last executing test programs: 3.027654562s ago: executing program 1 (id=3895): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 3.023125942s ago: executing program 0 (id=3908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r1}, 0x38) 2.767200381s ago: executing program 0 (id=3899): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000006000000180000009abb47593427f92be9f3094edbd4ae3afcd6aa3451f051"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000010000004000000023"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r0}, 0x38) 2.69346021s ago: executing program 1 (id=3901): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x900}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89b0, &(0x7f0000000080)) 2.54863617s ago: executing program 1 (id=3904): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x100000000000ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r0, 0x16, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.193614478s ago: executing program 4 (id=3907): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.192966288s ago: executing program 0 (id=3910): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x0, &(0x7f0000000200)="7747a888cb4d2a582690919fdf74cc21", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.192435158s ago: executing program 1 (id=3911): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)) 2.036153208s ago: executing program 1 (id=3912): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 2.036021978s ago: executing program 3 (id=3913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r1}, 0x38) 1.377021045s ago: executing program 2 (id=3914): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200", @ANYRES32=0x1, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000008402"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890c, &(0x7f0000000100)) 1.376807305s ago: executing program 4 (id=3915): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) 1.205785575s ago: executing program 2 (id=3916): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 995.154164ms ago: executing program 4 (id=3917): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 993.110224ms ago: executing program 1 (id=3919): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 840.340253ms ago: executing program 3 (id=3920): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000006000000180000009abb47593427f92be9f3094edbd4ae3afcd6aa3451f051"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000010000004000000023"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r0}, 0x38) 839.754823ms ago: executing program 0 (id=3930): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004", 0x23}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000040)="b9ff03076844268cff9e14f088a847e0ffff00124000632177fbac141416e000030a", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300006d0033"], 0xfe33) 632.044242ms ago: executing program 4 (id=3921): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'virt_wifi0\x00', @random="01000000b7d0"}) 631.333742ms ago: executing program 2 (id=3932): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004", 0x23}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000040)="b9ff03076844268cff9e14f088a847e0ffff00124000632177fbac141416e000030a", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300006d0033"], 0xfe33) 630.800812ms ago: executing program 0 (id=3922): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x40005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 563.489022ms ago: executing program 4 (id=3923): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 506.309452ms ago: executing program 2 (id=3924): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='pids.current\x00', 0x275a, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000100)='THAWED\x00', 0x7) 506.168782ms ago: executing program 3 (id=3925): r0 = socket$kcm(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb, &(0x7f00000009c0)=@raw=[@alu={0x7, 0x1, 0x0, 0x7, 0x1, 0xffffffffffffffff, 0xfffffffffffffffc}, @map_val={0x18, 0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x671f}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @alu={0x7, 0x0, 0x7, 0x5, 0xb, 0xc, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @jmp={0x5, 0x0, 0x365aae200d2cc8c7, 0x6, 0x2, 0x18, 0xfffffffffffffff0}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 270.228281ms ago: executing program 3 (id=3926): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="62202a3a2a20776d05"], 0x9) 269.437681ms ago: executing program 2 (id=3938): r0 = socket$kcm(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb, &(0x7f00000009c0)=@raw=[@alu={0x7, 0x1, 0x0, 0x7, 0x1, 0xffffffffffffffff, 0xfffffffffffffffc}, @map_val={0x18, 0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x671f}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @alu={0x7, 0x0, 0x7, 0x5, 0xb, 0xc, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @jmp={0x5, 0x0, 0x365aae200d2cc8c7, 0x6, 0x2, 0x18, 0xfffffffffffffff0}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 248.859381ms ago: executing program 4 (id=3927): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x82, &(0x7f0000000300), 0x4da) 162.23482ms ago: executing program 3 (id=3928): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 119.59451ms ago: executing program 2 (id=3929): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) 41.85887ms ago: executing program 0 (id=3931): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f00000005c0)=0x8) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) 0s ago: executing program 3 (id=3933): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): ONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.884486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.902392][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.916899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.926354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.934425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.944502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.953310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.961625][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.968720][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.976728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.985721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.994388][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.001442][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.009121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.041451][ T4245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.050710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.069097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.081337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.090262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.098737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.110042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.124560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.133886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.143433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.154764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.164236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.173353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.187888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.197145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.205848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.214477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.238423][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.264951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.276308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.289350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.299952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.314728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.327021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.335955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.344622][ T4263] Bluetooth: hci0: command 0x041b tx timeout [ 59.351310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.353105][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 59.360706][ T4263] Bluetooth: hci4: command 0x041b tx timeout [ 59.394983][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.410439][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.419792][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.427633][ T4263] Bluetooth: hci2: command 0x041b tx timeout [ 59.433693][ T4263] Bluetooth: hci3: command 0x041b tx timeout [ 59.451288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.460012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.478266][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.495153][ T4245] device veth0_vlan entered promiscuous mode [ 59.505309][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.524040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.532724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.555887][ T4245] device veth1_vlan entered promiscuous mode [ 59.601971][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.633817][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.641882][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.651087][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.660563][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.670387][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.684769][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.698753][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.705905][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.719838][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.745816][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.764773][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.783582][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.790686][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.835294][ T4245] device veth0_macvtap entered promiscuous mode [ 59.849841][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.863533][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.879985][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.894293][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.905369][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.923993][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.931423][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.939303][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.948252][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.959661][ T4245] device veth1_macvtap entered promiscuous mode [ 59.983357][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.999749][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.009609][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.018505][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.028924][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.038277][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.046673][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.055328][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.078990][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.086950][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.098229][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.123795][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.139194][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.149707][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.169952][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.212546][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.221223][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.231698][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.240630][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.254574][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.277219][ T4253] device veth0_vlan entered promiscuous mode [ 60.297636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.309774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.319671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.329970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.339247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.349142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.359076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.367499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.387759][ T4255] device veth0_vlan entered promiscuous mode [ 60.406022][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.416536][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.425753][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.435547][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.446260][ T4245] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.455310][ T4245] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.466037][ T4245] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.474946][ T4245] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.486999][ T4249] device veth0_vlan entered promiscuous mode [ 60.498358][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.507024][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.515127][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.523189][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.530989][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.539041][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.548158][ T4253] device veth1_vlan entered promiscuous mode [ 60.559411][ T4255] device veth1_vlan entered promiscuous mode [ 60.581024][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.591210][ T4249] device veth1_vlan entered promiscuous mode [ 60.662578][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.673210][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.681334][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.690433][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.699144][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.707544][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.716093][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.724971][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.741963][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.751184][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.777719][ T4255] device veth0_macvtap entered promiscuous mode [ 60.789625][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.800487][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.810667][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.830460][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.839942][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.852753][ T4255] device veth1_macvtap entered promiscuous mode [ 60.860335][ T4253] device veth0_macvtap entered promiscuous mode [ 60.869266][ T4249] device veth0_macvtap entered promiscuous mode [ 