ 78.968859][ T5773] veth1_macvtap: entered promiscuous mode [ 78.978725][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.992930][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.005062][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.017030][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.038243][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.048522][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.059906][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.069329][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.116016][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.124894][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.133909][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.143324][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.161027][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.172985][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.183382][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.194359][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.210034][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.221025][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.232176][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.242336][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.254274][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.266522][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.286414][ T5770] veth0_macvtap: entered promiscuous mode [ 79.303376][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.313024][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.323216][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.332294][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.381099][ T5770] veth1_macvtap: entered promiscuous mode [ 79.476952][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.485041][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.493759][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.505301][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.515663][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.526520][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.536654][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.547354][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.559374][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.592096][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.603469][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.615744][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.626563][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.637310][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.648749][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.661061][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.694182][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.702789][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.710788][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.723190][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.732763][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.741682][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.802148][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.813828][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.877964][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.898043][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.953869][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.978238][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.059993][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.090301][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.174431][ T5831] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 80.222247][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.234963][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.295940][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.304113][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.456428][ T5781] Bluetooth: hci2: command tx timeout [ 80.608031][ T5781] Bluetooth: hci3: command tx timeout [ 80.613623][ T5784] Bluetooth: hci0: command tx timeout [ 80.619859][ T5777] Bluetooth: hci1: command tx timeout [ 80.973588][ T5852] Bluetooth: MGMT ver 1.22 [ 81.213219][ T5859] batman_adv: batadv0: Adding interface: macsec1 [ 81.228200][ T5859] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.275847][ T5859] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 82.345741][ T5875] tipc: Can't bind to reserved service type 1 [ 82.381765][ T5875] netlink: 'syz.3.12': attribute type 39 has an invalid length. [ 82.526505][ T5781] Bluetooth: hci2: command tx timeout [ 82.644790][ T5876] vlan2: entered allmulticast mode [ 82.700024][ T5781] Bluetooth: hci3: command tx timeout [ 82.705927][ T5784] Bluetooth: hci0: command tx timeout [ 82.711515][ T5784] Bluetooth: hci1: command tx timeout [ 83.123482][ T5884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16'. [ 83.160401][ T5886] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 83.362844][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 83.899011][ T5898] syzkaller0: entered promiscuous mode [ 83.906670][ T5898] syzkaller0: entered allmulticast mode [ 83.996477][ T28] cfg80211: failed to load regulatory.db [ 84.420588][ T5904] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.611760][ T5904] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.786304][ T5904] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.019884][ T5904] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.164686][ T5927] tipc: Started in network mode [ 85.199966][ T5927] tipc: Node identity d6f3f1f262b4, cluster identity 4711 [ 85.217598][ T5927] tipc: Enabled bearer , priority 0 [ 85.227081][ T5928] syzkaller0: entered promiscuous mode [ 85.248331][ T5928] syzkaller0: entered allmulticast mode [ 85.364534][ T5904] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.422178][ T5904] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.456629][ T5927] tipc: Resetting bearer [ 85.493715][ T5904] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.536379][ T5904] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.549812][ T5925] tipc: Resetting bearer [ 85.638444][ T5925] tipc: Disabling bearer [ 85.904324][ T5934] warning: `syz.3.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.524349][ T5958] block nbd0: not configured, cannot reconfigure [ 87.080122][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 87.373900][ T5985] tipc: Started in network mode [ 87.379137][ T5985] tipc: Node identity , cluster identity 4711 [ 87.392002][ T5985] tipc: Failed to obtain node identity [ 87.398395][ T5985] tipc: Enabling of bearer rejected, failed to enable media [ 87.429979][ T5982] syzkaller0: entered promiscuous mode [ 87.447051][ T5982] syzkaller0: entered allmulticast mode [ 87.506634][ T5982] TC_ACT_REPEAT abuse ? [ 87.765063][ T5993] syzkaller0: entered promiscuous mode [ 87.781002][ T5993] syzkaller0: entered allmulticast mode [ 89.892103][ T6046] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 90.070253][ T6052] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.67'. [ 90.081286][ T6052] bridge_slave_1: default FDB implementation only supports local addresses [ 90.115585][ T5760] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.275894][ T789] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.321624][ T5760] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.333709][ T5760] usb 2-1: config 0 has no interfaces? [ 90.348980][ T5760] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 90.368646][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 90.370795][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.407006][ T5760] usb 2-1: Product: syz [ 90.411248][ T5760] usb 2-1: Manufacturer: syz [ 90.425876][ T5760] usb 2-1: SerialNumber: syz [ 90.457394][ T5760] usb 2-1: config 0 descriptor?? [ 90.485789][ T789] usb 3-1: Using ep0 maxpacket: 32 [ 90.495788][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.519335][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.540398][ T6062] syzkaller0: entered promiscuous mode [ 90.546152][ T789] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 90.555927][ T6062] syzkaller0: entered allmulticast mode [ 90.562382][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.598480][ T789] usb 3-1: config 0 descriptor?? [ 