last executing test programs: 6.689765094s ago: executing program 4 (id=16074): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) socket$unix(0x1, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r7, @ANYRES64=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) 5.623760773s ago: executing program 4 (id=16096): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0x7ffffffe) 5.290199361s ago: executing program 4 (id=16101): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 5.133232682s ago: executing program 4 (id=16106): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 4.853642074s ago: executing program 4 (id=16112): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0x7ffffffe) 4.482632439s ago: executing program 1 (id=16122): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 4.328971866s ago: executing program 1 (id=16125): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 4.328244266s ago: executing program 0 (id=16126): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r0}, 0x10) 4.218219871s ago: executing program 1 (id=16128): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 4.187359444s ago: executing program 0 (id=16131): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000a00)="d32d1ff9", 0x4}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x2b}}}}], 0x20}, 0x0) 4.078036334s ago: executing program 0 (id=16132): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f000000a1c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xe0, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x81) 3.614184142s ago: executing program 0 (id=16135): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) 3.19666413s ago: executing program 0 (id=16137): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000100), 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000400)=[{{0x2, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) 2.198200891s ago: executing program 2 (id=16152): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x2, 0x41}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) mount$overlay(0x0, 0x0, 0x0, 0x440, 0x0) unshare(0x2040400) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) 2.197983898s ago: executing program 3 (id=16153): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)={0x2, {{0xa, 0x4e20, 0x7, @mcast2, 0x2}}, 0x1, 0x2, [{{0xa, 0x4e20, 0x8001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3dde7417}}, {{0xa, 0x4e22, 0x5, @private0, 0x60}}]}, 0x190) 2.123998051s ago: executing program 2 (id=16154): openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb00", 0x1f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xffffffffffffff7e) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.11960329s ago: executing program 3 (id=16155): openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.946014373s ago: executing program 3 (id=16156): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f00000001c0)=""/214) syz_clone(0xac201300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000390400"/18, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r4, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x8c1, 0x0, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000006c0)=""/209, 0x0, 0xd1, 0x1, 0x3}, 0x28) userfaultfd(0x801) 1.940516045s ago: executing program 2 (id=16157): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) 1.778761124s ago: executing program 2 (id=16158): syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbb"], 0x0) syz_clone(0x8821000, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000155000/0x2000)=nil, 0x2000, 0x64) 918.147626ms ago: executing program 1 (id=16159): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000840)="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", 0x2000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) 914.944156ms ago: executing program 2 (id=16160): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r3, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000fc0)="b9ff03316844268cb89e14f008004ce000300000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 823.530417ms ago: executing program 3 (id=16161): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002b00)={&(0x7f0000002940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x4, 0x0, 0x0, 0x13, 0x1, 0x8}]}, {0x0, [0x2e, 0x61, 0x2e, 0x5f]}}, 0x0, 0x2a, 0x0, 0x9, 0x3ff}, 0x28) 789.730476ms ago: executing program 4 (id=16162): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff}, 0x80800) vmsplice(r0, &(0x7f00000018c0)=[{0x0}], 0x1, 0x5) 606.220717ms ago: executing program 3 (id=16163): semtimedop(0x0, &(0x7f00000003c0)=[{0x1, 0x4, 0x800}], 0x1, 0x0) semop(0x0, &(0x7f0000000040)=[{0x2, 0x0, 0x1800}], 0x1) socket$vsock_stream(0x28, 0x1, 0x0) 571.763239ms ago: executing program 0 (id=16164): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000180)}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 508.175222ms ago: executing program 3 (id=16165): r0 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x800}, &(0x7f00000000c0), &(0x7f0000000200)) io_uring_enter(r0, 0x0, 0xe38e, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000000480)=[0x0, 0x2, 0x9, 0x100]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) 87.707245ms ago: executing program 1 (id=16166): unshare(0x28040680) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0xb74f16395f7f68f2, './file1\x00'}, 0x6e) 415.132µs ago: executing program 1 (id=16167): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x9, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 0s ago: executing program 2 (id=16168): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r3, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x80, 0xfe, 0x2, 0x9, 0x40, 0x8, 0x5a, 0x0, 0x9, 0xa}, 0xe) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) kernel console output (not intermixed with test programs): =0 ip=0x7f6b1ab8f6c9 code=0x7ffc0000 [ 1205.005575][ T30] audit: type=1326 audit(28542.820:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.4.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ab8f6c9 code=0x7ffc0000 [ 1205.029691][ T30] audit: type=1326 audit(28542.820:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.4.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ab8f6c9 code=0x7ffc0000 [ 1205.064764][ T30] audit: type=1326 audit(28542.820:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.4.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6b1ab8f6c9 code=0x7ffc0000 [ 1205.146115][ T30] audit: type=1326 audit(28542.820:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.4.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ab8f6c9 code=0x7ffc0000 [ 1205.210688][ T30] audit: type=1326 audit(28542.820:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.4.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ab8f6c9 code=0x7ffc0000 [ 1205.296073][ T30] audit: type=1326 audit(28542.820:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.4.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f6b1ab8f6c9 code=0x7ffc0000 [ 1205.350203][ T30] audit: type=1326 audit(28542.820:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31402 comm="syz.4.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1ab8f6c9 code=0x7ffc0000 [ 1213.505068][T31663] netlink: 'syz.2.11071': attribute type 1 has an invalid length. [ 1214.014393][T31663] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1219.202847][T31755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11116'. [ 1219.242277][T31755] bridge: RTM_NEWNEIGH with invalid ether address [ 1221.242672][T31838] netlink: 'syz.4.11135': attribute type 298 has an invalid length. [ 1223.172739][T31889] netlink: 'syz.3.11179': attribute type 298 has an invalid length. [ 1223.930258][T31900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11182'. [ 1224.920274][T31914] fuse: Bad value for 'fd' [ 1226.278739][T31952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11209'. [ 1228.571865][T32052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11258'. [ 1229.080076][T32078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11270'. [ 1231.856030][ T30] audit: type=1326 audit(28569.750:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32145 comm="syz.1.11300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fd198f6c9 code=0x0 [ 1232.084308][T32151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.091861][T32151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.332354][T32151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1232.345692][T32151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1232.516213][T24042] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.529599][T24042] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.561584][T24042] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.610000][T24042] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.102729][T32195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1233.227514][T32198] netlink: 'syz.1.11319': attribute type 298 has an invalid length. [ 1233.275716][ T30] audit: type=1326 audit(28571.170:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32203 comm="syz.2.11324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd68b98f6c9 code=0x0 [ 1233.472146][T32209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.479811][T32209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.637653][T32209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1233.666648][T32209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1233.817035][ T3493] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.833014][ T3493] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.927210][ T3493] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.947408][ T3493] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.512310][T32267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=32267 comm=syz.0.11352 [ 1235.887805][T32287] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32287 comm=syz.0.11360 [ 1238.236943][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.243428][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.097559][T32342] netlink: 'syz.0.11385': attribute type 298 has an invalid length. [ 1245.946180][T32446] netlink: 'syz.1.11428': attribute type 4 has an invalid length. [ 1245.954091][T32446] netlink: 17 bytes leftover after parsing attributes in process `syz.1.11428'. [ 1246.110130][ T30] audit: type=1326 audit(28583.790:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32438 comm="syz.3.11429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b058f6c9 code=0x7ffc0000 [ 1247.107423][ T30] audit: type=1326 audit(28583.790:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32438 comm="syz.3.11429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b058f6c9 code=0x7ffc0000 [ 1247.131370][ T30] audit: type=1326 audit(28583.790:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32438 comm="syz.3.11429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00b058f6c9 code=0x7ffc0000 [ 1247.800123][ T30] audit: type=1326 audit(28583.790:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32438 comm="syz.3.11429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b058f6c9 code=0x7ffc0000 [ 1247.836064][ T30] audit: type=1326 audit(28583.790:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32438 comm="syz.3.11429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b058f6c9 code=0x7ffc0000 [ 1247.871076][ T30] audit: type=1326 audit(28583.790:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32438 comm="syz.3.11429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f00b058f6c9 code=0x7ffc0000 [ 1247.960573][ T30] audit: type=1326 audit(28583.800:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32438 comm="syz.3.11429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b058f6c9 code=0x7ffc0000 [ 1247.999107][ T30] audit: type=1326 audit(28583.800:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32438 comm="syz.3.11429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b058f6c9 code=0x7ffc0000 [ 1248.024270][ T30] audit: type=1326 audit(28583.800:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32438 comm="syz.3.11429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f00b058f6c9 code=0x7ffc0000 [ 1248.105203][ T30] audit: type=1326 audit(28583.800:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32438 comm="syz.3.11429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b058f6c9 code=0x7ffc0000 [ 1250.463901][T32521] netlink: 'syz.1.11457': attribute type 298 has an invalid length. [ 1251.618932][T32541] netlink: 'syz.2.11465': attribute type 298 has an invalid length. [ 1253.630111][T32594] netlink: 'syz.0.11487': attribute type 298 has an invalid length. [ 1254.467598][T32596] netlink: 'syz.2.11490': attribute type 298 has an invalid length. [ 1255.206381][T32616] netlink: 'syz.3.11496': attribute type 298 has an invalid length. [ 1259.448998][T32713] netlink: 'syz.1.11531': attribute type 4 has an invalid length. [ 1259.456911][T32713] netlink: 17 bytes leftover after parsing attributes in process `syz.1.11531'. [ 1262.029551][T32767] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32767 comm=syz.0.11558 [ 1262.242872][ T305] fuse: Unknown parameter 'group_i00000000000000000000' [ 1263.046355][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.053897][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.827130][ T318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1263.881441][ T318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1263.911413][ T327] fuse: Unknown parameter 'group_i00000000000000000000' [ 1264.427257][T24041] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.439961][ T332] netlink: 'syz.3.11575': attribute type 298 has an invalid length. [ 1264.448866][T24041] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.476345][T24041] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.492956][T24041] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.632923][ T341] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=341 comm=syz.4.11571 [ 1264.646792][ T338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11577'. [ 1264.671614][ T338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11577'. [ 1264.888782][ T347] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11582'. [ 1264.907444][ T347] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11582'. [ 1265.938461][ T383] netlink: 'syz.2.11594': attribute type 298 has an invalid length. [ 1267.360409][ T403] fuse: Unknown parameter 'group_id00000000000000000000' [ 1267.532814][ T410] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11606'. [ 1267.546114][ T410] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11606'. [ 1268.169763][ T427] netlink: 'syz.0.11613': attribute type 298 has an invalid length. [ 1268.759821][ T438] fuse: Bad value for 'user_id' [ 1268.764736][ T438] fuse: Bad value for 'user_id' [ 1271.360621][ T463] fuse: Bad value for 'user_id' [ 1271.365910][ T463] fuse: Bad value for 'user_id' [ 1271.742985][ T476] netlink: 'syz.1.11631': attribute type 298 has an invalid length. [ 1272.723658][ T492] fuse: Bad value for 'user_id' [ 1272.728541][ T492] fuse: Bad value for 'user_id' [ 1274.024094][ T515] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11650'. [ 1274.937649][ T531] netlink: 'syz.3.11653': attribute type 298 has an invalid length. [ 1276.986995][ T568] netlink: 'syz.3.11671': attribute type 298 has an invalid length. [ 1280.002849][ T602] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=602 comm=syz.1.11684 [ 1281.101234][ T627] netlink: 'syz.4.11695': attribute type 1 has an invalid length. [ 1281.159556][ T627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1281.251381][ T630] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1284.150868][ T668] netlink: 'syz.3.11708': attribute type 1 has an invalid length. [ 1284.209258][ T668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1284.823766][ T679] netlink: 'syz.3.11713': attribute type 298 has an invalid length. [ 1286.563572][ T700] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11722'. [ 1286.606297][ T700] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11722'. [ 1286.840193][ T706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11726'. [ 1288.328504][ T726] netlink: 'syz.2.11719': attribute type 298 has an invalid length. [ 1290.391913][T15526] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1290.410756][T15526] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1290.965495][T15526] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1290.974460][T15526] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1290.982046][T15526] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1291.943651][ T789] chnl_net:caif_netlink_parms(): no params data found [ 1292.437166][ T789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.460841][ T789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.468194][ T789] bridge_slave_0: entered allmulticast mode [ 1292.897971][ T789] bridge_slave_0: entered promiscuous mode [ 1293.110873][T15526] Bluetooth: hci3: command tx timeout [ 1293.121933][ T789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.144193][ T789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.162680][ T789] bridge_slave_1: entered allmulticast mode [ 1293.180363][ T789] bridge_slave_1: entered promiscuous mode [ 1293.385656][ T836] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11771'. [ 1293.394781][ T836] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11771'. [ 1293.577946][ T789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.597486][ T789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.611978][ T838] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=838 comm=syz.0.11772 [ 1293.747270][ T789] team0: Port device team_slave_0 added [ 1293.763169][ T789] team0: Port device team_slave_1 added [ 1293.921028][ T842] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11774'. [ 1293.969798][ T842] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11774'. [ 1293.992322][ T789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.999930][ T789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.046106][ T789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.062801][ T789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.080565][ T789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.175963][ T789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.400571][ T789] hsr_slave_0: entered promiscuous mode [ 1294.407238][ T789] hsr_slave_1: entered promiscuous mode [ 1294.440917][ T789] debugfs: 'hsr0' already exists in 'hsr' [ 1294.446667][ T789] Cannot create hsr debugfs directory [ 1294.918367][ T789] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.064718][ T789] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.190284][T15526] Bluetooth: hci3: command tx timeout [ 1295.333714][ T789] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.511495][ T789] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.063828][ T789] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1296.083815][ T789] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1296.114318][ T789] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1296.620600][ T789] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1297.058335][ T789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.192059][ T789] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.223588][T12532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.230711][T12532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.312099][ T936] fuse: Bad value for 'fd' [ 1297.369967][T15526] Bluetooth: hci3: command tx timeout [ 1297.802057][T12532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.809231][T12532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.005924][ T944] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11810'. [ 1298.040004][ T944] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11810'. [ 1298.456767][ T789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.187068][ T789] veth0_vlan: entered promiscuous mode [ 1299.215450][ T789] veth1_vlan: entered promiscuous mode [ 1299.282415][ T789] veth0_macvtap: entered promiscuous mode [ 1299.313071][ T789] veth1_macvtap: entered promiscuous mode [ 1299.348148][ T789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1299.394428][ T789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1299.430057][T15526] Bluetooth: hci3: command tx timeout [ 1299.440241][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.461808][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.500843][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.708970][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.720442][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.726736][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.942461][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.973155][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.026708][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.038817][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.113102][ T1033] netlink: 'syz.3.11826': attribute type 298 has an invalid length. [ 1301.805456][T25224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1301.813873][T25224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1301.822390][T25224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1301.835434][T25224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1301.843917][T25224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1302.987943][ T1040] chnl_net:caif_netlink_parms(): no params data found [ 1303.120670][ T1069] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11844'. [ 1303.150526][ T1069] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11844'. [ 1303.267185][ T1080] netlink: 'syz.2.11855': attribute type 5 has an invalid length. [ 1303.289446][ T1080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11855'. [ 1303.341998][ T1083] netlink: 'syz.2.11855': attribute type 5 has an invalid length. [ 1303.349826][ T1083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11855'. [ 1303.353130][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.380577][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.387785][ T1040] bridge_slave_0: entered allmulticast mode [ 1303.418134][ T1040] bridge_slave_0: entered promiscuous mode [ 1303.603814][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.618586][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.636852][ T1040] bridge_slave_1: entered allmulticast mode [ 1303.715823][ T1093] fuse: Bad value for 'fd' [ 1304.074153][T25224] Bluetooth: hci2: command tx timeout [ 1304.081814][ T1040] bridge_slave_1: entered promiscuous mode [ 1304.322234][ T1040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.342414][ T1040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.462620][ T1040] team0: Port device team_slave_0 added [ 1304.478921][ T1040] team0: Port device team_slave_1 added [ 1304.641669][ T1040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1304.669167][ T1040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.703145][ T1040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1304.716247][ T1040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1304.724402][ T1040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.820218][ T1040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.083843][ T1040] hsr_slave_0: entered promiscuous mode [ 1305.108400][ T1040] hsr_slave_1: entered promiscuous mode [ 1305.118674][ T1040] debugfs: 'hsr0' already exists in 'hsr' [ 1305.142488][ T1040] Cannot create hsr debugfs directory [ 1305.163041][ T1123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=1123 comm=syz.4.11872 [ 1305.261357][ T1123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=1123 comm=syz.4.11872 [ 1305.679757][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.687335][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.915829][ T1143] netlink: 'syz.0.11880': attribute type 4 has an invalid length. [ 1305.923731][ T1143] netlink: 17 bytes leftover after parsing attributes in process `syz.0.11880'. [ 1305.998235][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1306.211013][T25224] Bluetooth: hci2: command tx timeout [ 1306.739711][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1307.480174][ T8525] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.513097][ T8525] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.551374][ T8525] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.590018][ T8525] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.732998][T12532] bridge_slave_1: left allmulticast mode [ 1307.738662][T12532] bridge_slave_1: left promiscuous mode [ 1307.765105][T12532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.872090][T12532] bridge_slave_0: left allmulticast mode [ 1307.877759][T12532] bridge_slave_0: left promiscuous mode [ 1307.900979][T12532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.239958][T25224] Bluetooth: hci2: command tx timeout [ 1309.256464][T12532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.278948][T12532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.300747][T12532] bond0 (unregistering): Released all slaves [ 1309.445230][T12532] bond1 (unregistering): Released all slaves [ 1309.607636][T12532] bond2 (unregistering): Released all slaves [ 1309.973603][ T1219] netlink: 'syz.3.11914': attribute type 4 has an invalid length. [ 1309.981552][ T1219] netlink: 17 bytes leftover after parsing attributes in process `syz.3.11914'. [ 1310.311287][T25224] Bluetooth: hci2: command tx timeout [ 1311.184860][T12532] hsr_slave_0: left promiscuous mode [ 1311.237838][T12532] hsr_slave_1: left promiscuous mode [ 1311.254233][T12532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.344152][T12532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1313.076840][T12532] team0 (unregistering): Port device team_slave_1 removed [ 1313.210445][T12532] team0 (unregistering): Port device team_slave_0 removed [ 1314.552292][ T1341] netlink: 'syz.2.11953': attribute type 298 has an invalid length. [ 1314.568432][ T1040] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1314.644649][ T1040] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1314.723651][ T1040] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1314.775770][ T1040] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1314.932518][ T1040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.007820][ T1040] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.064411][ T8525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.071566][ T8525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1315.125938][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.133069][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1315.377730][ T1378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11969'. [ 1315.705186][ T1040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1315.823728][ T1040] veth0_vlan: entered promiscuous mode [ 1315.861946][ T1040] veth1_vlan: entered promiscuous mode [ 1315.932787][ T1040] veth0_macvtap: entered promiscuous mode [ 1315.961948][ T1040] veth1_macvtap: entered promiscuous mode [ 1315.999107][ T1040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1316.031371][ T1040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1316.073884][T12532] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.084243][T12532] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.208754][T12532] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.222203][T12532] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.400265][ T8525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.408092][ T8525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.491602][T12532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.519894][T12532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.557368][ T1425] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11990'. [ 1316.590179][ T1425] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11990'. [ 1317.957638][ T1459] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12004'. [ 1317.991211][ T1459] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12004'. [ 1318.270493][ T1466] netlink: 'syz.1.12002': attribute type 298 has an invalid length. [ 1320.161641][ T1502] fuse: Bad value for 'fd' [ 1325.996918][ T1563] netlink: 'syz.2.12046': attribute type 4 has an invalid length. [ 1326.005615][ T1563] netlink: 17 bytes leftover after parsing attributes in process `syz.2.12046'. [ 1326.611185][ T1586] netlink: 'syz.3.12055': attribute type 1 has an invalid length. [ 1326.630001][ T1587] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12056'. [ 1326.639037][ T1587] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12056'. [ 1326.761058][ T1586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1327.276504][ T1629] netlink: 'syz.3.12074': attribute type 1 has an invalid length. [ 1327.333498][ T1629] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1328.607261][ T1663] netlink: 'syz.1.12089': attribute type 1 has an invalid length. [ 1328.750622][ T1667] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12090'. [ 1328.759670][ T1667] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12090'. [ 1332.709181][ T1762] netlink: 'syz.2.12133': attribute type 298 has an invalid length. [ 1333.225407][ T1785] netlink: 80 bytes leftover after parsing attributes in process `syz.0.12142'. [ 1333.351094][ T1788] netlink: 'syz.1.12140': attribute type 4 has an invalid length. [ 1333.358958][ T1788] netlink: 17 bytes leftover after parsing attributes in process `syz.1.12140'. [ 1334.301367][ T1796] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12146'. [ 1334.357060][ T1796] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12146'. [ 1334.694313][ T1800] netlink: 'syz.3.12148': attribute type 298 has an invalid length. [ 1335.552510][ T1837] netlink: 'syz.3.12161': attribute type 298 has an invalid length. [ 1336.394580][ T1859] binder: 1858:1859 ioctl 4018620d 0 returned -22 [ 1336.923484][ T1883] netlink: 'syz.0.12183': attribute type 298 has an invalid length. [ 1339.967345][ T5869] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1340.189928][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 