last executing test programs: 5.912278166s ago: executing program 0 (id=8483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 5.798705176s ago: executing program 1 (id=8485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) 5.75843371s ago: executing program 3 (id=8487): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffff9}, 0x50) 5.655682968s ago: executing program 1 (id=8489): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000047eda44bed10a4acffffffffff70123200000000009500000000000081b9a728676f452af4e51fc849f79e3bc97e31f71eb30df975f452fdfa4cabb7289c88d03a05eaf8601acbdb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x13240, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="08f272f808af"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 5.293950691s ago: executing program 3 (id=8490): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000000}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.046513383s ago: executing program 3 (id=8491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000001c0)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.898164623s ago: executing program 1 (id=8493): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="06000000040000000300000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, r0, 0x0, 0x7}, 0x38) 2.81926825s ago: executing program 0 (id=8494): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18080000000000000000000000000000180400002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000090000008500000006000000"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a) 2.744024797s ago: executing program 2 (id=8495): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB="39170000728304", @ANYRES32=0x0], 0x50) 2.743673547s ago: executing program 1 (id=8496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'lo\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'wg0\x00', 0x200}) 2.647859295s ago: executing program 0 (id=8497): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x31}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 2.621085447s ago: executing program 2 (id=8499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.540125915s ago: executing program 0 (id=8500): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.532200856s ago: executing program 0 (id=8501): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5c6fa8aec5e2d98b, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11368}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xfffffffffffffe1e, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) 2.48455664s ago: executing program 2 (id=8502): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000047eda44bed10a4acffffffffff70123200000000009500000000000081b9a728676f452af4e51fc849f79e3bc97e31f71eb30df975f452fdfa4cabb7289c88d03a05eaf8601acbdb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x13240, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="08f272f808af"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 415.567203ms ago: executing program 2 (id=8503): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x1, 0x524, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0x9}, 0x4041, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 391.115696ms ago: executing program 0 (id=8504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 307.958833ms ago: executing program 3 (id=8505): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e700000000f008001ffff2e1ffff8100", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 281.457125ms ago: executing program 1 (id=8506): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18080000000000000000000000000000180400002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a) 257.983477ms ago: executing program 3 (id=8507): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xf, 0x0, &(0x7f0000000300)="178d0486ace9abe3b326fa2704797c", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 199.534672ms ago: executing program 2 (id=8508): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1, 0x0, 0xa, 0x5, 0x0, 0x1081, 0xe712935f15062d4d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x1000000000000000, 0x3ad6}, 0x40, 0x8, 0x20, 0x0, 0x4, 0xffff0000, 0x7f, 0x0, 0xfffffffd, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 121.496849ms ago: executing program 2 (id=8509): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 61.202705ms ago: executing program 1 (id=8510): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 0s ago: executing program 3 (id=8511): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001680)={{r0}, &(0x7f0000001600), &(0x7f0000001640)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): 801.670558][T17823] netlink: 11774 bytes leftover after parsing attributes in process `syz.1.4566'. [ 802.460179][T17847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 802.701406][T17853] netlink: 11774 bytes leftover after parsing attributes in process `syz.2.4578'. [ 803.815467][T17875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.895931][T17878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.021877][T17883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.047210][T17885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.359480][T17894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.412342][T17895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.585237][T17904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.170638][T17922] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.4603'. [ 805.249051][T17924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.480384][T17929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.536561][T17931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.944519][T17937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.079313][T17941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.885312][T17955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.052274][T17967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.192570][T17971] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.4621'. [ 809.057181][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.063817][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.108380][T17999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.183802][T18002] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4633'. [ 809.192288][T18004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.569423][T18015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.659762][T18019] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4639'. [ 809.860108][T18028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 810.929109][T18042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 811.225892][T18056] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4650'. [ 811.700741][T18072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 811.951609][T18084] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4660'. [ 812.861325][T18112] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4668'. [ 813.125106][T18122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.157641][T18127] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.4675'. [ 814.159675][T18161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.368971][T18169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.109915][T18224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.444360][T18239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.637819][T18246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.894322][T18258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.198892][T18270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.317108][T18274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.455052][T18279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.658853][T18314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.054245][T18329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.329728][T18337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.468070][T18343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.813242][T18361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 820.446515][T18373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 820.987729][T18396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 821.066194][T18392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 821.187213][T18401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.576928][T18433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.602920][T18431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.763986][T18442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.882869][T18446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.499786][T18467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.901948][T18471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.271947][T18476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.322460][T18480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.351350][T18478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.461045][T18484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.070219][T18508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.212500][T18515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.325276][T18520] netlink: 'syz.1.4819': attribute type 29 has an invalid length. [ 827.349145][T18520] netlink: 'syz.1.4819': attribute type 29 has an invalid length. [ 827.371141][T18520] netlink: 'syz.1.4819': attribute type 29 has an invalid length. [ 827.404222][T18520] netlink: 'syz.1.4819': attribute type 29 has an invalid length. [ 827.464180][T18520] netlink: 'syz.1.4819': attribute type 29 has an invalid length. [ 828.349824][T18558] netlink: 'syz.2.4833': attribute type 29 has an invalid length. [ 828.358728][T18558] netlink: 'syz.2.4833': attribute type 29 has an invalid length. [ 828.377271][T18558] netlink: 'syz.2.4833': attribute type 29 has an invalid length. [ 828.404565][T18558] netlink: 'syz.2.4833': attribute type 29 has an invalid length. [ 828.415228][T18558] netlink: 'syz.2.4833': attribute type 29 has an invalid length. [ 829.385343][T18598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.409374][T18633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.799991][T18640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 831.427499][T18669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.234646][T18694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.592323][T18704] validate_nla: 38 callbacks suppressed [ 832.592356][T18704] netlink: 'syz.0.4895': attribute type 29 has an invalid length. [ 832.625080][T18704] netlink: 'syz.0.4895': attribute type 29 has an invalid length. [ 832.655722][T18704] netlink: 'syz.0.4895': attribute type 29 has an invalid length. [ 832.671085][T18704] netlink: 'syz.0.4895': attribute type 29 has an invalid length. [ 832.693357][T18704] netlink: 'syz.0.4895': attribute type 29 has an invalid length. [ 832.729109][T18709] netlink: 'syz.3.4897': attribute type 29 has an invalid length. [ 832.754959][T18709] netlink: 'syz.3.4897': attribute type 29 has an invalid length. [ 832.794148][T18709] netlink: 'syz.3.4897': attribute type 29 has an invalid length. [ 832.837075][T18709] netlink: 'syz.3.4897': attribute type 29 has an invalid length. [ 832.907909][T18709] netlink: 'syz.3.4897': attribute type 29 has an invalid length. [ 833.338214][T18734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.296014][T18786] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4932'. [ 835.305588][T18786] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.4932'. [ 836.458548][T18826] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4939'. [ 836.470153][T18826] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.4939'. [ 836.935892][T18844] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.4949'. [ 836.953780][T18844] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.4949'. [ 836.971965][T18844] tipc: Started in network mode [ 836.978159][T18844] tipc: Node identity b, cluster identity 73 [ 836.985304][T18844] tipc: Node number set to 11 [ 837.212897][T18857] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4954'. [ 837.230144][T18857] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.4954'. [ 837.691768][T18872] validate_nla: 51 callbacks suppressed [ 837.691816][T18872] netlink: 'syz.2.4959': attribute type 29 has an invalid length. [ 837.747814][T18872] netlink: 'syz.2.4959': attribute type 29 has an invalid length. [ 837.757766][T18876] netlink: 'syz.2.4959': attribute type 29 has an invalid length. [ 837.846952][T18878] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4961'. [ 837.865421][T18878] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.4961'. [ 838.324278][T18904] netlink: 'syz.2.4973': attribute type 29 has an invalid length. [ 838.332937][T18904] netlink: 'syz.2.4973': attribute type 29 has an invalid length. [ 838.343960][T18904] netlink: 'syz.2.4973': attribute type 29 has an invalid length. [ 838.476008][T18911] netlink: 'syz.2.4975': attribute type 29 has an invalid length. [ 838.505337][T18911] netlink: 'syz.2.4975': attribute type 29 has an invalid length. [ 838.530139][T18911] netlink: 'syz.2.4975': attribute type 29 has an invalid length. [ 838.541985][T18911] netlink: 'syz.2.4975': attribute type 29 has an invalid length. [ 839.571267][T18945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 842.737639][T19072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 842.846839][T19078] validate_nla: 96 callbacks suppressed [ 842.846881][T19078] netlink: 'syz.1.5047': attribute type 29 has an invalid length. [ 842.869600][T19078] netlink: 'syz.1.5047': attribute type 29 has an invalid length. [ 842.893733][T19078] netlink: 'syz.1.5047': attribute type 29 has an invalid length. [ 842.915591][T19078] netlink: 'syz.1.5047': attribute type 29 has an invalid length. [ 842.932724][T19078] netlink: 'syz.1.5047': attribute type 29 has an invalid length. [ 843.047722][T19084] netlink: 'syz.2.5051': attribute type 29 has an invalid length. [ 843.076612][T19084] netlink: 'syz.2.5051': attribute type 29 has an invalid length. [ 843.096877][T19089] netlink: 'syz.2.5051': attribute type 29 has an invalid length. [ 843.132565][T19084] netlink: 'syz.2.5051': attribute type 29 has an invalid length. [ 843.149727][T19084] netlink: 'syz.2.5051': attribute type 29 has an invalid length. [ 844.817798][T19171] __nla_validate_parse: 4 callbacks suppressed [ 844.817818][T19171] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.5091'. [ 844.866041][T19171] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.5091'. [ 846.132208][T19218] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.5111'. [ 