last executing test programs: 2.705412773s ago: executing program 0 (id=3051): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb2}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) 2.611225737s ago: executing program 1 (id=3054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000d18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.597904577s ago: executing program 0 (id=3055): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000ffe1008500000073000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_free_batched\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 2.483157732s ago: executing program 1 (id=3057): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.457096202s ago: executing program 0 (id=3058): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.219353492s ago: executing program 0 (id=3062): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0x9) 2.083796388s ago: executing program 0 (id=3063): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001980)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864161ef36514001ac0080005c0040002000600adbe5557a2459efa80406200000264bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.932236123s ago: executing program 0 (id=3064): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.5193404s ago: executing program 1 (id=3068): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) 1.51593098s ago: executing program 2 (id=3069): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) gettid() bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0xb4, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.358603456s ago: executing program 1 (id=3072): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001100)="2000000020008107090f9becdb4cb96b02000000fd0000010064000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) 1.322589758s ago: executing program 3 (id=3073): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0x9) 1.166372044s ago: executing program 3 (id=3075): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="020200000100"}) 1.155494964s ago: executing program 1 (id=3076): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.051103258s ago: executing program 4 (id=3077): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.040955579s ago: executing program 2 (id=3078): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x5a}, 0x20) 997.955551ms ago: executing program 2 (id=3079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 789.548639ms ago: executing program 4 (id=3080): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) 778.904429ms ago: executing program 3 (id=3081): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 683.063083ms ago: executing program 4 (id=3082): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000120) 682.871793ms ago: executing program 4 (id=3083): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1500, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020c600e41b0000900ac00060311000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 586.122247ms ago: executing program 3 (id=3084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x4d}, {0x6}]}) 371.852936ms ago: executing program 4 (id=3085): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406a80016c0080003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) 370.015436ms ago: executing program 2 (id=3086): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001980)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864161ef36514001ac0080005c0040002000600adbe5557a2459efa80406200000264bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 220.693941ms ago: executing program 1 (id=3087): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) gettid() bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0xb4, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 157.419754ms ago: executing program 3 (id=3088): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0xe2c}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000180)=""/208}, 0x20) 156.999984ms ago: executing program 2 (id=3089): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 63.220328ms ago: executing program 4 (id=3090): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="020200000100"}) 29.680429ms ago: executing program 3 (id=3091): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="1b000000190081044e81f783db4cb9040a1d020006007c09e8fc55", 0x1b}], 0x1}, 0x0) 0s ago: executing program 2 (id=3092): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000000)=0x84008) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f00000002c0)) kernel console output (not intermixed with test programs): ANGE): vxcan0: link becomes ready [ 54.378212][ T3544] device veth0_macvtap entered promiscuous mode [ 54.400202][ T3552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.411059][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.419593][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.429122][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.442019][ T3543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.451845][ T3544] device veth1_macvtap entered promiscuous mode [ 54.462082][ T3550] device veth1_vlan entered promiscuous mode [ 54.480705][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.488845][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.498301][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.508099][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.539967][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.551179][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.562854][ T3544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.572326][ T3543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.583725][ T3545] device veth0_vlan entered promiscuous mode [ 54.594805][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.610405][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.619432][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.633440][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.645628][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.656673][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.666267][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.676627][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.684719][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.703200][ T3543] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.712622][ T3543] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.722335][ T3543] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.731682][ T3543] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.742728][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.754742][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.766046][ T3544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.774562][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.787566][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.797629][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.812938][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.825934][ T3545] device veth1_vlan entered promiscuous mode [ 54.837372][ T3550] device veth0_macvtap entered promiscuous mode [ 54.849126][ T3544] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.858183][ T3544] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.867417][ T3544] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.877087][ T3544] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.887944][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.896667][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.937857][ T3550] device veth1_macvtap entered promiscuous mode [ 54.949442][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.958434][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.040028][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.053392][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.063923][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.074640][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.086094][ T3550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.095043][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.103635][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.112398][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.120433][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.128915][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.137589][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.146805][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.154893][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.169185][ T3545] device veth0_macvtap entered promiscuous mode [ 55.195121][ T3552] device veth0_vlan entered promiscuous mode [ 55.211608][ T3545] device veth1_macvtap entered promiscuous mode [ 55.225602][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.239250][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.241512][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.258033][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.268176][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.280668][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.292535][ T3550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.309446][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.317754][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.331319][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.338966][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.348230][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.363541][ T3552] device veth1_vlan entered promiscuous mode [ 55.371802][ T3550] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.381948][ T3550] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.390800][ T3550] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.399477][ T3550] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.437897][ T3606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.452228][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.460128][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.471752][ T3606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.484591][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.499191][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.509215][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.519985][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.530399][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.540997][ T3557] Bluetooth: hci0: command tx timeout [ 55.547113][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.557950][ T3551] Bluetooth: hci3: command tx timeout [ 55.563378][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.570697][ T3557] Bluetooth: hci2: command tx timeout [ 55.582769][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.591863][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.600168][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.609358][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.617367][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.625471][ T3557] Bluetooth: hci1: command tx timeout [ 55.631063][ T3551] Bluetooth: hci4: command tx timeout [ 55.632436][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.654470][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.665059][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.680462][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.691200][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.702134][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.717754][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.728759][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.740246][ T3545] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.749265][ T3545] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.758209][ T3545] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.767011][ T3545] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.787521][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.797117][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.806266][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.816256][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.832555][ T3552] device veth0_macvtap entered promiscuous mode [ 55.866788][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.875047][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.891266][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.905759][ T3552] device veth1_macvtap entered promiscuous mode [ 55.915721][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.993790][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.023521][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.040782][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.068832][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.084217][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.113051][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.122949][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.133729][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.146087][ T3552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.184713][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.200374][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.220868][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.221322][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.228813][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.259057][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.271163][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.295657][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.306762][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.317786][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.329449][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.340271][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.357091][ T3552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.375245][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.399337][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.400804][ C1] hrtimer: interrupt took 57048 ns [ 56.419980][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.459650][ T3552] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.477429][ T3552] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.487893][ T3552] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.504724][ T3552] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.649954][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.666844][ T3606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.694834][ T3606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.728119][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.765096][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.777984][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.859837][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.907105][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.923005][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.937858][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.957881][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.991746][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.220923][ T3640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.257887][ T3640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.321673][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.524082][ T3657] device syzkaller0 entered promiscuous mode [ 57.552113][ T3660] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.5'. [ 57.621331][ T3551] Bluetooth: hci2: command tx timeout [ 57.621349][ T3557] Bluetooth: hci0: command tx timeout [ 57.621377][ T3557] Bluetooth: hci3: command tx timeout [ 57.711878][ T48] Bluetooth: hci4: command tx timeout [ 57.711911][ T3557] Bluetooth: hci1: command tx timeout [ 58.809905][ T3693] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.29'. [ 59.309613][ T3710] netlink: 'syz.0.38': attribute type 10 has an invalid length. [ 59.319798][ T3557] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.329029][ T3557] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.332973][ T3710] netlink: 44 bytes leftover after parsing attributes in process `syz.0.38'. [ 59.336720][ T3557] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.353420][ T3710] device bridge_slave_0 left promiscuous mode [ 59.358587][ T3557] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.360136][ T3710] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.372504][ T3557] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.383178][ T3557] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.524828][ T3640] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.582498][ T3721] device syzkaller0 entered promiscuous mode [ 59.638051][ T3640] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.696523][ T3726] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.44'. [ 60.975757][ T3640] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.995696][ T3728] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.45'. [ 61.073901][ T3640] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.333281][ T3740] netlink: 56 bytes leftover after parsing attributes in process `syz.3.50'. [ 61.476607][ T48] Bluetooth: hci3: command tx timeout [ 61.519305][ T3744] netlink: 16366 bytes leftover after parsing attributes in process `syz.0.52'. [ 61.569745][ T3714] chnl_net:caif_netlink_parms(): no params data found [ 61.758691][ T48] Bluetooth: hci2: unexpected event 0x40 length: 15 > 2 [ 62.013795][ T3757] device syzkaller0 entered promiscuous mode [ 62.139205][ T3773] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.60'. [ 63.069454][ T3772] device syzkaller0 entered promiscuous mode [ 63.543235][ T48] Bluetooth: hci3: command tx timeout [ 63.789401][ T3783] netlink: 'syz.4.61': attribute type 21 has an invalid length. [ 64.542065][ T3714] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.549255][ T3714] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.557380][ T3714] device bridge_slave_0 entered promiscuous mode [ 64.590999][ T3793] netlink: 16366 bytes leftover after parsing attributes in process `syz.4.64'. [ 64.608836][ T3714] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.649047][ T3714] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.680278][ T3714] device bridge_slave_1 entered promiscuous mode [ 64.732227][ T48] Bluetooth: hci0: unexpected event 0x40 length: 15 > 2 [ 64.855115][ T3799] netlink: 830 bytes leftover after parsing attributes in process `syz.3.67'. [ 64.885777][ T3714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.896693][ T3807] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.70'. [ 64.952827][ T3714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.099765][ T3714] team0: Port device team_slave_0 added [ 65.109641][ T3814] netlink: 'syz.3.74': attribute type 21 has an invalid length. [ 65.162399][ T3714] team0: Port device team_slave_1 added [ 65.267992][ T48] Bluetooth: hci2: unexpected event 0x40 length: 15 > 2 [ 65.309528][ T3824] netlink: 16366 bytes leftover after parsing attributes in process `syz.0.78'. [ 65.429372][ T3820] device syzkaller0 entered promiscuous mode [ 65.454462][ T3714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.464948][ T3714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.497897][ T3714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.620919][ T48] Bluetooth: hci3: command tx timeout [ 66.500464][ T3837] netlink: 830 bytes leftover after parsing attributes in process `syz.0.83'. [ 66.509979][ T3714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.517245][ T3714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.557912][ T3714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.681801][ T48] Bluetooth: hci4: unexpected event 0x40 length: 15 > 2 [ 66.697293][ T3860] netlink: 'syz.0.89': attribute type 21 has an invalid length. [ 66.839763][ T3714] device hsr_slave_0 entered promiscuous mode [ 66.897170][ T3714] device hsr_slave_1 entered promiscuous mode [ 66.939974][ T3714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.960110][ T3714] Cannot create hsr debugfs directory [ 67.250714][ T3640] device hsr_slave_0 left promiscuous mode [ 67.256863][ T48] Bluetooth: hci4: unexpected event 0x40 length: 15 > 2 [ 67.299673][ T3640] device hsr_slave_1 left promiscuous mode [ 67.368533][ T3640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.410015][ T3640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.440685][ T3640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.471601][ T3640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.512679][ T3640] device bridge_slave_1 left promiscuous mode [ 67.540708][ T3640] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.568984][ T3640] device bridge_slave_0 left promiscuous mode [ 67.580413][ T3640] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.670977][ T3640] device veth1_macvtap left promiscuous mode [ 67.677845][ T3640] device veth0_macvtap left promiscuous mode [ 67.691557][ T3640] device veth1_vlan left promiscuous mode [ 67.700776][ T48] Bluetooth: hci3: command tx timeout [ 67.729753][ T3640] device veth0_vlan left promiscuous mode [ 67.926019][ T3919] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 68.367685][ T3640] team0 (unregistering): Port device team_slave_1 removed [ 68.395517][ T26] audit: type=1804 audit(1719846884.135:2): pid=3929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.110" name="/root/syzkaller.72r2cJ/27/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 68.436089][ T3640] team0 (unregistering): Port device team_slave_0 removed [ 68.480929][ T3640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.523673][ T3640] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.825046][ T3640] bond0 (unregistering): Released all slaves [ 69.815263][ T3971] netlink: 'syz.4.127': attribute type 21 has an invalid length. [ 69.830614][ T3971] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.860264][ T3971] IPv6: Can't replace route, no match found [ 70.009531][ T3977] device syzkaller0 entered promiscuous mode [ 70.049079][ T3979] netlink: 'syz.3.130': attribute type 7 has an invalid length. [ 71.145570][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.152229][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.359105][ T3714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.398752][ T3714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.433464][ T3714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.464125][ T4017] netlink: 'syz.4.143': attribute type 7 has an invalid length. [ 72.493978][ T4014] netlink: 'syz.0.142': attribute type 21 has an invalid length. [ 72.530796][ T4014] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.538610][ T4014] IPv6: Can't replace route, no match found [ 72.589865][ T3714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.901954][ T4024] device syzkaller0 entered promiscuous mode [ 74.170439][ T4066] netlink: 'syz.4.157': attribute type 7 has an invalid length. [ 74.184866][ T3714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.293226][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.312434][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.323780][ T3714] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.367733][ T4072] netlink: 'syz.0.158': attribute type 21 has an invalid length. [ 74.400928][ T4072] IPv6: Can't replace route, no match found [ 74.446758][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.470954][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.507271][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.514441][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.540419][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.561382][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.576951][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.584087][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.640908][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.659091][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.765605][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.786121][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.833612][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.867132][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.904374][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.926610][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.939771][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.965866][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.995534][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.018499][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.052466][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.195609][ T4108] netlink: 'syz.4.169': attribute type 7 has an invalid length. [ 75.366123][ T4109] device syzkaller0 entered promiscuous mode [ 76.264963][ T14] cfg80211: failed to load regulatory.db [ 76.505526][ T3714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.528232][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.547161][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.678401][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.708772][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.752998][ T3714] device veth0_vlan entered promiscuous mode [ 76.793543][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.819973][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.845699][ T4152] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.185'. [ 76.865488][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.887089][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.929802][ T3714] device veth1_vlan entered promiscuous mode [ 77.038823][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.067886][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.091807][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.127599][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.169439][ T4169] netlink: 'syz.3.192': attribute type 21 has an invalid length. [ 77.183151][ T4169] IPv6: NLM_F_CREATE should be specified when creating new route [ 77.214890][ T4169] IPv6: Can't replace route, no match found [ 77.258471][ T3714] device veth0_macvtap entered promiscuous mode [ 77.294618][ T3714] device veth1_macvtap entered promiscuous mode [ 77.355390][ T3714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.394017][ T3714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.430886][ T3714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.468131][ T3714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.498008][ T3714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.517592][ T3714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.528719][ T3714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.543666][ T3714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.585171][ T3714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.599396][ T3714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.610059][ T3714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.626450][ T3714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.669339][ T3714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.689578][ T3714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.735603][ T3714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.747711][ T3714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.764133][ T3714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.777902][ T3714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.790291][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.822958][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.831527][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.840281][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.849669][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.863875][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.878195][ T4187] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.199'. [ 77.890038][ T3714] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.907423][ T3714] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.916469][ T3714] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.938252][ T3714] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.166422][ T3897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.222648][ T3897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.280747][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.293115][ T3897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.316722][ T3897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.345706][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.377044][ T4224] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 78.704400][ T4233] Driver unsupported XDP return value 0 on prog (id 81) dev N/A, expect packet loss! [ 78.734687][ T4237] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.215'. [ 79.037412][ T4256] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.222'. [ 80.207698][ T4283] device syzkaller0 entered promiscuous mode [ 82.467545][ T4366] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.260'. [ 83.135288][ T4398] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.276'. [ 83.826898][ T4435] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.292'. [ 84.439110][ T4444] netlink: 'syz.3.296': attribute type 29 has an invalid length. [ 84.491056][ T4444] netlink: 'syz.3.296': attribute type 29 has an invalid length. [ 84.520339][ T4444] netlink: 'syz.3.296': attribute type 29 has an invalid length. [ 84.758133][ T4451] device syzkaller0 entered promiscuous mode [ 86.546724][ T4466] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.305'. [ 86.605436][ T4486] tap0: tun_chr_ioctl cmd 1074025677 [ 86.612639][ T4486] tap0: linktype set to 778 [ 86.915297][ T4496] netlink: 'syz.0.316': attribute type 29 has an invalid length. [ 86.991058][ T4496] netlink: 'syz.0.316': attribute type 29 has an invalid length. [ 87.005047][ T4497] netlink: 'syz.0.316': attribute type 29 has an invalid length. [ 87.758796][ T4531] can: request_module (can-proto-0) failed. [ 88.236032][ T4556] device pim6reg1 entered promiscuous mode [ 88.551181][ T4576] netlink: 'syz.1.348': attribute type 29 has an invalid length. [ 88.607790][ T4576] netlink: 'syz.1.348': attribute type 29 has an invalid length. [ 88.647249][ T4578] device dummy0 entered promiscuous mode [ 89.387945][ T4579] netlink: 'syz.1.348': attribute type 29 has an invalid length. [ 89.668480][ T4609] syz.2.362[4609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.668627][ T4609] syz.2.362[4609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.930079][ T4604] device pim6reg1 entered promiscuous mode [ 90.080949][ T4619] netlink: 'syz.3.365': attribute type 4 has an invalid length. [ 90.088736][ T4619] netlink: 156 bytes leftover after parsing attributes in process `syz.3.365'. [ 90.214463][ T4615] device syzkaller0 entered promiscuous mode [ 92.966913][ T4643] netlink: 'syz.4.373': attribute type 6 has an invalid length. [ 92.977445][ T4662] netlink: 'syz.3.378': attribute type 4 has an invalid length. [ 92.989989][ T4662] netlink: 156 bytes leftover after parsing attributes in process `syz.3.378'. [ 