1340.255123][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1340.310006][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1340.340124][ T5869] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1340.359359][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.402850][ T5869] usb 5-1: config 0 descriptor?? [ 1340.761156][ T1937] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12207'. [ 1340.842505][ T5869] usbhid 5-1:0.0: can't add hid device: -71 [ 1340.848500][ T5869] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1340.884285][ T5869] usb 5-1: USB disconnect, device number 3 [ 1343.035627][T15526] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1343.044122][T15526] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1343.052930][T15526] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1343.061092][T15526] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1343.072470][T15526] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1343.535551][ T1991] chnl_net:caif_netlink_parms(): no params data found [ 1343.691961][ T2007] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12236'. [ 1344.101201][ T1991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.108634][ T1991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.126852][ T1991] bridge_slave_0: entered allmulticast mode [ 1344.150237][ T1991] bridge_slave_0: entered promiscuous mode [ 1344.172225][ T1991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.191380][ T1991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.236941][ T1991] bridge_slave_1: entered allmulticast mode [ 1344.251233][ T1991] bridge_slave_1: entered promiscuous mode [ 1344.598227][ T2027] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1344.711701][ T1991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1344.762494][ T1991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1344.941672][ T1991] team0: Port device team_slave_0 added [ 1344.960530][ T1991] team0: Port device team_slave_1 added [ 1345.069313][ T1991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1345.082586][ T1991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1345.160250][ T1991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1345.194480][T25224] Bluetooth: hci4: command tx timeout [ 1345.374760][ T2044] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12250'. [ 1345.384193][ T2044] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12250'. [ 1345.393764][ T1991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1345.439935][ T1991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1345.528656][ T1991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1345.795056][ T1991] hsr_slave_0: entered promiscuous mode [ 1345.813091][ T1991] hsr_slave_1: entered promiscuous mode [ 1345.840202][ T1991] debugfs: 'hsr0' already exists in 'hsr' [ 1345.866207][ T1991] Cannot create hsr debugfs directory [ 1346.015922][ T2066] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12261'. [ 1346.426969][ T2083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12268'. [ 1346.866838][ T8525] bridge_slave_1: left allmulticast mode [ 1346.879320][ T8525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.994295][ T8525] bridge_slave_0: left allmulticast mode [ 1347.015654][ T8525] bridge_slave_0: left promiscuous mode [ 1347.066107][ T8525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.269907][T25224] Bluetooth: hci4: command tx timeout [ 1349.268627][ T2123] netlink: 80 bytes leftover after parsing attributes in process `syz.0.12280'. [ 1349.354381][T25224] Bluetooth: hci4: command tx timeout [ 1349.655954][ T8525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.742717][ T8525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.785562][ T8525] bond0 (unregistering): Released all slaves [ 1350.096993][ T8525] bond1 (unregistering): Released all slaves [ 1350.478458][ T8525] bond2 (unregistering): Released all slaves [ 1350.820261][ T2153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12293'. [ 1351.430174][T25224] Bluetooth: hci4: command tx timeout [ 1351.458151][ T8525] hsr_slave_0: left promiscuous mode [ 1351.477573][ T8525] hsr_slave_1: left promiscuous mode [ 1351.493790][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.522712][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.920000][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1352.084133][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1352.129344][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.151593][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1352.162221][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1352.177531][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.197766][ T9] usb 5-1: config 0 descriptor?? [ 1352.248597][ T8525] team0 (unregistering): Port device team_slave_1 removed [ 1352.420411][ T8525] team0 (unregistering): Port device team_slave_0 removed [ 1353.425654][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1353.439359][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1353.462022][ T9] usb 5-1: USB disconnect, device number 4 [ 1355.928292][ T2208] netlink: 'syz.1.12310': attribute type 298 has an invalid length. [ 1356.077199][ T1991] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1356.134392][ T1991] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1356.181565][ T1991] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1356.245168][ T1991] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1356.523556][ T1991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.586819][ T1991] 8021q: adding VLAN 0 to HW filter on device team0 [ 1356.656030][T24041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.663144][T24041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1356.732651][T10057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.739771][T10057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.107450][ T2262] netlink: 80 bytes leftover after parsing attributes in process `syz.0.12328'. [ 1357.409647][ T1991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1357.497184][ T1991] veth0_vlan: entered promiscuous mode [ 1357.525078][ T1991] veth1_vlan: entered promiscuous mode [ 1357.554531][ T1991] veth0_macvtap: entered promiscuous mode [ 1357.599096][ T1991] veth1_macvtap: entered promiscuous mode [ 1357.707120][ T1991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1358.205944][ T1991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1358.246383][T24041] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.276922][T24041] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.342983][T24041] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.360008][T24041] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.434713][ T2303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12342'. [ 1358.609249][T24041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.650155][T24041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.825439][T24041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.847099][T24041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.332258][ T2339] netlink: 'syz.1.12353': attribute type 298 has an invalid length. [ 1361.113420][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.121843][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.388579][T15526] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1361.397717][T15526] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1361.420364][T15526] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1361.447955][T15526] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1361.470076][T15526] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1361.789681][ T8525] Bluetooth: hci5: Frame reassembly failed (-84) [ 1362.194586][ T2400] chnl_net:caif_netlink_parms(): no params data found [ 1362.404425][ T2400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.462321][ T2400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.481660][ T2400] bridge_slave_0: entered allmulticast mode [ 1362.495239][ T2400] bridge_slave_0: entered promiscuous mode [ 1362.513764][ T2400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.530774][ T2400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.545786][ T2400] bridge_slave_1: entered allmulticast mode [ 1362.569544][ T2400] bridge_slave_1: entered promiscuous mode [ 1362.750706][ T2400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.781223][ T2400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1362.876661][ T2400] team0: Port device team_slave_0 added [ 1362.892529][ T2400] team0: Port device team_slave_1 added [ 1362.994743][ T2400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.010548][ T2400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1363.078260][ T2400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.112403][ T2400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.137151][ T2400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1363.204107][ T2400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.437672][ T2400] hsr_slave_0: entered promiscuous mode [ 1363.444501][ T2400] hsr_slave_1: entered promiscuous mode [ 1363.510054][T15526] Bluetooth: hci0: command tx timeout [ 1363.519595][ T2448] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12395'. [ 1363.830320][T25224] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1364.483580][ T2464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12400'. [ 1365.588592][ T2499] netlink: 'syz.2.12412': attribute type 298 has an invalid length. [ 1365.606857][T15526] Bluetooth: hci0: command tx timeout [ 1366.048360][ T2400] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1366.065164][ T2400] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1366.155253][ T2400] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1366.382035][ T2400] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1367.172376][ T2400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1367.205980][ T2400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1367.261626][T10057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.268736][T10057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1367.315929][T10057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.323094][T10057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1367.412897][ T2400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1367.670129][T15526] Bluetooth: hci0: command tx timeout [ 1367.840058][ T2400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1367.938194][ T2400] veth0_vlan: entered promiscuous mode [ 1367.962641][ T2400] veth1_vlan: entered promiscuous mode [ 1368.023174][ T2400] veth0_macvtap: entered promiscuous mode [ 1368.043012][ T2400] veth1_macvtap: entered promiscuous mode [ 1368.091591][ T2400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1368.105767][ T2400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.147967][ T8525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.173123][ T8525] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.195299][ T2545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12424'. [ 1368.235611][ T8525] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.262483][ T8525] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.479140][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.501241][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.615674][ T8525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.639889][ T8525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1369.727694][T25224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1369.736664][T25224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1369.744486][T25224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1369.752821][T25224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1369.759941][T25224] Bluetooth: hci0: command tx timeout [ 1369.774764][T27414] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1369.800004][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1369.800019][ T30] audit: type=1400 audit(28707.690:591): avc: denied { append } for pid=2588 comm="syz.0.12440" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1370.220501][ T2602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12445'. [ 1370.460254][ T2606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12447'. [ 1370.514633][ T1013] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.575452][ T2608] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12448'. [ 1370.630429][ T2608] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12448'. [ 1370.958986][ T1013] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.036712][ T2622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12454'. [ 1371.171928][ T1013] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.237820][ T2587] chnl_net:caif_netlink_parms(): no params data found [ 1371.730885][ T1013] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.831097][T27414] Bluetooth: hci1: command tx timeout [ 1372.269784][ T2587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.277669][ T2587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.285315][ T2587] bridge_slave_0: entered allmulticast mode [ 1372.294990][ T2587] bridge_slave_0: entered promiscuous mode [ 1372.303212][ T2587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.311606][ T2587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.318792][ T2587] bridge_slave_1: entered allmulticast mode [ 1372.326516][ T2587] bridge_slave_1: entered promiscuous mode [ 1372.336408][ T2660] kvm: pic: non byte read [ 1372.345741][ T2660] kvm: pic: non byte read [ 1372.353019][ T2660] kvm: pic: single mode not supported [ 1372.353033][ T2660] kvm: pic: level sensitive irq not supported [ 1372.358634][ T2660] kvm: pic: non byte read [ 1372.370204][ T2660] kvm: pic: single mode not supported [ 1372.370265][ T2660] kvm: pic: non byte read [ 1372.454853][ T2587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1372.485382][ T2660] kvm: pic: non byte read [ 1372.491863][ T2660] kvm: pic: non byte read [ 1372.497020][ T2660] kvm: pic: single mode not supported [ 1372.497034][ T2660] kvm: pic: level sensitive irq not supported [ 1372.503217][ T2660] kvm: pic: non byte read [ 1372.517829][ T2660] kvm: pic: single mode not supported [ 1372.517888][ T2660] kvm: pic: non byte read [ 1372.518945][ T2587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1372.523801][ T2660] kvm: pic: non byte read [ 1372.745899][ T2587] team0: Port device team_slave_0 added [ 1372.804791][ T1013] bridge_slave_1: left allmulticast mode [ 1372.811676][ T1013] bridge_slave_1: left promiscuous mode [ 1372.828318][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.868140][ T1013] bridge_slave_0: left allmulticast mode [ 1372.885543][ T1013] bridge_slave_0: left promiscuous mode [ 1372.892835][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.259615][ T1013] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1373.965780][T27414] Bluetooth: hci1: command tx timeout [ 1374.040413][ T2714] netlink: 80 bytes leftover after parsing attributes in process `syz.0.12481'. [ 1374.230842][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.256010][ T2718] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12483'. [ 1374.285748][ T2718] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12483'. [ 1374.286190][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.331306][ T1013] bond0 (unregistering): Released all slaves [ 1374.542749][ T1013] bond1 (unregistering): Released all slaves [ 1374.760463][ T1013] bond2 (unregistering): Released all slaves [ 1375.021288][ T1013] bond3 (unregistering): Released all slaves [ 1375.176085][ T1013] bond4 (unregistering): Released all slaves [ 1375.259686][ T2587] team0: Port device team_slave_1 added [ 1375.287456][ T2708] netlink: 'syz.4.12480': attribute type 298 has an invalid length. [ 1375.835082][ T2587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.861455][ T2587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.989986][T27414] Bluetooth: hci1: command tx timeout [ 1375.997046][ T2587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.011625][ T2770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12489'. [ 1376.071524][ T2587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.079394][ T2587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.111913][ T2587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1376.444309][ T2783] netlink: 'syz.1.12501': attribute type 298 has an invalid length. [ 1376.722621][ T2587] hsr_slave_0: entered promiscuous mode [ 1376.745032][ T2587] hsr_slave_1: entered promiscuous mode [ 1376.777681][ T2587] debugfs: 'hsr0' already exists in 'hsr' [ 1376.789968][ T2587] Cannot create hsr debugfs directory [ 1376.816659][ T2806] kvm: pic: non byte read [ 1376.821764][ T1013] hsr_slave_0: left promiscuous mode [ 1376.828637][ T2806] kvm: pic: single mode not supported [ 1376.828651][ T2806] kvm: pic: level sensitive irq not supported [ 1376.835365][ T2806] kvm: pic: single mode not supported [ 1376.859948][ T1013] hsr_slave_1: left promiscuous mode [ 1376.871965][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1376.879351][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1376.901276][ T2806] kvm: pic: single mode not supported [ 1376.901294][ T2806] kvm: pic: level sensitive irq not supported [ 1376.907010][ T2806] kvm: pic: single mode not supported [ 1376.978544][ T1013] veth1_macvtap: left promiscuous mode [ 1377.002016][ T1013] veth0_macvtap: left promiscuous mode [ 1377.016404][ T1013] veth1_vlan: left promiscuous mode [ 1377.048311][ T2821] netlink: 80 bytes leftover after parsing attributes in process `syz.1.12513'. [ 1377.548344][ T2836] netlink: 'syz.1.12519': attribute type 1 has an invalid length. [ 1377.837117][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 1377.902909][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 1378.070032][T27414] Bluetooth: hci1: command tx timeout [ 1378.711389][ T2836] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1379.665824][ T2860] netlink: 'syz.1.12523': attribute type 298 has an invalid length. [ 1380.907608][ T2883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12525'. [ 1381.424375][ T2587] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1381.471318][ T2587] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1381.504739][ T2587] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1381.549949][ T2587] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1381.669559][ T2908] netlink: 'syz.1.12532': attribute type 1 has an invalid length. [ 1381.883685][ T2908] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1382.006348][ T2917] bond1: (slave ip6gretap1): making interface the new active one [ 1382.071645][ T2917] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1382.235692][ T2587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1382.280508][ T2587] 8021q: adding VLAN 0 to HW filter on device team0 [ 1382.323908][T24041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.331048][T24041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1382.391336][T24041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.398458][T24041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1382.508263][ T2587] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1382.559920][ T2587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1382.848727][ T2950] netlink: 'syz.1.12540': attribute type 298 has an invalid length. [ 1383.182457][ T2587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1383.208206][ T2954] picdev_read: 8 callbacks suppressed [ 1383.208222][ T2954] kvm: pic: non byte read [ 1383.230457][ T2954] kvm: pic: non byte read [ 1383.246681][ T2954] kvm: pic: single mode not supported [ 1383.246699][ T2954] kvm: pic: level sensitive irq not supported [ 1383.266915][ T2954] kvm: pic: non byte read [ 1383.318102][ T2587] veth0_vlan: entered promiscuous mode [ 1383.327299][ T2954] kvm: pic: single mode not supported [ 1383.327362][ T2954] kvm: pic: non byte read [ 1383.363864][ T2954] kvm: pic: non byte read [ 1383.369092][ T2954] kvm: pic: non byte read [ 1383.373787][ T2954] kvm: pic: single mode not supported [ 1383.373801][ T2954] kvm: pic: level sensitive irq not supported [ 1383.379322][ T2954] kvm: pic: non byte read [ 1383.485921][ T2967] netlink: 'syz.0.12536': attribute type 298 has an invalid length. [ 1383.561040][ T2587] veth1_vlan: entered promiscuous mode [ 1383.953892][ T2954] kvm: pic: single mode not supported [ 1383.953962][ T2954] kvm: pic: non byte read [ 1383.991967][ T2954] kvm: pic: non byte read [ 1384.138648][ T2587] veth0_macvtap: entered promiscuous mode [ 1384.151341][ T2587] veth1_macvtap: entered promiscuous mode [ 1384.236909][ T2587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1384.323195][ T2976] kvm: pic: non byte read [ 1384.328105][ T2976] kvm: pic: single mode not supported [ 1384.328118][ T2976] kvm: pic: level sensitive irq not supported [ 1384.351260][ T2976] kvm: pic: single mode not supported [ 1384.372674][ T2976] kvm: pic: single mode not supported [ 1384.378075][ T2976] kvm: pic: level sensitive irq not supported [ 1384.396630][ T2976] kvm: pic: single mode not supported [ 1384.403360][ T2587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1384.478280][ T2986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12547'. [ 1384.509026][T10057] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.518329][T10057] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.582302][T10057] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.630437][T10057] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.833476][T10057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1384.851902][T10057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1385.236057][T24041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1385.708769][T24041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.091156][ T3021] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12556'. [ 1386.100321][ T3021] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12556'. [ 1386.219915][ T3026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12558'. [ 1386.538981][ T3035] netlink: 'syz.0.12561': attribute type 298 has an invalid length. [ 1387.512248][ T3054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12572'. [ 1388.740637][ T3108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12597'. [ 1388.773857][ T3111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12600'. [ 1388.801943][ T3113] netlink: 'syz.4.12598': attribute type 1 has an invalid length. [ 1388.825293][ T3114] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12599'. [ 1388.839943][ T3114] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12599'. [ 1388.919435][ T3113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1388.935567][ T3121] bond1: (slave ip6gretap1): making interface the new active one [ 1388.944577][ T3121] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1391.942000][ T3199] netlink: 'syz.1.12637': attribute type 1 has an invalid length. [ 1392.006000][ T3199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1392.669738][ T3210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12643'. [ 1393.192821][ T3227] netlink: 'syz.0.12649': attribute type 1 has an invalid length. [ 1393.285957][ T3227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1393.379643][ T3232] bond1: (slave ip6gretap1): making interface the new active one [ 1393.421066][ T3232] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1394.476772][ T3264] netlink: 'syz.0.12664': attribute type 1 has an invalid length. [ 1394.625022][ T3264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1397.930053][T24041] bridge_slave_1: left allmulticast mode [ 1397.950060][T24041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.080689][T24041] bridge_slave_0: left allmulticast mode [ 1398.245653][T24041] bridge_slave_0: left promiscuous mode [ 1398.251716][T24041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.215191][T24041] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1399.230265][T15301] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1399.431958][T15301] usb 5-1: Using ep0 maxpacket: 32 [ 1399.455336][T15301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.491314][T15301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1399.518828][T15301] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1399.541719][T15301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.580733][T15301] usb 5-1: config 0 descriptor?? [ 1400.027190][T15301] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 1400.050313][T15301] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 1400.062489][T15301] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 1400.079586][T15301] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 1400.105308][T15301] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 1400.120104][T15301] savu 0003:1E7D:2D5A.0005: unbalanced collection at end of report description [ 1400.145743][T15301] savu 0003:1E7D:2D5A.0005: parse failed [ 1400.159926][T15301] savu 0003:1E7D:2D5A.0005: probe with driver savu failed with error -22 [ 1400.252171][ T5930] usb 5-1: USB disconnect, device number 5 [ 1400.293255][T24041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1400.339275][T24041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1400.381153][T24041] bond0 (unregistering): Released all slaves [ 1400.628682][T24041] bond1 (unregistering): Released all slaves [ 1400.881513][T24041] bond2 (unregistering): Released all slaves [ 1401.734551][ T3374] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12712'. [ 1401.998704][T24041] hsr_slave_0: left promiscuous mode [ 1402.012851][T24041] hsr_slave_1: left promiscuous mode [ 1402.033396][T24041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1402.051231][T24041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.074214][T24041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1402.093148][T24041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.149556][T24041] veth1_macvtap: left promiscuous mode [ 1402.162604][T24041] veth0_macvtap: left promiscuous mode [ 1402.174937][T24041] veth1_vlan: left promiscuous mode [ 1402.185606][T24041] veth0_vlan: left promiscuous mode [ 1403.812403][T24041] team0 (unregistering): Port device team_slave_1 removed [ 1403.926827][T24041] team0 (unregistering): Port device team_slave_0 removed [ 1404.513451][ T3454] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12746'. [ 1404.522606][ T3454] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12746'. [ 1405.230602][ T3475] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12756'. [ 1409.817421][ T3558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12793'. [ 1410.783052][ T3574] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12798'. [ 1410.808339][ T3575] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12797'. [ 1410.817461][ T3575] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12797'. [ 1410.833432][ T3574] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12798'. [ 1411.822937][ T3609] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12813'. [ 1411.873239][ T3609] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12813'. [ 1414.390049][T15526] Bluetooth: hci3: command 0x0406 tx timeout [ 1415.838606][ T3647] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12827'. [ 1415.888694][ T3647] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12827'. [ 1418.950525][ T3718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12855'. [ 1419.223128][ T3725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12859'. [ 1419.400092][ T3730] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12862'. [ 1419.419435][ T3730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12862'. [ 1420.440529][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12870'. [ 1422.590378][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.596697][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.720349][T27414] Bluetooth: hci2: command 0x0406 tx timeout [ 1424.752661][ T3821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12895'. [ 1426.841759][ T3853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12915'. [ 1426.921978][ T3855] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12916'. [ 1426.939867][ T3855] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12916'. [ 1430.050330][ T3926] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12949'. [ 1430.059383][ T3926] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12949'. [ 1430.749995][ T3940] overlayfs: failed to clone upperpath [ 1432.981456][ T3985] netlink: 'syz.3.12971': attribute type 298 has an invalid length. [ 1434.315170][ T4017] netlink: 'syz.3.12984': attribute type 298 has an invalid length. [ 1434.618812][ T4019] netlink: 80 bytes leftover after parsing attributes in process `syz.1.12987'. [ 1434.806382][ T4024] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12989'. [ 1434.880539][ T4024] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12989'. [ 1434.912838][ T4028] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12990'. [ 1434.921946][ T4028] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12990'. [ 1435.243647][ T4045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12998'. [ 1435.362424][ T4045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12998'. [ 1435.452706][ T4045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12998'. [ 1435.601132][ T4055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13002'. [ 1435.652958][ T4055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13002'. [ 1439.650952][ T4120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13023'. [ 1440.412199][ T4139] netlink: 'syz.4.13035': attribute type 298 has an invalid length. [ 1441.157975][ T4168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13048'. [ 1441.353886][ T4174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13053'. [ 1441.370473][ T4177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13052'. [ 1442.138761][ T4214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13069'. [ 1442.605329][ T4227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13076'. [ 1442.711450][ T4227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13076'. [ 1442.759757][ T4227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13076'. [ 