846.150660][T19218] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.5111'. [ 846.315919][T19226] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.5117'. [ 846.333708][T19226] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.5117'. [ 847.577150][T19261] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.5129'. [ 847.603605][T19261] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.5129'. [ 847.925328][T19277] validate_nla: 50 callbacks suppressed [ 847.925365][T19277] netlink: 'syz.2.5136': attribute type 29 has an invalid length. [ 847.954915][T19277] netlink: 'syz.2.5136': attribute type 29 has an invalid length. [ 847.975333][T19277] netlink: 'syz.2.5136': attribute type 29 has an invalid length. [ 847.997810][T19277] netlink: 'syz.2.5136': attribute type 29 has an invalid length. [ 848.015808][T19277] netlink: 'syz.2.5136': attribute type 29 has an invalid length. [ 848.834175][T19293] netlink: 'syz.1.5143': attribute type 29 has an invalid length. [ 848.843311][T19293] netlink: 'syz.1.5143': attribute type 29 has an invalid length. [ 848.857038][T19293] netlink: 'syz.1.5143': attribute type 29 has an invalid length. [ 848.878857][T19293] netlink: 'syz.1.5143': attribute type 29 has an invalid length. [ 848.906202][T19293] netlink: 'syz.1.5143': attribute type 29 has an invalid length. [ 849.230589][T19307] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.5148'. [ 849.241025][T19307] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.5148'. [ 850.569967][T19345] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.5164'. [ 850.580413][T19345] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.5164'. [ 852.005438][T19406] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.5192'. [ 852.027268][T19406] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.5192'. [ 856.398050][T19591] validate_nla: 20 callbacks suppressed [ 856.398086][T19591] netlink: 'syz.1.5270': attribute type 29 has an invalid length. [ 856.416226][T19591] netlink: 'syz.1.5270': attribute type 29 has an invalid length. [ 856.432548][T19591] netlink: 'syz.1.5270': attribute type 29 has an invalid length. [ 856.448159][T19591] netlink: 'syz.1.5270': attribute type 29 has an invalid length. [ 856.461383][T19591] netlink: 'syz.1.5270': attribute type 29 has an invalid length. [ 856.812856][T19606] netlink: 'syz.1.5277': attribute type 29 has an invalid length. [ 856.833282][T19606] netlink: 'syz.1.5277': attribute type 29 has an invalid length. [ 856.864806][T19606] netlink: 'syz.1.5277': attribute type 29 has an invalid length. [ 856.880170][T19606] netlink: 'syz.1.5277': attribute type 29 has an invalid length. [ 856.899010][T19606] netlink: 'syz.1.5277': attribute type 29 has an invalid length. [ 861.873464][T19798] validate_nla: 70 callbacks suppressed [ 861.873504][T19798] netlink: 'syz.3.5353': attribute type 29 has an invalid length. [ 861.887929][T19798] netlink: 'syz.3.5353': attribute type 29 has an invalid length. [ 861.900876][T19798] netlink: 'syz.3.5353': attribute type 29 has an invalid length. [ 861.912983][T19798] netlink: 'syz.3.5353': attribute type 29 has an invalid length. [ 861.924858][T19798] netlink: 'syz.3.5353': attribute type 29 has an invalid length. [ 862.031365][T19802] netlink: 'syz.0.5355': attribute type 29 has an invalid length. [ 862.041884][T19802] netlink: 'syz.0.5355': attribute type 29 has an invalid length. [ 862.060097][T19802] netlink: 'syz.0.5355': attribute type 29 has an invalid length. [ 862.075242][T19802] netlink: 'syz.0.5355': attribute type 29 has an invalid length. [ 862.089772][T19802] netlink: 'syz.0.5355': attribute type 29 has an invalid length. [ 869.429465][T20060] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5459'. [ 870.273970][T20060] caif0: entered promiscuous mode [ 870.279058][T20060] caif0: entered allmulticast mode [ 870.329085][T20064] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5461'. [ 870.521289][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.527753][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.954018][T20064] caif0: entered promiscuous mode [ 870.967545][T20064] caif0: entered allmulticast mode [ 872.035672][T20111] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5478'. [ 872.184774][T20111] caif0: entered promiscuous mode [ 872.199736][T20111] caif0: entered allmulticast mode [ 872.785149][T20124] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5481'. [ 873.286182][T20124] caif0: entered promiscuous mode [ 873.305277][T20124] caif0: entered allmulticast mode [ 873.684241][T20154] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5490'. [ 874.222631][T20170] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5498'. [ 874.748523][T20186] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5501'. [ 875.086726][T20195] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5505'. [ 876.486895][T20221] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5513'. [ 877.160022][T20236] validate_nla: 5 callbacks suppressed [ 877.160060][T20236] netlink: 'syz.1.5522': attribute type 10 has an invalid length. [ 877.175882][T20236] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5522'. [ 877.682325][T20258] netlink: 'syz.3.5531': attribute type 10 has an invalid length. [ 877.703427][T20258] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5531'. [ 877.807852][T20262] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5534'. [ 878.054829][T20274] netlink: 'syz.3.5539': attribute type 10 has an invalid length. [ 878.063313][T20274] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5539'. [ 878.541847][T20294] netlink: 'syz.2.5546': attribute type 10 has an invalid length. [ 878.551721][T20294] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5546'. [ 878.617751][T20296] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5547'. [ 878.793123][T20304] netlink: 'syz.2.5554': attribute type 10 has an invalid length. [ 878.806709][T20304] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5554'. [ 878.935090][T20309] netlink: 'syz.3.5557': attribute type 10 has an invalid length. [ 879.301543][T20323] netlink: 'syz.0.5564': attribute type 10 has an invalid length. [ 879.346966][T20329] netlink: 'syz.2.5567': attribute type 10 has an invalid length. [ 879.443620][T20333] netlink: 'syz.0.5569': attribute type 10 has an invalid length. [ 879.991379][T20354] __nla_validate_parse: 5 callbacks suppressed [ 879.991415][T20354] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5580'. [ 880.056468][T20360] netlink: 'syz.1.5581': attribute type 10 has an invalid length. [ 880.064791][T20360] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5581'. [ 880.687289][T20385] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5592'. [ 880.926313][T20396] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5596'. [ 881.431750][T20417] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5613'. [ 881.599589][T20424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5607'. [ 881.909338][T20429] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5610'. [ 882.038590][T20433] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5612'. [ 882.146579][T20437] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5615'. [ 882.201488][T20439] validate_nla: 3 callbacks suppressed [ 882.201528][T20439] netlink: 'syz.1.5616': attribute type 10 has an invalid length. [ 882.223768][T20439] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5616'. [ 883.056573][T20458] netlink: 'syz.2.5623': attribute type 10 has an invalid length. [ 883.946087][T20489] netlink: 'syz.1.5635': attribute type 10 has an invalid length. [ 883.969025][T20493] netlink: 'syz.0.5636': attribute type 10 has an invalid length. [ 884.103414][T20498] netlink: 'syz.2.5639': attribute type 10 has an invalid length. [ 884.509558][T20512] netlink: 'syz.2.5644': attribute type 10 has an invalid length. [ 884.871203][T20523] netlink: 'syz.2.5650': attribute type 10 has an invalid length. [ 885.030228][T20527] netlink: 'syz.0.5651': attribute type 10 has an invalid length. [ 885.050045][T20527] __nla_validate_parse: 13 callbacks suppressed [ 885.050088][T20527] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5651'. [ 885.154592][T20532] netlink: 'syz.1.5654': attribute type 10 has an invalid length. [ 885.173411][T20532] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5654'. [ 885.202371][T20535] netlink: 'syz.3.5655': attribute type 10 has an invalid length. [ 885.212475][T20535] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5655'. [ 885.456558][T20543] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5661'. [ 885.540067][T20552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5660'. [ 886.011389][T20562] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5668'. [ 886.039029][T20562] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5668'. [ 886.170256][T20565] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5669'. [ 886.213113][T20565] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5669'. [ 886.472275][T20577] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5675'. [ 887.305948][T20610] validate_nla: 3 callbacks suppressed [ 887.305986][T20610] netlink: 'syz.0.5697': attribute type 10 has an invalid length. [ 887.482899][T20616] netlink: 'syz.3.5691': attribute type 10 has an invalid length. [ 887.574869][T20620] netlink: 'syz.0.5693': attribute type 10 has an invalid length. [ 887.713408][T20623] netlink: 'syz.3.5694': attribute type 10 has an invalid length. [ 887.827046][T20628] netlink: 'syz.0.5696': attribute type 10 has an invalid length. [ 887.968829][T20632] netlink: 'syz.3.5699': attribute type 10 has an invalid length. [ 888.124093][T20640] netlink: 'syz.3.5703': attribute type 10 has an invalid length. [ 888.298795][T20647] netlink: 'syz.1.5706': attribute type 10 has an invalid length. [ 888.680938][T20663] netlink: 'syz.0.5712': attribute type 10 has an invalid length. [ 888.741206][T20665] netlink: 'syz.1.5713': attribute type 10 has an invalid length. [ 890.060735][T20714] __nla_validate_parse: 35 callbacks suppressed [ 890.060773][T20714] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5732'. [ 890.126622][T20717] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5735'. [ 890.169192][T20717] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5735'. [ 890.447842][T20723] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5739'. [ 890.499131][T20723] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5739'. [ 890.713289][T20730] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 890.728341][T20730] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 890.745124][T20730] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 890.754448][T20730] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 890.763329][T20730] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 890.773957][T20730] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 890.829156][ T8525] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.016499][ T8525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.183083][ T8525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.230862][T20745] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5747'. [ 891.282579][ T8525] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.303968][T20727] chnl_net:caif_netlink_parms(): no params data found [ 891.323416][T20745] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5747'. [ 891.503718][T20727] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.510989][T20727] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.523776][T20727] bridge_slave_0: entered allmulticast mode [ 891.531029][T20727] bridge_slave_0: entered promiscuous mode [ 891.544255][T20727] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.551424][T20727] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.558878][T20727] bridge_slave_1: entered allmulticast mode [ 891.566268][T20727] bridge_slave_1: entered promiscuous mode [ 891.687531][T20727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.723128][T20761] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5752'. [ 891.745620][T20727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.812246][ T8525] tipc: Left network mode [ 891.852945][T20727] team0: Port device team_slave_0 added [ 891.876596][T20727] team0: Port device team_slave_1 added [ 892.033129][T20727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.046430][T20727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.078092][T20727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.194180][T20727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.207562][T20727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.259796][T20727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.591994][T20727] hsr_slave_0: entered promiscuous mode [ 892.619595][T20727] hsr_slave_1: entered promiscuous mode [ 892.903949][T20730] Bluetooth: hci2: command tx timeout [ 893.649421][T20808] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5760'. [ 894.311265][T20823] validate_nla: 12 callbacks suppressed [ 894.311300][T20823] netlink: 'syz.0.5767': attribute type 10 has an invalid length. [ 894.328232][T20823] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5767'. [ 894.374618][T20827] netlink: 'syz.3.5768': attribute type 10 has an invalid length. [ 894.596975][T20836] netlink: 'syz.0.5769': attribute type 10 has an invalid length. [ 894.785016][T20727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 894.906409][T20727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 894.917152][T20727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 894.938472][T20842] netlink: 'syz.3.5771': attribute type 10 has an invalid length. [ 894.949577][T20727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 894.974027][T20730] Bluetooth: hci2: command tx timeout [ 895.082067][T20856] netlink: 'syz.1.5775': attribute type 29 has an invalid length. [ 895.135541][ T8525] veth0_macvtap: left promiscuous mode [ 897.063648][T20730] Bluetooth: hci2: command tx timeout [ 897.434710][ T8525] team_slave_1 (unregistering): left promiscuous mode [ 897.442094][ T8525] team_slave_1 (unregistering): left allmulticast mode [ 897.452972][ T8525] ` (unregistering): Port device team_slave_1 removed [ 897.499066][ T8525] C (unregistering): left promiscuous mode [ 897.506727][ T8525] C (unregistering): left allmulticast mode [ 897.515966][ T8525] ` (unregistering): Port device C removed [ 897.861100][T20856] netlink: 'syz.1.5775': attribute type 29 has an invalid length. [ 897.874308][T20864] netlink: 'syz.0.5774': attribute type 10 has an invalid length. [ 897.882261][T20864] __nla_validate_parse: 6 callbacks suppressed [ 