last executing test programs: 3.365215626s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_free_blocks\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) 1.57155915s ago: executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)='i', 0x1}], 0x1, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x100080c0) close(r0) 1.562258511s ago: executing program 2: r0 = socket$kcm(0x25, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10040) 1.454158338s ago: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000440)}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)="93", 0x34000}], 0x1}, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x23000) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x11) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff0000000036090000000000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f6ff760000e0be9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.446698789s ago: executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.090329583s ago: executing program 3: socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000e9ffffffffffffff20000000bc70feff0800000054"], 0x0}, 0x90) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00"], 0xfe33) 940.408537ms ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x69, 0x4, 0x5, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000080), 0x0}, 0x20) 900.612273ms ago: executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 757.785025ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) 667.967238ms ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 640.041553ms ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'ip6tnl0\x00', @random="2b0100004ec6"}) 584.467011ms ago: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000000)=@l2={0xa, 0x0, @fixed}, 0x80, 0x0}, 0x0) 559.088635ms ago: executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x10, 0x1}], 0x10}, 0x0) 423.722286ms ago: executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0x20000b}, 0x38) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000004800913a745c7388641f9c0e0a"], 0xfe33) 415.764477ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 405.048699ms ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000004d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef019dd2b97552b11d2180"], 0x33fe0) 351.810486ms ago: executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c02e8fc55a10a0015000600142603600e120800170000000401a8000700fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 337.127419ms ago: executing program 0: socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000e9ffffffffffffff20000000bc70feff0800000054"], 0x0}, 0x90) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00"], 0xfe33) 267.14183ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 239.945823ms ago: executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffefc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 224.277066ms ago: executing program 4: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=""/4100, 0x1004}, 0x2020) 196.43795ms ago: executing program 2: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001a40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\b'}], 0x18}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\b'}], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\b'}], 0x18}, 0x80c0) 164.202045ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) 156.904956ms ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a07, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x800c6613, &(0x7f0000000040)) 121.252862ms ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x86, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x70) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 87.618847ms ago: executing program 2: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x10, 0x1}], 0x10}, 0x0) 86.420167ms ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 68.43931ms ago: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 33.170985ms ago: executing program 3: r0 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x80047453, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000007c0)) sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 0s ago: executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e0005740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) kernel console output (not intermixed with test programs): veth0_vlan: link becomes ready [ 58.773475][ T3575] device veth1_macvtap entered promiscuous mode [ 58.792540][ T3570] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.801429][ T3570] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.810664][ T3570] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.820810][ T3570] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.837931][ T3566] device veth1_vlan entered promiscuous mode [ 58.845436][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.854389][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.862897][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.870550][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.878436][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.886525][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.894969][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.903974][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.911884][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.922043][ T3578] device veth0_vlan entered promiscuous mode [ 58.967099][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.979464][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.994907][ T3575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.004707][ T3578] device veth1_vlan entered promiscuous mode [ 59.022880][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.031489][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.043724][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.053305][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.062092][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.076791][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.088472][ T3575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.130764][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.143558][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.158198][ T3575] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.167653][ T3575] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.186066][ T3575] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.195239][ T3575] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.229147][ T3566] device veth0_macvtap entered promiscuous mode [ 59.252842][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.261324][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.270725][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.279686][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.288546][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.297125][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.324685][ T3566] device veth1_macvtap entered promiscuous mode [ 59.327277][ T3625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.338340][ T3578] device veth0_macvtap entered promiscuous mode [ 59.350470][ T3625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.360975][ T3573] device veth0_vlan entered promiscuous mode [ 59.368723][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.376945][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.385083][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.393378][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.401153][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.409151][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.425639][ T3578] device veth1_macvtap entered promiscuous mode [ 59.449562][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.460420][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.474074][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.484924][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.496735][ T3566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.519747][ T3573] device veth1_vlan entered promiscuous mode [ 59.531114][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.539368][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.547414][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.556055][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.567878][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.578519][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.588720][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.599405][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.610790][ T3566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.635338][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.645848][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.655110][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.669842][ T3625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.674885][ T3566] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.678658][ T3582] Bluetooth: hci2: command tx timeout [ 59.689036][ T3566] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.692292][ T3567] Bluetooth: hci3: command tx timeout [ 59.700906][ T3566] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.706563][ T3567] Bluetooth: hci4: command tx timeout [ 59.715004][ T48] Bluetooth: hci1: command tx timeout [ 59.720476][ T3567] Bluetooth: hci0: command tx timeout [ 59.731395][ T3625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.739214][ T3566] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.764622][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.776030][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.786390][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.797338][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.807404][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.817859][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.829330][ T3578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.839405][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.853363][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.863239][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.873731][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.883788][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.894604][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.906972][ T3578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.919852][ T3578] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.928841][ T3578] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.937632][ T3578] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.946460][ T3578] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.958020][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.965994][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.974776][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.984802][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.993689][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.017009][ T3573] device veth0_macvtap entered promiscuous mode [ 60.035060][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.044082][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.055343][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.060794][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.075365][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.084300][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.173327][ T3573] device veth1_macvtap entered promiscuous mode [ 60.224979][ T3625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.233323][ T3625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.248794][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.276498][ T3647] netlink: 'syz-executor.3': attribute type 22 has an invalid length. [ 60.326619][ T3625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.354152][ T3625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.355672][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.376426][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.387375][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.398161][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.408533][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.419189][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.430461][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.441743][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.454244][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.467694][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.495328][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.506209][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.517331][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.528671][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.539409][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.550235][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.561208][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.576478][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.604251][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.618957][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.629132][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.660703][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.669439][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.688763][ T3573] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.701398][ T3573] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.713178][ T3573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.722710][ T3573] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.789085][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.797752][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.820917][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.848484][ T3655] Illegal XDP return value 1939931664 on prog (id 4) dev N/A, expect packet loss! [ 60.854818][ T3625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.907275][ T3625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.966841][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.003154][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.055221][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.074150][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.148136][ C0] hrtimer: interrupt took 63406 ns [ 61.174293][ T3659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.216366][ T3659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.230056][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.272842][ T3659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.280881][ T3659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.314302][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.436449][ T3679] syz-executor.1[3679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.446229][ T3679] syz-executor.1[3679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.651352][ T3679] device syzkaller0 entered promiscuous mode [ 61.742505][ T48] Bluetooth: hci0: command tx timeout [ 61.743042][ T3567] Bluetooth: hci2: command tx timeout [ 61.747960][ T48] Bluetooth: hci1: command tx timeout [ 61.753326][ T3567] Bluetooth: hci4: command tx timeout [ 61.760657][ T3582] Bluetooth: hci3: command tx timeout [ 62.058213][ T3567] Bluetooth: hci4: unexpected event 0x03 length: 15 > 11 [ 62.295428][ T3716] device wlan1 entered promiscuous mode [ 62.546159][ T3729] syz-executor.1[3729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.546254][ T3729] syz-executor.1[3729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.793232][ T3729] device syzkaller0 entered promiscuous mode [ 63.069729][ T3748] device wlan1 entered promiscuous mode [ 63.597544][ T3777] syz-executor.3[3777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.597642][ T3777] syz-executor.3[3777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.959951][ T3777] device syzkaller0 entered promiscuous mode [ 66.963889][ T3937] device syzkaller0 entered promiscuous mode [ 67.899027][ T3991] device syzkaller0 entered promiscuous mode [ 68.838044][ T4035] device syzkaller0 entered promiscuous mode [ 69.446428][ T4073] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 69.496943][ T4073] netlink: 16166 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.769603][ T4082] device syzkaller0 entered promiscuous mode [ 70.186214][ T4112] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 70.211847][ T4112] netlink: 16166 bytes leftover after parsing attributes in process `syz-executor.3'. [ 70.856221][ T4135] device syzkaller0 entered promiscuous mode [ 70.996220][ T4145] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 71.017599][ T4145] netlink: 16166 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.202753][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.209294][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.312726][ T4157] device syzkaller0 entered promiscuous mode [ 71.748484][ T4185] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 71.773740][ T3567] Bluetooth: hci4: unexpected event 0x03 length: 15 > 11 [ 71.782094][ T4185] netlink: 16166 bytes leftover after parsing attributes in process `syz-executor.4'. [ 72.363008][ T4203] device syzkaller0 entered promiscuous mode [ 72.537803][ T3567] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 72.619878][ T4218] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 72.662494][ T4218] netlink: 16166 bytes leftover after parsing attributes in process `syz-executor.2'. [ 72.919041][ T4237] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 72.938656][ T4237] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.986754][ T4237] bridge0: port 3(batadv0) entered blocking state [ 72.996194][ T4237] bridge0: port 3(batadv0) entered disabled state [ 73.034262][ T4237] device batadv0 entered promiscuous mode [ 73.067614][ T4237] bridge0: port 3(batadv0) entered blocking state [ 73.074437][ T4237] bridge0: port 3(batadv0) entered forwarding state [ 73.100091][ T3567] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 73.235002][ T4248] device syzkaller0 entered promiscuous mode [ 73.292150][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 73.301620][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 73.757303][ T4273] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 73.795105][ T3567] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 73.795745][ T4273] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.821533][ T4273] bridge0: port 3(batadv0) entered blocking state [ 73.841487][ T4273] bridge0: port 3(batadv0) entered disabled state [ 73.854064][ T4273] device batadv0 entered promiscuous mode [ 73.877625][ T4273] bridge0: port 3(batadv0) entered blocking state [ 73.884241][ T4273] bridge0: port 3(batadv0) entered forwarding state [ 74.117164][ T102] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 74.126638][ T102] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 74.168113][ T4286] device syzkaller0 entered promiscuous mode [ 74.354546][ T4304] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 74.365536][ T4304] IPv6: NLM_F_CREATE should be specified when creating new route [ 74.384851][ T3567] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 74.536575][ T4313] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 74.597230][ T4313] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.619331][ T4313] bridge0: port 3(batadv0) entered blocking state [ 74.629470][ T4313] bridge0: port 3(batadv0) entered disabled state [ 74.661106][ T4313] device batadv0 entered promiscuous mode [ 74.669166][ T4313] bridge0: port 3(batadv0) entered blocking state [ 74.675754][ T4313] bridge0: port 3(batadv0) entered forwarding state [ 74.684762][ T4316] netlink: 14556 bytes leftover after parsing attributes in process `syz-executor.0'. [ 74.918754][ T4333] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 75.027600][ T4335] device syzkaller0 entered promiscuous mode [ 75.076373][ T3659] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 75.085808][ T3659] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 75.267719][ T4351] netlink: 14556 bytes leftover after parsing attributes in process `syz-executor.1'. [ 75.337474][ T4353] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 75.374967][ T4353] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 75.617568][ T4369] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 75.661480][ T4369] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.905759][ T4383] netlink: 14556 bytes leftover after parsing attributes in process `syz-executor.3'. [ 76.211845][ T4397] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 76.273493][ T4397] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 76.303737][ T14] cfg80211: failed to load regulatory.db [ 76.386076][ T4405] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 76.407405][ T4405] IPv6: NLM_F_CREATE should be specified when creating new route [ 76.671111][ T4419] netlink: 14556 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.700746][ T4414] device lo entered promiscuous mode [ 77.024598][ T4439] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 77.191299][ T4448] netlink: 14556 bytes leftover after parsing attributes in process `syz-executor.4'. [ 77.444251][ T4459] device lo entered promiscuous mode [ 77.679763][ T4480] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 78.766490][ T4537] device lo entered promiscuous mode [ 79.966238][ T4615] netlink: 'syz-executor.2': attribute type 14 has an invalid length. [ 79.989511][ T4615] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 80.439199][ T4646] netlink: 'syz-executor.4': attribute type 14 has an invalid length. [ 80.514203][ T4646] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 81.133923][ T4687] netlink: 'syz-executor.4': attribute type 14 has an invalid length. [ 81.191472][ T4687] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 81.751930][ T4721] netlink: 'syz-executor.1': attribute type 14 has an invalid length. [ 81.832559][ T4721] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 82.648513][ T4762] netlink: 'syz-executor.2': attribute type 14 has an invalid length. [ 82.709365][ T4762] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 82.919849][ T4775] netlink: 126372 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.978843][ T4775] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 83.001083][ T4775] netlink: 1752 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.435719][ T4808] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 83.610714][ T4820] netlink: 126372 bytes leftover after parsing attributes in process `syz-executor.1'. [ 83.637582][ T4820] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 83.670747][ T4820] netlink: 1752 bytes leftover after parsing attributes in process `syz-executor.1'. [ 84.073695][ T4837] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 84.164631][ T34] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.303400][ T4848] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 84.349078][ T34] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.352015][ T4848] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.0'. [ 84.472008][ T34] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.590812][ T34] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.071344][ T4870] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 85.217237][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.227296][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.235620][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.263999][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.274272][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.281550][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.963165][ T4921] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 86.064260][ T4876] chnl_net:caif_netlink_parms(): no params data found [ 86.615883][ T4876] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.635507][ T4876] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.688781][ T4876] device bridge_slave_0 entered promiscuous mode [ 86.724126][ T4876] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.731259][ T4876] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.779243][ T4876] device bridge_slave_1 entered promiscuous mode [ 86.887790][ T4957] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 86.989123][ T4876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.039016][ T4876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.176738][ T4876] team0: Port device team_slave_0 added [ 87.249990][ T34] device hsr_slave_0 left promiscuous mode [ 87.300855][ T34] device hsr_slave_1 left promiscuous mode [ 87.342023][ T3567] Bluetooth: hci1: command tx timeout [ 87.356544][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.392353][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.445200][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.474945][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.517949][ T34] device batadv0 left promiscuous mode [ 87.551733][ T34] bridge0: port 3(batadv0) entered disabled state [ 87.583904][ T34] device bridge_slave_1 left promiscuous mode [ 87.607922][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.661937][ T34] device bridge_slave_0 left promiscuous mode [ 87.668208][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.709339][ T34] device veth1_macvtap left promiscuous mode [ 87.722929][ T34] device veth0_macvtap left promiscuous mode [ 87.742190][ T34] device veth1_vlan left promiscuous mode [ 87.748242][ T34] device veth0_vlan left promiscuous mode [ 88.117163][ T34] team0 (unregistering): Port device team_slave_1 removed [ 88.145586][ T34] team0 (unregistering): Port device team_slave_0 removed [ 88.175128][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.201032][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.268751][ T34] bond0 (unregistering): Released all slaves [ 88.349628][ T4876] team0: Port device team_slave_1 added [ 88.501262][ T4876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.545283][ T4876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.699086][ T4876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.715488][ T5024] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! [ 88.752831][ T4876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.759808][ T4876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.833157][ T4876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.068706][ T4876] device hsr_slave_0 entered promiscuous mode [ 89.105508][ T4876] device hsr_slave_1 entered promiscuous mode [ 89.431876][ T3567] Bluetooth: hci1: command tx timeout [ 90.600001][ T4876] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.652328][ T4876] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.687552][ T4876] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.753639][ T4876] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.040979][ T4876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.135409][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.156031][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.193624][ T4876] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.235195][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.253851][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.279913][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.287222][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.351972][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.374869][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.408201][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.450740][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.457994][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.501974][ T3567] Bluetooth: hci1: command tx timeout [ 