1444.707955][ T4307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13112'. [ 1450.892327][ T4411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13157'. [ 1451.748671][ T4429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13163'. [ 1451.759383][ T4429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13163'. [ 1451.768765][ T4429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13163'. [ 1451.842386][ T4435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13162'. [ 1452.200469][ T4449] netlink: 'syz.2.13169': attribute type 298 has an invalid length. [ 1456.012443][ T4512] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13200'. [ 1456.041792][ T4512] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13200'. [ 1457.228725][ T4542] netlink: 'syz.2.13213': attribute type 298 has an invalid length. [ 1457.915611][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13218'. [ 1458.081312][ T4562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13222'. [ 1459.686512][ T4589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13235'. [ 1459.977314][ T4597] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13239'. [ 1460.019956][ T4597] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13239'. [ 1460.142428][ T4602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13232'. [ 1461.626361][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13259'. [ 1463.409001][ T4677] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13278'. [ 1463.468718][ T4677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13278'. [ 1465.608515][T15526] Bluetooth: hci4: command 0x0406 tx timeout [ 1466.054856][ T4729] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13302'. [ 1468.495213][ T4779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13309'. [ 1468.565294][ T4782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13326'. [ 1469.750026][ T4817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13341'. [ 1470.722441][ T4851] netlink: 'syz.4.13355': attribute type 298 has an invalid length. [ 1471.625286][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13364'. [ 1471.646225][ T4865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13364'. [ 1471.697427][ T4868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13363'. [ 1471.729907][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13364'. [ 1471.999717][ T4882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13371'. [ 1474.258461][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13390'. [ 1474.913296][ T4937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13396'. [ 1476.407464][ T4969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13405'. [ 1479.891506][ T4997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13423'. [ 1483.997509][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.003918][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.071085][T15526] Bluetooth: hci0: command 0x0406 tx timeout [ 1487.651974][ T5078] netlink: 80 bytes leftover after parsing attributes in process `syz.1.13458'. [ 1489.331985][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13474'. [ 1490.357187][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13485'. [ 1490.386551][ T5138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13485'. [ 1490.410131][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13485'. [ 1492.530691][ T5182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13502'. [ 1492.539731][ T5182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13502'. [ 1492.560869][ T5182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13502'. [ 1494.039138][ T5219] netlink: 'syz.2.13517': attribute type 12 has an invalid length. [ 1494.047878][ T5219] netlink: 'syz.2.13517': attribute type 29 has an invalid length. [ 1494.055834][ T5219] netlink: 148 bytes leftover after parsing attributes in process `syz.2.13517'. [ 1494.977591][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13515'. [ 1494.987237][ T5248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13515'. [ 1494.997849][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13515'. [ 1495.472372][ T5261] netlink: 80 bytes leftover after parsing attributes in process `syz.4.13537'. [ 1495.868894][ T5269] netlink: 'syz.4.13538': attribute type 298 has an invalid length. [ 1496.311829][T27414] Bluetooth: hci1: command 0x0406 tx timeout [ 1496.595380][ T5275] netlink: 80 bytes leftover after parsing attributes in process `syz.4.13542'. [ 1498.757087][ T5317] netlink: 80 bytes leftover after parsing attributes in process `syz.4.13563'. [ 1499.462765][ T5330] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13566'. [ 1499.619509][ T3493] bridge_slave_1: left allmulticast mode [ 1499.625802][ T3493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.854701][ T3493] bridge_slave_0: left allmulticast mode [ 1499.935106][ T3493] bridge_slave_0: left promiscuous mode [ 1500.064300][ T3493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.340075][ T3493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1501.351782][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13573'. [ 1501.380021][ T5349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13573'. [ 1501.380817][ T3493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.389094][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13573'. [ 1501.407918][ T3493] bond0 (unregistering): Released all slaves [ 1501.425635][ T5339] netlink: 'syz.0.13558': attribute type 298 has an invalid length. [ 1501.439936][ T5347] netlink: 'syz.3.13572': attribute type 12 has an invalid length. [ 1501.447839][ T5347] netlink: 'syz.3.13572': attribute type 29 has an invalid length. [ 1501.455822][ T5347] netlink: 148 bytes leftover after parsing attributes in process `syz.3.13572'. [ 1502.009836][ T3493] hsr_slave_0: left promiscuous mode [ 1502.058877][ T3493] hsr_slave_1: left promiscuous mode [ 1502.074949][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1502.130443][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1503.423315][ T3493] team0 (unregistering): Port device team_slave_1 removed [ 1503.519135][ T3493] team0 (unregistering): Port device team_slave_0 removed [ 1503.870143][ T5375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13586'. [ 1505.714125][ T5402] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13597'. [ 1506.011516][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13601'. [ 1507.281771][ T5429] netlink: 'syz.2.13608': attribute type 12 has an invalid length. [ 1507.289691][ T5429] netlink: 'syz.2.13608': attribute type 29 has an invalid length. [ 1507.297692][ T5429] netlink: 148 bytes leftover after parsing attributes in process `syz.2.13608'. [ 1508.943224][ T5466] netlink: 80 bytes leftover after parsing attributes in process `syz.1.13625'. [ 1509.768699][ T5502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13637'. [ 1510.580943][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13650'. [ 1512.627016][ T5566] netlink: 'syz.2.13665': attribute type 12 has an invalid length. [ 1512.635285][ T5566] netlink: 'syz.2.13665': attribute type 29 has an invalid length. [ 1512.643223][ T5566] netlink: 148 bytes leftover after parsing attributes in process `syz.2.13665'. [ 1515.673531][ T5647] netlink: 'syz.0.13694': attribute type 298 has an invalid length. [ 1518.801217][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13703'. [ 1518.819875][ T5674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13703'. [ 1518.840331][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13703'. [ 1520.680052][ T5701] netlink: 'syz.2.13716': attribute type 298 has an invalid length. [ 1525.088736][ T5758] netlink: 'syz.4.13743': attribute type 298 has an invalid length. [ 1525.423708][ T5765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13746'. [ 1529.700545][ T5856] netlink: 'syz.1.13784': attribute type 298 has an invalid length. [ 1530.563155][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13798'. [ 1530.576769][ T5881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13798'. [ 1530.606633][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13798'. [ 1533.433986][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13827'. [ 1533.453202][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13827'. [ 1533.480876][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13827'. [ 1540.969894][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13868'. [ 1541.020024][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13868'. [ 1541.029071][ T6041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13868'. [ 1544.012037][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13896'. [ 1544.345908][ T6114] netlink: 'syz.3.13899': attribute type 298 has an invalid length. [ 1545.434519][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.451834][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.184625][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13912'. [ 1546.373105][ T6148] netlink: 'syz.0.13916': attribute type 12 has an invalid length. [ 1546.381068][ T6148] netlink: 'syz.0.13916': attribute type 29 has an invalid length. [ 1546.388967][ T6148] netlink: 148 bytes leftover after parsing attributes in process `syz.0.13916'. [ 1546.445259][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13920'. [ 1546.479063][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13920'. [ 1546.498728][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13920'. [ 1546.939034][ T6171] netlink: 'syz.0.13922': attribute type 12 has an invalid length. [ 1546.947042][ T6171] netlink: 'syz.0.13922': attribute type 29 has an invalid length. [ 1546.955128][ T6171] netlink: 148 bytes leftover after parsing attributes in process `syz.0.13922'. [ 1546.964439][ T6171] netlink: 'syz.0.13922': attribute type 2 has an invalid length. [ 1546.972300][ T6171] netlink: 23 bytes leftover after parsing attributes in process `syz.0.13922'. [ 1550.316188][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13945'. [ 1550.325318][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13945'. [ 1550.621055][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13948'. [ 1552.584195][ T6261] __nla_validate_parse: 2 callbacks suppressed [ 1552.584211][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13962'. [ 1553.013081][ T6267] netlink: 'syz.2.13965': attribute type 12 has an invalid length. [ 1553.021086][ T6267] netlink: 'syz.2.13965': attribute type 29 has an invalid length. [ 1553.029422][ T6267] netlink: 148 bytes leftover after parsing attributes in process `syz.2.13965'. [ 1553.039058][ T6267] netlink: 'syz.2.13965': attribute type 2 has an invalid length. [ 1553.046904][ T6267] netlink: 23 bytes leftover after parsing attributes in process `syz.2.13965'. [ 1558.725245][ T6315] netlink: 'syz.4.13988': attribute type 298 has an invalid length. [ 1559.425790][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13995'. [ 1559.434925][ T6326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13995'. [ 1559.461308][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13995'. [ 1559.988200][ T6337] netlink: 'syz.4.13998': attribute type 4 has an invalid length. [ 1559.996110][ T6337] netlink: 17 bytes leftover after parsing attributes in process `syz.4.13998'. [ 1561.842381][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14001'. [ 1561.861124][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14001'. [ 1561.875757][ T6365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14001'. [ 1562.031907][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14015'. [ 1563.000107][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14026'. [ 1563.094028][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14026'. [ 1564.573884][ T6437] netlink: 'syz.4.14038': attribute type 298 has an invalid length. [ 1566.183825][ T6451] netlink: 'syz.4.14048': attribute type 12 has an invalid length. [ 1566.222163][ T6451] netlink: 'syz.4.14048': attribute type 29 has an invalid length. [ 1566.269894][ T6451] netlink: 148 bytes leftover after parsing attributes in process `syz.4.14048'. [ 1568.359207][ T6469] overlayfs: failed to clone upperpath [ 1571.258917][ T6563] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14093'. [ 1572.174399][ T6591] netlink: 'syz.2.14110': attribute type 12 has an invalid length. [ 1572.182444][ T6591] netlink: 'syz.2.14110': attribute type 29 has an invalid length. [ 1572.199866][ T6591] netlink: 148 bytes leftover after parsing attributes in process `syz.2.14110'. [ 1572.564042][ T6608] netlink: 'syz.0.14112': attribute type 12 has an invalid length. [ 1572.572100][ T6608] netlink: 'syz.0.14112': attribute type 29 has an invalid length. [ 1572.580045][ T6608] netlink: 148 bytes leftover after parsing attributes in process `syz.0.14112'. [ 1572.589919][ T6608] netlink: 'syz.0.14112': attribute type 2 has an invalid length. [ 1572.597740][ T6608] netlink: 23 bytes leftover after parsing attributes in process `syz.0.14112'. [ 1573.833934][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14142'. [ 1573.843592][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14142'. [ 1573.899817][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14142'. [ 1573.956605][ T6672] netlink: 'syz.0.14146': attribute type 12 has an invalid length. [ 1573.986445][ T6672] netlink: 'syz.0.14146': attribute type 29 has an invalid length. [ 1573.998076][ T6672] netlink: 148 bytes leftover after parsing attributes in process `syz.0.14146'. [ 1574.020582][ T6672] netlink: 59 bytes leftover after parsing attributes in process `syz.0.14146'. [ 1574.608849][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14158'. [ 1574.618126][ T6700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14158'. [ 1577.634735][ T6775] __nla_validate_parse: 1 callbacks suppressed [ 1577.634750][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14195'. [ 1577.679848][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14195'. [ 1577.699096][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14195'. [ 1578.539488][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14199'. [ 1578.547164][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14209'. [ 1578.966118][ T6815] netlink: 'syz.0.14210': attribute type 4 has an invalid length. [ 1578.974027][ T6815] netlink: 17 bytes leftover after parsing attributes in process `syz.0.14210'. [ 1580.125308][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14218'. [ 1580.166541][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14218'. [ 1580.515946][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14221'. [ 1583.631939][ T6893] 9pnet_fd: Insufficient options for proto=fd [ 1586.877314][ T6987] netlink: 'syz.3.14289': attribute type 12 has an invalid length. [ 1586.890922][ T6987] netlink: 'syz.3.14289': attribute type 29 has an invalid length. [ 1586.907738][ T6987] netlink: 148 bytes leftover after parsing attributes in process `syz.3.14289'. [ 1586.927498][ T6987] netlink: 59 bytes leftover after parsing attributes in process `syz.3.14289'. [ 1588.899718][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14302'. [ 1588.911890][ T7013] 9pnet_fd: Insufficient options