last executing test programs: 1.760820477s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 1.667079111s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x90) 1.580655255s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa200000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xff, 0x2, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/161}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1d, 0x3, 0x3}, {0x0, 0x0, 0xfd}, {}, {}, {0x6}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe72}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x29, 0x7d}, [@call={0x1c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_es_lookup_extent_enter\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000180)='percpu_free_percpu\x00'}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r5, &(0x7f0000000980), 0x12) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'veth1_macvtap\x00', 0x8000}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c}, 0x48) 1.530044813s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f900001ab703000008000000b704000000001500850000003300000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.518791464s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x0, 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000020c0)=@base={0x5, 0x0, 0x0, 0x0, 0x4}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) openat$cgroup_pressure(r0, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) 1.429825038s ago: executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x4, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 1.365050988s ago: executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x93, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000540)='ext4_ext_convert_to_initialized_enter\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x435a) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) ioctl$TUNSETOFFLOAD(r6, 0x541b, 0x2000ff00) 783.452628ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 781.497978ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000d007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) 550.346635ms ago: executing program 1: r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=""/131, 0x83}, {&(0x7f0000000100)=""/206, 0xce}, {&(0x7f0000000480)=""/211, 0xd3}, {&(0x7f0000002a80)=""/4095, 0xfff}, {&(0x7f0000000780)=""/232, 0xe8}, {&(0x7f0000000a40)=""/196, 0xc4}, {&(0x7f0000000280)=""/231, 0xe7}], 0x7}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1d100000120091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 526.931438ms ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200001e00000000000000000000008500000017000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='bdi_dirty_ratelimit\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r0}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x800}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0x3ff}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080)='=', &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000980), &(0x7f0000000000), 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r3, 0x84, 0x6b, &(0x7f0000000000), 0x10) 520.812509ms ago: executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="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", 0x109}, {&(0x7f0000000580)="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", 0x32c}], 0x2}, 0x0) 518.506109ms ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f90224fc602f1b0b000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 517.32631ms ago: executing program 2: close(0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x1b, &(0x7f0000000200), 0x4) 403.459118ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 393.145269ms ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x618, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000001140)=ANY=[@ANYRESDEC], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x3, 0xfffffffd}, 0x20) r4 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x4}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r4, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x0, 0x8, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x4, 0x0, &(0x7f0000000440), &(0x7f00000006c0)='GPL\x00', 0xfb7b, 0xa1, &(0x7f0000000900)=""/161, 0x40f00, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x2, 0x0, &(0x7f0000000140)=[{0x2, 0x4}, {0x4, 0x2, 0x0, 0x9}]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1, 0x5, &(0x7f0000000800)=@raw=[@tail_call], &(0x7f0000000e40)='syzkaller\x00', 0x6, 0x1c, &(0x7f0000000e80)=""/28, 0x40f00, 0x4, '\x00', 0x0, 0x1, r3, 0x8, &(0x7f0000000ec0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x3}, 0x10, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x9d, &(0x7f00000000c0)=""/157, 0x0, 0x2, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xf}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r4, r4]}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x40, 0x81, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000340), 0xa}, 0x0, 0x8000, 0x6, 0x7, 0x5, 0x3, 0x0, 0x0, 0x400, 0x0, 0x4}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x1e8, 0x0, 0xac, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb4206"}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x100, '\x00', r5, r3, 0x2, 0x5}, 0x48) close(0xffffffffffffffff) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x15, 0x10, 0x3, 0x1, 0x0, 0x1, 0x9}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r10, 0x0, 0x0}, 0x20) close(r10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB='-io +cNu -cpu '], 0xe) write$cgroup_int(r0, &(0x7f0000000480)=0x5, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x12, &(0x7f0000001000)=ANY=[@ANYBLOB="1845000007000000000000000000000018440000020000000000000000000000186000000300000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000d3f17539850000000600000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000540)='GPL\x00', 0x8, 0x1, &(0x7f0000000580)=""/1, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000d00)=[{0x0, 0x5, 0x1, 0x9}, {0x0, 0x5, 0x3, 0x5}, {0x1, 0x4, 0xd, 0xa}, {0x1, 0x2, 0x6, 0x9}, {0x3, 0x2, 0x9, 0x8}, {0x0, 0x4, 0x6, 0x1}]}, 0x90) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) 377.251692ms ago: executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x20000000) close(r0) 375.816582ms ago: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b02d25a806f8c6394f90b24fc602f0009000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c0000002a006bab9a3fe3d86e17aa0a076b876c1d0000007ea60864160af36504001a0038000c000331a0e69ee517d34460bc06000000427ca1a3dc01aca30051f60a84c9f4d4939f0994962c245632dbbf9cac11848e022cb7dfb2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 289.753265ms ago: executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000200000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="007065060fd05c65c25900f288a84a4788ca"], 0x27) 287.414586ms ago: executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) close(r0) 236.662204ms ago: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x2e, 0x5f, 0x5f, 0x0, 0x61, 0x30]}}, &(0x7f0000000a80)=""/146, 0x20, 0x92, 0x0, 0x51}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@bloom_filter={0x1e, 0xffff2a91, 0xf6, 0x3, 0x220, 0x1, 0x1, '\x00', r2, r3, 0x0, 0x5, 0x1, 0x80000000}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000011c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x12, 0x6, 0x4, 0xdd}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r4, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x0, 0x0}, 0x8) openat$cgroup_devices(r5, &(0x7f00000008c0)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x1f, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x7, 0x1, 0xc, 0x6, 0x0, 0x50, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r5}, @exit, @generic={0x1f, 0xe, 0x7, 0x5, 0xa6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x35, '\x00', r7, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x7, 0x1, 0x2}, 0x10, r8, 0x0, 0x1, 0x0, &(0x7f00000007c0)=[{0x4, 0x4, 0x8, 0xb}], 0x10, 0xe400}, 0x90) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000800)=""/175, 0x26, 0xaf, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r9, 0x1, 0x2}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x2000003, 0xe0, 0x0, 0x1}, 0x48) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000780)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r10, 0x0, 0x0}, 0x20) 219.104716ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 167.383034ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000d007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) 143.488308ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f900001ab703000008000000b704000000001500850000003300000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 104.204744ms ago: executing program 0: sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="5c00000056006bcd9e3fe3dc6e080014", 0x10}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000040)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 87.457296ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x93, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) 67.49406ms ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="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", 0x109}, {&(0x7f0000000580)="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", 0x32c}], 0x2}, 0x0) 16.521108ms ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200001e00000000000000000000008500000017000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='bdi_dirty_ratelimit\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r0}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x800}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0x3ff}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080)='=', &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000980), &(0x7f0000000000), 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r3, 0x84, 0x6b, &(0x7f0000000000), 0x10) 10.980648ms ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f00000000c0)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 0s ago: executing program 0: r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x7, 0x6, 0x6, 0x3, 0x0, [{@multicast1}, {@loopback}]}]}}}], 0x28}, 0x0) kernel console output (not intermixed with test programs): dy exists on: wlan0 [ 238.895698][T10266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.922818][T10266] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 238.951130][T10266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.981946][T10266] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 238.998682][T10266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.018726][T10266] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 239.029140][T10266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.094618][ T4710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.132675][ T4710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.181811][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.187945][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 239.190741][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.225779][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 239.402447][T10547] sctp: [Deprecated]: syz-executor.3 (pid 10547) Use of int in maxseg socket option. [ 239.402447][T10547] Use struct sctp_assoc_value instead [ 239.777264][T10553] device syzkaller0 entered promiscuous mode [ 240.147932][T10589] sctp: [Deprecated]: syz-executor.1 (pid 10589) Use of int in maxseg socket option. [ 240.147932][T10589] Use struct sctp_assoc_value instead [ 240.573303][ T47] Bluetooth: hci1: command tx timeout [ 240.798772][T10616] device syzkaller0 entered promiscuous mode [ 241.765331][T10685] device syzkaller0 entered promiscuous mode [ 241.921202][T10704] validate_nla: 1 callbacks suppressed [ 241.921220][T10704] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 241.942265][T10704] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.967895][T10704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.975230][T10704] IPv6: NLM_F_CREATE should be set when creating new route [ 241.982536][T10704] IPv6: NLM_F_CREATE should be set when creating new route [ 241.989777][T10704] IPv6: NLM_F_CREATE should be set when creating new route [ 242.518502][T10744] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 242.546173][T10744] IPv6: NLM_F_CREATE should be specified when creating new route [ 242.580723][T10744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.588221][T10744] IPv6: NLM_F_CREATE should be set when creating new route [ 242.595557][T10744] IPv6: NLM_F_CREATE should be set when creating new route [ 242.603019][T10744] IPv6: NLM_F_CREATE should be set when creating new route [ 242.755740][T10748] device syzkaller0 entered promiscuous mode [ 243.192763][T10782] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 243.232149][T10782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.612777][T10796] device syzkaller0 entered promiscuous mode [ 243.792672][T10814] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 243.825573][T10814] IPv6: NLM_F_CREATE should be specified when creating new route [ 243.843308][T10814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.850600][T10814] IPv6: NLM_F_CREATE should be set when creating new route [ 243.857943][T10814] IPv6: NLM_F_CREATE should be set when creating new route [ 243.865217][T10814] IPv6: NLM_F_CREATE should be set when creating new route [ 244.433278][T10856] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 244.456525][T10856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.894626][ T3673] batman_adv: batadv0: Interface deactivated: wlan0 [ 246.985321][ T3673] batman_adv: batadv0: Removing interface: wlan0 [ 247.127157][ T26] audit: type=1804 audit(1717598403.228:22): pid=11016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3488772953/syzkaller.YFAeHo/80/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 247.209650][ T26] audit: type=1800 audit(1717598403.228:23): pid=11016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 247.726608][ T3673] batman_adv: batadv0: Interface deactivated: wlan0 [ 247.783581][ T3673] batman_adv: batadv0: Removing interface: wlan0 [ 247.919115][ T3673] device hsr_slave_0 left promiscuous mode [ 247.979423][ T3673] device hsr_slave_1 left promiscuous mode [ 248.004127][ T3673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.011735][ T3673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.028968][T11054] netlink: 131996 bytes leftover after parsing attributes in process `syz-executor.3'. [ 248.063725][ T3673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.071765][ T3673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.137291][ T3673] device bridge_slave_1 left promiscuous mode [ 248.159238][ T3673] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.239231][ T3673] device bridge_slave_0 left promiscuous