90.617736][ T789] hub 3-1:0.0: USB hub found [ 90.737367][ T6048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.750840][ T6048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.768111][ T5760] usb 2-1: USB disconnect, device number 2 [ 90.793082][ T6067] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.800918][ T6067] IPv6: NLM_F_CREATE should be set when creating new route [ 90.808853][ T6067] IPv6: NLM_F_CREATE should be set when creating new route [ 90.816245][ T6067] IPv6: NLM_F_CREATE should be set when creating new route [ 90.837853][ T789] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 91.161181][ T6073] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 91.219015][ T6073] netlink: 'syz.3.73': attribute type 10 has an invalid length. [ 91.262252][ T789] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0 [ 91.272685][ T6073] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 91.292279][ T789] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 91.292377][ T2938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.325554][ T2938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.387847][ T5760] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.589426][ T5760] usb 2-1: config 119 has an invalid interface number: 202 but max is 0 [ 91.609987][ T5760] usb 2-1: config 119 has no interface number 0 [ 91.615528][ T6080] tipc: Started in network mode [ 91.623207][ T6080] tipc: Node identity 0601e34a34fc, cluster identity 4711 [ 91.625362][ T5760] usb 2-1: config 119 interface 202 altsetting 231 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 91.643241][ T6080] tipc: Enabled bearer , priority 0 [ 91.673385][ T6080] syzkaller0: entered promiscuous mode [ 91.680318][ T6080] syzkaller0: entered allmulticast mode [ 91.680750][ T5760] usb 2-1: config 119 interface 202 has no altsetting 0 [ 91.701436][ T6084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.705341][ T5760] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 91.720627][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.728966][ T6080] tipc: Resetting bearer [ 91.736050][ T6083] netlink: 132 bytes leftover after parsing attributes in process `syz.3.75'. [ 91.739023][ T6084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.759570][ T5760] usb 2-1: Product: syz [ 91.759749][ T6079] tipc: Resetting bearer [ 91.763963][ T5760] usb 2-1: Manufacturer: syz [ 91.780250][ T5760] usb 2-1: SerialNumber: syz [ 91.822901][ T6079] tipc: Disabling bearer [ 91.962596][ T6088] netlink: 'syz.3.77': attribute type 21 has an invalid length. [ 92.011275][ T6048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.011493][ T28] usb 3-1: USB disconnect, device number 2 [ 92.025776][ T6048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.109440][ T5760] go7007 2-1:119.202: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 92.122524][ T5760] go7007 2-1:119.202: Falling back to sysfs fallback for: go7007/go7007fw.bin [ 93.029381][ T6091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.044369][ T6094] pim6reg1: entered allmulticast mode [ 93.339056][ T6108] netlink: 'syz.3.85': attribute type 10 has an invalid length. [ 93.358458][ T6108] netlink: 55 bytes leftover after parsing attributes in process `syz.3.85'. [ 93.398920][ T6108] team0: Port device virt_wifi0 added [ 93.445013][ T6113] Cannot find add_set index 1 as target [ 94.090408][ T6130] syzkaller1: entered promiscuous mode [ 94.099324][ T6130] syzkaller1: entered allmulticast mode [ 94.659844][ T6132] netlink: 165 bytes leftover after parsing attributes in process `syz.3.94'. [ 94.721726][ T6134] block nbd0: not configured, cannot reconfigure [ 95.229477][ T6140] Bluetooth: MGMT ver 1.22 [ 95.376516][ T6154] netlink: 'syz.0.104': attribute type 10 has an invalid length. [ 95.396478][ T6154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.104'. [ 95.416945][ T6154] bridge0: port 3(ipvlan1) entered blocking state [ 95.433404][ T6154] bridge0: port 3(ipvlan1) entered disabled state [ 95.441108][ T6154] ipvlan1: entered allmulticast mode [ 95.452861][ T6154] veth0_vlan: entered allmulticast mode [ 95.470601][ T6154] ipvlan1: left allmulticast mode [ 95.476309][ T6154] veth0_vlan: left allmulticast mode [ 95.482450][ T6154] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 96.377081][ T6168] pim6reg1: entered allmulticast mode [ 96.407886][ T6171] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.111'. [ 96.422130][ T6171] bridge_slave_1: default FDB implementation only supports local addresses [ 96.690707][ T6177] syzkaller0: entered promiscuous mode [ 96.697317][ T6177] syzkaller0: entered allmulticast mode [ 96.712930][ T6177] TC_ACT_REPEAT abuse ? [ 96.767585][ T789] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.902141][ T6179] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 96.934976][ T5809] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.985335][ T789] usb 4-1: Using ep0 maxpacket: 32 [ 96.996627][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.021919][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.063137][ T789] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 97.074278][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.086012][ T789] usb 4-1: config 0 descriptor?? [ 97.094286][ T789] hub 4-1:0.0: USB hub found [ 97.139703][ T5809] usb 3-1: unable to get BOS descriptor or descriptor too short [ 97.164558][ T5809] usb 3-1: config 0 has no interfaces? [ 97.207009][ T5809] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 97.222619][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.231006][ T5809] usb 3-1: Product: syz [ 97.241172][ T5809] usb 3-1: Manufacturer: syz [ 97.254295][ T5809] usb 3-1: SerialNumber: syz [ 97.264421][ T5809] usb 3-1: config 0 descriptor?? [ 97.316136][ T789] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 97.534826][ T6176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.548657][ T6176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.566149][ T5809] usb 3-1: USB disconnect, device number 3 [ 97.726923][ T789] hid-generic 0003:046D:C31C.0002: unknown main item tag 0x0 [ 97.761685][ T789] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 98.105369][ T6186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.120715][ T6186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.146523][ T5809] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.341514][ T5809] usb 3-1: config 119 has an invalid interface number: 202 but max is 0 [ 98.351903][ T5809] usb 3-1: config 119 has no interface number 0 [ 98.362630][ T5809] usb 3-1: config 119 interface 202 altsetting 231 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 98.378070][ T5809] usb 3-1: config 119 interface 202 has no altsetting 0 [ 98.407904][ T5809] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 98.417188][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.426383][ T5811] usb 4-1: USB disconnect, device number 2 [ 98.432432][ T5809] usb 3-1: Product: syz [ 98.439962][ T5809] usb 3-1: Manufacturer: syz [ 98.449327][ T5809] usb 3-1: SerialNumber: syz [ 98.683279][ T6176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.693901][ T6176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.123905][ T6188] tipc: Started in network mode [ 99.136346][ T6188] tipc: Node identity 4e2ff92a4eb6, cluster identity 4711 [ 99.157836][ T6188] tipc: Enabled bearer , priority 0 [ 99.199707][ T6188] syzkaller0: entered promiscuous mode [ 99.215217][ T6188] syzkaller0: entered allmulticast mode [ 99.251484][ T6188] tipc: Resetting bearer [ 99.283583][ T6187] tipc: Resetting bearer [ 99.347947][ T6187] tipc: Disabling bearer [ 99.918970][ T6206] tipc: Enabled bearer , priority 10 [ 100.392696][ T6220] tipc: Started in network mode [ 100.408456][ T6220] tipc: Node identity d63ed8f817c2, cluster identity 4711 [ 100.420493][ T6220] tipc: Enabled bearer , priority 0 [ 100.451736][ T6220] syzkaller0: entered promiscuous mode [ 100.459908][ T6220] syzkaller0: entered allmulticast mode [ 100.488722][ T6220] tipc: Resetting bearer [ 100.506765][ T6219] tipc: Resetting bearer [ 100.541061][ T6219] tipc: Disabling bearer [ 100.810899][ T6233] tipc: Enabled bearer , priority 10 [ 100.921798][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 101.036778][ T788] tipc: Node number set to 10090794 [ 101.927587][ T5829] tipc: Node number set to 855499594 [ 