94.020376][ T4705] device pim6reg1 entered promiscuous mode [ 94.780708][ T4719] netlink: 156 bytes leftover after parsing attributes in process `syz.1.400'. [ 94.856288][ T4713] device syzkaller0 entered promiscuous mode [ 96.567027][ T4751] netlink: 156 bytes leftover after parsing attributes in process `syz.4.412'. [ 96.589643][ T4755] device pim6reg1 entered promiscuous mode [ 97.172033][ T4785] netlink: 156 bytes leftover after parsing attributes in process `syz.2.425'. [ 97.430747][ T3557] Bluetooth: hci0: Malformed LE Event: 0x0d [ 100.092460][ T4803] device syzkaller0 entered promiscuous mode [ 100.119649][ T4811] netlink: 156 bytes leftover after parsing attributes in process `syz.4.438'. [ 102.579305][ T4872] netlink: 132 bytes leftover after parsing attributes in process `syz.2.462'. [ 102.795547][ T4890] netlink: 'syz.1.471': attribute type 3 has an invalid length. [ 102.834711][ T4890] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.471'. [ 102.990062][ T4894] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 103.089595][ T4894] device syzkaller0 entered promiscuous mode [ 104.499826][ T4911] netlink: 'syz.1.480': attribute type 21 has an invalid length. [ 104.508957][ T4911] netlink: 'syz.1.480': attribute type 6 has an invalid length. [ 104.517430][ T4911] netlink: 132 bytes leftover after parsing attributes in process `syz.1.480'. [ 104.534669][ T4924] netlink: 'syz.3.487': attribute type 3 has an invalid length. [ 104.572593][ T4924] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.487'. [ 104.860328][ T4939] netlink: 'syz.0.494': attribute type 40 has an invalid length. [ 104.935820][ T4945] IPv6: NLM_F_REPLACE set, but no existing node found! [ 105.183593][ T4954] device syzkaller0 entered promiscuous mode [ 105.220389][ T4955] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 105.325912][ T4955] device syzkaller0 entered promiscuous mode [ 107.124915][ T4975] IPv6: NLM_F_REPLACE set, but no existing node found! [ 107.151510][ T4984] netlink: 'syz.3.515': attribute type 40 has an invalid length. [ 107.524020][ T4998] delete_channel: no stack [ 108.040035][ T5015] IPv6: NLM_F_REPLACE set, but no existing node found! [ 108.178706][ T5024] netlink: 'syz.0.532': attribute type 29 has an invalid length. [ 108.219201][ T5019] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 108.277338][ T5019] device syzkaller0 entered promiscuous mode [ 108.298647][ T5024] netlink: 'syz.0.532': attribute type 29 has an invalid length. [ 108.310269][ T5031] delete_channel: no stack [ 108.406634][ T5035] netlink: 7727 bytes leftover after parsing attributes in process `syz.1.537'. [ 109.353634][ T5027] netlink: 'syz.0.532': attribute type 29 has an invalid length. [ 109.363323][ T5035] netlink: 7727 bytes leftover after parsing attributes in process `syz.1.537'. [ 109.385126][ T5047] Â: renamed from pim6reg1 [ 109.638164][ T5061] delete_channel: no stack [ 109.805165][ T5070] IPv6: NLM_F_REPLACE set, but no existing node found! [ 109.977521][ T5085] netlink: 'syz.0.558': attribute type 17 has an invalid length. [ 110.002993][ T5085] netlink: 'syz.0.558': attribute type 16 has an invalid length. [ 110.037613][ T5085] netlink: 152 bytes leftover after parsing attributes in process `syz.0.558'. [ 110.127999][ T5083] netlink: 'syz.1.557': attribute type 21 has an invalid length. [ 110.151202][ T5083] netlink: 132 bytes leftover after parsing attributes in process `syz.1.557'. [ 110.170743][ T5083] netlink: 'syz.1.557': attribute type 1 has an invalid length. [ 110.215463][ T5083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'. [ 110.284087][ T5092] delete_channel: no stack [ 110.493589][ T5107] netlink: 'syz.3.570': attribute type 13 has an invalid length. [ 110.535515][ T5107] device macvtap0 entered promiscuous mode [ 110.561060][ T5107] macvtap0: refused to change device tx_queue_len [ 110.591435][ T5111] netlink: 'syz.4.572': attribute type 17 has an invalid length. [ 110.617130][ T5111] netlink: 'syz.4.572': attribute type 16 has an invalid length. [ 110.642392][ T5111] netlink: 152 bytes leftover after parsing attributes in process `syz.4.572'. [ 110.646042][ T3001] udevd[3001]: worker [3765] terminated by signal 33 (Unknown signal 33) [ 110.684536][ T3001] udevd[3001]: worker [3765] failed while handling '/devices/virtual/block/loop1' [ 111.184391][ T5133] delete_channel: no stack [ 111.313341][ T5139] device macvtap0 entered promiscuous mode [ 111.389231][ T5139] macvtap0: refused to change device tx_queue_len [ 111.491061][ T5147] netlink: 152 bytes leftover after parsing attributes in process `syz.3.587'. [ 112.338168][ T5179] device macvtap0 entered promiscuous mode [ 112.371814][ T5179] macvtap0: refused to change device tx_queue_len [ 112.965642][ T5212] macvtap0: refused to change device tx_queue_len [ 112.984271][ T5214] netlink: 132 bytes leftover after parsing attributes in process `syz.0.618'. [ 113.021689][ T5214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.618'. [ 113.117799][ T5222] netlink: 152 bytes leftover after parsing attributes in process `syz.2.622'. [ 113.547379][ T5241] validate_nla: 20 callbacks suppressed [ 113.547394][ T5241] netlink: 'syz.1.631': attribute type 29 has an invalid length. [ 113.582998][ T5241] netlink: 'syz.1.631': attribute type 29 has an invalid length. [ 113.607076][ T5245] netlink: 'syz.1.631': attribute type 29 has an invalid length. [ 113.639804][ T5244] netlink: 'syz.2.633': attribute type 13 has an invalid length. [ 113.677508][ T5244] macvtap0: refused to change device tx_queue_len [ 113.704652][ T5241] netlink: 'syz.1.631': attribute type 29 has an invalid length. [ 113.733196][ T5245] netlink: 'syz.1.631': attribute type 29 has an invalid length. [ 113.762624][ T5251] netlink: 'syz.0.635': attribute type 46 has an invalid length. [ 113.801112][ T5241] netlink: 'syz.1.631': attribute type 29 has an invalid length. [ 113.814148][ T5253] netlink: 'syz.3.637': attribute type 10 has an invalid length. [ 113.843236][ T5241] netlink: 'syz.1.631': attribute type 29 has an invalid length. [ 113.866770][ T5257] device veth1_macvtap left promiscuous mode [ 113.956861][ T5257] device veth1_macvtap entered promiscuous mode [ 113.976638][ T5257] device macsec0 entered promiscuous mode [ 113.997952][ T5266] __nla_validate_parse: 1 callbacks suppressed [ 113.997968][ T5266] netlink: 68 bytes leftover after parsing attributes in process `syz.1.642'. [ 114.210967][ T5277] device macvtap0 entered promiscuous mode [ 114.247188][ T5277] macvtap0: refused to change device tx_queue_len [ 114.479048][ T5296] netlink: 68 bytes leftover after parsing attributes in process `syz.1.656'. [ 115.000208][ T5329] netlink: 68 bytes leftover after parsing attributes in process `syz.1.671'. [ 115.696739][ T5332] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 115.904736][ T5359] netlink: 68 bytes leftover after parsing attributes in process `syz.0.684'. [ 117.492676][ T5413] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.709'. [ 117.627665][ T5417] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.712'. [ 118.360289][ T5447] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 118.459574][ T5452] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.726'. [ 119.495458][ T5479] netlink: 10 bytes leftover after parsing attributes in process `syz.4.738'. [ 119.507301][ T5481] validate_nla: 10 callbacks suppressed [ 119.507322][ T5481] netlink: 'syz.1.739': attribute type 2 has an invalid length. [ 119.539152][ T5481] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.739'. [ 119.956941][ T5515] netlink: 10 bytes leftover after parsing attributes in process `syz.0.755'. [ 119.977007][ T5517] netlink: 'syz.1.756': attribute type 2 has an invalid length. [ 120.006452][ T5517] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.756'. [ 120.153022][ T5530] netlink: 'syz.1.761': attribute type 3 has an invalid length. [ 120.177922][ T5530] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.761'. [ 120.292886][ T5541] netlink: 60 bytes leftover after parsing attributes in process `syz.1.766'. [ 120.446748][ T5554] netlink: 'syz.0.772': attribute type 29 has an invalid length. [ 120.455598][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 120.465129][ T5554] netlink: 'syz.0.772': attribute type 29 has an invalid length. [ 120.475004][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 120.498074][ T5554] netlink: 'syz.0.772': attribute type 29 has an invalid length. [ 120.514502][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 120.813338][ T5579] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.785'. [ 121.385265][ T5629] syz.2.809 uses obsolete (PF_INET,SOCK_PACKET) [ 121.977640][ T5673] device syzkaller0 entered promiscuous mode [ 123.641946][ T5709] netlink: 'syz.3.849': attribute type 29 has an invalid length. [ 123.650111][ T5709] netlink: 'syz.3.849': attribute type 29 has an invalid length. [ 123.665401][ T5709] netlink: 'syz.3.849': attribute type 29 has an invalid length. [ 123.955602][ T5726] device syzkaller0 entered promiscuous mode [ 124.730172][ T5745] netlink: 'syz.4.863': attribute type 29 has an invalid length. [ 124.738649][ T5745] __nla_validate_parse: 8 callbacks suppressed [ 124.738664][ T5745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.863'. [ 125.504536][ T5745] netlink: 'syz.4.863': attribute type 29 has an invalid length. [ 125.513641][ T5745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.863'. [ 125.530730][ T5748] netlink: 'syz.4.863': attribute type 29 has an invalid length. [ 125.543395][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.863'. [ 125.755877][ T5777] netlink: 'syz.0.878': attribute type 21 has an invalid length. [ 125.790205][ T5777] netlink: 'syz.0.878': attribute type 1 has an invalid length. [ 125.949711][ T5787] netlink: 'syz.0.882': attribute type 10 has an invalid length. [ 125.976201][ T5787] netlink: 2 bytes leftover after parsing attributes in process `syz.0.882'. [ 125.985924][ T5787] device lo entered promiscuous mode [ 125.993018][ T5787] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 126.052967][ T5790] device syzkaller0 entered promiscuous mode [ 127.114379][ T5813] netlink: 'syz.3.893': attribute type 21 has an invalid length. [ 127.122412][ T5813] netlink: 'syz.3.893': attribute type 1 has an invalid length. [ 127.228526][ T5818] device syzkaller0 entered promiscuous mode [ 127.241048][ T5821] netlink: 'syz.4.897': attribute type 21 has an invalid length. [ 127.258580][ T5821] netlink: 152 bytes leftover after parsing attributes in process `syz.4.897'. [ 127.603955][ T5841] device syzkaller0 entered promiscuous mode [ 127.624777][ T5844] netlink: 'syz.1.908': attribute type 21 has an invalid length. [ 127.713889][ T5845] device syzkaller0 entered promiscuous mode [ 130.143642][ T5899] device syzkaller0 entered promiscuous mode [ 131.299564][ T5931] validate_nla: 3 callbacks suppressed [ 131.299580][ T5931] netlink: 'syz.3.945': attribute type 21 has an invalid length. [ 131.313441][ T5931] netlink: 152 bytes leftover after parsing attributes in process `syz.3.945'. [ 131.323048][ T5933] netlink: 'syz.0.946': attribute type 10 has an invalid length. [ 131.340595][ T5933] netlink: 2 bytes leftover after parsing attributes in process `syz.0.946'. [ 131.368500][ T5933] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 131.433942][ T5945] bond0: (slave dummy0): Error: Slave device does not support XDP [ 131.584015][ T5958] netlink: 168 bytes leftover after parsing attributes in process `syz.2.958'. [ 131.984823][ T5972] device syzkaller0 entered promiscuous mode [ 132.039941][ T5986] netlink: 168 bytes leftover after parsing attributes in process `syz.1.969'. [ 132.055915][ T5987] netlink: 67 bytes leftover after parsing attributes in process `syz.4.970'. [ 132.068851][ T5987] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.093522][ T5987] IPv6: Can't replace route, no match found [ 132.583328][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.589700][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.368296][ T6002] netlink: 'syz.0.977': attribute type 58 has an invalid length. [ 133.390673][ T6002] netlink: 40 bytes leftover after parsing attributes in process `syz.0.977'. [ 133.531840][ T6016] netlink: 67 bytes leftover after parsing attributes in process `syz.3.985'. [ 133.552131][ T6016] IPv6: NLM_F_CREATE should be specified when creating new route [ 133.582253][ T6016] IPv6: Can't replace route, no match found [ 133.997922][ T6048] netlink: 168 bytes leftover after parsing attributes in process `syz.3.998'. [ 134.038481][ T6050] netlink: 67 bytes leftover after parsing attributes in process `syz.1.999'. [ 134.056713][ T6050] IPv6: NLM_F_CREATE should be specified when creating new route [ 134.080928][ T6050] IPv6: Can't replace route, no match found [ 134.125389][ T6060] netlink: 'syz.2.1003': attribute type 3 has an invalid length. [ 134.133848][ T6060] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.1003'. [ 134.136279][ T6059] netlink: 'syz.3.1004': attribute type 10 has an invalid length. [ 134.447633][ T6085] netlink: 'syz.3.1016': attribute type 10 has an invalid length. [ 134.518090][ T6085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.532865][ T6085] team0: Port device bond0 added [ 134.538013][ T6089] netlink: 'syz.4.1017': attribute type 3 has an invalid length. [ 134.929634][ T6116] netlink: 'syz.0.1029': attribute type 10 has an invalid length. [ 135.008138][ T6116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.039657][ T6116] team0: Port device bond0 added [ 135.065627][ T6119] tun0: tun_chr_ioctl cmd 2147767506 [ 135.122922][ T6121] netlink: 'syz.3.1031': attribute type 3 has an invalid length. [ 135.383950][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.392466][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.401176][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.409391][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.417397][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 135.425441][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.550783][ T3640] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.621588][ T48] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 135.663023][ T48] Bluetooth: hci4: Injecting HCI hardware error event [ 135.670942][ T48] Bluetooth: hci4: hardware error 0x00 [ 135.721895][ T3640] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.745450][ T6146] netlink: 'syz.0.1041': attribute type 10 has an invalid length. [ 135.897832][ T3640] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.013785][ T3640] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.052112][ T6154] bond0: (slave dummy0): Error: Slave device does not support XDP [ 136.073289][ T6128] chnl_net:caif_netlink_parms(): no params data found [ 137.462552][ T3557] Bluetooth: hci1: command tx timeout [ 137.703966][ T48] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 138.581626][ T6172] validate_nla: 1 callbacks suppressed [ 138.581642][ T6172] netlink: 'syz.4.1051': attribute type 10 has an invalid length. [ 138.595129][ T6172] __nla_validate_parse: 7 callbacks suppressed [ 138.595141][ T6172] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1051'. [ 138.629425][ T6172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.636980][ T6172] team0: Port device bond0 added [ 138.644257][ T6197] netlink: 'syz.3.1062': attribute type 10 has an invalid length. [ 138.661594][ T6197] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1062'. [ 138.806098][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.834416][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.843949][ T6128] device bridge_slave_0 entered promiscuous mode [ 138.853317][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.860424][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.875852][ T6128] device bridge_slave_1 entered promiscuous mode [ 139.068483][ T6128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.148327][ T6128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.553431][ T48] Bluetooth: hci1: command tx timeout [ 140.133828][ T6128] team0: Port device team_slave_0 added [ 140.179175][ T6236] netlink: 'syz.3.1076': attribute type 10 has an invalid length. [ 140.187490][ T6236] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1076'. [ 140.321456][ T6128] team0: Port device team_slave_1 added [ 141.622847][ T48] Bluetooth: hci1: command tx timeout [ 143.166498][ T6291] netlink: 'syz.0.1099': attribute type 10 has an invalid length. [ 143.175438][ T6291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1099'. [ 143.277121][ T6128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.295128][ T6128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.343112][ T6128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.499462][ T6128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.508981][ T6128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.545513][ T6128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.702442][ T3557] Bluetooth: hci1: command tx timeout [ 146.496850][ T6128] device hsr_slave_0 entered promiscuous mode [ 146.504301][ T6128] device hsr_slave_1 entered promiscuous mode [ 146.511621][ T6128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.519182][ T6128] Cannot create hsr debugfs directory [ 146.529251][ T6364] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1125'. [ 146.653990][ T6371] netlink: 'syz.0.1128': attribute type 13 has an invalid length. [ 146.665354][ T6371] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1128'. [ 146.788705][ T6379] raw_sendmsg: syz.0.1132 forgot to set AF_INET. Fix it! [ 146.809858][ T6381] netlink: 83 bytes leftover after parsing attributes in process `syz.4.1133'. [ 146.844062][ T3640] device hsr_slave_0 left promiscuous mode [ 146.866758][ T3640] device hsr_slave_1 left promiscuous mode [ 146.885590][ T3640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.915695][ T3640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.938608][ T3640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.951228][ T3640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.959119][ T3640] device bridge_slave_1 left promiscuous mode [ 146.975298][ T3640] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.988339][ T3640] device bridge_slave_0 left promiscuous mode [ 146.999423][ T3640] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.055267][ T3640] device veth1_macvtap left promiscuous mode [ 147.083016][ T3640] device veth0_macvtap left promiscuous mode [ 147.089252][ T3640] device veth1_vlan left promiscuous mode [ 147.099772][ T3640] device veth0_vlan left promiscuous mode [ 147.894175][ T3640] team0 (unregistering): Port device team_slave_1 removed [ 147.919767][ T3640] team0 (unregistering): Port device team_slave_0 removed [ 147.945832][ T3640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.975114][ T3640] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.196650][ T3640] bond0 (unregistering): Released all slaves [ 148.268402][ T6397] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1139'. [ 149.328018][ T6421] netlink: 83 bytes leftover after parsing attributes in process `syz.0.1145'. [ 149.474119][ T6431] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1151'. [ 149.556246][ T6437] device wlan0 entered promiscuous mode [ 151.319264][ T6462] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1162'. [ 151.415145][ T6128] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 151.453017][ T6128] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 151.473132][ T6128] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 151.540301][ T6128] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 151.588577][ T6468] device wlan0 entered promiscuous mode [ 151.987212][ T6128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.079310][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.096191][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.142910][ T6128] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.213740][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.223251][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.235336][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.242512][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.284028][ T6491] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1175'. [ 152.303893][ T6491] netlink: 'syz.2.1175': attribute type 1 has an invalid length. [ 152.320659][ T6491] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1175'. [ 