mode [ 248.249528][ T3673] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.286404][ T26] audit: type=1804 audit(1717598404.388:24): pid=11071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3488772953/syzkaller.YFAeHo/84/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 248.320074][ T3673] device hsr_slave_0 left promiscuous mode [ 248.349864][ T3673] device hsr_slave_1 left promiscuous mode [ 248.365903][ T3673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.402236][ T26] audit: type=1800 audit(1717598404.418:25): pid=11071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 248.426667][ T3673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.459363][ T3673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.480605][ T3673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.517479][ T3673] device bridge_slave_1 left promiscuous mode [ 248.534655][ T3673] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.555170][ T3673] device bridge_slave_0 left promiscuous mode [ 248.573903][ T3673] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.752312][ T3673] device veth1_macvtap left promiscuous mode [ 248.760091][ T3673] device veth0_macvtap left promiscuous mode [ 248.776217][ T3673] device veth1_vlan left promiscuous mode [ 248.791957][ T3673] device veth0_vlan left promiscuous mode [ 248.950903][ T3673] device veth1_macvtap left promiscuous mode [ 248.957496][ T3673] device veth0_macvtap left promiscuous mode [ 248.964254][ T3673] device veth1_vlan left promiscuous mode [ 248.970523][ T3673] device veth0_vlan left promiscuous mode [ 249.681691][ T3673] team0 (unregistering): Port device team_slave_1 removed [ 249.699294][ T3673] team0 (unregistering): Port device team_slave_0 removed [ 249.719974][ T3673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.734408][ T3673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.788610][ T3673] bond0 (unregistering): (slave team0): Releasing backup interface [ 249.817647][ T3673] bond0 (unregistering): Released all slaves [ 249.970432][ T3673] team0 (unregistering): Port device team_slave_1 removed [ 249.984544][ T3673] team0 (unregistering): Port device team_slave_0 removed [ 249.997782][ T3673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.016250][ T3673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.072851][ T3673] bond0 (unregistering): (slave team0): Releasing backup interface [ 250.095816][ T3673] bond0 (unregistering): Released all slaves [ 250.306517][T11098] netlink: 131996 bytes leftover after parsing attributes in process `syz-executor.1'. [ 250.475996][T11109] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 250.490013][T11109] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 250.810980][ T26] audit: type=1804 audit(1717598406.908:26): pid=11123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3488772953/syzkaller.YFAeHo/88/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 250.889299][ T26] audit: type=1800 audit(1717598406.948:27): pid=11123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 251.167424][T11146] netlink: 131996 bytes leftover after parsing attributes in process `syz-executor.1'. [ 251.330672][T11157] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 251.365450][T11157] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 251.713575][T11178] netlink: 131996 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.796676][ T26] audit: type=1804 audit(1717598407.898:28): pid=11182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3488772953/syzkaller.YFAeHo/92/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 251.897087][ T26] audit: type=1800 audit(1717598407.938:29): pid=11182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 252.175596][T11206] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 252.219541][T11206] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.349913][T11215] netlink: 131996 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.991572][ T26] audit: type=1804 audit(1717598409.088:30): pid=11244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir221277871/syzkaller.9vc9Aw/62/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 253.086595][ T26] audit: type=1800 audit(1717598409.088:31): pid=11244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1968 res=0 errno=0 [ 253.371439][T11257] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 253.402049][T11257] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 254.025504][T11297] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 254.040462][T11297] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.697192][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.703755][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.553549][T11468] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.3'. [ 258.017010][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 258.136975][T11501] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.835868][ T102] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 259.018348][T11528] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.4'. [ 260.232972][T11564] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.0'. [ 261.471273][T11600] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.1'. [ 265.850079][T11797] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 265.873892][T11797] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 265.897006][T11797] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 265.911618][T11797] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 265.934324][T11797] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.191347][T11811] device lo entered promiscuous mode [ 266.913084][T11840] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 266.971126][T11840] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.053716][T11840] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 267.079491][T11840] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 267.108201][T11840] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.186462][T11847] device lo entered promiscuous mode [ 268.248807][T11888] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 268.258332][T11888] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.269548][T11888] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 268.277977][T11888] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 268.286318][T11888] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.938082][T11913] device lo entered promiscuous mode [ 269.047398][T11926] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 269.062144][T11926] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 269.114325][T11926] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 270.294332][T11978] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 270.318934][T11978] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 271.650584][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 271.656900][T12049] validate_nla: 5 callbacks suppressed [ 271.656927][T12049] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 271.709960][T12049] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 271.723852][T12053] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 272.082484][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 272.116938][T12085] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 272.158035][T12085] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 272.195660][T12089] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 272.537730][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 272.742294][T12126] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 272.794081][T12126] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 272.812479][T12136] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 273.063182][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 273.316770][T12171] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 273.523784][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 274.881106][T12276] netlink: 1034 bytes leftover after parsing attributes in process `syz-executor.3'. [ 275.021845][T12272] device syzkaller0 entered promiscuous mode [ 275.459945][T12308] netlink: 1034 bytes leftover after parsing attributes in process `syz-executor.4'. [ 276.002353][T12343] netlink: 1034 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.272901][T12332] device syzkaller0 entered promiscuous mode [ 276.598850][T12375] netlink: 1034 bytes leftover after parsing attributes in process `syz-executor.2'. [ 277.083479][ T47] Bluetooth: hci2: unexpected event 0x36 length: 15 > 7 [ 277.145312][T12398] device syzkaller0 entered promiscuous mode [ 277.164512][T12413] netlink: 1034 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.590205][ T47] Bluetooth: hci1: unexpected event 0x36 length: 15 > 7 [ 278.226812][ T47] Bluetooth: hci1: unexpected event 0x36 length: 15 > 7 [ 278.279882][T12458] device syzkaller0 entered promiscuous mode [ 278.365707][ T3567] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.388387][ T3567] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.397691][ T3567] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.423756][ T3567] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.435310][ T3567] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.448392][ T3567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.485948][T12481] validate_nla: 5 callbacks suppressed [ 278.485966][T12481] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 278.503019][T12481] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'. [ 278.738393][ T47] Bluetooth: hci3: unexpected event 0x36 length: 15 > 7 [ 278.878926][T12474] chnl_net:caif_netlink_parms(): no params data found [ 278.926269][T12509] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 278.957766][T12509] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 279.104755][T12505] device syzkaller0 entered promiscuous mode [ 279.230525][ T47] Bluetooth: hci0: unexpected event 0x36 length: 15 > 7 [ 279.301802][T12474] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.340904][T12474] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.362032][T12474] device bridge_slave_0 entered promiscuous mode [ 279.370536][T12539] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 279.380030][T12539] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 279.390782][T12474] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.400457][T12474] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.418067][T12474] device bridge_slave_1 entered promiscuous mode [ 279.512825][T12474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.570415][T12474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.650115][T12474] team0: Port device team_slave_0 added [ 279.686009][T12474] team0: Port device team_slave_1 added [ 279.703580][T12558] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 279.727154][T12558] netlink: 1034 bytes leftover after parsing attributes in process `syz-executor.4'. [ 279.748845][T12474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.769415][T12474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.811559][T12474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.857702][T12474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.869205][T12474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.905472][T12474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.964206][T12569] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 279.984120][T12569] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. [ 280.073843][T12474] device hsr_slave_0 entered promiscuous mode [ 280.100650][T12474] device hsr_slave_1 entered promiscuous mode [ 280.120269][T12474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.145634][T12474] Cannot create hsr debugfs directory [ 280.397432][T12592] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 280.426910][T12592] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 280.492420][ T47] Bluetooth: hci2: command tx timeout [ 280.581689][T12474] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.653850][T12594] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 280.764719][T12474] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.893529][T12474] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.916849][T12618] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 280.932533][T12618] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 280.983260][T12474] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.061696][T12629] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 281.295819][T12474] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 281.332781][T12474] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 281.348457][T12474] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 281.377424][T12474] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 281.625050][T12474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.661037][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 281.673899][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.683221][T12668] netlink: 1034 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.691554][T12474] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.737526][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.751644][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.793194][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.800773][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.847007][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.870936][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 281.896754][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.941600][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.948906][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.968840][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 282.047728][T12474] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.113147][T12474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.136255][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.163073][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 282.185011][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 282.198417][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 282.219842][T12697] netlink: 1034 bytes leftover after parsing attributes in process `syz-executor.0'. [ 282.237473][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 282.258507][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 282.272790][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 282.288495][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 282.299985][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.337944][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 282.356409][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 282.572307][ T47] Bluetooth: hci2: command tx timeout [ 