60.886648][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.895404][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.897275][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.912209][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.920142][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.929199][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.949713][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.961035][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.972804][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.990361][ T4249] device veth1_macvtap entered promiscuous mode [ 61.010096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.019963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.030712][ T4253] device veth1_macvtap entered promiscuous mode [ 61.047661][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.058511][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.070077][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.089527][ T4255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.099358][ T4255] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.109179][ T4255] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.119084][ T4255] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.133982][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.143088][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.151615][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.160017][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.171396][ T4252] device veth0_vlan entered promiscuous mode [ 61.190250][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.198007][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.211532][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.223683][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.234213][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.244770][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.257610][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.267406][ T4252] device veth1_vlan entered promiscuous mode [ 61.276425][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.285704][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.296264][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.308492][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.316660][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.325802][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.335148][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.346624][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.356760][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.371055][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.381213][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.392315][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.404567][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.414035][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.422810][ T4263] Bluetooth: hci4: command 0x040f tx timeout [ 61.425633][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 61.430421][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 61.443161][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.453657][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.464327][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.475563][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.491663][ T4253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.501729][ T4253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.502813][ T4263] Bluetooth: hci3: command 0x040f tx timeout [ 61.511442][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 61.516972][ T4253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.531875][ T4253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.550666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.559079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.569112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.578023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.589936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.599923][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.610752][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.620854][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.631470][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.641550][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.652538][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.665556][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.707542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.719042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.734701][ T4249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.744622][ T4249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.755491][ T4249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.764410][ T4249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.781501][ T4252] device veth0_macvtap entered promiscuous mode [ 61.797933][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.808506][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.824351][ T4252] device veth1_macvtap entered promiscuous mode [ 61.841038][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.854518][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.892699][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.900824][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.927594][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.965467][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.983849][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.991143][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.003797][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.016854][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.028026][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.038188][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.055605][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.067072][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.081221][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.093759][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.125698][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.146772][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.183490][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.197653][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.209179][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.220305][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.231559][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.248873][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.260541][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.274514][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.285061][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.297124][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.333387][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.341344][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.372916][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.382080][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.390882][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.405640][ T4252] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.431184][ T4252] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.440387][ T4252] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.455053][ T4252] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.507911][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.558202][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.558253][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.575335][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.606142][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.613367][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.639275][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.650765][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.651107][ T4338] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10'. [ 62.680486][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.693074][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.739419][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.773745][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.943568][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.951540][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.967354][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.503862][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 63.509916][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 63.517572][ T4260] Bluetooth: hci0: command 0x0419 tx timeout [ 63.582914][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 63.582922][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 63.862032][ C1] hrtimer: interrupt took 45156 ns [ 64.060249][ T4384] netlink: 10 bytes leftover after parsing attributes in process `syz.2.28'. [ 64.486990][ T4396] netlink: 'syz.0.34': attribute type 4 has an invalid length. [ 64.536676][ T4396] netlink: 152 bytes leftover after parsing attributes in process `syz.0.34'. [ 65.420106][ T4430] netlink: 'syz.2.49': attribute type 17 has an invalid length. [ 65.445735][ T4430] netlink: 'syz.2.49': attribute type 16 has an invalid length. [ 65.470126][ T4430] netlink: 152 bytes leftover after parsing attributes in process `syz.2.49'. [ 66.966327][ T4476] netlink: 'syz.4.73': attribute type 7 has an invalid length. [ 67.946676][ T4520] netlink: 611 bytes leftover after parsing attributes in process `syz.2.94'. [ 68.187480][ T4531] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.99'. [ 68.212299][ T4531] netlink: zone id is out of range [ 68.266226][ T4531] netlink: zone id is out of range [ 71.099802][ T4654] netlink: 'syz.0.158': attribute type 3 has an invalid length. [ 71.185825][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.192440][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.299714][ T4701] netlink: 67 bytes leftover after parsing attributes in process `syz.3.181'. [ 72.338295][ T4701] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.363065][ T4701] IPv6: Can't replace route, no match found [ 72.641904][ T4710] netlink: 76 bytes leftover after parsing attributes in process `syz.3.187'. [ 73.926779][ T4764] netlink: 3748 bytes leftover after parsing attributes in process `syz.4.212'. [ 74.101598][ T4770] netlink: 'syz.1.216': attribute type 1 has an invalid length. [ 74.170005][ T4770] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.216'. [ 74.386975][ T4784] Illegal XDP return value 4294967282 on prog (id 68) dev N/A, expect packet loss! [ 74.986631][ T4807] netlink: 'syz.4.234': attribute type 29 has an invalid length. [ 75.005040][ T4807] netlink: 'syz.4.234': attribute type 29 has an invalid length. [ 75.040212][ T4810] netlink: 'syz.4.234': attribute type 29 has an invalid length. [ 75.326784][ T4822] netlink: 'syz.2.240': attribute type 21 has an invalid length. [ 75.342457][ T4822] netlink: 132 bytes leftover after parsing attributes in process `syz.2.240'. [ 75.876510][ T4847] netlink: 'syz.0.252': attribute type 2 has an invalid length. [ 76.289729][ T4863] netlink: 'syz.4.259': attribute type 3 has an invalid length. [ 76.304616][ T1531] cfg80211: failed to load regulatory.db [ 76.326679][ T4862] netlink: 'syz.2.260': attribute type 10 has an invalid length. [ 76.362231][ T4862] netlink: 40 bytes leftover after parsing attributes in process `syz.2.260'. [ 76.388706][ T4862] device team0 entered promiscuous mode [ 76.406199][ T4862] device team_slave_0 entered promiscuous mode [ 76.417533][ T4870] netlink: 60 bytes leftover after parsing attributes in process `syz.0.262'. [ 76.435283][ T4862] device team_slave_1 entered promiscuous mode [ 76.453459][ T4862] bridge0: port 3(team0) entered blocking state [ 76.469521][ T4862] bridge0: port 3(team0) entered disabled state [ 76.494567][ T4862] bridge0: port 3(team0) entered blocking state [ 76.501329][ T4862] bridge0: port 3(team0) entered forwarding state [ 76.537062][ T4870] netlink: 60 bytes leftover after parsing attributes in process `syz.0.262'. [ 76.562527][ T4865] netlink: 60 bytes leftover after parsing attributes in process `syz.0.262'. [ 77.077070][ T4884] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.270'. [ 78.591159][ T4944] netlink: 'syz.3.299': attribute type 10 has an invalid length. [ 78.962563][ T4958] netlink: 'syz.4.306': attribute type 29 has an invalid length. [ 78.970611][ T4958] netlink: 'syz.4.306': attribute type 29 has an invalid length. [ 79.025102][ T4959] netlink: 'syz.4.306': attribute type 29 has an invalid length. [ 79.141224][ T4965] netlink: 'syz.2.308': attribute type 1 has an invalid length. [ 79.173212][ T4965] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.308'. [ 79.961757][ T5001] netlink: 'syz.4.326': attribute type 3 has an invalid length. [ 79.985384][ T5001] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.326'. [ 80.220190][ T5010] netlink: 'syz.4.331': attribute type 21 has an invalid length. [ 81.428699][ T5057] IPv6: NLM_F_CREATE should be specified when creating new route [ 82.593408][ T5099] netlink: 132 bytes leftover after parsing attributes in process `syz.1.373'. [ 86.039700][ T5218] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.429'. [ 86.326596][ T5232] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.435'. [ 86.648427][ T5243] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.441'. [ 86.847356][ T5251] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.445'. [ 87.666442][ T5280] netlink: 65043 bytes leftover after parsing attributes in process `syz.0.458'. [ 87.855798][ T5289] netlink: 152 bytes leftover after parsing attributes in process `syz.3.462'. [ 87.875098][ T5292] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.464'. [ 87.902585][ T5290] netlink: 36 bytes leftover after parsing attributes in process `syz.2.463'. [ 88.359483][ T5312] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.474'. [ 89.630525][ T5360] netlink: 60 bytes leftover after parsing attributes in process `syz.2.494'. [ 91.497811][ T5415] __nla_validate_parse: 2 callbacks suppressed [ 91.497828][ T5415] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.522'. [ 91.580535][ T5417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.523'. [ 91.646184][ T5419] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.524'. [ 91.708695][ T5421] netlink: 166 bytes leftover after parsing attributes in process `syz.0.525'. [ 93.136744][ T5455] netlink: 'syz.3.541': attribute type 2 has an invalid length. [ 99.756421][ T5598] netlink: 'syz.4.600': attribute type 4 has an invalid length. [ 99.772390][ T5598] netlink: 152 bytes leftover after parsing attributes in process `syz.4.600'. [ 101.009509][ T5637] netlink: 'syz.1.620': attribute type 4 has an invalid length. [ 101.017437][ T5637] netlink: 152 bytes leftover after parsing attributes in process `syz.1.620'. [ 104.973826][ T5734] sock: sock_set_timeout: `syz.2.662' (pid 5734) tries to set negative timeout [ 106.409355][ T5789] netlink: 'syz.2.690': attribute type 3 has an invalid length. [ 106.447931][ T5789] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.690'. [ 107.313812][ T5819] netlink: 'syz.0.705': attribute type 3 has an invalid length. [ 107.353272][ T5819] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.705'. [ 107.857507][ T5837] netlink: 'syz.0.713': attribute type 3 has an invalid length. [ 