102.712271][ T6285] syzkaller0: entered promiscuous mode [ 102.718232][ T6285] syzkaller0: entered allmulticast mode [ 102.735254][ T6285] TC_ACT_REPEAT abuse ? [ 103.984958][ T6308] syzkaller0: entered promiscuous mode [ 104.004213][ T6308] syzkaller0: entered allmulticast mode [ 104.660990][ T6323] tipc: Enabled bearer , priority 0 [ 104.678541][ T6323] tipc: Resetting bearer [ 104.696333][ T6322] tipc: Disabling bearer [ 105.573179][ T6334] syzkaller0: entered promiscuous mode [ 105.583654][ T6334] syzkaller0: entered allmulticast mode [ 106.150043][ T6344] tipc: Enabled bearer , priority 0 [ 106.167335][ T6344] tipc: Resetting bearer [ 106.216571][ T6343] tipc: Disabling bearer [ 106.668630][ T6356] syzkaller0: entered promiscuous mode [ 106.674175][ T6356] syzkaller0: entered allmulticast mode [ 107.311252][ T6373] tipc: Enabled bearer , priority 0 [ 107.339740][ T6373] tipc: Resetting bearer [ 107.381755][ T6372] tipc: Disabling bearer [ 107.486866][ T6381] syzkaller0: entered promiscuous mode [ 107.498679][ T6381] syzkaller0: entered allmulticast mode [ 108.341017][ T6403] tipc: Enabled bearer , priority 0 [ 108.352494][ T6403] syzkaller0: entered promiscuous mode [ 108.362450][ T6403] syzkaller0: entered allmulticast mode [ 108.382417][ T6403] tipc: Resetting bearer [ 108.407021][ T6402] tipc: Resetting bearer [ 108.482688][ T6402] tipc: Disabling bearer [ 108.507271][ T6406] syzkaller0: entered promiscuous mode [ 108.512945][ T6406] syzkaller0: entered allmulticast mode [ 109.938369][ T6429] tipc: Enabled bearer , priority 0 [ 109.957970][ T6429] syzkaller0: entered promiscuous mode [ 109.964459][ T6429] syzkaller0: entered allmulticast mode [ 109.994558][ T6429] tipc: Resetting bearer [ 110.010234][ T6428] tipc: Resetting bearer [ 110.039800][ T6428] tipc: Disabling bearer [ 110.062327][ T6431] syzkaller0: entered promiscuous mode [ 110.072268][ T6431] syzkaller0: entered allmulticast mode [ 111.233628][ T6456] tipc: Enabled bearer , priority 0 [ 111.244595][ T6456] syzkaller0: entered promiscuous mode [ 111.251819][ T6456] syzkaller0: entered allmulticast mode [ 111.272491][ T6456] tipc: Resetting bearer [ 111.288376][ T6455] tipc: Resetting bearer [ 111.326151][ T6455] tipc: Disabling bearer [ 112.399590][ T6480] tipc: Enabled bearer , priority 0 [ 112.451502][ T6480] syzkaller0: entered promiscuous mode [ 112.473825][ T6480] syzkaller0: entered allmulticast mode [ 112.498360][ T6480] tipc: Resetting bearer [ 112.545480][ T6479] tipc: Resetting bearer [ 112.581433][ T6479] tipc: Disabling bearer [ 113.539150][ T6510] tipc: Enabled bearer , priority 0 [ 113.564305][ T6510] syzkaller0: entered promiscuous mode [ 113.571313][ T6510] syzkaller0: entered allmulticast mode [ 113.599638][ T6510] tipc: Resetting bearer [ 113.610656][ T6508] tipc: Resetting bearer [ 113.656479][ T6508] tipc: Disabling bearer [ 114.747024][ T6543] tipc: Enabled bearer , priority 0 [ 114.761275][ T6543] syzkaller0: entered promiscuous mode [ 114.771436][ T6543] syzkaller0: entered allmulticast mode [ 114.792010][ T6543] tipc: Resetting bearer [ 114.798252][ T5829] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.811206][ T6542] tipc: Resetting bearer [ 114.837198][ T6542] tipc: Disabling bearer [ 114.987804][ T5829] usb 4-1: Using ep0 maxpacket: 32 [ 114.997767][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.015249][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.035720][ T5829] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 115.055249][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.078031][ T5829] usb 4-1: config 0 descriptor?? [ 115.088646][ T5829] hub 4-1:0.0: USB hub found [ 115.294560][ T5829] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 115.717341][ T5829] hid-generic 0003:046D:C31C.0003: unknown main item tag 0x0 [ 115.760194][ T5829] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 116.023722][ T6575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.075741][ T6575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.114417][ T6577] tipc: Enabled bearer , priority 0 [ 116.141617][ T6577] syzkaller0: entered promiscuous mode [ 116.155277][ T6577] syzkaller0: entered allmulticast mode [ 116.195846][ T6577] tipc: Resetting bearer [ 116.215029][ T6576] tipc: Resetting bearer [ 116.254926][ T6576] tipc: Disabling bearer [ 116.326357][ T5829] usb 4-1: USB disconnect, device number 3 [ 117.070265][ T6606] tipc: Enabled bearer , priority 0 [ 117.083799][ T6606] syzkaller0: entered promiscuous mode [ 117.093152][ T6606] syzkaller0: entered allmulticast mode [ 117.129777][ T6606] tipc: Resetting bearer [ 117.149761][ T6605] tipc: Resetting bearer [ 117.199608][ T6605] tipc: Disabling bearer [ 118.105274][ T788] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.159774][ T6635] tipc: Enabled bearer , priority 0 [ 118.178554][ T6635] syzkaller0: entered promiscuous mode [ 118.195439][ T6635] syzkaller0: entered allmulticast mode [ 118.232110][ T6635] tipc: Resetting bearer [ 118.244140][ T6634] tipc: Resetting bearer [ 118.277643][ T6634] tipc: Disabling bearer [ 118.295296][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 118.303620][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.316573][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.328138][ T788] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 118.339162][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.369218][ T788] usb 1-1: config 0 descriptor?? [ 118.388413][ T788] hub 1-1:0.0: USB hub found [ 118.594459][ T788] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 119.007240][ T788] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 119.034733][ T788] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 119.330223][ T6668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.353565][ T6668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.504568][ T6670] tipc: Enabled bearer , priority 0 [ 119.528381][ T6669] tipc: Disabling bearer [ 119.616315][ T1201] usb 1-1: USB disconnect, device number 2 [ 120.063964][ T6685] Zero length message leads to an empty skb [ 120.376084][ T6695] tipc: Enabled bearer , priority 0 [ 120.410243][ T6694] tipc: Disabling bearer [ 121.138915][ T5811] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 121.201416][ T6716] tipc: Enabled bearer , priority 0 [ 121.226959][ T6715] tipc: Disabling bearer [ 121.365344][ T5811] usb 4-1: Using ep0 maxpacket: 32 [ 121.387012][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.408683][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.439654][ T5811] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 121.463111][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.487702][ T5811] usb 4-1: config 0 descriptor?? [ 121.516062][ T5811] hub 4-1:0.0: USB hub found [ 121.738006][ T5811] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 122.153573][ T5811] hid-generic 0003:046D:C31C.0005: unknown main item tag 0x0 [ 122.196163][ T5811] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 122.489898][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.515737][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.610723][ T6740] tipc: Enabled bearer , priority 0 [ 122.645880][ T6739] tipc: Disabling bearer [ 122.769839][ T5811] usb 4-1: USB disconnect, device number 4 [ 123.899775][ T6762] tipc: Enabled bearer , priority 0 [ 123.967687][ T6761] tipc: Disabling bearer [ 124.325227][ T5811] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 124.515236][ T5811] usb 4-1: Using ep0 maxpacket: 32 [ 124.527750][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.549604][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.569669][ T5811] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 124.589174][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.614990][ T5811] usb 4-1: config 0 descriptor?? [ 124.630657][ T5811] hub 4-1:0.0: USB hub found [ 124.844589][ T5811] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 125.167479][ T6780] syzkaller0: entered promiscuous mode [ 125.173604][ T6780] syzkaller0: entered allmulticast mode [ 125.272352][ T5811] hid-generic 0003:046D:C31C.0006: unknown main item tag 0x0 [ 125.295889][ T5811] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 125.592656][ T6789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.624478][ T6789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.762201][ T6793] tipc: Enabled bearer , priority 0 [ 125.786286][ T6792] tipc: Disabling bearer [ 125.880506][ T1201] usb 4-1: USB disconnect, device number 5 [ 126.559953][ T6805] syzkaller0: entered promiscuous mode [ 126.566359][ T6805] syzkaller0: entered allmulticast mode [ 126.882493][ T6815] tipc: Enabled bearer , priority 0 [ 126.920244][ T6815] tipc: Resetting bearer [ 126.978947][ T6814] tipc: Disabling bearer [ 127.175668][ T5829] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.367010][ T5829] usb 1-1: Using ep0 maxpacket: 32 [ 127.388118][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.405537][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.416269][ T5829] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 127.426955][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.450091][ T5829] usb 1-1: config 0 descriptor?? [ 127.469093][ T5829] hub 1-1:0.0: USB hub found [ 127.669154][ T6833] syzkaller0: entered promiscuous mode [ 127.674816][ T6833] syzkaller0: entered allmulticast mode [ 127.675578][ T5829] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 128.096462][ T5829] hid-generic 0003:046D:C31C.0007: unknown main item tag 0x0 [ 128.136447][ T5829] hid-generic 0003:046D:C31C.0007: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 128.422685][ T6846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.450016][ T6846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.490321][ T6848] tipc: Enabled bearer , priority 0 [ 128.506349][ T6848] tipc: Resetting bearer [ 128.523860][ T6847] tipc: Disabling bearer [ 128.695742][ T1201] usb 1-1: USB disconnect, device number 3 [ 129.121113][ T6859] syzkaller0: entered promiscuous mode [ 129.135447][ T6859] syzkaller0: entered allmulticast mode [ 129.901879][ T6873] tipc: Enabled bearer , priority 0 [ 129.923137][ T6873] tipc: Resetting bearer [ 129.949640][ T6871] tipc: Disabling bearer [ 130.279674][ T6886] syzkaller0: entered promiscuous mode [ 130.295304][ T6886] syzkaller0: entered allmulticast mode [ 131.237756][ T6900] tipc: Enabled bearer , priority 0 [ 131.256475][ T6900] syzkaller0: entered promiscuous mode [ 131.262118][ T6900] syzkaller0: entered allmulticast mode [ 131.278461][ T6899] tipc: Resetting bearer [ 131.344275][ T6899] tipc: Disabling bearer [ 131.622072][ T6905] syzkaller0: entered promiscuous mode [ 131.632559][ T6905] syzkaller0: entered allmulticast mode [ 132.367163][ T6920] tipc: Enabled bearer , priority 0 [ 132.413154][ T6920] syzkaller0: entered promiscuous mode [ 132.422606][ T6920] syzkaller0: entered allmulticast mode [ 132.442233][ T6919] tipc: Resetting bearer [ 132.478044][ T6919] tipc: Disabling bearer [ 132.833671][ T6926] syzkaller0: entered promiscuous mode [ 132.865219][ T6926] syzkaller0: entered allmulticast mode [ 133.251646][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.258729][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.367064][ T6942] tipc: Enabled bearer , priority 0 [ 133.393627][ T6942] syzkaller0: entered promiscuous mode [ 133.422745][ T6942] syzkaller0: entered allmulticast mode [ 133.436419][ T6941] tipc: Resetting bearer [ 133.505652][ T6941] tipc: Disabling bearer [ 133.773311][ T6953] syzkaller0: entered promiscuous mode [ 133.781414][ T6953] syzkaller0: entered allmulticast mode [ 134.643087][ T6971] tipc: Enabled bearer , priority 0 [ 134.664738][ T6971] syzkaller0: entered promiscuous mode [ 134.670663][ T6971] syzkaller0: entered allmulticast mode [ 134.690733][ T6970] tipc: Resetting bearer [ 134.737734][ T6970] tipc: Disabling bearer [ 135.006912][ T6979] tipc: Enabled bearer , priority 0 [ 135.035369][ T6979] syzkaller0: entered promiscuous mode [ 135.041008][ T6979] syzkaller0: entered allmulticast mode [ 135.086007][ T6979] tipc: Resetting bearer [ 135.104793][ T6978] tipc: Resetting bearer [ 135.161304][ T6978] tipc: Disabling bearer [ 135.351758][ T6984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.991470][ T6995] tipc: Enabled bearer , priority 0 [ 136.008009][ T6995] syzkaller0: entered promiscuous mode [ 136.013703][ T6995] syzkaller0: entered allmulticast mode [ 136.044473][ T6994] tipc: Resetting bearer [ 136.104762][ T6994] tipc: Disabling bearer [ 136.654808][ T7013] tipc: Enabled bearer , priority 0 [ 136.668746][ T7013] syzkaller0: entered promiscuous mode [ 136.674562][ T7013] syzkaller0: entered allmulticast mode [ 136.706600][ T7013] tipc: Resetting bearer [ 136.719298][ T7012] tipc: Resetting bearer [ 136.765087][ T7012] tipc: Disabling bearer [ 138.961747][ T7052] syzkaller0: entered promiscuous mode [ 138.975422][ T7052] syzkaller0: entered allmulticast mode [ 140.574683][ T7081] syzkaller0: entered promiscuous mode [ 140.585296][ T7081] syzkaller0: entered allmulticast mode [ 142.397066][ T7121] syzkaller0: entered promiscuous mode [ 142.402670][ T7121] syzkaller0: entered allmulticast mode [ 144.302163][ T7161] tipc: Enabled bearer , priority 0 [ 144.334552][ T7162] syzkaller0: entered promiscuous mode [ 144.352212][ T7162] syzkaller0: entered allmulticast mode [ 144.404319][ T7165] tipc: Resetting bearer [ 144.468907][ T7160] tipc: Resetting bearer [ 144.576815][ T7160] tipc: Disabling bearer [ 146.185773][ T7203] tipc: Enabled bearer , priority 0 [ 146.193542][ T7203] syzkaller0: entered promiscuous mode [ 146.199730][ T7203] syzkaller0: entered allmulticast mode [ 146.226364][ T7203] tipc: Resetting bearer [ 146.261297][ T7202] tipc: Resetting bearer [ 146.329005][ T7202] tipc: Disabling bearer [ 153.728581][ T5809] WIS XMen II or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 153.728973][ T5760] WIS XMen II or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 153.750269][ T5809] go7007: probe of 3-1:119.202 failed with error -12 [ 153.780435][ T5809] usb 3-1: USB disconnect, device number 4 [ 153.815304][ T5760] go7007: probe of 2-1:119.202 failed with error -12 [ 153.874628][ T5760] usb 2-1: USB disconnect, device number 3 [ 154.634212][ T7382] tipc: Enabled bearer , priority 0 [ 154.661743][ T7382] syzkaller0: entered promiscuous mode [ 154.670808][ T7382] syzkaller0: entered allmulticast mode [ 154.701597][ T7382] tipc: Resetting bearer [ 155.375717][ T7381] tipc: Resetting bearer [ 155.442973][ T7381] tipc: Disabling bearer [ 156.995024][ T7418] tipc: Enabled bearer , priority 0 [ 157.025752][ T7418] syzkaller0: entered promiscuous mode [ 157.053399][ T7418] syzkaller0: entered allmulticast mode [ 157.112553][ T7418] tipc: Resetting bearer [ 157.142251][ T7417] tipc: Resetting bearer [ 157.220656][ T7417] tipc: Disabling bearer [ 157.691774][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'. [ 158.185925][ T7466] tipc: Enabled bearer , priority 0 [ 158.213360][ T7466] syzkaller0: entered promiscuous mode [ 158.223274][ T7466] syzkaller0: entered allmulticast mode [ 158.250698][ T7466] tipc: Resetting bearer [ 158.279994][ T7465] tipc: Resetting bearer [ 158.359470][ T7465] tipc: Disabling bearer [ 159.599057][ T7500] tipc: Enabled bearer , priority 0 [ 159.621848][ T7500] syzkaller0: entered promiscuous mode [ 159.639960][ T7500] syzkaller0: entered allmulticast mode [ 159.703751][ T7500] tipc: Resetting bearer [ 159.710941][ T7499] tipc: Resetting bearer [ 159.743739][ T7499] tipc: Disabling bearer [ 160.687000][ T7540] tipc: Enabled bearer , priority 0 [ 160.717412][ T7540] tipc: Resetting bearer [ 160.762304][ T7539] tipc: Disabling bearer [ 161.502480][ T7575] tipc: Enabled bearer , priority 0 [ 161.527786][ T7575] tipc: Resetting bearer [ 161.566607][ T7574] tipc: Disabling bearer [ 161.695759][ T7585] netlink: 20 bytes leftover after parsing attributes in process `syz.1.692'. [ 162.204938][ T7607] tipc: Enabled bearer , priority 0 [ 162.247408][ T7607] tipc: Resetting bearer [ 162.308054][ T7605] tipc: Disabling bearer [ 162.343932][ T7613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.704'. [ 162.561895][ T7619] syzkaller0: entered promiscuous mode [ 162.567773][ T7619] syzkaller0: entered allmulticast mode [ 163.395652][ T7647] syzkaller0: entered promiscuous mode [ 163.401294][ T7647] syzkaller0: entered allmulticast mode [ 163.562355][ T7652] syzkaller0: entered promiscuous mode [ 163.578734][ T7652] syzkaller0: entered allmulticast mode [ 164.350196][ T7683] syzkaller0: entered promiscuous mode [ 164.365758][ T7683] syzkaller0: entered allmulticast mode [ 165.336049][ T7724] syzkaller0: entered promiscuous mode [ 165.352374][ T7724] syzkaller0: entered allmulticast mode [ 167.254774][ T7778] syzkaller0: entered promiscuous mode [ 167.260742][ T7778] syzkaller0: entered allmulticast mode [ 169.380733][ T7826] syzkaller0: entered promiscuous mode [ 169.394468][ T7826] syzkaller0: entered allmulticast mode [ 171.093911][ T7859] syzkaller0: entered promiscuous mode [ 171.124869][ T7859] syzkaller0: entered allmulticast mode [ 173.197587][ T7934] syzkaller0: entered promiscuous mode [ 173.225695][ T7934] syzkaller0: entered allmulticast mode [ 174.882221][ T7976] syzkaller0: entered promiscuous mode [ 174.905414][ T7976] syzkaller0: entered allmulticast mode [ 175.776137][ T8013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.837'. [ 176.127734][ T8021] syzkaller0: entered promiscuous mode [ 176.164603][ T8021] syzkaller0: entered allmulticast mode [ 176.488059][ T8040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.846'. [ 176.770734][ T8049] Cannot find add_set index 1 as target [ 177.251820][ T8065] tipc: Enabled bearer , priority 0 [ 177.331857][ T8064] tipc: Disabling bearer [ 177.746816][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 178.506287][ T8111] tipc: Enabled bearer , priority 0 [ 178.563198][ T8110] tipc: Disabling bearer [ 178.868633][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.868'. [ 180.186245][ T8149] tipc: Enabled bearer , priority 0 [ 180.267066][ T8147] tipc: Disabling bearer [ 180.427572][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 181.363354][ T8189] tipc: Enabled bearer , priority 0 [ 181.428014][ T8188] tipc: Disabling bearer [ 181.632217][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'. [ 182.938194][ T8236] tipc: Enabled bearer , priority 0 [ 182.988097][ T8233] tipc: Disabling bearer [ 184.166875][ T8282] tipc: Enabled bearer , priority 0 [ 184.231217][ T8280] tipc: Disabling bearer [ 185.362586][ T8315] tipc: Enabling of bearer rejected, failed to enable media [ 186.981669][ T8368] tipc: Enabling of bearer rejected, failed to enable media [ 188.095804][ T8403] tipc: Enabling of bearer rejected, failed to enable media [ 188.903237][ T8431] netlink: 165 bytes leftover after parsing attributes in process `syz.0.960'. [ 189.230918][ T8439] tipc: Enabling of bearer rejected, failed to enable media [ 189.883688][ T8461] netlink: 165 bytes leftover after parsing attributes in process `syz.0.970'. [ 190.387798][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.974'. [ 190.484566][ T8472] tipc: Enabling of bearer rejected, failed to enable media [ 190.893281][ T8490] netlink: 165 bytes leftover after parsing attributes in process `syz.3.979'. [ 190.903722][ T8489] syzkaller1: entered promiscuous mode [ 190.909627][ T8489] syzkaller1: entered allmulticast mode [ 191.238692][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 191.706760][ T8510] netlink: 165 bytes leftover after parsing attributes in process `syz.0.989'. [ 191.811218][ T8512] tipc: Enabling of bearer rejected, failed to enable media [ 192.493916][ T8533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.995'. [ 192.842957][ T8541] netlink: 165 bytes leftover after parsing attributes in process `syz.2.999'. [ 193.023005][ T8545] tipc: Enabled bearer , priority 0 [ 193.054633][ T8545] syzkaller0: entered promiscuous mode [ 193.075507][ T8545] syzkaller0: entered allmulticast mode [ 193.101372][ T8545] tipc: Resetting bearer [ 193.116430][ T8547] tipc: Enabling of bearer rejected, failed to enable media [ 193.137472][ T8544] tipc: Resetting bearer [ 193.166764][ T8544] tipc: Disabling bearer [ 194.109792][ T8585] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1013'. [ 194.233548][ T8592] tipc: Enabling of bearer rejected, failed to enable media [ 194.697624][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.710857][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.304686][ T8620] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1024'. [ 195.608120][ T8631] tipc: Enabling of bearer rejected, failed to enable media [ 196.026481][ T8650] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1033'. [ 196.767401][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 196.767413][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 196.957591][ T8677] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1042'. [ 197.483190][ T8688] syzkaller0: entered promiscuous mode [ 197.497519][ T8688] syzkaller0: entered allmulticast mode [ 203.847835][ T8760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.365244][ T5760] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 204.387802][ T8855] tipc: Enabling of bearer rejected, failed to enable media [ 204.567696][ T5760] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 204.598807][ T5760] usb 4-1: config 0 has no interface number 0 [ 204.636461][ T5760] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 204.676298][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.705285][ T5760] usb 4-1: Product: syz [ 204.719755][ T5760] usb 4-1: Manufacturer: syz [ 204.724741][ T5760] usb 4-1: SerialNumber: syz [ 204.752507][ T5760] usb 4-1: config 0 descriptor?? [ 204.776144][ T8873] tipc: Enabling of bearer rejected, failed to enable media [ 205.004840][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 205.035716][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 205.043397][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 205.051277][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 205.095982][ T5760] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 205.136636][ T5760] gspca_m5602: Failed to find a sensor [ 205.142181][ T5760] ALi m5602 4-1:0.88: ALi m5602 webcam failed [ 205.194300][ T5760] usb 4-1: USB disconnect, device number 6 [ 207.475358][ T5829] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 207.658899][ T5829] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 207.667305][ T5829] usb 3-1: config 0 has no interface number 0 [ 207.679171][ T5829] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 207.688405][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.696994][ T5829] usb 3-1: Product: syz [ 207.701364][ T5829] usb 3-1: Manufacturer: syz [ 207.706192][ T5829] usb 3-1: SerialNumber: syz [ 207.712792][ T5829] usb 3-1: config 0 descriptor?? [ 207.929016][ T5829] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 207.937598][ T5829] gspca_m5602: Failed to find a sensor [ 207.943160][ T5829] ALi m5602 3-1:0.88: ALi m5602 webcam failed [ 207.952270][ T5829] usb 3-1: USB disconnect, device number 5 [ 208.234305][ T8888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.810143][ T8969] tipc: Enabled bearer , priority 0 [ 208.857114][ T8968] tipc: Disabling bearer [ 208.879079][ T8971] syzkaller0: entered promiscuous mode [ 208.887162][ T8971] syzkaller0: entered allmulticast mode [ 209.325283][ T788] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 209.520490][ T788] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 209.529127][ T788] usb 2-1: config 0 has no interface number 0 [ 209.539260][ T788] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 209.549872][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.559306][ T788] usb 2-1: Product: syz [ 209.563617][ T788] usb 2-1: Manufacturer: syz [ 209.568940][ T788] usb 2-1: SerialNumber: syz [ 209.582651][ T788] usb 2-1: config 0 descriptor?? [ 209.808360][ T788] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 209.823317][ T788] gspca_m5602: Failed to find a sensor [ 209.829736][ T788] ALi m5602 2-1:0.88: ALi m5602 webcam failed [ 209.842366][ T788] usb 2-1: USB disconnect, device number 4 [ 210.380560][ T9004] syzkaller0: entered promiscuous mode [ 210.386261][ T9004] syzkaller0: entered allmulticast mode [ 211.285290][ T5760] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 211.467097][ T5760] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 211.475540][ T5760] usb 2-1: config 0 has no interface number 0 [ 211.483738][ T5760] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 211.493287][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.501576][ T5760] usb 2-1: Product: syz [ 211.513167][ T5760] usb 2-1: Manufacturer: syz [ 211.518272][ T5760] usb 2-1: SerialNumber: syz [ 211.524946][ T5760] usb 2-1: config 0 descriptor?? [ 211.743230][ T5760] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 211.764450][ T5760] gspca_m5602: Failed to find a sensor [ 