282.802870][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.810511][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.842155][T12474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.915802][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 282.931681][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.936153][T12729] netlink: 1034 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.012474][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 283.021768][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.052731][T12474] device veth0_vlan entered promiscuous mode [ 283.073237][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.096330][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.118067][T12474] device veth1_vlan entered promiscuous mode [ 283.208197][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 283.235651][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 283.254452][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 283.278761][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.296751][T12739] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 283.333625][T12474] device veth0_macvtap entered promiscuous mode [ 283.343126][T12743] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 283.379481][T12474] device veth1_macvtap entered promiscuous mode [ 283.434094][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.457496][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.471768][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.498228][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.514090][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.543431][T12754] validate_nla: 12 callbacks suppressed [ 283.543451][T12754] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 283.546811][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.555903][T12754] netlink: 1034 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.564113][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.596401][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.611171][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.633840][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.647645][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.658564][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.670310][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.681204][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.704855][T12474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.729288][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 283.754233][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 283.776567][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 283.806349][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.839682][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.886337][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.910451][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.935355][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.952019][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.971832][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.998393][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.032043][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.063328][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.086792][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.104619][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.115770][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.134020][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.151358][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.175604][T12474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.185800][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.207487][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.242846][T12772] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 284.254941][T12772] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 284.286062][T12780] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 284.317451][T12474] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.331248][T12474] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.349312][T12474] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.368275][T12474] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.554015][T12474] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 284.592970][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.629764][T12474] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 284.652256][ T3567] Bluetooth: hci2: command tx timeout [ 284.663174][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.687505][ T3673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.708771][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.719988][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.733074][ T3673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.769215][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 284.806978][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 285.138265][T12813] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 285.185065][T12813] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 285.259597][T12819] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 285.393099][T12827] netlink: 14560 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.048638][T12860] bridge0: port 3(team0) entered blocking state [ 286.067679][T12860] bridge0: port 3(team0) entered disabled state [ 286.115539][T12860] device team0 entered promiscuous mode [ 286.132048][T12860] device team_slave_0 entered promiscuous mode [ 286.162581][T12860] device team_slave_1 entered promiscuous mode [ 286.199434][T12860] bridge0: port 3(team0) entered blocking state [ 286.206160][T12860] bridge0: port 3(team0) entered forwarding state [ 286.352022][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 286.399584][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 286.409783][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 286.439433][ T3583] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 286.456235][ T3583] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 286.465737][ T3581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 286.516133][ T3673] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.593210][ T3673] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.729284][ T3673] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.742231][ T3581] Bluetooth: hci2: command tx timeout [ 286.849919][ T3673] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.189020][T12896] bridge0: port 4(team0) entered blocking state [ 287.195835][T12896] bridge0: port 4(team0) entered disabled state [ 287.223774][T12896] device team0 entered promiscuous mode [ 287.236794][T12896] device team_slave_0 entered promiscuous mode [ 287.257146][T12896] device team_slave_1 entered promiscuous mode [ 287.276132][T12896] bridge0: port 4(team0) entered blocking state [ 287.282683][T12896] bridge0: port 4(team0) entered forwarding state [ 287.317658][T12866] chnl_net:caif_netlink_parms(): no params data found [ 287.327915][T12900] __nla_validate_parse: 3 callbacks suppressed [ 287.327931][T12900] netlink: 14560 bytes leftover after parsing attributes in process `syz-executor.2'. [ 287.785167][T12866] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.831411][T12866] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.857788][T12866] device bridge_slave_0 entered promiscuous mode [ 287.891151][T12866] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.919282][T12866] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.979352][T12866] device bridge_slave_1 entered promiscuous mode [ 288.100439][T12947] netlink: 14560 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.129521][T12866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.181072][T12866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.318286][T12866] team0: Port device team_slave_0 added [ 288.370290][T12866] team0: Port device team_slave_1 added [ 288.492042][ T3581] Bluetooth: hci0: command 0x0406 tx timeout [ 288.500180][ T3673] device hsr_slave_0 left promiscuous mode [ 288.506217][ T47] Bluetooth: hci1: command tx timeout [ 288.541018][ T3673] device hsr_slave_1 left promiscuous mode [ 288.564183][ T3673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.578744][ T3673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.621266][ T3673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.666363][ T3673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.690797][ T3673] device bridge_slave_1 left promiscuous mode [ 288.706831][ T3673] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.732664][ T3673] device bridge_slave_0 left promiscuous mode [ 288.752897][ T3673] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.801085][ T3673] device veth1_macvtap left promiscuous mode [ 288.817781][ T3673] device veth0_macvtap left promiscuous mode [ 288.831242][ T3673] device veth1_vlan left promiscuous mode [ 288.847036][ T3673] device veth0_vlan left promiscuous mode [ 289.277782][ T3673] team0 (unregistering): Port device team_slave_1 removed [ 289.294522][ T3673] team0 (unregistering): Port device team_slave_0 removed [ 289.308538][ T3673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.327589][ T3673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.400975][ T3673] bond0 (unregistering): Released all slaves [ 289.509879][T12969] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 289.549974][T12969] device netdevsim0 entered promiscuous mode [ 289.559142][T12969] team0: Port device netdevsim0 added [ 289.573876][T12979] netlink: 14560 bytes leftover after parsing attributes in process `syz-executor.3'. [ 289.597890][T12866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.612914][T12866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.659098][T12866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.684904][T12866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.702214][T12866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.735036][T12866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.772756][T12992] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 289.822957][T12992] device syz_tun entered promiscuous mode [ 289.863955][T12992] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 289.876049][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 290.021078][T12866] device hsr_slave_0 entered promiscuous mode [ 290.079778][T12866] device hsr_slave_1 entered promiscuous mode [ 290.097439][T12866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.123162][T12866] Cannot create hsr debugfs directory [ 290.300800][T13017] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 290.402176][T13017] device netdevsim0 entered promiscuous mode [ 290.440146][T13017] team0: Port device netdevsim0 added [ 290.523455][T13027] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 290.566940][T13027] device syz_tun entered promiscuous mode [ 290.573230][ T3581] Bluetooth: hci1: command tx timeout [ 290.665116][T13027] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 291.215763][T13058] device pim6reg1 entered promiscuous mode [ 291.396058][T13062] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 291.434927][T13068] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 291.460622][T13068] device syz_tun entered promiscuous mode [ 291.513713][T13068] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 291.894958][T12866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 291.937185][T12866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 291.970015][T12866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 292.032280][T12866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 292.157174][T13096] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 292.241233][T13099] device pim6reg1 entered promiscuous mode [ 292.361480][T13103] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 292.450236][T12866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.546927][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.561004][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.607048][T12866] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.652350][ T47] Bluetooth: hci1: command tx timeout [ 292.693913][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.731105][ T47] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 292.731595][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.816847][ T3668] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.824071][ T3668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.866893][T13133] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 292.953148][T13133] team0: Port device netdevsim0 added [ 292.967103][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.987040][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 293.007100][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.035171][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.042939][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.096308][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 293.143209][T13144] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 293.189289][T13144] device syz_tun entered promiscuous mode [ 293.250558][T13144] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 293.294658][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 293.324826][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 293.369616][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.413054][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.445332][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.478787][T13139] device pim6reg1 entered promiscuous mode [ 293.512534][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.526475][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.555908][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.600808][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.624299][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.641282][ T47] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 293.653885][T12866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.275879][ T47] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 294.420850][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.429481][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.474071][T12866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.509979][T13210] device pim6reg1 entered promiscuous mode [ 294.662789][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 294.693876][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.732344][ T47] Bluetooth: hci1: command tx timeout [ 294.768646][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.814223][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.855910][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.874135][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.900105][ T47] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 294.966536][T12866] device veth0_vlan entered promiscuous mode [ 295.024105][T12866] device veth1_vlan entered