897.882275][T20864] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5774'. [ 897.900708][T20870] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5774'. [ 898.189600][T20727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.222886][T20879] netlink: 'syz.0.5779': attribute type 10 has an invalid length. [ 898.278736][T20879] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5779'. [ 898.320573][T20727] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.368072][T20872] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.376518][T20872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.413736][ T8511] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.420890][ T8511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.463757][T20879] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5779'. [ 898.641880][T20727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 898.956826][T20727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.085463][T20914] netlink: 'syz.1.5784': attribute type 10 has an invalid length. [ 899.109847][T20914] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5784'. [ 899.131516][T20727] veth0_vlan: entered promiscuous mode [ 899.140512][T20730] Bluetooth: hci2: command tx timeout [ 899.172010][T20727] veth1_vlan: entered promiscuous mode [ 899.233062][T20727] veth0_macvtap: entered promiscuous mode [ 899.245228][T20727] veth1_macvtap: entered promiscuous mode [ 899.267412][T20727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.289935][T20727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.317092][T20727] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.340057][T20727] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.354010][T20727] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.373480][T20727] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.415304][T20926] netlink: 'syz.0.5787': attribute type 10 has an invalid length. [ 899.425174][T20926] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5787'. [ 899.455674][T20925] netlink: 'syz.1.5789': attribute type 10 has an invalid length. [ 899.470181][T20925] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5789'. [ 899.569783][T20925] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5789'. [ 899.581837][T20918] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5787'. [ 899.634330][T20872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.642465][T20872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.720963][ T8500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.755023][ T8500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.861850][T20935] netlink: 'syz.3.5799': attribute type 10 has an invalid length. [ 899.895187][T20935] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5799'. [ 900.048588][T20947] netlink: 'syz.2.5737': attribute type 10 has an invalid length. [ 900.525778][T20953] netlink: 'syz.3.5796': attribute type 10 has an invalid length. [ 900.734830][ T5084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 900.745476][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 900.761470][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 900.785424][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 900.804438][ T5084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 900.811971][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 900.866343][T20962] netlink: 'syz.0.5801': attribute type 10 has an invalid length. [ 900.972088][T20964] netlink: 'syz.2.5798': attribute type 10 has an invalid length. [ 901.025700][T20966] netlink: 'syz.3.5800': attribute type 10 has an invalid length. [ 901.151380][T20973] netlink: 'syz.2.5803': attribute type 29 has an invalid length. [ 901.190301][T20973] netlink: 'syz.2.5803': attribute type 29 has an invalid length. [ 901.235558][T20958] chnl_net:caif_netlink_parms(): no params data found [ 901.451708][T20958] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.479620][T20958] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.492041][T20958] bridge_slave_0: entered allmulticast mode [ 901.499854][T20958] bridge_slave_0: entered promiscuous mode [ 901.513400][T20958] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.525037][T20958] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.532534][T20958] bridge_slave_1: entered allmulticast mode [ 901.549217][T20958] bridge_slave_1: entered promiscuous mode [ 901.627161][T20958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.652528][T20958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.697861][T20958] team0: Port device team_slave_0 added [ 901.727959][T20958] team0: Port device team_slave_1 added [ 901.759957][T20958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.767195][T20958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.813794][T20958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.841198][T20958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.851234][T20958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.879726][T20958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.937231][T20958] hsr_slave_0: entered promiscuous mode [ 901.945618][T20958] hsr_slave_1: entered promiscuous mode [ 901.952813][T20958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 901.963054][T20958] Cannot create hsr debugfs directory [ 902.211152][T20958] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.320210][T20958] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.419404][T20958] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.690525][ T8500] tipc: Left network mode [ 902.762088][T20958] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 902.780139][T20958] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 902.854505][T20958] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 902.880285][T20958] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 902.898042][ T5084] Bluetooth: hci4: command tx timeout [ 902.987781][T21023] __nla_validate_parse: 20 callbacks suppressed [ 902.987821][T21023] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5823'. [ 903.196483][T21038] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5825'. [ 903.218619][T21039] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5827'. [ 903.314465][T21039] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5827'. [ 903.369129][T21038] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5825'. [ 903.488740][T21045] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5829'. [ 903.541031][T20958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.567742][ T8500] gretap0 (unregistering): left allmulticast mode [ 903.574880][ T8500] gretap0 (unregistering): left promiscuous mode [ 903.582292][ T8500] Ÿë: port 1(gretap0) entered disabled state [ 903.613326][T20958] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.622303][T21045] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5829'. [ 903.671748][ T8511] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.678981][ T8511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.758599][ T8511] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.765924][ T8511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.839011][T21051] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5831'. [ 904.107074][T21058] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5833'. [ 904.166408][T21058] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5833'. [ 904.265446][T20958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.419736][T20958] veth0_vlan: entered promiscuous mode [ 904.483005][T20958] veth1_vlan: entered promiscuous mode [ 904.613176][T20958] veth0_macvtap: entered promiscuous mode [ 904.636631][T20958] veth1_macvtap: entered promiscuous mode [ 904.679554][ T8500] veth0_to_team: left allmulticast mode [ 904.693241][ T8500] veth0_to_team: left promiscuous mode [ 904.701203][ T8500] Ÿë: port 2(veth0_to_team) entered disabled state [ 904.759974][ T8500] veth1_macvtap: left promiscuous mode [ 904.767756][ T8500] veth0_macvtap: left promiscuous mode [ 904.773320][ T8500] veth1_vlan: left allmulticast mode [ 904.781696][ T8500] veth1_vlan: left promiscuous mode [ 904.787666][ T8500] ªªªªª»ÿÿ: left promiscuous mode [ 904.984022][ T5084] Bluetooth: hci4: command tx timeout [ 907.070585][ T5084] Bluetooth: hci4: command tx timeout [ 907.578364][T21077] validate_nla: 15 callbacks suppressed [ 907.578381][T21077] netlink: 'syz.0.5837': attribute type 10 has an invalid length. [ 907.636916][T20958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.663656][T20958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.676276][T20958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.691240][T20958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.713606][T20958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.728960][T20958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.767303][T20958] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.779578][T20958] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.790546][T20958] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.802172][T20958] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.075578][ T8502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.102407][ T8502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.160600][ T8525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.172061][T21091] netlink: 'syz.3.5843': attribute type 10 has an invalid length. [ 908.194124][ T8525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.211008][T21091] __nla_validate_parse: 2 callbacks suppressed [ 908.211047][T21091] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5843'. [ 908.255701][T21091] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5843'. [ 908.457256][T21101] netlink: 'syz.1.5793': attribute type 10 has an invalid length. [ 908.485840][T21101] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5793'. [ 908.599183][T21101] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5793'. [ 909.134247][ T5084] Bluetooth: hci4: command tx timeout [ 909.169508][ T8511] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.202498][T20730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 909.213390][T20730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 909.222026][T20730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 909.231896][T20730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 909.243605][T20730] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 909.251916][T20730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 909.360136][T21132] netlink: 'syz.3.5862': attribute type 29 has an invalid length. [ 909.392500][ T8511] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.439838][T21132] netlink: 'syz.3.5862': attribute type 29 has an invalid length. [ 909.485790][ T8511] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.509277][T21135] netlink: 'syz.3.5862': attribute type 29 has an invalid length. [ 909.710276][T21149] netlink: 'syz.3.5868': attribute type 10 has an invalid length. [ 909.950647][T21123] chnl_net:caif_netlink_parms(): no params data found [ 910.139533][T21123] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.147082][T21123] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.155042][T21123] bridge_slave_0: entered allmulticast mode [ 910.162720][T21123] bridge_slave_0: entered promiscuous mode [ 910.173285][T21123] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.181126][T21123] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.192317][T21123] bridge_slave_1: entered allmulticast mode [ 910.203464][T21123] bridge_slave_1: entered promiscuous mode [ 910.243076][T21123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.257205][T21123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.732577][T21123] team0: Port device team_slave_0 added [ 910.799329][T21123] team0: Port device team_slave_1 added [ 910.880018][T21182] netlink: 'syz.2.5879': attribute type 21 has an invalid length. [ 910.964932][T21123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.972753][T21123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.999207][T21123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.060308][T21123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.068517][T21123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.095109][T21123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.110367][T21189] dummy0: entered allmulticast mode [ 911.135611][ T8511] tipc: Left network mode [ 911.297890][T20730] Bluetooth: hci0: command tx timeout [ 911.394931][T21123] hsr_slave_0: entered promiscuous mode [ 911.424378][T21123] hsr_slave_1: entered promiscuous mode [ 911.440338][T21123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 911.460613][T21123] Cannot create hsr debugfs directory [ 911.976125][T21232] IPv6: Can't replace route, no match found [ 912.776409][T21123] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 912.787589][T21123] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 912.803735][T21123] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 912.847907][T21123] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 913.013448][T21123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.038240][T21123] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.055738][ T8502] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.062929][ T8502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.091878][T20872] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.099122][T20872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.354065][ T8511] veth1_macvtap: left promiscuous mode [ 913.359846][ T8511] veth0_macvtap: left promiscuous mode [ 913.368600][ T8511] veth1_vlan: left allmulticast mode [ 913.374362][ T8511] veth1_vlan: left promiscuous mode [ 913.379962][ T8511] veth0_vlan: left promiscuous mode [ 913.382260][T20730] Bluetooth: hci0: command tx timeout [ 914.567029][T21123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.670330][T21123] veth0_vlan: entered promiscuous mode [ 914.698850][T21123] veth1_vlan: entered promiscuous mode [ 914.732627][T21123] veth0_macvtap: entered promiscuous mode [ 914.745993][T21123] veth1_macvtap: entered promiscuous mode [ 914.782348][T21123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.794623][T21123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.806248][T21123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.818260][T21123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.830397][T21123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.848869][T21123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.860755][T21123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.872241][T21123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.883329][T21123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.898176][T21123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 