last executing test programs: 6.538419948s ago: executing program 4 (id=3882): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 6.499798981s ago: executing program 2 (id=3883): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xfffffd26) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1a02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) 6.331185145s ago: executing program 4 (id=3886): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x5452, &(0x7f0000000a00)={'veth0_to_bridge\x00', @dev}) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r0) 6.191049477s ago: executing program 2 (id=3891): perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000080), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f00000002c0), 0x20000004}, 0x20) close(r0) 6.02470531s ago: executing program 1 (id=3893): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x50, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 6.023216271s ago: executing program 4 (id=3895): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x800, [{0x5, 0x5}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000a80)=""/249, 0x37, 0xf9, 0x1}, 0x20) 5.822887817s ago: executing program 1 (id=3898): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001980)="5c00000013006bcc9e3be35c6e17aa31026b876c1d0000007ea60864161ef36514001ac0050004c0020002000600adbe5557a2459efa80406200000264bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5.591228496s ago: executing program 2 (id=3892): r0 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) close(r0) 4.834397649s ago: executing program 1 (id=3899): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f00000002c0)=ANY=[], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x2}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r1, &(0x7f00000006c0)='pids.current\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@llu, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x6a, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.611283397s ago: executing program 2 (id=3902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454cc, 0xfeffffffffffffff) 4.500400557s ago: executing program 3 (id=3916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000100001c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.500282326s ago: executing program 4 (id=3901): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x4000000}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) 4.410260834s ago: executing program 1 (id=3914): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.196116342s ago: executing program 3 (id=3919): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x8) 4.022656156s ago: executing program 3 (id=3922): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000001000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83116752ddb11cfafffa3837841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc40700a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e30df414b315f651c8412392191fa83ee830548f11e1036a8debd64c490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cd17b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0544c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e1700000000000000000000000000000832b99df00000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cb5ee3a7c9ef89edbdf42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf80300cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9874620e322d9348900000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2bca0f4557869ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a35df8574eb49e972f7976eafee43a6c17009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54aba40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be206af7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c708e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d5040000000000000000000000000000074f21ec2b57bb2daf8fab7cd564d1e84c93af254ab029e6cd"], 0x0}, 0x90) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000001cc0)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc02082c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3c200007"], 0xfdef) 3.288045877s ago: executing program 3 (id=3923): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="1b0000001e007f109e", 0x9}, {&(0x7f0000000140)="78cafb73fc020107f50ddc6c6cf43d45d300", 0x12}], 0x2}, 0x0) 2.983792432s ago: executing program 3 (id=3929): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x8) 2.65472926s ago: executing program 4 (id=3917): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.624894862s ago: executing program 2 (id=3915): r0 = socket$kcm(0x18, 0x0, 0x2) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2.41415929s ago: executing program 1 (id=3918): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xb, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @typedef={0x9, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x43}, 0x20) 1.299081502s ago: executing program 0 (id=3939): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.241272767s ago: executing program 0 (id=3940): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x38, 0x0, &(0x7f00000006c0)="e460cdfbef2408002900119386dd6a00000000072beb3014cd3ec8a755c1e1380081ffad000400e8d50000000100000bb500000500242c10", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.139545715s ago: executing program 0 (id=3941): r0 = socket$kcm(0x18, 0x0, 0x2) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 1.08059535s ago: executing program 0 (id=3942): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 849.36402ms ago: executing program 3 (id=3930): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) 829.371641ms ago: executing program 4 (id=3931): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad"], 0x0}, 0x90) r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001740)={&(0x7f0000000840)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="2c00000000000000000000000700000000830b00ac1e0001ac14140000440c00000000000000000000000000000000001c000000000000000000000008000000"], 0x50}, 0x0) 503.283048ms ago: executing program 1 (id=3933): r0 = socket$kcm(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x8, 0x0, 0x0) 486.77041ms ago: executing program 2 (id=3934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 151.295527ms ago: executing program 0 (id=3947): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000500000006000000000000080200ef000000000000000003000000000100000002000000000800000c0000ff0000000700000000002e003000"], &(0x7f0000000300)=""/16, 0x4d, 0x10, 0x1, 0x9}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x7, 0x8, 0x8, 0xffffffffffffffc0}, @jmp={0x5, 0x1, 0x2, 0x5, 0xb, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x8}], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0xc56, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='devices.list\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4}, 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2f000000, 0xe, 0x0, &(0x7f0000000780)="5ceced9e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=3948): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3f2b446e08000007027ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x56}, {&(0x7f0000000ec0)="2221319c809f", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): o avoid problems! [ 155.737012][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.760631][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.788934][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.812252][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.847827][ T6288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.892766][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.901753][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.914992][ T6288] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.926951][ T6288] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.936461][ T6288] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.945806][ T6288] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.989497][ T6246] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.998931][ T6246] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.009095][ T6246] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.018831][ T6246] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.038309][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.053432][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.112178][ T6263] device veth0_vlan entered promiscuous mode [ 156.119408][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.132139][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.184828][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.194828][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.213635][ T6354] chnl_net:caif_netlink_parms(): no params data found [ 156.230581][ T6263] device veth1_vlan entered promiscuous mode [ 156.293506][ T4008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.318705][ T4008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.367148][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.377314][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.392648][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.421636][ T3566] Bluetooth: hci1: command tx timeout [ 156.433585][ T3627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.467372][ T3627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.495580][ T6263] device veth0_macvtap entered promiscuous mode [ 156.505407][ T4008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.520971][ T4008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.548233][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.562671][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.571123][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.588198][ T6354] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.598755][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.606870][ T6354] device bridge_slave_0 entered promiscuous mode [ 156.616381][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.623604][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.632059][ T6354] device bridge_slave_1 entered promiscuous mode [ 156.645139][ T6263] device veth1_macvtap entered promiscuous mode [ 156.653687][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.662995][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.670913][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.746577][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.757345][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.786195][ T6354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.802940][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.814613][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.825355][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.836707][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.848833][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.859326][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.869424][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.880143][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.892971][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.903708][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.920124][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.928860][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.950708][ T6354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.977663][ T6389] netlink: 'syz.1.1137': attribute type 10 has an invalid length. [ 157.010555][ T6389] team0: Port device netdevsim0 added [ 157.036744][ T6378] chnl_net:caif_netlink_parms(): no params data found [ 157.047767][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.058565][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.068817][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.079444][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.089576][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.101105][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.111002][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.121480][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.132703][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.152574][ T6354] team0: Port device team_slave_0 added [ 157.158570][ T6390] netlink: 'syz.1.1137': attribute type 10 has an invalid length. [ 157.175736][ T6390] team0: Port device netdevsim0 removed [ 157.184305][ T6390] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 157.208394][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.227900][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.247906][ T6263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.257167][ T6263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.265965][ T6263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.274752][ T6263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.287566][ T6354] team0: Port device team_slave_1 added [ 157.432463][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.439441][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.478023][ T6354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.523191][ T6402] netlink: 'syz.3.1164': attribute type 21 has an invalid length. [ 157.531055][ T6402] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1164'. [ 157.554911][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.563470][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.595010][ T6354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.644289][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.651629][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.660545][ T6378] device bridge_slave_0 entered promiscuous mode [ 157.690708][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.698647][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.706150][ T3566] Bluetooth: hci3: command tx timeout [ 157.713699][ T6378] device bridge_slave_1 entered promiscuous mode [ 157.782716][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.809800][ T6354] device hsr_slave_0 entered promiscuous mode [ 157.825839][ T6354] device hsr_slave_1 entered promiscuous mode [ 157.836829][ T6354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.848777][ T6354] Cannot create hsr debugfs directory [ 157.867170][ T6378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.879771][ T6378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.889302][ T6418] netlink: 'syz.3.1172': attribute type 16 has an invalid length. [ 157.897650][ T6418] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1172'. [ 157.930623][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.071448][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.132832][ T6378] team0: Port device team_slave_0 added [ 158.155547][ T4008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.174060][ T6378] team0: Port device team_slave_1 added [ 158.187488][ T4008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.249211][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.274489][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.318925][ T6431] netlink: 'syz.1.1178': attribute type 21 has an invalid length. [ 158.328298][ T6431] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1178'. [ 158.340235][ T6378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.347461][ T6378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.375209][ T6378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.397713][ T6378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.419468][ T6378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.450279][ T6378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.503558][ T3566] Bluetooth: hci1: command tx timeout [ 158.510326][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.534969][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.565663][ T6440] netlink: 'syz.1.1182': attribute type 21 has an invalid length. [ 158.581220][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.615389][ T6378] device hsr_slave_0 entered promiscuous mode [ 158.624537][ T6378] device hsr_slave_1 entered promiscuous mode [ 158.631156][ T6378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.645521][ T6378] Cannot create hsr debugfs directory [ 158.770754][ T6354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.870436][ T6354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.013133][ T6354] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.198416][ T6454] netlink: 'syz.1.1188': attribute type 22 has an invalid length. [ 159.220356][ T6354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.407847][ T6466] netlink: 'syz.1.1194': attribute type 21 has an invalid length. [ 159.645678][ T6479] netlink: 'syz.1.1200': attribute type 22 has an invalid length. [ 159.781405][ T3566] Bluetooth: hci3: command tx timeout [ 159.929804][ T3551] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.938288][ T3551] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.947325][ T3551] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.972061][ T3551] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.979770][ T3551] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 159.987147][ T3551] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.159974][ T6378] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 160.253310][ T6378] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 160.275949][ T6495] netlink: 'syz.1.1207': attribute type 21 has an invalid length. [ 160.298947][ T6378] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 160.490519][ T6378] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 160.566586][ T6354] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 160.584517][ T3566] Bluetooth: hci1: command tx timeout [ 160.640252][ T6354] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 160.812802][ T6354] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 160.847252][ T6354] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 160.870501][ T6482] chnl_net:caif_netlink_parms(): no params data found [ 160.896316][ T6507] netlink: 'syz.1.1212': attribute type 10 has an invalid length. [ 160.935118][ T6507] bond0: (slave netdevsim0): Releasing backup interface [ 160.948161][ T6507] team0: Port device netdevsim0 added [ 161.029943][ T6508] netlink: 'syz.1.1212': attribute type 10 has an invalid length. [ 161.079249][ T6508] team0: Port device netdevsim0 removed [ 161.096375][ T6508] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 161.146198][ T46] device hsr_slave_0 left promiscuous mode [ 161.155570][ T46] device hsr_slave_1 left promiscuous mode [ 161.163546][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.176041][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.185157][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.192858][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.200589][ T46] device bridge_slave_1 left promiscuous mode [ 161.207281][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.226346][ T46] device bridge_slave_0 left promiscuous mode [ 161.232893][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.251506][ T46] device hsr_slave_0 left promiscuous mode [ 161.257971][ T46] device hsr_slave_1 left promiscuous mode [ 161.272681][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.280791][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.304241][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.311926][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.319710][ T46] device bridge_slave_1 left promiscuous mode [ 161.326418][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.335553][ T46] device bridge_slave_0 left promiscuous mode [ 161.342319][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.387956][ T46] device veth1_macvtap left promiscuous mode [ 161.394244][ T46] device veth0_macvtap left promiscuous mode [ 161.400420][ T46] device veth1_vlan left promiscuous mode [ 161.407360][ T46] device veth0_vlan left promiscuous mode [ 161.415346][ T46] device veth1_macvtap left promiscuous mode [ 161.421963][ T46] device veth0_macvtap left promiscuous mode [ 161.428110][ T46] device veth1_vlan left promiscuous mode [ 161.434368][ T46] device veth0_vlan left promiscuous mode [ 161.861544][ T3551] Bluetooth: hci3: command tx timeout [ 162.021914][ T46] team0 (unregistering): Port device team_slave_1 removed [ 162.033527][ T3551] Bluetooth: hci4: command tx timeout [ 162.086644][ T46] team0 (unregistering): Port device team_slave_0 removed [ 162.147130][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.205498][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.668984][ T3551] Bluetooth: hci1: command tx timeout [ 162.701048][ T46] bond0 (unregistering): Released all slaves [ 163.014703][ T46] team0 (unregistering): Port device team_slave_1 removed [ 163.040668][ T46] team0 (unregistering): Port device team_slave_0 removed [ 163.065346][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.096372][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.330613][ T46] bond0 (unregistering): Released all slaves [ 163.468085][ T6482] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.493817][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.510413][ T6482] device bridge_slave_0 entered promiscuous mode [ 163.537220][ T6378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.553957][ T6482] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.562932][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.576126][ T6482] device bridge_slave_1 entered promiscuous mode [ 163.586514][ T6543] validate_nla: 1 callbacks suppressed [ 163.586527][ T6543] netlink: 'syz.4.1226': attribute type 10 has an invalid length. [ 163.615197][ T6543] team0: Port device netdevsim0 added [ 163.630815][ T6354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.646503][ T6546] netlink: 'syz.4.1226': attribute type 10 has an invalid length. [ 163.709539][ T6546] team0: Port device netdevsim0 removed [ 163.724085][ T6546] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 163.771675][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.780282][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.812381][ T6378] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.824313][ T6354] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.824426][ T6550] netlink: 'syz.4.1229': attribute type 1 has an invalid length. [ 163.838894][ T6482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.858312][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.868188][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.880508][ T6482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.904238][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.913919][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.931055][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.938202][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.945662][ T3551] Bluetooth: hci3: command tx timeout [ 163.947571][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.961942][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.972048][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.979169][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.037480][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.048594][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.060748][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.075511][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.082647][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.090460][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.099328][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.107434][ T3551] Bluetooth: hci4: command tx timeout [ 164.113890][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.120950][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.172108][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.182102][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.191571][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.200315][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.210808][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.221052][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.237837][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.250051][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.259221][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.268105][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.276798][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.289072][ T6482] team0: Port device team_slave_0 added [ 164.324405][ T6482] team0: Port device team_slave_1 added [ 164.360393][ T6378] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.373012][ T6378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.387606][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.400264][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.408569][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.422926][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.431823][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.440189][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.449192][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.457732][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.471883][ T6354] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.484316][ T6354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.527964][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.540068][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.567634][ T6482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.587334][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.597628][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.625182][ T6482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.640868][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.649295][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.672446][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.681069][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.701993][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.732063][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.824117][ T6482] device hsr_slave_0 entered promiscuous mode [ 164.861147][ T6482] device hsr_slave_1 entered promiscuous mode [ 164.941024][ T6575] netlink: 'syz.1.1239': attribute type 10 has an invalid length. [ 164.979135][ T6575] bond0: (slave netdevsim0): Releasing backup interface [ 164.990664][ T6575] team0: Port device netdevsim0 added [ 164.996725][ T6579] netlink: 'syz.1.1239': attribute type 10 has an invalid length. [ 165.031058][ T6579] team0: Port device netdevsim0 removed [ 165.046600][ T6579] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 165.370153][ T6482] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.448931][ T6378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.469449][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.487231][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.509239][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.531799][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.560930][ T6354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.600983][ T6482] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.642248][ T6592] netlink: 'syz.4.1244': attribute type 10 has an invalid length. [ 165.664303][ T6592] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1244'. [ 165.710889][ T6592] device team0 entered promiscuous mode [ 165.716848][ T6592] device team_slave_0 entered promiscuous mode [ 165.729337][ T6592] device team_slave_1 entered promiscuous mode [ 165.736759][ T6592] bridge0: port 3(team0) entered blocking state [ 165.748102][ T6592] bridge0: port 3(team0) entered disabled state [ 165.764828][ T6592] bridge0: port 3(team0) entered blocking state [ 165.771429][ T6592] bridge0: port 3(team0) entered forwarding state [ 165.814708][ T6482] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.847481][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.864685][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.908508][ T6482] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.933799][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.948634][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.021053][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.034129][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.043349][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.052326][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.062641][ T6378] device veth0_vlan entered promiscuous mode [ 166.096153][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.108549][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.119630][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.133847][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.179537][ T6354] device veth0_vlan entered promiscuous mode [ 166.198713][ T3566] Bluetooth: hci4: command tx timeout [ 166.202020][ T6378] device veth1_vlan entered promiscuous mode [ 166.250520][ T6354] device veth1_vlan entered promiscuous mode [ 166.470452][ T6608] netlink: 'syz.1.1251': attribute type 10 has an invalid length. [ 166.559793][ T6608] bond0: (slave netdevsim0): Releasing backup interface [ 166.585737][ T6608] team0: Port device netdevsim0 added [ 166.602062][ T6609] netlink: 'syz.1.1251': attribute type 10 has an invalid length. [ 166.658407][ T6609] team0: Port device netdevsim0 removed [ 166.669074][ T6609] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 166.696391][ T6378] device veth0_macvtap entered promiscuous mode [ 166.745052][ T6378] device veth1_macvtap entered promiscuous mode [ 166.770484][ T6354] device veth0_macvtap entered promiscuous mode [ 166.796243][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 166.829096][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 166.902096][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 166.910402][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 166.953173][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.987779][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.016643][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.031058][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.040253][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.059287][ T6482] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 167.106185][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.133585][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.168038][ T6482] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 167.184394][ T6354] device veth1_macvtap entered promiscuous mode [ 