promiscuous mode [ 295.154203][T12866] device veth0_macvtap entered promiscuous mode [ 295.201572][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.211044][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.237621][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 295.256606][T13253] device pim6reg1 entered promiscuous mode [ 295.275605][T12866] device veth1_macvtap entered promiscuous mode [ 295.366391][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.399812][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.432216][ T47] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 295.460468][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.506301][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.532093][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.548821][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.558894][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.569613][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.579797][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.590418][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.601598][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.613508][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.632053][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.645099][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.703818][T12866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.716405][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.733743][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.752821][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.767901][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.791814][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.813190][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.870606][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.917912][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.944333][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.963989][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.985311][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.006368][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.032033][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.055978][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.075781][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.090832][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.112757][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.169905][T12866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.230197][T12866] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.271979][T12866] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.280745][T12866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.320320][T12866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.359204][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.374157][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.577647][T12866] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 296.597449][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.620793][T12866] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 296.646659][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.692865][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.700993][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.807147][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.858880][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.876638][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.906487][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 297.095789][T13344] validate_nla: 1 callbacks suppressed [ 297.095809][T13344] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 297.119629][T13344] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.191089][T13352] mac80211_hwsim hwsim19 : renamed from wlan1 [ 297.426021][T13369] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 297.538306][T13369] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 297.676231][T13382] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 297.685919][T13382] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 297.729835][T13386] mac80211_hwsim hwsim25 : renamed from wlan1 [ 298.089011][T13411] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 298.193413][T13411] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 298.208059][T13415] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 298.237999][T13415] IPv6: NLM_F_CREATE should be specified when creating new route [ 298.419073][T13428] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 298.650036][T13448] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 298.837569][T13459] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 298.872520][T13459] IPv6: NLM_F_CREATE should be specified when creating new route [ 298.979846][T13466] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 299.199515][T13481] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 299.457180][T13481] team0: Port device netdevsim0 removed [ 299.477341][T13481] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 300.120774][T13534] device netdevsim0 left promiscuous mode [ 300.174195][T13534] team0: Port device netdevsim0 removed [ 300.196876][T13534] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 300.498402][T13559] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 301.035290][T13595] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.109611][T13591] device syzkaller0 entered promiscuous mode [ 301.645416][T13628] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.970789][T13640] device syzkaller0 entered promiscuous mode [ 302.121287][T13657] validate_nla: 12 callbacks suppressed [ 302.121306][T13657] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 302.147915][T13660] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 302.165200][T13657] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 302.175930][T13660] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 302.573966][T13678] device syzkaller0 entered promiscuous mode [ 302.662359][T13694] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 302.682950][T13694] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.720383][T13696] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 302.733005][T13696] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.842140][T13693] device syzkaller0 entered promiscuous mode [ 303.133239][T13715] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.330612][T13726] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 303.347029][T13728] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 303.371368][T13728] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.631127][T13746] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.742601][T13743] device syzkaller0 entered promiscuous mode [ 303.853201][ T3581] Bluetooth: hci3: command 0x0406 tx timeout [ 303.863093][T13752] device syzkaller0 entered promiscuous mode [ 304.005108][T13763] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 304.273659][T13770] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 304.284200][T13770] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 304.567607][T13782] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.2'. [ 304.643195][T13790] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 304.841522][T13803] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 304.859099][T13803] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 304.884042][T13797] device syzkaller0 entered promiscuous mode [ 305.051655][T13807] device syzkaller0 entered promiscuous mode [ 305.472765][T13825] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 306.293927][T13862] device syzkaller0 entered promiscuous mode [ 307.603054][T13913] device syzkaller0 entered promiscuous mode [ 308.644525][T13962] device syzkaller0 entered promiscuous mode [ 309.442611][T14013] device syzkaller0 entered promiscuous mode [ 310.877376][T14059] device syzkaller0 entered promiscuous mode [ 311.883561][T14107] device syzkaller0 entered promiscuous mode [ 312.878987][T14159] device syzkaller0 entered promiscuous mode [ 315.013446][T14266] __nla_validate_parse: 2 callbacks suppressed [ 315.013463][T14266] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 315.067231][T14266] tc_dump_action: action bad kind [ 315.611462][T14299] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 315.637594][T14299] tc_dump_action: action bad kind [ 316.660152][T14338] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 316.699131][T14338] tc_dump_action: action bad kind [ 317.142225][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.148722][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.623301][T14373] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.652485][T14373] tc_dump_action: action bad kind [ 318.455181][T14406] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 318.473603][T14406] tc_dump_action: action bad kind [ 318.711640][T14418] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 318.744929][T14418] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 319.706802][T14445] netlink: 83992 bytes leftover after parsing attributes in process `syz-executor.3'. [ 319.744465][T14445] netlink: zone id is out of range [ 319.766942][T14445] netlink: zone id is out of range [ 319.822432][T14445] netlink: zone id is out of range [ 319.892462][T14445] netlink: zone id is out of range [ 319.916354][T14445] netlink: zone id is out of range [ 319.936355][T14445] netlink: zone id is out of range [ 319.956793][T14445] netlink: zone id is out of range [ 319.992912][T14458] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 319.997314][T14445] netlink: zone id is out of range [ 320.003893][T14458] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 320.032220][T14445] netlink: zone id is out of range [ 320.037894][T14445] netlink: zone id is out of range [ 320.890686][ T7681] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 321.184590][T14493] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 321.203577][T14493] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 321.395078][T14504] netlink: 83992 bytes leftover after parsing attributes in process `syz-executor.0'. [ 321.915035][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 322.207129][T14537] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 322.250869][T14537] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 322.877952][T14557] netlink: 83992 bytes leftover after parsing attributes in process `syz-executor.0'. [ 323.602526][T14585] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 323.672898][T14585] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.120469][T14607] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 324.157959][T14607] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.222469][ T3673] device hsr_slave_0 left promiscuous mode [ 324.242793][ T3673] device hsr_slave_1 left promiscuous mode [ 324.257821][ T3673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.282847][ T3673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.290512][T14614] netlink: 83992 bytes leftover after parsing attributes in process `syz-executor.0'. [ 324.315149][ T3673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.324533][ T3673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.341730][ T3673] device bridge_slave_1 left promiscuous mode [ 324.359614][ T3673] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.371067][ T3673] device bridge_slave_0 left promiscuous mode [ 324.386669][ T3673] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.415776][ T3673] device veth1_macvtap left promiscuous mode [ 324.422233][ T3673] device veth0_macvtap left promiscuous mode [ 324.428564][ T3673] device veth1_vlan left promiscuous mode [ 324.435115][ T3673] device veth0_vlan left promiscuous mode [ 324.909465][ T3673] team0 (unregistering): Port device team_slave_1 removed [ 324.930137][ T3673] team0 (unregistering): Port device team_slave_0 removed [ 324.956666][ T3673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.974136][ T3673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.087269][ T3673] bond0 (unregistering): Released all slaves [ 325.264025][T14641] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 325.302312][T14641] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 325.392985][T14649] netlink: 83992 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.412437][T14649] net_ratelimit: 206 callbacks suppressed [ 325.412456][T14649] netlink: zone id is out of range [ 325.461441][T14649] netlink: zone id is out of range [ 325.492511][T14649] netlink: zone id is out of range [ 325.513567][T14649] netlink: zone id is out of range [ 325.518968][T14649] netlink: zone id is out of range [ 325.537786][T14649] netlink: zone id is out of range [ 325.543895][T14649] netlink: zone id is out of range [ 325.596885][T14649] netlink: zone id is out of range [ 325.634399][T14649] netlink: zone id is out of range [ 325.652641][T14649] netlink: zone id is out of range [ 325.721782][T14658] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 326.102525][T14665] device lo entered promiscuous mode [ 326.423165][T14681] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 326.470342][T14681] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 326.561477][T14694] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 326.970794][T14713] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 327.022622][T14713] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 327.229121][T14725] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 327.272624][T14725] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 327.304927][T14728] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 327.845051][T14754] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 327.869870][T14754] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 328.103734][T14762] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 328.133139][T14762] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 328.819133][T14786] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 329.101694][T14801] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 329.644014][T14825] validate_nla: 4 callbacks suppressed [ 329.644034][T14825] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 329.776780][T14825] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 329.886944][T14835] device lo entered promiscuous mode [ 330.510900][T14863] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 330.553807][T14863] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 331.317542][T14899] device veth1_macvtap left promiscuous mode [ 331.348141][T14906] device veth1_macvtap entered promiscuous mode [ 331.374572][T14906] device macsec0 entered promiscuous mode [ 331.980484][T14941] device veth1_macvtap left promiscuous mode [ 332.023241][T14946] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.1'. [ 332.096404][T14941] device veth1_macvtap