last executing test programs: 12.276121106s ago: executing program 3 (id=5442): syz_emit_ethernet(0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="659b3cfadf01e78023c6000000040000e3dd"], 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'veth1_to_team\x00', {'wlan1\x00'}}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f00000002c0)=0x1, 0x4) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f000000eec0)={0xff, 0x7, 0x2a4, @random="0400eaf6ac0e", 'veth1_vlan\x00'}) r6 = socket$inet(0x2, 0x5, 0x4000030) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfecc}, 0x40000002) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010002000000000000000000000008000300", @ANYRES32, @ANYBLOB="04005b"], 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmmsg$inet6(r4, &(0x7f0000000540)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x7, @loopback, 0x8004}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000005c0)="7c6188a536a90fad31c380d0c54a6c59939cd17d83ee2508a164151a6d5b96c4d8983c3575e2e58a74e6b72203d5cd75024e6cf0a26052787f085d024ea9a82fbc138dbfc8a77e47bf97a38ea01f15625109a8f07c884260aeabf70276d2319c1f8aa1697bfd4848bae38bc975024bba33e64d265cd2b199d691fb980349a0b7af9cd207723a797e1df2ee2bc3ba247e1c854c883e8e9d8375844a329cd98d81d93d4d89118bb6133bbfe07adffa4ad973f01552bd29a5f06f6a061b20502db3f971f58c524bb8be287c3bd2e45523dd2fa83e021d4fd0733e8f01881d36e1f7b1ee8451c63d08c3c9268c06c4bbf6aae9ce", 0xf2}], 0x1, &(0x7f00000011c0)=ANY=[], 0xfffffed1}}], 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000c32e868e54e7ec1319a11f9139b27e9093652b5f9f5d2e3286676d615bc48b4ce1", @ANYRES16=r9, @ANYBLOB="010000000000000000003a00000004005b00"], 0x18}}, 0x48000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000020069b196872f75f32aa5989799751ed69464238daaba0219b20b29e0c11510523aa4dba3a54f1d6859b0067beb41768b7464353e582221b7feb103c209929b1ca182f8ab6b0b322da36f3b8e266a65d1f73f72db93617770dc5710faab2de55aa7c34c83eaa0e778f92e3236e9f7cbd222c61bd91265453d436b6778b0178d924c61359b3556aa92b7b88b2c9bf72bbcc0d0904328e08cc98178d344eb59197b838c66f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28, @ANYRES32=r6, @ANYRESOCT=r3, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRESOCT=0x0], 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB="1fc2f730a8bc91205fd5eebf8bb23215188359b5c6f953baca8b2fe1316c4fad569d8888c11d61a8760a62c4240747981fc073afdffa7fbcfdaa1cb653e88884d16b049fa78aafbaeda5ccc80e9990a15abd0c946f3c622c74a977e6d5dd86e28d9024af0f2d7a7332e2fc14c8b80d7eac7fe864d257d9880c141a8b6b3d0ce09956a73bb90a3781301aa70645e96525d3b6bb83c5fec36678b856552a46b2f7dc51245165d4f2bcd25b09abb79eab263f6be6e04a3ce73aa03d18ce851c7bd7e4fab08269af1116096503da889e16ae292047993f88ec987144bd8c17b48805436422ef9c6cbbe750ccbf30d51b69abea3aa3a29a27761c3bff697b02cb2b778d16db5d32075d1482020e0568686476cdeafa51310aeb"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) 11.077553658s ago: executing program 3 (id=5446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4811}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000001b80)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 10.695586457s ago: executing program 1 (id=5451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 10.533737676s ago: executing program 0 (id=5454): syz_emit_ethernet(0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="659b3cfadf01e78023c6000000040000e3dd"], 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'veth1_to_team\x00', {'wlan1\x00'}}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f00000002c0)=0x1, 0x4) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f000000eec0)={0xff, 0x7, 0x2a4, @random="0400eaf6ac0e", 'veth1_vlan\x00'}) r6 = socket$inet(0x2, 0x5, 0x4000030) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfecc}, 0x40000002) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010002000000000000000000000008000300", @ANYRES32, @ANYBLOB="04005b"], 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmmsg$inet6(r4, &(0x7f0000000540)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x7, @loopback, 0x8004}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000005c0)="7c6188a536a90fad31c380d0c54a6c59939cd17d83ee2508a164151a6d5b96c4d8983c3575e2e58a74e6b72203d5cd75024e6cf0a26052787f085d024ea9a82fbc138dbfc8a77e47bf97a38ea01f15625109a8f07c884260aeabf70276d2319c1f8aa1697bfd4848bae38bc975024bba33e64d265cd2b199d691fb980349a0b7af9cd207723a797e1df2ee2bc3ba247e1c854c883e8e9d8375844a329cd98d81d93d4d89118bb6133bbfe07adffa4ad973f01552bd29a5f06f6a061b20502db3f971f58c524bb8be287c3bd2e45523dd2fa83e021d4fd0733e8f01881d36e1f7b1ee8451c63d08c3c9268c06c4bbf6aae9ce", 0xf2}], 0x1, &(0x7f00000011c0)=ANY=[], 0xfffffed1}}], 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000c32e868e54e7ec1319a11f9139b27e9093652b5f9f5d2e3286676d615bc48b4ce1", @ANYRES16=r9, @ANYBLOB="010000000000000000003a00000004005b00"], 0x18}}, 0x48000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000020069b196872f75f32aa5989799751ed69464238daaba0219b20b29e0c11510523aa4dba3a54f1d6859b0067beb41768b7464353e582221b7feb103c209929b1ca182f8ab6b0b322da36f3b8e266a65d1f73f72db93617770dc5710faab2de55aa7c34c83eaa0e778f92e3236e9f7cbd222c61bd91265453d436b6778b0178d924c61359b3556aa92b7b88b2c9bf72bbcc0d0904328e08cc98178d344eb59197b838c66f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28, @ANYRES32=r6, @ANYRESOCT=r3, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRESOCT=0x0], 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) 8.13474358s ago: executing program 0 (id=5456): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x4, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0xf}, {0xfff1}, {0xfff3}}}, 0x24}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) connect$netlink(r0, &(0x7f0000000180), 0xc) 8.097126882s ago: executing program 3 (id=5458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x109200, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x7c40) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r7, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000600)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000640)={0x48, 0xa, r9, 0x0, r10}) 8.007359506s ago: executing program 1 (id=5459): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000003c0)=r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.988807529s ago: executing program 0 (id=5461): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x14, 0x31, 0x101}, 0x14}}, 0x0) 6.904260674s ago: executing program 3 (id=5462): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080006000900"], 0xfce) 6.784322989s ago: executing program 0 (id=5463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003180)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x800, 0x2, 0x20000000, 0x10000, 0x40}, 0x8, 0x5, [{0x4, 0x6, 0x30, 0x9, 0xc, 0x9}]}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0xfd4}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x3, 0x1}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xae, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x9}, {0x8, 0xdd4, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x3, 0x8, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0xfffffffc, 0x2}, {0x8, 0x7, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x28a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0x4, 0x2, 0x9, 0xfffffffe, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x100, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x40000080, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x200002, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x3, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0xbc, 0x7, 0x84e1, 0x3ff}, {0xa45b, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x8001, 0x1, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x1, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x7, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x2, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x4000009, 0x6, 0x8}, {0x5ce, 0x3, 0x0, 0xb, 0xf8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x1000080, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x80000001, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x2}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee16", 0x1e}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 6.736741172s ago: executing program 1 (id=5464): syz_emit_ethernet(0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="659b3cfadf01e78023c6000000040000e3dd"], 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'veth1_to_team\x00', {'wlan1\x00'}}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f00000002c0)=0x1, 0x4) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f000000eec0)={0xff, 0x7, 0x2a4, @random="0400eaf6ac0e", 'veth1_vlan\x00'}) r6 = socket$inet(0x2, 0x5, 0x4000030) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfecc}, 0x40000002) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010002000000000000000000000008000300", @ANYBLOB="04005b00"], 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmmsg$inet6(r4, &(0x7f0000000540)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x7, @loopback, 0x8004}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000005c0)="7c6188a536a90fad31c380d0c54a6c59939cd17d83ee2508a164151a6d5b96c4d8983c3575e2e58a74e6b72203d5cd75024e6cf0a26052787f085d024ea9a82fbc138dbfc8a77e47bf97a38ea01f15625109a8f07c884260aeabf70276d2319c1f8aa1697bfd4848bae38bc975024bba33e64d265cd2b199d691fb980349a0b7af9cd207723a797e1df2ee2bc3ba247e1c854c883e8e9d8375844a329cd98d81d93d4d89118bb6133bbfe07adffa4ad973f01552bd29a5f06f6a061b20502db3f971f58c524bb8be287c3bd2e45523dd2fa83e021d4fd0733e8f01881d36e1f7b1ee8451c63d08c3c9268c06c4bbf6aae9ce", 0xf2}], 0x1, &(0x7f00000011c0)=ANY=[], 0xfffffed1}}], 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000c32e868e54e7ec1319a11f9139b27e9093652b5f9f5d2e3286676d615bc48b4ce1", @ANYRES16=r9, @ANYBLOB="010000000000000000003a00000004005b00"], 0x18}}, 0x48000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000020069b196872f75f32aa5989799751ed69464238daaba0219b20b29e0c11510523aa4dba3a54f1d6859b0067beb41768b7464353e582221b7feb103c209929b1ca182f8ab6b0b322da36f3b8e266a65d1f73f72db93617770dc5710faab2de55aa7c34c83eaa0e778f92e3236e9f7cbd222c61bd91265453d436b6778b0178d924c61359b3556aa92b7b88b2c9bf72bbcc0d0904328e08cc98178d344eb59197b838c66f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28, @ANYRES32=r6, @ANYRESOCT=r3, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRESOCT=0x0], 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) 6.598503809s ago: executing program 3 (id=5466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000001b80)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 6.425950558s ago: executing program 1 (id=5468): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000080)=0x10, 0x80000) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff00000568000800a8792d7200", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$loop(0x0, 0x10, 0x202a80) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',cache=fscache,\r']) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r7, 0x80104592, 0x0) 6.359187541s ago: executing program 0 (id=5469): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x4, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0xf}, {0xfff1}, {0xfff3}}}, 0x24}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) connect$netlink(r0, &(0x7f0000000180), 0xc) 2.759132048s ago: executing program 1 (id=5471): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x14, 0x31, 0x101}, 0x14}}, 0x0) 2.726153369s ago: executing program 2 (id=5472): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000003c0)=[r3], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 2.610574976s ago: executing program 2 (id=5473): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004050}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400edff2bbd70000200000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000202007f00000100000000000000000000000086"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000200), 0x12) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.532974239s ago: executing program 2 (id=5474): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2.429523494s ago: executing program 2 (id=5475): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040810) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4008004) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)={r2}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @bcast]}) ioctl$sock_rose_SIOCDELRT(r8, 0x890c, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 365.959301ms ago: executing program 2 (id=5476): syz_emit_ethernet(0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="659b3cfadf01e78023c6000000040000e3dd"], 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'veth1_to_team\x00', {'wlan1\x00'}}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f00000002c0)=0x1, 0x4) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f000000eec0)={0xff, 0x7, 0x2a4, @random="0400eaf6ac0e", 'veth1_vlan\x00'}) r6 = socket$inet(0x2, 0x5, 0x4000030) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfecc}, 0x40000002) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010002000000000000000000000008000300", @ANYBLOB="04005b00"], 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmmsg$inet6(r4, &(0x7f0000000540)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x7, @loopback, 0x8004}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000005c0)="7c6188a536a90fad31c380d0c54a6c59939cd17d83ee2508a164151a6d5b96c4d8983c3575e2e58a74e6b72203d5cd75024e6cf0a26052787f085d024ea9a82fbc138dbfc8a77e47bf97a38ea01f15625109a8f07c884260aeabf70276d2319c1f8aa1697bfd4848bae38bc975024bba33e64d265cd2b199d691fb980349a0b7af9cd207723a797e1df2ee2bc3ba247e1c854c883e8e9d8375844a329cd98d81d93d4d89118bb6133bbfe07adffa4ad973f01552bd29a5f06f6a061b20502db3f971f58c524bb8be287c3bd2e45523dd2fa83e021d4fd0733e8f01881d36e1f7b1ee8451c63d08c3c9268c06c4bbf6aae9ce", 0xf2}], 0x1, &(0x7f00000011c0)=ANY=[], 0xfffffed1}}], 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000c32e868e54e7ec1319a11f9139b27e9093652b5f9f5d2e3286676d615bc48b4ce1", @ANYRES16=r9, @ANYBLOB="010000000000000000003a00000004005b00"], 0x18}}, 0x48000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000020069b196872f75f32aa5989799751ed69464238daaba0219b20b29e0c11510523aa4dba3a54f1d6859b0067beb41768b7464353e582221b7feb103c209929b1ca182f8ab6b0b322da36f3b8e266a65d1f73f72db93617770dc5710faab2de55aa7c34c83eaa0e778f92e3236e9f7cbd222c61bd91265453d436b6778b0178d924c61359b3556aa92b7b88b2c9bf72bbcc0d0904328e08cc98178d344eb59197b838c66f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28, @ANYRES32=r6, @ANYRESOCT=r3, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRESOCT=0x0], 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) 351.075402ms ago: executing program 0 (id=5477): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) 307.178374ms ago: executing program 1 (id=5478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 306.284444ms ago: executing program 3 (id=5479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="3401", @ANYRES16, @ANYBLOB="0100000000003fc14d"], 0x134}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) 0s ago: executing program 2 (id=5480): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="08010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000014000480050603000000000005000300000000000800020001000000d000"], 0x108}}, 0x0) kernel console output (not intermixed with test programs): ] tipc: Started in network mode [ 841.634968][T20875] tipc: Node identity 8687492dcf2c, cluster identity 4711 [ 841.642236][T20875] tipc: Enabled bearer , priority 0 [ 841.682069][T20875] syzkaller0: entered promiscuous mode [ 841.687817][T20875] syzkaller0: entered allmulticast mode [ 841.707212][T20875] tipc: Resetting bearer [ 841.728978][T20874] tipc: Resetting bearer [ 841.768626][T20874] tipc: Disabling bearer [ 842.106948][T20886] syzkaller0: entered promiscuous mode [ 842.112874][T20886] syzkaller0: entered allmulticast mode [ 844.501882][T20910] syzkaller0: entered promiscuous mode [ 844.513189][T20910] syzkaller0: entered allmulticast mode [ 844.673366][T20912] syzkaller0: entered promiscuous mode [ 844.682872][T20912] syzkaller0: entered allmulticast mode [ 844.889737][T20920] syzkaller0: entered promiscuous mode [ 844.895577][T20920] syzkaller0: entered allmulticast mode [ 845.279423][T20927] syzkaller0: entered promiscuous mode [ 845.288117][T20927] syzkaller0: entered allmulticast mode [ 845.807360][T20946] syzkaller0: entered promiscuous mode [ 845.829908][T20946] syzkaller0: entered allmulticast mode [ 846.030826][T20960] syzkaller0: entered promiscuous mode [ 846.036720][T20960] syzkaller0: entered allmulticast mode [ 846.410633][T20974] syzkaller0: entered promiscuous mode [ 846.432766][T20974] syzkaller0: entered allmulticast mode [ 846.587578][T20982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4222'. [ 847.043878][T20990] syzkaller0: entered promiscuous mode [ 847.049433][T20990] syzkaller0: entered allmulticast mode [ 851.457826][T21005] syzkaller0: entered promiscuous mode [ 851.463832][T21005] syzkaller0: entered allmulticast mode [ 851.739566][T21032] syzkaller0: entered promiscuous mode [ 851.751846][T21032] syzkaller0: entered allmulticast mode [ 852.261430][T21052] syzkaller0: entered promiscuous