167.205589][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.230519][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.251450][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.271335][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.287777][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.300703][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.339401][ T6378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.354356][ T6482] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 167.365072][ T6482] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 167.382810][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.398113][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.409622][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.426310][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.436475][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.453386][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.467256][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.480269][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.492869][ T6378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.520735][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.532418][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.550895][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.567786][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.577864][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.605710][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.626286][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.641112][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.662517][ T6354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.693554][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.732677][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.772058][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.780655][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.865199][ T6378] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.902987][ T6378] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.911936][ T6378] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.920653][ T6378] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.986734][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.010974][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.067671][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.088570][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.129888][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.162618][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.188875][ T6354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.206843][ T6354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.219450][ T6354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.254837][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.268639][ T3566] Bluetooth: hci4: command tx timeout [ 168.275742][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.311026][ T6354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.320613][ T6354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.335497][ T6354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.357663][ T6354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.500302][ T4008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.517801][ T4008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.530721][ T6482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.557060][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.640441][ T4008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.650673][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.658904][ T4008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.659816][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.686396][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.704322][ T6482] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.774831][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.784112][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.790869][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.812039][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.821053][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.828186][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.863150][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.871997][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.880360][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.887491][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.112883][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 169.129660][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.154164][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.216110][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.236867][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.262658][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.280638][ T6482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 169.317163][ T6482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.358334][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.393293][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.411016][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.435108][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.452197][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.460889][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.501849][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.510465][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.539924][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.551989][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.838047][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.191384][ T6482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.199832][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.209668][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.327671][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.350462][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.499633][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.516531][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.530077][ T6482] device veth0_vlan entered promiscuous mode [ 172.548360][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.565300][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.585759][ T6482] device veth1_vlan entered promiscuous mode [ 172.763373][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.790517][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.816151][ T6732] netlink: 'syz.1.1301': attribute type 29 has an invalid length. [ 172.852058][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.861154][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.908485][ T6482] device veth0_macvtap entered promiscuous mode [ 172.933929][ T6732] netlink: 'syz.1.1301': attribute type 29 has an invalid length. [ 172.961841][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.021139][ T46] device hsr_slave_0 left promiscuous mode [ 173.034579][ T46] device hsr_slave_1 left promiscuous mode [ 173.069510][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.113163][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.156388][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.186052][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.227054][ T46] device bridge_slave_1 left promiscuous mode [ 173.246234][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.292275][ T46] device bridge_slave_0 left promiscuous mode [ 173.307938][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.424295][ T46] device veth1_macvtap left promiscuous mode [ 173.449664][ T46] device veth0_macvtap left promiscuous mode [ 173.476894][ T46] device veth1_vlan left promiscuous mode [ 173.494305][ T46] device veth0_vlan left promiscuous mode [ 174.994387][ T46] team0 (unregistering): Port device team_slave_1 removed [ 175.048053][ T46] team0 (unregistering): Port device team_slave_0 removed [ 175.151482][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.386919][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.759935][ T46] bond0 (unregistering): Released all slaves [ 176.835897][ T6482] device veth1_macvtap entered promiscuous mode [ 176.844826][ T6738] netlink: 'syz.1.1301': attribute type 29 has an invalid length. [ 176.933462][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.959420][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.975625][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.987347][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.997811][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.009491][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.025834][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.051453][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.104525][ T6482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.127102][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.154305][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.184867][ T3566] Bluetooth: hci1: unknown advertising packet type: 0x13 [ 177.187604][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.245627][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.279317][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.322925][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.388333][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.443778][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.474052][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.510150][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.553504][ T6482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.616144][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.647656][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.692006][ T6482] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.721064][ T6482] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.745725][ T6482] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.770546][ T6482] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.889353][ T3627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.912038][ T3627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.964736][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.993884][ T3627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.009754][ T3627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.013502][ T6876] netlink: 'syz.1.1361': attribute type 29 has an invalid length. [ 178.051709][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.075529][ T6876] netlink: 'syz.1.1361': attribute type 29 has an invalid length. [ 178.099310][ T6880] netlink: 'syz.1.1361': attribute type 29 has an invalid length. [ 178.607209][ T6902] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1369'. [ 178.996195][ T6917] netlink: 'syz.1.1377': attribute type 29 has an invalid length. [ 179.022238][ T6919] netlink: 'syz.3.1378': attribute type 2 has an invalid length. [ 179.030168][ T6919] netlink: 'syz.3.1378': attribute type 1 has an invalid length. [ 179.036672][ T6917] netlink: 'syz.1.1377': attribute type 29 has an invalid length. [ 179.044719][ T6919] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1378'. [ 179.112002][ T6920] netlink: 'syz.1.1377': attribute type 29 has an invalid length. [ 179.489035][ T6942] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1389'. [ 180.016250][ T6965] netlink: 'syz.4.1396': attribute type 29 has an invalid length. [ 180.061664][ T6965] netlink: 'syz.4.1396': attribute type 29 has an invalid length. [ 180.392889][ T6980] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1405'. [ 180.435686][ T6988] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.1408'. [ 180.859693][ T7013] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1419'. [ 180.903125][ T7015] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.1421'. [ 180.997630][ T7021] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1424'. [ 181.109288][ T3566] Bluetooth: hci1: Malformed HCI Event [ 181.428808][ T7041] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1434'. [ 181.513333][ T7049] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.1438'. [ 183.897003][ T3566] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 183.907615][ T7150] __nla_validate_parse: 3 callbacks suppressed [ 183.907631][ T7150] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1481'. [ 184.116941][ T7165] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1488'. [ 184.314054][ T3566] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 184.700398][ T7192] validate_nla: 4 callbacks suppressed [ 184.700414][ T7192] netlink: 'syz.4.1499': attribute type 9 has an invalid length. [ 184.820711][ T7192] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.1499'. [ 185.393786][ T7234] netlink: 'syz.1.1518': attribute type 9 has an invalid length. [ 185.411793][ T7234] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.1518'. [ 186.541003][ T7258] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1526'. [ 186.753541][ T7265] netlink: 'syz.3.1532': attribute type 9 has an invalid length. [ 186.803313][ T7265] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.1532'. [ 188.210668][ T7297] netlink: 'syz.1.1546': attribute type 9 has an invalid length. [ 188.231429][ T7297] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.1546'. [ 189.352568][ T7334] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1565'. [ 190.116465][ T7377] IPv6: Can't replace route, no match found [ 191.094614][ T7411] IPv6: Can't replace route, no match found [ 192.107697][ T7454] IPv6: Can't replace route, no match found [ 192.922743][ T7497] IPv6: Can't replace route, no match found [ 193.457353][ T7521] netlink: 'syz.0.1638': attribute type 1 has an invalid length. [ 193.473913][ T7521] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1638'. [ 193.637491][ T7529] IPv6: Can't replace route, no match found [ 193.881146][ T7542] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1648'. [ 193.952570][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.958922][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.977389][ T7546] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 193.984068][ T7546] pim6reg0: linktype set to 6 [ 194.126597][ T7558] netlink: 'syz.3.1654': attribute type 1 has an invalid length. [ 194.141438][ T7558] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1654'. [ 194.242857][ T3566] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 194.320927][ T7574] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1662'. [ 194.667761][ T7591] netlink: 'syz.1.1669': attribute type 1 has an invalid length. [ 194.705778][ T7591] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1669'. [ 194.800528][ T7593] delete_channel: no stack [ 195.018006][ T3566] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 195.430606][ T7620] netlink: 'syz.4.1682': attribute type 1 has an invalid length. [ 195.456528][ T7623] delete_channel: no stack [ 195.491518][ T7620] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1682'. [ 195.527160][ T7629] netlink: 'syz.3.1685': attribute type 21 has an invalid length. [ 195.551198][ T7629] netlink: 'syz.3.1685': attribute type 5 has an invalid length. [ 195.566159][ T7629] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1685'. [ 195.780644][ T7647] delete_channel: no stack [ 195.933974][ T7654] netlink: 'syz.0.1699': attribute type 1 has an invalid length. [ 195.937729][ T7656] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1698'. [ 195.968352][ T7654] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1699'. [ 196.015455][ T7657] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 196.032336][ T7657] pim6reg0: linktype set to 6 [ 196.047901][ T7659] netlink: 'syz.2.1701': attribute type 21 has an invalid length. [ 196.087155][ T7659] netlink: 'syz.2.1701': attribute type 5 has an invalid length. [ 196.098424][ T7659] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1701'. [ 196.414031][ T7682] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1712'. [ 196.471740][ T7685] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1713'. [ 196.495202][ T7688] netlink: 'syz.2.1715': attribute type 21 has an invalid length. [ 196.515062][ T7688] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1715'. [ 196.970300][ T7714] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1727'. [ 200.711812][ T7813] : renamed from pim6reg1 [ 201.288077][ T3566] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 201.503620][ T7868] : renamed from pim6reg1 [ 205.075220][ T7960] : renamed from pim6reg1 [ 206.796936][ T7992] : renamed from pim6reg1 [ 209.922826][ T8089] validate_nla: 1 callbacks suppressed [ 209.922843][ T8089] netlink: 'syz.2.1876': attribute type 21 has an invalid length. [ 210.019276][ T8089] netlink: 'syz.2.1876': attribute type 5 has an invalid length. [ 210.277634][ T8094] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1878'. [ 210.868571][ T8117] netlink: 'syz.1.1888': attribute type 21 has an invalid length. [ 210.929650][ T8117] netlink: 'syz.1.1888': attribute type 5 has an invalid length. [ 211.864941][ T8150] device veth0_vlan left promiscuous mode [ 211.873709][ T8150] device veth0_vlan entered promiscuous mode [ 211.893201][ T8156] netlink: 'syz.0.1903': attribute type 21 has an invalid length. [ 211.913587][ T8156] netlink: 'syz.0.1903': attribute type 5 has an invalid length. [ 211.936483][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.952741][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.970045][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.874875][ T8204] device pim6reg1 entered promiscuous mode [ 213.128688][ T8213] device veth0_vlan left promiscuous mode [ 213.136151][ T8213] device veth0_vlan entered promiscuous mode [ 213.180673][ T8220] netlink: 'syz.1.1932': attribute type 22 has an invalid length. [ 213.214887][ T8226] syzkaller0: refused to change device tx_queue_len [ 213.390958][ T8234] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1940'. [ 214.913801][ T8272] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1953'. [ 216.120418][ T8308] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1968'. [ 217.210249][ T8367] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1994'. [ 218.654225][ T8445] netlink: 121244 bytes leftover after parsing attributes in process `syz.2.2028'. [ 219.213002][ T8474] netlink: 121244 bytes leftover after parsing attributes in process `syz.2.2042'. [ 219.752147][ T8508] netlink: 121244 bytes leftover after parsing attributes in process `syz.1.2058'. [ 220.036553][ T8532] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2066'. [ 220.263518][ T8542] netlink: 121244 bytes leftover after parsing attributes in process `syz.2.2073'. [ 220.517866][ T8559] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2081'. [ 220.748354][ T8569] netlink: 121244 bytes leftover after parsing attributes in process `syz.3.2087'. [ 220.840304][ T8577] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2082'. [ 221.183379][ T8596] syz.1.2098 (8596) used greatest stack depth: 19168 bytes left [ 221.429744][ T8618] __nla_validate_parse: 1 callbacks suppressed [ 221.429764][ T8618] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2107'. [ 221.512202][ T8623] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2110'. [ 221.831903][ T8639] syzkaller0: refused to change device tx_queue_len [ 222.204929][ T3566] Bluetooth: hci0: unexpected event 0x17 length: 15 > 6 [ 222.818187][ T8679] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2136'. [ 223.385168][ T8698] netlink: 210 bytes leftover after parsing attributes in process `syz.4.2143'. [ 223.528828][ T8703] netlink: 'syz.4.2145': attribute type 3 has an invalid length. [ 223.587707][ T8703] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2145'. [ 223.716489][ T8709] netlink: 26 bytes leftover after parsing attributes in process `syz.1.2148'. [ 223.969222][ T3566] Bluetooth: hci3: unexpected event 0x17 length: 15 > 6 [ 224.158967][ T8726] netlink: 210 bytes leftover after parsing attributes in process `syz.1.2155'. [ 224.572496][ T8738] netlink: 26 bytes leftover after parsing attributes in process `syz.3.2161'. [ 224.606976][ T8740] netlink: 'syz.4.2160': attribute type 3 has an invalid length. [ 224.641506][ T8740] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2160'. [ 224.915359][ T3566] Bluetooth: hci4: unexpected event 0x17 length: 15 > 6 [ 225.030325][ T8768] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2174'. [ 225.145473][ T8773] netlink: 'syz.1.2176': attribute type 3 has an invalid length. [ 225.335949][ T8783] syzkaller0: refused to change device tx_queue_len [ 225.388237][ T8789] netlink: 'syz.2.2184': attribute type 21 has an invalid length. [ 226.314336][ T8821] netlink: 'syz.3.2198': attribute type 21 has an invalid length. [ 228.738081][ T8844] netlink: 'syz.2.2207': attribute type 3 has an invalid length. [ 228.746527][ T8844] __nla_validate_parse: 2 callbacks suppressed [ 228.746541][ T8844] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2207'. [ 228.808237][ T8842] netlink: 210 bytes leftover after parsing attributes in process `syz.1.2206'. [ 228.921481][ T8849] netlink: 'syz.2.2209': attribute type 21 has an invalid length. [ 229.683712][ T8901] netlink: 'syz.0.2230': attribute type 6 has an invalid length. [ 230.888270][ T8928] device team_slave_0 left promiscuous mode [ 232.327137][ T8928] team0: Port device team_slave_0 removed [ 232.344168][ T8928] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 232.809673][ T8958] netlink: 'syz.1.2256': attribute type 6 has an invalid length. [ 233.008964][ T8964] team0: Port device team_slave_0 removed [ 233.018595][ T8964] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 234.226183][ T8982] netlink: 'syz.1.2265': attribute type 5 has an invalid length. [ 234.240027][ T8982] netlink: 'syz.1.2265': attribute type 15 has an invalid length. [ 234.257930][ T8983] syzkaller0: refused to change device tx_queue_len [ 236.245057][ T9026] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 236.506420][ T9041] syzkaller0: refused to change device tx_queue_len [ 239.862630][ T3551] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.876507][ T3551] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.901169][ T3551] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.911430][ T3551] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.920681][ T3551] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 239.930545][ T3551] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.503906][ T9180] chnl_net:caif_netlink_parms(): no params data found [ 241.745405][ T4008] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.785671][ T9209] device lo entered promiscuous mode [ 241.907613][ T4008] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.924721][ T9180] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.939291][ T9180] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.948326][ T9180] device bridge_slave_0 entered promiscuous mode [ 242.015178][ T4008] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.027651][ T3551] Bluetooth: hci5: command tx timeout [ 242.051948][ T9180] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.059132][ T9180] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.086697][ T9180] device bridge_slave_1 entered promiscuous mode [ 242.117935][ T4008] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.157227][ T9180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.170882][ T9180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.206437][ T9235] netlink: 'syz.0.2373': attribute type 21 has an invalid length. [ 242.416287][ T9180] team0: Port device team_slave_0 added [ 242.435737][ T9242] bridge0: port 3(veth0_to_bond) entered blocking state [ 242.449516][ T9242] bridge0: port 3(veth0_to_bond) entered disabled state [ 242.511788][ T9242] device veth0_to_bond entered promiscuous mode [ 242.530281][ T9242] bridge0: port 3(veth0_to_bond) entered blocking state [ 242.537648][ T9242] bridge0: port 3(veth0_to_bond) entered forwarding state [ 242.553167][ T9180] team0: Port device team_slave_1 added [ 242.643196][ T9180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.662270][ T9180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.763622][ T9180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.826289][ T9180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.833591][ T9180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.866361][ T9180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.915369][ T9267] netlink: 'syz.4.2387': attribute type 21 has an invalid length. [ 243.246481][ T9180] device hsr_slave_0 entered promiscuous mode [ 243.283986][ T9180] device hsr_slave_1 entered promiscuous mode [ 243.302220][ T9180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.320138][ T9180] Cannot create hsr debugfs directory [ 243.406975][ T9279] bridge0: port 3(veth0_to_bond) entered blocking state [ 243.425653][ T9279] bridge0: port 3(veth0_to_bond) entered disabled state [ 243.453681][ T9279] device veth0_to_bond entered promiscuous mode [ 243.485467][ T9279] bridge0: port 3(veth0_to_bond) entered blocking state [ 243.492743][ T9279] bridge0: port 3(veth0_to_bond) entered forwarding state [ 243.587481][ T9298] device lo left promiscuous mode [ 243.667764][ T9294] device lo entered promiscuous mode [ 243.698787][ T9304] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2403'. [ 243.885764][ T9313] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.2406'. [ 244.101512][ T3551] Bluetooth: hci5: command tx timeout [ 244.108104][ T9324] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2413'. [ 244.203291][ T9322] syzkaller0: refused to change device tx_queue_len [ 244.950182][ T9340] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2420'. [ 245.598256][ T4008] device hsr_slave_0 left promiscuous mode [ 245.644863][ T4008] device hsr_slave_1 left promiscuous mode [ 245.675970][ T4008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.715686][ T4008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.747797][ T4008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.769946][ T4008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.814934][ T4008] device bridge_slave_1 left promiscuous mode [ 245.842939][ T4008] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.869463][ T4008] device bridge_slave_0 left promiscuous mode [ 245.899321][ T4008] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.059364][ T4008] device veth1_macvtap left promiscuous mode [ 246.082085][ T4008] device veth0_macvtap left promiscuous mode [ 246.116556][ T4008] device veth1_vlan left promiscuous mode [ 246.153097][ T4008] device veth0_vlan left promiscuous mode [ 246.181633][ T3551] Bluetooth: hci5: command tx timeout [ 246.396185][ T9368] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2432'. [ 246.630390][ T4008] team0 (unregistering): Port device team_slave_1 removed [ 246.658070][ T4008] team0 (unregistering): Port device team_slave_0 removed [ 246.686584][ T4008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.715668][ T4008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.975107][ T4008] bond0 (unregistering): Released all slaves [ 247.040340][ T9353] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2425'. [ 247.465989][ T9180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 247.509176][ T9180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 247.528380][ T9180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 247.538982][ T9180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 247.745254][ T9391] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2442'. [ 248.083927][ T9398] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.093361][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.155672][ T9180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.213491][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.231748][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.265058][ T9180] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.271962][ T3551] Bluetooth: hci5: command tx timeout [ 248.294244][ T9405] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.301395][ T9405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.308907][ T9405] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.316069][ T9405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.352725][ T9405] device bridge0 entered promiscuous mode [ 248.385965][ T9413] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.2454'. [ 248.431897][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.440693][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.470961][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.478228][ T3594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.519858][ T9415] syzkaller0: refused to change device tx_queue_len [ 248.541997][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.550175][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.569694][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.589871][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.597016][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.721831][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.798362][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.875460][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.972565][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.022903][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.042896][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.112378][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.120967][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.195927][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.247161][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.303986][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.359768][ T9180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.388460][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.218040][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.226612][ T3551] Bluetooth: hci0: Malformed LE Event: 0x02 [ 251.240327][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.255685][ T9180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.308293][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.327270][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.366367][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.387040][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.434833][ T9180] device veth0_vlan entered promiscuous mode [ 251.469057][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.477184][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.522188][ T9180] device veth1_vlan entered promiscuous mode [ 252.005604][ T9454] bridge0: port 3(veth0_to_bond) entered disabled state [ 252.012833][ T9454] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.020526][ T9454] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.235799][ T9468] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2473'. [ 252.313953][ T9460] bridge0: port 3(veth0_to_bond) entered blocking state [ 252.321069][ T9460] bridge0: port 3(veth0_to_bond) entered forwarding state [ 252.328537][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.335724][ T9460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.343278][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.350491][ T9460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.465990][ T9460] device bridge0 entered promiscuous mode [ 252.508889][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 252.535918][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.669455][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.678515][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.694334][ T9180] device veth0_macvtap entered promiscuous mode [ 252.723972][ T3551] Bluetooth: hci2: Malformed LE Event: 0x02 [ 252.761567][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.774895][ T9180] device veth1_macvtap entered promiscuous mode [ 252.809325][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.840488][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.862556][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.899990][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.926365][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.959738][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.986345][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.027868][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.056667][ T9180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.088637][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.108548][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.131039][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.158589][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.185898][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.228718][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.272413][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.285961][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.298584][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.309869][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.326715][ T9180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.335559][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.367391][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.393490][ T9180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.414892][ T9180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.424176][ T9180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.433314][ T9180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.808461][ T9484] syzkaller0: refused to change device tx_queue_len [ 253.840699][ T3627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.866546][ T3627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.384488][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.390968][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.044577][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 256.066781][ T9504] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2486'. [ 256.083961][ T3627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.177158][ T3627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.250369][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 256.396472][ T9510] netlink: 'syz.4.2488': attribute type 21 has an invalid length. [ 256.446253][ T9510] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2488'. [ 256.620770][ T3551] Bluetooth: hci3: Malformed LE Event: 0x02 [ 257.722702][ T9539] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2498'. [ 257.908570][ T3551] Bluetooth: hci1: Malformed LE Event: 0x02 [ 258.944206][ T3551] Bluetooth: hci0: Malformed LE Event: 0x02 [ 262.316709][ T9595] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2516'. [ 262.331125][ T9609] netlink: 'syz.0.2523': attribute type 10 has an invalid length. [ 262.339694][ T9609] netlink: 'syz.0.2523': attribute type 4 has an invalid length. [ 262.351456][ T9609] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2523'. [ 262.397908][ T9609] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 263.568601][ T9670] netlink: 'syz.2.2549': attribute type 21 has an invalid length. [ 263.577731][ T9670] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2549'. [ 265.944047][ T9682] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2553'. [ 266.099975][ T3556] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 266.500763][ T9759] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2587'. [ 266.821858][ T9771] netlink: 'syz.1.2592': attribute type 27 has an invalid length. [ 266.837121][ T9771] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.2592'. [ 267.703258][ T3556] Bluetooth: hci2: command 0x0406 tx timeout [ 267.703418][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 268.304114][ T9798] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2604'. [ 269.074857][ T48] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4 [ 269.472825][ T9807] syzkaller0: refused to change device tx_queue_len [ 269.624802][ T9847] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2621'. [ 271.001377][ T48] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 271.212413][ T9884] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2638'. [ 271.394426][ T9898] netlink: 'syz.1.2643': attribute type 13 has an invalid length. [ 271.405182][ T9898] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.2643'. [ 271.534242][ T9906] Y4`Ҙ: renamed from lo [ 272.285819][ T48] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 272.765180][ T9994] netlink: 'syz.1.2688': attribute type 8 has an invalid length. [ 272.789976][ T9994] netlink: 'syz.1.2688': attribute type 7 has an invalid length. [ 272.807082][ T9994] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.2688'. [ 272.817136][ T9998] Y4`Ҙ: renamed from lo [ 273.015430][ T4008] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.162746][ T4008] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.400593][ T4008] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.435480][ T3566] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 273.454660][ T3566] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 273.464944][ T3566] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 273.475226][ T3566] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 273.482736][ T3566] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 273.490016][ T3566] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.614184][T10036] netlink: 'syz.2.2705': attribute type 8 has an invalid length. [ 273.647527][T10036] netlink: 'syz.2.2705': attribute type 7 has an invalid length. [ 273.662881][ T4008] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.668199][T10036] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.2705'. [ 273.703311][T10031] Y4`Ҙ: renamed from lo [ 273.967780][T10049] netlink: 'syz.0.2713': attribute type 21 has an invalid length. [ 274.036686][T10025] chnl_net:caif_netlink_parms(): no params data found [ 274.049324][ T3566] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.058633][ T3566] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.076336][ T3566] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.086325][ T3566] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.099009][ T3566] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.107125][ T3566] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.296118][T10062] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2719'. [ 274.308057][T10065] netlink: 'syz.0.2718': attribute type 21 has an invalid length. [ 274.326169][T10065] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2718'. [ 274.424103][T10025] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.449034][T10025] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.475117][T10025] device bridge_slave_0 entered promiscuous mode [ 274.536217][T10082] netlink: 'syz.0.2723': attribute type 8 has an invalid length. [ 274.558138][T10082] netlink: 'syz.0.2723': attribute type 7 has an invalid length. [ 274.574236][T10025] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.582833][T10082] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.2723'. [ 274.595589][T10025] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.617788][T10025] device bridge_slave_1 entered promiscuous mode [ 274.735054][T10025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.746127][T10089] netlink: 'syz.0.2726': attribute type 21 has an invalid length. [ 274.784144][T10025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.862998][T10091] A link change request failed with some changes committed already. Interface Y4`Ҙ may have been left with an inconsistent configuration, please check. [ 274.885222][T10025] team0: Port device team_slave_0 added [ 274.922564][T10025] team0: Port device team_slave_1 added [ 275.019858][T10025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.031308][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.087337][T10025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.100315][T10103] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2732'. [ 275.163334][T10025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.170520][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.199044][T10025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.212271][T10109] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.2735'. [ 275.222846][T10054] chnl_net:caif_netlink_parms(): no params data found [ 275.251500][T10112] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.2737'. [ 275.333661][T10025] device hsr_slave_0 entered promiscuous mode [ 275.355722][T10025] device hsr_slave_1 entered promiscuous mode [ 275.412753][T10116] device lo left promiscuous mode [ 275.496579][T10121] Y4`Ҙ: renamed from lo [ 275.541711][ T3566] Bluetooth: hci0: command tx timeout [ 275.572642][T10126] A link change request failed with some changes committed already. Interface Y4`Ҙ may have been left with an inconsistent configuration, please check. [ 275.760608][T10142] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.2748'. [ 275.815324][ T4008] device hsr_slave_0 left promiscuous mode [ 275.830665][ T4008] device hsr_slave_1 left promiscuous mode [ 275.838054][ T4008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.854454][ T4008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.876412][ T4008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.894304][ T4008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.924215][ T4008] device bridge_slave_1 left promiscuous mode [ 275.930139][T10151] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.2751'. [ 275.932668][ T4008] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.959439][ T4008] device bridge_slave_0 left promiscuous mode [ 275.966414][ T4008] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.993413][ T4008] device veth1_macvtap left promiscuous mode [ 275.999582][ T4008] device veth0_macvtap left promiscuous mode [ 276.015770][ T4008] device veth1_vlan left promiscuous mode [ 276.029641][ T4008] device veth0_vlan left promiscuous mode [ 276.181634][ T3551] Bluetooth: hci4: command tx timeout [ 276.499703][ T4008] team0 (unregistering): Port device team_slave_1 removed [ 276.527249][ T4008] team0 (unregistering): Port device team_slave_0 removed [ 276.553962][ T4008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.583138][ T4008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.825765][ T4008] bond0 (unregistering): Released all slaves [ 276.900097][T10054] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.907240][T10054] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.915661][T10054] device bridge_slave_0 entered promiscuous mode [ 276.926538][T10152] validate_nla: 8 callbacks suppressed [ 276.926553][T10152] netlink: 'syz.2.2753': attribute type 21 has an invalid length. [ 276.964795][T10054] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.973218][T10054] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.981883][T10054] device bridge_slave_1 entered promiscuous mode [ 277.106752][T10054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.144203][T10054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.202543][T10176] netlink: 'syz.4.2762': attribute type 13 has an invalid length. [ 277.210393][T10176] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.2762'. [ 277.223507][T10054] team0: Port device team_slave_0 added [ 277.232690][T10054] team0: Port device team_slave_1 added [ 277.300465][T10173] A link change request failed with some changes committed already. Interface Y4`Ҙ may have been left with an inconsistent configuration, please check. [ 277.338161][T10054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.361363][T10054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.424555][T10054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.469317][T10054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.501522][T10054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.553777][T10054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.579096][T10190] netlink: 'syz.4.2768': attribute type 21 has an invalid length. [ 277.587829][T10190] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2768'. [ 277.604423][T10190] netlink: 'syz.4.2768': attribute type 4 has an invalid length. [ 277.615434][T10190] netlink: 'syz.4.2768': attribute type 5 has an invalid length. [ 277.626593][T10190] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2768'. [ 277.635716][ T3551] Bluetooth: hci0: command tx timeout [ 277.664006][T10192] netlink: 'syz.0.2769': attribute type 21 has an invalid length. [ 277.704482][T10054] device hsr_slave_0 entered promiscuous mode [ 277.721072][T10054] device hsr_slave_1 entered promiscuous mode [ 277.740051][T10054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.751329][T10054] Cannot create hsr debugfs directory [ 277.906229][T10025] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 277.931523][T10025] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 277.941479][ T3551] Bluetooth: hci1: command 0x0406 tx timeout [ 277.947566][ T3551] Bluetooth: hci3: command 0x0406 tx timeout [ 277.989790][T10025] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 278.016661][T10025] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 278.053008][T10204] netlink: 'syz.4.2774': attribute type 13 has an invalid length. [ 278.071116][T10204] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.2774'. [ 278.115217][T10054] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.148183][T10206] A link change request failed with some changes committed already. Interface