entered promiscuous mode [ 332.110952][T14941] device macsec0 entered promiscuous mode [ 332.156507][ T2460] batman_adv: batadv0: Interface deactivated: wlan0 [ 332.201190][ T2460] batman_adv: batadv0: Removing interface: wlan0 [ 332.497387][ T2460] device hsr_slave_0 left promiscuous mode [ 332.576800][ T2460] device hsr_slave_1 left promiscuous mode [ 332.669697][T14974] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.4'. [ 332.721340][ T2460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.734550][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.961758][ T2460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.988915][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.019595][ T2460] device bridge_slave_1 left promiscuous mode [ 333.039704][ T2460] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.272940][ T2460] device O3ãc¤± left promiscuous mode [ 334.278578][ T2460] bridge0: port 1(O3ãc¤±) entered disabled state [ 334.306857][ T2460] device veth1_macvtap left promiscuous mode [ 334.313040][ T2460] device veth0_macvtap left promiscuous mode [ 334.319188][ T2460] device veth1_vlan left promiscuous mode [ 334.325277][ T2460] device veth0_vlan left promiscuous mode [ 334.524883][T15006] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.4'. [ 334.769333][ T2460] team0 (unregistering): Port device team_slave_1 removed [ 334.926111][ T2460] team0 (unregistering): Port device team_slave_0 removed [ 335.305009][ T2460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.571119][ T2460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.930779][ T2460] bond0 (unregistering): (slave team0): Releasing backup interface [ 335.961022][T15037] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.982795][ T2460] bond0 (unregistering): Released all slaves [ 336.067704][T14980] device veth1_macvtap left promiscuous mode [ 336.089758][T14980] device macsec0 left promiscuous mode [ 336.113047][T14985] device veth1_macvtap entered promiscuous mode [ 336.129595][T14985] device macsec0 entered promiscuous mode [ 336.212546][T15054] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 336.399790][T15069] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.3'. [ 336.663215][T15084] device veth1_macvtap left promiscuous mode [ 336.672310][T15084] device macsec0 left promiscuous mode [ 336.706359][T15087] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.729105][T15084] device veth1_macvtap entered promiscuous mode [ 336.736276][T15084] device macsec0 entered promiscuous mode [ 337.129135][T15118] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 337.174658][T15117] device veth1_macvtap left promiscuous mode [ 337.258422][T15117] device veth1_macvtap entered promiscuous mode [ 337.282297][T15117] device macsec0 entered promiscuous mode [ 337.317695][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.605173][T15155] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 337.798791][T15167] device veth1_macvtap left promiscuous mode [ 337.819003][T15167] device macsec0 left promiscuous mode [ 337.860229][T15167] device veth1_macvtap entered promiscuous mode [ 337.870730][T15167] device macsec0 entered promiscuous mode [ 338.079375][T15187] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 338.631726][T15222] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.2'. [ 339.117656][T15253] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.0'. [ 339.691981][ T3567] Bluetooth: hci4: command 0x0406 tx timeout [ 339.755584][T15287] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.2'. [ 340.244122][T15316] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.1'. [ 340.781147][T15348] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.484939][ T9624] bond0: (slave syz_tun): Releasing backup interface [ 344.035616][ T3567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.045794][ T3567] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.057038][ T3567] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.065221][ T3567] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.073251][ T3567] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.080546][ T3567] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.684234][T15470] chnl_net:caif_netlink_parms(): no params data found [ 344.917042][T15470] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.942347][T15470] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.973860][T15470] device bridge_slave_0 entered promiscuous mode [ 344.990009][T15470] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.008909][T15470] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.017328][T15470] device bridge_slave_1 entered promiscuous mode [ 345.096896][T15470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.127745][T15470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.220893][T15470] team0: Port device team_slave_0 added [ 345.253878][T15470] team0: Port device team_slave_1 added [ 345.310358][T15470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.332461][T15470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.440349][T15470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.461736][T15470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.469542][T15470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.574304][T15470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.818075][T15470] device hsr_slave_0 entered promiscuous mode [ 345.859588][T15470] device hsr_slave_1 entered promiscuous mode [ 345.906185][T15470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.961209][T15470] Cannot create hsr debugfs directory [ 346.172457][ T3567] Bluetooth: hci4: command tx timeout [ 346.379865][T15470] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.564738][T15470] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.668369][T15470] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.812547][T15470] bond0: (slave netdevsim0): Releasing backup interface [ 346.844001][T15470] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.191825][T15470] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 347.247722][T15470] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 347.307882][T15470] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 347.370047][T15470] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 347.791342][T15470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.820508][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.848204][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.874015][T15470] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.002179][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.011080][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.047748][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.054941][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.090261][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.107421][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.118129][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.125296][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.153084][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.187933][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.202667][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.219843][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.239643][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.262280][ T3567] Bluetooth: hci4: command tx timeout [ 348.273009][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.283128][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.298743][T15470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.314910][T15470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.327086][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.336119][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.344756][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.354181][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.363001][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.389101][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.324235][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.336495][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.366198][T15470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.441323][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.457413][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.518843][T15470] device veth0_vlan entered promiscuous mode [ 349.535703][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.548403][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.572674][T15470] device veth1_vlan entered promiscuous mode [ 349.587051][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.623888][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.647671][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 349.708751][T15470] device veth0_macvtap entered promiscuous mode [ 349.731309][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 349.754739][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.783741][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.809686][T15470] device veth1_macvtap entered promiscuous mode [ 349.830692][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 349.844580][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 349.890401][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.915140][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.940244][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.962684][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.973723][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.990889][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.000892][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.011619][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.023202][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.034370][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.046106][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.057318][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.069364][T15470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.081030][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 350.146760][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 350.216663][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.232814][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.243889][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.255912][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.266533][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.277803][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.295531][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.330611][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.343274][ T3567] Bluetooth: hci4: command tx timeout [ 350.369057][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.381300][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.391709][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.402653][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.414988][T15470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.562734][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 350.587325][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.716491][T15470] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.826537][T15470] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.848749][T15470] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.860678][T15470] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.007201][T15470] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 351.057919][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.106470][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.130374][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.182059][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 351.197889][ T4710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.213173][ T4710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.237494][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 352.271498][T15736] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 352.317611][T15736] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 352.342348][T15742] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 352.351616][T15736] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 352.375397][T15736] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 352.412151][ T47] Bluetooth: hci4: command tx timeout [ 352.836649][T15779] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 352.855160][T15779] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 352.875983][T15779] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 352.901444][T15779] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 352.920464][T15779] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 353.066767][T15796] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.361556][ T102] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 353.649237][T15828] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 353.740492][ T8042] bond0: (slave syz_tun): Releasing backup interface [ 353.912772][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.927864][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.937027][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.962536][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.970774][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 353.979228][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.219940][T15860] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 354.416962][T15840] chnl_net:caif_netlink_parms(): no params data found [ 354.782601][T15894] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 354.805135][T15840] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.813905][T15840] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.842477][T15840] device bridge_slave_0 entered promiscuous mode [ 354.884593][T15840] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.920018][T15840] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.948691][T15840] device bridge_slave_1 entered promiscuous mode [ 355.058098][T15840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.100386][T15840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.180969][T15840] team0: Port device team_slave_0 added [ 355.209113][T15840] team0: Port device team_slave_1 added [ 355.306081][T15840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.321961][T15840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.376499][T15840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.397363][T15926] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 355.425321][T15840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.432866][T15840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.537166][T15840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.684194][T15840] device hsr_slave_0 entered promiscuous mode [ 355.706623][T15840] device hsr_slave_1 entered promiscuous