for proto=fd [ 1589.382931][ T7029] netlink: 'syz.1.14306': attribute type 12 has an invalid length. [ 1589.390954][ T7029] netlink: 'syz.1.14306': attribute type 29 has an invalid length. [ 1589.398855][ T7029] netlink: 148 bytes leftover after parsing attributes in process `syz.1.14306'. [ 1589.408184][ T7029] netlink: 'syz.1.14306': attribute type 2 has an invalid length. [ 1589.416047][ T7029] netlink: 23 bytes leftover after parsing attributes in process `syz.1.14306'. [ 1592.349491][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14341'. [ 1592.368401][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14341'. [ 1592.387941][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14341'. [ 1593.749059][ T7150] netlink: 'syz.0.14353': attribute type 12 has an invalid length. [ 1593.761401][ T7150] netlink: 'syz.0.14353': attribute type 29 has an invalid length. [ 1593.769306][ T7150] netlink: 148 bytes leftover after parsing attributes in process `syz.0.14353'. [ 1593.813548][ T7150] netlink: 59 bytes leftover after parsing attributes in process `syz.0.14353'. [ 1594.385168][ T7181] netlink: 'syz.3.14374': attribute type 298 has an invalid length. [ 1594.853485][ T7183] netlink: 'syz.0.14380': attribute type 12 has an invalid length. [ 1594.871053][ T7183] netlink: 'syz.0.14380': attribute type 29 has an invalid length. [ 1594.878978][ T7183] netlink: 148 bytes leftover after parsing attributes in process `syz.0.14380'. [ 1594.933236][ T7183] netlink: 59 bytes leftover after parsing attributes in process `syz.0.14380'. [ 1595.457198][ T7209] overlayfs: overlapping lowerdir path [ 1597.035409][ T7243] overlayfs: overlapping lowerdir path [ 1598.600277][ T7281] 9pnet_fd: Insufficient options for proto=fd [ 1599.178370][ T7311] 9pnet_fd: Insufficient options for proto=fd [ 1599.394850][ T7317] netlink: 'syz.4.14441': attribute type 12 has an invalid length. [ 1599.411824][ T7317] netlink: 'syz.4.14441': attribute type 29 has an invalid length. [ 1599.429954][ T7317] netlink: 148 bytes leftover after parsing attributes in process `syz.4.14441'. [ 1599.447083][ T7317] netlink: 59 bytes leftover after parsing attributes in process `syz.4.14441'. [ 1606.876686][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.883032][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.936324][ T7537] overlayfs: failed to clone upperpath [ 1609.847182][ T30] audit: type=1400 audit(28947.740:592): avc: denied { bind } for pid=7553 comm="syz.3.14552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1610.146510][ T7563] netlink: 'syz.0.14555': attribute type 12 has an invalid length. [ 1610.175182][ T7563] netlink: 'syz.0.14555': attribute type 29 has an invalid length. [ 1610.199833][ T7563] netlink: 148 bytes leftover after parsing attributes in process `syz.0.14555'. [ 1610.821552][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14565'. [ 1611.682340][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14576'. [ 1611.856409][ T7619] netlink: 'syz.2.14567': attribute type 298 has an invalid length. [ 1613.478045][ T7692] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14615'. [ 1613.507489][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14615'. [ 1613.528100][ T7692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14615'. [ 1613.866945][ T7710] netlink: 80 bytes leftover after parsing attributes in process `syz.2.14625'. [ 1615.169702][ T7750] netlink: 80 bytes leftover after parsing attributes in process `syz.4.14646'. [ 1615.809313][ T7778] overlayfs: overlapping lowerdir path [ 1617.078874][ T7828] 9pnet_fd: Insufficient options for proto=fd [ 1617.316477][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14688'. [ 1618.653889][ T7864] netlink: 'syz.3.14703': attribute type 298 has an invalid length. [ 1618.703663][ T7868] netlink: 80 bytes leftover after parsing attributes in process `syz.4.14700'. [ 1621.006639][ T7923] 9pnet_fd: Insufficient options for proto=fd [ 1623.013417][ T7963] netlink: 'syz.0.14750': attribute type 298 has an invalid length. [ 1624.282649][ T7985] netlink: 'syz.0.14759': attribute type 12 has an invalid length. [ 1624.301943][ T7985] netlink: 'syz.0.14759': attribute type 29 has an invalid length. [ 1624.329866][ T7985] netlink: 148 bytes leftover after parsing attributes in process `syz.0.14759'. [ 1625.269058][T27414] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1625.279479][T27414] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1625.309939][T27414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1625.321222][T27414] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1625.328751][T27414] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1625.678565][ T8010] netlink: 'syz.0.14769': attribute type 12 has an invalid length. [ 1625.709768][ T8010] netlink: 'syz.0.14769': attribute type 29 has an invalid length. [ 1625.750383][ T8010] netlink: 148 bytes leftover after parsing attributes in process `syz.0.14769'. [ 1625.971156][ T8004] chnl_net:caif_netlink_parms(): no params data found [ 1626.621972][ T8004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.629084][ T8004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.656780][ T8004] bridge_slave_0: entered allmulticast mode [ 1626.678174][ T8004] bridge_slave_0: entered promiscuous mode [ 1626.699658][ T8004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.720246][ T8004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.727461][ T8004] bridge_slave_1: entered allmulticast mode [ 1626.740844][ T8004] bridge_slave_1: entered promiscuous mode [ 1626.844184][ T8004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1626.913066][ T8004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1627.016558][ T8004] team0: Port device team_slave_0 added [ 1627.037968][ T8004] team0: Port device team_slave_1 added [ 1627.201311][ T8004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1627.210970][ T8004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.245620][ T8004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1627.294197][ T8004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1627.304352][ T8004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.331363][ T8004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1627.429997][T15526] Bluetooth: hci5: command tx timeout [ 1627.489004][ T8004] hsr_slave_0: entered promiscuous mode [ 1627.511627][ T8004] hsr_slave_1: entered promiscuous mode [ 1627.517779][ T8004] debugfs: 'hsr0' already exists in 'hsr' [ 1627.533868][ T8004] Cannot create hsr debugfs directory [ 1627.539691][ T1013] bridge_slave_1: left allmulticast mode [ 1627.553442][ T1013] bridge_slave_1: left promiscuous mode [ 1627.559166][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.595971][ T1013] bridge_slave_0: left allmulticast mode [ 1627.604402][ T1013] bridge_slave_0: left promiscuous mode [ 1627.620252][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.733436][ T1013] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1628.062183][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1628.074812][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1628.103972][ T1013] bond0 (unregistering): Released all slaves [ 1628.228324][ T1013] bond1 (unregistering): Released all slaves [ 1628.829194][ T1013] hsr_slave_0: left promiscuous mode [ 1628.856073][ T1013] hsr_slave_1: left promiscuous mode [ 1628.881583][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1628.920263][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1629.519901][T15526] Bluetooth: hci5: command tx timeout [ 1629.884830][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 1629.969478][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 1631.590424][T15526] Bluetooth: hci5: command tx timeout [ 1631.783113][ T8004] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1631.838356][ T8004] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1631.992931][ T8004] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1632.241556][ T8004] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1632.820411][ T8118] netlink: 'syz.0.14803': attribute type 12 has an invalid length. [ 1632.848645][ T8118] netlink: 'syz.0.14803': attribute type 29 has an invalid length. [ 1632.872374][ T8118] netlink: 148 bytes leftover after parsing attributes in process `syz.0.14803'. [ 1633.091204][ T8004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1633.186028][ T8004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1633.244314][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.251466][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1633.354271][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.361416][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1633.679780][T15526] Bluetooth: hci5: command tx timeout [ 1633.899453][ T8004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1634.129483][ T8166] 9pnet_fd: Insufficient options for proto=fd [ 1634.412336][ T8004] veth0_vlan: entered promiscuous mode [ 1634.437736][ T8004] veth1_vlan: entered promiscuous mode [ 1634.507620][ T8004] veth0_macvtap: entered promiscuous mode [ 1634.539330][ T8004] veth1_macvtap: entered promiscuous mode [ 1634.592683][ T8004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1634.626919][ T8004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1634.654270][ T3493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.677735][ T3493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.698570][ T3493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.729405][ T3493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.827418][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1634.861800][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1634.933289][ T8525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1634.954239][ T8525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.397531][T27414] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1636.409934][T27414] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1636.420190][T27414] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1636.428233][T27414] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1636.436049][T27414] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1637.134328][ T8242] chnl_net:caif_netlink_parms(): no params data found [ 1637.492508][ T8242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.499626][ T8242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.529925][ T8242] bridge_slave_0: entered allmulticast mode [ 1637.537179][ T8242] bridge_slave_0: entered promiscuous mode [ 1637.560836][ T8242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.567926][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.594744][ T8242] bridge_slave_1: entered allmulticast mode [ 1637.603348][ T8242] bridge_slave_1: entered promiscuous mode [ 1637.694914][ T8242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1637.715697][ T8242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1637.791283][ T8242] team0: Port device team_slave_0 added [ 1637.808063][ T8242] team0: Port device team_slave_1 added [ 1637.944762][ T8242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1637.957439][ T8242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1638.014372][ T8242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1638.046095][ T8242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1638.061152][ T8242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1638.120360][ T8242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1638.265618][ T8242] hsr_slave_0: entered promiscuous mode [ 1638.281965][ T8242] hsr_slave_1: entered promiscuous mode [ 1638.298314][ T8242] debugfs: 'hsr0' already exists in 'hsr' [ 1638.307793][ T8242] Cannot create hsr debugfs directory [ 1638.470069][T27414] Bluetooth: hci3: command tx timeout [ 1638.664799][ T8242] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.857702][ T8242] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.046136][ T8242] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.212142][ T8242] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.453195][ T8242] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1639.495954][ T8242] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1639.514093][ T8242] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1639.524915][ T8242] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1639.740402][ T8242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1639.790850][ T8242] 8021q: adding VLAN 0 to HW filter on device team0 [ 1639.835283][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.842435][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1639.893798][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.900951][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1640.295447][ T8242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1640.377490][ T8242] veth0_vlan: entered promiscuous mode [ 1640.404018][ T8242] veth1_vlan: entered promiscuous mode [ 1640.418478][ T8356] netlink: 'syz.2.14888': attribute type 12 has an invalid length. [ 1640.459404][ T8356] netlink: 'syz.2.14888': attribute type 29 has an invalid length. [ 1640.467874][ T8356] netlink: 148 bytes leftover after parsing attributes in process `syz.2.14888'. [ 1640.509917][ T8242] veth0_macvtap: entered promiscuous mode [ 1640.527940][ T8242] veth1_macvtap: entered promiscuous mode [ 1640.551051][T27414] Bluetooth: hci3: command tx timeout [ 1640.585429][ T8242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1640.612800][ T8242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1640.630902][ T3493] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.639637][ T3493] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.693560][ T3493] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.729956][ T3493] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.861990][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1640.891571][ T8372] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14898'. [ 1640.894645][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.942053][ T8525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1640.969809][ T8525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.982655][ T8374] 9pnet_fd: Insufficient options for proto=fd [ 1641.260222][ T8384] netlink: 'syz.1.14903': attribute type 12 has an invalid length. [ 1641.281847][ T8384] netlink: 'syz.1.14903': attribute type 29 has an invalid length. [ 1641.320174][ T8384] netlink: 148 bytes leftover after parsing attributes in process `syz.1.14903'. [ 1642.631552][T27414] Bluetooth: hci3: command tx timeout [ 1643.810808][ T8452] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14928'. [ 1644.710139][T27414] Bluetooth: hci3: command tx timeout [ 1644.792681][ T8487] 9pnet_fd: Insufficient options for proto=fd [ 1648.840333][ T8550] 9pnet_fd: Insufficient options for proto=fd [ 1649.222098][ T8562] 9pnet_fd: Insufficient options for proto=fd [ 1649.638981][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14989'. [ 1649.668309][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14989'. [ 1650.402783][ T8594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8594 comm=syz.1.15000 [ 