Y4`Ҙ may have been left with an inconsistent configuration, please check. [ 278.242572][T10054] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.267144][ T3551] Bluetooth: hci4: command tx timeout [ 278.313669][T10215] netlink: 'syz.0.2780': attribute type 21 has an invalid length. [ 278.322198][T10215] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2780'. [ 278.331426][T10215] netlink: 'syz.0.2780': attribute type 4 has an invalid length. [ 278.339214][T10215] netlink: 'syz.0.2780': attribute type 5 has an invalid length. [ 278.410765][T10054] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.519649][T10054] bond0: (slave netdevsim0): Releasing backup interface [ 278.538949][T10054] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.704424][ T3551] Bluetooth: hci0: command tx timeout [ 279.983731][T10235] A link change request failed with some changes committed already. Interface Y4`Ҙ may have been left with an inconsistent configuration, please check. [ 280.043184][T10025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.130499][T10239] -: renamed from syzkaller0 [ 280.174084][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.183912][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.194148][T10025] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.237804][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.250942][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.259714][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.266861][ T6320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.296119][T10054] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 280.313989][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.330113][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.341385][ T3551] Bluetooth: hci4: command tx timeout [ 280.349351][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.369406][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.376566][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.401775][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.410703][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.455468][T10054] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 280.466378][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.479781][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.491885][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.502423][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.510991][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.519984][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.528596][T10251] __nla_validate_parse: 2 callbacks suppressed [ 280.528608][T10251] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2796'. [ 280.554418][T10025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.572434][T10025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.582112][T10054] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 280.592276][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.600826][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.609730][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.622341][T10054] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 280.924809][T10054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.957566][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.965710][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.976451][T10054] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.095307][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.118992][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.140653][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.147819][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.166032][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.174284][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.181821][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 281.194440][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.203071][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.210169][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.218386][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.244392][T10025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.285289][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.304909][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.322699][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.334815][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.343770][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.358945][T10283] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2808'. [ 281.378580][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.396204][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.425785][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.457899][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.466479][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.475196][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.512879][T10284] -: renamed from syzkaller0 [ 281.538760][T10054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 281.618078][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.638018][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.719459][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.733737][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.781890][ T3551] Bluetooth: hci0: command tx timeout [ 281.788396][T10025] device veth0_vlan entered promiscuous mode [ 281.800480][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.808679][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.834487][T10025] device veth1_vlan entered promiscuous mode [ 281.911136][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 281.926137][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 281.936503][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 281.953931][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.981958][T10025] device veth0_macvtap entered promiscuous mode [ 281.999108][T10025] device veth1_macvtap entered promiscuous mode [ 282.040049][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 282.060354][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 282.087047][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.097009][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.116851][T10054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.208991][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.224997][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.236099][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.259298][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.272272][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.283551][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.305312][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.315911][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.344459][T10025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.364784][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 282.387054][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 282.422079][ T3551] Bluetooth: hci4: command tx timeout [ 282.443767][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.458072][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.468682][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.485447][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.496311][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.515475][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.531529][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.542674][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.554766][T10025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.574680][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 282.586594][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.595989][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 282.605979][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.615020][T10332] -: renamed from syzkaller0 [ 282.636059][ T4008] device hsr_slave_0 left promiscuous mode [ 282.652605][ T4008] device hsr_slave_1 left promiscuous mode [ 282.660992][ T4008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.671116][ T4008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.687148][ T4008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.698520][ T4008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.708749][ T4008] device veth0_to_bond left promiscuous mode [ 282.718763][ T4008] bridge0: port 3(veth0_to_bond) entered disabled state [ 282.746811][ T4008] device bridge_slave_1 left promiscuous mode [ 282.757009][ T4008] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.767975][ T4008] device bridge_slave_0 left promiscuous mode [ 282.778281][ T4008] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.836370][ T4008] device veth1_macvtap left promiscuous mode [ 282.842749][ T4008] device veth0_macvtap left promiscuous mode [ 282.848925][ T4008] device veth1_vlan left promiscuous mode [ 282.856324][ T4008] device veth0_vlan left promiscuous mode [ 283.244204][ T4008] team0 (unregistering): Port device team_slave_1 removed [ 283.273624][ T4008] team0 (unregistering): Port device team_slave_0 removed [ 283.301726][ T4008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.333085][ T4008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.591027][ T4008] bond0 (unregistering): Released all slaves [ 283.692489][T10025] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.702749][T10025] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.712446][T10025] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.721133][T10025] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.755450][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 283.770488][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.782815][T10054] device veth0_vlan entered promiscuous mode [ 283.840960][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.856457][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.879402][T10054] device veth1_vlan entered promiscuous mode [ 283.955903][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.969664][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.990589][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 284.000760][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 284.012639][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 284.022510][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 284.038784][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 284.078966][T10054] device veth0_macvtap entered promiscuous mode [ 284.098914][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 284.115663][ T3627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.127501][T10054] device veth1_macvtap entered promiscuous mode [ 284.135507][ T3627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.178518][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 284.188753][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 284.204566][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.229069][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.244795][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.257143][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.287656][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.308830][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.319506][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.337756][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.368119][T10054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.394771][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.419484][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.434363][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.448672][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.464605][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.489286][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.516632][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.540394][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.568922][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.592275][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.615466][T10054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.641163][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.654499][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.678822][T10054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.690724][T10054] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.706229][T10054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.716380][T10054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.782152][T10387] -: renamed from syzkaller0 [ 284.926381][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.949196][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.976555][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 284.987437][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.021353][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.031433][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 285.472361][T10421] -: renamed from syzkaller0 [ 285.764408][T10440] validate_nla: 2 callbacks suppressed [ 285.764425][T10440] netlink: 'syz.3.2874': attribute type 10 has an invalid length. [ 286.180839][T10462] netlink: 'syz.4.2886': attribute type 21 has an invalid length. [ 286.216555][T10462] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2886'. [ 286.381283][T10474] netlink: 'syz.1.2891': attribute type 10 has an invalid length. [ 286.405098][T10478] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2894'. [ 286.580197][T10489] ref_ctr_offset mismatch. inode: 0x52 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 286.804755][T10501] netlink: 'syz.1.2905': attribute type 21 has an invalid length. [ 286.841863][T10501] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2905'. [ 286.870890][T10505] netlink: 'syz.3.2907': attribute type 10 has an invalid length. [ 286.892614][T10509] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2909'. [ 287.122862][T10520] ref_ctr_offset mismatch. inode: 0x52 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 287.278704][T10535] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2923'. [ 287.289323][T10537] netlink: 'syz.0.2921': attribute type 21 has an invalid length. [ 287.301431][T10537] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2921'. [ 287.335443][T10538] netlink: 'syz.1.2922': attribute type 10 has an invalid length. [ 287.511629][T10551] ref_ctr_offset mismatch. inode: 0x67 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 287.767214][T10570] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2937'. [ 287.791513][T10566] netlink: 'syz.2.2938': attribute type 21 has an invalid length. [ 287.822774][T10566] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2938'. [ 287.846128][T10572] netlink: 'syz.0.2939': attribute type 10 has an invalid length. [ 287.998998][T10584] ref_ctr_offset mismatch. inode: 0x7c offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 288.270617][T10598] netlink: 'syz.2.2952': attribute type 21 has an invalid length. [ 288.291421][T10598] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2952'. [ 288.300576][T10599] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2951'. [ 