mode [ 852.276617][T21052] syzkaller0: entered allmulticast mode [ 852.313025][T21057] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4238'. [ 854.626500][T21062] tipc: Enabling of bearer rejected, failed to enable media [ 854.646372][T21074] syzkaller0: entered promiscuous mode [ 854.651973][T21074] syzkaller0: entered allmulticast mode [ 854.954856][T21093] syzkaller0: entered promiscuous mode [ 854.967411][T21093] syzkaller0: entered allmulticast mode [ 855.160264][T21096] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4249'. [ 855.178282][T21098] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4250'. [ 855.207436][T21098] siw: device registration error -23 [ 857.546679][T21112] tipc: Enabling of bearer rejected, failed to enable media [ 857.556256][T21119] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4255'. [ 857.695637][T21129] syzkaller0: entered promiscuous mode [ 857.717830][T21129] syzkaller0: entered allmulticast mode [ 857.860276][T21136] lo speed is unknown, defaulting to 1000 [ 858.007990][T21142] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4261'. [ 858.356017][T21147] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4263'. [ 858.412560][T21149] tipc: Enabling of bearer rejected, failed to enable media [ 861.186309][T21198] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4273'. [ 861.209345][T21198] siw: device registration error -23 [ 861.359266][T21200] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4274'. [ 861.702791][T21218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4277'. [ 862.066869][T21229] syzkaller0: entered promiscuous mode [ 862.081573][T21229] syzkaller0: entered allmulticast mode [ 864.620208][T21242] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4286'. [ 864.640490][T21249] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4287'. [ 864.909367][T21274] syzkaller0: entered promiscuous mode [ 864.918460][T21274] syzkaller0: entered allmulticast mode [ 864.930331][T21276] tipc: Enabled bearer , priority 0 [ 864.959588][T21275] tipc: Disabling bearer [ 865.273762][T21288] netlink: 'syz.2.4298': attribute type 10 has an invalid length. [ 865.295797][T21288] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 865.315324][T21288] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 865.338586][T21288] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 865.350130][T21290] netlink: 'syz.1.4299': attribute type 72 has an invalid length. [ 866.038740][T21316] netlink: 'syz.3.4311': attribute type 72 has an invalid length. [ 866.677715][T21338] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4322'. [ 866.707500][T21342] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4324'. [ 866.930530][T21349] syzkaller0: entered promiscuous mode [ 866.936348][T21349] syzkaller0: entered allmulticast mode [ 869.203294][T21367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4333'. [ 869.315372][T21370] syzkaller0: entered promiscuous mode [ 869.343106][T21370] syzkaller0: entered allmulticast mode [ 869.711689][T21387] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4340'. [ 869.770325][T21388] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4342'. [ 869.833256][T21388] siw: device registration error -23 [ 869.873593][T21397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4339'. [ 870.358881][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.613988][T21430] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4354'. [ 870.638254][T21430] siw: device registration error -23 [ 870.737488][T21434] netlink: 'syz.1.4357': attribute type 1 has an invalid length. [ 870.846591][T21434] bond5: entered promiscuous mode [ 870.869650][T21434] 8021q: adding VLAN 0 to HW filter on device bond5 [ 870.982334][T21434] bond5: (slave bridge3): making interface the new active one [ 871.010448][T21434] bridge3: entered promiscuous mode [ 871.020692][T21434] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 871.041529][T21443] tipc: Enabled bearer , priority 0 [ 871.064872][T21441] tipc: Disabling bearer [ 871.161159][T21448] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4361'. [ 871.236346][T21450] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4362'. [ 871.297132][T21454] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4364'. [ 871.928342][T21483] netlink: 'syz.0.4371': attribute type 1 has an invalid length. [ 871.978970][T21483] bond5: entered promiscuous mode [ 872.001737][T21483] 8021q: adding VLAN 0 to HW filter on device bond5 [ 872.048566][T21483] bond5: (slave bridge4): making interface the new active one [ 872.059228][T21483] bridge4: entered promiscuous mode [ 872.066062][T21483] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 872.075567][T21487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4372'. [ 872.255405][T21496] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4376'. [ 872.298502][T21494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4375'. [ 872.907272][T21518] lo speed is unknown, defaulting to 1000 [ 873.229403][T21533] tipc: Enabling of bearer rejected, failed to enable media [ 874.317352][T21567] tipc: Enabling of bearer rejected, failed to enable media [ 874.382050][T21570] syzkaller0: entered promiscuous mode [ 874.398838][T21570] syzkaller0: entered allmulticast mode [ 874.656876][T21577] lo speed is unknown, defaulting to 1000 [ 875.245951][T21594] __nla_validate_parse: 6 callbacks suppressed [ 875.245968][T21594] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4409'. [ 875.460192][T21598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4411'. [ 875.529092][T21598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4411'. [ 876.156881][T21614] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4414'. [ 876.175572][T21614] siw: device registration error -23 [ 876.230017][T21613] tipc: Enabling of bearer rejected, failed to enable media [ 877.153172][T21640] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4424'. [ 877.399438][T21637] syzkaller0: entered promiscuous mode [ 877.422807][T21637] syzkaller0: entered allmulticast mode [ 880.265501][T21661] tipc: Enabling of bearer rejected, failed to enable media [ 880.526773][T21682] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4433'. [ 880.744797][T21687] syzkaller0: entered promiscuous mode [ 880.754515][T21687] syzkaller0: entered allmulticast mode [ 880.761547][T21691] netlink: 'syz.3.4437': attribute type 1 has an invalid length. [ 880.786263][T21691] bond4: entered promiscuous mode [ 880.791587][T21691] 8021q: adding VLAN 0 to HW filter on device bond4 [ 880.847727][T21691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4437'. [ 880.859754][T21692] syzkaller0: entered promiscuous mode [ 880.865648][T21692] syzkaller0: entered allmulticast mode [ 880.974011][T21688] syzkaller0: entered promiscuous mode [ 880.979562][T21688] syzkaller0: entered allmulticast mode [ 881.008749][T21691] bond4: (slave bridge3): making interface the new active one [ 881.020689][T21691] bridge3: entered promiscuous mode [ 881.037567][T21691] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 883.464507][T21721] lo speed is unknown, defaulting to 1000 [ 883.472095][T21724] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4445'. [ 883.583975][T21730] syzkaller0: entered promiscuous mode [ 883.589856][T21730] syzkaller0: entered allmulticast mode [ 883.750389][T21736] tipc: Enabling of bearer rejected, failed to enable media [ 883.987420][T21745] netlink: 'syz.2.4450': attribute type 1 has an invalid length. [ 884.098824][T21745] bond4: entered promiscuous mode [ 884.108633][T21745] 8021q: adding VLAN 0 to HW filter on device bond4 [ 884.148599][T21747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4450'. [ 884.244546][T21745] bond4: (slave bridge3): making interface the new active one [ 884.252174][T21745] bridge3: entered promiscuous mode [ 884.259040][T21745] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 884.273177][T21752] syzkaller0: entered promiscuous mode [ 884.278730][T21752] syzkaller0: entered allmulticast mode [ 884.534030][T21754] syzkaller0: entered promiscuous mode [ 884.541947][T21754] syzkaller0: entered allmulticast mode [ 884.667359][T21764] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4456'. [ 887.246485][T21789] syzkaller0: entered promiscuous mode [ 887.252391][T21789] syzkaller0: entered allmulticast mode [ 887.263175][T21795] netlink: 'syz.2.4462': attribute type 1 has an invalid length. [ 887.304621][T21795] bond5: entered promiscuous mode [ 887.310054][T21795] 8021q: adding VLAN 0 to HW filter on device bond5 [ 887.322414][T21792] tipc: Enabling of bearer rejected, failed to enable media [ 887.397289][T21795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4462'. [ 887.441374][T21795] bond5: (slave bridge4): making interface the new active one [ 887.449720][T21795] bridge4: entered promiscuous mode [ 887.456815][T21795] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 887.480863][T21801] lo speed is unknown, defaulting to 1000 [ 887.776043][T21814] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4465'. [ 887.790354][T21812] syzkaller0: entered promiscuous mode [ 887.808269][T21812] syzkaller0: entered allmulticast mode [ 887.942921][T21817] syzkaller0: entered promiscuous mode [ 887.948484][T21817] syzkaller0: entered allmulticast mode [ 888.266892][T21823] syzkaller0: entered promiscuous mode [ 888.315236][T21823] syzkaller0: entered allmulticast mode [ 888.550790][T21836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4471'. [ 888.708143][T21840] syzkaller0: entered promiscuous mode [ 888.726428][T21840] syzkaller0: entered allmulticast mode [ 888.927520][T21850] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4475'. [ 889.058020][T21853] syzkaller0: entered promiscuous mode [ 889.066932][T21853] syzkaller0: entered allmulticast mode [ 889.083205][T21854] tipc: Enabling of bearer rejected, failed to enable media [ 889.115020][T21856] syzkaller0: entered promiscuous mode [ 889.120581][T21856] syzkaller0: entered allmulticast mode [ 889.451925][T21861] tipc: Enabled bearer , priority 0 [ 889.469508][T21861] syzkaller0: entered promiscuous mode [ 889.479319][T21861] syzkaller0: entered allmulticast mode [ 889.516960][T21865] syzkaller0: entered promiscuous mode [ 889.522505][T21865] syzkaller0: entered allmulticast mode [ 889.553567][T21861] tipc: Resetting bearer [ 889.561271][T21860] tipc: Resetting bearer [ 889.589763][T21860] tipc: Disabling bearer [ 889.762014][T21875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4482'. [ 889.829057][T21877] netlink: 'syz.2.4483': attribute type 1 has an invalid length. [ 889.922255][T21877] bond6: entered promiscuous mode [ 889.934411][T21877] 8021q: adding VLAN 0 to HW filter on device bond6 [ 889.950312][T21880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4483'. [ 890.071470][T21877] bond6: (slave bridge5): making interface the new active one [ 890.107096][T21877] bridge5: entered promiscuous mode [ 890.114607][T21877] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 890.150721][T21889] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4485'. [ 890.262464][T21892] syzkaller0: entered promiscuous mode [ 890.278824][T21892] syzkaller0: entered allmulticast mode [ 890.389913][T21896] tipc: Enabled bearer , priority 0 [ 890.509971][T21896] syzkaller0: entered promiscuous mode [ 890.516143][T21896] syzkaller0: entered allmulticast mode [ 890.523125][T21896] tipc: Resetting bearer [ 890.586924][T21894] syzkaller0: entered promiscuous mode [ 890.592500][T21894] syzkaller0: entered allmulticast mode [ 890.644179][T21895] tipc: Resetting bearer [ 892.784552][T21895] tipc: Disabling bearer [ 894.689940][T21916] tipc: Enabling of bearer rejected, failed to enable media [ 894.706769][T14330] tipc: Node number set to 3619268162 [ 894.882483][T21936] lo speed is unknown, defaulting to 1000 [ 894.927399][T21943] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4496'. [ 895.080220][T21957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4494'. [ 895.328129][T21963] syzkaller0: entered promiscuous mode [ 895.354112][T21963] syzkaller0: entered allmulticast mode [ 895.891694][T21976] lo speed is unknown, defaulting to 1000 [ 896.008628][T21984] syzkaller0: entered promiscuous mode [ 896.024753][T21984] syzkaller0: entered allmulticast mode [ 896.241910][T21986] syzkaller0: entered promiscuous mode [ 896.254110][T21986] syzkaller0: entered allmulticast mode [ 896.323820][T21988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4506'. [ 896.629969][T22001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4507'. [ 896.838624][T22010] syzkaller0: entered promiscuous mode [ 896.854548][T22010] syzkaller0: entered allmulticast mode [ 896.977436][T22014] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4511'. [ 897.353886][T22023] syzkaller0: entered promiscuous mode [ 897.359456][T22023] syzkaller0: entered allmulticast mode [ 897.511617][T22028] syzkaller0: entered promiscuous mode [ 897.531715][T22028] syzkaller0: entered allmulticast mode [ 897.806286][T22035] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4518'. [ 897.948342][T22035] syzkaller0: entered promiscuous mode [ 897.993046][T22035] syzkaller0: entered allmulticast mode [ 898.002000][T22050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4519'. [ 900.098173][T22058] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4522'. [ 900.286111][T22069] tipc: Enabling of bearer rejected, failed to enable media [ 900.379200][T22068] syzkaller0: entered promiscuous mode [ 900.393312][T22068] syzkaller0: entered allmulticast mode [ 900.553513][T22077] syzkaller0: entered promiscuous mode [ 900.560155][T22077] syzkaller0: entered allmulticast mode [ 900.770414][T22088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4529'. [ 900.980480][T22093] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4532'. [ 901.006264][T22093] syzkaller0: entered promiscuous mode [ 901.012153][T22093] syzkaller0: entered allmulticast mode [ 901.093758][T22097] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4534'. [ 901.393956][T22114] tipc: Enabling of bearer rejected, failed to enable media [ 901.514344][T22117] syzkaller0: entered promiscuous mode [ 901.527809][T22117] syzkaller0: entered allmulticast mode [ 901.838388][T22134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4543'. [ 901.869477][T22132] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4545'. [ 901.900630][T22132] syzkaller0: entered promiscuous mode [ 901.916724][T22132] syzkaller0: entered allmulticast mode [ 901.989271][T22135] syzkaller0: entered promiscuous mode [ 901.995160][T22135] syzkaller0: entered allmulticast mode [ 902.211690][T22143] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.4550'. [ 904.412489][T22154] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4551'. [ 904.675974][T22178] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4555'. [ 904.918566][T22189] syzkaller0: entered promiscuous mode [ 904.945721][T22189] syzkaller0: entered allmulticast mode [ 904.966325][T22195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4556'. [ 905.265474][T22202] syzkaller0: entered promiscuous mode [ 905.275182][T22202] syzkaller0: entered allmulticast mode [ 905.282400][T22204] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4563'. [ 905.588815][T22215] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4567'. [ 905.603925][T22215] siw: device registration error -23 [ 905.727248][T22221] syzkaller0: entered promiscuous mode [ 905.736584][T22221] syzkaller0: entered allmulticast mode [ 906.068176][T22237] syzkaller0: entered promiscuous mode [ 906.075055][T22237] syzkaller0: entered allmulticast mode [ 906.185127][T22239] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4575'. [ 906.323758][T22245] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4578'. [ 906.334669][T22245] siw: device registration error -23 [ 906.569193][T22256] tipc: Enabling of bearer rejected, failed to enable media [ 906.750274][T22265] tipc: Can't bind to reserved service type 0 [ 906.784128][T22264] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4583'. [ 906.815633][T22264] syzkaller0: entered promiscuous mode [ 906.821184][T22264] syzkaller0: entered allmulticast mode [ 906.955432][T22269] syzkaller0: entered promiscuous mode [ 906.961749][T22269] syzkaller0: entered allmulticast mode [ 907.174155][T22274] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4587'. [ 907.567461][T22285] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.4592'. [ 907.733826][T22294] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4595'. [ 907.765020][T22294] syzkaller0: entered promiscuous mode [ 907.770568][T22294] syzkaller0: entered allmulticast mode [ 907.881522][T22296] syzkaller0: entered promiscuous mode [ 907.897944][T22296] syzkaller0: entered allmulticast mode [ 907.920041][T22300] syzkaller0: entered promiscuous mode [ 907.939588][T22300] syzkaller0: entered allmulticast mode [ 908.115443][T22304] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4599'. [ 908.818910][T22332] syzkaller0: entered promiscuous mode [ 908.833144][T22332] syzkaller0: entered allmulticast mode [ 908.949431][T22337] syzkaller0: entered promiscuous mode [ 908.955208][T22337] syzkaller0: entered allmulticast mode [ 908.973997][T22339] tipc: Enabled