91.503034][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.532033][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.561262][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.595026][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.644747][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.685534][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.736792][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.760918][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.787251][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.802935][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.827817][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.871284][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.702357][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.709986][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.735029][ T4876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.813690][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.850993][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.937567][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.973827][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.995201][ T4876] device veth0_vlan entered promiscuous mode [ 93.047202][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.069938][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.108645][ T4876] device veth1_vlan entered promiscuous mode [ 93.237586][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.258625][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.279572][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.296328][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.317669][ T4876] device veth0_macvtap entered promiscuous mode [ 93.385444][ T4876] device veth1_macvtap entered promiscuous mode [ 93.463893][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.523409][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.548466][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.583869][ T48] Bluetooth: hci1: command tx timeout [ 93.584105][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.614795][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.635703][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.651294][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.667331][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.694530][ T4876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.742132][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.765739][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.788125][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.823733][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.863869][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.893692][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.923088][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.944295][ T5256] netlink: 7727 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.964027][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.024322][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.042000][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.052300][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.063465][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.075960][ T4876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.090816][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.130658][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.150224][ T5256] netlink: 7727 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.175180][ T5259] netlink: 7727 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.217805][ T4876] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.242563][ T4876] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.270221][ T4876] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.285234][ T4876] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.543759][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.577187][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.701860][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.722282][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.747115][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.844621][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.058589][ T5311] netlink: 126372 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.117564][ T5311] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 95.193970][ T5311] netlink: 1752 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.423924][ T5333] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 95.469780][ T5336] netlink: 16222 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.472021][ T5333] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.775267][ T5352] netlink: 7727 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.842045][ T5352] netlink: 7727 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.900012][ T5361] netlink: 7727 bytes leftover after parsing attributes in process `syz-executor.1'. [ 97.266267][ T5450] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 98.121124][ T5485] device syzkaller0 entered promiscuous mode [ 98.970175][ T5541] device lo entered promiscuous mode [ 99.085549][ T5538] tap0: tun_chr_ioctl cmd 1074025675 [ 99.098069][ T5538] tap0: persist enabled [ 99.156022][ T5541] tap0: tun_chr_ioctl cmd 1074025675 [ 99.171933][ T5541] tap0: persist disabled [ 99.632850][ T5575] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 99.643395][ T5575] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 99.659212][ T5575] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 99.668412][ T5575] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 99.692334][ T5575] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 100.193055][ T5600] __nla_validate_parse: 9 callbacks suppressed [ 100.193071][ T5600] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.708675][ T5628] syz-executor.3[5628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.708768][ T5628] syz-executor.3[5628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.306347][ T5659] tap0: tun_chr_ioctl cmd 1074025672 [ 101.326587][ T5659] tap0: ignored: set checksum enabled [ 101.520720][ T5668] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.769605][ T5680] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 101.834828][ T5680] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 101.861158][ T5687] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 101.883646][ T5692] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 101.940606][ T5680] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 102.025383][ T5698] tap0: tun_chr_ioctl cmd 1074025672 [ 102.044103][ T5698] tap0: ignored: set checksum enabled [ 102.172979][ T5705] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.560874][ T5725] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 102.597961][ T5728] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 102.627283][ T5725] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 102.659052][ T5728] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.731942][ T5732] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 102.754977][ T5730] can: request_module (can-proto-0) failed. [ 102.838740][ T5736] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 103.474586][ T5767] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.203959][ T5794] can: request_module (can-proto-0) failed. [ 104.336280][ T5807] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.2'. [ 104.809899][ T5833] netlink: 14384 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.838242][ T5835] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.491963][ T5853] can: request_module (can-proto-0) failed. [ 105.637676][ T5864] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.695538][ T5867] netlink: 14384 bytes leftover after parsing attributes in process `syz-executor.0'. [ 105.857290][ T5873] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. [ 105.865590][ T5870] tap0: tun_chr_ioctl cmd 1074025675 [ 105.892431][ T5870] tap0: persist enabled [ 105.933167][ T5868] tap0: tun_chr_ioctl cmd 1074025675 [ 105.943489][ T5868] tap0: persist disabled [ 106.569621][ T5901] netlink: 14384 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.089738][ T5903] can: request_module (can-proto-0) failed. [ 107.369060][ T5930] tap0: tun_chr_ioctl cmd 1074025675 [ 107.376061][ T5942] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.425716][ T5930] tap0: persist enabled [ 107.439233][ T5925] tap0: tun_chr_ioctl cmd 1074025675 [ 107.465151][ T5925] tap0: persist disabled [ 108.140036][ T5969] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.278600][ T3567] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 108.278632][ T3567] Bluetooth: unknown link type 185 [ 108.711713][ T5961] can: request_module (can-proto-0) failed. [ 108.849971][ T5989] validate_nla: 11 callbacks suppressed [ 108.849987][ T5989] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 108.871786][ T5989] netlink: 'syz-executor.3': attribute type 22 has an invalid length. [ 108.913147][ T5989] netlink: 14384 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.969484][ T5984] tap0: tun_chr_ioctl cmd 1074025675 [ 109.024777][ T5984] tap0: persist enabled [ 109.086424][ T5987] tap0: tun_chr_ioctl cmd 1074025675 [ 109.091857][ T5987] tap0: persist disabled [ 109.465458][ T3567] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 109.465488][ T3567] Bluetooth: unknown link type 185 [ 110.301759][ T3567] Bluetooth: hci3: command tx timeout [ 110.467022][ T3567] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 110.467054][ T3567] Bluetooth: unknown link type 185 [ 110.526660][ T6034] tap0: tun_chr_ioctl cmd 1074025675 [ 110.535861][ T6034] tap0: persist enabled [ 110.553942][ T6034] tap0: tun_chr_ioctl cmd 1074025675 [ 110.564862][ T6034] tap0: persist disabled [ 110.929247][ T6069] netlink: 81772 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.035576][ T6067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.597520][ T3567] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 111.597554][ T3567] Bluetooth: unknown link type 185 [ 111.769280][ T6073] can: request_module (can-proto-0) failed. [ 112.028669][ T6103] netlink: 81772 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.070075][ T6102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.394033][ T3567] Bluetooth: hci3: command tx timeout [ 112.394580][ T48] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 112.399451][ T48] Bluetooth: unknown link type 185 [ 112.542719][ T48] Bluetooth: hci4: command tx timeout [ 113.139626][ T6121] can: request_module (can-proto-0) failed. [ 113.270817][ T6145] netlink: 81772 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.320542][ T6143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.662270][ T48] Bluetooth: hci2: command tx timeout [ 114.621913][ T48] Bluetooth: hci4: command tx timeout [ 116.687179][ T6180] syz-executor.3[6180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.687267][ T6180] syz-executor.3[6180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.893198][ T6188] netlink: 81772 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.029810][ T6187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.190886][ T6206] EXT4-fs warning (device sda1): __ext4_ioctl:1246: Setting inode version is not supported with metadata_csum enabled. [ 117.386464][ T6211] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 117.408131][ T6211] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.546204][ T6198] can: request_module (can-proto-0) failed. [ 118.084045][ T6230] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 118.115935][ T6230] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 118.366682][ T6247] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 118.379932][ T6247] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.016947][ T6263] can: request_module (can-proto-0) failed. [ 119.107734][ T6281] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 119.198044][ T6281] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.505000][ T6289] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 119.551867][ T6289] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 119.663321][ T6300] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 119.756335][ T6300] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.976926][ T6315] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 120.020268][ T6315] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.492401][ T6314] can: request_module (can-proto-0) failed. [ 120.685025][ T6341] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 120.701253][ T6341] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.891933][ T6345] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 120.924394][ T6345] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.254217][ T6353] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 121.924383][ T6389] EXT4-fs warning (device sda1): __ext4_ioctl:1246: Setting inode version is not supported with metadata_csum enabled. [ 122.187398][ T6379] can: request_module (can-proto-0) failed. [ 122.419888][ T6410] validate_nla: 1 callbacks suppressed [ 122.419907][ T6410] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 122.506922][ T6410] __nla_validate_parse: 2 callbacks suppressed [ 122.506936][ T6410] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.056721][ T6430] EXT4-fs warning (device sda1): __ext4_ioctl:1246: Setting inode version is not supported with metadata_csum enabled. [ 123.407814][ T6445] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 123.446038][ T6445] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.593054][ T6438] can: request_module (can-proto-0) failed. [ 123.870492][ T6467] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 124.142219][ T6467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.261810][ T6467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.311552][ T6485] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 124.313520][ T6467] bond0 (unregistering): Released all slaves [ 124.321057][ T6485] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 124.361916][ T6485] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.816542][ T6513] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 124.850072][ T6513] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 