107.917982][ T5837] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.713'. [ 108.099106][ T5845] sock: sock_set_timeout: `syz.1.727' (pid 5845) tries to set negative timeout [ 109.817056][ T5891] netlink: 'syz.4.739': attribute type 3 has an invalid length. [ 109.839432][ T5891] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.739'. [ 110.750717][ T5927] netlink: 'syz.1.757': attribute type 3 has an invalid length. [ 110.804658][ T5927] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.757'. [ 111.119119][ T5941] netlink: 'syz.4.762': attribute type 10 has an invalid length. [ 111.366796][ T5949] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.767'. [ 111.422485][ T5949] openvswitch: netlink: Message has 41214 unknown bytes. [ 111.897670][ T5970] netlink: 'syz.3.776': attribute type 10 has an invalid length. [ 112.899678][ T6004] netlink: 'syz.1.793': attribute type 10 has an invalid length. [ 113.798063][ T6040] netlink: 60 bytes leftover after parsing attributes in process `syz.2.810'. [ 114.871205][ T6067] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 114.882088][ T6067] netlink: 5 bytes leftover after parsing attributes in process `syz.2.823'. [ 115.530592][ T6092] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.835'. [ 115.879159][ T6102] netlink: 'syz.3.839': attribute type 1 has an invalid length. [ 115.923261][ T6102] netlink: 5 bytes leftover after parsing attributes in process `syz.3.839'. [ 115.981709][ T6106] netlink: 60 bytes leftover after parsing attributes in process `syz.4.844'. [ 116.168223][ T6112] netlink: 'syz.4.847': attribute type 29 has an invalid length. [ 116.187668][ T6112] netlink: 'syz.4.847': attribute type 29 has an invalid length. [ 116.216132][ T6112] netlink: 'syz.4.847': attribute type 29 has an invalid length. [ 116.688694][ T6136] netlink: 'syz.0.857': attribute type 1 has an invalid length. [ 116.717487][ T6136] netlink: 5 bytes leftover after parsing attributes in process `syz.0.857'. [ 116.873620][ T6146] netlink: 'syz.0.862': attribute type 29 has an invalid length. [ 116.917445][ T6146] netlink: 'syz.0.862': attribute type 29 has an invalid length. [ 116.933639][ T6149] netlink: 'syz.0.862': attribute type 29 has an invalid length. [ 117.069008][ T6154] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.866'. [ 117.734698][ T6179] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.878'. [ 118.365067][ T6209] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.892'. [ 119.308779][ T6245] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.911'. [ 119.590699][ T6260] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.928'. [ 119.608942][ T6261] netlink: 'syz.1.917': attribute type 29 has an invalid length. [ 119.628754][ T6261] netlink: 'syz.1.917': attribute type 29 has an invalid length. [ 119.640239][ T6261] netlink: 'syz.1.917': attribute type 29 has an invalid length. [ 119.891601][ T6274] netlink: 'syz.4.935': attribute type 29 has an invalid length. [ 119.963091][ T6274] netlink: 'syz.4.935': attribute type 29 has an invalid length. [ 120.003789][ T6276] netlink: 'syz.4.935': attribute type 29 has an invalid length. [ 120.422539][ T6298] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.933'. [ 120.800358][ T6316] netlink: 'syz.0.944': attribute type 29 has an invalid length. [ 120.809307][ T6316] netlink: 'syz.0.944': attribute type 29 has an invalid length. [ 122.141057][ T6358] validate_nla: 4 callbacks suppressed [ 122.141071][ T6358] netlink: 'syz.3.965': attribute type 1 has an invalid length. [ 122.154759][ T6358] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.965'. [ 123.098003][ T6393] syz.3.979 uses obsolete (PF_INET,SOCK_PACKET) [ 124.350309][ T6431] netlink: 132 bytes leftover after parsing attributes in process `syz.0.998'. [ 124.817119][ T6441] netlink: 65023 bytes leftover after parsing attributes in process `syz.4.1005'. [ 125.477619][ T6475] netlink: 'syz.1.1019': attribute type 2 has an invalid length. [ 125.496236][ T6475] netlink: 'syz.1.1019': attribute type 1 has an invalid length. [ 127.439926][ T6532] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1045'. [ 128.461356][ T6551] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1056'. [ 128.520623][ T6551] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1056'. [ 128.572599][ T6551] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1056'. [ 128.791361][ T6558] netlink: 'syz.4.1060': attribute type 2 has an invalid length. [ 128.809512][ T6558] netlink: 'syz.4.1060': attribute type 1 has an invalid length. [ 129.411211][ T6588] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1072'. [ 129.420483][ T6588] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1072'. [ 129.454325][ T6588] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1072'. [ 129.654381][ T6601] netlink: 62967 bytes leftover after parsing attributes in process `syz.1.1081'. [ 130.350839][ T6628] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1092'. [ 130.469840][ T6628] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1092'. [ 130.512498][ T6631] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1092'. [ 132.271676][ T6690] netlink: 62967 bytes leftover after parsing attributes in process `syz.0.1122'. [ 132.625685][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.632075][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.344804][ T6720] netlink: 62967 bytes leftover after parsing attributes in process `syz.2.1136'. [ 134.238618][ T6745] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.1147'. [ 136.521597][ T6820] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.1187'. [ 136.671900][ T6824] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1189'. [ 137.393405][ T6849] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.1201'. [ 138.278496][ T6866] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1209'. [ 139.970937][ T6904] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1225'. [ 140.753474][ T6924] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1237'. [ 142.540367][ T7003] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1285'. [ 145.641132][ T7085] netlink: 'syz.0.1315': attribute type 7 has an invalid length. [ 146.036504][ T7097] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1321'. [ 146.151852][ T7105] netlink: 'syz.3.1325': attribute type 1 has an invalid length. [ 146.178166][ T7105] netlink: 'syz.3.1325': attribute type 1 has an invalid length. [ 146.197730][ T7105] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.1325'. [ 146.724999][ T7134] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1339'. [ 146.903249][ T7140] netlink: 'syz.4.1341': attribute type 1 has an invalid length. [ 146.934752][ T7140] netlink: 'syz.4.1341': attribute type 1 has an invalid length. [ 146.970553][ T7140] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1341'. [ 147.398214][ T7149] team0: Port device team_slave_0 removed [ 147.415867][ T7149] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 148.352471][ T7189] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1363'. [ 148.382723][ T7189] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1363'. [ 148.425403][ T7188] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1363'. [ 148.463050][ T7189] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1363'. [ 149.790465][ T7236] tap0: tun_chr_ioctl cmd 1074025692 [ 149.806909][ T7238] device team_slave_0 left promiscuous mode [ 149.834875][ T7238] team0: Port device team_slave_0 removed [ 149.841083][ T7238] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 150.012485][ T7247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1398'. [ 150.039885][ T7247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1398'. [ 150.062370][ T7243] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1398'. [ 150.092181][ T7254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1398'. [ 150.824055][ T7281] netlink: 'syz.2.1404': attribute type 11 has an invalid length. [ 150.870202][ T7281] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1404'. [ 150.900298][ T7280] team0: Port device team_slave_0 removed [ 150.906689][ T7280] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 150.981553][ T7279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.465384][ T7299] tap0: tun_chr_ioctl cmd 1074025692 [ 152.700804][ T7328] tap0: tun_chr_ioctl cmd 1074025692 [ 153.466161][ T7358] netlink: 'syz.1.1440': attribute type 49 has an invalid length. [ 153.493570][ T7358] netlink: 'syz.1.1440': attribute type 49 has an invalid length. [ 155.248781][ T7411] netlink: 'syz.1.1465': attribute type 9 has an invalid length. [ 155.268465][ T7411] netlink: 40451 bytes leftover after parsing attributes in process `syz.1.1465'. [ 155.297614][ T7412] tun0: tun_chr_ioctl cmd 2147767507 [ 155.809681][ T7434] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1485'. [ 155.839019][ T7434] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1485'. [ 155.871526][ T7429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1485'. [ 155.898667][ T7436] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1485'. [ 156.290127][ T7444] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1477'. [ 157.321058][ T7461] netlink: 'syz.0.1483': attribute type 21 has an invalid length. [ 157.355046][ T7461] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1483'. [ 157.657624][ T7471] delete_channel: no stack [ 158.515654][ T7493] netlink: 'syz.0.1500': attribute type 29 has an invalid length. [ 158.607130][ T7493] netlink: 'syz.0.1500': attribute type 29 has an invalid length. [ 158.857828][ T7506] netlink: 'syz.3.1507': attribute type 13 has an invalid length. [ 158.870491][ T7506] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1507'. [ 158.991662][ T7513] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.1510'. [ 161.023012][ T7563] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1535'. [ 163.878401][ T7660] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1576'. [ 163.898019][ T7660] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1576'. [ 163.924519][ T7659] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1576'. [ 163.964445][ T7663] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1576'. [ 164.163293][ T7665] tap0: tun_chr_ioctl cmd 1074025677 [ 164.181051][ T7665] tap0: linktype set to 778 [ 164.230087][ T7671] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1579'. [ 164.680284][ T7684] delete_channel: no stack [ 166.030949][ T7724] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1606'. [ 166.045991][ T7724] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1606'. [ 166.057770][ T7721] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1606'. [ 166.078477][ T7724] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1606'. [ 166.558264][ T7739] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1612'. [ 166.567985][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 168.214666][ T7800] netlink: 'syz.4.1642': attribute type 29 has an invalid length. [ 168.252862][ T7800] netlink: 'syz.4.1642': attribute type 29 has an invalid length. [ 168.276826][ T7801] netlink: 'syz.4.1642': attribute type 29 has an invalid length. [ 168.309332][ T7806] netlink: 'syz.4.1642': attribute type 29 has an invalid length. [ 168.662444][ T7823] netlink: 'syz.0.1652': attribute type 13 has an invalid length. [ 168.690617][ T7823] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1652'. [ 168.855045][ T7832] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1656'. [ 168.881644][ T7832] netlink: 'syz.4.1656': attribute type 1 has an invalid length. [ 168.904583][ T7832] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1656'. [ 169.611834][ T7863] netlink: 'syz.3.1673': attribute type 12 has an invalid length. [ 169.634521][ T7863] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.1673'. [ 170.125238][ T7873] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1676'. [ 171.126268][ T7901] netlink: 'syz.0.1689': attribute type 4 has an invalid length. [ 172.159544][ T7944] netlink: 'syz.0.1709': attribute type 3 has an invalid length. [ 172.182193][ T7944] __nla_validate_parse: 1 callbacks suppressed [ 172.182207][ T7944] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.1709'. [ 172.371285][ T7953] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1714'. [ 172.730734][ T7966] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1721'. [ 172.754349][ T7969] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1722'. [ 172.789767][ T7969] netlink: 'syz.4.1722': attribute type 1 has an invalid length. [ 172.803330][ T7969] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1722'. [ 173.417117][ T8002] netlink: 'syz.3.1736': attribute type 11 has an invalid length. [ 173.439771][ T8002] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1736'. [ 173.497838][ T8001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.655032][ T8008] tun0: tun_chr_ioctl cmd 1074025677 [ 173.692466][ T8008] tun0: linktype set to 776 [ 174.263814][ T8029] netlink: 'syz.0.1748': attribute type 29 has an invalid length. [ 174.282770][ T8029] netlink: 'syz.0.1748': attribute type 29 has an invalid length. [ 174.533534][ T8042] netlink: 'syz.0.1753': attribute type 11 has an invalid length. [ 174.562591][ T8042] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1753'. [ 174.607618][ T8040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.841282][ T8055] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1758'. [ 175.644337][ T8076] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 175.886620][ T8089] tap0: tun_chr_ioctl cmd 2147767520 [ 177.159927][ T8116] netlink: 'syz.0.1790': attribute type 29 has an invalid length. [ 177.207670][ T8116] netlink: 'syz.0.1790': attribute type 29 has an invalid length. [ 177.231567][ T8116] netlink: 'syz.0.1790': attribute type 29 has an invalid length. [ 177.248936][ T8119] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1792'. [ 177.260118][ T8116] netlink: 'syz.0.1790': attribute type 29 has an invalid length. [ 177.416137][ T8127] netlink: 'syz.4.1794': attribute type 49 has an invalid length. [ 177.427671][ T8127] netlink: 'syz.4.1794': attribute type 49 has an invalid length. [ 177.604587][ T8137] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1799'. [ 177.666367][ T8140] netlink: 'syz.2.1801': attribute type 21 has an invalid length. [ 178.148899][ T8161] netlink: 'syz.2.1811': attribute type 21 has an invalid length. [ 178.186391][ T8161] netlink: 15970 bytes leftover after parsing attributes in process `syz.2.1811'. [ 178.501647][ T8181] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1822'. [ 178.532268][ T8181] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 178.982264][ T8200] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1829'. [ 179.940285][ T8228] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1842'. [ 180.617260][ T8258] validate_nla: 4 callbacks suppressed [ 180.617276][ T8258] netlink: 'syz.0.1857': attribute type 46 has an invalid length. [ 180.650198][ T8258] netlink: 212868 bytes leftover after parsing attributes in process `syz.0.1857'. [ 180.782212][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 