914.913343][T21123] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.924601][T21123] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.934488][T21123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.944056][T21123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.029143][T20872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.047960][T20872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.087502][ T8511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.096077][ T8511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.310810][T21303] netlink: 'syz.0.5846': attribute type 10 has an invalid length. [ 915.347419][T21303] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5846'. [ 915.399472][T21303] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5846'. [ 915.454123][T20730] Bluetooth: hci0: command tx timeout [ 915.950854][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 915.961488][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 915.970293][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 916.004177][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 916.014121][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 916.022623][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 916.191956][ T531] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.280576][T21332] IPv6: Can't replace route, no match found [ 916.359027][ T531] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.473173][ T531] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.523287][T21342] bridge0: port 3(veth1_to_team) entered blocking state [ 916.533904][T21342] bridge0: port 3(veth1_to_team) entered disabled state [ 916.552750][T21342] veth1_to_team: entered allmulticast mode [ 916.564532][T21342] veth1_to_team: entered promiscuous mode [ 916.570885][T21342] bridge0: port 3(veth1_to_team) entered blocking state [ 916.577969][T21342] bridge0: port 3(veth1_to_team) entered forwarding state [ 916.645056][ T531] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.916111][T21318] chnl_net:caif_netlink_parms(): no params data found [ 917.006863][T21365] IPv6: Can't replace route, no match found [ 917.154385][T21371] tap0: tun_chr_ioctl cmd 1074812118 [ 917.248640][ T531] tipc: Left network mode [ 917.313179][T21318] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.343883][T21318] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.351557][T21318] bridge_slave_0: entered allmulticast mode [ 917.372428][T21318] bridge_slave_0: entered promiscuous mode [ 917.405434][T21318] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.412587][T21318] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.462762][T21318] bridge_slave_1: entered allmulticast mode [ 917.488892][T21318] bridge_slave_1: entered promiscuous mode [ 917.534442][ T5084] Bluetooth: hci0: command tx timeout [ 918.093904][ T5084] Bluetooth: hci1: command tx timeout [ 918.140399][T21318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.208548][T21318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.531065][T21318] team0: Port device team_slave_0 added [ 918.548131][T21318] team0: Port device team_slave_1 added [ 918.705994][T21435] team_slave_0: entered promiscuous mode [ 918.711699][T21435] team_slave_0: entered allmulticast mode [ 918.846442][T21318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.853430][T21318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 918.943667][T21318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.962304][T21318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.969574][T21318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 918.996999][T21318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.396982][T21318] hsr_slave_0: entered promiscuous mode [ 919.438115][T21318] hsr_slave_1: entered promiscuous mode [ 919.456475][T21318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 919.475709][T21318] Cannot create hsr debugfs directory [ 920.180257][ T5084] Bluetooth: hci1: command tx timeout [ 922.253824][ T5084] Bluetooth: hci1: command tx timeout [ 922.391193][T21459] tap0: tun_chr_ioctl cmd 2147767507 [ 924.042929][T21318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 924.092820][T21318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 924.281660][T21318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 924.334270][ T5084] Bluetooth: hci1: command tx timeout [ 924.415274][T21318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 924.895656][ T531] veth0_macvtap: left promiscuous mode [ 924.901399][ T531] veth1_vlan: left promiscuous mode [ 924.955905][ T531] veth0_vlan: left promiscuous mode [ 926.578567][T21318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.698106][T21318] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.756613][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.763992][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.870919][ T8525] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.878343][ T8525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.415790][T21318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.523209][T21318] veth0_vlan: entered promiscuous mode [ 927.641051][T21318] veth1_vlan: entered promiscuous mode [ 927.762352][T21318] veth0_macvtap: entered promiscuous mode [ 927.894438][T21318] veth1_macvtap: entered promiscuous mode [ 928.067782][T21318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.099789][T21318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.161716][T21318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.207787][T21318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.245681][T21318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.292662][T21318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.335531][T21318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.425666][T21318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.473694][T21318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.504254][T21318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.557529][T21318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.574456][T21318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.595558][T21318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.638161][T21318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.677815][T21318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.703814][T21318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.713279][T21318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.733215][T21318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.938404][ T8525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.969277][ T8525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.021058][T20872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.045468][T20872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.941930][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.948620][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.775039][T22069] pim6reg1: entered promiscuous mode [ 938.780848][T22069] pim6reg1: entered allmulticast mode [ 941.939274][T22173] syzkaller0: entered promiscuous mode [ 941.951048][T22173] syzkaller0: entered allmulticast mode [ 946.080300][T22192] syzkaller0: entered promiscuous mode [ 946.086021][T22192] syzkaller0: entered allmulticast mode [ 949.596611][T22344] mac80211_hwsim hwsim101 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 950.622434][T22367] syzkaller0: entered promiscuous mode [ 950.640449][T22367] syzkaller0: entered allmulticast mode [ 952.263790][T20872] wlan1: Trigger new scan to find an IBSS to join [ 954.982931][T22515] syz.1.6381 (22515) used obsolete PPPIOCDETACH ioctl [ 954.991452][T22513] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 956.264728][ T531] wlan1: Trigger new scan to find an IBSS to join [ 957.459035][T22614] lo: entered promiscuous mode [ 957.867795][T22625] syzkaller0: entered promiscuous mode [ 957.892725][T22625] syzkaller0: entered allmulticast mode [ 958.254149][ T531] wlan1: Creating new IBSS network, BSSID 6a:9f:c9:4a:b3:dd [ 959.267280][T22659] syzkaller0: entered promiscuous mode [ 959.273211][T22659] syzkaller0: entered allmulticast mode [ 959.618311][T22675] syz_tun: mtu less than device minimum [ 962.048919][T22751] syzkaller0: entered promiscuous mode [ 962.054687][T22751] syzkaller0: entered allmulticast mode [ 964.253906][ T8525] wlan1: Trigger new scan to find an IBSS to join [ 964.621898][T22776] syz_tun: refused to change device tx_queue_len [ 965.494605][T22810] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.502249][T22810] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.514353][T22810] bridge0: entered allmulticast mode [ 965.545226][T22813] bridge_slave_1: left allmulticast mode [ 965.550961][T22813] bridge_slave_1: left promiscuous mode [ 965.557458][T22813] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.566343][T22813] bridge_slave_0: left allmulticast mode [ 965.572041][T22813] bridge_slave_0: left promiscuous mode [ 965.580305][T22813] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.121955][T22831] syz_tun: refused to change device tx_queue_len [ 967.848647][T22872] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.856299][T22872] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.870981][T22872] bridge0: entered allmulticast mode [ 967.918563][T22872] bridge_slave_1: left allmulticast mode [ 967.933971][T22872] bridge_slave_1: left promiscuous mode [ 967.939833][T22872] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.965512][T22872] bridge_slave_0: left allmulticast mode [ 967.981529][T22872] bridge_slave_0: left promiscuous mode [ 967.998038][T22872] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.758782][T22907] syz_tun: refused to change device tx_queue_len [ 969.293910][ T8511] wlan1: Trigger new scan to find an IBSS to join [ 970.603378][ T8511] wlan1: Creating new IBSS network, BSSID 0a:4a:d8:35:89:79 [ 976.735634][T23064] lo: entered allmulticast mode [ 980.185225][T23150] sit0: entered allmulticast mode [ 980.297370][T23152] sit0: entered promiscuous mode [ 981.250804][T23181] sit0: entered allmulticast mode [ 981.343074][T23181] sit0: entered promiscuous mode [ 981.838475][T23192] sit0: entered allmulticast mode [ 981.984041][T23195] sit0: entered promiscuous mode [ 988.676749][T23387] syzkaller0: entered promiscuous mode [ 988.682486][T23387] syzkaller0: entered allmulticast mode [ 993.101726][T23442] syzkaller0: entered promiscuous mode [ 993.115288][T23442] syzkaller0: entered allmulticast mode [ 993.376885][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.390713][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.946242][T23493] syzkaller0: entered promiscuous mode [ 999.976300][T23493] syzkaller0: entered allmulticast mode [ 1000.007255][T23492] +: renamed from team_slave_1 (while UP) [ 1002.285834][T23551] syzkaller0: entered promiscuous mode [ 1002.325671][T23551] syzkaller0: entered allmulticast mode [ 1006.403977][T23600] sit0: entered allmulticast mode [ 1006.468067][T23600] sit0: entered promiscuous mode [ 1007.622472][T23620] syz.2.6840[23620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1007.622701][T23620] syz.2.6840[23620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1008.987125][T23646] sit0: left promiscuous mode [ 1009.389624][T23648] sit0: entered promiscuous mode [ 1012.971088][T23690] sit0: left promiscuous mode [ 1013.097548][T23695] sit0: entered promiscuous mode [ 1014.374233][T23708] syzkaller0: entered promiscuous mode [ 1014.395640][T23708] syzkaller0: entered allmulticast mode [ 1014.602539][T23715] syzkaller0: entered promiscuous mode [ 1014.619171][T23715] syzkaller0: entered allmulticast mode [ 1015.933759][T20730] Bluetooth: hci2: command 0x0406 tx timeout [ 1020.680098][T23740] syzkaller0: entered promiscuous mode [ 1020.687293][T23740] syzkaller0: entered allmulticast mode [ 1023.682611][T23775] syzkaller0: entered promiscuous mode [ 1023.688313][T23775] syzkaller0: entered allmulticast mode [ 1026.415228][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 1028.572968][T23827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.629093][T23827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.657767][T23827] bridge0: entered allmulticast mode [ 1028.812511][T23830] bridge_slave_1: left allmulticast mode [ 1028.833914][T23830] bridge_slave_1: left promiscuous mode [ 1028.839990][T23830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.856656][T23830] bridge_slave_0: left allmulticast mode [ 1028.862638][T23830] bridge_slave_0: left promiscuous mode [ 1028.868697][T23830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.093752][T23836] syzkaller0: entered promiscuous mode [ 1029.101435][T23836] syzkaller0: entered allmulticast mode [ 1029.865983][T23852] syzkaller0: entered promiscuous mode [ 1029.909199][T23852] syzkaller0: entered allmulticast mode [ 1032.681860][T23870] bridge0: port 3(veth1_to_team) entered disabled state [ 1032.689100][T23870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.697247][T23870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.706130][T23870] bridge0: entered allmulticast mode [ 1032.741187][T23873] veth1_to_team: left allmulticast mode [ 1032.765553][T23873] veth1_to_team: left promiscuous mode [ 1032.771591][T23873] bridge0: port 3(veth1_to_team) entered disabled state [ 1032.802926][T23873] bridge_slave_1: left allmulticast mode [ 1032.809068][T23873] bridge_slave_1: left promiscuous mode [ 1032.815206][T23873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.825646][T23873] bridge_slave_0: left allmulticast mode [ 1032.831430][T23873] bridge_slave_0: left promiscuous mode [ 1032.838173][T23873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.537548][T23900] syzkaller0: entered promiscuous mode [ 1033.543342][T23900] syzkaller0: entered allmulticast mode [ 1036.365111][T23910] syzkaller0: entered promiscuous mode [ 1036.371489][T23910] syzkaller0: entered allmulticast mode [ 1036.414416][T20730] Bluetooth: hci0: command 0x0406 tx timeout [ 1038.674236][T23924] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1038.689357][T23924] syzkaller0: entered promiscuous mode [ 1038.694978][T23924] syzkaller0: entered allmulticast mode [ 1041.543769][T20730] Bluetooth: hci1: command 0x0406 tx timeout [ 1041.620619][T23954] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6944'. [ 1041.655547][T23954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1047.671097][T24032] syzkaller0: entered promiscuous