124.886322][ T6513] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.948934][ T6522] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 125.044391][ T6524] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 125.080840][ T6524] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.423682][ T6551] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 125.468865][ T6551] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 125.518312][ T6551] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.146485][ T6586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.209551][ T6586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.270597][ T6586] bond0 (unregistering): Released all slaves [ 126.620375][ T6609] Â: renamed from pim6reg1 [ 127.337342][ T48] Bluetooth: hci3: Malformed LE Event: 0x0d [ 127.389846][ T6655] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.651153][ T6668] validate_nla: 4 callbacks suppressed [ 127.651169][ T6668] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 127.758657][ T6668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.788172][ T6680] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 127.838828][ T6668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.879013][ T6668] bond0 (unregistering): Released all slaves [ 128.253183][ T6726] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 128.341812][ T6726] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 128.350002][ T6726] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.920515][ T6770] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 129.117003][ T6770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.151612][ T6770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.280915][ T6770] bond0 (unregistering): Released all slaves [ 129.366313][ T6782] Â: renamed from pim6reg1 [ 129.821194][ T6819] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.901901][ T6819] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 130.306684][ T48] Bluetooth: hci2: Malformed LE Event: 0x0d [ 130.956837][ T6888] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 131.378450][ T6924] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 131.804609][ T6943] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 132.279080][ T6973] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 132.308273][ T6973] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.360942][ T6973] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.623657][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.630020][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.646561][ T7042] tap0: tun_chr_ioctl cmd 1074025677 [ 133.660759][ T7042] tap0: linktype set to 0 [ 133.697189][ T7042] tap0: tun_chr_ioctl cmd 35108 [ 133.766817][ T7048] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 134.067006][ T7062] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 134.127120][ T7062] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.2'. [ 134.160092][ T7062] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.324727][ T7101] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.384752][ T7108] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 135.427714][ T7108] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.449993][ T7108] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.532684][ T7147] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.591649][ T7152] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 136.651602][ T7152] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.711790][ T7152] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.766608][ T7160] device veth1_macvtap left promiscuous mode [ 136.791789][ T7160] device macsec0 entered promiscuous mode [ 136.881538][ T7164] device veth1_macvtap entered promiscuous mode [ 136.897857][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.957207][ T7169] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.965963][ T7169] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.080687][ T7169] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.088133][ T7169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.096365][ T7169] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.103804][ T7169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.162481][ T7169] device bridge0 entered promiscuous mode [ 137.279154][ T7180] tap0: tun_chr_ioctl cmd 1074025677 [ 137.290304][ T7180] tap0: linktype set to 0 [ 137.298263][ T7180] tap0: tun_chr_ioctl cmd 35108 [ 138.286029][ T7201] device veth1_macvtap left promiscuous mode [ 138.305461][ T7201] device macsec0 entered promiscuous mode [ 138.351503][ T7203] device veth1_macvtap entered promiscuous mode [ 138.396560][ T7206] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.560740][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.568471][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.601950][ T7214] device bridge0 left promiscuous mode [ 138.669694][ T7217] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.676924][ T7217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.684404][ T7217] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.691528][ T7217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.710765][ T7217] device bridge0 entered promiscuous mode [ 139.660223][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.668514][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.726058][ T48] Bluetooth: hci4: ISO packet too small [ 139.787214][ T7269] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.794421][ T7269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.801880][ T7269] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.809001][ T7269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.856351][ T7269] device bridge0 entered promiscuous mode [ 140.323785][ T7298] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 140.493852][ T7302] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.501419][ T7302] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.523030][ T7302] device bridge0 left promiscuous mode [ 140.610861][ T7305] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.618036][ T7305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.625499][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.632649][ T7305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.664855][ T7305] device bridge0 entered promiscuous mode [ 141.144307][ T7327] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 141.337167][ T48] Bluetooth: hci0: ISO packet too small [ 141.594135][ T7349] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 141.622519][ T7349] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.027403][ T48] Bluetooth: hci1: ISO packet too small [ 142.302909][ T7376] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.761515][ T48] Bluetooth: hci4: ISO packet too small [ 143.105038][ T7413] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.087393][ T7482] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.563549][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.774245][ T7514] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.061027][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.528404][ T7548] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.823425][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.017512][ T7579] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 147.490434][ T7589] Zero length message leads to an empty skb [ 148.939443][ T7655] netlink: 131748 bytes leftover after parsing attributes in process `syz-executor.4'. [ 148.997468][ T7655] netlink: zone id is out of range [ 149.030827][ T7655] netlink: zone id is out of range [ 149.047190][ T7655] netlink: zone id is out of range [ 149.069218][ T7655] netlink: zone id is out of range [ 149.074639][ T7655] netlink: zone id is out of range [ 149.079884][ T7655] netlink: zone id is out of range [ 149.102120][ T7655] netlink: zone id is out of range [ 149.141819][ T7655] netlink: zone id is out of range [ 149.161465][ T7655] netlink: zone id is out of range [ 149.182568][ T7655] netlink: zone id is out of range [ 149.802734][ T7700] netlink: 131748 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.405721][ T7772] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 151.790217][ T7787] device syzkaller0 entered promiscuous mode [ 154.184049][ T7871] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 154.890689][ T48] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 156.374976][ T3582] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 156.942476][ T3582] Bluetooth: hci3: command tx timeout [ 156.978900][ T3582] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 157.064852][ T7989] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.907268][ T8023] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.464672][ T48] Bluetooth: hci0: command tx timeout [ 158.668907][ T8052] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.879025][ T8060] IPv6: NLM_F_CREATE should be specified when creating new route [ 159.253055][ T8086] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 160.541956][ T48] Bluetooth: hci0: command tx timeout [ 161.867366][ T8196] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.496241][ T8230] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.909672][ T8295] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 163.969023][ T8295] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.061260][ T8295] syz_tun: refused to change device tx_queue_len [ 164.102076][ T8295] net_ratelimit: 326 callbacks suppressed [ 164.102094][ T8295] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 164.585269][ T8318] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 164.674088][ T8318] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 164.682818][ T8318] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.247506][ T8346] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 165.309466][ T8346] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.785522][ T8372] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 165.802335][ T8372] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.867576][ T8372] syz_tun: refused to change device tx_queue_len [ 165.900517][ T8372] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 165.963121][ T8382] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 165.978381][ T8382] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.547457][ T8442] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 167.576145][ T8442] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 167.631789][ T8442] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.185388][ T8465] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 168.211936][ T8465] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.819397][ T48] Bluetooth: hci4: Malformed Event: 0x2f [ 168.856652][ T8498] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 168.866386][ T8498] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.199983][ T8513] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.1'. [ 169.561605][ T48] Bluetooth: hci3: Malformed Event: 0x2f [ 170.075417][ T8545] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.578731][ T48] Bluetooth: hci4: Malformed Event: 0x2f [ 171.733998][ T8600] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.893723][ T8610] netlink: 69284 bytes leftover after parsing attributes in process `syz-executor.4'. [ 171.967242][ T8610] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 175.019991][ T8731] device sit0 entered promiscuous mode [ 175.661974][ T3584] Bluetooth: hci0: command 0x0406 tx timeout [ 175.662011][ T3567] Bluetooth: hci4: command 0x0406 tx timeout [ 175.668023][ T3584] Bluetooth: hci2: command 0x0406 tx timeout [ 175.674952][ T3581] Bluetooth: hci3: command 0x0406 tx timeout [ 176.022792][ T8780] device sit0 left promiscuous mode [ 176.188220][ T8786] device sit0 entered promiscuous mode [ 176.494372][ T8798] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.066779][ T8833] device sit0 left promiscuous mode [ 177.254101][ T8833] device sit0 entered promiscuous mode [ 177.960355][ T8880] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.058199][ T8888] device sit0 entered promiscuous mode [ 179.122212][ T8933] device sit0 entered promiscuous mode [ 179.337471][ T8936] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.466248][ T8980] device sit0 left promiscuous mode [ 180.605773][ T8980] device sit0 entered promiscuous mode [ 181.681536][ T9036] device sit0 left promiscuous mode [ 181.924316][ T9038] device sit0 entered promiscuous mode [ 182.415775][ T9049] device syzkaller0 entered promiscuous mode [ 182.424731][ T9063] netlink: 'syz-executor.2': attribute type 28 has an invalid length. [ 183.020876][ T9099] EXT4-fs warning (device sda1): ext4_group_extend:1878: need to use ext2online to resize further [ 183.151404][ T9100] device syzkaller0 entered promiscuous mode [ 183.310022][ T9113] device syzkaller0 entered promiscuous mode [ 183.495733][ T9125] device wlan0 entered promiscuous mode [ 183.677464][ T9142] EXT4-fs warning (device sda1): ext4_group_extend:1878: need to use ext2online to resize further [ 185.956456][ T9240] EXT4-fs warning (device sda1): ext4_group_extend:1878: need to use ext2online to resize further [ 186.565797][ T9275] device syzkaller0 entered promiscuous mode [ 187.367215][ T9311] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 1 (only 8 groups) [ 187.508974][ T9318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.556459][ T9324] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.962277][ T9353] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 1 (only 8 groups) [ 187.986968][ T3581] Bluetooth: hci3: unexpected event 0x03 length: 13 > 11 [ 188.516023][ T9385] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 188.534923][ T9385] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.585027][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.595388][ T9387] netlink: 'syz-executor.2': attribute type 49 has an invalid length. [ 188.604050][ T9387] netlink: 'syz-executor.2': attribute type 49 has an invalid length. [ 188.824879][ T9394] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 188.836191][ T9394] netlink: 24859 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.848018][ T9400] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.011605][ T9411] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 189.040777][ T9411] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 189.078575][ T9411] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.205702][ T3581] Bluetooth: hci2: unexpected event 0x03 length: 13 > 11 [ 189.271447][ T9428] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.322987][ T9431] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 189.357266][ T9431] netlink: 24859 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.530985][ T9441] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.546512][ T9441] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 189.740342][ T9453] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 189.754342][ T9453] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 189.765225][ T9453] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.270022][ T3581] Bluetooth: hci1: unexpected event 0x03 length: 13 > 11 [ 191.498158][ T3581] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 192.351162][ T3581] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 192.703007][ T3581] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 193.202499][ T9610] __nla_validate_parse: 9 callbacks suppressed [ 193.202517][ T9610] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.319090][ T3581] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 193.648512][ T9631] validate_nla: 15 callbacks suppressed [ 193.648529][ T9631] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 193.669282][ T9631] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.070045][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.076431][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.319179][ T9822] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 198.338529][ T9822] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 198.840543][ T9852] netlink: 17276 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.430343][ T9866] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 199.451538][ T9866] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 199.463199][ T9856] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 199.496294][ T9856] batman_adv: batadv0: Adding interface: team0 [ 199.515550][ T9856] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.556934][ T9856] batman_adv: batadv0: Interface activated: team0 [ 199.639152][ T9873] netlink: 134268 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.672371][ T9873] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 199.680489][ T9873] netlink: 511 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.836288][ T9884] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 199.859557][ T9890] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 199.876782][ T9890] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 199.893584][ T9884] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 199.932258][ T9891] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 200.210901][ T9910] netlink: 134268 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.232104][ T9910] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 200.255787][ T9910] netlink: 511 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.761030][ T9950] netlink: 134268 bytes leftover after parsing attributes in process `syz-executor.0'. [ 200.781968][ T9950] netlink: 511 bytes leftover after parsing attributes in process `syz-executor.0'. [ 201.159221][ T9972] batman_adv: batadv0: Adding interface: team0 [ 201.189597][ T9972] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.221922][ T9972] batman_adv: batadv0: Interface activated: team0 [ 201.275963][ T9984] netlink: 134268 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.294865][ T9984] netlink: 511 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.576300][ T9991] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 205.168026][T10193] validate_nla: 28 callbacks suppressed [ 205.168048][T10193] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 205.213744][T10193] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 207.263339][T10313] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 207.302018][T10313] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.331123][T10311] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 207.351977][T10311] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 207.549746][ T3581] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 207.550445][ T3581] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 207.768406][T10347] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 207.790721][T10347] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 207.809315][T10345] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 207.841318][T10345] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.2'. [ 208.323539][T10384] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 208.350901][T10384] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 208.580471][T10396] device syzkaller0 entered promiscuous mode [ 208.619177][T10398] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 208.637754][T10398] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.183105][T10419] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 209.191232][T10419] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.566040][T10445] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 209.574660][T10445] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.230795][T10454] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 210.262701][T10454] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.485632][T10463] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 210.514500][T10463] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 210.735648][T10477] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 211.503313][ T3581] Bluetooth: hci1: command 0x0406 tx timeout [ 211.594194][ T3584] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 211.602852][ T3584] Bluetooth: hci0: Injecting HCI hardware error event [ 211.610970][ T3581] Bluetooth: hci0: hardware error 0x00 [ 212.347786][T10515] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 212.395108][T10515] device veth0_macvtap left promiscuous mode [ 212.413104][T10515] device macvtap0 entered promiscuous mode [ 214.136211][T10581] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.4'. [ 214.231892][ T3581] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 215.353215][T10631] pim6reg0: tun_chr_ioctl cmd 1074025678 [ 215.358916][T10631] pim6reg0: group set to 0 [ 215.670000][T10642] tun0: tun_chr_ioctl cmd 1074025694 [ 215.694778][T10642] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.092791][T10669] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.368368][T10676] pim6reg0: tun_chr_ioctl cmd 1074025678 [ 216.407168][T10676] pim6reg0: group set to 0 [ 217.079020][T10688] device wlan1 left promiscuous mode [ 217.136367][T10704] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.424175][T10760] tun2: tun_chr_ioctl cmd 1074025694 [ 218.448962][T10760] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.576736][T10775] tap0: tun_chr_ioctl cmd 1074025677 [ 218.589634][T10775] tap0: linktype set to 805 [ 219.232269][T10809] tap0: tun_chr_ioctl cmd 1074025677 [ 219.262700][T10809] tap0: linktype set to 805 [ 219.677311][ T3584] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.687462][ T3584] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.696448][ T3584] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.707674][ T3584] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.717362][ T3584] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 219.726086][ T3584] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.338277][T10829] pim6reg0: tun_chr_ioctl cmd 1074025678 [ 220.384416][T10829] pim6reg0: group set to 0 [ 220.542296][ T6741] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.668088][ T6741] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.857872][ T6741] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.879884][T10843] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.967699][ T6741] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.056255][T10816] chnl_net:caif_netlink_parms(): no params data found [ 221.237138][T10816] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.305356][T10816] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.355715][T10816] device bridge_slave_0 entered promiscuous mode [ 221.377009][T10816] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.384395][T10816] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.392901][T10816] device bridge_slave_1 entered promiscuous mode [ 221.479305][T10864] tun0: tun_chr_ioctl cmd 1074025694 [ 221.490530][T10872] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 221.509273][T10864] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.4'. [ 221.544332][T10816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.595594][T10816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.742306][ T3581] Bluetooth: hci5: command tx timeout [ 221.762048][T10816] team0: Port device team_slave_0 added [ 221.793657][T10816] team0: Port device team_slave_1 added [ 221.917722][T10816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.949369][T10816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.091818][T10816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.166673][T10890] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 222.191612][T10890] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.245358][T10816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.338007][T10816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.408662][T10816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.248243][T10904] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 223.336205][T10816] device hsr_slave_0 entered promiscuous mode [ 223.382801][T10816] device hsr_slave_1 entered promiscuous mode [ 223.401984][T10816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.439215][T10816] Cannot create hsr debugfs directory [ 223.605525][T10924] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 223.643127][T10924] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.822580][ T3581] Bluetooth: hci5: command tx timeout [ 224.690245][ T6741] device hsr_slave_0 left promiscuous mode [ 224.703574][ T6741] device hsr_slave_1 left promiscuous mode [ 224.760402][ T6741] batman_adv: batadv0: Interface deactivated: team0 [ 224.770596][ T6741] batman_adv: batadv0: Removing interface: team0 [ 224.788002][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.795940][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.805826][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.813777][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.824564][ T6741] device batadv0 left promiscuous mode [ 224.830205][ T6741] bridge0: port 3(batadv0) entered disabled state [ 224.846397][ T6741] device bridge_slave_1 left promiscuous mode [ 224.856087][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.870630][ T6741] device bridge_slave_0 left promiscuous mode [ 224.881325][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.899843][ T6741] device veth1_macvtap left promiscuous mode [ 224.910556][ T6741] device veth1_vlan left promiscuous mode [ 224.918017][ T6741] device veth0_vlan left promiscuous mode [ 225.068507][ T6741] team0 (unregistering): Port device team_slave_1 removed [ 225.085585][ T6741] team0 (unregistering): Port device team_slave_0 removed [ 225.180127][T10937] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.419014][T10956] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 225.446355][T10956] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.614027][T10966] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.810844][T10816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 225.893147][T10816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 225.901986][ T3581] Bluetooth: hci5: command tx timeout [ 225.924728][T10816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.040161][T10816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 226.597310][T10816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.802643][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.810589][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.867782][T10816] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.922509][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.955658][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.987524][ T3645] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.994718][ T3645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.077264][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.090121][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.117699][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.137569][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.144775][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.159608][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.217237][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.236844][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.277006][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.295211][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.322123][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.359802][T11019] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.404547][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.421459][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.455853][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.579764][T10816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.618883][T10816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.639423][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.659800][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.988903][ T3581] Bluetooth: hci5: command tx timeout [ 