bearer , priority 0 [ 908.982051][T22339] syzkaller0: entered promiscuous mode [ 908.992398][T22339] syzkaller0: entered allmulticast mode [ 909.058486][T22339] tipc: Resetting bearer [ 909.068919][T22338] tipc: Resetting bearer [ 909.095833][T22338] tipc: Disabling bearer [ 909.310964][T22347] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4614'. [ 909.642293][T22358] siw: device registration error -23 [ 909.684847][T22360] netlink: 'syz.3.4620': attribute type 1 has an invalid length. [ 909.748955][T22360] bond5: entered promiscuous mode [ 909.759922][T22360] 8021q: adding VLAN 0 to HW filter on device bond5 [ 909.792848][T22362] bond5: entered allmulticast mode [ 909.857414][T22360] bond5: (slave bridge4): making interface the new active one [ 909.882774][T22360] bridge4: entered promiscuous mode [ 909.889030][T22360] bridge4: entered allmulticast mode [ 909.896486][T22360] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 909.946251][T22369] tipc: Enabled bearer , priority 0 [ 909.972254][T22369] syzkaller0: entered promiscuous mode [ 909.988442][T22369] syzkaller0: entered allmulticast mode [ 910.023505][T22369] tipc: Resetting bearer [ 910.185745][T22368] tipc: Resetting bearer [ 910.246596][T22368] tipc: Disabling bearer [ 910.370940][T22367] syzkaller0: entered promiscuous mode [ 910.387639][T22367] syzkaller0: entered allmulticast mode [ 910.404229][T22380] __nla_validate_parse: 1 callbacks suppressed [ 910.404246][T22380] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4625'. [ 912.857795][T22414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4634'. [ 913.062828][T22421] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4636'. [ 913.168973][T22424] tipc: Enabled bearer , priority 0 [ 913.179574][T22424] syzkaller0: entered promiscuous mode [ 913.187392][T22424] syzkaller0: entered allmulticast mode [ 913.227848][T22424] tipc: Resetting bearer [ 913.247069][T22423] tipc: Resetting bearer [ 913.323717][T22423] tipc: Disabling bearer [ 913.513571][T22439] tipc: Enabled bearer , priority 0 [ 913.545063][T22438] tipc: Disabling bearer [ 913.566758][T22441] syzkaller0: entered promiscuous mode [ 913.572541][T22441] syzkaller0: entered allmulticast mode [ 913.757241][T22448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4647'. [ 913.974713][T22454] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4650'. [ 914.026542][T22456] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4651'. [ 914.146315][T22460] tipc: Enabled bearer , priority 0 [ 914.154350][T22460] syzkaller0: entered promiscuous mode [ 914.159874][T22460] syzkaller0: entered allmulticast mode [ 914.186856][T22460] tipc: Resetting bearer [ 914.204318][T22459] tipc: Resetting bearer [ 914.263704][T22459] tipc: Disabling bearer [ 914.340437][T22466] syzkaller0: entered promiscuous mode [ 914.348661][T22466] syzkaller0: entered allmulticast mode [ 914.456025][T22468] syzkaller0: entered promiscuous mode [ 914.461578][T22468] syzkaller0: entered allmulticast mode [ 914.477459][T22468] tipc: Enabled bearer , priority 0 [ 914.498755][T22467] tipc: Resetting bearer [ 914.564730][T22467] tipc: Disabling bearer [ 914.603784][T22478] siw: device registration error -23 [ 914.616304][T22475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4660'. [ 914.740759][T22483] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4663'. [ 914.780281][T22482] syzkaller0: entered promiscuous mode [ 914.791528][T22482] syzkaller0: entered allmulticast mode [ 915.058966][T22494] tipc: Enabled bearer , priority 0 [ 915.067420][T22494] syzkaller0: entered promiscuous mode [ 915.073676][T22494] syzkaller0: entered allmulticast mode [ 915.090181][T22494] tipc: Resetting bearer [ 915.098596][T22496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4668'. [ 915.114314][T22493] tipc: Resetting bearer [ 915.159692][T22493] tipc: Disabling bearer [ 915.201928][T22498] syzkaller0: entered promiscuous mode [ 915.212336][T22498] syzkaller0: entered allmulticast mode [ 915.267928][T22500] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4670'. [ 915.404067][T22502] syzkaller0: entered promiscuous mode [ 915.410197][T22502] syzkaller0: entered allmulticast mode [ 916.216322][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 916.235239][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 916.263731][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 916.271930][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 916.282109][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 916.289989][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 917.844325][T22513] syzkaller0: entered promiscuous mode [ 917.849914][T22513] syzkaller0: entered allmulticast mode [ 917.859949][T22514] tipc: Enabled bearer , priority 0 [ 917.867500][T22506] tipc: Resetting bearer [ 917.912003][T22506] tipc: Disabling bearer [ 918.000276][T22507] lo speed is unknown, defaulting to 1000 [ 918.067417][T22521] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4674'. [ 918.143626][T22526] netlink: 'syz.3.4675': attribute type 1 has an invalid length. [ 918.197874][T22526] bond6: entered promiscuous mode [ 918.220363][T22526] 8021q: adding VLAN 0 to HW filter on device bond6 [ 918.254735][T22528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4675'. [ 918.273401][T22528] bond6: entered allmulticast mode [ 918.326021][ T1143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.351837][T22516] lo speed is unknown, defaulting to 1000 [ 918.354508][ T5784] Bluetooth: hci3: command tx timeout [ 918.506080][ T1143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.641129][T22531] syzkaller0: entered promiscuous mode [ 918.647981][T22531] syzkaller0: entered allmulticast mode [ 918.703543][ T1143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.439491][ T5784] Bluetooth: hci3: command tx timeout [ 920.695964][ T1143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.837342][T22543] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4680'. [ 921.248559][ T1143] tipc: Left network mode [ 921.284916][T22555] syzkaller0: entered promiscuous mode [ 921.291434][T22555] syzkaller0: entered allmulticast mode [ 921.376799][T22554] syzkaller0: entered promiscuous mode [ 921.382361][T22554] syzkaller0: entered allmulticast mode [ 921.472269][T22554] tipc: Enabled bearer , priority 0 [ 921.489760][T22516] chnl_net:caif_netlink_parms(): no params data found [ 921.529840][T22553] tipc: Resetting bearer [ 921.594905][T22553] tipc: Disabling bearer [ 921.742635][T22562] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4684'. [ 921.788518][T22568] netlink: 'syz.0.4685': attribute type 1 has an invalid length. [ 921.851233][T22568] bond6: entered promiscuous mode [ 921.862377][T22568] 8021q: adding VLAN 0 to HW filter on device bond6 [ 921.895722][T22572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4685'. [ 921.905665][T22572] bond6: entered allmulticast mode [ 922.057076][T22516] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.089165][T22516] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.098079][T22516] bridge_slave_0: entered allmulticast mode [ 922.114986][T22516] bridge_slave_0: entered promiscuous mode [ 922.153824][T22516] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.161025][T22516] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.198268][T22516] bridge_slave_1: entered allmulticast mode [ 922.210460][T22516] bridge_slave_1: entered promiscuous mode [ 922.246080][T22581] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4686'. [ 922.462075][T22516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.513075][ T5784] Bluetooth: hci3: command tx timeout [ 922.601816][T22599] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4689'. [ 922.615493][T22516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.815169][T22516] team0: Port device team_slave_0 added [ 922.914508][T22516] team0: Port device team_slave_1 added [ 922.982555][T22605] syzkaller0: entered promiscuous mode [ 922.997242][T22605] syzkaller0: entered allmulticast mode [ 923.035460][T22608] tipc: Enabled bearer , priority 0 [ 923.047466][T22604] tipc: Resetting bearer [ 923.090029][T22604] tipc: Disabling bearer [ 923.101277][T22516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.108393][T22516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.135155][T22516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.208961][T22607] syzkaller0: entered promiscuous mode [ 923.218629][T22607] syzkaller0: entered allmulticast mode [ 924.597458][ T5784] Bluetooth: hci3: command tx timeout [ 925.252202][T22516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.259774][T22516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.287742][T22516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.299396][T22617] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4693'. [ 925.322961][T22619] netlink: 'syz.3.4694': attribute type 1 has an invalid length. [ 925.343326][T22619] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 925.353643][T22621] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4694'. [ 925.733498][T22516] hsr_slave_0: entered promiscuous mode [ 925.740715][T22516] hsr_slave_1: entered promiscuous mode [ 925.774386][T22516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 925.782015][T22516] Cannot create hsr debugfs directory [ 925.896054][ T1143] hsr_slave_0: left promiscuous mode [ 925.918402][ T1143] hsr_slave_1: left promiscuous mode [ 925.946373][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.974990][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.221179][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.235078][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.259525][ T1143] bridge_slave_1: left allmulticast mode [ 926.280471][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.329173][ T1143] bridge_slave_0: left allmulticast mode [ 926.353308][ T1143] bridge_slave_0: left promiscuous mode [ 926.363599][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.450916][T22659] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4699'. [ 926.472320][ T1143] bond0: left allmulticast mode [ 926.481762][ T1143] bond_slave_0: left allmulticast mode [ 926.491920][ T1143] bond_slave_1: left allmulticast mode [ 926.507262][ T1143] veth1_macvtap: left promiscuous mode [ 926.522585][ T1143] veth0_macvtap: left promiscuous mode [ 926.532366][ T1143] veth1_vlan: left promiscuous mode [ 926.547366][ T1143] veth0_vlan: left promiscuous mode [ 926.737216][ T1143] infiniband sqz0: set down [ 926.756875][ T1143] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 926.765719][ T1143] bridge3 (unregistering): left promiscuous mode [ 926.957437][ T1143] bond5 (unregistering): Released all slaves [ 927.004448][ T1143] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 927.013685][ T1143] bridge2 (unregistering): left promiscuous mode [ 927.020163][ T1143] bridge2 (unregistering): left allmulticast mode [ 927.189072][ T1143] bond4 (unregistering): Released all slaves [ 927.205752][ T1143] bond3 (unregistering): Released all slaves [ 927.225153][ T1143] bond2 (unregistering): Released all slaves [ 927.267425][ T1143] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 927.278056][ T1143] bridge1 (unregistering): left promiscuous mode [ 927.284937][ T1143] bridge1 (unregistering): left allmulticast mode [ 927.462259][ T1143] bond1 (unregistering): Released all slaves [ 928.010590][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 928.066974][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 928.117041][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 928.127904][ T1143] bond_slave_1 (unregistering): left promiscuous mode [ 928.176425][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 928.185805][ T1143] bond_slave_0 (unregistering): left promiscuous mode [ 928.536872][ T1143] bond0 (unregistering): Released all slaves [ 928.627048][ T1305] smc: removing ib device sqz0 [ 928.646159][T22642] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4697'. [ 928.871099][T14488] lo speed is unknown, defaulting to 1000 [ 929.236510][T22671] syzkaller0: entered promiscuous mode [ 929.246383][T22671] syzkaller0: entered allmulticast mode [ 929.268746][T22672] tipc: Enabled bearer , priority 0 [ 929.290520][T22679] netlink: 'syz.2.4703': attribute type 1 has an invalid length. [ 929.419722][T22679] bond7: entered promiscuous mode [ 929.425463][T22679] 8021q: adding VLAN 0 to HW filter on device bond7 [ 929.459692][T22682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4703'. [ 929.476774][T22682] bond7: entered allmulticast mode [ 929.552981][T22670] tipc: Resetting bearer [ 929.676261][T22670] tipc: Disabling bearer [ 929.992367][T22688] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4704'. [ 930.409425][T22700] tipc: Enabled bearer , priority 0 [ 930.429001][T22704] syzkaller0: entered promiscuous mode [ 930.446676][T22704] syzkaller0: entered allmulticast mode [ 930.580674][T22700] tipc: Resetting bearer [ 930.607640][T22699] tipc: Resetting bearer [ 930.673686][T22699] tipc: Disabling bearer [ 931.048570][T22720] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4710'. [ 931.291989][T22516] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 931.328992][T22516] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 931.378759][T22516] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 931.410259][T22733] netlink: 'syz.3.4712': attribute type 1 has an invalid length. [ 931.485685][T22733] bond7: entered promiscuous mode [ 931.515359][T22733] 8021q: adding VLAN 0 to HW filter on device bond7 [ 931.627085][T22735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4712'. [ 931.642814][T22735] bond7: entered allmulticast mode [ 931.662756][T22516] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 931.710743][T22734] syzkaller0: entered promiscuous mode [ 931.725058][T22734] syzkaller0: entered allmulticast mode [ 931.751351][T22740] tipc: Enabled bearer , priority 0 [ 931.792230][T22732] tipc: Resetting bearer [ 931.807983][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.867302][T22732] tipc: Disabling bearer [ 932.169117][T22752] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4716'. [ 932.207050][T22516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.265123][T22516] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.296657][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.303905][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.352498][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.359743][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.722536][T22771] netlink: 'syz.0.4722': attribute type 1 has an invalid length. [ 932.791235][T22771] bond7: entered promiscuous mode [ 932.808209][T22771] 8021q: adding VLAN 0 to HW filter on device bond7 [ 932.869848][T22776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4722'. [ 932.892261][T22776] bond7: entered allmulticast mode [ 933.113856][T22787] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4724'. [ 933.137340][T22516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.284748][T22793] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4726'. [ 933.299607][T22516] veth0_vlan: entered promiscuous mode [ 933.349568][T22516] veth1_vlan: entered promiscuous mode [ 933.441533][T22516] veth0_macvtap: entered promiscuous mode [ 933.481784][T22516] veth1_macvtap: entered promiscuous mode [ 933.507689][T22796] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4727'. [ 933.600861][T22516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.630293][T22516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.652583][T22516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.693237][T22516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.713555][T22516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.732400][T22516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.747312][T22516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.772275][T22516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.802778][T22516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.822836][T22516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.842963][T22516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.862883][T22516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.886668][T22516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.917170][T22516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.041462][T22516] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.069247][T22516] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.078743][T22516] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.104327][T22516] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.118103][T22814] netlink: 'syz.2.4732': attribute type 1 has an invalid length. [ 934.165658][T22814] bond8: entered promiscuous mode [ 934.171834][T22814] 8021q: adding VLAN 0 to HW filter on device bond8 [ 934.273998][T22814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4732'. [ 934.311741][T22814] bond8: entered allmulticast mode [ 934.319365][T22821] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4733'. [ 934.576467][ T1309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.607486][ T1309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.708481][ T1305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.746157][ T1305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.923656][T22841] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4737'. [ 935.226204][T22847] siw: device registration error -23 [ 935.527681][T22859] batadv_slave_1: entered promiscuous mode [ 935.535462][T22862] netlink: 'syz.0.4742': attribute type 1 has an invalid length. [ 935.597173][T22862] bond8: entered promiscuous mode [ 935.628974][T22862] 8021q: adding VLAN 0 to HW filter on device bond8 [ 935.698181][T22868] bond8: entered allmulticast mode [ 935.730055][T22859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.951821][T22859] batadv_slave_1 (unregistering): left promiscuous mode [ 935.970663][T22859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.115658][T22873] syzkaller0: entered promiscuous mode [ 936.132831][T22873] syzkaller0: entered allmulticast mode [ 936.343660][T22898] syzkaller0: entered promiscuous mode [ 936.349302][T22898] syzkaller0: entered allmulticast mode [ 936.403445][T22898] tipc: Enabled bearer , priority 0 [ 936.435797][T22896] tipc: Resetting bearer [ 936.760200][T22896] tipc: Disabling bearer [ 936.794222][T22912] __nla_validate_parse: 2 callbacks suppressed [ 936.794240][T22912] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4747'. [ 936.939663][T22918] siw: device registration error -23 [ 937.117760][T22928] netlink: 'syz.3.4753': attribute type 1 has an invalid length. [ 937.150100][T22928] bond8: entered promiscuous mode [ 937.155953][T22928] 8021q: adding VLAN 0 to HW filter on device bond8 [ 937.218845][T22928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4753'. [ 937.228033][T22928] bond8: entered allmulticast mode [ 937.408475][T22939] syzkaller0: entered promiscuous mode [ 937.414190][T22939] syzkaller0: entered allmulticast mode [ 937.428577][T22939] tipc: Started in network mode [ 937.433626][T22939] tipc: Node identity 36edbe19474b, cluster identity 4711 [ 937.441199][T22939] tipc: Enabled bearer , priority 0 [ 937.544331][T22938] tipc: Resetting bearer [ 937.607975][T22938] tipc: Disabling bearer [ 937.697352][T22943] macsec1: entered promiscuous mode [ 937.704725][T22942] batadv_slave_1: entered promiscuous mode [ 937.737068][T22942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4759'. [ 937.752975][T22942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.895600][T22942] batadv_slave_1 (unregistering): left promiscuous mode [ 937.904686][T22952] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4761'. [ 937.914483][T22942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.097958][T22955] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4762'. [ 938.211229][T22949] syzkaller0: entered promiscuous mode [ 938.227792][T22949] syzkaller0: entered allmulticast mode [ 940.448411][T22967] netlink: 'syz.1.4765': attribute type 1 has an invalid length. [ 940.460718][T22971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4765'. [ 940.470129][T22971] vxcan1: entered promiscuous mode [ 940.475381][T22971] vxcan1: entered allmulticast mode [ 940.623295][T22992] syzkaller0: entered promiscuous mode [ 940.642837][T22992] syzkaller0: entered allmulticast mode [ 940.668214][T22992] tipc: Enabled bearer , priority 0 [ 940.871638][T22991] tipc: Resetting bearer [ 940.920153][T22991] tipc: Disabling bearer [ 941.182523][T23014] netlink: 'syz.3.4778': attribute type 1 has an invalid length. [ 941.232102][T23014] bond9: entered promiscuous mode [ 941.240055][T23014] 8021q: adding VLAN 0 to HW filter on device bond9 [ 941.257800][T23020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4778'. [ 941.268027][T23020] bond9: entered allmulticast mode [ 941.308675][T23016] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4779'. [ 941.617523][T23034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4782'. [ 941.732609][T23040] syzkaller0: entered promiscuous mode [ 941.749125][T23040] syzkaller0: entered allmulticast mode [ 941.782394][T23040] tipc: Enabled bearer , priority 0 [ 941.918825][T23039] tipc: Resetting bearer [ 942.040726][T23039] tipc: Disabling bearer [ 942.144818][T23048] netlink: 'syz.1.4789': attribute type 1 has an invalid length. [ 942.182030][T23048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4789'. [ 942.197841][T23048] veth1_to_team: entered promiscuous mode [ 942.204925][T23048] veth1_to_team: entered allmulticast mode [ 942.711231][T23075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4795'. [ 943.485644][T23082] syzkaller0: entered promiscuous mode [ 943.497312][T23082] syzkaller0: entered allmulticast mode [ 943.505849][T23086] netlink: 'syz.2.4802': attribute type 1 has an invalid length. [ 943.545014][T23086] bond9: entered promiscuous mode [ 943.550584][T23086] 8021q: adding VLAN 0 to HW filter on device bond9 [ 943.569446][T23082] tipc: Enabled bearer , priority 0 [ 943.597639][T23086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4802'. [ 943.611967][T23086] bond9: entered allmulticast mode [ 943.623337][T23081] tipc: Resetting bearer [ 943.675743][T23081] tipc: Disabling bearer [ 944.260933][T23116] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4813'. [ 944.283003][T23116] syzkaller0: entered promiscuous mode [ 944.288723][T23116] syzkaller0: entered allmulticast mode [ 944.305966][T23116] tc action pedit offset must be on 32 bit boundaries [ 944.313295][T23116] tc action pedit offset must be on 32 bit boundaries [ 944.320108][T23116] tc action pedit offset must be on 32 bit boundaries [ 944.326979][T23116] tc action pedit offset must be on 32 bit boundaries [ 944.333848][T23116] tc action pedit offset must be on 32 bit boundaries [ 944.340651][T23116] tc action pedit offset must be on 32 bit boundaries [ 944.347520][T23116] tc action pedit offset must be on 32 bit boundaries [ 944.354364][T23116] tc action pedit offset must be on 32 bit boundaries [ 944.361194][T23116] tc action pedit offset must be on 32 bit boundaries [ 944.368035][T23116] tc action pedit offset must be on 32 bit boundaries [ 944.374908][T23116] 0: reclassify loop, rule prio 0, protocol 800 [ 944.981145][T23122] netlink: 'syz.0.4816': attribute type 1 has an invalid length. [ 945.036308][T23122] bond9: entered promiscuous mode [ 945.041785][T23122] 8021q: adding VLAN 0 to HW filter on device bond9 [ 945.062586][T23124] syzkaller0: entered promiscuous mode [ 945.068217][T23124] syzkaller0: entered allmulticast mode [ 945.077961][T23124] tipc: Enabled bearer , priority 0 [ 945.086238][T23123] tipc: Resetting bearer [ 945.122022][T23123] tipc: Disabling bearer [ 945.137351][T23122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4816'. [ 945.149904][T23122] bond9: entered allmulticast mode [ 945.414821][T23135] syzkaller0: entered promiscuous mode [ 945.434229][T23135] syzkaller0: entered allmulticast mode [ 945.913036][T14879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 945.933067][T14879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 945.945762][T14879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 945.972562][T14879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 945.980942][T14879] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 945.989879][T14879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 948.034898][T14879] Bluetooth: hci4: command tx timeout [ 948.986383][T23162] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4828'. [ 949.012017][T23174] syzkaller0: entered promiscuous mode [ 949.017847][T23174] syzkaller0: entered allmulticast mode [ 949.035025][T23143] tipc: Resetting bearer [ 949.048557][T23174] tipc: Enabled bearer , priority 0 [ 949.066369][T23173] tipc: Resetting bearer [ 949.123719][T23173] tipc: Disabling bearer [ 949.148607][T23176] netlink: 'syz.1.4830': attribute type 1 has an invalid length. [ 949.172389][T23176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4830'. [ 949.182072][T23176] macvlan1: entered promiscuous mode [ 949.191974][T23176] macvlan1: entered allmulticast mode [ 949.198418][T23176] veth1_vlan: entered allmulticast mode [ 949.266617][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.307212][T23177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4830'. [ 949.442833][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.482927][T23186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4833'. [ 949.582942][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.685763][T23195] siw: device registration error -23 [ 949.708396][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.815135][T23200] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4838'. [ 949.841953][T23200] syzkaller0: entered promiscuous mode [ 949.862804][T23200] syzkaller0: entered allmulticast mode [ 949.884524][T23143] chnl_net:caif_netlink_parms(): no params data found [ 949.908959][T23200] tcf_pedit_act: 7 callbacks suppressed [ 949.908976][T23200] tc action pedit offset must be on 32 bit boundaries [ 949.921896][T23200] tc action pedit offset must be on 32 bit boundaries [ 949.928770][T23200] tc action pedit offset must be on 32 bit boundaries [ 949.935605][T23200] tc action pedit offset must be on 32 bit boundaries [ 949.942419][T23200] tc action pedit offset must be on 32 bit boundaries [ 949.949282][T23200] tc action pedit offset must be on 32 bit boundaries [ 949.956121][T23200] tc action pedit offset must be on 32 bit boundaries [ 949.962975][T23200] tc action pedit offset must be on 32 bit boundaries [ 949.969800][T23200] tc action pedit offset must be on 32 bit boundaries [ 949.976657][T23200] tc action pedit offset must be on 32 bit boundaries [ 949.983514][T23200] 0: reclassify loop, rule prio 0, protocol 800 [ 950.114940][T14879] Bluetooth: hci4: command tx timeout [ 950.282970][T23143] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.301924][T23143] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.312424][T23143] bridge_slave_0: entered allmulticast mode [ 950.324449][T23143] bridge_slave_0: entered promiscuous mode [ 950.331142][T23213] netlink: 'syz.1.4839': attribute type 72 has an invalid length. [ 950.455490][T23143] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.480019][T23143] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.493039][T23143] bridge_slave_1: entered allmulticast mode [ 950.516525][T23143] bridge_slave_1: entered promiscuous mode [ 950.549826][T23215] netlink: 'syz.2.4840': attribute type 1 has an invalid length. [ 950.590611][T23215] bond10: entered promiscuous mode [ 950.596876][T23215] 8021q: adding VLAN 0 to HW filter on device bond10 [ 950.605216][T23219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4840'. [ 950.618912][T23219] bond10: entered allmulticast mode [ 950.629363][ T50] tipc: Left network mode [ 950.631874][T23223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4840'. [ 950.656019][T23226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4842'. [ 950.698375][T23143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.729858][T23143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.958602][T23143] team0: Port device team_slave_0 added [ 952.003967][T23143] team0: Port device team_slave_1 added [ 952.043214][T23266] netlink: 'syz.1.4849': attribute type 72 has an invalid length. [ 952.151841][T23268] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4847'. [ 952.181559][T23143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.192933][T14879] Bluetooth: hci4: command tx timeout [ 952.194900][T23143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.228113][T23143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.289245][T23259] syzkaller0: entered promiscuous mode [ 952.299748][T23259] syzkaller0: entered allmulticast mode [ 952.330365][T23143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.338170][T23143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.364637][T23143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.272909][T14879] Bluetooth: hci4: command tx timeout [ 954.338406][T23273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4850'. [ 954.485971][T23276] netlink: 'syz.3.4851': attribute type 1 has an invalid length. [ 954.504205][T23276] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 954.522813][T23277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4851'. [ 955.377819][T23279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4851'. [ 955.678615][T23143] hsr_slave_0: entered promiscuous mode [ 955.705416][T23143] hsr_slave_1: entered promiscuous mode [ 955.714007][T23143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 955.733393][T23143] Cannot create hsr debugfs directory [ 955.788994][T23321] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4857'. [ 955.995677][T23330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4859'. [ 956.987810][T23337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4863'. [ 957.021026][T23337] vlan2: entered promiscuous mode [ 957.037147][T23337] geneve1: entered promiscuous mode [ 957.044118][T23337] vlan2: entered allmulticast mode [ 957.049299][T23337] geneve1: entered allmulticast mode [ 957.060553][T23341] netlink: 'syz.2.4862': attribute type 1 has an invalid length. [ 957.073507][T23341] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 957.078331][T23345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4862'. [ 957.108674][T23351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4862'. [ 957.341324][T23367] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4866'. [ 957.359773][T23368] siw: device registration error -23 [ 957.489258][ T50] hsr_slave_0: left promiscuous mode [ 957.527094][ T50] hsr_slave_1: left promiscuous mode [ 957.546352][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.561038][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.570213][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 957.578315][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.586914][ T50] bridge_slave_1: left allmulticast mode [ 957.600821][ T50] bridge_slave_1: left promiscuous mode [ 957.611036][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.621580][ T50] bridge_slave_0: left allmulticast mode [ 957.638922][ T50] bridge_slave_0: left promiscuous mode [ 957.649249][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.726653][ T50] bond0: left allmulticast mode [ 957.736177][ T50] bond_slave_0: left allmulticast mode [ 957.745010][ T50] bond_slave_1: left allmulticast mode [ 957.751625][ T50] veth1_macvtap: left promiscuous mode [ 957.758742][ T50] veth0_macvtap: left promiscuous mode [ 957.765124][ T50] veth1_vlan: left promiscuous mode [ 957.770761][ T50] veth0_vlan: left promiscuous mode [ 958.147637][ T50] bond9 (unregistering): Released all slaves [ 958.304495][ T50] bond8 (unregistering): Released all slaves [ 958.453875][ T50] bond7 (unregistering): Released all slaves [ 958.598355][ T50] bond6 (unregistering): Released all slaves [ 958.630826][ T50] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 958.639440][ T50] bridge4 (unregistering): left promiscuous mode [ 958.807509][ T50] bond5 (unregistering): Released all slaves [ 958.830562][ T50] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 958.839248][ T50] bridge3 (unregistering): left promiscuous mode [ 958.999533][ T50] bond4 (unregistering): Released all slaves [ 959.200674][ T50] bond3 (unregistering): Released all slaves [ 959.379118][ T50] bond2 (unregistering): Released all slaves [ 959.402250][ T50] bond1 (unregistering): Released all slaves [ 959.943022][ T50] team_slave_1 (unregistering): left promiscuous mode [ 959.956775][ T50] team0 (unregistering): Port device team_slave_1 removed [ 960.006434][ T50] team_slave_0 (unregistering): left promiscuous mode [ 960.015819][ T50] team0 (unregistering): Port device team_slave_0 removed [ 960.066539][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.075534][ T50] bond_slave_1 (unregistering): left promiscuous mode [ 960.128492][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 960.139905][ T50] bond_slave_0 (unregistering): left promiscuous mode [ 960.507277][ T50] bond0 (unregistering): Released all slaves [ 960.632184][T23374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4869'. [ 960.657709][T23383] batadv_slave_1: entered promiscuous mode [ 960.681707][T23384] batadv_slave_1: left promiscuous mode [ 960.703046][T23385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4871'. [ 960.743081][T23385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.882478][T23385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.998396][T23393] netlink: 'syz.1.4873': attribute type 1 has an invalid length. [ 961.074265][T23393] bond1: entered promiscuous mode [ 961.080006][T23393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 961.098924][T23395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4873'. [ 961.133933][T23395] bond1: entered allmulticast mode [ 961.210231][T23403] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4873'. [ 961.947703][T23143] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 961.995108][T23143] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 962.017437][T23143] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 962.054982][T23143] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 962.138078][T23429] netlink: 'syz.1.4880': attribute type 3 has an invalid length. [ 962.184304][T23430] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4881'. [ 