211.770445][ T5760] ALi m5602 2-1:0.88: ALi m5602 webcam failed [ 211.781432][ T5760] usb 2-1: USB disconnect, device number 5 [ 211.880006][ T8973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 212.172117][ T9039] syzkaller0: entered promiscuous mode [ 212.178982][ T9039] syzkaller0: entered allmulticast mode [ 213.003432][ T9072] syzkaller0: entered promiscuous mode [ 213.009709][ T9072] syzkaller0: entered allmulticast mode [ 213.095293][ T8] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 213.290239][ T8] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 213.298940][ T8] usb 3-1: config 0 has no interface number 0 [ 213.309016][ T8] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 213.331030][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.355326][ T8] usb 3-1: Product: syz [ 213.359742][ T8] usb 3-1: Manufacturer: syz [ 213.364389][ T8] usb 3-1: SerialNumber: syz [ 213.383651][ T8] usb 3-1: config 0 descriptor?? [ 213.619845][ T8] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 213.648158][ T8] gspca_m5602: Failed to find a sensor [ 213.654011][ T8] ALi m5602 3-1:0.88: ALi m5602 webcam failed [ 213.675860][ T8] usb 3-1: USB disconnect, device number 6 [ 213.813521][ T9096] syzkaller0: entered promiscuous mode [ 213.819441][ T9096] syzkaller0: entered allmulticast mode [ 213.978838][ T9102] syzkaller0: entered promiscuous mode [ 214.000195][ T9102] syzkaller0: entered allmulticast mode [ 214.925297][ T788] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 215.095404][ T788] usb 2-1: device descriptor read/64, error -71 [ 215.161193][ T9151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.365329][ T788] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 215.545319][ T788] usb 2-1: device descriptor read/64, error -71 [ 215.679659][ T788] usb usb2-port1: attempt power cycle [ 216.095338][ T788] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 216.161823][ T788] usb 2-1: device descriptor read/8, error -71 [ 216.244098][ T9173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.446253][ T788] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 216.486715][ T788] usb 2-1: device descriptor read/8, error -71 [ 216.623738][ T788] usb usb2-port1: unable to enumerate USB device [ 216.677897][ T9191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.248223][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 217.669249][ T9206] syzkaller0: entered promiscuous mode [ 217.675241][ T9206] syzkaller0: entered allmulticast mode [ 218.002081][ T9213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.216783][ T9221] netlink: 'syz.0.1226': attribute type 21 has an invalid length. [ 218.259306][ T9221] IPVS: length: 528 != 8 [ 218.635337][ T5811] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 218.785359][ T5811] usb 3-1: device descriptor read/64, error -71 [ 219.001456][ T9240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.065280][ T5811] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 219.245525][ T5811] usb 3-1: device descriptor read/64, error -71 [ 219.368218][ T5811] usb usb3-port1: attempt power cycle [ 219.693495][ T9258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.798788][ T5811] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 219.825237][ T9262] netlink: 'syz.3.1245': attribute type 21 has an invalid length. [ 219.850629][ T5811] usb 3-1: device descriptor read/8, error -71 [ 220.136104][ T5811] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 220.175872][ T5811] usb 3-1: device descriptor read/8, error -71 [ 220.305964][ T5811] usb usb3-port1: unable to enumerate USB device [ 220.592268][ T9297] syzkaller0: entered promiscuous mode [ 220.599628][ T9297] syzkaller0: entered allmulticast mode [ 220.867960][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1263'. [ 221.433503][ T9329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.441054][ T9329] IPv6: NLM_F_CREATE should be set when creating new route [ 221.448433][ T9329] IPv6: NLM_F_CREATE should be set when creating new route [ 221.456105][ T9329] IPv6: NLM_F_CREATE should be set when creating new route [ 221.497704][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1272'. [ 221.716075][ T9341] syzkaller1: entered promiscuous mode [ 221.727461][ T9341] syzkaller1: entered allmulticast mode [ 222.124844][ T9360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.196085][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'. [ 222.387026][ T9370] syzkaller1: entered promiscuous mode [ 222.396126][ T9370] syzkaller1: entered allmulticast mode [ 222.779672][ T9383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.787181][ T9383] IPv6: NLM_F_CREATE should be set when creating new route [ 222.794594][ T9383] IPv6: NLM_F_CREATE should be set when creating new route [ 222.802005][ T9383] IPv6: NLM_F_CREATE should be set when creating new route [ 223.169373][ T9403] syzkaller1: entered promiscuous mode [ 223.175489][ T9403] syzkaller1: entered allmulticast mode [ 223.822432][ T9424] syzkaller1: entered promiscuous mode [ 223.843156][ T9424] syzkaller1: entered allmulticast mode [ 224.307534][ T9436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.808817][ T9449] syzkaller1: entered promiscuous mode [ 224.814733][ T9449] syzkaller1: entered allmulticast mode [ 225.185015][ T9455] Driver unsupported XDP return value 0 on prog (id 64) dev N/A, expect packet loss! [ 225.236867][ T9456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.852032][ T9475] syzkaller0: entered promiscuous mode [ 225.862632][ T9475] syzkaller0: entered allmulticast mode [ 225.994600][ T9479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.668760][ T9507] syzkaller1: entered promiscuous mode [ 226.686707][ T9507] syzkaller1: entered allmulticast mode [ 226.794329][ T9510] syzkaller0: entered promiscuous mode [ 226.810357][ T9510] syzkaller0: entered allmulticast mode [ 227.560358][ T9542] syzkaller1: entered promiscuous mode [ 227.566263][ T9542] syzkaller1: entered allmulticast mode [ 228.091983][ T9566] team0: entered promiscuous mode [ 228.109187][ T9566] team_slave_0: entered promiscuous mode [ 228.145430][ T9566] team_slave_1: entered promiscuous mode [ 228.165366][ T9566] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 228.422661][ T9580] syzkaller1: entered promiscuous mode [ 228.428741][ T9580] syzkaller1: entered allmulticast mode [ 228.552318][ T9583] syzkaller0: entered promiscuous mode [ 228.565486][ T9583] syzkaller0: entered allmulticast mode [ 228.681803][ T9587] syzkaller0: entered promiscuous mode [ 228.689461][ T9587] syzkaller0: entered allmulticast mode [ 229.150244][ T9609] syzkaller1: entered promiscuous mode [ 229.156689][ T9609] syzkaller1: entered allmulticast mode [ 229.222787][ T9611] syzkaller0: entered promiscuous mode [ 229.232882][ T9611] syzkaller0: entered allmulticast mode [ 229.500743][ T9620] syzkaller0: entered promiscuous mode [ 229.518700][ T9620] syzkaller0: entered allmulticast mode [ 229.609098][ T9625] syzkaller0: entered promiscuous mode [ 229.614831][ T9625] syzkaller0: entered allmulticast mode [ 229.873053][ T9633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.971683][ T9637] syzkaller1: entered promiscuous mode [ 229.983731][ T9637] syzkaller1: entered allmulticast mode [ 230.105386][ T5809] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 230.265246][ T5809] usb 2-1: device descriptor read/64, error -71 [ 230.544816][ T5809] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 230.601411][ T9653] syzkaller0: entered promiscuous mode [ 230.610158][ T9653] syzkaller0: entered allmulticast mode [ 230.715337][ T5809] usb 2-1: device descriptor read/64, error -71 [ 230.788481][ T9657] syzkaller0: entered promiscuous mode [ 230.802401][ T9657] syzkaller0: entered allmulticast mode [ 230.835772][ T5809] usb usb2-port1: attempt power cycle [ 230.863458][ T9661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.148902][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1415'. [ 231.164704][ T9671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1415'. [ 231.265232][ T5809] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 231.297626][ T5809] usb 2-1: device descriptor read/8, error -71 [ 231.392631][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'. [ 231.516319][ T9681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.595292][ T5809] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 231.630779][ T5809] usb 2-1: device descriptor read/8, error -71 [ 231.684596][ T9688] syzkaller0: entered promiscuous mode [ 231.691412][ T9688] syzkaller0: entered allmulticast mode [ 231.755398][ T5809] usb usb2-port1: unable to enumerate USB device [ 232.020557][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'. [ 232.171930][ T9708] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.179328][ T9708] IPv6: NLM_F_CREATE should be set when creating new route [ 232.187763][ T9708] IPv6: NLM_F_CREATE should be set when creating new route [ 232.195200][ T9708] IPv6: NLM_F_CREATE should be set when creating new route [ 232.436800][ T9722] syzkaller0: entered promiscuous mode [ 232.442351][ T9722] syzkaller0: entered allmulticast mode [ 232.520452][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1440'. [ 232.646241][ T9733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.871160][ T9741] netlink: 'syz.0.1446': attribute type 11 has an invalid length. [ 233.087986][ T9749] syzkaller0: entered promiscuous mode [ 233.105782][ T9749] syzkaller0: entered allmulticast mode [ 233.113619][ T9752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 233.321747][ T9761] syzkaller0: entered promiscuous mode [ 233.354331][ T9761] syzkaller0: entered allmulticast mode [ 233.645922][ T5760] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 233.688597][ T9779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 233.699476][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1465'. [ 233.719954][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1465'. [ 233.791969][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1466'. [ 233.801524][ T5760] usb 1-1: device descriptor read/64, error -71 [ 233.808995][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1466'. [ 234.085256][ T5760] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 234.196668][ T9798] syzkaller0: entered promiscuous mode [ 234.209527][ T9798] syzkaller0: entered allmulticast mode [ 234.267654][ T5760] usb 1-1: device descriptor read/64, error -71 [ 234.387191][ T5760] usb usb1-port1: attempt power cycle [ 234.528585][ T9811] syzkaller0: entered promiscuous mode [ 234.534183][ T9811] syzkaller0: entered allmulticast mode [ 234.805246][ T5760] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 234.845749][ T5760] usb 1-1: device descriptor read/8, error -71 [ 234.971187][ T9831] sctp: [Deprecated]: syz.3.1483 (pid 9831) Use of int in maxseg socket option. [ 234.971187][ T9831] Use struct sctp_assoc_value instead [ 235.145398][ T5760] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 235.171141][ T9833] syzkaller0: entered promiscuous mode [ 235.177154][ T9833] syzkaller0: entered allmulticast mode [ 235.188168][ T5760] usb 1-1: device descriptor read/8, error -71 [ 235.316092][ T5760] usb usb1-port1: unable to enumerate USB device [ 237.986506][ T1201] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 238.195311][ T1201] usb 3-1: Using ep0 maxpacket: 32 [ 238.206557][ T1201] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.231874][ T1201] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.258789][ T1201] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 238.291195][ T1201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.321610][ T1201] usb 3-1: config 0 descriptor?? [ 239.724337][ T9934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.748513][ T9934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.947881][ T9942] syzkaller0: entered promiscuous mode [ 239.957019][ T9942] syzkaller0: entered allmulticast mode [ 240.324558][ T9951] syzkaller0: entered promiscuous mode [ 240.330619][ T9951] syzkaller0: entered allmulticast mode [ 240.661801][ T9964] syzkaller0: entered promiscuous mode [ 240.668584][ T9964] syzkaller0: entered allmulticast mode [ 240.683815][ T9962] syzkaller0: entered promiscuous mode [ 240.690699][ T9962] syzkaller0: entered allmulticast mode [ 240.926322][ T5809] usb 3-1: USB disconnect, device number 11 [ 241.082756][ T9976] syzkaller0: entered promiscuous mode [ 241.091523][ T9976] syzkaller0: entered allmulticast mode [ 241.825780][ T5809] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 242.025386][ T5809] usb 2-1: Using ep0 maxpacket: 32 [ 242.041455][ T5809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.052486][ T5809] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 242.068230][ T5809] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 242.087973][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.120519][ T5809] usb 2-1: config 0 descriptor?? [ 242.830701][T10046] syzkaller0: entered promiscuous mode [ 242.836758][T10046] syzkaller0: entered allmulticast mode [ 243.462808][T10061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.503916][T10061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.236107][T10086] syzkaller0: entered promiscuous mode [ 244.246276][T10086] syzkaller0: entered allmulticast mode [ 244.602747][ T5760] usb 2-1: USB disconnect, device number 14 [ 245.034925][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1586'. [ 245.636025][T10131] team0: entered promiscuous mode [ 245.652575][T10131] team_slave_0: entered promiscuous mode [ 245.662915][T10131] team_slave_1: entered promiscuous mode [ 245.784884][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1595'. [ 245.991436][T10140] syzkaller0: entered promiscuous mode [ 245.997256][T10140] syzkaller0: entered allmulticast mode [ 246.391829][T10151] syzkaller0: entered promiscuous mode [ 246.399360][T10151] syzkaller0: entered allmulticast mode [ 246.736157][T10159] team0: entered promiscuous mode [ 246.741363][T10159] team_slave_0: entered promiscuous mode [ 246.785342][T10159] team_slave_1: entered promiscuous mode [ 247.022093][T10166] tipc: Enabling of bearer rejected, failed to enable media [ 247.049593][T10167] syzkaller0: entered promiscuous mode [ 247.056767][T10167] syzkaller0: entered allmulticast mode [ 247.595504][T10168] syzkaller0: entered promiscuous mode [ 247.612036][T10168] syzkaller0: entered allmulticast mode [ 248.186646][T10178] syzkaller0: entered promiscuous mode [ 248.194673][T10178] syzkaller0: entered allmulticast mode [ 248.488775][T10183] syzkaller0: entered promiscuous mode [ 248.499126][T10183] syzkaller0: entered allmulticast mode [ 248.620427][T10191] tipc: Enabling of bearer rejected, failed to enable media [ 248.634190][T10193] syzkaller0: entered promiscuous mode [ 248.641822][T10193] syzkaller0: entered allmulticast mode [ 248.850934][T10194] syzkaller0: entered promiscuous mode [ 248.865641][T10194] syzkaller0: entered allmulticast mode [ 251.462182][T10227] syzkaller0: entered promiscuous mode [ 251.474389][T10227] syzkaller0: entered allmulticast mode [ 251.480748][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 251.499421][T10227] ------------[ cut here ]------------ [ 251.505859][T10227] WARNING: CPU: 0 PID: 10227 at include/linux/skbuff.h:2903 em_nbyte_match+0x2d0/0x3e0 [ 251.516018][T10227] Modules linked in: [ 251.520135][T10227] CPU: 0 PID: 10227 Comm: syz.1.1632 Not tainted syzkaller #0 [ 251.527842][T10227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 251.538374][T10227] RIP: 0010:em_nbyte_match+0x2d0/0x3e0 [ 251.544238][T10227] Code: c0 eb 07 e8 62 73 d4 f8 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4c 73 d4 f8 0f 0b e9 e5 fe ff ff e8 40 73 d4 f8 <0f> 0b e9 00 fe ff ff 89 d1 80 e1 07 fe c1 38 c1 0f 8c 7a fd ff ff [ 251.564861][T10227] RSP: 0018:ffffc9000382f118 EFLAGS: 00010287 [ 251.571224][T10227] RAX: ffffffff88b2ace0 RBX: ffff88802dfde500 RCX: 0000000000080000 [ 251.579463][T10227] RDX: ffffc9000d422000 RSI: 0000000000000587 RDI: 0000000000000588 [ 251.587690][T10227] RBP: 000000000000ffff R08: ffff88801ca51e00 R09: 0000000000000003 [ 251.595767][T10227] R10: 0000000000000002 R11: 0000000000000002 R12: dffffc0000000000 [ 251.603905][T10227] R13: 1ffff11005bfbcb6 R14: ffff88807d8e66e0 R15: 1ffff1100fb1ccdc [ 251.612061][T10227] FS: 00007f98ea44c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 251.621191][T10227] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.621804][T10233] syzkaller1: entered promiscuous mode [ 251.627870][T10227] CR2: 0000001b2d823ffc CR3: 0000000023fd6000 CR4: 00000000003506f0 [ 251.642198][T10227] Call Trace: [ 251.644379][T10233] syzkaller1: entered allmulticast