152.348210][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.358883][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.384314][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.406712][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.413842][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.422086][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.431629][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.440185][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.449471][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.484018][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.497867][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.509164][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.527000][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.550737][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.569566][ T6498] device wlan0 entered promiscuous mode [ 152.584290][ T6128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.603141][ T6128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.614511][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.623234][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.964382][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.982350][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.023526][ T6128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.069898][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.085251][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.114954][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.127450][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.140771][ T6128] device veth0_vlan entered promiscuous mode [ 153.157935][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.168802][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.184378][ T6128] device veth1_vlan entered promiscuous mode [ 153.251248][ T6128] device veth0_macvtap entered promiscuous mode [ 153.263266][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.279060][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.290822][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.304613][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.318955][ T6128] device veth1_macvtap entered promiscuous mode [ 153.343992][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.352728][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.384544][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.420012][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.440705][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.460729][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.476095][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.500929][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.518528][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.530203][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.552509][ T6128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.571896][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.581693][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.613363][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.640637][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.650469][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.677889][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.698695][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.720237][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.735895][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.748741][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.762854][ T6128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.774795][ T6549] netlink: 'syz.2.1199': attribute type 13 has an invalid length. [ 153.784585][ T6549] netlink: 'syz.2.1199': attribute type 4 has an invalid length. [ 153.793804][ T6549] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1199'. [ 153.804419][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.814012][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.839595][ T6128] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.852676][ T6128] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.862435][ T6128] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.881890][ T6128] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.078799][ T3640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.098673][ T3640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.167974][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 154.201900][ T3640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.229152][ T3640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.293264][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.499122][ T6574] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1210'. [ 154.549337][ T6574] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1210'. [ 154.560440][ T6575] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1210'. [ 154.572603][ T6574] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1210'. [ 154.603422][ T6574] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1210'. [ 154.623531][ T6574] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1210'. [ 154.642932][ T6574] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1210'. [ 155.109956][ T6610] device syzkaller0 entered promiscuous mode [ 156.130579][ T6632] netlink: 'syz.4.1233': attribute type 12 has an invalid length. [ 156.523235][ T6656] device syzkaller0 entered promiscuous mode [ 157.507856][ T6670] __nla_validate_parse: 5 callbacks suppressed [ 157.526387][ T6670] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1247'. [ 158.480690][ T6668] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.1246'. [ 158.531973][ T6670] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1247'. [ 158.618634][ T6679] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1248'. [ 158.827274][ T6695] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.1255'. [ 158.846228][ T6686] device syzkaller0 entered promiscuous mode [ 158.850283][ T6695] netlink: 'syz.0.1255': attribute type 1 has an invalid length. [ 158.899579][ T6699] device syzkaller0 entered promiscuous mode [ 160.712977][ T6706] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.1260'. [ 160.749289][ T6714] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 160.755410][ T6714] pim6reg0: linktype set to 769 [ 160.832633][ T6712] device syzkaller0 entered promiscuous mode [ 160.879354][ T6721] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1263'. [ 160.893386][ T6723] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1264'. [ 161.220337][ T6742] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.1271'. [ 161.234506][ T6742] netlink: 'syz.2.1271': attribute type 1 has an invalid length. [ 162.083865][ T6721] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1263'. [ 162.098799][ T6748] device syzkaller0 entered promiscuous mode [ 162.235681][ T6757] device syzkaller0 entered promiscuous mode [ 162.648045][ T6777] __nla_validate_parse: 1 callbacks suppressed [ 162.648063][ T6777] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.1284'. [ 162.739260][ T6777] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 162.757677][ T6779] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1285'. [ 164.618791][ T6782] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1286'. [ 164.633602][ T6779] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1285'. [ 164.791275][ T6793] device syzkaller0 entered promiscuous mode [ 166.226866][ T6808] device syzkaller0 entered promiscuous mode [ 166.391896][ T6819] bond0: (slave dummy0): Error: Slave device does not support XDP [ 166.499161][ T6826] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.1298'. [ 166.516284][ T6827] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1299'. [ 166.540477][ T6826] netlink: 'syz.1.1298': attribute type 1 has an invalid length. [ 166.716689][ T6832] device syzkaller0 entered promiscuous mode [ 168.972927][ T6870] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1314'. [ 169.263279][ T6892] netlink: 16174 bytes leftover after parsing attributes in process `syz.2.1323'. [ 169.466364][ T6907] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32 [ 169.507441][ T6911] device syzkaller0 entered promiscuous mode [ 169.707041][ T6925] netlink: 16174 bytes leftover after parsing attributes in process `syz.2.1339'. [ 169.834768][ T6937] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32 [ 170.022657][ T6951] device syzkaller0 entered promiscuous mode [ 170.128994][ T6957] netlink: 16174 bytes leftover after parsing attributes in process `syz.2.1355'. [ 170.258613][ T6968] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32 [ 170.487598][ T6979] device pim6reg1 entered promiscuous mode [ 170.674542][ T6987] netlink: 16174 bytes leftover after parsing attributes in process `syz.0.1370'. [ 170.811523][ T6993] device syzkaller0 entered promiscuous mode [ 174.721165][ T7030] netlink: 16174 bytes leftover after parsing attributes in process `syz.1.1387'. [ 175.178972][ T7053] device syzkaller0 entered promiscuous mode [ 175.620940][ T3551] Bluetooth: hci0: command 0x0406 tx timeout [ 175.631744][ T3551] Bluetooth: hci2: command 0x0406 tx timeout [ 176.378870][ T7112] netlink: 121244 bytes leftover after parsing attributes in process `syz.3.1422'. [ 177.916224][ T7148] device pim6reg1 entered promiscuous mode [ 178.125282][ T7153] netlink: 117604 bytes leftover after parsing attributes in process `syz.2.1435'. [ 178.169826][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1435'. [ 178.780825][ T7181] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 179.181338][ T7200] netlink: 'syz.0.1456': attribute type 29 has an invalid length. [ 179.214106][ T7200] netlink: 'syz.0.1456': attribute type 29 has an invalid length. [ 179.237583][ T7204] netlink: 'syz.0.1456': attribute type 29 has an invalid length. [ 179.288083][ T7200] netlink: 'syz.0.1456': attribute type 29 has an invalid length. [ 179.348629][ T7200] netlink: 'syz.0.1456': attribute type 29 has an invalid length. [ 179.454840][ T7210] bond0: (slave dummy0): Error: Slave device does not support XDP [ 179.479822][ T7212] device veth1_macvtap left promiscuous mode [ 179.486902][ T7212] device macsec0 entered promiscuous mode [ 179.549232][ T7212] device veth1_macvtap entered promiscuous mode [ 179.567620][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.663512][ T7222] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.947174][ T7235] netlink: 'syz.4.1471': attribute type 29 has an invalid length. [ 179.970333][ T7235] netlink: 'syz.4.1471': attribute type 29 has an invalid length. [ 