962.220085][T23425] syzkaller0: entered promiscuous mode [ 962.229972][T23431] netlink: 'syz.1.4880': attribute type 1 has an invalid length. [ 962.233560][T23425] syzkaller0: entered allmulticast mode [ 962.251021][T23431] netlink: 'syz.1.4880': attribute type 2 has an invalid length. [ 962.367080][T23431] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4880'. [ 962.409544][T23431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4880'. [ 962.457966][T23143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.519294][T23143] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.549132][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.556377][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.583381][T23440] netlink: 'syz.2.4883': attribute type 1 has an invalid length. [ 962.617975][T23440] bond11: entered promiscuous mode [ 962.623779][T23440] 8021q: adding VLAN 0 to HW filter on device bond11 [ 962.664939][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.672196][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.703025][T23440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4883'. [ 962.716365][T23440] bond11: entered allmulticast mode [ 962.734718][T23440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4883'. [ 963.330601][T23469] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4889'. [ 963.430674][T23143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.439926][T23471] syzkaller0: entered promiscuous mode [ 963.446683][T23471] syzkaller0: entered allmulticast mode [ 963.655324][T23143] veth0_vlan: entered promiscuous mode [ 963.713644][T23143] veth1_vlan: entered promiscuous mode [ 963.814221][T23143] veth0_macvtap: entered promiscuous mode [ 963.828881][T23481] netlink: 'syz.2.4893': attribute type 1 has an invalid length. [ 963.874911][T23481] bond12: entered promiscuous mode [ 963.880410][T23481] 8021q: adding VLAN 0 to HW filter on device bond12 [ 963.896660][T23143] veth1_macvtap: entered promiscuous mode [ 963.918697][T23486] bond12: entered allmulticast mode [ 963.945789][T23489] netlink: 'syz.3.4895': attribute type 3 has an invalid length. [ 964.027698][T23143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.049856][T23143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.080096][T23143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.094189][T23493] netlink: 'syz.3.4895': attribute type 1 has an invalid length. [ 964.108869][T23493] netlink: 'syz.3.4895': attribute type 2 has an invalid length. [ 964.112750][T23143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.158929][T23143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.179822][T23143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.192003][T23143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.280094][T23143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.318795][T23143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.344062][T23143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.382000][T23143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.411316][T23143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.675813][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.708224][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.832374][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.855894][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.939465][T23516] syzkaller0: entered promiscuous mode [ 964.967136][T23516] syzkaller0: entered allmulticast mode [ 965.291664][T23530] netlink: 'syz.1.4904': attribute type 1 has an invalid length. [ 965.390430][T23530] bond2: entered promiscuous mode [ 965.423727][T23530] 8021q: adding VLAN 0 to HW filter on device bond2 [ 965.477332][T23532] bond2: entered allmulticast mode [ 965.655775][T23530] __nla_validate_parse: 7 callbacks suppressed [ 965.655796][T23530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4904'. [ 965.702831][T23530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4904'. [ 965.985651][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 966.016243][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 966.024947][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 966.052438][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 966.060868][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 966.079808][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 966.661367][T23570] syzkaller0: entered promiscuous mode [ 966.681018][T23570] syzkaller0: entered allmulticast mode [ 966.822081][T23550] chnl_net:caif_netlink_parms(): no params data found [ 966.936548][T23583] netlink: 'syz.3.4915': attribute type 1 has an invalid length. [ 966.979429][T23583] bond10: entered promiscuous mode [ 966.985156][T23583] 8021q: adding VLAN 0 to HW filter on device bond10 [ 967.106639][T23583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4915'. [ 967.133168][T23583] bond10: entered allmulticast mode [ 967.146639][T23583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4915'. [ 967.156219][T23583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4915'. [ 967.333507][T23550] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.362811][T23550] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.390716][T23550] bridge_slave_0: entered allmulticast mode [ 967.413819][T23550] bridge_slave_0: entered promiscuous mode [ 967.450310][T23550] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.469191][T23550] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.492207][T23550] bridge_slave_1: entered allmulticast mode [ 967.509884][T23550] bridge_slave_1: entered promiscuous mode [ 968.193080][T14879] Bluetooth: hci0: command tx timeout [ 968.487664][T23550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.522099][T23550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.622373][T23628] syzkaller0: entered promiscuous mode [ 968.634258][T23628] syzkaller0: entered allmulticast mode [ 968.656025][T23550] team0: Port device team_slave_0 added [ 968.677601][T23550] team0: Port device team_slave_1 added [ 968.797115][T23550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.818208][T23550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 968.890054][T23550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.908545][T23640] netlink: 'syz.3.4926': attribute type 1 has an invalid length. [ 968.962426][T23640] bond11: entered promiscuous mode [ 968.968704][T23640] 8021q: adding VLAN 0 to HW filter on device bond11 [ 968.984775][T23550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.992022][T23550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.020163][T23550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.047591][T23644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4926'. [ 969.056822][T23644] bond11: entered allmulticast mode [ 969.068482][T23646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4928'. [ 969.107479][T23642] tipc: Enabled bearer , priority 0 [ 969.127219][T23640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4926'. [ 969.144182][T23640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4926'. [ 969.188872][T23550] hsr_slave_0: entered promiscuous mode [ 969.203930][T23550] hsr_slave_1: entered promiscuous mode [ 969.210550][T23550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 969.219690][T23550] Cannot create hsr debugfs directory [ 969.225774][T23642] syzkaller0: entered promiscuous mode [ 969.231292][T23642] syzkaller0: entered allmulticast mode [ 969.241735][T23647] tipc: Resetting bearer [ 969.281448][T23641] tipc: Resetting bearer [ 969.340224][T23641] tipc: Disabling bearer [ 970.273735][T14879] Bluetooth: hci0: command tx timeout [ 970.388728][T23664] syzkaller0: entered promiscuous mode [ 970.400150][T23664] syzkaller0: entered allmulticast mode [ 970.687363][T23689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4936'. [ 972.363059][T14879] Bluetooth: hci0: command tx timeout [ 972.864276][T23550] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.005430][T23550] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.129176][T23550] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.239054][T23550] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.265359][T23696] tipc: Started in network mode [ 973.270328][T23696] tipc: Node identity a65d471d6f19, cluster identity 4711 [ 973.277993][T23696] tipc: Enabled bearer , priority 0 [ 973.296658][T23698] syzkaller0: entered promiscuous mode [ 973.309081][T23698] syzkaller0: entered allmulticast mode [ 973.336151][T23695] tipc: Disabling bearer [ 973.347678][T23698] tcf_pedit_act: 41 callbacks suppressed [ 973.347695][T23698] tc action pedit offset 64 out of bounds [ 973.359801][T23698] tc action pedit offset 64 out of bounds [ 973.365605][T23698] tc action pedit offset 64 out of bounds [ 973.371377][T23698] tc action pedit offset 64 out of bounds [ 973.377197][T23698] tc action pedit offset 64 out of bounds [ 973.382985][T23698] tc action pedit offset 64 out of bounds [ 973.388774][T23698] tc action pedit offset 64 out of bounds [ 973.394576][T23698] tc action pedit offset 64 out of bounds [ 973.400495][T23698] tc action pedit offset 64 out of bounds [ 973.406330][T23698] tc action pedit offset 64 out of bounds [ 973.412137][T23698] 0: reclassify loop, rule prio 0, protocol 800 [ 973.559893][T23550] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 973.709119][T23550] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 973.737565][T23550] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 973.787270][T23550] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 973.892508][T23710] netlink: 'syz.3.4944': attribute type 1 has an invalid length. [ 973.921217][T23710] bond12: entered promiscuous mode [ 973.932125][T23710] 8021q: adding VLAN 0 to HW filter on device bond12 [ 973.971232][T23710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4944'. [ 973.980595][T23710] bond12: entered allmulticast mode [ 973.991476][T23711] syzkaller0: entered promiscuous mode [ 973.997929][T23711] syzkaller0: entered allmulticast mode [ 974.004989][T23710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4944'. [ 974.015465][T23710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4944'. [ 974.155322][T23715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4946'. [ 974.195897][T23550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.210373][T23717] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4947'. [ 974.259645][T23550] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.313785][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.321416][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.397471][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.404945][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.433171][T14879] Bluetooth: hci0: command tx timeout [ 974.576043][T23726] tipc: Enabled bearer , priority 0 [ 974.630526][T23725] tipc: Disabling bearer [ 974.681131][T23550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 974.715968][T23550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 975.180001][T23550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.374865][T23550] veth0_vlan: entered promiscuous mode [ 975.411398][T23742] netlink: 'syz.3.4954': attribute type 1 has an invalid length. [ 975.471539][T23742] bond13: entered promiscuous mode [ 975.477995][T23742] 8021q: adding VLAN 0 to HW filter on device bond13 [ 975.498173][T23745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4954'. [ 975.507553][T23745] bond13: entered allmulticast mode [ 975.530489][T23550] veth1_vlan: entered promiscuous mode [ 975.580867][T23742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4954'. [ 975.636809][T23550] veth0_macvtap: entered promiscuous mode [ 975.655453][T23550] veth1_macvtap: entered promiscuous mode [ 975.678456][T23748] syzkaller0: entered promiscuous mode [ 975.690115][T23748] syzkaller0: entered allmulticast mode [ 975.781944][T23550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.793831][T23550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.806591][T23550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.817619][T23550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.831422][T23550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.844346][T23550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.855029][T23550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.865979][T23550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.878883][T23550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.903266][T23750] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4957'. [ 975.940715][T23550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.972915][T23550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.994432][T23550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.019007][T23756] batadv_slave_1: entered promiscuous mode [ 976.045872][T23755] batadv_slave_1: left promiscuous mode [ 976.066609][T23550] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.102693][T23550] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.113755][T23550] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.134923][T23550] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.819021][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.827633][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.949152][ T1309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.970454][ T1309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.330951][T23791] siw: device registration error -23 [ 977.476797][T23789] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4902'. [ 977.625987][T23786] syzkaller0: entered promiscuous mode [ 977.637276][T23786] syzkaller0: entered allmulticast mode [ 977.664210][T23798] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4968'. [ 980.863991][T23799] batadv_slave_1: entered promiscuous mode [ 980.896780][T23802] batadv_slave_1: left promiscuous mode [ 981.416962][T23829] siw: device registration error -23 [ 981.642379][T23822] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4976'. [ 981.877102][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 981.892097][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 981.903255][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 981.919593][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 981.933838][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 981.941455][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 982.657248][T23832] chnl_net:caif_netlink_parms(): no params data found [ 982.767906][ T32] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.841635][T23832] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.849219][T23832] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.857120][T23832] bridge_slave_0: entered allmulticast mode [ 982.867769][T23832] bridge_slave_0: entered promiscuous mode [ 982.907698][ T32] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.927150][T23856] syzkaller0: entered promiscuous mode [ 982.933300][T23856] syzkaller0: entered allmulticast mode [ 982.940899][T23832] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.948481][T23832] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.957229][T23832] bridge_slave_1: entered allmulticast mode [ 982.966189][T23832] bridge_slave_1: entered promiscuous mode [ 983.051989][ T32] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.115293][T23832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.129444][T23832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.145291][T23861] ax25_connect(): syz.0.4984 uses autobind, please contact jreuter@yaina.de [ 983.178155][ T32] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.233216][T23832] team0: Port device team_slave_0 added [ 983.248718][T23832] team0: Port device team_slave_1 added [ 983.322515][T23832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.332765][T23832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.360939][T23832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.373029][T23865] netlink: 'syz.0.4986': attribute type 1 has an invalid length. [ 983.401640][T23865] bond1: entered promiscuous mode [ 983.407486][T23865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 983.436868][T23832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 983.448453][T23832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.475987][T23832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.503140][T23865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4986'. [ 983.513293][T23865] bond1: entered allmulticast mode [ 983.672989][T23832] hsr_slave_0: entered promiscuous mode [ 983.680929][T23832] hsr_slave_1: entered promiscuous mode [ 983.828301][T23832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 983.836998][T23832] Cannot create hsr debugfs directory [ 984.021749][ T32] tipc: Left network mode [ 984.033160][ T5784] Bluetooth: hci1: command tx timeout [ 984.350994][T23824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 984.591670][T23889] ax25_connect(): syz.1.4992 uses autobind, please contact jreuter@yaina.de [ 984.660205][T23885] tipc: Started in network mode [ 984.683864][T23885] tipc: Node identity de041e9daafd, cluster identity 4711 [ 984.701625][T23885] tipc: Enabled bearer , priority 0 [ 984.873100][T23890] syzkaller0: entered promiscuous mode [ 984.883946][T23890] syzkaller0: entered allmulticast mode [ 984.905198][T23897] tipc: Resetting bearer [ 985.053130][T23883] tipc: Resetting bearer [ 985.089572][T23883] tipc: Disabling bearer [ 985.219594][T23905] syzkaller0: entered promiscuous mode [ 985.242239][T23905] syzkaller0: entered allmulticast mode [ 985.273957][T23907] syzkaller0: entered promiscuous mode [ 985.279505][T23907] syzkaller0: entered allmulticast mode [ 985.406675][T23902] tipc: Enabled bearer , priority 0 [ 985.453374][T23901] tipc: Resetting bearer [ 985.551422][T23901] tipc: Disabling bearer [ 986.101922][T23832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 986.118747][ T5784] Bluetooth: hci1: command tx timeout [ 986.134702][T23940] ax25_connect(): syz.0.5000 uses autobind, please contact jreuter@yaina.de [ 986.156308][T23832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 986.242232][ T32] hsr_slave_0: left promiscuous mode [ 986.268141][ T32] hsr_slave_1: left promiscuous mode [ 986.284771][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.298779][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.312294][ T32] bridge_slave_1: left allmulticast mode [ 986.328481][ T32] bridge_slave_1: left promiscuous mode [ 986.341448][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.360767][ T32] bridge_slave_0: left allmulticast mode [ 986.366883][ T32] bridge_slave_0: left promiscuous mode [ 986.373095][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.471990][ T32] bridge0: left allmulticast mode [ 986.486250][ T32] bridge0: left promiscuous mode [ 986.496985][ T32] veth1_macvtap: left promiscuous mode [ 986.507944][ T32] veth0_macvtap: left promiscuous mode [ 986.523237][ T32] veth1_vlan: left promiscuous mode [ 986.532090][ T32] veth0_vlan: left promiscuous mode [ 987.150212][ T32] bond13 (unregistering): Released all slaves [ 987.356589][ T32] bond12 (unregistering): Released all slaves [ 987.545179][ T32] bond11 (unregistering): Released all slaves [ 987.695733][ T32] bond10 (unregistering): Released all slaves [ 987.841171][ T32] bond9 (unregistering): Released all slaves [ 988.045198][ T32] bond8 (unregistering): Released all slaves [ 988.192245][ T32] bond7 (unregistering): Released all slaves [ 988.193228][ T5784] Bluetooth: hci1: command tx timeout [ 988.340677][ T32] bond6 (unregistering): Released all slaves [ 988.376644][ T32] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 988.391386][ T32] bridge4 (unregistering): left promiscuous mode [ 988.400519][ T32] bridge4 (unregistering): left allmulticast mode [ 988.589908][ T32] bond5 (unregistering): Released all slaves [ 988.615805][ T32] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 988.624710][ T32] bridge3 (unregistering): left promiscuous mode [ 988.822346][ T32] bond4 (unregistering): Released all slaves [ 988.849308][ T32] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 988.857583][ T32] bridge2 (unregistering): left promiscuous mode [ 989.038309][ T32] bond3 (unregistering): Released all slaves [ 989.064605][ T32] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 989.073274][ T32] bridge1 (unregistering): left promiscuous mode [ 989.265530][ T32] bond2 (unregistering): Released all slaves [ 989.315913][ T32] bond1 (unregistering): Released all slaves [ 989.863456][ T32] team0 (unregistering): Port device team_slave_1 removed [ 989.918386][ T32] team0 (unregistering): Port device team_slave_0 removed [ 989.980007][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.989548][ T32] bond_slave_1 (unregistering): left promiscuous mode [ 990.045979][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.057676][T14334] infiniband syz1: ib_query_port failed (-19) [ 990.064263][ T32] bond_slave_0 (unregistering): left promiscuous mode [ 990.273629][ T5784] Bluetooth: hci1: command tx timeout [ 990.413452][ T32] bond0 (unregistering): Released all slaves [ 990.510147][T23832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 990.618674][T23832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 990.807551][T23973] syzkaller0: entered promiscuous mode [ 990.837281][T23973] syzkaller0: entered allmulticast mode [ 990.872348][T23973] tipc: Enabled bearer , priority 0 [ 990.907761][T23972] tipc: Resetting bearer [ 991.025888][T23983] ax25_connect(): syz.2.5008 uses autobind, please contact jreuter@yaina.de [ 991.055919][T23972] tipc: Disabling bearer [ 991.469457][T23832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.588099][T23832] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.660840][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.668108][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.696278][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.703553][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.734477][T24007] tipc: Enabled bearer , priority 0 [ 991.764879][T24007] syzkaller0: entered promiscuous mode [ 991.770519][T24007] syzkaller0: entered allmulticast mode [ 991.837056][T24007] tipc: Resetting bearer [ 991.854866][T24006] tipc: Resetting bearer [ 991.902507][T24006] tipc: Disabling bearer [ 991.972002][T24012] syzkaller0: entered promiscuous mode [ 991.984789][T24012] syzkaller0: entered allmulticast mode [ 993.245263][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.346846][T24022] netlink: 'syz.1.5017': attribute type 1 has an invalid length. [ 994.371671][T24022] bond3: entered promiscuous mode [ 994.377214][T24022] 8021q: adding VLAN 0 to HW filter on device bond3 [ 994.389057][T24024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5017'. [ 994.399119][T24024] bond3: entered allmulticast mode [ 994.416026][T24028] tipc: Enabled bearer , priority 0 [ 994.506138][T24030] syzkaller0: entered promiscuous mode [ 994.512230][T24030] syzkaller0: entered allmulticast mode [ 994.541777][T24032] tipc: Resetting bearer [ 994.620782][T24025] tipc: Resetting bearer [ 994.705182][T24025] tipc: Disabling bearer [ 995.086076][T23832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.099373][T24056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5022'. [ 995.291122][T23832] veth0_vlan: entered promiscuous mode [ 995.399492][T23832] veth1_vlan: entered promiscuous mode [ 995.547296][T23832] veth0_macvtap: entered promiscuous mode [ 995.575721][T23832] veth1_macvtap: entered promiscuous mode [ 995.626878][T23832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.654976][T23832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.671078][T23832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.689683][T23832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.715011][T23832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.731779][T23832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.748460][T23832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.759720][T23832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.780136][T23832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.791223][T24070] netlink: 'syz.1.5025': attribute type 1 has an invalid length. [ 995.861482][T24070] bond4: entered promiscuous mode [ 995.870742][T24070] 8021q: adding VLAN 0 to HW filter on device bond4 [ 996.014724][T24071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5025'. [ 996.029763][T24071] bond4: entered allmulticast mode [ 996.110228][T24080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5025'. [ 996.132834][T23832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.162659][T23832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.183278][T23832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.211704][T23832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.233017][T23832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.313731][T23832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.324331][T23832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.334113][T23832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.343263][T23832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.390978][T24088] tipc: Enabled bearer , priority 0 [ 996.406726][T24088] syzkaller0: entered promiscuous mode [ 996.412270][T24088] syzkaller0: entered allmulticast mode [ 996.447502][T24088] tipc: Resetting bearer [ 996.463119][T24087] tipc: Resetting bearer [ 996.503921][T24087] tipc: Disabling bearer [ 997.008868][T24092] syzkaller0: entered promiscuous mode [ 997.014591][T24092] syzkaller0: entered allmulticast mode [ 999.370599][ T1309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.379110][ T1309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.545184][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.568951][T24117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5036'. [ 999.578279][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.073920][T24130] syzkaller0: entered promiscuous mode [ 1000.079468][T24130] syzkaller0: entered allmulticast mode [ 1000.542141][T24149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5045'. [ 1000.947963][T24160] tipc: Enabled bearer , priority 0 [ 1001.049841][T24160] syzkaller0: entered promiscuous mode [ 1001.060024][T24160] syzkaller0: entered allmulticast mode [ 1001.069182][T24160] tipc: Resetting bearer [ 1001.123223][T24159] tipc: Resetting bearer [ 1003.527582][T24159] tipc: Disabling bearer [ 1003.576838][T14477] tipc: Node number set to 1962483357 [ 1004.352558][T24228] tipc: Enabled bearer , priority 0 [ 1004.433266][T24228] syzkaller0: entered promiscuous mode [ 1004.441794][T24228] syzkaller0: entered allmulticast mode [ 1004.457353][T24228] tipc: Resetting bearer [ 1004.487600][T24227] tipc: Resetting bearer [ 1006.923867][T24227] tipc: Disabling bearer [ 1006.951069][T14477] tipc: Node number set to 3376695069 [ 1007.146172][T24265] tipc: Enabled bearer , priority 0 [ 1007.279056][T24265] syzkaller0: entered promiscuous mode [ 1007.292833][T24265] syzkaller0: entered allmulticast mode [ 1007.316277][T24265] tipc: Resetting bearer [ 1007.324444][T24267] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5067'. [ 1007.355934][T24264] tipc: Resetting bearer [ 1009.728301][T24264] tipc: Disabling bearer [ 1009.757557][T24280] tipc: Enabled bearer , priority 0 [ 1009.770481][T24279] tipc: Disabling bearer [ 1010.386700][T24308] syzkaller0: entered promiscuous mode [ 1010.392705][T24308] syzkaller0: entered allmulticast mode [ 1010.399831][T24303] tipc: Enabled bearer , priority 0 [ 1010.418241][T24306] netlink: 'syz.3.5076': attribute type 1 has an invalid length. [ 1010.433744][T24298] tipc: Resetting bearer [ 1012.691329][T24298] tipc: Disabling bearer [ 1012.700757][T24309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5076'. [ 1012.710150][T24309] wg0: entered promiscuous mode [ 1012.715125][T24309] wg0: entered allmulticast mode [ 1012.746984][T14477] tipc: Node number set to 1906753049 [ 1012.975140][T24336] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5080'. [ 1013.030773][T24339] tipc: Enabled bearer , priority 0 [ 1013.146662][T24339] syzkaller0: entered promiscuous mode [ 1013.158303][T24339] syzkaller0: entered allmulticast mode [ 1013.166551][T24339] tipc: Resetting bearer [ 1013.203783][T24344] tipc: Started in network mode [ 1013.223997][T24344] tipc: Node identity 5a4be5c74628, cluster identity 4711 [ 1013.231380][T24344] tipc: Enabled bearer , priority 0 [ 1013.248592][T24338] tipc: Resetting bearer [ 1015.364440][T24338] tipc: Disabling bearer [ 1015.386550][T24343] tipc: Disabling bearer [ 1015.430555][T24353] netlink: 'syz.0.5086': attribute type 1 has an invalid length. [ 1015.449981][T24353] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1015.473834][T24354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5086'. [ 1015.545141][T14336] tipc: Node number set to 476308935 [ 1015.569262][T24360] tipc: Enabling of bearer rejected, failed to enable media [ 1015.641506][T24364] syzkaller0: entered promiscuous mode [ 1015.664646][T24364] syzkaller0: entered allmulticast mode [ 1016.129156][T24382] tipc: Enabled bearer , priority 0 [ 1016.238735][T24382] syzkaller0: entered promiscuous mode [ 1016.249885][T24382] syzkaller0: entered allmulticast mode [ 1016.263349][T24382] tipc: Resetting bearer [ 1016.318852][T24389] netlink: 'syz.3.5098': attribute type 1 has an invalid length. [ 1016.326864][T24393] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5098'. [ 1016.342724][T24393] veth0_to_batadv: entered promiscuous mode [ 1016.348885][T24393] veth0_to_batadv: entered allmulticast mode [ 1016.385951][T24381] tipc: Resetting bearer [ 1018.737853][T24381] tipc: Disabling bearer [ 1018.748837][T24389] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5098'. [ 1018.762325][T24400] tipc: Enabling of bearer rejected, failed to enable media [ 1018.779468][T24402] syzkaller0: entered promiscuous mode [ 1018.788982][T24402] syzkaller0: entered allmulticast mode [ 1018.920417][T24408] syzkaller0: entered promiscuous mode [ 1018.926380][T24408] syzkaller0: entered allmulticast mode [ 1019.109620][T24434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5105'. [ 1021.381474][T24430] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5103'. [ 1021.418198][T24432] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1021.586830][T24454] syzkaller0: entered promiscuous mode [ 1021.592389][T24454] syzkaller0: entered allmulticast mode [ 1022.048624][T24456] syzkaller0: entered promiscuous mode [ 1022.066533][T24456] syzkaller0: entered allmulticast mode [ 1022.193410][T24473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5111'. [ 1023.801194][T24473] tipc: Enabled bearer , priority 10 [ 1023.929908][T24471] netlink: 'syz.1.5112': attribute type 1 has an invalid length. [ 1023.998982][T24471] bond7: entered promiscuous mode [ 1024.006767][T24471] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1026.331711][T24474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5112'. [ 1026.341256][T24474] bond7: entered allmulticast mode [ 1026.355056][T24471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5112'. [ 1026.370927][T24482] tipc: Enabling of bearer rejected, failed to enable media [ 1026.394206][T24484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5115'. [ 1026.408327][T24485] syzkaller0: entered promiscuous mode [ 1026.433324][T24485] syzkaller0: entered allmulticast mode [ 1026.571104][T24499] syzkaller0: entered promiscuous mode [ 1026.593048][T24499] syzkaller0: entered allmulticast mode [ 1027.053080][T24508] syzkaller0: entered promiscuous mode [ 1027.063689][T24508] syzkaller0: entered allmulticast mode [ 1027.275543][T24520] netlink: 'syz.2.5124': attribute type 1 has an invalid length. [ 1027.327164][T24520] bond1: entered promiscuous mode [ 1027.332726][T14330] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1027.339382][T24520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1027.361286][T24525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5126'. [ 1027.369180][T24520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5124'. [ 1027.380583][T24520] bond1: entered allmulticast mode [ 1027.389937][T24520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5124'. [ 1027.411270][T24522] syzkaller0: entered promiscuous mode [ 1027.429062][T24522] syzkaller0: entered allmulticast mode [ 1027.529244][T24528] syzkaller0: entered promiscuous mode [ 1027.535367][T24528] syzkaller0: entered allmulticast mode [ 1027.542716][T14330] usb 2-1: Using ep0 maxpacket: 8 [ 1027.551608][T14330] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1027.562032][T14330] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1027.572366][T14330] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1027.587782][T24530] syzkaller0: entered promiscuous mode [ 1027.593624][T24530] syzkaller0: entered allmulticast mode [ 1027.599313][T14330] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1027.624601][T14330] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1027.634303][T14330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.881740][T14330] usb 2-1: GET_CAPABILITIES returned 0 [ 1027.900089][T14330] usbtmc 2-1:16.0: can't read capabilities [ 1027.932777][T24540] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5131'. [ 1028.085557][T24544] syzkaller0: entered promiscuous mode [ 1028.122150][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1028.162383][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1028.171858][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1028.180977][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1028.190113][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1028.199210][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1028.211151][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1028.220307][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1028.229456][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1028.238576][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1028.247812][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1028.256913][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1028.266005][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1028.275094][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1028.284180][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1028.293311][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1028.366310][T14488] usb 2-1: USB disconnect, device number 47 [ 1028.367105][T24544] syzkaller0: entered allmulticast