mode [ 355.732590][T15840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.752046][T15840] Cannot create hsr debugfs directory [ 356.023757][ T3567] Bluetooth: hci3: command tx timeout [ 356.568596][T15840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.691214][T15995] netlink: 64859 bytes leftover after parsing attributes in process `syz-executor.4'. [ 356.728001][T15840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.795301][T15840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.906144][T15840] bond0: (slave netdevsim0): Releasing backup interface [ 356.981356][T15840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.274907][T15840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 357.295281][T16022] netlink: 64859 bytes leftover after parsing attributes in process `syz-executor.2'. [ 357.309186][T15840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 357.356398][T15840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 357.395679][T15840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 357.546897][T15840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.573511][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 357.582499][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 357.607125][T16030] validate_nla: 20 callbacks suppressed [ 357.607145][T16030] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 357.638167][T15840] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.655418][T16030] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 357.675103][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 357.702643][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 357.711197][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.718443][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.756580][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 357.769202][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 357.779342][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 357.801158][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.808386][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.886053][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 357.906111][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 357.925566][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 357.950780][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 357.963245][T16048] netlink: 64859 bytes leftover after parsing attributes in process `syz-executor.4'. [ 357.981389][T15840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.007422][T15840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.032968][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 358.041167][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 358.065504][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 358.074723][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 358.095252][ T3567] Bluetooth: hci3: command tx timeout [ 358.102297][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.111273][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 358.175291][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.198447][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 358.219092][T16062] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 358.234963][T16062] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 358.513893][T16078] netlink: 64859 bytes leftover after parsing attributes in process `syz-executor.0'. [ 358.655408][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 358.674137][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.696424][T15840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.739531][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 358.749730][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 358.807459][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 358.832248][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.847848][T15840] device veth0_vlan entered promiscuous mode [ 358.859132][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.868127][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.890448][T15840] device veth1_vlan entered promiscuous mode [ 358.962583][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 358.970891][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 359.009512][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 359.044035][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 359.080579][T15840] device veth0_macvtap entered promiscuous mode [ 359.116830][T16097] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 359.138440][T15840] device veth1_macvtap entered promiscuous mode [ 359.156131][T16097] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 359.192003][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.243603][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.272630][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.296612][T16105] netlink: 64859 bytes leftover after parsing attributes in process `syz-executor.2'. [ 359.307322][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.327244][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.371707][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.395295][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.434401][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.450447][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.463352][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.478994][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.521052][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.557479][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.580447][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.618087][T15840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.682246][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 359.691708][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 359.718629][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 359.760772][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 359.783677][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.806147][T16125] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 359.820212][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.859409][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.885018][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.918191][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.939322][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.957987][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.984972][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.005335][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.027160][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.041357][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.052901][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.066013][T15840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.076829][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.091026][T15840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.120317][T16125] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 360.142709][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 360.154570][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 360.165414][T15840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.190112][ T3567] Bluetooth: hci3: command tx timeout [ 360.204193][T15840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.257827][T15840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.283289][T15840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.548062][T15840] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 360.581840][T15840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.632146][ T4710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.640484][ T4710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.770915][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 360.788395][T16166] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 360.828309][T16166] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 360.863766][ T2460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.890275][ T2460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.932176][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 361.849369][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.883499][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.892663][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.901123][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.910871][ T47] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 361.919074][ T47] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.571303][T16218] chnl_net:caif_netlink_parms(): no params data found [ 362.756434][T16267] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 362.768523][T16267] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 363.026952][T16278] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 363.043922][T16218] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.082758][T16218] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.111225][T16218] device bridge_slave_0 entered promiscuous mode [ 363.144703][T16289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.152049][T16289] IPv6: NLM_F_CREATE should be set when creating new route [ 363.159303][T16289] IPv6: NLM_F_CREATE should be set when creating new route [ 363.188156][T16218] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.199027][T16218] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.217537][T16218] device bridge_slave_1 entered promiscuous mode [ 363.373647][T16298] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 363.388062][T16298] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 363.460130][T16218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.499368][T16218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.622321][T16310] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. [ 363.643838][T16312] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.651130][T16312] IPv6: NLM_F_CREATE should be set when creating new route [ 363.658663][T16312] IPv6: NLM_F_CREATE should be set when creating new route [ 363.665954][T16312] IPv6: NLM_F_CREATE should be set when creating new route [ 363.731336][T16218] team0: Port device team_slave_0 added [ 363.842399][ T2460] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.905813][T16218] team0: Port device team_slave_1 added [ 363.911844][T16327] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 363.930499][T16327] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 364.012407][ T47] Bluetooth: hci5: command tx timeout [ 364.088823][ T2460] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.204157][T16218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.216300][T16218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.266037][T16218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.333051][T16341] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. [ 364.364197][T16218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.371368][T16218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.457428][T16218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.479768][T16345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.487112][T16345] IPv6: NLM_F_CREATE should be set when creating new route [ 364.494521][T16345] IPv6: NLM_F_CREATE should be set when creating new route [ 364.501839][T16345] IPv6: NLM_F_CREATE should be set when creating new route [ 364.603044][ T2460] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.707716][T16354] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 364.722145][T16354] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 364.795784][ T2460] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.879759][T16218] device hsr_slave_0 entered promiscuous mode [ 364.915325][T16218] device hsr_slave_1 entered promiscuous mode [ 364.976056][T16218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.987354][T16218] Cannot create hsr debugfs directory [ 365.003957][T16370] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 365.066555][T16372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.232007][T16382] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 365.256795][T16382] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.707779][T16401] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. [ 365.819182][T16406] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.092055][ T47] Bluetooth: hci5: command tx timeout [ 367.304354][T16218] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 367.348679][T16218] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 367.611368][T16218] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 367.654944][T16218] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 367.723403][ T2460] device hsr_slave_0 left promiscuous mode [ 367.772310][ T2460] device hsr_slave_1 left promiscuous mode [ 367.805603][ T2460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.840809][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.865775][ T2460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.892490][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.919794][ T2460] device bridge_slave_1 left promiscuous mode [ 367.939971][ T2460] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.983532][ T2460] device bridge_slave_0 left promiscuous mode [ 368.002727][ T2460] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.045154][ T2460] device veth1_macvtap left promiscuous mode [ 368.060126][ T2460] device veth0_macvtap left promiscuous mode [ 368.076989][ T2460] device veth1_vlan left promiscuous mode [ 368.097419][ T2460] device veth0_vlan left promiscuous mode [ 368.172148][ T3567] Bluetooth: hci5: command tx timeout [ 368.816747][ T2460] team0 (unregistering): Port device team_slave_1 removed [ 369.020374][ T2460] team0 (unregistering): Port device team_slave_0 removed [ 369.062934][ T2460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.120943][ T2460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.218590][ T2460] bond0 (unregistering): Released all slaves [ 369.312836][T16507] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 369.344163][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 369.478394][ T3567] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 369.665587][T16218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.733200][T16218] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.759876][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 369.774369][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 369.852617][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 369.871470][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 369.883163][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.890320][ T3643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.916610][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 369.936987][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 