288.496130][T10616] ref_ctr_offset mismatch. inode: 0x7c5 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 291.047538][T10808] validate_nla: 7 callbacks suppressed [ 291.047555][T10808] netlink: 'syz.0.3054': attribute type 33 has an invalid length. [ 291.092245][T10813] netlink: 'syz.4.3057': attribute type 1 has an invalid length. [ 291.366683][T10834] __nla_validate_parse: 18 callbacks suppressed [ 291.366702][T10834] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3066'. [ 291.428485][T10840] netlink: 'syz.4.3070': attribute type 33 has an invalid length. [ 291.442326][T10840] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3070'. [ 291.579663][T10850] netlink: 'syz.4.3075': attribute type 1 has an invalid length. [ 291.587963][T10850] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3075'. [ 291.839097][T10872] netlink: 'syz.0.3085': attribute type 33 has an invalid length. [ 291.869036][T10872] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3085'. [ 292.045480][T10889] netlink: 'syz.3.3093': attribute type 1 has an invalid length. [ 292.068901][T10889] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3093'. [ 292.196169][T10898] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3098'. [ 292.228444][T10904] netlink: 'syz.1.3102': attribute type 33 has an invalid length. [ 292.237346][T10904] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3102'. [ 292.407737][T10919] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3107'. [ 292.446316][T10919] device bond_slave_0 entered promiscuous mode [ 292.452865][T10919] device bond_slave_1 entered promiscuous mode [ 292.459109][T10919] device netdevsim0 entered promiscuous mode [ 292.493630][T10927] netlink: 'syz.0.3112': attribute type 1 has an invalid length. [ 292.525288][T10927] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3112'. [ 292.649554][T10938] netlink: 'syz.4.3117': attribute type 29 has an invalid length. [ 292.649808][T10934] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3116'. [ 292.675482][T10938] netlink: 'syz.4.3117': attribute type 29 has an invalid length. [ 292.931041][T10961] device bond_slave_0 entered promiscuous mode [ 292.937498][T10961] device bond_slave_1 entered promiscuous mode [ 293.327419][T10995] device bond_slave_0 entered promiscuous mode [ 293.333689][T10995] device bond_slave_1 entered promiscuous mode [ 293.978676][T11047] device bond_slave_0 entered promiscuous mode [ 293.984951][T11047] device bond_slave_1 entered promiscuous mode [ 296.146347][T11243] validate_nla: 40 callbacks suppressed [ 296.146364][T11243] netlink: 'syz.1.3268': attribute type 3 has an invalid length. [ 296.632380][T11280] netlink: 'syz.2.3287': attribute type 3 has an invalid length. [ 296.658685][T11280] __nla_validate_parse: 27 callbacks suppressed [ 296.658702][T11280] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3287'. [ 296.678648][T11283] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.3288'. [ 296.695192][T11283] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3288'. [ 297.085426][T11317] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.3304'. [ 297.111520][T11317] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3304'. [ 297.483288][T11346] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.3318'. [ 297.521504][T11346] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3318'. [ 298.042040][T11383] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.3333'. [ 298.101169][T11383] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3333'. [ 298.125603][T11393] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3334'. [ 298.145689][T11390] netlink: 'syz.0.3336': attribute type 29 has an invalid length. [ 298.164610][T11390] netlink: 'syz.0.3336': attribute type 29 has an invalid length. [ 300.454380][T11561] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.462829][T11561] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.569854][T11555] device bridge_slave_1 left promiscuous mode [ 300.601053][T11555] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.750131][T11555] device bridge_slave_0 left promiscuous mode [ 300.769903][T11555] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.767338][T11582] device wg2 entered promiscuous mode [ 302.520912][T11643] device wg2 entered promiscuous mode [ 303.049165][T11676] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.066039][T11676] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.139424][T11676] device bridge0 left promiscuous mode [ 303.157242][ T3551] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 303.300457][T11684] device bridge_slave_1 left promiscuous mode [ 303.348909][T11684] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.400053][T11684] device bridge_slave_0 left promiscuous mode [ 303.411077][T11684] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.625004][T11689] device wg2 left promiscuous mode [ 303.710983][T11692] device wg2 entered promiscuous mode [ 303.830031][ T3551] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 304.498683][T11752] device wg2 entered promiscuous mode [ 304.525777][ T3551] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 304.887489][ T3551] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 304.989301][T11776] bridge0: port 3(veth0_to_bond) entered disabled state [ 304.999338][T11776] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.029222][T11776] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.273912][T11786] device veth0_to_bond left promiscuous mode [ 305.293666][T11786] bridge0: port 3(veth0_to_bond) entered disabled state [ 305.310709][T11786] device bridge_slave_1 left promiscuous mode [ 305.326770][T11786] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.355007][T11786] device bridge_slave_0 left promiscuous mode [ 305.366915][T11786] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.438723][T11789] device wg2 left promiscuous mode [ 305.521307][T11793] device wg2 entered promiscuous mode [ 305.859688][ T3551] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 306.601270][T11847] device wg2 entered promiscuous mode [ 307.290491][T11888] device wg2 left promiscuous mode [ 307.395128][T11888] device wg2 entered promiscuous mode [ 308.126772][T11927] netlink: 'syz.2.3565': attribute type 5 has an invalid length. [ 308.159482][T11927] __nla_validate_parse: 4 callbacks suppressed [ 308.159500][T11927] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3565'. [ 308.324274][T11931] device wg2 entered promiscuous mode [ 308.787432][T11962] netlink: 'syz.0.3580': attribute type 5 has an invalid length. [ 308.811441][T11962] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3580'. [ 308.930466][T11971] device wg2 left promiscuous mode [ 309.023658][T11971] device wg2 entered promiscuous mode [ 309.384906][T11997] netlink: 'syz.1.3593': attribute type 5 has an invalid length. [ 309.401949][T11997] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3593'. [ 309.667257][T12015] device wg2 left promiscuous mode [ 309.742831][T12015] device wg2 entered promiscuous mode [ 310.059235][T12032] netlink: 'syz.3.3609': attribute type 5 has an invalid length. [ 310.087947][T12032] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3609'. [ 310.536193][T12056] device wg2 left promiscuous mode [ 310.679871][T12056] device wg2 entered promiscuous mode [ 310.915421][T12068] netlink: 'syz.0.3624': attribute type 5 has an invalid length. [ 310.939669][T12068] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3624'. [ 311.546628][T12103] device wg2 left promiscuous mode [ 311.589896][T12107] netlink: 'syz.3.3641': attribute type 5 has an invalid length. [ 311.610862][T12107] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3641'. [ 311.679626][T12103] device wg2 entered promiscuous mode [ 312.536685][T12154] device wg2 left promiscuous mode [ 312.633696][T12154] device wg2 entered promiscuous mode [ 313.378592][T12193] device wg2 left promiscuous mode [ 313.482478][T12193] device wg2 entered promiscuous mode [ 314.283011][T12231] device wg2 left promiscuous mode [ 314.418390][T12231] device wg2 entered promiscuous mode [ 314.655300][T12241] netlink: 'syz.4.3700': attribute type 5 has an invalid length. [ 315.321698][T12273] device wg2 left promiscuous mode [ 315.482657][T12273] device wg2 entered promiscuous mode [ 316.833148][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.839493][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.321305][T12323] netlink: 'syz.3.3732': attribute type 5 has an invalid length. [ 317.341418][T12327] device wg2 left promiscuous mode [ 317.435017][T12328] device wg2 entered promiscuous mode [ 319.540991][T12376] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3753'. [ 319.556176][T12382] netlink: 'syz.4.3756': attribute type 21 has an invalid length. [ 319.564849][T12382] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3756'. [ 319.581902][T12382] netlink: 'syz.4.3756': attribute type 4 has an invalid length. [ 319.589664][T12382] netlink: 'syz.4.3756': attribute type 5 has an invalid length. [ 319.606051][T12382] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3756'. [ 319.642853][T12388] device wg2 left promiscuous mode [ 319.667243][T12389] device wg2 entered promiscuous mode [ 320.427450][T12425] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3773'. [ 320.462941][T12428] netlink: 'syz.1.3774': attribute type 21 has an invalid length. [ 320.511499][T12428] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3774'. [ 320.554597][T12428] netlink: 'syz.1.3774': attribute type 4 has an invalid length. [ 320.562821][T12428] netlink: 'syz.1.3774': attribute type 5 has an invalid length. [ 320.572925][T12428] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3774'. [ 320.654193][T12434] device wg2 left promiscuous mode [ 320.820149][T12434] device wg2 entered promiscuous mode [ 322.695176][T12469] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3789'. [ 322.892959][T12482] device wg2 left promiscuous mode [ 322.993461][T12486] device wg2 entered promiscuous mode [ 323.679735][T12512] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3804'. [ 325.529466][T12557] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3823'. [ 327.578434][T12603] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3848'. [ 328.160475][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.375349][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.488305][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.583195][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.777556][ T3556] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 328.786291][ T3556] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 328.794372][ T3556] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 328.803018][ T3556] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 328.810998][ T3556] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 328.818818][ T3556] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 328.987564][ T3556] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 328.997034][ T3556] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 329.005147][ T3556] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 329.014591][ T3556] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 329.031540][ T3556] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 329.038779][ T3556] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 329.242686][ T3556] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 329.262902][ T3556] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 329.270668][ T3556] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 329.279879][ T3556] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 329.288233][ T3556] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 329.295893][ T3556] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 330.152914][ T9] device hsr_slave_0 left promiscuous mode [ 330.177329][ T9] device hsr_slave_1 left promiscuous mode [ 330.202206][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.209656][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.218797][ T3566] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 330.227448][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.235107][ T3556] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 330.243521][ T3556] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 330.251644][ T3556] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 330.259157][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.267832][ T3556] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 330.291871][ T3556] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 330.313281][ T3551] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 330.322373][ T3551] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 330.330437][ T3551] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 330.338304][ T9] device veth1_macvtap left promiscuous mode [ 330.340824][ T3551] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.352223][ T9] device veth0_macvtap left promiscuous mode [ 330.352789][ T3551] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 330.358326][ T9] device veth1_vlan left promiscuous mode [ 330.365937][ T3551] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 330.391665][ T9] device veth0_vlan left promiscuous mode [ 330.539680][ T3566] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 330.548545][ T3566] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 330.560689][ T3566] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 330.578575][ T3566] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 330.603111][ T3556] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 330.611888][ T3556] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 330.928342][ T3551] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.946539][ T3551] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.955473][ T3551] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.966826][ T3551] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.980743][ T3566] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 330.988339][ T3566] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.005372][ T9] team0 (unregistering): Port device team_slave_1 removed [ 331.076911][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.114148][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.451579][ T9] bond0 (unregistering): Released all slaves [ 331.763573][ T3556] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.772689][ T3556] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.780675][ T3556] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.792238][ T3551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.800351][ T3551] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 331.807929][ T3551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.051012][T12766] chnl_net:caif_netlink_parms(): no params data found [ 332.343568][T12766] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.351171][T12766] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.422477][T12766] device bridge_slave_0 entered promiscuous mode [ 332.434500][T12766] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.461340][T12766] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.496343][ T3551] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.505534][ T3551] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.513309][T12766] device bridge_slave_1 entered promiscuous mode [ 332.519780][ T3551] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.527818][ T3551] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.535449][ T3551] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 332.542947][ T3551] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.674481][T12766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.727531][T12766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.842905][ T3551] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.850881][ T3551] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.859115][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.867951][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.876529][ T3551] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.884560][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.892115][ T3551] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.899526][ T3551] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 332.907185][ T3551] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.907258][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.917352][T12766] team0: Port device team_slave_0 added [ 332.928322][ T3551] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 332.936050][ T3551] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.952287][T12766] team0: Port device team_slave_1 added [ 333.027420][T12766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.034477][T12766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.060614][T12766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.083307][T12766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.090273][T12766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.127545][T12766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.274927][T12766] device hsr_slave_0 entered promiscuous mode [ 333.291636][T12766] device hsr_slave_1 entered promiscuous mode [ 333.308130][T12766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.317161][T12766] Cannot create hsr debugfs directory [ 333.978174][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.094185][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.188180][ T3551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.206094][ T3551] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.214004][ T3551] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.226591][ T3551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.236640][ T3551] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.238963][ T3556] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.251199][ T3551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.274627][ T3551] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.283206][ T3551] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.294912][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.305720][ T3556] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.324047][ T3567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.331458][ T3562] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.340542][ T3556] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.346866][ T3567] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.351777][ T3562] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.355658][ T3567] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.362797][ T3556] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.370862][ T3567] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.377476][ T3556] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.383139][ T3567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.390301][ T3556] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 334.409538][ T3567] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.412547][ T3556] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.427855][ T3556] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.430492][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.449481][T12813] ================================================================== [ 334.457574][T12813] BUG: KASAN: use-after-free in skb_release_data+0x6a5/0x7a0 [ 334.464973][T12813] Read of size 1 at addr ffff88806024acfe by task syz-executor/12813 [ 334.473025][T12813] [ 334.475362][T12813] CPU: 1 PID: 12813 Comm: syz-executor Not tainted 6.1.99-syzkaller #0 [ 334.483593][T12813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 334.493646][T12813] Call Trace: [ 334.496915][T12813] [ 334.499850][T12813] dump_stack_lvl+0x1e3/0x2cb [ 334.504544][T12813] ? nf_tcp_handle_invalid+0x642/0x642 [ 334.510005][T12813] ? panic+0x764/0x764 [ 334.514074][T12813] ? _printk+0xd1/0x111 [ 334.518220][T12813] ? __virt_addr_valid+0x17f/0x520 [ 334.523330][T12813] ? __virt_addr_valid+0x17f/0x520 [ 334.528437][T12813] print_report+0x15f/0x4f0 [ 334.532938][T12813] ? __virt_addr_valid+0x17f/0x520 [ 334.538045][T12813] ? __virt_addr_valid+0x17f/0x520 [ 334.543148][T12813] ? __virt_addr_valid+0x44a/0x520 [ 334.548252][T12813] ? __phys_addr+0xb6/0x170 [ 334.552748][T12813] ? skb_release_data+0x6a5/0x7a0 [ 334.557770][T12813] kasan_report+0x136/0x160 [ 334.562265][T12813] ? skb_release_data+0x6a5/0x7a0 [ 334.567289][T12813] skb_release_data+0x6a5/0x7a0 [ 334.572142][T12813] ? __hci_req_sync+0x626/0x940 [ 334.576983][T12813] kfree_skb_reason+0x16f/0x390 [ 334.581831][T12813] __hci_req_sync+0x626/0x940 [ 334.586499][T12813] ? trace_contention_end+0x61/0x170 [ 334.591777][T12813] ? hci_req_sync_complete+0x280/0x280 [ 334.597226][T12813] ? mutex_lock_nested+0x10/0x10 [ 334.602159][T12813] ? hci_encrypt_req+0x170/0x170 [ 334.607090][T12813] hci_req_sync+0xa5/0xc0 [ 334.611412][T12813] hci_dev_cmd+0x2fc/0xa30 [ 334.615826][T12813] ? security_capable+0x86/0xb0 [ 334.620674][T12813] ? hci_dev_reset_stat+0x1a0/0x1a0 [ 334.625869][T12813] ? hci_sock_ioctl+0x426/0x850 [ 334.630717][T12813] sock_do_ioctl+0x152/0x450 [ 334.635329][T12813] ? sock_show_fdinfo+0xb0/0xb0 [ 334.640186][T12813] ? __fget_files+0x28/0x4a0 [ 334.644878][T12813] sock_ioctl+0x47f/0x770 [ 334.649208][T12813] ? sock_poll+0x410/0x410 [ 334.653621][T12813] ? __fget_files+0x28/0x4a0 [ 334.658201][T12813] ? __fget_files+0x435/0x4a0 [ 334.662870][T12813] ? __fget_files+0x28/0x4a0 [ 334.667454][T12813] ? bpf_lsm_file_ioctl+0x5/0x10 [ 334.672385][T12813] ? security_file_ioctl+0x7d/0xa0 [ 334.677487][T12813] ? sock_poll+0x410/0x410 [ 334.681893][T12813] __se_sys_ioctl+0xf1/0x160 [ 334.686483][T12813] do_syscall_64+0x3b/0xb0 [ 334.690896][T12813] ? clear_bhb_loop+0x45/0xa0 [ 334.695570][T12813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.701461][T12813] RIP: 0033:0x7fd8e19756db [ 334.705874][T12813] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 334.725471][T12813] RSP: 002b:00007fff803a93c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.733872][T12813] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd8e19756db [ 334.741834][T12813] RDX: 00007fff803a9438 RSI: 00000000400448dd RDI: 0000000000000003 [ 334.749797][T12813] RBP: 000055555598b4a8 R08: 0000000000000000 R09: 0000000000000000 [ 334.757761][T12813] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000004 [ 334.765864][T12813] R13: 0000000000000004 R14: 0000000000000009 R15: 0000000000000009 [ 334.773894][T12813] [ 334.776907][T12813] [ 334.779222][T12813] Allocated by task 3567: [ 334.783553][T12813] kasan_set_track+0x4b/0x70 [ 334.788145][T12813] __kasan_slab_alloc+0x65/0x70 [ 334.792986][T12813] slab_post_alloc_hook+0x52/0x3a0 [ 334.798098][T12813] kmem_cache_alloc+0x10c/0x2d0 [ 334.802944][T12813] skb_clone+0x1e5/0x360 [ 334.807176][T12813] hci_cmd_work+0x296/0x660 [ 334.811668][T12813] process_one_work+0x8a9/0x11d0 [ 334.816596][T12813] worker_thread+0xa47/0x1200 [ 334.821266][T12813] kthread+0x28d/0x320 [ 334.825321][T12813] ret_from_fork+0x1f/0x30 [ 334.829737][T12813] [ 334.832064][T12813] Freed by task 3567: [ 334.836033][T12813] kasan_set_track+0x4b/0x70 [ 334.840619][T12813] kasan_save_free_info+0x27/0x40 [ 334.845673][T12813] ____kasan_slab_free+0xd6/0x120 [ 334.850704][T12813] kmem_cache_free+0x292/0x510 [ 334.855550][T12813] hci_req_sync_complete+0xee/0x280 [ 334.860738][T12813] hci_event_packet+0xc49/0x1510 [ 334.865753][T12813] hci_rx_work+0x3cd/0xce0 [ 334.870158][T12813] process_one_work+0x8a9/0x11d0 [ 334.875092][T12813] worker_thread+0xa47/0x1200 [ 334.879763][T12813] kthread+0x28d/0x320 [ 334.883822][T12813] ret_from_fork+0x1f/0x30 [ 334.888233][T12813] [ 334.890543][T12813] The buggy address belongs to the object at ffff88806024ac80 [ 334.890543][T12813] which belongs to the cache skbuff_head_cache of size 240 [ 334.905117][T12813] The buggy address is located 126 bytes inside of [ 334.905117][T12813] 240-byte region [ffff88806024ac80, ffff88806024ad70) [ 334.918383][T12813] [ 334.920699][T12813] The buggy address belongs to the physical page: [ 334.927106][T12813] page:ffffea0001809280 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6024a [ 334.937251][T12813] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 334.944789][T12813] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888140140000 [ 334.953362][T12813] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 334.961928][T12813] page dumped because: kasan: bad access detected [ 334.968328][T12813] page_owner tracks the page as allocated [ 334.974028][T12813] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 9, tgid 9 (kworker/u4:0), ts 334429360005, free_ts 331627548104 [ 334.991898][T12813] post_alloc_hook+0x18d/0x1b0 [ 334.996651][T12813] get_page_from_freelist+0x322e/0x33b0 [ 335.002183][T12813] __alloc_pages+0x28d/0x770 [ 335.006760][T12813] alloc_slab_page+0x6a/0x150 [ 335.011436][T12813] new_slab+0x84/0x2d0 [ 335.015496][T12813] ___slab_alloc+0xc20/0x1270 [ 335.020168][T12813] kmem_cache_alloc_node+0x1cf/0x310 [ 335.025452][T12813] __alloc_skb+0xde/0x670 [ 335.029777][T12813] inet6_netconf_notify_devconf+0xf8/0x1b0 [ 335.035621][T12813] addrconf_ifdown+0x184e/0x1b90 [ 335.040545][T12813] addrconf_notify+0x3ec/0xf60 [ 335.045300][T12813] raw_notifier_call_chain+0xd0/0x170 [ 335.050669][T12813] unregister_netdevice_many+0xec1/0x17a0 [ 335.056382][T12813] unregister_netdevice_queue+0x2e6/0x350 [ 335.062098][T12813] nsim_destroy+0x44/0x140 [ 335.066520][T12813] __nsim_dev_port_del+0x153/0x1b0 [ 335.071628][T12813] page last free stack trace: [ 335.076297][T12813] free_unref_page_prepare+0xf63/0x1120 [ 335.081834][T12813] free_unref_page+0x33/0x3e0 [ 335.086497][T12813] __unfreeze_partials+0x1b7/0x210 [ 335.091599][T12813] put_cpu_partial+0x17b/0x250 [ 335.096360][T12813] qlist_free_all+0x76/0xe0 [ 335.100855][T12813] kasan_quarantine_reduce+0x156/0x170 [ 335.106303][T12813] __kasan_slab_alloc+0x1f/0x70 [ 335.111141][T12813] slab_post_alloc_hook+0x52/0x3a0 [ 335.116242][T12813] __kmem_cache_alloc_node+0x137/0x260 [ 335.121701][T12813] __kmalloc+0xa1/0x230 [ 335.125842][T12813] tomoyo_realpath_from_path+0xcb/0x5d0 [ 335.131376][T12813] tomoyo_path_number_perm+0x21f/0x7f0 [ 335.136820][T12813] security_file_ioctl+0x6d/0xa0 [ 335.141745][T12813] __se_sys_ioctl+0x47/0x160 [ 335.146330][T12813] do_syscall_64+0x3b/0xb0 [ 335.150744][T12813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.156631][T12813] [ 335.158941][T12813] Memory state around the buggy address: [ 335.164554][T12813] ffff88806024ab80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 335.172601][T12813] ffff88806024ac00: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 335.180648][T12813] >ffff88806024ac80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 335.188692][T12813] ^ [ 335.196648][T12813] ffff88806024ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 335.204692][T12813] ffff88806024ad80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 335.212735][T12813] ================================================================== [ 335.225712][T12813] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 335.232930][T12813] CPU: 0 PID: 12813 Comm: syz-executor Not tainted 6.1.99-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 335.241169][T12813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 335.251226][T12813] Call Trace: [ 335.254510][T12813] [ 335.257446][T12813] dump_stack_lvl+0x1e3/0x2cb [ 335.262146][T12813] ? nf_tcp_handle_invalid+0x642/0x642 [ 335.267624][T12813] ? panic+0x764/0x764 [ 335.271709][T12813] ? vscnprintf+0x59/0x80 [ 335.276054][T12813] panic+0x318/0x764 [ 335.279966][T12813] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 335.286149][T12813] ? check_panic_on_warn+0x1d/0xa0 [ 335.291276][T12813] ? memcpy_page_flushcache+0xfc/0xfc [ 335.296663][T12813] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 335.302653][T12813] ? _raw_spin_unlock+0x40/0x40 [ 335.307516][T12813] check_panic_on_warn+0x7e/0xa0 [ 335.312462][T12813] ? skb_release_data+0x6a5/0x7a0 [ 335.317503][T12813] end_report+0x66/0x110 [ 335.321755][T12813] kasan_report+0x143/0x160 [ 335.326267][T12813] ? skb_release_data+0x6a5/0x7a0 [ 335.331309][T12813] skb_release_data+0x6a5/0x7a0 [ 335.336176][T12813] ? __hci_req_sync+0x626/0x940 [ 335.341037][T12813] kfree_skb_reason+0x16f/0x390 [ 335.345912][T12813] __hci_req_sync+0x626/0x940 [ 335.350604][T12813] ? trace_contention_end+0x61/0x170 [ 335.355915][T12813] ? hci_req_sync_complete+0x280/0x280 [ 335.361402][T12813] ? mutex_lock_nested+0x10/0x10 [ 335.366356][T12813] ? hci_encrypt_req+0x170/0x170 [ 335.371312][T12813] hci_req_sync+0xa5/0xc0 [ 335.375659][T12813] hci_dev_cmd+0x2fc/0xa30 [ 335.380099][T12813] ? security_capable+0x86/0xb0 [ 335.384980][T12813] ? hci_dev_reset_stat+0x1a0/0x1a0 [ 335.390210][T12813] ? hci_sock_ioctl+0x426/0x850 [ 335.395091][T12813] sock_do_ioctl+0x152/0x450 [ 335.399704][T12813] ? sock_show_fdinfo+0xb0/0xb0 [ 335.404577][T12813] ? __fget_files+0x28/0x4a0 [ 335.409185][T12813] sock_ioctl+0x47f/0x770 [ 335.413531][T12813] ? sock_poll+0x410/0x410 [ 335.417976][T12813] ? __fget_files+0x28/0x4a0 [ 335.422587][T12813] ? __fget_files+0x435/0x4a0 [ 335.427271][T12813] ? __fget_files+0x28/0x4a0 [ 335.431872][T12813] ? bpf_lsm_file_ioctl+0x5/0x10 [ 335.436843][T12813] ? security_file_ioctl+0x7d/0xa0 [ 335.441961][T12813] ? sock_poll+0x410/0x410 [ 335.446386][T12813] __se_sys_ioctl+0xf1/0x160 [ 335.450988][T12813] do_syscall_64+0x3b/0xb0 [ 335.455405][T12813] ? clear_bhb_loop+0x45/0xa0 [ 335.460082][T12813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.465987][T12813] RIP: 0033:0x7fd8e19756db [ 335.470398][T12813] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 335.489994][T12813] RSP: 002b:00007fff803a93c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.498402][T12813] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd8e19756db [ 335.506359][T12813] RDX: 00007fff803a9438 RSI: 00000000400448dd RDI: 0000000000000003 [ 335.514319][T12813] RBP: 000055555598b4a8 R08: 0000000000000000 R09: 0000000000000000 [ 335.522278][T12813] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000004 [ 335.530252][T12813] R13: 0000000000000004 R14: 0000000000000009 R15: 0000000000000009 [ 335.538251][T12813] [ 335.541579][T12813] Kernel Offset: disabled [ 335.545899][T12813] Rebooting in 86400 seconds..