mode [ 1028.694437][T24534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1028.707696][T24552] netlink: 'syz.2.5135': attribute type 1 has an invalid length. [ 1028.810637][T24552] bond2: entered promiscuous mode [ 1028.816677][T24552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1028.828867][T24554] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5135'. [ 1028.872980][T24554] bond2: entered allmulticast mode [ 1028.956817][T24557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5136'. [ 1028.963654][T24554] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5135'. [ 1029.201995][T24563] syzkaller0: entered promiscuous mode [ 1029.222818][T24563] syzkaller0: entered allmulticast mode [ 1029.344930][T24565] syzkaller0: entered promiscuous mode [ 1029.372999][T24565] syzkaller0: entered allmulticast mode [ 1030.122281][T24585] netlink: 'syz.0.5147': attribute type 1 has an invalid length. [ 1030.975747][T24585] bond3: entered promiscuous mode [ 1030.981208][T24585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1031.122730][T24587] bond3: entered allmulticast mode [ 1031.194678][T24597] syzkaller0: entered promiscuous mode [ 1031.200241][T24597] syzkaller0: entered allmulticast mode [ 1031.573215][T24609] syzkaller0: entered promiscuous mode [ 1031.578832][T24609] syzkaller0: entered allmulticast mode [ 1031.640213][T24613] __nla_validate_parse: 3 callbacks suppressed [ 1031.640231][T24613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5156'. [ 1031.886943][T24622] netlink: 'syz.3.5160': attribute type 1 has an invalid length. [ 1031.913685][T24622] bond2: entered promiscuous mode [ 1031.919148][T24622] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1031.927299][T24624] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5161'. [ 1031.949364][T24622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5160'. [ 1031.958547][T24622] bond2: entered allmulticast mode [ 1031.968503][T24622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5160'. [ 1032.797522][T24649] netlink: 'syz.2.5170': attribute type 1 has an invalid length. [ 1032.834088][T24649] bond3: entered promiscuous mode [ 1032.840018][T24649] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1032.909834][T24649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5170'. [ 1032.938138][T24649] bond3: entered allmulticast mode [ 1032.945661][T24653] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5172'. [ 1032.962391][T24649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5170'. [ 1034.066557][T24693] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5183'. [ 1034.079129][T24694] netlink: 'syz.2.5182': attribute type 1 has an invalid length. [ 1034.102944][T14336] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1034.117993][T24694] bond5: entered promiscuous mode [ 1034.136179][T24694] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1034.153285][T24697] syzkaller0: entered promiscuous mode [ 1034.158895][T24697] syzkaller0: entered allmulticast mode [ 1034.166661][T24696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5182'. [ 1034.178267][T24696] bond5: entered allmulticast mode [ 1034.243141][T24694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5182'. [ 1034.298413][T14336] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1034.321152][T14336] usb 1-1: not running at top speed; connect to a high speed hub [ 1034.350400][T14336] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1034.373499][T14336] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 1034.385211][T14336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.398884][T14336] usb 1-1: Product: syz [ 1034.403412][T14336] usb 1-1: Manufacturer: syz [ 1034.409034][T14336] usb 1-1: SerialNumber: syz [ 1035.973596][T24728] tipc: Enabled bearer , priority 10 [ 1036.141817][T24735] netlink: 'syz.2.5192': attribute type 1 has an invalid length. [ 1036.200354][T24735] bond6: entered promiscuous mode [ 1036.209739][T24735] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1036.244654][T24739] bond6: entered allmulticast mode [ 1036.408724][T24736] syzkaller0: entered promiscuous mode [ 1036.419237][T24736] syzkaller0: entered allmulticast mode [ 1036.968527][T14336] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1037.035980][T14336] usb 1-1: USB disconnect, device number 33 [ 1037.170973][T24759] udevd[24759]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1038.988063][T24757] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1039.126354][T24763] syzkaller0: entered promiscuous mode [ 1039.154427][T24763] syzkaller0: entered allmulticast mode [ 1039.421950][T24778] netlink: 'syz.0.5205': attribute type 1 has an invalid length. [ 1039.531732][T24778] bond5: entered promiscuous mode [ 1039.540897][T24778] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1039.592459][T24780] __nla_validate_parse: 4 callbacks suppressed [ 1039.592478][T24780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5205'. [ 1039.613001][T24780] bond5: entered allmulticast mode [ 1039.699675][T24780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5205'. [ 1039.731202][T24787] tipc: Enabled bearer , priority 0 [ 1039.820040][T24787] syzkaller0: entered promiscuous mode [ 1039.838370][T24787] syzkaller0: entered allmulticast mode [ 1039.852374][T24787] tipc: Resetting bearer [ 1039.881280][T24786] tipc: Resetting bearer [ 1041.400172][T14879] Bluetooth: hci3: command 0x0406 tx timeout [ 1042.222969][T24786] tipc: Disabling bearer [ 1042.724418][T24823] netlink: 'syz.3.5218': attribute type 1 has an invalid length. [ 1042.765900][T24823] bond5: entered promiscuous mode [ 1042.771404][T24823] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1042.790384][T24824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5218'. [ 1042.837763][T24824] bond5: entered allmulticast mode [ 1042.904089][T24823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5218'. [ 1044.981180][T24855] netlink: 'syz.0.5232': attribute type 1 has an invalid length. [ 1045.033687][T24855] bond6: entered promiscuous mode [ 1045.039240][T24855] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1045.065623][T24855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5232'. [ 1045.075168][T24855] bond6: entered allmulticast mode [ 1045.112054][T24855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5232'. [ 1045.278452][T24865] tipc: Enabled bearer , priority 0 [ 1045.307649][T24867] syzkaller0: entered promiscuous mode [ 1045.317602][T24867] syzkaller0: entered allmulticast mode [ 1045.335295][T24865] tipc: Resetting bearer [ 1045.473044][T24864] tipc: Disabling bearer [ 1045.664097][T24883] syzkaller0: entered promiscuous mode [ 1045.683752][T24883] syzkaller0: entered allmulticast mode [ 1045.764920][T24888] loop8: detected capacity change from 0 to 8 [ 1045.805998][T24888] Dev loop8: unable to read RDB block 8 [ 1045.829677][T24888] loop8: unable to read partition table [ 1045.838552][T24888] loop8: partition table beyond EOD, truncated [ 1045.847875][T24888] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1046.145656][T24897] syzkaller0: entered promiscuous mode [ 1046.151223][T24897] syzkaller0: entered allmulticast mode [ 1046.266881][T24903] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1046.298386][T24903] CIFS mount error: No usable UNC path provided in device string! [ 1046.298386][T24903] [ 1046.312409][T24903] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1046.415807][T24907] tipc: Enabled bearer , priority 0 [ 1046.457918][T24907] tipc: Resetting bearer [ 1046.519323][T24904] tipc: Disabling bearer [ 1046.584229][T24916] syzkaller0: entered promiscuous mode [ 1046.589848][T24916] syzkaller0: entered allmulticast mode [ 1046.752934][T24062] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 1046.962217][T24062] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.976692][T24062] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 1046.986474][T24062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.996414][T24062] usb 1-1: Product: syz [ 1047.001952][T24062] usb 1-1: Manufacturer: syz [ 1047.008708][T24931] syzkaller0: entered promiscuous mode [ 1047.019000][T24931] syzkaller0: entered allmulticast mode [ 1047.025007][T24062] usb 1-1: SerialNumber: syz [ 1047.102838][T23805] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1047.242182][T24062] usb 1-1: selecting invalid altsetting 1 [ 1047.286984][T23805] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1047.306051][T23805] usb 2-1: not running at top speed; connect to a high speed hub [ 1047.330968][T23805] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1047.379149][T23805] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 1047.398620][T23805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.418506][T23805] usb 2-1: Product: syz [ 1047.427047][T23805] usb 2-1: Manufacturer: syz [ 1047.432316][T23805] usb 2-1: SerialNumber: syz [ 1047.440883][T24062] LME2510(C): Firmware Status: 1a 03 34 00 32 00 [ 1047.441027][T24062] dvb_usb_lmedm04: probe of 1-1:2.0 failed with error -22 [ 1047.483509][T24944] syzkaller0: entered promiscuous mode [ 1047.499367][T24944] syzkaller0: entered allmulticast mode [ 1047.661015][T14489] usb 1-1: USB disconnect, device number 34 [ 1049.483040][T23387] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1049.543706][T24962] syzkaller0: entered promiscuous mode [ 1049.549346][T24962] syzkaller0: entered allmulticast mode [ 1049.693602][T23387] usb 4-1: Using ep0 maxpacket: 8 [ 1049.711040][T23387] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1049.722766][T23387] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1049.734942][T23387] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1049.750581][T23387] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1049.764184][T23387] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1049.773648][T23387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.846390][ T28] audit: type=1800 audit(1776886958.528:3): pid=24968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5280" name="file0" dev="overlay" ino=587 res=0 errno=0 [ 1049.988879][T23387] usb 4-1: GET_CAPABILITIES returned 0 [ 1049.996946][T23387] usbtmc 4-1:16.0: can't read capabilities [ 1050.007153][T24974] random: crng reseeded on system resumption [ 1050.168804][T23805] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1050.225724][T14336] usb 4-1: USB disconnect, device number 47 [ 1050.252426][T23805] usb 2-1: USB disconnect, device number 48 [ 1051.218411][T25007] syzkaller0: entered promiscuous mode [ 1051.247363][T25007] syzkaller0: entered allmulticast mode [ 1051.562849][T25022] tipc: Enabled bearer , priority 0 [ 1051.748586][T25022] syzkaller0: entered promiscuous mode [ 1051.780863][T25022] syzkaller0: entered allmulticast mode [ 1051.803668][T25022] tipc: Resetting bearer [ 1051.889393][T25021] tipc: Resetting bearer [ 1053.153986][T25040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5298'. [ 1054.771539][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.670615][T14336] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1055.993750][T14336] usb 4-1: Using ep0 maxpacket: 8 [ 1056.017287][T14336] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1056.035478][T14336] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1056.049507][T14336] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1056.138828][T14336] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1056.168990][T14336] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1056.181062][T14336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.552638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 1056.622968][T14336] usb 4-1: GET_CAPABILITIES returned 0 [ 1056.636852][T14336] usbtmc 4-1:16.0: can't read capabilities [ 1056.843626][T14477] usb 4-1: USB disconnect, device number 48 [ 1058.520965][T25021] tipc: Disabling bearer [ 1058.640878][T25089] syzkaller0: entered promiscuous mode [ 1058.646623][T25089] syzkaller0: entered allmulticast mode [ 1059.254539][T25114] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1059.263592][T25114] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1059.272148][T25114] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1059.615509][T14336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1059.701496][T25120] syzkaller0: entered promiscuous mode [ 1059.855296][T25120] syzkaller0: entered allmulticast mode [ 1059.888263][T14336] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1060.136891][T25121] syzkaller0: entered promiscuous mode [ 1060.147990][T25121] syzkaller0: entered allmulticast mode [ 1060.357551][T25124] fido_id[25124]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1060.495582][T25130] syzkaller0: entered promiscuous mode [ 1060.501598][T25130] syzkaller0: entered allmulticast mode [ 1060.509043][T25129] syzkaller0: entered promiscuous mode [ 1060.517720][T25129] syzkaller0: entered allmulticast mode [ 1060.890142][T25145] syzkaller0: entered promiscuous mode [ 1060.902762][T25145] syzkaller0: entered allmulticast mode [ 1061.286283][T25157] syzkaller0: entered promiscuous mode [ 1061.291841][T25157] syzkaller0: entered allmulticast mode [ 1061.671604][T25163] syzkaller0: entered promiscuous mode [ 1061.683965][T25163] syzkaller0: entered allmulticast mode [ 1061.751486][T25169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5336'. [ 1062.602667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1063.765720][T25189] syzkaller0: entered promiscuous mode [ 1063.772798][T25189] syzkaller0: entered allmulticast mode [ 1063.796263][T25187] batadv_slave_1: entered promiscuous mode [ 1063.862789][T25187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5340'. [ 1063.872086][T25187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1064.042986][T25187] batadv_slave_1 (unregistering): left promiscuous mode [ 1064.050337][T25187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.427945][T25208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5347'. [ 1065.162606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 1065.442596][ C0] sched: RT throttling activated [ 1066.248830][T25220] syzkaller0: entered promiscuous mode [ 1066.256524][T25220] syzkaller0: entered allmulticast mode [ 1066.369501][T25218] syzkaller0: entered promiscuous mode [ 1066.383242][T25218] syzkaller0: entered allmulticast mode [ 1067.264694][T25252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5361'. [ 1067.777925][T25263] syzkaller0: entered promiscuous mode [ 1067.803801][T25263] syzkaller0: entered allmulticast mode [ 1068.079723][T25272] syzkaller0: entered promiscuous mode [ 1068.092810][T25272] syzkaller0: entered allmulticast mode [ 1068.594550][T25289] batadv_slave_1: entered promiscuous mode [ 1068.647590][T25289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5374'. [ 1068.716549][T25289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1068.978134][T25289] batadv_slave_1 (unregistering): left promiscuous mode [ 1068.996863][T25289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.632278][T25320] syzkaller0: entered promiscuous mode [ 1069.638481][T25320] syzkaller0: entered allmulticast mode [ 1069.773886][T25321] tipc: Enabled bearer , priority 0 [ 1069.821028][T25321] tipc: Resetting bearer [ 1069.874440][T25318] tipc: Disabling bearer [ 1069.906803][T25333] batadv_slave_1: entered promiscuous mode [ 1069.921248][T25333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5385'. [ 1069.939980][T25333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1070.281645][T25342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5386'. [ 1071.988387][T25333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1072.102932][T25334] syzkaller0: entered promiscuous mode [ 1072.108491][T25334] syzkaller0: entered allmulticast mode [ 1072.192697][T14879] Bluetooth: hci4: command 0x0406 tx timeout [ 1072.678552][T23387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1072.911401][T23387] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1073.277973][T25359] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1073.303901][T25359] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1073.312400][T25359] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1073.414725][T25366] fido_id[25366]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1073.585757][T25372] tipc: Enabled bearer , priority 0 [ 1073.603402][T25372] syzkaller0: entered promiscuous mode [ 1073.611506][T25372] syzkaller0: entered allmulticast mode [ 1073.685328][T25370] syzkaller0: entered promiscuous mode [ 1073.708533][T25370] syzkaller0: entered allmulticast mode [ 1074.027206][T25382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5396'. [ 1074.986416][T25371] tipc: Resetting bearer [ 1075.651272][T25371] tipc: Disabling bearer [ 1075.872659][T25396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5399'. [ 1075.973283][T25401] syzkaller0: entered promiscuous mode [ 1075.992418][T25401] syzkaller0: entered allmulticast mode [ 1076.510380][T25417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5406'. [ 1078.305847][T25426] syzkaller0: entered promiscuous mode [ 1078.318933][T25426] syzkaller0: entered allmulticast mode [ 1078.389014][T25429] tipc: Enabled bearer , priority 0 [ 1078.397430][T25429] syzkaller0: entered promiscuous mode [ 