180.782298][ T4263] Bluetooth: hci0: command 0x0406 tx timeout [ 180.788284][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 180.794843][ T4260] Bluetooth: hci3: command 0x0406 tx timeout [ 180.800215][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 180.829172][ T8267] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1859'. [ 181.069998][ T8278] netlink: 'syz.3.1867': attribute type 16 has an invalid length. [ 181.092159][ T8278] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1867'. [ 181.290985][ T8289] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1872'. [ 181.615261][ T8306] netlink: 'syz.0.1880': attribute type 2 has an invalid length. [ 183.376000][ T8372] netlink: 'syz.2.1910': attribute type 21 has an invalid length. [ 183.408115][ T8372] netlink: 'syz.2.1910': attribute type 1 has an invalid length. [ 183.432464][ T8372] netlink: 'syz.2.1910': attribute type 2 has an invalid length. [ 183.457725][ T8372] __nla_validate_parse: 1 callbacks suppressed [ 183.457742][ T8372] netlink: 9062 bytes leftover after parsing attributes in process `syz.2.1910'. [ 184.498884][ T8459] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1928'. [ 184.592081][ T8459] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1928'. [ 184.722116][ T8425] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1928'. [ 184.791626][ T8468] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1928'. [ 186.379987][ T8549] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1961'. [ 186.807702][ T4245] cgroup: fork rejected by pids controller in /syz1 [ 187.625348][ T8467] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.767653][ T8467] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.916633][ T8467] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.948823][ T8598] netlink: 'syz.3.1986': attribute type 4 has an invalid length. [ 188.038221][ T8467] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.187724][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.201383][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.209048][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.225859][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.239157][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 188.246905][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.472538][ T8615] netlink: 'syz.2.1993': attribute type 21 has an invalid length. [ 188.489101][ T8615] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.1993'. [ 189.265498][ T8609] chnl_net:caif_netlink_parms(): no params data found [ 189.352650][ T8659] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2007'. [ 189.653291][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.660401][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.703341][ T8609] device bridge_slave_0 entered promiscuous mode [ 189.778614][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.787948][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.813770][ T8609] device bridge_slave_1 entered promiscuous mode [ 189.920108][ T8609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.103538][ T8609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.188247][ T8686] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2018'. [ 190.224147][ T8609] team0: Port device team_slave_0 added [ 190.237932][ T8696] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2023'. [ 190.272463][ T8609] team0: Port device team_slave_1 added [ 190.306081][ T4260] Bluetooth: hci0: command 0x0409 tx timeout [ 190.481867][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.498213][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.571344][ T8609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.620763][ T8467] device hsr_slave_0 left promiscuous mode [ 190.637351][ T8467] device hsr_slave_1 left promiscuous mode [ 190.688417][ T8467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.714311][ T8467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.736251][ T8467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.779324][ T8467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.815946][ T8467] device bridge_slave_1 left promiscuous mode [ 190.825672][ T8467] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.859534][ T8467] device bridge_slave_0 left promiscuous mode [ 190.872326][ T8467] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.959705][ T8467] device veth1_macvtap left promiscuous mode [ 190.976526][ T8467] device veth0_macvtap left promiscuous mode [ 190.999285][ T8467] device veth1_vlan left promiscuous mode [ 191.017859][ T8467] device veth0_vlan left promiscuous mode [ 191.497761][ T8467] team0 (unregistering): Port device team_slave_1 removed [ 191.554040][ T8467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.588022][ T8467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.893556][ T8467] bond0 (unregistering): Released all slaves [ 191.962497][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.969488][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.995629][ T8609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.132498][ T8609] device hsr_slave_0 entered promiscuous mode [ 192.162322][ T8609] device hsr_slave_1 entered promiscuous mode [ 192.386652][ T4260] Bluetooth: hci0: command 0x041b tx timeout [ 192.534177][ T8755] netpci0: tun_chr_ioctl cmd 1074025694 [ 193.011215][ T8772] bridge0: port 3(veth0_to_bond) entered blocking state [ 193.026491][ T8772] bridge0: port 3(veth0_to_bond) entered disabled state [ 193.075860][ T8772] device veth0_to_bond entered promiscuous mode [ 193.092897][ T8772] bridge0: port 3(veth0_to_bond) entered blocking state [ 193.100223][ T8772] bridge0: port 3(veth0_to_bond) entered forwarding state [ 193.552675][ T8789] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2056'. [ 193.600235][ T8609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.633113][ T8609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.679403][ T8609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.728985][ T8609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.976036][ T8609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.011900][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.029234][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.064009][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.070348][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.084379][ T8609] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.133730][ T8467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.148358][ T8467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.174032][ T8467] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.181155][ T8467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.225818][ T8467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.239951][ T8467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.260628][ T8467] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.267775][ T8467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.278114][ T8467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.313908][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.348600][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.382798][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.422989][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.450496][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.467258][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 194.511706][ T8609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.631587][ T8609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.693785][ T8826] netlink: 'syz.2.2071': attribute type 5 has an invalid length. [ 194.701881][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.814328][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.901546][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.936913][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.970091][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.024179][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.057069][ T8837] netlink: 'syz.4.2074': attribute type 10 has an invalid length. [ 195.671040][ T8837] wlan1: mtu less than device minimum [ 195.687698][ T8837] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 195.708224][ T8833] netlink: 'syz.3.2073': attribute type 10 has an invalid length. [ 195.726573][ T8833] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.2073'. [ 195.752852][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.901220][ T8863] netlink: 'syz.4.2080': attribute type 13 has an invalid length. [ 195.935666][ T8863] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.2080'. [ 196.071370][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.080602][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.147029][ T8609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.203349][ T8881] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2085'. [ 196.214685][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.233474][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.255751][ T8881] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2085'. [ 196.291746][ T8877] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2085'. [ 196.321772][ T8884] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2085'. [ 196.452339][ T8891] netlink: 4019 bytes leftover after parsing attributes in process `syz.0.2089'. [ 196.542258][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 196.562758][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.580612][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.589457][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.597981][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.614024][ T8609] device veth0_vlan entered promiscuous mode [ 196.658837][ T8609] device veth1_vlan entered promiscuous mode [ 196.733085][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 196.741728][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 196.785413][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.822713][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.844916][ T8609] device veth0_macvtap entered promiscuous mode [ 196.875598][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.886419][ T8609] device veth1_macvtap entered promiscuous mode [ 196.937569][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.971358][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.998160][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.014768][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.025682][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.063958][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.122214][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.152060][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.183623][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.191156][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.237691][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.280432][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.297550][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.309769][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.323656][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.337397][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.348568][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.358861][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.382149][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.405376][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.427334][ T8609] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.480027][ T8609] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.508116][ T8609] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.536365][ T8609] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.578642][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.599946][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.279536][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.304749][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.340264][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.374706][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.392053][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.429419][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.082454][ T8992] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2119'. [ 200.651303][ T9056] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.2151'. [ 200.759197][ T9062] tap0: tun_chr_ioctl cmd 2147767519 [ 201.185788][ T9080] netlink: 'syz.0.2164': attribute type 4 has an invalid length. [ 201.246296][ T9084] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2165'. [ 201.832384][ T9116] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2176'. [ 201.849250][ T9116] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2176'. [ 201.880949][ T9107] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2176'. [ 201.918563][ T9115] tap0: tun_chr_ioctl cmd 1074812118 [ 201.952810][ T9116] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2176'. [ 202.536436][ T9132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2188'. [ 202.619100][ T9132] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.672750][ T9132] netlink: 'syz.3.2188': attribute type 3 has an invalid length. [ 202.703403][ T9132] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2188'. [ 202.734532][ T8461] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.838411][ T8461] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.946639][ T8461] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.122620][ T8461] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.579756][ T4263] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.591914][ T4263] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.600686][ T4263] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.609627][ T4263] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.618010][ T4263] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 203.626440][ T4263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.915812][ T9184] netlink: 'syz.0.2210': attribute type 29 has an invalid length. [ 203.933540][ T9182] netlink: 'syz.4.2208': attribute type 29 has an invalid length. [ 203.956769][ T9184] netlink: 'syz.0.2210': attribute type 29 has an invalid length. [ 203.971321][ T9188] netlink: 'syz.0.2210': attribute type 29 has an invalid length. [ 204.015816][ T9182] netlink: 'syz.4.2208': attribute type 29 has an invalid length. [ 204.033425][ T9184] netlink: 'syz.0.2210': attribute type 29 has an invalid length. [ 204.465140][ T9169] chnl_net:caif_netlink_parms(): no params data found [ 204.618819][ T9215] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2218'. [ 204.815073][ T9226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2221'. [ 204.851896][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2221'. [ 204.901799][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2221'. [ 204.940415][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2221'. [ 205.662577][ T4260] Bluetooth: hci0: command 0x0409 tx timeout [ 207.742503][ T4260] Bluetooth: hci0: command 0x041b tx timeout [ 