228.687040][T11057] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.804324][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.812670][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.825905][T10816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.905163][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.916080][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.976618][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.995599][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.044901][T10816] device veth0_vlan entered promiscuous mode [ 229.054337][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.109383][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.156666][T10816] device veth1_vlan entered promiscuous mode [ 229.246164][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.271396][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 229.311442][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.343728][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.375273][T10816] device veth0_macvtap entered promiscuous mode [ 229.400842][T10816] device veth1_macvtap entered promiscuous mode [ 229.462513][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.487467][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.509667][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.543081][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.570541][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.594310][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.607140][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.618592][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.630717][T10816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.638679][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 229.648430][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 229.657587][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 229.675208][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.705137][T11089] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.800035][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.870362][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.901116][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.948263][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.978029][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.009355][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.057459][T10816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.097242][T10816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.119175][T10816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.138758][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.166074][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.247023][T10816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.279809][T10816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.330339][T10816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.346638][T10816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.574378][ T6734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.592051][ T6734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.604104][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 230.675951][ T3659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.676098][T11123] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.4'. [ 230.696161][ T3659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.748622][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 231.715137][T11154] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 231.732890][T11154] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.782036][T11154] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 231.790262][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.975082][ T27] audit: type=1804 audit(1718602978.019:2): pid=11166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir957771984/syzkaller.VGkeSO/668/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 232.051788][ T27] audit: type=1800 audit(1718602978.049:3): pid=11166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1949 res=0 errno=0 [ 232.106604][ T3584] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.116701][ T3584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.127695][ T3584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.139436][ T3584] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.149690][ T3584] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 232.166056][ T3584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.483221][ T27] audit: type=1800 audit(1718602978.529:4): pid=11173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=1949 res=0 errno=0 [ 232.949628][T11171] chnl_net:caif_netlink_parms(): no params data found [ 232.995620][T11199] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 233.029746][T11199] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 233.053586][T11202] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 233.147155][T11199] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 233.230276][T11171] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.237816][T11171] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.247347][T11171] device bridge_slave_0 entered promiscuous mode [ 233.256498][T11171] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.264602][T11171] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.273375][T11171] device bridge_slave_1 entered promiscuous mode [ 233.316135][T11215] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 233.325256][T11215] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.335192][T11215] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 233.343929][T11215] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.364315][T11171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.388891][T11171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.477277][T11171] team0: Port device team_slave_0 added [ 233.571145][T11171] team0: Port device team_slave_1 added [ 233.641005][T11171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.649956][T11171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.689301][T11171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.704625][T11171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.712212][T11171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.738826][T11171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.780791][T11233] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 234.091438][T11171] device hsr_slave_0 entered promiscuous mode [ 234.130040][T11171] device hsr_slave_1 entered promiscuous mode [ 234.151826][T11171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.162719][T11171] Cannot create hsr debugfs directory [ 234.222066][ T3581] Bluetooth: hci0: command tx timeout [ 234.513442][ T27] audit: type=1804 audit(1718602980.559:5): pid=11273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir957771984/syzkaller.VGkeSO/680/memory.events" dev="sda1" ino=1948 res=1 errno=0 [ 234.575510][ T27] audit: type=1800 audit(1718602980.559:6): pid=11273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1948 res=0 errno=0 [ 234.668328][T11171] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.794900][T11171] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.842061][ T27] audit: type=1800 audit(1718602980.889:7): pid=11273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=1948 res=0 errno=0 [ 234.869151][T11291] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 234.911542][T11171] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.935476][T11291] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 234.945631][T11290] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 234.959377][T11290] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 234.970070][T11290] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 234.985449][T11290] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 234.997531][T11293] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 235.035042][T11171] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.048859][T11291] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 235.284958][T11171] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 235.320988][T11171] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 235.344025][T11171] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.370857][T11171] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 235.462634][ T27] audit: type=1804 audit(1718602981.509:8): pid=11318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1664405190/syzkaller.FTsO1X/23/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 235.498579][T11316] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 235.525444][ T27] audit: type=1800 audit(1718602981.509:9): pid=11318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 235.695816][T11322] device syzkaller0 entered promiscuous mode [ 235.738964][T11171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.795387][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.814823][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.845123][T11171] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.957027][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.974422][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.988461][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.995654][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.029562][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.039354][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.048676][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.062694][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.069841][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.079515][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.100307][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.110381][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.120158][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.136015][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.146249][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.155268][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.165254][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.180180][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.196081][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.208075][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.227971][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.301845][ T3581] Bluetooth: hci0: command tx timeout [ 236.395518][T11359] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 236.759565][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.772035][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.795156][T11171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.856644][ T27] audit: type=1804 audit(1718602982.899:10): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2355598537/syzkaller.5LDiDA/654/memory.events" dev="sda1" ino=1945 res=1 errno=0 [ 236.930329][ T27] audit: type=1800 audit(1718602982.929:11): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1945 res=0 errno=0 [ 237.222278][ T27] audit: type=1800 audit(1718602983.269:12): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=1945 res=0 errno=0 [ 237.718072][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.737442][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.823360][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.845525][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.868893][ T3584] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.883182][ T3584] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.891148][ T3584] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.909642][ T3584] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.918340][ T3584] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 237.919671][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.933663][ T3584] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.996073][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.033109][T11171] device veth0_vlan entered promiscuous mode [ 238.120613][T11427] device syzkaller0 entered promiscuous mode [ 238.159665][T11434] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 238.162305][ T3659] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.172887][T11434] __nla_validate_parse: 5 callbacks suppressed [ 238.172902][T11434] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.1'. [ 238.207102][T11171] device veth1_vlan entered promiscuous mode [ 238.225299][ T27] audit: type=1804 audit(1718602984.269:13): pid=11436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2566204737/syzkaller.qmmx6q/542/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 238.258469][ T27] audit: type=1800 audit(1718602984.269:14): pid=11436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 238.318823][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 238.355881][ T3659] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.392005][ T3581] Bluetooth: hci0: command tx timeout [ 238.440810][T11171] device veth0_macvtap entered promiscuous mode [ 238.451297][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 238.473384][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.533100][ T3659] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.564675][T11171] device veth1_macvtap entered promiscuous mode [ 238.579813][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.591612][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 238.628822][T11171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.647557][T11171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.659228][T11171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.670000][T11171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.679971][T11171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.690796][T11171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.701043][T11171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.714351][T11171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.724582][T11171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.735258][T11171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.746903][T11171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.759479][ T3659] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.782730][T11449] netlink: 35347 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.799804][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.810796][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.841221][T11171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.853365][T11171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.881732][T11171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.901738][T11171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.921822][T11171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.963546][T11171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.993925][T11171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.062128][T11171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.085028][T11171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.095614][T11171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.107499][T11171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.131635][T11171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.141293][T11171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.157177][T11171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.194090][T11171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.205567][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.226684][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.311035][T11462] device syzkaller0 entered promiscuous mode [ 239.374455][ T27] audit: type=1804 audit(1718602985.419:15): pid=11471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir957771984/syzkaller.VGkeSO/707/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 239.409780][ T27] audit: type=1800 audit(1718602985.419:16): pid=11471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 239.614797][ T27] audit: type=1800 audit(1718602985.659:17): pid=11471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 239.754793][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.772643][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.797376][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 239.938530][T11422] chnl_net:caif_netlink_parms(): no params data found [ 239.979736][ T6741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.992777][ T3584] Bluetooth: hci2: command tx timeout [ 240.003862][ T6741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.041930][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 240.087191][T11494] tun0: tun_chr_ioctl cmd 2147767519 [ 240.153133][T11501] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 240.197912][T11501] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.321055][T11509] netlink: 35347 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.374732][T11422] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.411403][T11422] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.421068][T11422] device bridge_slave_0 entered promiscuous mode [ 240.430817][T11422] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.438344][T11422] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.448083][T11422] device bridge_slave_1 entered promiscuous mode [ 240.462474][ T3584] Bluetooth: hci0: command tx timeout [ 240.641294][ T3584] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 240.655079][T11523] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.729440][T11422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.768545][T11529] tun0: tun_chr_ioctl cmd 2147767519 [ 240.776604][T11422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.905096][T11422] team0: Port device team_slave_0 added [ 240.926777][T11422] team0: Port device team_slave_1 added [ 240.993745][T11422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.010025][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.129840][T11422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.175930][ T3659] device hsr_slave_0 left promiscuous mode [ 241.199930][ T3659] device hsr_slave_1 left promiscuous mode [ 241.391591][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.400128][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.417346][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.425562][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.436887][ T3659] device bridge_slave_1 left promiscuous mode [ 241.443506][ T3659] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.453120][ T3659] device bridge_slave_0 left promiscuous mode [ 241.459369][ T3659] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.474853][ T3659] device veth1_macvtap left promiscuous mode [ 241.480949][ T3659] device veth0_macvtap left promiscuous mode [ 241.487396][ T3659] device veth1_vlan left promiscuous mode [ 241.494069][ T3659] device veth0_vlan left promiscuous mode [ 241.672300][ T3659] team0 (unregistering): Port device team_slave_1 removed [ 241.686608][ T3659] team0 (unregistering): Port device team_slave_0 removed [ 241.703217][ T3659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.721012][ T3659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.787462][ T3659] bond0 (unregistering): Released all slaves [ 241.853837][T11422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.861103][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.888911][T11422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.072134][ T3584] Bluetooth: hci2: command tx timeout [ 242.307535][T11422] device hsr_slave_0 entered promiscuous mode [ 242.322884][T11422] device hsr_slave_1 entered promiscuous mode [ 242.329699][T11422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.350443][T11422] Cannot create hsr debugfs directory [ 242.454751][T11589] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.863008][T11609] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.1'. [ 242.934153][T11612] tun0: tun_chr_ioctl cmd 2147767519 [ 243.372826][T11640] validate_nla: 2 callbacks suppressed [ 243.372844][T11640] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 244.142506][ T3584] Bluetooth: hci2: command tx timeout [ 244.238566][T11658] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.406906][T11422] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 244.454999][T11422] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 244.523451][T11422] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 244.640743][T11422] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 245.228525][T11422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.027060][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.045362][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.161474][T11422] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.191395][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.213907][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.222483][ T3584] Bluetooth: hci2: command tx timeout [ 246.232604][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.239711][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.274428][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.283850][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.294840][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.303845][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.310961][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.319008][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.328566][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.351866][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.368396][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.403385][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.433551][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.442965][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.472220][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.480726][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.498556][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.519180][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.539186][T11422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.111988][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.136862][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.150036][T11422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.195150][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.212961][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.135744][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.144411][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.153311][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.161271][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.174083][T11763] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 248.193199][T11422] device veth0_vlan entered promiscuous mode [ 248.233767][T11422] device veth1_vlan entered promiscuous mode [ 248.318562][ T27] audit: type=1804 audit(1718602994.359:18): pid=11776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir957771984/syzkaller.VGkeSO/736/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 248.353043][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.365528][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.395194][T11422] device veth0_macvtap entered promiscuous mode [ 248.409088][T11422] device veth1_macvtap entered promiscuous mode [ 248.422082][ T27] audit: type=1800 audit(1718602994.409:19): pid=11776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 248.482729][T11782] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.526299][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.526516][T11786] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 248.537775][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.586154][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.593375][T11789] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 248.611530][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.624069][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.635446][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.645634][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.656321][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.666437][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.677320][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.762996][T11422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.830978][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.880179][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.941880][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.034692][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.120221][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.208309][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.284441][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.352129][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.486854][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.571138][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.654493][T11422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.846015][T11794] device syzkaller0 entered promiscuous mode [ 249.864901][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.887309][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.913188][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.941132][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.950313][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.959165][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 250.045172][T11806] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 250.069131][T11422] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.097665][T11422] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.117170][T11422] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.131176][T11422] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.198321][ T27] audit: type=1804 audit(1718602996.239:20): pid=11816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2355598537/syzkaller.5LDiDA/703/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 250.303751][ T27] audit: type=1800 audit(1718602996.299:21): pid=11816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 250.317897][T11809] device syzkaller0 entered promiscuous mode [ 250.431451][T11820] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.506793][ T6734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.521854][ T6734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.566353][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.576858][T11828] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.604310][ T6734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.615809][ T6734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.640817][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 250.702123][ T3659] wlan1: Trigger new scan to find an IBSS to join [ 250.870349][T11841] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 250.875853][T11838] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 250.957347][T11841] device syzkaller0 entered promiscuous mode [ 251.260166][T11854] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.411029][T11861] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.528606][T11857] device syzkaller0 entered promiscuous mode [ 251.726064][T11879] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 251.745419][T11882] netlink: 131996 bytes leftover after parsing attributes in process `syz-executor.1'. [ 251.950033][T11889] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.160638][ T27] audit: type=1804 audit(1718602999.199:22): pid=11910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1424066034/syzkaller.lKH183/40/memory.events" dev="sda1" ino=1934 res=1 errno=0 [ 253.239562][ T27] audit: type=1800 audit(1718602999.239:23): pid=11910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1934 res=0 errno=0 [ 253.243180][T11916] netlink: 131996 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.292839][T11915] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 253.661850][ T5874] wlan1: Trigger new scan