180.031242][ T7235] netlink: 'syz.4.1471': attribute type 29 has an invalid length. [ 180.070129][ T7235] netlink: 'syz.4.1471': attribute type 29 has an invalid length. [ 180.107886][ T7244] netlink: 'syz.4.1471': attribute type 29 has an invalid length. [ 180.240302][ T7251] IPv6: NLM_F_CREATE should be specified when creating new route [ 180.553421][ T7271] device veth1_macvtap left promiscuous mode [ 180.559582][ T7271] device macsec0 entered promiscuous mode [ 180.612337][ T7271] device veth1_macvtap entered promiscuous mode [ 180.631161][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.708719][ T7302] IPv6: NLM_F_CREATE should be specified when creating new route [ 182.307771][ T7323] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1508'. [ 183.275726][ T7351] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1520'. [ 183.796637][ T7359] netlink: 117604 bytes leftover after parsing attributes in process `syz.2.1523'. [ 183.918023][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1523'. [ 184.081647][ T7373] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 184.111330][ T7378] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1531'. [ 184.474276][ T7398] validate_nla: 17 callbacks suppressed [ 184.474292][ T7398] netlink: 'syz.4.1538': attribute type 21 has an invalid length. [ 184.730224][ T7402] netlink: 117604 bytes leftover after parsing attributes in process `syz.4.1542'. [ 184.740924][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1542'. [ 185.048744][ T7410] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1545'. [ 185.707859][ T7440] device syzkaller0 entered promiscuous mode [ 185.860645][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 187.441911][ T7446] device syzkaller0 entered promiscuous mode [ 188.575067][ T7450] netlink: 'syz.2.1560': attribute type 6 has an invalid length. [ 188.583290][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1563'. [ 188.965884][ T7486] device syzkaller0 entered promiscuous mode [ 190.456534][ T7501] netlink: 'syz.2.1578': attribute type 29 has an invalid length. [ 190.470903][ T7501] netlink: 'syz.2.1578': attribute type 29 has an invalid length. [ 190.489999][ T7501] netlink: 'syz.2.1578': attribute type 29 has an invalid length. [ 191.037398][ T7533] device syzkaller0 entered promiscuous mode [ 191.281892][ T7537] netlink: 'syz.0.1593': attribute type 29 has an invalid length. [ 192.588232][ T7537] netlink: 'syz.0.1593': attribute type 29 has an invalid length. [ 193.116928][ T7576] netlink: 'syz.4.1607': attribute type 29 has an invalid length. [ 193.176695][ T7576] netlink: 'syz.4.1607': attribute type 29 has an invalid length. [ 193.237400][ T7579] netlink: 'syz.4.1607': attribute type 29 has an invalid length. [ 193.774692][ T7588] device syzkaller0 entered promiscuous mode [ 194.029165][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.035531][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.389302][ T7609] netlink: 'syz.1.1619': attribute type 29 has an invalid length. [ 195.592991][ T7605] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1617'. [ 195.602453][ T7609] netlink: 'syz.1.1619': attribute type 29 has an invalid length. [ 196.113271][ T7621] ¯Ê®¸}p: renamed from pim6reg1 [ 197.259984][ T7639] netlink: 'syz.4.1630': attribute type 29 has an invalid length. [ 197.348791][ T7639] netlink: 'syz.4.1630': attribute type 29 has an invalid length. [ 197.423103][ T7645] netlink: 'syz.4.1630': attribute type 29 has an invalid length. [ 197.787271][ T7649] device syzkaller0 entered promiscuous mode [ 200.807154][ T7699] delete_channel: no stack [ 202.104026][ T7711] device syzkaller0 entered promiscuous mode [ 205.333740][ T7770] device syzkaller0 entered promiscuous mode [ 205.513551][ T7783] ¯Ê®¸}p: renamed from pim6reg1 [ 209.702632][ T7848] device syzkaller0 entered promiscuous mode [ 209.832523][ T7870] tun0: tun_chr_ioctl cmd 1074025681 [ 213.233181][ T7926] device syzkaller0 entered promiscuous mode [ 213.263478][ T7928] tun0: tun_chr_ioctl cmd 1074025681 [ 215.697693][ T7973] tun0: tun_chr_ioctl cmd 1074025681 [ 216.761755][ T7998] device syzkaller0 entered promiscuous mode [ 216.785423][ T8014] tun0: tun_chr_ioctl cmd 1074025681 [ 219.268847][ T8032] bond0: (slave dummy0): Error: Slave device does not support XDP [ 219.774313][ T8055] tun0: tun_chr_ioctl cmd 1074025681 [ 220.902819][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1807'. [ 221.280023][ T3557] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 221.289466][ T3557] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 221.297475][ T3557] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 221.305820][ T3557] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 221.315539][ T3557] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 221.322920][ T3557] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.380741][ T3551] Bluetooth: hci5: command tx timeout [ 223.692536][ T3897] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.799787][ T8109] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1819'. [ 223.865371][ T8109] device netdevsim0 entered promiscuous mode [ 223.904533][ T3897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.049317][ T3897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.146561][ T3897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.239552][ T8084] chnl_net:caif_netlink_parms(): no params data found [ 225.460602][ T3551] Bluetooth: hci5: command tx timeout [ 226.226290][ T8084] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.281596][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.301875][ T8084] device bridge_slave_0 entered promiscuous mode [ 226.352238][ T8175] netlink: 'syz.3.1844': attribute type 29 has an invalid length. [ 226.387704][ T8084] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.396456][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.415661][ T8084] device bridge_slave_1 entered promiscuous mode [ 226.431770][ T8175] netlink: 'syz.3.1844': attribute type 29 has an invalid length. [ 226.474319][ T8178] netlink: 'syz.3.1844': attribute type 29 has an invalid length. [ 226.517019][ T8084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.535159][ T8182] netlink: 'syz.3.1844': attribute type 29 has an invalid length. [ 226.546029][ T8084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.606355][ T8175] netlink: 'syz.3.1844': attribute type 29 has an invalid length. [ 226.749263][ T8178] netlink: 'syz.3.1844': attribute type 29 has an invalid length. [ 226.867146][ T8182] netlink: 'syz.3.1844': attribute type 29 has an invalid length. [ 226.914548][ T8084] team0: Port device team_slave_0 added [ 226.947246][ T8084] team0: Port device team_slave_1 added [ 227.155244][ T8084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.182514][ T8084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.303517][ T8084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.370214][ T8084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.391172][ T8084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.429761][ T8084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.540921][ T3557] Bluetooth: hci5: command tx timeout [ 227.606335][ T8084] device hsr_slave_0 entered promiscuous mode [ 227.633624][ T8084] device hsr_slave_1 entered promiscuous mode [ 227.667490][ T8084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.675438][ T8084] Cannot create hsr debugfs directory [ 227.831181][ T8217] netlink: 'syz.3.1859': attribute type 29 has an invalid length. [ 228.701981][ T8217] netlink: 'syz.3.1859': attribute type 29 has an invalid length. [ 229.326295][ T3897] device hsr_slave_0 left promiscuous mode [ 229.366064][ T3897] device hsr_slave_1 left promiscuous mode [ 229.400708][ T3897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.448725][ T3897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.507066][ T3897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.547422][ T3897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.583235][ T3897] device bridge_slave_1 left promiscuous mode [ 229.636156][ T3897] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.636528][ T3557] Bluetooth: hci5: command tx timeout [ 229.700993][ T3897] device bridge_slave_0 left promiscuous mode [ 229.707263][ T3897] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.747310][ T3897] device veth1_macvtap left promiscuous mode [ 229.753518][ T3897] device veth0_macvtap left promiscuous mode [ 229.759624][ T3897] device veth1_vlan left promiscuous mode [ 229.770832][ T3897] device veth0_vlan left promiscuous mode [ 230.038302][ T8257] netlink: 'syz.2.1871': attribute type 29 has an invalid length. [ 230.281668][ T3897] team0 (unregistering): Port device team_slave_1 removed [ 230.343206][ T3897] team0 (unregistering): Port device team_slave_0 removed [ 230.392846][ T3897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.431274][ T3897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.691062][ T3897] bond0 (unregistering): Released all slaves [ 231.265868][ T8084] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 231.382122][ T8084] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 231.434914][ T8084] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 231.482709][ T8084] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 231.734884][ T8300] validate_nla: 6 callbacks suppressed [ 231.734901][ T8300] netlink: 'syz.4.1883': attribute type 29 has an invalid length. [ 231.880407][ T8300] netlink: 'syz.4.1883': attribute type 29 has an invalid length. [ 231.939790][ T8084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.976821][ T8302] netlink: 'syz.4.1883': attribute type 29 has an invalid length. [ 232.036657][ T8304] netlink: 'syz.4.1883': attribute type 29 has an invalid length. [ 232.063779][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.081617][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.090914][ T8300] netlink: 'syz.4.1883': attribute type 29 has an invalid length. [ 232.121008][ T8084] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.127883][ T8302] netlink: 'syz.4.1883': attribute type 29 has an invalid length. [ 232.146423][ T8304] netlink: 'syz.4.1883': attribute type 29 has an invalid length. [ 