mode [ 1047.868578][T24032] syzkaller0: entered allmulticast mode [ 1052.468177][T24106] tap0: tun_chr_ioctl cmd 1074025675 [ 1052.496765][T24106] tap0: persist disabled [ 1052.653231][T24108] cgroup: fork rejected by pids controller in /syz1 [ 1053.038466][T24114] syzkaller0: entered promiscuous mode [ 1053.073128][T24114] syzkaller0: entered allmulticast mode [ 1054.031496][T20730] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1054.072095][T20730] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1054.087278][T20730] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1054.111122][T20730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1054.145317][T20730] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1054.154330][T20730] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1054.828057][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.834700][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.234213][T24147] mac80211_hwsim hwsim100 »»»»»»: renamed from wlan0 [ 1056.254399][ T5084] Bluetooth: hci3: command tx timeout [ 1056.314041][T24138] chnl_net:caif_netlink_parms(): no params data found [ 1056.548252][T24138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.570678][T24138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.600183][T24138] bridge_slave_0: entered allmulticast mode [ 1056.616432][T24138] bridge_slave_0: entered promiscuous mode [ 1056.774328][T24161] syzkaller0: entered promiscuous mode [ 1056.781021][T24161] syzkaller0: entered allmulticast mode [ 1056.837806][T24138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.857269][T24138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.873987][T24138] bridge_slave_1: entered allmulticast mode [ 1056.885204][T24138] bridge_slave_1: entered promiscuous mode [ 1058.338217][ T5084] Bluetooth: hci3: command tx timeout [ 1060.422571][ T5084] Bluetooth: hci3: command tx timeout [ 1061.973057][T24138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.992575][T24182] sit0: left promiscuous mode [ 1062.040844][T24138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.147288][T24138] team0: Port device team_slave_0 added [ 1062.195290][T24138] team0: Port device team_slave_1 added [ 1062.300995][ T8525] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.373961][T24198] mac80211_hwsim hwsim106 »»»»»»: renamed from wlan0 [ 1062.432328][T24138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.445853][T24138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.475583][T24138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.494405][ T5084] Bluetooth: hci3: command tx timeout [ 1062.529935][T24202] bridge_slave_0: entered promiscuous mode [ 1062.538096][T24202] bridge_slave_0: entered allmulticast mode [ 1062.591976][ T8525] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.625052][T24138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.634788][T24138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.684540][T24138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.777445][ T8525] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.883465][ T8525] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.908491][T24138] hsr_slave_0: entered promiscuous mode [ 1062.920718][T24138] hsr_slave_1: entered promiscuous mode [ 1062.927781][T24138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1062.941312][T24138] Cannot create hsr debugfs directory [ 1062.999152][T24210] cgroup: fork rejected by pids controller in /syz3 [ 1063.929280][T24242] mac80211_hwsim hwsim104 »»»»»»: renamed from wlan0 [ 1064.483884][T24138] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1064.497572][T24250] cgroup: fork rejected by pids controller in /syz0 [ 1064.509119][T24138] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1064.611792][T24138] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1064.639055][T24138] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1064.804791][T20730] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1064.834213][T20730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1064.846691][T20730] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1064.859181][T20730] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1064.869946][T20730] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1064.877961][T20730] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1065.304143][ T8525] hsr_slave_0: left promiscuous mode [ 1065.358887][ T8525] hsr_slave_1: left promiscuous mode [ 1065.389071][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1065.403921][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1065.425453][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1065.433311][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1065.470377][ T8525] veth1_macvtap: left promiscuous mode [ 1065.479671][ T8525] veth0_macvtap: left promiscuous mode [ 1065.485715][ T8525] veth1_vlan: left promiscuous mode [ 1065.491308][ T8525] veth0_vlan: left promiscuous mode [ 1065.930379][T20730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1065.957565][T20730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1065.968184][T20730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1065.978415][T20730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1065.988152][T20730] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1065.995904][T20730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1066.973741][ T5084] Bluetooth: hci1: command tx timeout [ 1067.289977][ T8525] team0 (unregistering): Port device + removed [ 1067.340974][ T8525] team0 (unregistering): Port device team_slave_0 removed [ 1067.396099][ T8525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.446770][ T8525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.830833][ T8525] bond0 (unregistering): Released all slaves [ 1067.889079][T24296] bridge_slave_0: left promiscuous mode [ 1067.899135][T24296] bridge_slave_0: left allmulticast mode [ 1067.914103][T24297] bridge_slave_0: entered promiscuous mode [ 1067.920077][T24297] bridge_slave_0: entered allmulticast mode [ 1068.011881][T24138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.094746][ T5084] Bluetooth: hci0: command tx timeout [ 1068.168021][T24138] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.244435][ T531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.251653][ T531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.284197][T20872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.291535][T20872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.360827][T24263] chnl_net:caif_netlink_parms(): no params data found [ 1068.441124][T24138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1068.470458][T24138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1068.618361][T24311] cgroup: fork rejected by pids controller in /syz2 [ 1068.755483][ T8525] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.780018][T24263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.792009][T24263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.799879][T24263] bridge_slave_0: entered allmulticast mode [ 1068.813250][T24263] bridge_slave_0: entered promiscuous mode [ 1068.883489][ T8525] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.918463][T24263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.926232][T24263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.937697][T24263] bridge_slave_1: entered allmulticast mode [ 1068.945670][T24263] bridge_slave_1: entered promiscuous mode [ 1069.015779][ T8525] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.030304][T24138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1069.054068][ T5084] Bluetooth: hci1: command tx timeout [ 1069.068775][T24286] chnl_net:caif_netlink_parms(): no params data found [ 1069.100329][ T8525] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.117276][T24263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.130265][T24263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.199897][T24263] team0: Port device team_slave_0 added [ 1069.210190][T24263] team0: Port device team_slave_1 added [ 1069.316029][T24263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.323290][T24263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1069.383590][T24263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.415487][T24263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.422650][T24263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1069.460765][T24263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.476734][T24286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.489665][T24286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.497461][T24286] bridge_slave_0: entered allmulticast mode [ 1069.505498][T24286] bridge_slave_0: entered promiscuous mode [ 1069.556080][T24286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.563450][T24286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.576272][T24286] bridge_slave_1: entered allmulticast mode [ 1069.590957][T24286] bridge_slave_1: entered promiscuous mode [ 1069.740415][T24263] hsr_slave_0: entered promiscuous mode [ 1069.747908][T24263] hsr_slave_1: entered promiscuous mode [ 1069.755243][T24263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1069.763292][T24263] Cannot create hsr debugfs directory [ 1069.799485][ T8525] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.827206][T24286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.847217][T24286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.878537][T20730] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1069.888843][T20730] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1069.903778][T20730] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1069.918991][T20730] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1069.931586][T20730] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1069.949946][T20730] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1069.960633][ T8525] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.095843][T24286] team0: Port device team_slave_0 added [ 1070.106601][T24286] team0: Port device team_slave_1 added [ 1070.154296][ T8525] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.174210][T20730] Bluetooth: hci0: command tx timeout [ 1070.193228][T24138] veth0_vlan: entered promiscuous mode [ 1070.231512][T24286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.238835][T24286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.275841][T24286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.313299][T24138] veth1_vlan: entered promiscuous mode [ 1070.349824][ T8525] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.389503][T24286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.400448][T24286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.428839][T24286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.615149][T24286] hsr_slave_0: entered promiscuous mode [ 1070.622442][T24286] hsr_slave_1: entered promiscuous mode [ 1070.631593][T24286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1070.639537][T24286] Cannot create hsr debugfs directory [ 1070.701964][T24138] veth0_macvtap: entered promiscuous mode [ 1070.820771][T24138] veth1_macvtap: entered promiscuous mode [ 1070.934293][T24138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.945246][T24138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.956611][T24138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.967728][T24138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.978038][T24138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.997513][T24138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.021955][T24138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.116410][T24138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.134045][T20730] Bluetooth: hci1: command tx timeout [ 1071.140115][T24138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.153623][T24138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.164303][T24138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.175076][T24138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.186347][T24138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.210385][T24138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.351443][T24138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.365453][T24138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.375015][T24138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.384452][T24138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.666501][T24327] chnl_net:caif_netlink_parms(): no params data found [ 1072.017719][T20730] Bluetooth: hci2: command tx timeout [ 1072.076186][T24327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.083317][T24327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.091196][T24327] bridge_slave_0: entered allmulticast mode [ 1072.099155][T24327] bridge_slave_0: entered promiscuous mode [ 1072.108584][T24327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.116713][T24327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.124621][T24327] bridge_slave_1: entered allmulticast mode [ 1072.131821][T24327] bridge_slave_1: entered promiscuous mode [ 1072.238661][ T8502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.252151][ T8502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.256142][T20730] Bluetooth: hci0: command tx timeout [ 1072.307826][T24327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.347501][T24327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.429451][T24327] team0: Port device team_slave_0 added [ 1072.441204][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.444268][T24327] team0: Port device team_slave_1 added [ 1072.463188][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.558614][T24327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.566205][T24327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.594846][T24327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.652924][T24327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.669582][T24327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.697024][T24327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.853743][T24327] hsr_slave_0: entered promiscuous mode [ 1072.860004][T24327] hsr_slave_1: entered promiscuous mode [ 1072.871294][T24327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1072.879252][T24327] Cannot create hsr debugfs directory [ 1072.978843][T24368] syzkaller0: entered promiscuous mode [ 1072.988543][T24368] syzkaller0: entered allmulticast mode [ 1072.997852][T24263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1073.062541][T24263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1073.074547][T24263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1073.107661][T24263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1073.213895][T20730] Bluetooth: hci1: command tx timeout [ 1074.095933][T20730] Bluetooth: hci2: command tx timeout [ 1074.335088][T20730] Bluetooth: hci0: command tx timeout [ 1075.460186][ T8525] hsr_slave_0: left promiscuous mode [ 1075.474569][ T8525] hsr_slave_1: left promiscuous mode [ 1075.485672][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1075.493150][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1075.502165][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1075.511468][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1075.525497][ T8525] hsr_slave_0: left promiscuous mode [ 1076.173837][T20730] Bluetooth: hci2: command tx timeout [ 1076.355395][ T8525] hsr_slave_1: left promiscuous mode [ 1076.378601][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.386450][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.399141][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.407476][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.454513][ T8525] veth1_macvtap: left promiscuous mode [ 1076.461190][ T8525] veth0_macvtap: left promiscuous mode [ 1076.475999][ T8525] veth0_vlan: left promiscuous mode [ 1076.488940][ T8525] veth1_macvtap: left promiscuous mode [ 1076.495314][ T8525] veth0_macvtap: left promiscuous mode [ 1076.502104][ T8525] veth1_vlan: left promiscuous mode [ 1076.507909][ T8525] veth0_vlan: left promiscuous mode [ 1077.647954][ T8525] team0 (unregistering): Port device team_slave_1 removed [ 1077.703049][ T8525] team0 (unregistering): Port device team_slave_0 removed [ 1077.759335][ T8525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.812900][ T8525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.232470][ T8525] bond0 (unregistering): Released all slaves [ 1078.263991][T20730] Bluetooth: hci2: command tx timeout [ 1078.927632][ T8525] team0 (unregistering): Port device team_slave_1 removed [ 1078.984165][ T8525] team0 (unregistering): Port device team_slave_0 removed [ 1079.040456][ T8525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.098389][ T8525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1079.543567][ T8525] bond0 (unregistering): Released all slaves [ 1079.593829][T24286] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1079.647896][T24286] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1079.667641][T24286] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1079.682061][T24286] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1079.824251][T24327] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.989385][T24327] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.113297][T24327] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.267538][T24327] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.402260][T24263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.559143][T24286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.642512][T24263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.786228][ T8500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.795084][ T8500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.833945][ T8500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.842937][ T8500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.883482][T24286] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.938394][ T8502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.945831][ T8502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.000005][T24327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1081.039057][T24327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1081.096800][ T8511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.104386][ T8511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.125989][T24327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1081.147517][T24327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1081.262681][T24435] syzkaller0: entered promiscuous mode [ 1081.273223][T24435] syzkaller0: entered allmulticast mode [ 1081.422170][T24286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1081.983330][T24327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1082.076887][T24263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.099871][T24327] 8021q: adding VLAN 0 to HW filter on device team0 [ 1082.170317][T24286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.186325][ T8500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.194315][ T8500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.257636][T20872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.265749][T20872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.382301][T24263] veth0_vlan: entered promiscuous mode [ 1082.460870][T24263] veth1_vlan: entered promiscuous mode [ 1082.532799][T24286] veth0_vlan: entered promiscuous mode [ 1082.596815][T24286] veth1_vlan: entered promiscuous mode [ 1082.638838][T24263] veth0_macvtap: entered promiscuous mode [ 1082.697444][T24263] veth1_macvtap: entered promiscuous mode [ 1082.796934][T24263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.809252][T24263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.821186][T24263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.832966][T24263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.845549][T24263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.858100][T24263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.870090][T24263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.881323][T24263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.895180][T24263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.907162][T24263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.920067][T24263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.929129][T24263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.939097][T24263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.948516][T24263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.995632][ T8525] hsr_slave_0: left promiscuous mode [ 1083.001515][ T8525] hsr_slave_1: left promiscuous mode [ 1083.007823][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1083.019961][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.028436][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.036465][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.057684][ T8525] veth1_macvtap: left promiscuous mode [ 1083.064267][ T8525] veth0_macvtap: left promiscuous mode [ 1083.070533][ T8525] veth1_vlan: left promiscuous mode [ 1083.076726][ T8525] veth0_vlan: left promiscuous mode [ 1083.766479][ T8525] team0 (unregistering): Port device team_slave_1 removed [ 1083.830995][ T8525] team0 (unregistering): Port device team_slave_0 removed [ 1083.896555][ T8525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.960229][ T8525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.386794][ T8525] bond0 (unregistering): Released all slaves [ 1084.440395][T24286] veth0_macvtap: entered promiscuous mode [ 1084.464466][T24327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1084.476095][T24286] veth1_macvtap: entered promiscuous mode [ 1084.625923][T24286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.638370][T24286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.657664][T24286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.669963][T24286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.694473][T24286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.779257][T20871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.798575][T20871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.806225][T24286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.822894][T24286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.836656][T24286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.850446][T24286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.862806][T24286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.892458][T24327] veth0_vlan: entered promiscuous mode [ 1084.934906][ T8500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.935316][T24286] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.956830][T24286] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.967272][T24286] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.970038][ T8500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.978434][T24286] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.014798][T24327] veth1_vlan: entered promiscuous mode [ 1085.987643][T24327] veth0_macvtap: entered promiscuous mode [ 1086.007501][T24480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.044055][T24480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.082688][T24327] veth1_macvtap: entered promiscuous mode [ 1086.140868][T24327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.153373][T24327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.166517][T24327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.190570][T24327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.207883][T24327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.225907][T24327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.250452][T24327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1086.379666][T24327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.379834][T20871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.431010][T20871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.436202][T24327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.491131][T24327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.522745][T24327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.547373][T24327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.571106][T24327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.586350][T24327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1086.686172][T24327] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.723818][T24327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.760661][T24327] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.798092][T24327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.964326][T24499] syzkaller0: entered promiscuous mode [ 1086.972172][T24499] syzkaller0: entered allmulticast mode [ 1087.246217][T20871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.272026][T20871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.351578][T24480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.389923][T24480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.688916][T24514] syzkaller0: entered promiscuous mode [ 1087.708216][T24514] syzkaller0: entered allmulticast mode [ 1091.362738][T24550] mac80211_hwsim hwsim111 wlan1: entered promiscuous mode [ 1091.393877][T24550] mac80211_hwsim hwsim111 wlan1: entered allmulticast mode [ 1091.491912][ T8525] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.639423][ T8525] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.430230][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1092.439228][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1092.449387][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1092.459929][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1092.468822][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1092.477904][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1092.673496][ T8525] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.840428][ T8525] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.005214][T24568] syzkaller0: entered promiscuous mode [ 1093.023720][T24568] syzkaller0: entered allmulticast mode [ 1094.494981][T20730] Bluetooth: hci3: command tx timeout [ 1096.576974][ T5084] Bluetooth: hci3: command tx timeout [ 1096.880817][T24582] lo: entered promiscuous mode [ 1097.190376][T24561] chnl_net:caif_netlink_parms(): no params data found [ 1097.327431][T24613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.421319][T24621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.428938][T24621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.841737][T24622] syzkaller0: entered promiscuous mode [ 1097.881690][T24622] syzkaller0: entered allmulticast mode [ 1098.657125][ T5084] Bluetooth: hci3: command tx timeout [ 1100.743805][ T5084] Bluetooth: hci3: command tx timeout [ 1101.045275][T24561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.052505][T24561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.084443][T24561] bridge_slave_0: entered allmulticast mode [ 1101.091927][T24561] bridge_slave_0: entered promiscuous mode [ 1101.135511][T24561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.142747][T24561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.150598][T24561] bridge_slave_1: entered allmulticast mode [ 1101.159069][T24561] bridge_slave_1: entered promiscuous mode [ 1101.322589][T24561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1101.464617][T24561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.746408][T24561] team0: Port device team_slave_0 added [ 1101.889915][T24561] team0: Port device team_slave_1 added [ 1102.204698][T24561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.221197][T24561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.262944][T24561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.300847][T24561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.309023][T24561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.350812][T24561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.420968][ T8525] hsr_slave_0: left promiscuous mode [ 1102.433130][ T8525] hsr_slave_1: left promiscuous mode [ 1102.450601][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1102.473735][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1102.497337][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1102.516414][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1102.529370][ T8525] bridge_slave_1: left allmulticast mode [ 1102.535743][ T8525] bridge_slave_1: left promiscuous mode [ 1102.542872][ T8525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.555839][ T8525] bridge_slave_0: left allmulticast mode [ 1102.562639][ T8525] bridge_slave_0: left promiscuous mode [ 1102.569419][ T8525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.592906][ T8525] veth1_macvtap: left promiscuous mode [ 1102.599895][ T8525] veth0_macvtap: left promiscuous mode [ 1102.608630][ T8525] veth1_vlan: left promiscuous mode [ 1102.614516][ T8525] veth0_vlan: left promiscuous mode [ 1103.448912][ T8525] team0 (unregistering): Port device team_slave_1 removed [ 1103.507428][ T8525] team0 (unregistering): Port device team_slave_0 removed [ 1103.567893][ T8525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1103.622661][ T8525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1104.023020][ T8525] bond0 (unregistering): Released all slaves [ 1104.290743][T24561] hsr_slave_0: entered promiscuous mode [ 1104.329539][T24561] hsr_slave_1: entered promiscuous mode [ 1104.428940][T24721] syzkaller0: entered promiscuous mode [ 1104.439425][T24721] syzkaller0: entered allmulticast mode [ 1104.474220][ T5084] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 1111.114478][ T5084] Bluetooth: hci1: Malformed Event: 0x02 [ 1111.550338][T24561] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1111.578974][ T5084] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 1111.581395][T24561] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1111.936784][T24561] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1111.957182][T24561] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1112.143499][T24561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.181653][T24561] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.201858][ T8525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.209713][ T8525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1112.245250][ T8525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.252750][ T8525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.590374][T24561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.661747][T24561] veth0_vlan: entered promiscuous mode [ 1112.680205][T24561] veth1_vlan: entered promiscuous mode [ 1112.717498][T24561] veth0_macvtap: entered promiscuous mode [ 1112.730565][T24561] veth1_macvtap: entered promiscuous mode [ 1112.758004][T24561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.773034][T24561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.787852][T24561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.799948][T24561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.810577][T24561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.833642][T24561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.850963][T24561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.871528][T24561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.894317][T24561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.913611][T24561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.927157][T24561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.939904][T24561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.955729][T24561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.969115][T24561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.985001][T24561] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.998543][T24561] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.008351][T24561] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.020011][T24561] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.128854][T20872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.147730][T20872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.182768][T20871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.192704][T20871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.370112][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.377393][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.236558][T24955] mac80211_hwsim hwsim113 ..ãc¤±: renamed from wlan1 (while UP) [ 1123.165593][ T5084] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 1123.944289][T25053] lo: left promiscuous mode [ 1123.950531][T25053] lo: entered allmulticast mode [ 1124.020225][T25055] lo: entered promiscuous mode [ 1124.032632][T25055] lo: left allmulticast mode [ 1124.960047][T20730] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 1125.215257][T20730] Bluetooth: hci3: command tx timeout [ 1126.059016][T20730] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 1126.973862][ T5084] Bluetooth: hci1: command tx timeout [ 1128.098769][ T5084] Bluetooth: hci2: command tx timeout [ 1131.802963][T25222] syzkaller0: entered promiscuous mode [ 1131.809938][T25222] syzkaller0: entered allmulticast mode [ 1132.011646][ T5084] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1132.020904][ T5084] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1132.033758][ T5084] CPU: 1 PID: 5084 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1132.042169][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1132.052804][ T5084] Workqueue: hci3 hci_rx_work [ 1132.058484][ T5084] Call Trace: [ 1132.062556][ T5084] [ 1132.065586][ T5084] dump_stack_lvl+0x18c/0x250 [ 1132.070474][ T5084] ? show_regs_print_info+0x20/0x20 [ 1132.075805][ T5084] ? load_image+0x400/0x400 [ 1132.080693][ T5084] sysfs_create_dir_ns+0x26e/0x2a0 [ 1132.086056][ T5084] ? sysfs_warn_dup+0xa0/0xa0 [ 1132.091129][ T5084] ? do_raw_spin_unlock+0x121/0x230 [ 1132.096417][ T5084] kobject_add_internal+0x61c/0xcc0 [ 1132.102038][ T5084] kobject_add+0x164/0x240 [ 1132.106516][ T5084] ? __rwlock_init+0x150/0x150 [ 1132.111553][ T5084] ? kobject_init+0x1e0/0x1e0 [ 1132.116469][ T5084] ? _raw_spin_unlock+0x28/0x40 [ 1132.121375][ T5084] ? get_device_parent+0x366/0x390 [ 1132.127619][ T5084] device_add+0x408/0xc20 [ 1132.132468][ T5084] hci_conn_add_sysfs+0xd5/0x1e0 [ 1132.138116][ T5084] le_conn_complete_evt+0xf5d/0x1540 [ 1132.143490][ T5084] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1132.150541][ T5084] ? bt_info+0x180/0x180 [ 1132.154859][ T5084] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1132.160643][ T5084] ? skb_pull_data+0xfb/0x200 [ 1132.165384][ T5084] hci_le_conn_complete_evt+0x187/0x440 [ 1132.171196][ T5084] ? hci_remote_host_features_evt+0x150/0x150 [ 1132.177491][ T5084] hci_event_packet+0x7ba/0x1270 [ 1132.182789][ T5084] ? bis_list+0x290/0x290 [ 1132.187504][ T5084] ? lockdep_hardirqs_on+0x98/0x150 [ 1132.192933][ T5084] ? hci_send_to_monitor+0xd7/0x4f0 [ 1132.198334][ T5084] hci_rx_work+0x43a/0xd60 [ 1132.202977][ T5084] ? process_scheduled_works+0x96f/0x15d0 [ 1132.209354][ T5084] process_scheduled_works+0xa5d/0x15d0 [ 1132.215217][ T5084] ? assign_work+0x430/0x430 [ 1132.220105][ T5084] ? assign_work+0x3d0/0x430 [ 1132.224742][ T5084] worker_thread+0xa55/0xfc0 [ 1132.229388][ T5084] kthread+0x2fa/0x390 [ 1132.233881][ T5084] ? pr_cont_work+0x560/0x560 [ 1132.238733][ T5084] ? kthread_blkcg+0xd0/0xd0 [ 1132.243706][ T5084] ret_from_fork+0x48/0x80 [ 1132.248220][ T5084] ? kthread_blkcg+0xd0/0xd0 [ 1132.254844][ T5084] ret_from_fork_asm+0x11/0x20 [ 1132.260131][ T5084] [ 1132.273673][ T5084] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1132.289909][ T5084] Bluetooth: hci3: failed to register connection device [ 1136.001574][T25270] veth0_vlan: entered allmulticast mode [ 1136.113883][T25270] veth0_vlan: left promiscuous mode [ 1136.120751][T25270] veth0_vlan: entered promiscuous mode [ 1136.698052][T20730] Bluetooth: hci3: unexpected event 0x16 length: 151 > 6 [ 1137.591874][T20730] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1137.608840][T20730] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1137.619600][T20730] CPU: 1 PID: 20730 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1137.627790][T20730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1137.639950][T20730] Workqueue: hci2 hci_rx_work [ 1137.645753][T20730] Call Trace: [ 1137.649967][T20730] [ 1137.653484][T20730] dump_stack_lvl+0x18c/0x250 [ 1137.658660][T20730] ? show_regs_print_info+0x20/0x20 [ 1137.663981][T20730] ? load_image+0x400/0x400 [ 1137.668576][T20730] sysfs_create_dir_ns+0x26e/0x2a0 [ 1137.673813][T20730] ? sysfs_warn_dup+0xa0/0xa0 [ 1137.679437][T20730] ? do_raw_spin_unlock+0x121/0x230 [ 1137.684941][T20730] kobject_add_internal+0x61c/0xcc0 [ 1137.690736][T20730] kobject_add+0x164/0x240 [ 1137.695547][T20730] ? __rwlock_init+0x150/0x150 [ 1137.700613][T20730] ? kobject_init+0x1e0/0x1e0 [ 1137.706795][T20730] ? _raw_spin_unlock+0x28/0x40 [ 1137.711772][T20730] ? get_device_parent+0x366/0x390 [ 1137.717712][T20730] device_add+0x408/0xc20 [ 1137.722532][T20730] hci_conn_add_sysfs+0xd5/0x1e0 [ 1137.728305][T20730] le_conn_complete_evt+0xf5d/0x1540 [ 1137.734510][T20730] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1137.742212][T20730] ? bt_info+0x180/0x180 [ 1137.747568][T20730] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1137.754368][T20730] ? skb_pull_data+0xfb/0x200 [ 1137.759413][T20730] hci_le_conn_complete_evt+0x187/0x440 [ 1137.766489][T20730] ? hci_remote_host_features_evt+0x150/0x150 [ 1137.774324][T20730] hci_event_packet+0x7ba/0x1270 [ 1137.780921][T20730] ? bis_list+0x290/0x290 [ 1137.786318][T20730] ? lockdep_hardirqs_on+0x98/0x150 [ 1137.792730][T20730] ? hci_send_to_monitor+0xd7/0x4f0 [ 1137.798755][T20730] hci_rx_work+0x43a/0xd60 [ 1137.804160][T20730] ? process_scheduled_works+0x96f/0x15d0 [ 1137.809981][T20730] process_scheduled_works+0xa5d/0x15d0 [ 1137.816033][T20730] ? assign_work+0x430/0x430 [ 1137.820936][T20730] ? assign_work+0x3d0/0x430 [ 1137.826155][T20730] worker_thread+0xa55/0xfc0 [ 1137.831563][T20730] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1137.837580][T20730] ? _raw_spin_unlock+0x40/0x40 [ 1137.842703][T20730] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1137.849167][T20730] kthread+0x2fa/0x390 [ 1137.853462][T20730] ? pr_cont_work+0x560/0x560 [ 1137.859333][T20730] ? kthread_blkcg+0xd0/0xd0 [ 1137.864497][T20730] ret_from_fork+0x48/0x80 [ 1137.869123][T20730] ? kthread_blkcg+0xd0/0xd0 [ 1137.875448][T20730] ret_from_fork_asm+0x11/0x20 [ 1137.881582][T20730] [ 1137.889645][T20730] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1137.907325][T20730] Bluetooth: hci2: failed to register connection device [ 1139.348604][T20730] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 1140.549961][T25397] syzkaller0: entered promiscuous mode [ 1140.573683][T25397] syzkaller0: entered allmulticast mode [ 1140.729835][T20730] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 1147.026089][T25452] syzkaller0: entered promiscuous mode [ 1147.070299][T25452] syzkaller0: entered allmulticast mode [ 1149.858313][T25482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.865973][T25482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.903829][T25482] bridge0: entered allmulticast mode [ 1149.944959][T25485] bridge_slave_1: left allmulticast mode [ 1149.950752][T25485] bridge_slave_1: left promiscuous mode [ 1149.962846][T25485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.004288][T25485] bridge_slave_0: left allmulticast mode [ 1150.014159][T25485] bridge_slave_0: left promiscuous mode [ 1150.029343][T25485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.518814][T25499] syzkaller0: entered promiscuous mode [ 1150.546302][T25499] syzkaller0: entered allmulticast mode [ 1153.333795][T20730] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1153.359185][T20730] Bluetooth: hci2: unexpected event 0x30 length: 151 > 3 [ 1154.172511][T25544] syzkaller0: entered promiscuous mode [ 1154.192345][T20730] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 1154.226133][T25544] syzkaller0: entered allmulticast mode [ 1157.240586][T20730] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 1157.444187][T25580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.459192][T25580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.518701][T25580] bridge0: entered allmulticast mode [ 1157.550970][T25582] bridge_slave_1: left allmulticast mode [ 1157.584159][T25582] bridge_slave_1: left promiscuous mode [ 1157.591036][T25582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.616263][T25582] bridge_slave_0: left allmulticast mode [ 1157.636027][T25582] bridge_slave_0: left promiscuous mode [ 1157.642105][T25582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.210794][T25595] syzkaller0: entered promiscuous mode [ 1158.226470][T25595] syzkaller0: entered allmulticast mode [ 1161.253048][T25655] wg2: entered promiscuous mode [ 1161.260351][T25655] wg2: entered allmulticast mode [ 1161.661243][T25664] GPL: port 1(erspan0) entered blocking state [ 1161.673454][T25664] GPL: port 1(erspan0) entered disabled state [ 1161.700900][T25664] erspan0: entered allmulticast mode [ 1161.737212][T25664] erspan0: entered promiscuous mode [ 1161.748916][T25664] GPL: port 1(erspan0) entered blocking state [ 1161.755432][T25664] GPL: port 1(erspan0) entered forwarding state [ 1161.852574][T25672] veth0_vlan: entered allmulticast mode [ 1161.998013][T25675] ªªªªªª: renamed from vlan0 [ 1163.829094][T25690] syzkaller0: entered promiscuous mode [ 1163.840504][T25690] syzkaller0: entered allmulticast mode [ 1175.839545][T25803] syzkaller0: entered promiscuous mode [ 1175.863571][T25803] syzkaller0: entered allmulticast mode [ 1177.697631][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.715133][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.307258][T25832] ÿÿÿÿÿÿ: renamed from vlan1 [ 1181.626936][T25854] syzkaller0: entered promiscuous mode [ 1181.635250][T25854] syzkaller0: entered allmulticast mode [ 1184.792701][T25876] syzkaller0: entered promiscuous mode [ 1184.803741][T25876] syzkaller0: entered allmulticast mode [ 1184.923104][T25883] syzkaller0: entered promiscuous mode [ 1184.929212][T25883] syzkaller0: entered allmulticast mode [ 1190.027331][T25894] Bluetooth: hci0: command 0x0406 tx timeout [ 1190.033903][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 1191.471156][T25910] syzkaller0: entered promiscuous mode [ 1191.480786][T25910] syzkaller0: entered allmulticast mode [ 1194.835605][T25937] syzkaller0: entered promiscuous mode [ 1194.842572][T25937] syzkaller0: entered allmulticast mode [ 1195.136268][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 1207.405727][T20730] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 1211.656655][T20730] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 1212.634409][T26084] syzkaller0: entered promiscuous mode [ 1212.649402][T26084] syzkaller0: entered allmulticast mode [ 1212.662748][T26089] veth0_vlan: entered allmulticast mode [ 1213.389996][T20730] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 1215.622300][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 1219.063741][T20730] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1219.213419][T26131] syzkaller0: entered promiscuous mode [ 1219.221666][T26131] syzkaller0: entered allmulticast mode [ 1221.775730][T26134] veth0_vlan: entered allmulticast mode [ 1222.938369][T20730] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1223.501436][T26172] syzkaller0: entered promiscuous mode [ 1223.511989][T26172] syzkaller0: entered allmulticast mode [ 1226.450429][T20730] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 1226.652253][T26188] syzkaller0: entered promiscuous mode [ 1226.663654][T26188] syzkaller0: entered allmulticast mode [ 1230.720006][T26225] syzkaller0: entered promiscuous mode [ 1230.728341][T26225] syzkaller0: entered allmulticast mode [ 1231.236620][T20730] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 1234.141933][T26241] syzkaller0: entered promiscuous mode [ 1234.154610][T26241] syzkaller0: entered allmulticast mode [ 1236.870587][T20730] Bluetooth: hci3: Malformed LE Event: 0x0b [ 1236.952395][T26255] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1237.318072][T26255] syzkaller0: entered promiscuous mode [ 1237.324985][T26255] syzkaller0: entered allmulticast mode [ 1239.220874][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.231220][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.255307][T20730] Bluetooth: hci3: Malformed LE Event: 0x0b [ 1242.398244][T26302] syzkaller0: entered promiscuous mode [ 1242.404011][T26302] syzkaller0: entered allmulticast mode [ 1243.514557][T20730] Bluetooth: hci0: Malformed LE Event: 0x0b [ 1248.562536][T26324] ÿÿÿÿÿÿ: renamed from vlan1 [ 1248.770369][T26337] syzkaller0: entered promiscuous mode [ 1248.782785][T26337] syzkaller0: entered allmulticast mode [ 1249.810809][T20730] Bluetooth: hci3: Malformed LE Event: 0x0b [ 1252.019133][T26368] syzkaller0: entered promiscuous mode [ 1252.030420][T26368] syzkaller0: entered allmulticast mode [ 1252.495272][T20730] Bluetooth: hci0: Malformed LE Event: 0x0b [ 1255.797789][T20730] Bluetooth: hci0: Malformed LE Event: 0x0b [ 1257.070894][T26426] ÿÿÿÿÿÿ: renamed from vlan1 [ 1257.281950][T26433] syzkaller0: entered promiscuous mode [ 1257.306960][T26433] syzkaller0: entered allmulticast mode [ 1257.316758][T20730] Bluetooth: hci3: Malformed LE Event: 0x0b [ 1260.658743][T26455] syzkaller0: entered promiscuous mode [ 1260.670886][T26455] syzkaller0: entered allmulticast mode [ 1261.057445][T20730] Bluetooth: hci3: Malformed LE Event: 0x0b [ 1265.239144][T20730] Bluetooth: hci0: Malformed LE Event: 0x0b [ 1267.134608][T20730] Bluetooth: hci3: Malformed LE Event: 0x0b [ 1267.156868][T26530] syzkaller0: entered promiscuous mode [ 1267.164178][T26530] syzkaller0: entered allmulticast mode [ 1268.027975][T20730] Bluetooth: hci3: Malformed LE Event: 0x0b [ 1274.892197][T26610] wg2: entered promiscuous mode [ 1274.905707][T26610] wg2: entered allmulticast mode [ 1277.726245][T26656] wg2: entered promiscuous mode [ 1277.731552][T26656] wg2: entered allmulticast mode [ 1278.347700][T26664] ÿÿÿÿÿÿ: renamed from vlan1 [ 1278.972325][T26670] syzkaller0: entered promiscuous mode [ 1278.978431][T26670] syzkaller0: entered allmulticast mode [ 1283.071639][T26719] syzkaller0: entered promiscuous mode [ 1283.103880][T26719] syzkaller0: entered allmulticast mode [ 1286.421892][T26753] wg2: entered promiscuous mode [ 1286.433854][T26753] wg2: entered allmulticast mode [ 1286.526618][T26751] syzkaller0: entered promiscuous mode [ 1286.543734][T26751] syzkaller0: entered allmulticast mode [ 1291.256621][T26808] syzkaller0: entered promiscuous mode [ 1291.262680][T26808] syzkaller0: entered allmulticast mode [ 1295.902637][T26859] syzkaller0: entered promiscuous mode [ 1295.922240][T26859] syzkaller0: entered allmulticast mode [ 1300.593885][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.600325][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.892561][T26904] syzkaller0: entered promiscuous mode [ 1301.901468][T26904] syzkaller0: entered allmulticast mode [ 1301.950347][T26895] GPL: port 1(erspan0) entered blocking state [ 1301.957316][T26895] GPL: port 1(erspan0) entered disabled state [ 1301.964866][T26895] erspan0: entered allmulticast mode [ 1301.971464][T26895] erspan0: entered promiscuous mode [ 1301.978431][T26895] GPL: port 1(erspan0) entered blocking state [ 1301.984668][T26895] GPL: port 1(erspan0) entered forwarding state [ 1302.069822][T20730] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1305.631336][T26955] syzkaller0: entered promiscuous mode [ 1305.637358][T26955] syzkaller0: entered allmulticast mode [ 1311.836327][T27024] GPL: port 1(erspan0) entered blocking state [ 1311.861730][T27024] GPL: port 1(erspan0) entered disabled state [ 1311.920792][T27024] erspan0: entered allmulticast mode [ 1311.984969][T27024] erspan0: entered promiscuous mode [ 1312.054177][T27024] GPL: port 1(erspan0) entered blocking state [ 1312.060558][T27024] GPL: port 1(erspan0) entered forwarding state [ 1312.467405][T27030] syzkaller0: entered promiscuous mode [ 1312.472943][T27030] syzkaller0: entered allmulticast mode [ 1312.643285][T20730] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 1314.206038][T20730] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1316.607254][T20730] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1321.349438][T20730] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1321.612891][T27172] syzkaller0: entered promiscuous mode [ 1321.626950][T27172] syzkaller0: entered allmulticast mode [ 1326.270174][T27219] ±ÿ: renamed from team_slave_1 (while UP) [ 1329.598973][T27279] syzkaller0: entered promiscuous mode [ 1329.625814][T27279] syzkaller0: entered allmulticast mode [ 1329.870191][T27292] mac80211_hwsim hwsim115 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1332.266877][ T531] wlan1: Trigger new scan to find an IBSS to join [ 1333.274574][T27313] syzkaller0: entered promiscuous mode [ 1333.280256][T27313] syzkaller0: entered allmulticast mode [ 1335.645252][T27330] syzkaller0: entered promiscuous mode [ 1335.650857][T27330] syzkaller0: entered allmulticast mode [ 1335.704175][T27345] mac80211_hwsim hwsim117 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1337.217840][ T8525] wlan1: Trigger new scan to find an IBSS to join [ 1338.253913][T20872] wlan1: Trigger new scan to find an IBSS to join [ 1340.258191][T20871] wlan1: Trigger new scan to find an IBSS to join [ 1341.177369][T20871] wlan1: Creating new IBSS network, BSSID a6:45:9d:9a:f5:7c [ 1341.258690][T27377] syzkaller0: entered promiscuous mode [ 1341.264447][T27377] syzkaller0: entered allmulticast mode [ 1343.213798][T20871] wlan1: Trigger new scan to find an IBSS to join [ 1343.459274][T27390] syzkaller0: entered promiscuous mode [ 1343.464963][T27390] syzkaller0: entered allmulticast mode [ 1344.117309][T20871] wlan1: Creating new IBSS network, BSSID c2:e8:6d:ec:67:b6 [ 1345.409791][T27398] mac80211_hwsim hwsim111 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1348.580120][T27421] syzkaller0: entered promiscuous mode [ 1348.585774][T27421] syzkaller0: entered allmulticast mode [ 1351.893432][T27486] syzkaller0: entered promiscuous mode [ 1351.901290][T27486] syzkaller0: entered allmulticast mode [ 1354.545954][T20730] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 1354.663068][T27530] syzkaller0: entered promiscuous mode [ 1354.688330][T27530] syzkaller0: entered allmulticast mode [ 1357.562985][T27567] syzkaller0: entered promiscuous mode [ 1357.593759][T27567] syzkaller0: entered allmulticast mode [ 1361.130020][T27611] syzkaller0: entered promiscuous mode [ 1361.143683][T27611] syzkaller0: entered allmulticast mode [ 1362.025533][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.031906][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.845944][T27666] syzkaller0: entered promiscuous mode [ 1365.851577][T27666] syzkaller0: entered allmulticast mode [ 1368.257068][T27679] syzkaller0: entered promiscuous mode [ 1368.262577][T27679] syzkaller0: entered allmulticast mode [ 1368.529476][T20730] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 1371.210779][ T8502] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1371.581237][T27723] syzkaller0: entered promiscuous mode [ 1371.596897][T27723] syzkaller0: entered allmulticast mode [ 1376.637259][T27779] syzkaller0: entered promiscuous mode [ 1376.643563][T27779] syzkaller0: entered allmulticast mode [ 1380.049602][T20730] Bluetooth: hci3: unexpected event 0x1d length: 15 > 5 [ 1382.320415][T27838] syzkaller0: entered promiscuous mode [ 1382.343732][T27838] syzkaller0: entered allmulticast mode [ 1385.768900][T27903] syzkaller0: entered promiscuous mode [ 1385.789108][T27903] syzkaller0: entered allmulticast mode [ 1388.591425][T20730] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 1389.452204][T20730] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 1389.641998][T27959] syzkaller0: entered promiscuous mode [ 1389.653769][T27959] syzkaller0: entered allmulticast mode [ 1392.436198][T20730] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 1393.718174][T28020] syzkaller0: entered promiscuous mode [ 1393.723896][T28020] syzkaller0: entered allmulticast mode [ 1394.275868][T20730] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1397.792317][T20730] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1400.972416][T20730] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 1400.988240][T28083] syzkaller0: entered promiscuous mode [ 1401.013763][T28083] syzkaller0: entered allmulticast mode [ 1402.234281][T20872] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1403.712685][T28126] syzkaller0: entered promiscuous mode [ 1403.740874][T28126] syzkaller0: entered allmulticast mode [ 1406.164039][T20730] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 1408.898263][T28158] syzkaller0: entered promiscuous mode [ 1408.904021][T28158] syzkaller0: entered allmulticast mode [ 1411.194235][T28169] syzkaller0: entered promiscuous mode [ 1411.199941][T28169] syzkaller0: entered allmulticast mode [ 1411.497743][T20730] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 1413.831547][T28202] syzkaller0: entered promiscuous mode [ 1413.840470][T28202] syzkaller0: entered allmulticast mode [ 1414.174529][T20730] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 1416.677159][T20730] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1416.677207][T20730] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 1416.920163][T20730] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1417.822909][T20730] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1417.947929][T20730] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 1418.431284][T20730] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1420.110045][T20730] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 1421.013285][T20730] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 1421.822704][T28368] tun0: tun_chr_ioctl cmd 1074025675 [ 1421.842154][T28368] tun0: persist enabled [ 1422.249473][T20730] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1422.967136][T28400] syzkaller0: entered promiscuous mode [ 1422.972652][T28400] syzkaller0: entered allmulticast mode [ 1423.206103][T20730] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 1423.521415][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.528000][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.045482][T20730] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 1426.042400][T20730] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 1426.111447][T20730] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1426.111481][T20730] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 1426.246827][T28472] syzkaller0: entered promiscuous mode [ 1426.252477][T28472] syzkaller0: entered allmulticast mode [ 1429.067206][T28500] syzkaller0: entered promiscuous mode [ 1429.086993][T28500] syzkaller0: entered allmulticast mode [ 1429.204462][T20730] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 1431.661532][T28537] syzkaller0: entered promiscuous mode [ 1431.705662][T28537] syzkaller0: entered allmulticast mode [ 1431.727629][T20730] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 1431.909723][T28551] [ 1431.912450][T28551] ============================= [ 1431.917739][T28551] WARNING: suspicious RCU usage [ 1431.922659][T28551] syzkaller #0 Not tainted [ 1431.927639][T28551] ----------------------------- [ 1431.933119][T28551] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 1431.942186][T28551] [ 1431.942186][T28551] other info that might help us debug this: [ 1431.942186][T28551] [ 1431.952869][T28551] [ 1431.952869][T28551] rcu_scheduler_active = 2, debug_locks = 1 [ 1431.961097][T28551] 1 lock held by syz.1.8510/28551: [ 1431.966388][T28551] #0: ffffffff8d132180 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 1431.976714][T28551] [ 1431.976714][T28551] stack backtrace: [ 1431.982628][T28551] CPU: 1 PID: 28551 Comm: syz.1.8510 Not tainted syzkaller #0 [ 1431.990129][T28551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1432.000211][T28551] Call Trace: [ 1432.003532][T28551] [ 1432.006493][T28551] dump_stack_lvl+0x18c/0x250 [ 1432.011209][T28551] ? show_regs_print_info+0x20/0x20 [ 1432.016450][T28551] ? load_image+0x400/0x400 [ 1432.021000][T28551] lockdep_rcu_suspicious+0x1e1/0x300 [ 1432.026409][T28551] get_callchain_entry+0x2a9/0x3c0 [ 1432.031559][T28551] get_perf_callchain+0xc6/0x510 [ 1432.036532][T28551] ? put_callchain_entry+0xb0/0xb0 [ 1432.041683][T28551] __bpf_get_stack+0x2e4/0x540 [ 1432.046498][T28551] ? stack_map_get_build_id_offset+0x720/0x720 [ 1432.052737][T28551] ? __cant_sleep+0x220/0x220 [ 1432.057467][T28551] ? bpf_prog_14d9fb3786f83342+0x45/0x49 [ 1432.063224][T28551] bpf_get_stack_raw_tp+0x1a9/0x210 [ 1432.068464][T28551] bpf_prog_14d9fb3786f83342+0x45/0x49 [ 1432.073953][T28551] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 1432.079366][T28551] bpf_prog_test_run_syscall+0x317/0x4a0 [ 1432.085058][T28551] ? sock_gen_cookie+0x60/0x60 [ 1432.089861][T28551] ? sock_gen_cookie+0x60/0x60 [ 1432.094661][T28551] bpf_prog_test_run+0x321/0x390 [ 1432.099643][T28551] __sys_bpf+0x49d/0x890 [ 1432.103916][T28551] ? bpf_link_show_fdinfo+0x390/0x390 [ 1432.109342][T28551] ? lock_chain_count+0x20/0x20 [ 1432.114237][T28551] __x64_sys_bpf+0x7c/0x90 [ 1432.118696][T28551] do_syscall_64+0x55/0xa0 [ 1432.123151][T28551] ? clear_bhb_loop+0x40/0x90 [ 1432.127954][T28551] ? clear_bhb_loop+0x40/0x90 [ 1432.132833][T28551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1432.138940][T28551] RIP: 0033:0x7f3e32b9c629 [ 1432.143382][T28551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1432.163102][T28551] RSP: 002b:00007f3e33994028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1432.171551][T28551] RAX: ffffffffffffffda RBX: 00007f3e32e15fa0 RCX: 00007f3e32b9c629 [ 1432.179551][T28551] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1432.187551][T28551] RBP: 00007f3e32c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1432.195574][T28551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1432.203587][T28551] R13: 00007f3e32e16038 R14: 00007f3e32e15fa0 R15: 00007ffce5d89438 [ 1432.211605][T28551]