1650.512089][ T8598] 9pnet_fd: Insufficient options for proto=fd [ 1652.268003][ T8634] netlink: 'syz.2.15017': attribute type 298 has an invalid length. [ 1653.223897][ T8644] netlink: 'syz.2.15021': attribute type 298 has an invalid length. [ 1654.034291][ T8654] 9pnet_fd: Insufficient options for proto=fd [ 1654.864896][ T8674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8674 comm=syz.0.15030 [ 1657.343696][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15064'. [ 1657.798927][ T8745] 9pnet_fd: Insufficient options for proto=fd [ 1657.835832][ T8747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8747 comm=syz.2.15073 [ 1659.003815][ T8793] 9pnet_fd: Insufficient options for proto=fd [ 1661.783740][ T8858] 9pnet_fd: Insufficient options for proto=fd [ 1664.121917][ T8910] 9pnet_fd: Insufficient options for proto=fd [ 1668.319463][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.325925][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1673.539197][ T9040] netlink: 'syz.3.15210': attribute type 298 has an invalid length. [ 1674.667838][T15526] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1674.679405][T15526] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1674.687406][T15526] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1674.716345][T15526] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1674.724494][T15526] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1675.020596][ T9071] 9pnet_fd: Insufficient options for proto=fd [ 1675.114344][ T9055] chnl_net:caif_netlink_parms(): no params data found [ 1675.553854][ T9055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.566692][ T9055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.598983][ T9055] bridge_slave_0: entered allmulticast mode [ 1675.616736][ T9055] bridge_slave_0: entered promiscuous mode [ 1675.643197][ T9055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.659877][ T9055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.677530][ T9055] bridge_slave_1: entered allmulticast mode [ 1675.697989][ T9095] 9pnet_fd: Insufficient options for proto=fd [ 1675.709503][ T9055] bridge_slave_1: entered promiscuous mode [ 1675.881960][ T9055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1675.963874][ T9055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1676.084419][ T9055] team0: Port device team_slave_0 added [ 1676.267772][ T9055] team0: Port device team_slave_1 added [ 1676.327701][ T9055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1676.336023][ T9055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1676.408097][ T9055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1676.632785][ T9055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1676.748758][ T9055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1676.798506][ T9055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1676.822331][T27414] Bluetooth: hci2: command tx timeout [ 1676.909137][ T9055] hsr_slave_0: entered promiscuous mode [ 1676.940675][ T9055] hsr_slave_1: entered promiscuous mode [ 1676.946836][ T9055] debugfs: 'hsr0' already exists in 'hsr' [ 1676.970415][ T9055] Cannot create hsr debugfs directory [ 1677.493799][ T9055] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.663292][ T9055] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.792554][ T9055] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.951319][ T9055] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.243171][ T9055] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1678.277680][ T9055] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1678.303380][ T9055] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1678.342216][ T9055] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1678.693558][ T9055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1678.770428][ T9055] 8021q: adding VLAN 0 to HW filter on device team0 [ 1678.872168][T27414] Bluetooth: hci2: command tx timeout [ 1679.260257][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.267395][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1679.305119][T24041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.312276][T24041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1679.431309][ T9055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1679.789385][ T9055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1679.920069][ T9055] veth0_vlan: entered promiscuous mode [ 1679.951892][ T9055] veth1_vlan: entered promiscuous mode [ 1680.014130][ T9055] veth0_macvtap: entered promiscuous mode [ 1680.043545][ T9055] veth1_macvtap: entered promiscuous mode [ 1680.079279][ T9055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1680.125887][ T9055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1680.166361][ T9166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.227266][ T9166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.261624][ T9166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.297234][ T9166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.391812][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1680.419752][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.521153][ T9166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1680.528977][ T9166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.950012][T27414] Bluetooth: hci2: command tx timeout [ 1682.014032][ T9263] netlink: 'syz.2.15303': attribute type 298 has an invalid length. [ 1683.039912][T27414] Bluetooth: hci2: command tx timeout [ 1689.638540][ T9407] 9pnet_fd: Insufficient options for proto=fd [ 1692.973837][T27414] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1692.984151][T27414] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1692.999568][T27414] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1693.008925][T27414] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1693.016635][T27414] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1694.134689][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.387183][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.613121][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.572372][T15526] Bluetooth: hci4: command tx timeout [ 1695.639798][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.720748][ T9542] netlink: 'syz.2.15432': attribute type 4 has an invalid length. [ 1695.728607][ T9542] netlink: 17 bytes leftover after parsing attributes in process `syz.2.15432'. [ 1696.259913][ T9540] netlink: 'syz.4.15430': attribute type 12 has an invalid length. [ 1696.267853][ T9540] netlink: 'syz.4.15430': attribute type 29 has an invalid length. [ 1696.276601][ T9540] netlink: 148 bytes leftover after parsing attributes in process `syz.4.15430'. [ 1696.287343][ T9540] netlink: 59 bytes leftover after parsing attributes in process `syz.4.15430'. [ 1696.320551][ T9493] chnl_net:caif_netlink_parms(): no params data found [ 1696.977363][ T9493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.984676][ T9493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.995183][ T9493] bridge_slave_0: entered allmulticast mode [ 1697.004130][ T9493] bridge_slave_0: entered promiscuous mode [ 1697.017858][ T9493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.026928][ T9493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.039597][ T9493] bridge_slave_1: entered allmulticast mode [ 1697.048387][ T9493] bridge_slave_1: entered promiscuous mode [ 1697.243059][ T9493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1697.278451][ T9493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1697.438108][ T9493] team0: Port device team_slave_0 added [ 1697.453492][ T36] bridge_slave_1: left allmulticast mode [ 1697.463587][ T36] bridge_slave_1: left promiscuous mode [ 1697.479301][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.525153][ T36] bridge_slave_0: left allmulticast mode [ 1697.544414][ T36] bridge_slave_0: left promiscuous mode [ 1697.555619][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.593377][T15526] Bluetooth: hci4: command tx timeout [ 1698.253527][ T36] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1698.694831][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1698.719062][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1698.730704][ T36] bond0 (unregistering): Released all slaves [ 1698.858489][ T36] bond1 (unregistering): Released all slaves [ 1698.998731][ T36] bond2 (unregistering): Released all slaves [ 1699.037925][ T9493] team0: Port device team_slave_1 added [ 1699.098208][ T9583] netlink: 'syz.3.15446': attribute type 298 has an invalid length. [ 1699.213706][ T9493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1699.242616][ T9493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.300410][ T9493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1699.426492][ T9493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1699.454608][ T9493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.485385][ T9493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1699.670420][T15526] Bluetooth: hci4: command tx timeout [ 1699.815491][ T9493] hsr_slave_0: entered promiscuous mode [ 1699.822027][ T9493] hsr_slave_1: entered promiscuous mode [ 1699.831052][ T9493] debugfs: 'hsr0' already exists in 'hsr' [ 1699.846960][ T9493] Cannot create hsr debugfs directory [ 1699.901577][ T36] hsr_slave_0: left promiscuous mode [ 1699.908090][ T36] hsr_slave_1: left promiscuous mode [ 1699.930312][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1699.959756][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1699.990586][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1699.997969][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1700.050246][ T36] veth1_macvtap: left promiscuous mode [ 1700.065918][ T36] veth0_macvtap: left promiscuous mode [ 1700.086182][ T36] veth1_vlan: left promiscuous mode [ 1700.106308][ T36] veth0_vlan: left promiscuous mode [ 1700.890524][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1700.973129][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1701.752876][T15526] Bluetooth: hci4: command tx timeout [ 1702.765397][ T9493] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1702.820862][ T9493] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1702.924232][ T9493] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1702.985072][ T9493] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1703.242397][ T9493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1703.314519][ T9493] 8021q: adding VLAN 0 to HW filter on device team0 [ 1703.372051][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1703.379193][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1703.433924][T24044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.441055][T24044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1703.558050][ T9493] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1703.598459][ T9493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1703.711068][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15498'. [ 1704.035551][ T9493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1704.144682][ T9493] veth0_vlan: entered promiscuous mode [ 1704.185235][ T9493] veth1_vlan: entered promiscuous mode [ 1704.267623][ T9493] veth0_macvtap: entered promiscuous mode [ 1704.288919][ T9493] veth1_macvtap: entered promiscuous mode [ 1704.345156][ T9493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1704.412332][ T9493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1704.469992][ T9512] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.489879][ T9512] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.521811][ T9512] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.595316][ T9512] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.881848][ T9512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1704.897405][ T9512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.499054][T24044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.510312][T24044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.519789][ T30] audit: type=1800 audit(29045.410:593): pid=9860 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.15529" name="cpuacct.usage_percpu" dev="overlay" ino=3432 res=0 errno=0 [ 1709.466352][ T9512] bridge_slave_1: left allmulticast mode [ 1709.474736][ T9512] bridge_slave_1: left promiscuous mode [ 1709.481076][ T9512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.551600][ T9512] bridge_slave_0: left allmulticast mode [ 1709.557257][ T9512] bridge_slave_0: left promiscuous mode [ 1709.579925][ T9512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1709.785155][ T30] audit: type=1800 audit(29047.680:594): pid=9914 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.15549" name="cpuacct.usage_percpu" dev="overlay" ino=420 res=0 errno=0 [ 1710.050278][ T9512] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1710.851477][ T9512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1710.897433][ T9512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1710.928951][ T9512] bond0 (unregistering): Released all slaves [ 1711.008176][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15560'. [ 1711.181287][ T9512] bond1 (unregistering): Released all slaves [ 1712.025315][ T9512] bond2 (unregistering): Released all slaves [ 1712.288948][ T30] audit: type=1800 audit(29050.180:595): pid=9946 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.15565" name="cpuacct.usage_percpu" dev="overlay" ino=3508 res=0 errno=0 [ 1712.996260][ T9512] hsr_slave_0: left promiscuous mode [ 1713.023128][ T9512] hsr_slave_1: left promiscuous mode [ 1713.041889][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15580'. [ 1713.043022][ T9512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1713.060019][ T9512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1713.090680][ T9512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1713.098071][ T9512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1713.213120][ T9512] veth1_macvtap: left promiscuous mode [ 1713.218653][ T9512] veth0_macvtap: left promiscuous mode [ 1713.249971][ T9512] veth1_vlan: left promiscuous mode [ 1713.255278][ T9512] veth0_vlan: left promiscuous mode [ 1714.439155][ T9512] team0 (unregistering): Port device team_slave_1 removed [ 1714.538439][ T9512] team0 (unregistering): Port device team_slave_0 removed [ 1717.838119][ T30] audit: type=1800 audit(29055.730:596): pid=10053 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.15615" name="cpuacct.usage_percpu" dev="overlay" ino=1031 res=0 errno=0 [ 1722.272367][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 1724.310053][T15526] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1728.942169][T24041] Bluetooth: hci0: Frame reassembly failed (-84) [ 1729.760519][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.768261][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.949050][ T9056] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1729.974347][ T9056] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1729.984162][ T9056] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1729.993418][ T9056] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1730.006616][ T9056] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1730.574268][T10294] chnl_net:caif_netlink_parms(): no params data found [ 1730.793555][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15737'. [ 1730.865253][T10294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.879946][T10294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.892361][T10294] bridge_slave_0: entered allmulticast mode [ 1730.902008][T10294] bridge_slave_0: entered promiscuous mode [ 1730.911007][T10294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.918217][T10294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.939071][T10294] bridge_slave_1: entered allmulticast mode [ 1730.949857][T15526] Bluetooth: hci0: command 0x1003 tx timeout [ 1730.950132][T10294] bridge_slave_1: entered promiscuous mode [ 1730.956039][T27414] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1731.205811][T10294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1731.262901][T10294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1731.309557][ T9512] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.573966][ T9512] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.603801][T10294] team0: Port device team_slave_0 added [ 1731.672106][T10294] team0: Port device team_slave_1 added [ 1731.764460][ T9512] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.874008][T10294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1731.890202][T10294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1731.957718][T10294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1731.998757][ T9512] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.037224][T10294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1732.049766][T10294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1732.069876][T27414] Bluetooth: hci6: command tx timeout [ 1732.199739][T10294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1732.373219][T10294] hsr_slave_0: entered promiscuous mode [ 1732.379605][T10294] hsr_slave_1: entered promiscuous mode [ 1732.684808][ T9512] bridge_slave_1: left allmulticast mode [ 1732.691074][ T9512] bridge_slave_1: left promiscuous mode [ 1732.719973][ T9512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.750528][ T9512] bridge_slave_0: left allmulticast mode [ 1732.756188][ T9512] bridge_slave_0: left promiscuous mode [ 1732.777805][ T9512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.447345][ T9512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1733.473066][ T9512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1733.484360][ T9512] bond0 (unregistering): Released all slaves [ 1733.943491][T10360] overlayfs: failed to resolve './file1/file0': -2 [ 1734.150054][T27414] Bluetooth: hci6: command tx timeout [ 1734.155535][ T9512] hsr_slave_0: left promiscuous mode [ 1734.203179][ T9512] hsr_slave_1: left promiscuous mode [ 1734.209079][ T9512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1734.232224][ T9512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1734.265620][ T9512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1734.302221][ T9512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1734.353149][ T9512] veth1_macvtap: left promiscuous mode [ 1734.358691][ T9512] veth0_macvtap: left promiscuous mode [ 1734.393719][ T9512] veth1_vlan: left promiscuous mode [ 1734.399056][ T9512] veth0_vlan: left promiscuous mode [ 1734.786079][T10397] overlayfs: failed to resolve './file1/file0': -2 [ 1735.497156][T10421] overlayfs: failed to resolve './file1/file0': -2 [ 1735.925299][ T9512] team0 (unregistering): Port device team_slave_1 removed [ 1736.030427][ T9512] team0 (unregistering): Port device team_slave_0 removed [ 1736.229796][T27414] Bluetooth: hci6: command tx timeout [ 1736.582500][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15795'. [ 1737.749312][T10294] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1737.847349][T10294] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1737.930235][T10294] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1737.973941][T10294] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1738.304969][T10294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1738.312235][T27414] Bluetooth: hci6: command tx timeout [ 1738.351828][T10294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1738.371276][ T9512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1738.378369][ T9512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1738.420790][T24044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.427894][T24044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1739.521653][T10294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1739.722100][T10294] veth0_vlan: entered promiscuous mode [ 1739.896822][T10294] veth1_vlan: entered promiscuous mode [ 1739.947334][T10294] veth0_macvtap: entered promiscuous mode [ 1739.991988][T10294] veth1_macvtap: entered promiscuous mode [ 1740.040491][T10294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1740.064213][T10294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1740.201261][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.263116][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.280462][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.315444][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.554098][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.569755][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1741.173412][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1741.209400][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1741.362947][T24041] bridge_slave_1: left allmulticast mode [ 1741.369108][T24041] bridge_slave_1: left promiscuous mode [ 1741.449987][T24041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.537514][T24041] bridge_slave_0: left allmulticast mode [ 1741.555633][T24041] bridge_slave_0: left promiscuous mode [ 1741.574942][T24041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.183704][T24041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1742.210601][T24041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1742.221736][T24041] bond0 (unregistering): Released all slaves [ 1742.425636][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15836'. [ 1743.129788][T24041] hsr_slave_0: left promiscuous mode [ 1743.139749][T24041] hsr_slave_1: left promiscuous mode [ 1743.149934][T24041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1743.157311][T24041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1743.231162][T24041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1743.238881][T24041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1743.340077][T24041] veth1_macvtap: left promiscuous mode [ 1743.345617][T24041] veth0_macvtap: left promiscuous mode [ 1743.368841][T24041] veth1_vlan: left promiscuous mode [ 1743.377517][T24041] veth0_vlan: left promiscuous mode [ 1744.869375][T24041] team0 (unregistering): Port device team_slave_1 removed [ 1744.991860][T24041] team0 (unregistering): Port device team_slave_0 removed [ 1747.901405][ T30] audit: type=1800 audit(29085.800:597): pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.15877" name="cpuacct.usage_percpu" dev="overlay" ino=1414 res=0 errno=0 [ 1749.234957][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15885'. [ 1752.311617][T15526] Bluetooth: hci5: command 0x0406 tx timeout [ 1760.129942][ T30] audit: type=1400 audit(29098.020:598): avc: denied { firmware_load } for pid=10874 comm="syz.2.15970" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1760.640993][T10884] syz.2.15970 (10884) used greatest stack depth: 17704 bytes left [ 1762.629799][T15526] Bluetooth: hci3: command 0x0406 tx timeout [ 1765.211158][T10991] netlink: 'syz.1.16002': attribute type 12 has an invalid length. [ 1765.219116][T10991] netlink: 'syz.1.16002': attribute type 29 has an invalid length. [ 1765.227111][T10991] netlink: 148 bytes leftover after parsing attributes in process `syz.1.16002'. [ 1765.236279][T10991] netlink: 59 bytes leftover after parsing attributes in process `syz.1.16002'. [ 1773.749809][ T30] audit: type=1800 audit(29111.630:599): pid=11162 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.16097" name="cpuacct.usage_percpu" dev="overlay" ino=1728 res=0 errno=0 [ 1774.380867][ T30] audit: type=1800 audit(29112.260:600): pid=11195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.16110" name="cpuacct.usage_percpu" dev="overlay" ino=1322 res=0 errno=0 [ 1776.573918][ T30] audit: type=1400 audit(29114.470:601): avc: denied { getopt } for pid=11267 comm="syz.2.16146" lport=39452 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1777.087067][T11284] loop2: detected capacity change from 0 to 7 [ 1777.118725][T11284] loop2: [ 1777.130047][T11284] loop2: partition table partially beyond EOD, truncated [ 1777.485084][T11293] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16156'. [ 1777.621474][ T30] audit: type=1400 audit(29115.340:602): avc: denied { write } for pid=11290 comm="syz.3.16156" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1778.042686][ T30] audit: type=1400 audit(29115.340:603): avc: denied { open } for pid=11290 comm="syz.3.16156" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1778.153220][ T30] audit: type=1400 audit(29115.350:604): avc: denied { ioctl } for pid=11290 comm="syz.3.16156" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1779.266634][T11318] ------------[ cut here ]------------ [ 1779.272648][T11318] WARNING: CPU: 1 PID: 11318 at fs/exec.c:118 path_noexec+0x1ca/0x230 [ 1779.281162][T11318] Modules linked in: [ 1779.285258][T11318] CPU: 1 UID: 0 PID: 11318 Comm: syz.0.16164 Not tainted syzkaller #0 PREEMPT(full) [ 1779.295038][T11318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1779.305367][T11318] RIP: 0010:path_noexec+0x1ca/0x230 [ 1779.310879][T11318] Code: ff 83 e3 02 48 89 de e8 a4 16 83 ff 48 85 db 41 0f 95 c4 e8 28 1b 83 ff 44 89 e0 5b 5d 41 5c c3 cc cc cc cc e8 17 1b 83 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 09 ba eb ff e9 a8 fe ff ff e8 ff b9 eb [ 1779.331845][T11318] RSP: 0018:ffffc9000d2ffc60 EFLAGS: 00010287 [ 1779.337932][T11318] RAX: 00000000000000d2 RBX: ffff88801e2c2720 RCX: ffffc9000e2c9000 [ 1779.347953][T11318] RDX: 0000000000080000 RSI: ffffffff8239cdb9 RDI: 0000000000000007 [ 1779.356340][T11318] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1779.364526][T11318] R10: 0000000000000000 R11: 0000000000000001 R12: 0000200000000000 [ 1779.372558][T11318] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 1779.380567][T11318] FS: 00007f5c0b1d36c0(0000) GS:ffff888124b06000(0000) knlGS:0000000000000000 [ 1779.389499][T11318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1779.396322][T11318] CR2: 00007f5c0b1d2f98 CR3: 000000008cdf3000 CR4: 00000000003526f0 [ 1779.404532][T11318] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1779.412587][T11318] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1779.420588][T11318] Call Trace: [ 1779.423871][T11318] [ 1779.426796][T11318] do_mmap+0xd23/0x1210 [ 1779.432028][T11318] ? __pfx_do_mmap+0x10/0x10 [ 1779.436630][T11318] ? __pfx_down_write_killable+0x10/0x10 [ 1779.443227][T11318] vm_mmap_pgoff+0x29e/0x470 [ 1779.447836][T11318] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1779.453015][T11318] ? __fget_files+0x20e/0x3c0 [ 1779.457701][T11318] ksys_mmap_pgoff+0x32c/0x5c0 [ 1779.462511][T11318] __x64_sys_mmap+0x125/0x190 [ 1779.467192][T11318] do_syscall_64+0xcd/0xfa0 [ 1779.471753][T11318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.477645][T11318] RIP: 0033:0x7f5c0a38f6c9 [ 1779.482091][T11318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1779.501778][T11318] RSP: 002b:00007f5c0b1d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1779.510399][T11318] RAX: ffffffffffffffda RBX: 00007f5c0a5e5fa0 RCX: 00007f5c0a38f6c9 [ 1779.518378][T11318] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 1779.526419][T11318] RBP: 00007f5c0a411f91 R08: 0000000000000005 R09: 0000000000000000 [ 1779.535415][T11318] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1779.544233][T11318] R13: 00007f5c0a5e6038 R14: 00007f5c0a5e5fa0 R15: 00007ffee257f958 [ 1779.552262][T11318] [ 1779.555285][T11318] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1779.562792][T11318] CPU: 1 UID: 0 PID: 11318 Comm: syz.0.16164 Not tainted syzkaller #0 PREEMPT(full) [ 1779.572246][T11318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1779.582283][T11318] Call Trace: [ 1779.585554][T11318] [ 1779.588557][T11318] dump_stack_lvl+0x3d/0x1f0 [ 1779.593140][T11318] vpanic+0x640/0x6f0 [ 1779.597112][T11318] ? path_noexec+0x1ca/0x230 [ 1779.601684][T11318] panic+0xca/0xd0 [ 1779.605392][T11318] ? __pfx_panic+0x10/0x10 [ 1779.609809][T11318] check_panic_on_warn+0xab/0xb0 [ 1779.614736][T11318] __warn+0xf6/0x3c0 [ 1779.618611][T11318] ? path_noexec+0x1ca/0x230 [ 1779.623183][T11318] report_bug+0x3c3/0x580 [ 1779.627504][T11318] ? path_noexec+0x1ca/0x230 [ 1779.632073][T11318] handle_bug+0x184/0x210 [ 1779.636398][T11318] exc_invalid_op+0x17/0x50 [ 1779.640886][T11318] asm_exc_invalid_op+0x1a/0x20 [ 1779.645721][T11318] RIP: 0010:path_noexec+0x1ca/0x230 [ 1779.650901][T11318] Code: ff 83 e3 02 48 89 de e8 a4 16 83 ff 48 85 db 41 0f 95 c4 e8 28 1b 83 ff 44 89 e0 5b 5d 41 5c c3 cc cc cc cc e8 17 1b 83 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 09 ba eb ff e9 a8 fe ff ff e8 ff b9 eb [ 1779.670491][T11318] RSP: 0018:ffffc9000d2ffc60 EFLAGS: 00010287 [ 1779.676539][T11318] RAX: 00000000000000d2 RBX: ffff88801e2c2720 RCX: ffffc9000e2c9000 [ 1779.684492][T11318] RDX: 0000000000080000 RSI: ffffffff8239cdb9 RDI: 0000000000000007 [ 1779.692449][T11318] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1779.700403][T11318] R10: 0000000000000000 R11: 0000000000000001 R12: 0000200000000000 [ 1779.708354][T11318] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 1779.716311][T11318] ? path_noexec+0x1c9/0x230 [ 1779.720891][T11318] do_mmap+0xd23/0x1210 [ 1779.725038][T11318] ? __pfx_do_mmap+0x10/0x10 [ 1779.729613][T11318] ? __pfx_down_write_killable+0x10/0x10 [ 1779.735235][T11318] vm_mmap_pgoff+0x29e/0x470 [ 1779.739821][T11318] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1779.744938][T11318] ? __fget_files+0x20e/0x3c0 [ 1779.749605][T11318] ksys_mmap_pgoff+0x32c/0x5c0 [ 1779.754354][T11318] __x64_sys_mmap+0x125/0x190 [ 1779.759019][T11318] do_syscall_64+0xcd/0xfa0 [ 1779.763507][T11318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.769387][T11318] RIP: 0033:0x7f5c0a38f6c9 [ 1779.773790][T11318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1779.793380][T11318] RSP: 002b:00007f5c0b1d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1779.801785][T11318] RAX: ffffffffffffffda RBX: 00007f5c0a5e5fa0 RCX: 00007f5c0a38f6c9 [ 1779.809749][T11318] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 1779.817712][T11318] RBP: 00007f5c0a411f91 R08: 0000000000000005 R09: 0000000000000000 [ 1779.825676][T11318] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1779.833634][T11318] R13: 00007f5c0a5e6038 R14: 00007f5c0a5e5fa0 R15: 00007ffee257f958 [ 1779.841602][T11318] [ 1779.844831][T11318] Kernel Offset: disabled [ 1779.849133][T11318] Rebooting in 86400 seconds..