208.078337][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.086267][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.114889][ T9169] device bridge_slave_0 entered promiscuous mode [ 208.150386][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.166805][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.185189][ T9169] device bridge_slave_1 entered promiscuous mode [ 208.202514][ T9247] Â: renamed from pim6reg1 [ 208.353635][ T9268] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2233'. [ 208.401504][ T9268] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2233'. [ 208.418289][ T9169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.440539][ T9267] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2233'. [ 208.471368][ T9272] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2233'. [ 208.487826][ T8461] device hsr_slave_0 left promiscuous mode [ 208.496318][ T8461] device hsr_slave_1 left promiscuous mode [ 208.532364][ T8461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.540072][ T8461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.561650][ T8461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.611210][ T8461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.639280][ T8461] device bridge_slave_1 left promiscuous mode [ 208.665740][ T8461] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.705617][ T8461] device bridge_slave_0 left promiscuous mode [ 208.711909][ T8461] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.789560][ T8461] device veth1_macvtap left promiscuous mode [ 208.805937][ T8461] device veth0_macvtap left promiscuous mode [ 208.826274][ T8461] device veth1_vlan left promiscuous mode [ 208.846139][ T8461] device veth0_vlan left promiscuous mode [ 209.064719][ T9301] netlink: 'syz.4.2245': attribute type 29 has an invalid length. [ 209.727662][ T8461] team0 (unregistering): Port device team_slave_1 removed [ 209.761275][ T8461] team0 (unregistering): Port device team_slave_0 removed [ 209.793365][ T8461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.822583][ T4260] Bluetooth: hci0: command 0x040f tx timeout [ 209.835074][ T8461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.137395][ T8461] bond0 (unregistering): Released all slaves [ 210.214135][ T9169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.233543][ T9301] netlink: 'syz.4.2245': attribute type 29 has an invalid length. [ 210.255774][ T9317] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2249'. [ 210.406849][ T9169] team0: Port device team_slave_0 added [ 210.433028][ T9169] team0: Port device team_slave_1 added [ 210.503987][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.552077][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.632286][ T9169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.659994][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.672047][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.753141][ T9169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.944019][ T9169] device hsr_slave_0 entered promiscuous mode [ 210.968918][ T9169] device hsr_slave_1 entered promiscuous mode [ 211.907625][ T4260] Bluetooth: hci0: command 0x0419 tx timeout [ 212.507741][ T9409] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2279'. [ 212.694388][ T9418] netlink: 40227 bytes leftover after parsing attributes in process `syz.4.2282'. [ 212.853681][ T9169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.899527][ T9169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.959073][ T9169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.986286][ T9169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.225565][ T9441] netlink: 'syz.3.2291': attribute type 39 has an invalid length. [ 213.399936][ T9169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.443446][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.451306][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.477012][ T9169] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.505494][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.524122][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.556770][ T5658] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.563935][ T5658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.607956][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.620994][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.644847][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.697482][ T5658] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.704638][ T5658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.783420][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.822166][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.840083][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.863711][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.882772][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.917876][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.950991][ T9169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.977099][ T9169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.040906][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.050944][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.065511][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.089659][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.101127][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.137596][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.600985][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.619280][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.659852][ T9169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.797194][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.830690][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.920110][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.941167][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.980391][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.045709][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.070517][ T9169] device veth0_vlan entered promiscuous mode [ 215.118428][ T9169] device veth1_vlan entered promiscuous mode [ 215.198729][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.214921][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 215.256323][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.297949][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.348702][ T9169] device veth0_macvtap entered promiscuous mode [ 215.419575][ T9169] device veth1_macvtap entered promiscuous mode [ 215.526695][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.562183][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.597928][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.621999][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.632120][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.646208][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.657092][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.676150][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.690293][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.707225][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.719590][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.728232][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.745571][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.767790][ T9521] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2317'. [ 215.781835][ T9516] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2317'. [ 215.801773][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.814186][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.825472][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.836188][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.846265][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.856882][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.866726][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.877436][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.895957][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.903696][ T9519] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2317'. [ 215.917245][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.942777][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.978417][ T9169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.017383][ T9169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.028976][ T9169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.041027][ T9169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.068824][ T9527] netlink: 'syz.3.2320': attribute type 27 has an invalid length. [ 216.142282][ T9527] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2320'. [ 216.443032][ T8458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.473710][ T8458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.531277][ T8454] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.572787][ T8458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.580857][ T8458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.637612][ T8454] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.680469][ T9549] tap0: tun_chr_ioctl cmd 1074025677 [ 216.696472][ T9549] tap0: linktype set to 769 [ 216.778252][ T9552] syzkaller0: tun_chr_ioctl cmd 35108 [ 217.056660][ T9567] netlink: 'syz.4.2333': attribute type 49 has an invalid length. [ 217.309433][ T9580] netlink: 35347 bytes leftover after parsing attributes in process `syz.4.2337'. [ 217.508582][ T9588] netlink: 'syz.1.2340': attribute type 27 has an invalid length. [ 217.532572][ T9588] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.2340'. [ 218.012437][ T9617] netlink: 'syz.1.2351': attribute type 10 has an invalid length. [ 218.020292][ T9617] netlink: 3867 bytes leftover after parsing attributes in process `syz.1.2351'. [ 218.357087][ T9632] tap0: tun_chr_ioctl cmd 1074025677 [ 218.377139][ T9632] tap0: linktype set to 0 [ 218.492264][ T9642] netlink: 'syz.1.2361': attribute type 25 has an invalid length. [ 218.500121][ T9642] netlink: 'syz.1.2361': attribute type 7 has an invalid length. [ 218.804446][ T9657] netpci0: tun_chr_ioctl cmd 1074025676 [ 218.827227][ T9660] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2366'. [ 218.842076][ T9657] netpci0: owner set to 0 [ 218.882639][ T9660] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2366'. [ 218.896721][ T9655] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2366'. [ 219.118544][ T9676] netlink: 'syz.1.2373': attribute type 10 has an invalid length. [ 219.161115][ T9677] Â: renamed from pim6reg1 [ 222.238326][ T9824] netlink: 'syz.4.2426': attribute type 21 has an invalid length. [ 222.268098][ T9824] netlink: 'syz.4.2426': attribute type 1 has an invalid length. [ 222.293653][ T9824] __nla_validate_parse: 4 callbacks suppressed [ 222.293668][ T9824] netlink: 14374 bytes leftover after parsing attributes in process `syz.4.2426'. [ 222.439743][ T9835] netlink: 'syz.1.2429': attribute type 27 has an invalid length. [ 222.466037][ T9835] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.2429'. [ 222.586734][ T9842] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2433'. [ 223.270091][ T9877] netlink: 'syz.2.2444': attribute type 21 has an invalid length. [ 223.283849][ T9877] netlink: 'syz.2.2444': attribute type 1 has an invalid length. [ 223.296538][ T9877] netlink: 14374 bytes leftover after parsing attributes in process `syz.2.2444'. [ 223.318233][ T9878] netlink: 'syz.3.2447': attribute type 27 has an invalid length. [ 223.358487][ T9878] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2447'. [ 223.651790][ T9893] netlink: 'syz.2.2456': attribute type 49 has an invalid length. [ 223.687933][ T9893] netlink: 'syz.2.2456': attribute type 49 has an invalid length. [ 224.007855][ T9915] netlink: 'syz.0.2463': attribute type 21 has an invalid length. [ 224.037428][ T9915] netlink: 'syz.0.2463': attribute type 1 has an invalid length. [ 224.063705][ T9915] netlink: 14374 bytes leftover after parsing attributes in process `syz.0.2463'. [ 224.776357][ T9953] tun0: tun_chr_ioctl cmd 2147767507 [ 224.793492][ T9955] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.2481'. [ 225.068612][ T9969] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.2492'. [ 225.089307][ T9970] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2491'. [ 225.107131][ T9970] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2491'. [ 225.436855][ T9981] delete_channel: no stack [ 228.504825][T10089] validate_nla: 9 callbacks suppressed [ 228.504843][T10089] netlink: 'syz.4.2544': attribute type 9 has an invalid length. [ 228.525757][T10089] __nla_validate_parse: 5 callbacks suppressed [ 228.525789][T10089] netlink: 40451 bytes leftover after parsing attributes in process `syz.4.2544'. [ 228.887491][T10103] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2551'. [ 229.565953][T10133] netlink: 'syz.2.2565': attribute type 9 has an invalid length. [ 229.597252][T10133] netlink: 40451 bytes leftover after parsing attributes in process `syz.2.2565'. [ 230.108279][T10151] tun0: tun_chr_ioctl cmd 2147767507 [ 230.773500][T10184] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2589'. [ 230.789986][T10184] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2589'. [ 230.818675][T10180] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2589'. [ 230.858065][T10185] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2589'. [ 230.919373][T10189] tun0: tun_chr_ioctl cmd 2147767507 [ 230.947808][T10190] delete_channel: no stack [ 231.162304][T10197] tap0: tun_chr_ioctl cmd 1074025677 [ 231.167778][T10197] tap0: linktype set to 778 [ 231.244199][T10199] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.2596'. [ 232.753455][T10250] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2620'. [ 232.779014][T10250] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2620'. [ 234.791406][T10328] netlink: 'syz.2.2660': attribute type 29 has an invalid length. [ 234.821742][T10328] netlink: 'syz.2.2660': attribute type 29 has an invalid length. [ 234.836326][T10330] netlink: 'syz.2.2660': attribute type 29 has an invalid length. [ 234.850707][T10328] netlink: 'syz.2.2660': attribute type 29 has an invalid length. [ 234.970315][T10334] __nla_validate_parse: 4 callbacks suppressed [ 234.970332][T10334] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2673'. [ 235.022795][T10334] netlink: 'syz.0.2673': attribute type 1 has an invalid length. [ 235.038858][T10334] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2673'. [ 235.332656][T10349] netlink: 'syz.1.2669': attribute type 13 has an invalid length. [ 235.340509][T10349] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2669'. [ 235.925475][T10379] netlink: 'syz.4.2686': attribute type 12 has an invalid length. [ 235.949748][T10379] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.2686'. [ 236.092541][T10386] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2689'. [ 237.111475][T10413] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2699'. [ 237.389929][T10422] netlink: 'syz.2.2704': attribute type 4 has an invalid length. [ 238.846654][T10471] netlink: 'syz.4.2726': attribute type 3 has an invalid length. [ 238.869739][T10471] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.2726'. [ 