to find an IBSS to join [ 253.662655][ T6734] wlan1: Trigger new scan to find an IBSS to join [ 254.863446][T11935] device syzkaller0 entered promiscuous mode [ 255.196567][T11986] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.2'. [ 255.358447][T11997] netlink: 131996 bytes leftover after parsing attributes in process `syz-executor.1'. [ 255.510018][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.516510][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.548218][T11999] device syzkaller0 entered promiscuous mode [ 256.017720][T12019] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.063363][T12022] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.283483][T12031] netlink: 131996 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.364856][T12030] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 256.514541][T12038] device syzkaller0 entered promiscuous mode [ 256.707009][ T46] wlan1: Creating new IBSS network, BSSID c2:6d:07:e4:05:01 [ 256.832455][T12051] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.883518][T12055] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.532832][T12087] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.663131][ T6734] wlan1: Trigger new scan to find an IBSS to join [ 257.801505][T12092] device syzkaller0 entered promiscuous mode [ 258.618444][ T3659] wlan1: Creating new IBSS network, BSSID 1e:7b:19:0a:20:5b [ 258.684682][T12127] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.4'. [ 260.278647][T12185] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 260.342803][T12185] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 261.623976][T12224] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 261.641926][T12224] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 262.825623][ T3584] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 263.250981][T12273] device syzkaller0 entered promiscuous mode [ 264.913420][T12319] device syzkaller0 entered promiscuous mode [ 265.190300][ T3584] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4 [ 265.911034][T12354] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.926932][T12354] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.043358][ T3584] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 266.062579][T12354] device bridge_slave_1 left promiscuous mode [ 266.112674][T12354] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.164757][T12354] device bridge_slave_0 left promiscuous mode [ 266.171610][T12354] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.865003][ T3584] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 266.873682][ T3584] Bluetooth: hci0: Injecting HCI hardware error event [ 266.881846][ T3581] Bluetooth: hci0: hardware error 0x00 [ 267.782801][T12404] device syzkaller0 entered promiscuous mode [ 268.211477][ T27] audit: type=1804 audit(1718603014.249:24): pid=12410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2566204737/syzkaller.qmmx6q/643/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 268.245139][ T27] audit: type=1800 audit(1718603014.249:25): pid=12410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 268.547079][T12412] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.557797][T12412] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.617900][T12417] device bridge_slave_1 left promiscuous mode [ 268.663999][T12417] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.740587][T12417] device bridge_slave_0 left promiscuous mode [ 268.751999][T12417] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.950806][ T3581] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 269.090747][ T27] audit: type=1804 audit(1718603015.129:26): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2355598537/syzkaller.5LDiDA/767/memory.events" dev="sda1" ino=1943 res=1 errno=0 [ 269.173781][ T27] audit: type=1800 audit(1718603015.129:27): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1943 res=0 errno=0 [ 269.262092][ T3581] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 269.270636][ T3581] Bluetooth: hci4: Injecting HCI hardware error event [ 269.278720][ T3584] Bluetooth: hci4: hardware error 0x00 [ 269.300766][T12451] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.061837][ T3581] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 270.071160][ T3581] Bluetooth: hci3: Injecting HCI hardware error event [ 270.079503][ T3567] Bluetooth: hci3: hardware error 0x00 [ 270.135345][T12484] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 270.163025][T12487] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.4'. [ 270.166706][T12486] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.3'. [ 270.336690][ T27] audit: type=1804 audit(1718603016.379:28): pid=12499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir957771984/syzkaller.VGkeSO/795/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 270.459924][ T3578] [ 270.462291][ T3578] ====================================================== [ 270.469307][ T3578] WARNING: possible circular locking dependency detected [ 270.476314][ T3578] 6.1.94-syzkaller #0 Not tainted [ 270.481321][ T3578] ------------------------------------------------------ [ 270.488321][ T3578] syz-executor.1/3578 is trying to acquire lock: [ 270.494628][ T3578] ffff888025ad5c98 (&sighand->siglock){-.-.}-{2:2}, at: __lock_task_sighand+0x145/0x2d0 [ 270.504384][ T3578] [ 270.504384][ T3578] but task is already holding lock: [ 270.511733][ T3578] ffff8880b9935e90 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 270.522076][ T3578] [ 270.522076][ T3578] which lock already depends on the new lock. [ 270.522076][ T3578] [ 270.532457][ T3578] [ 270.532457][ T3578] the existing dependency chain (in reverse order) is: [ 270.541461][ T3578] [ 270.541461][ T3578] -> #3 (lock#10){+.+.}-{2:2}: [ 270.548610][ T3578] lock_acquire+0x1f8/0x5a0 [ 270.553636][ T3578] __mmap_lock_do_trace_acquire_returned+0x9d/0x670 [ 270.560734][ T3578] stack_map_get_build_id_offset+0x99e/0x9c0 [ 270.567230][ T3578] __bpf_get_stack+0x495/0x570 [ 270.572506][ T3578] bpf_get_stack_raw_tp+0x1b2/0x220 [ 270.578209][ T3578] 0xffffffffa0001fd2 [ 270.582692][ T3578] bpf_trace_run2+0x1fd/0x410 [ 270.587872][ T3578] trace_tlb_flush+0x151/0x1a0 [ 270.593142][ T3578] switch_mm_irqs_off+0x84a/0xc20 [ 270.598672][ T3578] __schedule+0x1140/0x4550 [ 270.603700][ T3578] preempt_schedule_irq+0xf7/0x1c0 [ 270.609316][ T3578] irqentry_exit+0x53/0x80 [ 270.614241][ T3578] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 270.620726][ T3578] __sanitizer_cov_trace_switch+0x2/0xe0 [ 270.626869][ T3578] link_path_walk+0x110/0xee0 [ 270.632053][ T3578] path_lookupat+0xa9/0x450 [ 270.637064][ T3578] filename_lookup+0x251/0x600 [ 270.642338][ T3578] user_path_at_empty+0x3e/0x60 [ 270.647695][ T3578] do_readlinkat+0x114/0x3a0 [ 270.652796][ T3578] __x64_sys_readlink+0x7b/0x90 [ 270.658155][ T3578] do_syscall_64+0x3b/0xb0 [ 270.663083][ T3578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.669502][ T3578] [ 270.669502][ T3578] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 270.676793][ T3578] lock_acquire+0x1f8/0x5a0 [ 270.681816][ T3578] _raw_spin_lock_nested+0x2d/0x40 [ 270.687441][ T3578] raw_spin_rq_lock_nested+0x26/0x140 [ 270.693337][ T3578] task_fork_fair+0x5d/0x350 [ 270.698447][ T3578] sched_cgroup_fork+0x374/0x400 [ 270.703901][ T3578] copy_process+0x2442/0x4060 [ 270.709089][ T3578] kernel_clone+0x222/0x920 [ 270.714097][ T3578] user_mode_thread+0x12e/0x190 [ 270.719449][ T3578] rest_init+0x23/0x300 [ 270.724111][ T3578] start_kernel+0x0/0x53f [ 270.728952][ T3578] start_kernel+0x496/0x53f [ 270.733958][ T3578] secondary_startup_64_no_verify+0xcf/0xdb [ 270.740369][ T3578] [ 270.740369][ T3578] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 270.747652][ T3578] lock_acquire+0x1f8/0x5a0 [ 270.752661][ T3578] _raw_spin_lock_irqsave+0xd1/0x120 [ 270.758454][ T3578] try_to_wake_up+0xad/0x12e0 [ 270.763640][ T3578] complete_signal+0x796/0xbd0 [ 270.768911][ T3578] __send_signal_locked+0xb1a/0xdc0 [ 270.774615][ T3578] do_notify_parent+0xe2b/0x1100 [ 270.780060][ T3578] do_exit+0x172e/0x26a0 [ 270.784811][ T3578] do_group_exit+0x202/0x2b0 [ 270.789907][ T3578] __x64_sys_exit_group+0x3b/0x40 [ 270.795451][ T3578] do_syscall_64+0x3b/0xb0 [ 270.800410][ T3578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.806846][ T3578] [ 270.806846][ T3578] -> #0 (&sighand->siglock){-.-.}-{2:2}: [ 270.814657][ T3578] validate_chain+0x1661/0x5950 [ 270.820030][ T3578] __lock_acquire+0x125b/0x1f80 [ 270.825388][ T3578] lock_acquire+0x1f8/0x5a0 [ 270.830400][ T3578] _raw_spin_lock_irqsave+0xd1/0x120 [ 270.836188][ T3578] __lock_task_sighand+0x145/0x2d0 [ 270.841808][ T3578] group_send_sig_info+0x26c/0x300 [ 270.847426][ T3578] bpf_send_signal_common+0x2d8/0x420 [ 270.853328][ T3578] bpf_send_signal_thread+0x12/0x20 [ 270.859030][ T3578] bpf_prog_7bb747c56a8bcba8+0x15/0x1d [ 270.864994][ T3578] bpf_trace_run4+0x253/0x470 [ 270.870176][ T3578] __mmap_lock_do_trace_acquire_returned+0x5e3/0x670 [ 270.877359][ T3578] lock_mm_and_find_vma+0x219/0x2e0 [ 270.883063][ T3578] exc_page_fault+0x169/0x620 [ 270.888247][ T3578] asm_exc_page_fault+0x22/0x30 [ 270.893607][ T3578] [ 270.893607][ T3578] other info that might help us debug this: [ 270.893607][ T3578] [ 270.903813][ T3578] Chain exists of: [ 270.903813][ T3578] &sighand->siglock --> &rq->__lock --> lock#10 [ 270.903813][ T3578] [ 270.915977][ T3578] Possible unsafe locking scenario: [ 270.915977][ T3578] [ 270.923407][ T3578] CPU0 CPU1 [ 270.928754][ T3578] ---- ---- [ 270.934100][ T3578] lock(lock#10); [ 270.937809][ T3578] lock(&rq->__lock); [ 270.944418][ T3578] lock(lock#10); [ 270.950646][ T3578] lock(&sighand->siglock); [ 270.955219][ T3578] [ 270.955219][ T3578] *** DEADLOCK *** [ 270.955219][ T3578] [ 270.963342][ T3578] 5 locks held by syz-executor.1/3578: [ 270.968781][ T3578] #0: ffff88807b741f58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2e0 [ 270.978691][ T3578] #1: ffff8880b9935e90 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 270.989468][ T3578] #2: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: get_mm_memcg_path+0xb1/0x600 [ 270.999022][ T3578] #3: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x16a/0x470 [ 271.008401][ T3578] #4: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: __lock_task_sighand+0x25/0x2d0 [ 271.018161][ T3578] [ 271.018161][ T3578] stack backtrace: [ 271.024036][ T3578] CPU: 1 PID: 3578 Comm: syz-executor.1 Not tainted 6.1.94-syzkaller #0 [ 271.032344][ T3578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 271.042393][ T3578] Call Trace: [ 271.045659][ T3578] [ 271.048579][ T3578] dump_stack_lvl+0x1e3/0x2cb [ 271.053254][ T3578] ? nf_tcp_handle_invalid+0x642/0x642 [ 271.058710][ T3578] ? print_circular_bug+0x12b/0x1a0 [ 271.063898][ T3578] check_noncircular+0x2fa/0x3b0 [ 271.068825][ T3578] ? add_chain_block+0x850/0x850 [ 271.073755][ T3578] ? lockdep_lock+0x11f/0x2a0 [ 271.078453][ T3578] ? _find_first_zero_bit+0xd0/0x100 [ 271.083740][ T3578] validate_chain+0x1661/0x5950 [ 271.088601][ T3578] ? reacquire_held_locks+0x660/0x660 [ 271.093974][ T3578] ? validate_chain+0x112/0x5950 [ 271.098993][ T3578] ? reacquire_held_locks+0x660/0x660 [ 271.104358][ T3578] ? validate_chain+0x112/0x5950 [ 271.109293][ T3578] ? _copy_to_user+0xe9/0x130 [ 271.113957][ T3578] ? reacquire_held_locks+0x660/0x660 [ 271.119322][ T3578] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 271.125211][ T3578] ? mark_lock+0x9a/0x340 [ 271.129532][ T3578] __lock_acquire+0x125b/0x1f80 [ 271.134402][ T3578] lock_acquire+0x1f8/0x5a0 [ 271.138926][ T3578] ? __lock_task_sighand+0x145/0x2d0 [ 271.144215][ T3578] ? read_lock_is_recursive+0x10/0x10 [ 271.149585][ T3578] ? read_lock_is_recursive+0x10/0x10 [ 271.154946][ T3578] ? _raw_spin_lock_irqsave+0xac/0x120 [ 271.160394][ T3578] _raw_spin_lock_irqsave+0xd1/0x120 [ 271.165667][ T3578] ? __lock_task_sighand+0x145/0x2d0 [ 271.170940][ T3578] ? _raw_spin_lock+0x40/0x40 [ 271.175608][ T3578] __lock_task_sighand+0x145/0x2d0 [ 271.180709][ T3578] ? __lock_task_sighand+0x25/0x2d0 [ 271.185896][ T3578] group_send_sig_info+0x26c/0x300 [ 271.190995][ T3578] ? lockdep_assert_task_sighand_held+0x2b0/0x2b0 [ 271.197400][ T3578] bpf_send_signal_common+0x2d8/0x420 [ 271.202761][ T3578] ? trace_bpf_trace_printk+0x250/0x250 [ 271.208296][ T3578] ? bpf_trace_run4+0x16a/0x470 [ 271.213129][ T3578] bpf_send_signal_thread+0x12/0x20 [ 271.218310][ T3578] bpf_prog_7bb747c56a8bcba8+0x15/0x1d [ 271.223754][ T3578] bpf_trace_run4+0x253/0x470 [ 271.228416][ T3578] ? asm_exc_int3+0x35/0x40 [ 271.232907][ T3578] ? bpf_trace_run3+0x440/0x440 [ 271.237742][ T3578] ? __mmap_lock_do_trace_acquire_returned+0x501/0x670 [ 271.244581][ T3578] __mmap_lock_do_trace_acquire_returned+0x5e3/0x670 [ 271.251241][ T3578] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 271.257988][ T3578] lock_mm_and_find_vma+0x219/0x2e0 [ 271.263175][ T3578] exc_page_fault+0x169/0x620 [ 271.267850][ T3578] asm_exc_page_fault+0x22/0x30 [ 271.272690][ T3578] RIP: 0033:0x7fa9c20281eb [ 271.277090][ T3578] Code: 00 00 00 89 ef c7 44 24 1c 78 00 00 00 e8 6d 68 05 00 85 c0 0f 85 7f 01 00 00 66 0f ef c0 48 8d 43 88 ba 78 00 00 00 4c 89 e6 <48> c7 43 f8 00 00 00 00 48 89 c7 0f 11 43 b8 0f 11 43 c8 0f 11 43 [ 271.296690][ T3578] RSP: 002b:00007ffccae64350 EFLAGS: 00010246 [ 271.302743][ T3578] RAX: 00007fa9c2181128 RBX: 00007fa9c21811a0 RCX: 00007fa9c207ea4a [ 271.310710][ T3578] RDX: 0000000000000078 RSI: 00007ffccae64370 RDI: 0000000000000003 [ 271.318674][ T3578] RBP: 0000000000000003 R08: 00007ffccae6436c R09: 00007ffccae64777 [ 271.326645][ T3578] R10: 00007ffccae64370 R11: 0000000000000246 R12: 00007ffccae64370 [ 271.334599][ T3578] R13: 00007ffccae6436c R14: 0000000000000000 R15: 0000000000000000 [ 271.342557][ T3578] [ 271.346888][ T3584] Bluetooth: hci4: Opcode 0x0c03 failed: -110 2024/06/17 05:43:37 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 271.356180][ T27] audit: type=1800 audit(1718603016.409:29): pid=12499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 Connection to 10.128.1.109 closed by remote host.