mode [ 251.645536][T10227] [ 251.645554][T10227] __tcf_em_tree_match+0x1cf/0x7a0 [ 251.645597][T10227] ? tcf_em_tree_dump+0x900/0x900 [ 251.666291][T10227] ? __lock_acquire+0x1273/0x7d40 [ 251.671613][T10227] basic_classify+0x115/0x2d0 [ 251.676817][T10227] tcf_classify+0x4c4/0xeb0 [ 251.681652][T10227] multiq_enqueue+0x103/0x4c0 [ 251.686432][T10227] ? sch_tree_unlock+0x1b0/0x1b0 [ 251.691578][T10227] ? do_raw_spin_lock+0x11f/0x2c0 [ 251.696753][T10227] ? __rwlock_init+0x150/0x150 [ 251.701743][T10227] dev_qdisc_enqueue+0x48/0x220 [ 251.706795][T10227] ? __dev_queue_xmit+0xd30/0x3660 [ 251.712122][T10227] __dev_queue_xmit+0xe96/0x3660 [ 251.717416][T10227] ? __dev_queue_xmit+0x265/0x3660 [ 251.722591][T10227] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 251.728322][T10227] ? netdev_core_pick_tx+0x340/0x340 [ 251.733662][T10227] ? packet_parse_headers+0x85e/0xac0 [ 251.739160][T10227] ? __virt_addr_valid+0x18c/0x540 [ 251.744400][T10227] ? __check_object_size+0x506/0xa20 [ 251.749761][T10227] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 251.755475][T10227] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 251.761689][T10227] ? packet_xmit+0x66/0x330 [ 251.766356][T10227] ? packet_sendmsg+0x3a37/0x4d70 [ 251.771520][T10227] packet_sendmsg+0x3b7a/0x4d70 [ 251.776950][T10227] ? verify_lock_unused+0x140/0x140 [ 251.782190][T10227] ? finish_task_switch+0x265/0x8f0 [ 251.787481][T10227] ? verify_lock_unused+0x140/0x140 [ 251.792750][T10227] ? aa_sk_perm+0x83c/0x970 [ 251.797328][T10227] ? packet_getsockopt+0xad0/0xad0 [ 251.802746][T10227] ? aa_sock_msg_perm+0x94/0x150 [ 251.807784][T10227] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 251.813201][T10227] ? security_socket_sendmsg+0x80/0xa0 [ 251.818895][T10227] ? packet_getsockopt+0xad0/0xad0 [ 251.824168][T10227] ____sys_sendmsg+0x5ba/0x960 [ 251.828995][T10227] ? __lock_acquire+0x7d40/0x7d40 [ 251.834056][T10227] ? __asan_memset+0x22/0x40 [ 251.838705][T10227] ? __sys_sendmsg_sock+0x30/0x30 [ 251.843844][T10227] ? __import_iovec+0x5f2/0x850 [ 251.848762][T10227] ? import_iovec+0x73/0xa0 [ 251.853381][T10227] ___sys_sendmsg+0x2a6/0x360 [ 251.858317][T10227] ? __sys_sendmsg+0x2a0/0x2a0 [ 251.863304][T10227] __se_sys_sendmsg+0x1c2/0x2b0 [ 251.868654][T10227] ? __x64_sys_sendmsg+0x80/0x80 [ 251.873827][T10227] ? lockdep_hardirqs_on+0x98/0x150 [ 251.879265][T10227] do_syscall_64+0x55/0xa0 [ 251.883810][T10227] ? clear_bhb_loop+0x40/0x90 [ 251.888642][T10227] ? clear_bhb_loop+0x40/0x90 [ 251.893383][T10227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.899370][T10227] RIP: 0033:0x7f98e959c819 [ 251.903837][T10227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.924148][T10227] RSP: 002b:00007f98ea44c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.933012][T10227] RAX: ffffffffffffffda RBX: 00007f98e9815fa0 RCX: 00007f98e959c819 [ 251.941059][T10227] RDX: 000000000004c00c RSI: 00002000000000c0 RDI: 0000000000000005 [ 251.949693][T10227] RBP: 00007f98e9632c91 R08: 0000000000000000 R09: 0000000000000000 [ 251.957715][T10227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.965761][T10227] R13: 00007f98e9816038 R14: 00007f98e9815fa0 R15: 00007ffe657bc5a8 [ 251.973796][T10227] [ 251.976883][T10227] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 251.984646][T10227] CPU: 0 PID: 10227 Comm: syz.1.1632 Not tainted syzkaller #0 [ 251.992121][T10227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.002211][T10227] Call Trace: [ 252.005786][T10227] [ 252.008844][T10227] dump_stack_lvl+0x18c/0x250 [ 252.013901][T10227] ? show_regs_print_info+0x20/0x20 [ 252.019393][T10227] ? load_image+0x400/0x400 [ 252.024119][T10227] panic+0x2dc/0x730 [ 252.028051][T10227] ? bpf_jit_dump+0xd0/0xd0 [ 252.032738][T10227] __warn+0x2e0/0x470 [ 252.036769][T10227] ? em_nbyte_match+0x2d0/0x3e0 [ 252.041842][T10227] ? em_nbyte_match+0x2d0/0x3e0 [ 252.046757][T10227] report_bug+0x2be/0x4f0 [ 252.051288][T10227] ? em_nbyte_match+0x2d0/0x3e0 [ 252.056599][T10227] ? em_nbyte_match+0x2d0/0x3e0 [ 252.061472][T10227] ? em_nbyte_match+0x2d2/0x3e0 [ 252.066514][T10227] handle_bug+0xcf/0x120 [ 252.070771][T10227] exc_invalid_op+0x1a/0x50 [ 252.075284][T10227] asm_exc_invalid_op+0x1a/0x20 [ 252.080233][T10227] RIP: 0010:em_nbyte_match+0x2d0/0x3e0 [ 252.085711][T10227] Code: c0 eb 07 e8 62 73 d4 f8 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4c 73 d4 f8 0f 0b e9 e5 fe ff ff e8 40 73 d4 f8 <0f> 0b e9 00 fe ff ff 89 d1 80 e1 07 fe c1 38 c1 0f 8c 7a fd ff ff [ 252.105423][T10227] RSP: 0018:ffffc9000382f118 EFLAGS: 00010287 [ 252.111595][T10227] RAX: ffffffff88b2ace0 RBX: ffff88802dfde500 RCX: 0000000000080000 [ 252.119575][T10227] RDX: ffffc9000d422000 RSI: 0000000000000587 RDI: 0000000000000588 [ 252.127561][T10227] RBP: 000000000000ffff R08: ffff88801ca51e00 R09: 0000000000000003 [ 252.135717][T10227] R10: 0000000000000002 R11: 0000000000000002 R12: dffffc0000000000 [ 252.143868][T10227] R13: 1ffff11005bfbcb6 R14: ffff88807d8e66e0 R15: 1ffff1100fb1ccdc [ 252.152205][T10227] ? em_nbyte_match+0x2d0/0x3e0 [ 252.157165][T10227] ? em_nbyte_match+0x2d0/0x3e0 [ 252.162120][T10227] __tcf_em_tree_match+0x1cf/0x7a0 [ 252.167429][T10227] ? tcf_em_tree_dump+0x900/0x900 [ 252.172561][T10227] ? __lock_acquire+0x1273/0x7d40 [ 252.177606][T10227] basic_classify+0x115/0x2d0 [ 252.182303][T10227] tcf_classify+0x4c4/0xeb0 [ 252.186958][T10227] multiq_enqueue+0x103/0x4c0 [ 252.191742][T10227] ? sch_tree_unlock+0x1b0/0x1b0 [ 252.196695][T10227] ? do_raw_spin_lock+0x11f/0x2c0 [ 252.201744][T10227] ? __rwlock_init+0x150/0x150 [ 252.206765][T10227] dev_qdisc_enqueue+0x48/0x220 [ 252.211638][T10227] ? __dev_queue_xmit+0xd30/0x3660 [ 252.217468][T10227] __dev_queue_xmit+0xe96/0x3660 [ 252.222435][T10227] ? __dev_queue_xmit+0x265/0x3660 [ 252.227568][T10227] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 252.233169][T10227] ? netdev_core_pick_tx+0x340/0x340 [ 252.238478][T10227] ? packet_parse_headers+0x85e/0xac0 [ 252.244041][T10227] ? __virt_addr_valid+0x18c/0x540 [ 252.249177][T10227] ? __check_object_size+0x506/0xa20 [ 252.254480][T10227] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 252.260133][T10227] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 252.266223][T10227] ? packet_xmit+0x66/0x330 [ 252.270834][T10227] ? packet_sendmsg+0x3a37/0x4d70 [ 252.276069][T10227] packet_sendmsg+0x3b7a/0x4d70 [ 252.281066][T10227] ? verify_lock_unused+0x140/0x140 [ 252.286306][T10227] ? finish_task_switch+0x265/0x8f0 [ 252.291523][T10227] ? verify_lock_unused+0x140/0x140 [ 252.296739][T10227] ? aa_sk_perm+0x83c/0x970 [ 252.301270][T10227] ? packet_getsockopt+0xad0/0xad0 [ 252.306502][T10227] ? aa_sock_msg_perm+0x94/0x150 [ 252.311569][T10227] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 252.316954][T10227] ? security_socket_sendmsg+0x80/0xa0 [ 252.322514][T10227] ? packet_getsockopt+0xad0/0xad0 [ 252.327907][T10227] ____sys_sendmsg+0x5ba/0x960 [ 252.332775][T10227] ? __lock_acquire+0x7d40/0x7d40 [ 252.337904][T10227] ? __asan_memset+0x22/0x40 [ 252.342601][T10227] ? __sys_sendmsg_sock+0x30/0x30 [ 252.347635][T10227] ? __import_iovec+0x5f2/0x850 [ 252.352589][T10227] ? import_iovec+0x73/0xa0 [ 252.357104][T10227] ___sys_sendmsg+0x2a6/0x360 [ 252.361886][T10227] ? __sys_sendmsg+0x2a0/0x2a0 [ 252.366705][T10227] __se_sys_sendmsg+0x1c2/0x2b0 [ 252.371569][T10227] ? __x64_sys_sendmsg+0x80/0x80 [ 252.376718][T10227] ? lockdep_hardirqs_on+0x98/0x150 [ 252.381952][T10227] do_syscall_64+0x55/0xa0 [ 252.386394][T10227] ? clear_bhb_loop+0x40/0x90 [ 252.391095][T10227] ? clear_bhb_loop+0x40/0x90 [ 252.395794][T10227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.401714][T10227] RIP: 0033:0x7f98e959c819 [ 252.406243][T10227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.426295][T10227] RSP: 002b:00007f98ea44c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.434733][T10227] RAX: ffffffffffffffda RBX: 00007f98e9815fa0 RCX: 00007f98e959c819 [ 252.442891][T10227] RDX: 000000000004c00c RSI: 00002000000000c0 RDI: 0000000000000005 [ 252.450888][T10227] RBP: 00007f98e9632c91 R08: 0000000000000000 R09: 0000000000000000 [ 252.458871][T10227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.466850][T10227] R13: 00007f98e9816038 R14: 00007f98e9815fa0 R15: 00007ffe657bc5a8 [ 252.474850][T10227] [ 252.478096][T10227] Kernel Offset: disabled [ 252.482480][T10227] Rebooting in 86400 seconds..