239.100730][T10475] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.2741'. [ 239.270015][T10479] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2729'. [ 239.649163][T10496] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2738'. [ 240.253541][T10518] __nla_validate_parse: 3 callbacks suppressed [ 240.253559][T10518] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2749'. [ 240.645806][T10526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2751'. [ 240.716435][T10526] netlink: 'syz.0.2751': attribute type 1 has an invalid length. [ 240.766342][T10526] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2751'. [ 240.974915][T10538] tun0: tun_chr_ioctl cmd 1074025677 [ 240.991551][T10538] tun0: linktype set to 776 [ 241.263353][T10552] netlink: 'syz.1.2767': attribute type 29 has an invalid length. [ 241.318332][T10552] netlink: 'syz.1.2767': attribute type 29 has an invalid length. [ 241.504347][T10564] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2774'. [ 242.684900][T10598] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 242.992466][T10614] tap0: tun_chr_ioctl cmd 2147767520 [ 244.341750][T10635] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2806'. [ 244.526093][T10641] netlink: 'syz.3.2808': attribute type 29 has an invalid length. [ 244.549128][T10641] netlink: 'syz.3.2808': attribute type 29 has an invalid length. [ 244.583297][T10641] netlink: 'syz.3.2808': attribute type 29 has an invalid length. [ 244.637222][T10647] netlink: 'syz.3.2808': attribute type 29 has an invalid length. [ 244.674703][T10649] netlink: 'syz.2.2810': attribute type 49 has an invalid length. [ 244.682712][T10649] netlink: 'syz.2.2810': attribute type 49 has an invalid length. [ 245.002717][T10661] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2816'. [ 245.067168][T10669] netlink: 'syz.3.2818': attribute type 21 has an invalid length. [ 245.434392][T10686] netlink: 15970 bytes leftover after parsing attributes in process `syz.3.2830'. [ 245.808762][T10702] validate_nla: 2 callbacks suppressed [ 245.808779][T10702] netlink: 'syz.4.2837': attribute type 33 has an invalid length. [ 245.835055][T10702] netlink: 'syz.4.2837': attribute type 10 has an invalid length. [ 245.867403][T10702] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2837'. [ 245.882461][T10702] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 246.177245][T10718] netlink: 'syz.3.2845': attribute type 3 has an invalid length. [ 246.197195][T10718] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2845'. [ 246.733287][T10746] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2857'. [ 247.987727][T10783] netlink: 'syz.2.2875': attribute type 46 has an invalid length. [ 248.001685][T10783] netlink: 212868 bytes leftover after parsing attributes in process `syz.2.2875'. [ 248.163416][T10791] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2880'. [ 248.321328][T10798] netlink: 'syz.0.2883': attribute type 16 has an invalid length. [ 248.339517][T10798] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2883'. [ 248.710921][T10814] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2890'. [ 248.977384][T10826] netlink: 'syz.4.2896': attribute type 2 has an invalid length. [ 249.012063][T10826] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.2896'. [ 251.022907][T10901] netlink: 'syz.1.2929': attribute type 21 has an invalid length. [ 251.030958][T10901] netlink: 'syz.1.2929': attribute type 1 has an invalid length. [ 251.041700][T10901] netlink: 'syz.1.2929': attribute type 2 has an invalid length. [ 251.050954][T10901] netlink: 9062 bytes leftover after parsing attributes in process `syz.1.2929'. [ 251.832606][T10941] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2946'. [ 251.852543][T10941] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2946'. [ 251.864607][T10937] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2946'. [ 251.875754][T10941] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2946'. [ 253.643090][T11029] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2973'. [ 253.957865][ T4252] cgroup: fork rejected by pids controller in /syz2 [ 254.549145][ T8461] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.740382][ T8461] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.807362][ T8461] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.983748][ T8461] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.503877][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.510211][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.601051][ T4260] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.610384][ T4260] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.618420][ T4260] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.669234][ T4260] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.680896][ T4260] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 255.695569][ T4260] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.967985][T11096] netlink: 'syz.4.3000': attribute type 4 has an invalid length. [ 256.585510][T11121] netlink: 'syz.0.3008': attribute type 21 has an invalid length. [ 256.618033][T11121] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.3008'. [ 256.855573][T11082] chnl_net:caif_netlink_parms(): no params data found [ 257.471121][T11082] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.518388][T11082] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.533024][T11082] device bridge_slave_0 entered promiscuous mode [ 257.579679][T11163] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3024'. [ 257.612822][ T8461] device hsr_slave_0 left promiscuous mode [ 257.662520][ T8461] device hsr_slave_1 left promiscuous mode [ 257.679256][ T8461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.712961][ T8461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.742212][ T4260] Bluetooth: hci2: command 0x0409 tx timeout [ 257.747929][ T8461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.764407][ T8461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.777575][ T8461] bridge0: port 3(team0) entered disabled state [ 257.790930][ T8461] device bridge_slave_1 left promiscuous mode [ 257.837738][ T8461] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.878546][ T8461] device bridge_slave_0 left promiscuous mode [ 257.907851][ T8461] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.033372][ T8461] device veth1_macvtap left promiscuous mode [ 258.039445][ T8461] device veth0_macvtap left promiscuous mode [ 258.057333][ T8461] device veth1_vlan left promiscuous mode [ 258.065612][ T8461] device veth0_vlan left promiscuous mode [ 258.504478][ T8461] device team_slave_1 left promiscuous mode [ 258.512133][ T8461] team0 (unregistering): Port device team_slave_1 removed [ 258.566532][ T8461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.598551][ T8461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.910819][ T8461] bond0 (unregistering): Released all slaves [ 258.971030][T11082] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.978769][T11082] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.987037][T11082] device bridge_slave_1 entered promiscuous mode [ 259.020696][T11082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.038022][T11082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.059064][T11191] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3036'. [ 259.170363][T11082] team0: Port device team_slave_0 added [ 259.215685][T11195] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.3037'. [ 259.264364][T11082] team0: Port device team_slave_1 added [ 259.367844][T11082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.380520][T11082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.408463][T11082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.461207][T11082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.487906][T11082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.577696][T11082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.733796][T11082] device hsr_slave_0 entered promiscuous mode [ 259.787348][T11082] device hsr_slave_1 entered promiscuous mode [ 259.810021][T11082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.832056][ T4263] Bluetooth: hci2: command 0x041b tx timeout [ 259.912936][T11082] Cannot create hsr debugfs directory [ 260.558877][T11250] netpci0: tun_chr_ioctl cmd 1074025694 [ 260.888322][T11266] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3062'. [ 260.922071][T11266] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3062'. [ 260.931356][T11265] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3062'. [ 260.984936][T11267] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3062'. [ 261.016970][T11269] bridge0: port 3(veth0_to_bond) entered blocking state [ 261.026731][T11269] bridge0: port 3(veth0_to_bond) entered disabled state [ 261.051479][T11269] device veth0_to_bond entered promiscuous mode [ 261.072644][T11269] bridge0: port 3(veth0_to_bond) entered blocking state [ 261.080433][T11269] bridge0: port 3(veth0_to_bond) entered forwarding state [ 261.121764][T11082] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.154301][T11082] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.208512][T11082] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.249518][T11082] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.914826][ T4263] Bluetooth: hci2: command 0x040f tx timeout [ 262.066071][T11296] netlink: 'syz.0.3076': attribute type 5 has an invalid length. [ 262.302976][T11082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.350472][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.373551][T11312] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3090'. [ 262.405412][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.463543][T11082] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.472825][T11312] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3090'. [ 262.498202][T11310] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3090'. [ 262.511719][T11315] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3090'. [ 262.671134][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.715131][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.755158][ T8443] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.762331][ T8443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.791773][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.807140][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.818177][ T8443] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.825361][ T8443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.842098][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.851499][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.867730][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.895353][T11319] netlink: 'syz.3.3081': attribute type 10 has an invalid length. [ 263.298170][T11319] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 263.313289][T11322] netlink: 'syz.1.3083': attribute type 9 has an invalid length. [ 263.328152][T11322] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.3083'. [ 263.349497][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.376046][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.453162][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.472860][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.509534][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.543991][ T8449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.581416][ T8449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.624606][ T8449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.643988][ T8449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.678538][T11082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.982178][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 264.108661][T11356] netlink: 4019 bytes leftover after parsing attributes in process `syz.4.3091'. [ 264.137531][T11359] netlink: 'syz.0.3092': attribute type 13 has an invalid length. [ 264.182709][T11359] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.3092'. [ 264.224817][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.243654][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.265487][T11082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.348118][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.363208][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.419151][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.483915][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.495736][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.503726][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.525984][T11082] device veth0_vlan entered promiscuous mode [ 264.560997][T11082] device veth1_vlan entered promiscuous mode [ 264.600613][T11082] device veth0_macvtap entered promiscuous mode [ 264.627016][T11082] device veth1_macvtap entered promiscuous mode [ 264.652716][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 264.675996][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 264.701447][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.732407][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.802358][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.829636][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.868723][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.915366][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.982027][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.023169][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.052035][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.083174][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.102004][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.122291][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.146528][T11082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.250761][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.271810][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.302435][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.324550][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.348944][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.376011][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.446620][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.507707][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.558621][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.616624][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.671737][T11082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.714084][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.740539][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.783167][T11082] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.825774][T11082] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.891491][T11082] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.937092][T11082] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.266280][ T8461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.331837][ T8461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.355041][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 266.369286][ T5658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.379446][ T5658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.408687][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 267.205619][T11466] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.3128'. [ 268.278952][T11518] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.3152'. [ 268.418720][T11521] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3165'. [ 268.474136][T11525] tap0: tun_chr_ioctl cmd 2147767519 [ 268.854485][T11542] netlink: 'syz.4.3166': attribute type 4 has an invalid length. [ 269.331538][T11568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3176'. [ 269.350694][T11568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3176'. [ 269.401222][T11563] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3176'. [ 269.421585][T11569] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3176'. [ 269.505417][T11573] tap0: tun_chr_ioctl cmd 1074812118 [ 270.029438][T11601] netlink: 'syz.4.3194': attribute type 29 has an invalid length. [ 270.038477][T11601] netlink: 'syz.4.3194': attribute type 29 has an invalid length. [ 270.058904][T11601] netlink: 'syz.4.3194': attribute type 29 has an invalid length. [ 270.108617][T11601] netlink: 'syz.4.3194': attribute type 29 has an invalid length. [ 270.137449][T11603] netlink: 'syz.0.3193': attribute type 29 has an invalid length. [ 270.153251][T11603] netlink: 'syz.0.3193': attribute type 29 has an invalid length. [ 270.566020][T11629] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3206'. [ 270.608239][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3206'. [ 270.648129][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3206'. [ 270.725141][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3206'. [ 272.806503][T11725] netlink: 'syz.1.3247': attribute type 39 has an invalid length. [ 274.450622][T11770] syzkaller0: tun_chr_ioctl cmd 35108 [ 274.602375][T11774] tap0: tun_chr_ioctl cmd 1074025677 [ 274.612136][T11774] tap0: linktype set to 769 [ 274.824782][T11784] netlink: 'syz.4.3277': attribute type 27 has an invalid length. [ 274.855529][T11784] __nla_validate_parse: 5 callbacks suppressed [ 274.855544][T11784] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.3277'. [ 274.963003][T11792] netlink: 'syz.2.3282': attribute type 10 has an invalid length. [ 275.017100][T11792] netlink: 3867 bytes leftover after parsing attributes in process `syz.2.3282'. [ 275.157447][T11802] tap0: tun_chr_ioctl cmd 1074025677 [ 275.173357][T11802] tap0: linktype set to 0 [ 275.319896][T11806] netlink: 'syz.4.3288': attribute type 25 has an invalid length. [ 275.347570][T11806] netlink: 'syz.4.3288': attribute type 7 has an invalid length. [ 275.533442][T11816] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3292'. [ 275.542881][T11819] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3293'. [ 275.571994][T11819] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3293'. [ 275.588522][T11815] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3293'. [ 275.601032][T11822] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3293'. [ 275.625567][T11821] netpci0: tun_chr_ioctl cmd 1074025676 [ 275.631164][T11821] netpci0: owner set to 0 [ 275.689097][T11824] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3296'. [ 275.956036][T11837] Â: renamed from pim6reg1 [ 278.009230][T11921] netlink: 'syz.3.3342': attribute type 10 has an invalid length. [ 278.018432][T11921] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3342'. [ 278.625101][T11947] netlink: 35347 bytes leftover after parsing attributes in process `syz.3.3354'. [ 278.784483][T11956] netlink: 'syz.2.3358': attribute type 49 has an invalid length. [ 278.906433][T11963] netlink: 'syz.4.3362': attribute type 27 has an invalid length. [ 280.459672][T12033] __nla_validate_parse: 5 callbacks suppressed [ 280.459690][T12033] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.3394'. [ 281.124040][T12055] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3402'. [ 281.331698][T12055] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.461375][T12055] netlink: 'syz.0.3402': attribute type 3 has an invalid length. [ 281.486558][T12055] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3402'. [ 281.590950][ T4253] cgroup: fork rejected by pids controller in /syz4 [ 282.723963][ T8449] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.952357][ T8449] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.041556][ T8449] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.052943][ T4260] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.066455][ T4260] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.074211][ T4260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.083997][ T4260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.092205][ T4260] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 283.099506][ T4260] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.176236][ T8449] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.427260][T12110] chnl_net:caif_netlink_parms(): no params data found [ 284.399594][T12110] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.408146][T12110] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.416476][T12110] device bridge_slave_0 entered promiscuous mode [ 284.457196][T12110] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.490818][T12110] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.518708][T12110] device bridge_slave_1 entered promiscuous mode [ 284.576845][T12163] delete_channel: no stack [ 284.902461][T12110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.933364][T12110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.142964][T12110] team0: Port device team_slave_0 added [ 285.151481][T12110] team0: Port device team_slave_1 added [ 285.182757][ T4260] Bluetooth: hci3: command 0x0409 tx timeout [ 285.206400][T12184] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3453'. [ 285.462914][T12110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.469893][T12110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.546590][T12110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.593370][T12110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.600351][T12110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.677942][T12110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.875457][T12110] device hsr_slave_0 entered promiscuous mode [ 285.896176][T12110] device hsr_slave_1 entered promiscuous mode [ 285.912018][T12110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.919707][T12110] Cannot create hsr debugfs directory [ 286.547130][T12221] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3464'. [ 286.610171][ T8449] device hsr_slave_0 left promiscuous mode [ 286.617489][ T8449] device hsr_slave_1 left promiscuous mode [ 286.825145][ T8449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.834344][ T8449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.853376][ T8449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.875913][ T8449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.012949][ T8449] device veth0_to_bond left promiscuous mode [ 287.032129][ T8449] bridge0: port 3(veth0_to_bond) entered disabled state [ 287.187800][ T8449] device bridge_slave_1 left promiscuous mode [ 287.196395][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.272065][ T4260] Bluetooth: hci3: command 0x041b tx timeout [ 287.279423][ T8449] device bridge_slave_0 left promiscuous mode [ 287.288053][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.489855][ T8449] device veth1_macvtap left promiscuous mode [ 287.496650][ T8449] device veth0_macvtap left promiscuous mode [ 287.504244][ T8449] device veth1_vlan left promiscuous mode [ 287.510168][ T8449] device veth0_vlan left promiscuous mode [ 287.888823][ T8449] team0 (unregistering): Port device team_slave_1 removed [ 287.943715][ T8449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.975586][ T8449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.277618][ T8449] bond0 (unregistering): Released all slaves [ 288.353166][T12221] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3464'. [ 289.288105][T12110] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.309197][T12110] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.342113][ T4260] Bluetooth: hci3: command 0x040f tx timeout [ 289.413390][T12110] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.484261][T12110] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 289.583490][T12290] delete_channel: no stack [ 289.782334][T12110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.797635][T12299] netlink: 'syz.3.3491': attribute type 21 has an invalid length. [ 289.815188][T12299] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.3491'. [ 289.872391][T12110] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.895213][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.916096][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.968518][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.993287][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.042887][ T8452] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.050086][ T8452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.112988][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.136212][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.165176][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.181164][ T8452] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.188343][ T8452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.218909][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.238110][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.284608][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.316905][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.353763][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.368589][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.378533][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 290.391704][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.393116][T12312] netlink: 'syz.3.3496': attribute type 29 has an invalid length. [ 290.427738][T12110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.443599][T12110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 290.453640][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 290.470280][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.490487][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.512037][T12312] netlink: 'syz.3.3496': attribute type 29 has an invalid length. [ 290.657791][T12327] netlink: 'syz.1.3499': attribute type 13 has an invalid length. [ 290.686289][T12327] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.3499'. [ 290.822533][T12329] delete_channel: no stack [ 291.079707][T12110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.116923][ T8449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.129778][ T8449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 291.167967][T12347] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.3505'. [ 291.422171][ T4260] Bluetooth: hci3: command 0x0419 tx timeout [ 292.423485][ T8463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 292.447214][ T8463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.547923][ T8463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.576495][ T8463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.646225][T12110] device veth0_vlan entered promiscuous mode [ 292.679634][ T8463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 292.698744][ T8463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 292.747439][T12110] device veth1_vlan entered promiscuous mode [ 292.879077][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 292.902990][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 292.948407][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 292.998319][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.020955][T12110] device veth0_macvtap entered promiscuous mode [ 293.081790][T12110] device veth1_macvtap entered promiscuous mode [ 293.127216][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.207039][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.242039][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.270031][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.332014][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.373565][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.422045][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.462046][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.493958][T12110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.502487][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 293.537192][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.562936][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.571826][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.600567][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.631183][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.658496][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.701938][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.711790][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.783626][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.809648][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.836566][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.849356][T12110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.879331][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 293.906587][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.983471][T12110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.007078][T12110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.052007][T12110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.067023][T12110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.098925][T12426] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3528'. [ 294.358965][ T8463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.386922][ T8463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.474748][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 295.032506][ T8452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.040546][ T8452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.068250][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 298.659114][T12553] tap0: tun_chr_ioctl cmd 1074025677 [ 298.687681][T12553] tap0: linktype set to 778 [ 299.877385][T12592] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3574'. [ 299.899544][T12592] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3574'. [ 299.930211][T12593] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3574'. [ 299.954930][T12588] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3574'. [ 300.986498][T12616] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3583'. [ 301.021161][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3583'. [ 301.531294][T12640] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3592'. [ 301.573209][T12640] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3592'. [ 301.634663][T12634] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3592'. [ 301.671538][T12644] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3592'. [ 