1078.424526][T25429] syzkaller0: entered allmulticast mode [ 1078.504864][T25435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5412'. [ 1078.683971][T25438] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1078.781611][T25438] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1079.406727][T25423] tipc: Resetting bearer [ 1079.574177][T25423] tipc: Disabling bearer [ 1079.617886][T25446] tipc: Enabling of bearer rejected, failed to enable media [ 1080.005263][T25455] syzkaller0: entered promiscuous mode [ 1080.011614][T25455] syzkaller0: entered allmulticast mode [ 1080.096198][T25461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5417'. [ 1082.044361][T25477] syzkaller0: entered promiscuous mode [ 1082.062816][T25477] syzkaller0: entered allmulticast mode [ 1082.246773][T25484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5423'. [ 1082.413746][T22990] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 1082.614647][T25495] tipc: Enabled bearer , priority 0 [ 1082.744673][T25498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5427'. [ 1084.015963][T22990] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1084.335676][T25495] syzkaller0: entered promiscuous mode [ 1084.341244][T25495] syzkaller0: entered allmulticast mode [ 1084.356280][T25495] tipc: Resetting bearer [ 1084.367780][T22990] usb 3-1: config 255 has an invalid interface number: 2 but max is 1 [ 1084.395549][T22990] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.426411][T22990] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 2 [ 1084.453009][T22990] usb 3-1: config 255 has no interface number 0 [ 1084.460515][T22990] usb 3-1: config 255 interface 2 has no altsetting 0 [ 1084.481977][T22990] usb 3-1: string descriptor 0 read error: -22 [ 1084.496068][T22990] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=1e.2d [ 1084.512734][T22990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.565052][T22990] as10x_usb: device has been detected [ 1084.571302][T22990] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1084.612412][ T11] tipc: Resetting bearer [ 1084.646459][T25494] tipc: Resetting bearer [ 1084.670816][T22990] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1084.844146][T22990] as10x_usb: error during firmware upload part1 [ 1084.858198][T22990] Registered device Abilis Systems DVB-Titan [ 1085.701599][T14336] usb 3-1: USB disconnect, device number 52 [ 1085.744801][T14336] Unregistered device Abilis Systems DVB-Titan [ 1085.746534][T14336] as10x_usb: device has been disconnected [ 1087.637624][T25494] tipc: Disabling bearer [ 1087.784272][T25534] syzkaller0: entered promiscuous mode [ 1087.789844][T25534] syzkaller0: entered allmulticast mode [ 1088.002910][T25538] syzkaller0: entered promiscuous mode [ 1088.008647][T25538] syzkaller0: entered allmulticast mode [ 1088.524383][T25558] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1088.583295][T25558] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1089.363171][T25566] tipc: Enabled bearer , priority 0 [ 1089.400116][T25561] syzkaller0: entered promiscuous mode [ 1089.424548][T25561] syzkaller0: entered allmulticast mode [ 1089.457976][T25561] tipc: Resetting bearer [ 1089.507946][T25560] tipc: Resetting bearer [ 1089.545260][T25560] tipc: Disabling bearer [ 1089.733807][T25571] syzkaller0: entered promiscuous mode [ 1089.754269][T25571] syzkaller0: entered allmulticast mode [ 1092.535961][T25617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5456'. [ 1092.606968][T14879] Bluetooth: hci0: command 0x0406 tx timeout [ 1092.954187][T25627] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1092.977207][T25627] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1093.077660][T25620] syzkaller0: entered promiscuous mode [ 1093.123285][T25620] syzkaller0: entered allmulticast mode [ 1093.245899][T25624] syzkaller0: entered promiscuous mode [ 1093.436080][T25624] syzkaller0: entered allmulticast mode [ 1093.819680][T25636] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5463'. [ 1093.852095][T25636] syzkaller0: entered promiscuous mode [ 1093.870128][T25636] syzkaller0: entered allmulticast mode [ 1094.033953][T25647] tipc: Enabled bearer , priority 0 [ 1094.102178][T25647] syzkaller0: entered promiscuous mode [ 1094.124049][T25647] syzkaller0: entered allmulticast mode [ 1094.148828][T25647] tipc: Resetting bearer [ 1094.178612][T25646] tipc: Resetting bearer [ 1097.519666][T25646] tipc: Disabling bearer [ 1097.555534][T25656] syzkaller0: entered promiscuous mode [ 1097.561149][T25656] syzkaller0: entered allmulticast mode [ 1097.577236][T25663] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.586779][T25663] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.597826][T25663] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.606832][T25663] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1100.069982][T25667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5469'. [ 1100.241329][T25688] tipc: Enabled bearer , priority 0 [ 1100.296609][T25688] syzkaller0: entered promiscuous mode [ 1100.302168][T25688] syzkaller0: entered allmulticast mode [ 1100.308737][T25688] tipc: Resetting bearer [ 1100.321009][T25689] tipc: Enabled bearer , priority 0 [ 1100.339301][T25694] syzkaller0: entered promiscuous mode [ 1100.345131][T25694] syzkaller0: entered allmulticast mode [ 1100.395025][T25684] tipc: Resetting bearer [ 1100.756705][ C1] ------------[ cut here ]------------ [ 1100.762779][ C1] ODEBUG: free active (active state 0) object: ffff88805d766090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 1100.776276][ C1] WARNING: CPU: 1 PID: 25684 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 1100.786491][ C1] Modules linked in: [ 1100.790471][ C1] CPU: 1 PID: 25684 Comm: syz.0.5477 Not tainted syzkaller #0 [ 1100.798028][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1100.808189][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 1100.814684][ C1] Code: 4c 8b 4d 00 48 c7 c7 20 98 1c 8b 48 c7 c6 80 94 1c 8b 48 c7 c2 a0 99 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 de 83 1f fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 13 f6 59 [ 1100.834411][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00010296 [ 1100.840542][ C1] RAX: 4e432644f8ca8600 RBX: ffffffff975390f8 RCX: ffff888026cb9e00 [ 1100.848638][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1100.856712][ C1] RBP: ffffffff8accac60 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 1100.864819][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff88805d766200 [ 1100.872884][ C1] R13: ffffffff897afb80 R14: ffff88805d766000 R15: ffff88805d766090 [ 1100.880909][ C1] FS: 0000555582fdb500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1100.889958][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1100.896640][ C1] CR2: 00007fdc211e9f00 CR3: 000000002e771000 CR4: 00000000003506e0 [ 1100.904736][ C1] Call Trace: [ 1100.908088][ C1] [ 1100.910993][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 1100.916500][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 1100.921705][ C1] __kmem_cache_free+0xba/0x1e0 [ 1100.926702][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 1100.931689][ C1] call_timer_fn+0x189/0x540 [ 1100.936383][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1100.941471][ C1] ? call_timer_fn+0xd2/0x540 [ 1100.946268][ C1] ? __run_timers+0x800/0x800 [ 1100.951012][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1100.956341][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1100.961612][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1100.966749][ C1] __run_timers+0x542/0x800 [ 1100.971334][ C1] ? detach_timer+0x2b0/0x2b0 [ 1100.976141][ C1] ? lock_chain_count+0x20/0x20 [ 1100.981076][ C1] run_timer_softirq+0x67/0xf0 [ 1100.985986][ C1] handle_softirqs+0x280/0x820 [ 1100.990827][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1100.995731][ C1] ? do_softirq+0x1a0/0x1a0 [ 1101.000301][ C1] __irq_exit_rcu+0xd3/0x190 [ 1101.004991][ C1] ? irq_exit_rcu+0x20/0x20 [ 1101.009560][ C1] irq_exit_rcu+0x9/0x20 [ 1101.013922][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1101.019625][ C1] [ 1101.022662][ C1] [ 1101.025643][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1101.031769][ C1] RIP: 0010:lockdep_unregister_key+0x50b/0x5b0 [ 1101.038052][ C1] Code: 54 17 91 48 c7 c6 20 d7 68 81 e8 40 2a 08 00 e8 3b 3d 08 00 e9 3d fc ff ff e8 71 74 1d 09 41 f7 c4 00 02 00 00 74 d1 fb 84 db <75> d0 eb e1 0f 0b 31 db eb 88 0f 0b e9 e4 fe ff ff e8 4f 73 1d 09 [ 1101.057830][ C1] RSP: 0018:ffffc90004ac78a0 EFLAGS: 00000246 [ 1101.064096][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 4e432644f8ca8600 [ 1101.072127][ C1] RDX: 0000000000000001 RSI: ffffffff8acad6c0 RDI: ffffffff8b1c8e60 [ 1101.080213][ C1] RBP: ffffc90004ac7980 R08: ffffffff91197127 R09: 1ffffffff2232e24 [ 1101.088295][ C1] R10: dffffc0000000000 R11: fffffbfff2232e25 R12: 0000000000000207 [ 1101.096402][ C1] R13: ffffffff90bc9fe0 R14: ffff88805ab53299 R15: 1ffff92000958f18 [ 1101.104594][ C1] ? lockdep_reset_lock+0x350/0x350 [ 1101.109852][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1101.115597][ C1] ? __kmem_cache_free+0xba/0x1e0 [ 1101.120757][ C1] ? pfifo_fast_reset+0xec0/0xec0 [ 1101.125906][ C1] __qdisc_destroy+0x128/0x3b0 [ 1101.130762][ C1] dev_shutdown+0x96/0x440 [ 1101.135469][ C1] unregister_netdevice_many_notify+0x8e0/0x1900 [ 1101.141962][ C1] ? unregister_netdevice_many+0x20/0x20 [ 1101.147796][ C1] ? mark_lock+0x94/0x320 [ 1101.152279][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1101.158392][ C1] ? lock_chain_count+0x20/0x20 [ 1101.163384][ C1] unregister_netdevice_queue+0x32c/0x370 [ 1101.169166][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1101.175179][ C1] ? list_netdevice+0x730/0x730 [ 1101.180103][ C1] __tun_detach+0xd45/0x1500 [ 1101.184832][ C1] ? tun_chr_open+0x510/0x510 [ 1101.189570][ C1] tun_chr_close+0x10d/0x1c0 [ 1101.194297][ C1] __fput+0x234/0x970 [ 1101.198359][ C1] task_work_run+0x1d4/0x260 [ 1101.203070][ C1] ? task_work_cancel+0x220/0x220 [ 1101.208201][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1101.213787][ C1] exit_to_user_mode_loop+0xe6/0x110 [ 1101.219146][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1101.224795][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1101.230302][ C1] do_syscall_64+0x61/0xa0 [ 1101.234815][ C1] ? clear_bhb_loop+0x40/0x90 [ 1101.239555][ C1] ? clear_bhb_loop+0x40/0x90 [ 1101.244396][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1101.250355][ C1] RIP: 0033:0x7f794fd9c819 [ 1101.254978][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.274700][ C1] RSP: 002b:00007ffff26a2a88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1101.283239][ C1] RAX: 0000000000000000 RBX: 00007f7950017da0 RCX: 00007f794fd9c819 [ 1101.291457][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1101.299554][ C1] RBP: 00007f7950017da0 R08: 00007f7950016038 R09: 0000000000000000 [ 1101.307639][ C1] R10: 00000000003fec28 R11: 0000000000000246 R12: 000000000010ccc0 [ 1101.315733][ C1] R13: 00007f795001609c R14: 000000000010ca1e R15: 00007f7950016090 [ 1101.323826][ C1] [ 1101.326909][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1101.334329][ C1] CPU: 1 PID: 25684 Comm: syz.0.5477 Not tainted syzkaller #0 [ 1101.341840][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1101.351963][ C1] Call Trace: [ 1101.355264][ C1] [ 1101.358141][ C1] dump_stack_lvl+0x18c/0x250 [ 1101.362882][ C1] ? show_regs_print_info+0x20/0x20 [ 1101.368128][ C1] ? load_image+0x420/0x420 [ 1101.372695][ C1] panic+0x2dc/0x730 [ 1101.376624][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1101.381188][ C1] __warn+0x2e0/0x470 [ 1101.385219][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1101.391105][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1101.396896][ C1] report_bug+0x2be/0x4f0 [ 1101.401285][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1101.407093][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1101.412870][ C1] ? debug_check_no_obj_freed+0x448/0x540 [ 1101.418655][ C1] handle_bug+0xcf/0x120 [ 1101.422920][ C1] exc_invalid_op+0x1a/0x50 [ 1101.427491][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1101.432500][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 1101.438922][ C1] Code: 4c 8b 4d 00 48 c7 c7 20 98 1c 8b 48 c7 c6 80 94 1c 8b 48 c7 c2 a0 99 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 de 83 1f fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 13 f6 59 [ 1101.458582][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00010296 [ 1101.464699][ C1] RAX: 4e432644f8ca8600 RBX: ffffffff975390f8 RCX: ffff888026cb9e00 [ 1101.472887][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1101.480893][ C1] RBP: ffffffff8accac60 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 1101.488910][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff88805d766200 [ 1101.497009][ C1] R13: ffffffff897afb80 R14: ffff88805d766000 R15: ffff88805d766090 [ 1101.505020][ C1] ? rose_transmit_link+0x740/0x740 [ 1101.510292][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 1101.515729][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 1101.520903][ C1] __kmem_cache_free+0xba/0x1e0 [ 1101.525824][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 1101.530827][ C1] call_timer_fn+0x189/0x540 [ 1101.535477][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1101.540630][ C1] ? call_timer_fn+0xd2/0x540 [ 1101.545437][ C1] ? __run_timers+0x800/0x800 [ 1101.550172][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1101.555498][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1101.560736][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1101.565900][ C1] __run_timers+0x542/0x800 [ 1101.570453][ C1] ? detach_timer+0x2b0/0x2b0 [ 1101.575178][ C1] ? lock_chain_count+0x20/0x20 [ 1101.580172][ C1] run_timer_softirq+0x67/0xf0 [ 1101.584995][ C1] handle_softirqs+0x280/0x820 [ 1101.589822][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1101.594757][ C1] ? do_softirq+0x1a0/0x1a0 [ 1101.599348][ C1] __irq_exit_rcu+0xd3/0x190 [ 1101.604010][ C1] ? irq_exit_rcu+0x20/0x20 [ 1101.608590][ C1] irq_exit_rcu+0x9/0x20 [ 1101.612863][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1101.618535][ C1] [ 1101.621493][ C1] [ 1101.624454][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1101.630471][ C1] RIP: 0010:lockdep_unregister_key+0x50b/0x5b0 [ 1101.636656][ C1] Code: 54 17 91 48 c7 c6 20 d7 68 81 e8 40 2a 08 00 e8 3b 3d 08 00 e9 3d fc ff ff e8 71 74 1d 09 41 f7 c4 00 02 00 00 74 d1 fb 84 db <75> d0 eb e1 0f 0b 31 db eb 88 0f 0b e9 e4 fe ff ff e8 4f 73 1d 09 [ 1101.656391][ C1] RSP: 0018:ffffc90004ac78a0 EFLAGS: 00000246 [ 1101.662487][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 4e432644f8ca8600 [ 1101.670486][ C1] RDX: 0000000000000001 RSI: ffffffff8acad6c0 RDI: ffffffff8b1c8e60 [ 1101.678483][ C1] RBP: ffffc90004ac7980 R08: ffffffff91197127 R09: 1ffffffff2232e24 [ 1101.686506][ C1] R10: dffffc0000000000 R11: fffffbfff2232e25 R12: 0000000000000207 [ 1101.694511][ C1] R13: ffffffff90bc9fe0 R14: ffff88805ab53299 R15: 1ffff92000958f18 [ 1101.702524][ C1] ? lockdep_reset_lock+0x350/0x350 [ 1101.707762][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1101.713424][ C1] ? __kmem_cache_free+0xba/0x1e0 [ 1101.718480][ C1] ? pfifo_fast_reset+0xec0/0xec0 [ 1101.723546][ C1] __qdisc_destroy+0x128/0x3b0 [ 1101.728374][ C1] dev_shutdown+0x96/0x440 [ 1101.732934][ C1] unregister_netdevice_many_notify+0x8e0/0x1900 [ 1101.739319][ C1] ? unregister_netdevice_many+0x20/0x20 [ 1101.744990][ C1] ? mark_lock+0x94/0x320 [ 1101.749357][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1101.755366][ C1] ? lock_chain_count+0x20/0x20 [ 1101.760247][ C1] unregister_netdevice_queue+0x32c/0x370 [ 1101.765991][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1101.771912][ C1] ? list_netdevice+0x730/0x730 [ 1101.776798][ C1] __tun_detach+0xd45/0x1500 [ 1101.781429][ C1] ? tun_chr_open+0x510/0x510 [ 1101.786140][ C1] tun_chr_close+0x10d/0x1c0 [ 1101.790765][ C1] __fput+0x234/0x970 [ 1101.794784][ C1] task_work_run+0x1d4/0x260 [ 1101.799434][ C1] ? task_work_cancel+0x220/0x220 [ 1101.804543][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1101.810044][ C1] exit_to_user_mode_loop+0xe6/0x110 [ 1101.815372][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1101.820948][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1101.826473][ C1] do_syscall_64+0x61/0xa0 [ 1101.830932][ C1] ? clear_bhb_loop+0x40/0x90 [ 1101.835652][ C1] ? clear_bhb_loop+0x40/0x90 [ 1101.840492][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1101.846453][ C1] RIP: 0033:0x7f794fd9c819 [ 1101.850921][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.870569][ C1] RSP: 002b:00007ffff26a2a88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1101.879109][ C1] RAX: 0000000000000000 RBX: 00007f7950017da0 RCX: 00007f794fd9c819 [ 1101.887143][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1101.895139][ C1] RBP: 00007f7950017da0 R08: 00007f7950016038 R09: 0000000000000000 [ 1101.903139][ C1] R10: 00000000003fec28 R11: 0000000000000246 R12: 000000000010ccc0 [ 1101.911309][ C1] R13: 00007f795001609c R14: 000000000010ca1e R15: 00007f7950016090 [ 1101.919319][ C1] [ 1101.922931][ C1] Kernel Offset: disabled [ 1101.927451][ C1] Rebooting in 86400 seconds..