369.966075][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.973387][ T3643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.142409][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 370.151806][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 370.163259][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 370.180033][T16546] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 370.252253][ T3567] Bluetooth: hci5: command tx timeout [ 370.252426][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 370.310298][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 370.342892][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 370.358307][ T47] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 370.372906][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 370.400054][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 370.420777][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 370.453100][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 370.519819][T16218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.565097][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 370.580746][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.032533][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.040124][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.066405][T16218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.116243][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 371.125887][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 371.163353][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 371.175420][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.185100][T16218] device veth0_vlan entered promiscuous mode [ 371.192767][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.200651][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.214761][T16218] device veth1_vlan entered promiscuous mode [ 371.262604][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 371.271327][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 371.280561][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 371.299039][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.319838][T16218] device veth0_macvtap entered promiscuous mode [ 371.334294][T16218] device veth1_macvtap entered promiscuous mode [ 371.351362][T16218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.363539][T16218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.375079][T16218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.386065][T16218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.421689][T16218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.443423][T16218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.461289][T16218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.472243][T16218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.488345][T16218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.499924][T16218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.510294][T16218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.521065][T16218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.531350][T16218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.542967][T16218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.566353][T16218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.581653][T16585] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 371.594527][T16588] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 371.613379][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 371.636381][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 371.663996][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 371.694878][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 371.741137][T16218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.791150][T16218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.844530][T16218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.855584][ T102] wlan1: Trigger new scan to find an IBSS to join [ 371.883285][T16218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.894816][T16218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.908171][T16218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.919611][T16218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.930625][T16218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.977737][T16218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.000005][T16218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.011773][T16218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.050993][T16218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.070991][T16218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.090970][T16218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.119313][T16218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.144346][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 372.155698][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 372.174788][T16602] tap0: tun_chr_ioctl cmd 1074025692 [ 372.198450][T16613] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 372.234410][T16218] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.248593][T16218] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.259332][ T47] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 372.288861][T16218] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.312443][T16218] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.434643][T16626] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 372.530977][T16218] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 372.566020][T16218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.625367][T16634] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 372.659704][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.691237][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.739354][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 372.763176][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.777831][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.849238][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 372.925728][ T47] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 373.038956][T16655] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 373.093068][T16658] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 373.149976][T16663] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 373.263154][T16667] tap0: tun_chr_ioctl cmd 1074025692 [ 373.576852][ T47] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 373.812014][T16695] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 373.901227][T16697] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 374.161063][T16707] tap0: tun_chr_ioctl cmd 1074025692 [ 374.483444][T16730] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 374.795463][T16745] tap0: tun_chr_ioctl cmd 1074025692 [ 374.865119][ T9] batman_adv: batadv0: Interface deactivated: wlan0 [ 374.892731][ T51] wlan1: Trigger new scan to find an IBSS to join [ 374.905439][ T9] batman_adv: batadv0: Removing interface: wlan0 [ 374.981620][T16755] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.2'. [ 375.201577][T16769] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 375.293938][T16769] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 375.385277][ T9] device hsr_slave_0 left promiscuous mode [ 375.411032][ T9] device hsr_slave_1 left promiscuous mode [ 375.448524][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.489695][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.541504][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.575751][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.621948][ T9] device hsr_slave_0 left promiscuous mode [ 375.643120][ T9] device hsr_slave_1 left promiscuous mode [ 375.653937][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.661630][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.675056][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.682845][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.695597][ T9] device veth0_to_bond left promiscuous mode [ 375.702124][ T9] bridge0: port 3(veth0_to_bond) entered disabled state [ 375.711263][ T9] device bridge_slave_1 left promiscuous mode [ 375.718185][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.728057][ T9] device O3ãc¤± left promiscuous mode [ 375.734420][ T9] bridge0: port 1(O3ãc¤±) entered disabled state [ 375.763273][ T9] device veth1_macvtap left promiscuous mode [ 375.769905][ T9] device veth0_macvtap left promiscuous mode [ 375.778054][ T9] device veth1_vlan left promiscuous mode [ 375.786300][ T9] device veth0_vlan left promiscuous mode [ 375.794110][ T9] device veth1_macvtap left promiscuous mode [ 375.800380][ T9] device veth0_macvtap left promiscuous mode [ 375.806995][ T9] device veth1_vlan left promiscuous mode [ 375.813088][ T9] device veth0_vlan left promiscuous mode [ 376.100079][ T9] team0 (unregistering): Port device team_slave_1 removed [ 376.118801][ T9] team0 (unregistering): Port device team_slave_0 removed [ 376.135668][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.155135][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.218992][ T9] bond0 (unregistering): (slave team0): Releasing backup interface [ 376.245796][ T9] bond0 (unregistering): Released all slaves [ 376.358844][ T9] team0 (unregistering): Port device team_slave_1 removed [ 376.373520][ T9] team0 (unregistering): Port device team_slave_0 removed [ 376.387858][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.402840][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.458732][ T9] bond0 (unregistering): (slave team0): Releasing backup interface [ 376.481642][ T9] bond0 (unregistering): Released all slaves [ 376.535057][T16787] tap0: tun_chr_ioctl cmd 1074025692 [ 376.540482][T16789] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 376.678323][T16796] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.2'. [ 376.901062][ T3673] wlan1: Trigger new scan to find an IBSS to join [ 376.989365][T16813] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 377.009784][T16813] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 377.203983][T16830] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.4'. [ 377.388180][T16837] device team_slave_0 left promiscuous mode [ 377.494119][T16837] team0: Port device team_slave_0 removed [ 377.518070][T16837] net_ratelimit: 44 callbacks suppressed [ 377.518087][T16837] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 377.640754][T16847] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 377.659283][T16847] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 377.852151][ T102] wlan1: Creating new IBSS network, BSSID 1e:28:a1:e1:b4:15 [ 377.992930][T16864] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.4'. [ 378.275200][T16877] team0: Port device team_slave_0 removed [ 378.284894][T16877] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 378.336596][T16879] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 378.382136][T16879] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 378.574566][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.580935][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.822514][T16899] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.4'. [ 379.154097][T16910] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 379.177013][T16910] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 379.228164][T16914] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 379.852841][ T3673] wlan1: Trigger new scan to find an IBSS to join [ 380.675162][T16950] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 380.831626][ T102] wlan1: Creating new IBSS network, BSSID 76:d8:45:ef:17:00 [ 382.226354][T16988] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 383.486621][T17031] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 385.267728][T17084] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.024405][ T9] device hsr_slave_0 left promiscuous mode [ 386.051459][ T9] device hsr_slave_1 left promiscuous mode [ 386.080785][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.116184][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.181420][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.232840][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.471549][ T9] device veth1_macvtap left promiscuous mode [ 386.494509][ T9] device veth0_macvtap left promiscuous mode [ 386.533763][ T9] device veth1_vlan left promiscuous mode [ 386.545221][T17120] sctp: [Deprecated]: syz-executor.4 (pid 17120) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.545221][T17120] Use struct sctp_sack_info instead [ 386.596492][ T9] device veth0_vlan left promiscuous mode [ 387.052151][T17132] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 388.263367][ T9] team0 (unregistering): Port device team_slave_1 removed [ 388.299331][ T9] team0 (unregistering): Port device team_slave_0 removed [ 388.309985][T17154] sctp: [Deprecated]: syz-executor.3 (pid 17154) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.309985][T17154] Use struct sctp_sack_info instead [ 388.327742][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.377742][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.528750][ T9] bond0 (unregistering): (slave team0): Releasing backup interface [ 388.556520][ T9] bond0 (unregistering): Released all slaves [ 388.924256][T17177] sctp: [Deprecated]: syz-executor.0 (pid 17177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.924256][T17177] Use struct sctp_sack_info instead [ 389.378296][T17196] sctp: [Deprecated]: syz-executor.0 (pid 17196) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.378296][T17196] Use struct sctp_sack_info instead [ 389.494026][T17195] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 390.461327][T17220] sctp: [Deprecated]: syz-executor.1 (pid 17220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.461327][T17220] Use struct sctp_sack_info instead [ 390.640242][T17231] sctp: [Deprecated]: syz-executor.4 (pid 17231) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.640242][T17231] Use struct sctp_sack_info instead [ 390.879733][T17241] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 391.540299][T17259] sctp: [Deprecated]: syz-executor.4 (pid 17259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.540299][T17259] Use struct sctp_sack_info instead [ 392.037993][T17287] sctp: [Deprecated]: syz-executor.2 (pid 17287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.037993][T17287] Use struct sctp_sack_info instead [ 393.267643][T17345] sctp: [Deprecated]: syz-executor.4 (pid 17345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.267643][T17345] Use struct sctp_sack_info instead [ 394.237167][T17378] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.275940][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 394.292789][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.299981][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.708522][T17407] sctp: [Deprecated]: syz-executor.1 (pid 17407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.708522][T17407] Use struct sctp_sack_info instead [ 395.211825][T17420] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.298938][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 395.317092][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.324364][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.953448][T17457] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.010894][T17457] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.018170][T17457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.591092][T17496] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 396.608287][T17496] netlink: 17267 bytes leftover after parsing attributes in process `syz-executor.2'. [ 397.235404][T17536] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 397.274443][T17536] netlink: 17267 bytes leftover after parsing attributes in process `syz-executor.2'. [ 397.757779][T17564] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.799161][T16687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.826295][T16687] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.833511][T16687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.857141][ T4710] wlan1: Trigger new scan to find an IBSS to join [ 398.015767][T17583] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 398.052288][T17583] netlink: 17267 bytes leftover after parsing attributes in process `syz-executor.2'. [ 398.451026][T17609] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 398.485256][T17609] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 398.722631][T17623] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 398.740997][T17623] netlink: 17267 bytes leftover after parsing attributes in process `syz-executor.1'. [ 399.083941][T17648] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 399.097238][T17648] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 399.311388][T17661] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 399.352059][T17661] netlink: 17267 bytes leftover after parsing attributes in process `syz-executor.4'. [ 399.724620][T17684] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 399.742089][T17684] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 400.310459][T17716] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 400.320864][T17716] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 400.841063][T17744] GPL: port 1(veth0_to_bond) entered blocking state [ 400.884852][T17744] GPL: port 1(veth0_to_bond) entered disabled state [ 400.925183][T17744] device veth0_to_bond entered promiscuous mode [ 401.036079][T17755] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 401.081094][T17755] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 401.132187][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 401.299779][T17771] tap0: tun_chr_ioctl cmd 1074025675 [ 401.329487][T17771] tap0: persist enabled [ 401.390157][T17774] syz-executor.2[17774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.390270][T17774] syz-executor.2[17774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.852202][ T102] wlan1: Trigger new scan to find an IBSS to join [ 402.092594][T17812] tap0: tun_chr_ioctl cmd 1074025675 [ 402.098945][T17812] tap0: persist enabled [ 402.232776][T17817] GPL: port 1(veth0_to_bond) entered blocking state [ 402.246038][T17817] GPL: port 1(veth0_to_bond) entered disabled state [ 402.273890][T17817] device veth0_to_bond entered promiscuous mode [ 402.287056][T17824] syz-executor.3[17824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.287168][T17824] syz-executor.3[17824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.643963][T17845] tap0: tun_chr_ioctl cmd 1074025675 [ 402.691949][T17845] tap0: persist enabled [ 403.387107][T17880] syz-executor.2[17880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.387229][T17880] syz-executor.2[17880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.389623][T17881] tap0: tun_chr_ioctl cmd 1074025675 [ 403.437622][T17881] tap0: persist enabled [ 403.852101][ T102] wlan1: Creating new IBSS network, BSSID 3e:4b:46:48:6a:26 [ 404.077893][T17915] tap1: tun_chr_ioctl cmd 1074025675 [ 404.083601][T17915] tap1: persist enabled [ 404.338213][T17927] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 404.385326][T17927] netlink: 13435 bytes leftover after parsing attributes in process `syz-executor.1'. [ 404.504998][T17932] syz-executor.0[17932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 404.505100][T17932] syz-executor.0[17932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 404.957671][T17965] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 404.989996][T17966] netlink: 202920 bytes leftover after parsing attributes in process `syz-executor.0'. [ 404.990052][T17965] netlink: 13435 bytes leftover after parsing attributes in process `syz-executor.1'. [ 405.012954][T17966] openvswitch: netlink: Flow key attr not present in new flow. [ 405.367472][T17987] syz-executor.4[17987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.367577][T17987] syz-executor.4[17987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.496417][T17993] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 405.524043][T17993] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.1'. [ 405.636106][T17998] netlink: 1041 bytes leftover after parsing attributes in process `syz-executor.1'. [ 405.670575][T18000] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 405.694715][T18000] netlink: 13435 bytes leftover after parsing attributes in process `syz-executor.2'. [ 406.057476][T18021] netlink: 4093 bytes leftover after parsing attributes in process `syz-executor.0'. [ 406.094814][T18021] netlink: 4093 bytes leftover after parsing attributes in process `syz-executor.0'. [ 406.121770][T18023] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 406.134265][T18020] netlink: 4093 bytes leftover after parsing attributes in process `syz-executor.0'. [ 406.343983][T18040] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 406.399460][T18043] openvswitch: netlink: Flow key attr not present in new flow. [ 407.429225][T18066] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 407.897794][T18094] [ 407.900157][T18094] ====================================================== [ 407.907177][T18094] WARNING: possible circular locking dependency detected [ 407.914181][T18094] 6.1.92-syzkaller #0 Not tainted [ 407.919192][T18094] ------------------------------------------------------ [ 407.926191][T18094] syz-executor.1/18094 is trying to acquire lock: [ 407.932679][T18094] ffff888027c540d8 (&sighand->siglock){-.-.}-{2:2}, at: __lock_task_sighand+0x145/0x2d0 [ 407.942538][T18094] [ 407.942538][T18094] but task is already holding lock: [ 407.949886][T18094] ffff8880b9935e90 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 407.960232][T18094] [ 407.960232][T18094] which lock already depends on the new lock. [ 407.960232][T18094] [ 407.970642][T18094] [ 407.970642][T18094] the existing dependency chain (in reverse order) is: [ 407.979654][T18094] [ 407.979654][T18094] -> #3 (lock#10){+.+.}-{2:2}: [ 407.986604][T18094] lock_acquire+0x1f8/0x5a0 [ 407.991633][T18094] __mmap_lock_do_trace_acquire_returned+0x9d/0x670 [ 407.998739][T18094] stack_map_get_build_id_offset+0x99e/0x9c0 [ 408.005232][T18094] __bpf_get_stack+0x495/0x570 [ 408.010536][T18094] bpf_get_stack_raw_tp+0x1b2/0x220 [ 408.016258][T18094] 0xffffffffa0001fe6 [ 408.020778][T18094] bpf_trace_run2+0x1fd/0x410 [ 408.026168][T18094] trace_tlb_flush+0x151/0x1a0 [ 408.031464][T18094] switch_mm_irqs_off+0x84a/0xc20 [ 408.037010][T18094] __schedule+0x1140/0x4550 [ 408.042042][T18094] schedule+0xbf/0x180 [ 408.046642][T18094] exit_to_user_mode_loop+0x44/0x100 [ 408.052450][T18094] exit_to_user_mode_prepare+0xb1/0x140 [ 408.058524][T18094] irqentry_exit_to_user_mode+0x5/0x30 [ 408.064535][T18094] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 408.071045][T18094] [ 408.071045][T18094] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 408.078333][T18094] lock_acquire+0x1f8/0x5a0 [ 408.083353][T18094] _raw_spin_lock_nested+0x2d/0x40 [ 408.088974][T18094] raw_spin_rq_lock_nested+0x26/0x140 [ 408.094857][T18094] task_fork_fair+0x5d/0x350 [ 408.099958][T18094] sched_cgroup_fork+0x374/0x400 [ 408.105403][T18094] copy_process+0x2442/0x4060 [ 408.110599][T18094] kernel_clone+0x222/0x920 [ 408.115613][T18094] user_mode_thread+0x12e/0x190 [ 408.120985][T18094] rest_init+0x23/0x300 [ 408.125651][T18094] start_kernel+0x0/0x53f [ 408.130490][T18094] start_kernel+0x496/0x53f [ 408.135506][T18094] secondary_startup_64_no_verify+0xcf/0xdb [ 408.141912][T18094] [ 408.141912][T18094] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 408.149193][T18094] lock_acquire+0x1f8/0x5a0 [ 408.154212][T18094] _raw_spin_lock_irqsave+0xd1/0x120 [ 408.160038][T18094] try_to_wake_up+0xad/0x12e0 [ 408.165349][T18094] complete_signal+0x796/0xbd0 [ 408.170726][T18094] __send_signal_locked+0xb1a/0xdc0 [ 408.176438][T18094] do_notify_parent+0xe2b/0x1100 [ 408.181895][T18094] do_exit+0x172e/0x26a0 [ 408.186673][T18094] do_group_exit+0x202/0x2b0 [ 408.191877][T18094] __x64_sys_exit_group+0x3b/0x40 [ 408.197423][T18094] do_syscall_64+0x3b/0xb0 [ 408.202360][T18094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.208856][T18094] [ 408.208856][T18094] -> #0 (&sighand->siglock){-.-.}-{2:2}: [ 408.216665][T18094] validate_chain+0x1661/0x5950 [ 408.222118][T18094] __lock_acquire+0x125b/0x1f80 [ 408.227482][T18094] lock_acquire+0x1f8/0x5a0 [ 408.232497][T18094] _raw_spin_lock_irqsave+0xd1/0x120 [ 408.238297][T18094] __lock_task_sighand+0x145/0x2d0 [ 408.244026][T18094] group_send_sig_info+0x26c/0x300 [ 408.249679][T18094] bpf_send_signal_common+0x2d8/0x420 [ 408.255578][T18094] bpf_send_signal_thread+0x12/0x20 [ 408.261294][T18094] bpf_prog_16ecb682114cf56a+0x1a/0x22 [ 408.267302][T18094] bpf_trace_run4+0x253/0x470 [ 408.272592][T18094] __mmap_lock_do_trace_acquire_returned+0x5e3/0x670 [ 408.279877][T18094] lock_mm_and_find_vma+0x219/0x2e0 [ 408.285588][T18094] exc_page_fault+0x169/0x660 [ 408.290795][T18094] asm_exc_page_fault+0x22/0x30 [ 408.296281][T18094] [ 408.296281][T18094] other info that might help us debug this: [ 408.296281][T18094] [ 408.306606][T18094] Chain exists of: [ 408.306606][T18094] &sighand->siglock --> &rq->__lock --> lock#10 [ 408.306606][T18094] [ 408.318821][T18094] Possible unsafe locking scenario: [ 408.318821][T18094] [ 408.326275][T18094] CPU0 CPU1 [ 408.331767][T18094] ---- ---- [ 408.337116][T18094] lock(lock#10); [ 408.340831][T18094] lock(&rq->__lock); [ 408.347666][T18094] lock(lock#10); [ 408.354208][T18094] lock(&sighand->siglock); [ 408.358807][T18094] [ 408.358807][T18094] *** DEADLOCK *** [ 408.358807][T18094] [ 408.366945][T18094] 5 locks held by syz-executor.1/18094: [ 408.372559][T18094] #0: ffff88804f7888d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2e0 [ 408.382528][T18094] #1: ffff8880b9935e90 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 408.393507][T18094] #2: ffffffff8d12ac80 (rcu_read_lock){....}-{1:2}, at: get_mm_memcg_path+0xb1/0x600 [ 408.403086][T18094] #3: ffffffff8d12ac80 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x16a/0x470 [ 408.412494][T18094] #4: ffffffff8d12ac80 (rcu_read_lock){....}-{1:2}, at: __lock_task_sighand+0x25/0x2d0 [ 408.422417][T18094] [ 408.422417][T18094] stack backtrace: [ 408.428840][T18094] CPU: 1 PID: 18094 Comm: syz-executor.1 Not tainted 6.1.92-syzkaller #0 [ 408.437255][T18094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 408.447389][T18094] Call Trace: [ 408.450684][T18094] [ 408.453606][T18094] dump_stack_lvl+0x1e3/0x2cb [ 408.458334][T18094] ? nf_tcp_handle_invalid+0x642/0x642 [ 408.463938][T18094] ? print_circular_bug+0x12b/0x1a0 [ 408.469170][T18094] check_noncircular+0x2fa/0x3b0 [ 408.474102][T18094] ? add_chain_block+0x850/0x850 [ 408.479035][T18094] ? lockdep_lock+0x11f/0x2a0 [ 408.483740][T18094] ? _find_first_zero_bit+0xd0/0x100 [ 408.489018][T18094] validate_chain+0x1661/0x5950 [ 408.493869][T18094] ? reacquire_held_locks+0x660/0x660 [ 408.499230][T18094] ? __lock_acquire+0x125b/0x1f80 [ 408.504261][T18094] ? validate_chain+0x112/0x5950 [ 408.509200][T18094] ? reacquire_held_locks+0x660/0x660 [ 408.514567][T18094] ? reacquire_held_locks+0x660/0x660 [ 408.520230][T18094] ? mark_lock+0x9a/0x340 [ 408.524922][T18094] __lock_acquire+0x125b/0x1f80 [ 408.529976][T18094] lock_acquire+0x1f8/0x5a0 [ 408.534504][T18094] ? __lock_task_sighand+0x145/0x2d0 [ 408.540230][T18094] ? read_lock_is_recursive+0x10/0x10 [ 408.545594][T18094] ? read_lock_is_recursive+0x10/0x10 [ 408.551039][T18094] ? _raw_spin_lock_irqsave+0xac/0x120 [ 408.556491][T18094] _raw_spin_lock_irqsave+0xd1/0x120 [ 408.561942][T18094] ? __lock_task_sighand+0x145/0x2d0 [ 408.567306][T18094] ? _raw_spin_lock+0x40/0x40 [ 408.571978][T18094] __lock_task_sighand+0x145/0x2d0 [ 408.577322][T18094] ? __lock_task_sighand+0x25/0x2d0 [ 408.582601][T18094] group_send_sig_info+0x26c/0x300 [ 408.587895][T18094] ? lockdep_assert_task_sighand_held+0x2b0/0x2b0 [ 408.594341][T18094] bpf_send_signal_common+0x2d8/0x420 [ 408.599716][T18094] ? trace_bpf_trace_printk+0x250/0x250 [ 408.605276][T18094] ? bpf_trace_run4+0x16a/0x470 [ 408.610155][T18094] bpf_send_signal_thread+0x12/0x20 [ 408.615356][T18094] bpf_prog_16ecb682114cf56a+0x1a/0x22 [ 408.620824][T18094] bpf_trace_run4+0x253/0x470 [ 408.625494][T18094] ? asm_exc_int3+0x35/0x40 [ 408.630000][T18094] ? bpf_trace_run3+0x440/0x440 [ 408.634860][T18094] ? __mmap_lock_do_trace_acquire_returned+0x501/0x670 [ 408.641729][T18094] __mmap_lock_do_trace_acquire_returned+0x5e3/0x670 [ 408.648403][T18094] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 408.655291][T18094] lock_mm_and_find_vma+0x219/0x2e0 [ 408.660499][T18094] exc_page_fault+0x169/0x660 [ 408.665178][T18094] asm_exc_page_fault+0x22/0x30 [ 408.670069][T18094] RIP: 0033:0x7fbe3ec2afb6 [ 408.674484][T18094] Code: 00 00 00 90 48 8b 0d 41 a7 cb 00 4c 63 05 2a a7 cb 00 48 8b 15 2b a7 cb 00 49 01 c8 48 39 ca 72 18 48 8d 42 04 4c 39 c0 73 0f <48> 89 3a 48 83 c2 08 48 89 15 0c a7 cb 00 c3 50 48 8d 35 06 e4 0a [ 408.694444][T18094] RSP: 002b:00007fff831eb7b8 EFLAGS: 00010287 [ 408.700519][T18094] RAX: 0000001b2fb25000 RBX: 00000000000003ec RCX: 0000001b2fb20000 [ 408.708596][T18094] RDX: 0000001b2fb24ffc RSI: ffffffff8100935a RDI: ffffffff81a11802 [ 408.716694][T18094] RBP: 00007fbe3e600f68 R08: 0000001b30120000 R09: 0000000000000003 [ 408.724964][T18094] R10: 00000000000000f9 R11: 000000008132b93e R12: 00007fbe3e5ffda0 [ 408.733036][T18094] R13: 00007fbe3eda0000 R14: 00007fbe3edb4018 R15: 0000000000000001 [ 408.741099][T18094] ? in_gate_area_no_mm+0xa/0x50 2024/06/05 14:42:44 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 408.746046][T18094] ? helper_multiple_ref_obj_use+0x12/0x1c0 [ 408.751944][T18094] Connection to 10.128.1.161 closed by remote host.