303.289806][T12689] netlink: 'syz.0.3628': attribute type 21 has an invalid length. [ 303.522128][T12701] netlink: 'syz.0.3620': attribute type 33 has an invalid length. [ 303.562019][T12701] netlink: 'syz.0.3620': attribute type 10 has an invalid length. [ 303.582496][T12701] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 304.122382][T12719] tap0: tun_chr_ioctl cmd 2147767520 [ 304.143757][T12722] netlink: 'syz.3.3631': attribute type 1 has an invalid length. [ 304.383718][T12731] tun0: tun_chr_ioctl cmd 1074025677 [ 304.402118][T12731] tun0: linktype set to 776 [ 304.425555][T12734] netlink: 'syz.1.3637': attribute type 49 has an invalid length. [ 304.452358][T12734] netlink: 'syz.1.3637': attribute type 49 has an invalid length. [ 306.580643][T12782] netlink: 'syz.4.3660': attribute type 13 has an invalid length. [ 306.614542][T12782] __nla_validate_parse: 4 callbacks suppressed [ 306.614559][T12782] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.3660'. [ 306.866033][T12790] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3663'. [ 306.888750][T12790] netlink: 'syz.3.3663': attribute type 1 has an invalid length. [ 306.901965][T12790] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3663'. [ 307.212430][T12804] netlink: 'syz.2.3670': attribute type 12 has an invalid length. [ 307.249471][T12804] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.3670'. [ 307.559360][T12810] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.3671'. [ 308.181469][T12827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3682'. [ 308.196585][T12827] netlink: 'syz.2.3682': attribute type 1 has an invalid length. [ 308.206110][T12827] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3682'. [ 309.030210][T12858] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3697'. [ 309.110945][T12858] netlink: 'syz.1.3697': attribute type 1 has an invalid length. [ 309.157595][T12858] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3697'. [ 309.875359][T12880] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3708'. [ 311.053274][T12908] netlink: 'syz.2.3720': attribute type 29 has an invalid length. [ 311.061417][T12908] netlink: 'syz.2.3720': attribute type 29 has an invalid length. [ 312.969358][T12958] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 314.088188][T12981] __nla_validate_parse: 2 callbacks suppressed [ 314.088206][T12981] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3758'. [ 314.155854][T12983] netlink: 'syz.2.3759': attribute type 29 has an invalid length. [ 314.203584][T12983] netlink: 'syz.2.3759': attribute type 29 has an invalid length. [ 314.253158][T12988] netlink: 'syz.2.3759': attribute type 29 has an invalid length. [ 314.280969][T12983] netlink: 'syz.2.3759': attribute type 29 has an invalid length. [ 314.867234][T13005] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 315.870869][T13020] netlink: 'syz.3.3774': attribute type 29 has an invalid length. [ 315.884127][T13020] netlink: 'syz.3.3774': attribute type 29 has an invalid length. [ 316.945151][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.951493][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.736419][T13080] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3810'. [ 318.755576][T13106] netlink: 'syz.2.3821': attribute type 2 has an invalid length. [ 318.787916][T13106] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.3821'. [ 318.926541][T13112] netlink: 'syz.1.3815': attribute type 16 has an invalid length. [ 318.961974][T13112] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3815'. [ 326.140819][T13283] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3890'. [ 329.262000][ T4263] Bluetooth: hci0: command 0x0406 tx timeout [ 329.624310][T13365] netlink: 'syz.0.3930': attribute type 4 has an invalid length. [ 329.839129][T13374] netlink: 'syz.2.3932': attribute type 4 has an invalid length. [ 330.546439][T13396] ================================================================== [ 330.554545][T13396] BUG: KASAN: use-after-free in cpu_map_enqueue+0xb6/0x370 [ 330.561765][T13396] Read of size 8 at addr ffff88813fe60608 by task syz.3.3933/13396 [ 330.569666][T13396] [ 330.572016][T13396] CPU: 1 PID: 13396 Comm: syz.3.3933 Tainted: G W 6.1.121-syzkaller #0 [ 330.581725][T13396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 330.591812][T13396] Call Trace: [ 330.595100][T13396] [ 330.598038][T13396] dump_stack_lvl+0x1e3/0x2cb [ 330.602740][T13396] ? nf_tcp_handle_invalid+0x642/0x642 [ 330.608218][T13396] ? panic+0x764/0x764 [ 330.612300][T13396] ? _printk+0xd1/0x111 [ 330.616466][T13396] ? __virt_addr_valid+0x17f/0x530 [ 330.621596][T13396] ? __virt_addr_valid+0x17f/0x530 [ 330.626738][T13396] print_report+0x15f/0x4f0 [ 330.631253][T13396] ? __virt_addr_valid+0x17f/0x530 [ 330.636379][T13396] ? __virt_addr_valid+0x17f/0x530 [ 330.641506][T13396] ? __virt_addr_valid+0x45b/0x530 [ 330.646633][T13396] ? __phys_addr+0xb6/0x170 [ 330.651153][T13396] ? cpu_map_enqueue+0xb6/0x370 [ 330.656016][T13396] kasan_report+0x136/0x160 [ 330.660533][T13396] ? cpu_map_enqueue+0xb6/0x370 [ 330.665404][T13396] cpu_map_enqueue+0xb6/0x370 [ 330.670097][T13396] xdp_do_redirect_frame+0x2f0/0x660 [ 330.675400][T13396] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 330.680787][T13396] ? __mutex_unlock_slowpath+0x218/0x750 [ 330.686441][T13396] ? 0xffffffffa0003b40 [ 330.690614][T13396] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 330.696172][T13396] ? xdp_convert_md_to_buff+0x330/0x330 [ 330.701724][T13396] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 330.707635][T13396] ? 0xffffffffa0003b40 [ 330.711817][T13396] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 330.718083][T13396] ? __might_fault+0xbd/0x110 [ 330.722779][T13396] ? _copy_from_user+0x109/0x170 [ 330.727737][T13396] ? bpf_test_init+0x15a/0x180 [ 330.732509][T13396] ? xdp_convert_md_to_buff+0x5b/0x330 [ 330.737978][T13396] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 330.743370][T13396] ? dev_put+0x80/0x80 [ 330.747455][T13396] ? dev_put+0x80/0x80 [ 330.751531][T13396] bpf_prog_test_run+0x32f/0x3a0 [ 330.756500][T13396] __sys_bpf+0x3eb/0x6c0 [ 330.760762][T13396] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 330.766160][T13396] ? print_irqtrace_events+0x210/0x210 [ 330.771633][T13396] ? print_irqtrace_events+0x210/0x210 [ 330.777112][T13396] ? syscall_enter_from_user_mode+0x2e/0x230 [ 330.783111][T13396] ? syscall_enter_from_user_mode+0x2e/0x230 [ 330.789102][T13396] ? lockdep_hardirqs_on+0x94/0x130 [ 330.794311][T13396] __x64_sys_bpf+0x78/0x90 [ 330.798750][T13396] do_syscall_64+0x3b/0xb0 [ 330.803182][T13396] ? clear_bhb_loop+0x45/0xa0 [ 330.807869][T13396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.813787][T13396] RIP: 0033:0x7f336db85d29 [ 330.818210][T13396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.837832][T13396] RSP: 002b:00007f336e9a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 330.846348][T13396] RAX: ffffffffffffffda RBX: 00007f336dd75fa0 RCX: 00007f336db85d29 [ 330.854333][T13396] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 330.862314][T13396] RBP: 00007f336dc01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 330.870295][T13396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.878276][T13396] R13: 0000000000000000 R14: 00007f336dd75fa0 R15: 00007ffdf05665c8 [ 330.886264][T13396] [ 330.889291][T13396] [ 330.891616][T13396] Allocated by task 13187: [ 330.896030][T13396] kasan_set_track+0x4b/0x70 [ 330.900637][T13396] __kasan_kmalloc+0x97/0xb0 [ 330.905236][T13396] __kmalloc_node+0xb3/0x230 [ 330.909835][T13396] bpf_map_kmalloc_node+0xce/0x1c0 [ 330.914960][T13396] cpu_map_update_elem+0x277/0xf60 [ 330.920077][T13396] map_update_elem+0x503/0x680 [ 330.924835][T13396] __sys_bpf+0x337/0x6c0 [ 330.929080][T13396] __x64_sys_bpf+0x78/0x90 [ 330.933479][T13396] do_syscall_64+0x3b/0xb0 [ 330.937881][T13396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.943767][T13396] [ 330.946172][T13396] Freed by task 13188: [ 330.950227][T13396] kasan_set_track+0x4b/0x70 [ 330.954821][T13396] kasan_save_free_info+0x27/0x40 [ 330.959847][T13396] ____kasan_slab_free+0xd6/0x120 [ 330.964860][T13396] __kmem_cache_free+0x25c/0x3c0 [ 330.969797][T13396] put_cpu_map_entry+0x6eb/0x760 [ 330.974724][T13396] cpu_map_kthread_run+0x2887/0x2940 [ 330.979989][T13396] kthread+0x28d/0x320 [ 330.984045][T13396] ret_from_fork+0x1f/0x30 [ 330.988463][T13396] [ 330.990768][T13396] Last potentially related work creation: [ 330.996475][T13396] kasan_save_stack+0x3b/0x60 [ 331.001138][T13396] __kasan_record_aux_stack+0xb0/0xc0 [ 331.006503][T13396] insert_work+0x54/0x3d0 [ 331.010834][T13396] __queue_work+0xb4b/0xf90 [ 331.015319][T13396] queue_work_on+0x14b/0x250 [ 331.019888][T13396] cpu_map_free+0xd7/0x1b0 [ 331.024292][T13396] process_one_work+0x8a9/0x11d0 [ 331.029231][T13396] worker_thread+0xa47/0x1200 [ 331.033892][T13396] kthread+0x28d/0x320 [ 331.037937][T13396] ret_from_fork+0x1f/0x30 [ 331.042354][T13396] [ 331.044673][T13396] Second to last potentially related work creation: [ 331.051262][T13396] kasan_save_stack+0x3b/0x60 [ 331.055939][T13396] __kasan_record_aux_stack+0xb0/0xc0 [ 331.061288][T13396] call_rcu+0x163/0xa10 [ 331.065433][T13396] __cpu_map_entry_replace+0x74/0x170 [ 331.070802][T13396] cpu_map_free+0xd7/0x1b0 [ 331.075209][T13396] process_one_work+0x8a9/0x11d0 [ 331.080123][T13396] worker_thread+0xa47/0x1200 [ 331.084787][T13396] kthread+0x28d/0x320 [ 331.088860][T13396] ret_from_fork+0x1f/0x30 [ 331.093257][T13396] [ 331.095555][T13396] The buggy address belongs to the object at ffff88813fe60600 [ 331.095555][T13396] which belongs to the cache kmalloc-cg-256 of size 256 [ 331.109843][T13396] The buggy address is located 8 bytes inside of [ 331.109843][T13396] 256-byte region [ffff88813fe60600, ffff88813fe60700) [ 331.122929][T13396] [ 331.125253][T13396] The buggy address belongs to the physical page: [ 331.131668][T13396] page:ffffea0004ff9800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13fe60 [ 331.141891][T13396] head:ffffea0004ff9800 order:1 compound_mapcount:0 compound_pincount:0 [ 331.150206][T13396] memcg:ffff888030ea5301 [ 331.154421][T13396] flags: 0x17ff00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 331.162495][T13396] raw: 017ff00000010200 ffffea0000c00700 dead000000000006 ffff888017c42c80 [ 331.171072][T13396] raw: 0000000000000000 0000000000100010 00000001ffffffff ffff888030ea5301 [ 331.179717][T13396] page dumped because: kasan: bad access detected [ 331.186143][T13396] page_owner tracks the page as allocated [ 331.191851][T13396] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 1, tgid 1 (swapper/0), ts 2031756662, free_ts 0 [ 331.204872][T13396] register_early_stack+0x86/0xe0 [ 331.209906][T13396] init_page_owner+0x3a/0x7db [ 331.214563][T13396] page_ext_init+0x732/0x78d [ 331.219136][T13396] kernel_init_freeable+0x450/0x60f [ 331.224327][T13396] page_owner free stack trace missing [ 331.229685][T13396] [ 331.231993][T13396] Memory state around the buggy address: [ 331.237600][T13396] ffff88813fe60500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 331.245651][T13396] ffff88813fe60580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 331.253709][T13396] >ffff88813fe60600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 331.261743][T13396] ^ [ 331.266054][T13396] ffff88813fe60680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 331.274105][T13396] ffff88813fe60700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 331.282155][T13396] ================================================================== [ 331.290365][T13396] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 331.297566][T13396] CPU: 1 PID: 13396 Comm: syz.3.3933 Tainted: G W 6.1.121-syzkaller #0 [ 331.307200][T13396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 331.317252][T13396] Call Trace: [ 331.320513][T13396] [ 331.323437][T13396] dump_stack_lvl+0x1e3/0x2cb [ 331.328131][T13396] ? nf_tcp_handle_invalid+0x642/0x642 [ 331.333597][T13396] ? panic+0x764/0x764 [ 331.337649][T13396] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 331.343804][T13396] ? vscnprintf+0x59/0x80 [ 331.348135][T13396] panic+0x318/0x764 [ 331.352012][T13396] ? check_panic_on_warn+0x1d/0xa0 [ 331.357112][T13396] ? memcpy_page_flushcache+0xfc/0xfc [ 331.362476][T13396] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 331.368377][T13396] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 331.374265][T13396] ? _raw_spin_unlock+0x40/0x40 [ 331.379101][T13396] ? print_report+0x4a3/0x4f0 [ 331.383776][T13396] check_panic_on_warn+0x7e/0xa0 [ 331.388717][T13396] ? cpu_map_enqueue+0xb6/0x370 [ 331.393553][T13396] end_report+0x66/0x110 [ 331.397778][T13396] kasan_report+0x143/0x160 [ 331.402275][T13396] ? cpu_map_enqueue+0xb6/0x370 [ 331.407138][T13396] cpu_map_enqueue+0xb6/0x370 [ 331.411843][T13396] xdp_do_redirect_frame+0x2f0/0x660 [ 331.417122][T13396] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 331.422492][T13396] ? __mutex_unlock_slowpath+0x218/0x750 [ 331.428133][T13396] ? 0xffffffffa0003b40 [ 331.432268][T13396] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 331.437800][T13396] ? xdp_convert_md_to_buff+0x330/0x330 [ 331.443336][T13396] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 331.449229][T13396] ? 0xffffffffa0003b40 [ 331.453373][T13396] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 331.459599][T13396] ? __might_fault+0xbd/0x110 [ 331.464272][T13396] ? _copy_from_user+0x109/0x170 [ 331.469216][T13396] ? bpf_test_init+0x15a/0x180 [ 331.473963][T13396] ? xdp_convert_md_to_buff+0x5b/0x330 [ 331.479403][T13396] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 331.484784][T13396] ? dev_put+0x80/0x80 [ 331.488866][T13396] ? dev_put+0x80/0x80 [ 331.492929][T13396] bpf_prog_test_run+0x32f/0x3a0 [ 331.497883][T13396] __sys_bpf+0x3eb/0x6c0 [ 331.502127][T13396] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 331.507519][T13396] ? print_irqtrace_events+0x210/0x210 [ 331.513002][T13396] ? print_irqtrace_events+0x210/0x210 [ 331.518468][T13396] ? syscall_enter_from_user_mode+0x2e/0x230 [ 331.524433][T13396] ? syscall_enter_from_user_mode+0x2e/0x230 [ 331.530432][T13396] ? lockdep_hardirqs_on+0x94/0x130 [ 331.535623][T13396] __x64_sys_bpf+0x78/0x90 [ 331.540030][T13396] do_syscall_64+0x3b/0xb0 [ 331.544441][T13396] ? clear_bhb_loop+0x45/0xa0 [ 331.549103][T13396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.554995][T13396] RIP: 0033:0x7f336db85d29 [ 331.559415][T13396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.579013][T13396] RSP: 002b:00007f336e9a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 331.587414][T13396] RAX: ffffffffffffffda RBX: 00007f336dd75fa0 RCX: 00007f336db85d29 [ 331.595370][T13396] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 331.603335][T13396] RBP: 00007f336dc01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 331.611391][T13396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.619353][T13396] R13: 0000000000000000 R14: 00007f336dd75fa0 R15: 00007ffdf05665c8 [ 331.627318][T13396] [ 331.630626][T13396] Kernel Offset: disabled [ 331.634944][T13396] Rebooting in 86400 seconds..