232.170803][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.191981][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.221049][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.228220][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.274995][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.369020][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.388203][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.411563][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.418685][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.120795][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.129316][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.138060][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.146866][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.155519][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.166506][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.177469][ T8327] netlink: 'syz.0.1894': attribute type 21 has an invalid length. [ 234.222064][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.242630][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.353597][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.523455][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.527048][ T8338] netlink: 'syz.4.1899': attribute type 29 has an invalid length. [ 234.601219][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.748347][ T8084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.774215][ T8338] netlink: 'syz.4.1899': attribute type 29 has an invalid length. [ 235.290925][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.298456][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.354214][ T8084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.416148][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.426845][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.478736][ T8084] device veth0_vlan entered promiscuous mode [ 235.501327][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.510064][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.538790][ T8084] device veth1_vlan entered promiscuous mode [ 235.556932][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.568677][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.593864][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.658997][ T8084] device veth0_macvtap entered promiscuous mode [ 235.727543][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 235.748170][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.777207][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.823482][ T8084] device veth1_macvtap entered promiscuous mode [ 235.853008][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 235.871956][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 235.923855][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.977188][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.016385][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.065158][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.100045][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.156706][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.200021][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.265800][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.328757][ T8084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.389411][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.405286][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.432516][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.453864][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.475355][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.489681][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.507642][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.527849][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.539046][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.555328][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.570291][ T8084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.600280][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.615611][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.669211][ T8084] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.709397][ T8084] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.730594][ T8084] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.749590][ T8084] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.930076][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.943536][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.995066][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 237.054739][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.080705][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.095396][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 238.235120][ T8487] validate_nla: 5 callbacks suppressed [ 238.235137][ T8487] netlink: 'syz.1.1964': attribute type 10 has an invalid length. [ 238.301987][ T8487] device veth1_macvtap left promiscuous mode [ 238.612576][ T26] audit: type=1804 audit(1719847054.355:3): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1951" name="/root/syzkaller.xqDPtj/354/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 238.740345][ T26] audit: type=1800 audit(1719847054.355:4): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1951" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 238.776938][ T8497] netlink: 'syz.0.1969': attribute type 33 has an invalid length. [ 238.822552][ T8497] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1969'. [ 239.052640][ T8499] tun0: tun_chr_ioctl cmd 21731 [ 239.080102][ T8499] device veth0_vlan left promiscuous mode [ 239.103992][ T8499] device veth0_vlan entered promiscuous mode [ 239.253949][ T8521] netlink: 'syz.4.1979': attribute type 10 has an invalid length. [ 239.298116][ T8521] device veth1_macvtap left promiscuous mode [ 239.329213][ T8521] device macsec0 left promiscuous mode [ 239.423197][ T8530] netlink: 'syz.2.1984': attribute type 33 has an invalid length. [ 239.490796][ T8530] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1984'. [ 239.922304][ T8549] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1993'. [ 240.013624][ T8553] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1995'. [ 240.140606][ T8546] tun0: tun_chr_ioctl cmd 21731 [ 240.162891][ T8558] device veth0_vlan left promiscuous mode [ 240.180352][ T8558] device veth0_vlan entered promiscuous mode [ 240.245123][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.278774][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.315466][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.349686][ T8560] netlink: 'syz.2.1997': attribute type 10 has an invalid length. [ 240.375411][ T8560] bridge0: port 3(vlan0) entered blocking state [ 240.386987][ T8560] bridge0: port 3(vlan0) entered disabled state [ 240.399835][ T8560] device vlan0 entered promiscuous mode [ 240.414207][ T8566] netlink: 'syz.0.1998': attribute type 10 has an invalid length. [ 240.428319][ T8566] device veth1_macvtap left promiscuous mode [ 240.538060][ T8572] netlink: 'syz.2.2002': attribute type 33 has an invalid length. [ 240.593707][ T8572] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2002'. [ 240.611237][ T8574] netlink: 'syz.0.2003': attribute type 46 has an invalid length. [ 240.625383][ T8574] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2003'. [ 240.654651][ T8580] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2006'. [ 240.695530][ T8582] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2007'. [ 240.834756][ T8594] netlink: 'syz.3.2013': attribute type 10 has an invalid length. [ 240.868477][ T8594] device veth1_macvtap left promiscuous mode [ 240.890726][ T8594] device macsec0 left promiscuous mode [ 240.923159][ T8593] netlink: 'syz.4.2012': attribute type 10 has an invalid length. [ 240.982910][ T8593] bridge0: port 3(vlan0) entered blocking state [ 241.007896][ T8593] bridge0: port 3(vlan0) entered disabled state [ 241.032784][ T8593] device vlan0 entered promiscuous mode [ 241.290660][ T8604] tun0: tun_chr_ioctl cmd 21731 [ 241.394747][ T8598] device veth0_vlan left promiscuous mode [ 241.431151][ T8598] device veth0_vlan entered promiscuous mode [ 241.474826][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.504002][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.550153][ T3623] bridge0: port 3(vlan0) entered blocking state [ 241.556598][ T3623] bridge0: port 3(vlan0) entered forwarding state [ 241.617276][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.674643][ T8613] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2020'. [ 241.697412][ T8615] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2022'. [ 241.961414][ T8632] bridge0: port 3(vlan0) entered blocking state [ 241.968114][ T8632] bridge0: port 3(vlan0) entered disabled state [ 242.007604][ T8632] device vlan0 entered promiscuous mode [ 242.160479][ T8643] bridge0: port 3(vlan0) entered disabled state [ 242.280885][ T8643] tun0: tun_chr_ioctl cmd 21731 [ 242.316709][ T8643] device veth0_vlan left promiscuous mode [ 242.337220][ T8643] device veth0_vlan entered promiscuous mode [ 242.363865][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.383155][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.402671][ T3590] bridge0: port 3(vlan0) entered blocking state [ 242.409081][ T3590] bridge0: port 3(vlan0) entered forwarding state [ 242.430910][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.992239][ T8695] tun0: tun_chr_ioctl cmd 21731 [ 243.047788][ T8695] device veth0_vlan left promiscuous mode [ 243.064191][ T8695] device veth0_vlan entered promiscuous mode [ 243.102089][ T8707] bridge0: port 3(vlan0) entered disabled state [ 243.344655][ T8726] validate_nla: 9 callbacks suppressed [ 243.344671][ T8726] netlink: 'syz.1.2073': attribute type 46 has an invalid length. [ 243.506610][ T8735] device syzkaller0 entered promiscuous mode [ 243.577371][ T8741] netlink: 'syz.4.2080': attribute type 10 has an invalid length. [ 243.975538][ T8745] tun0: tun_chr_ioctl cmd 21731 [ 243.995253][ T8745] device veth0_vlan left promiscuous mode [ 244.007963][ T8745] device veth0_vlan entered promiscuous mode [ 244.045373][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.075370][ T3594] bridge0: port 3(vlan0) entered blocking state [ 244.081740][ T3594] bridge0: port 3(vlan0) entered forwarding state [ 244.288750][ T3557] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.297178][ T3557] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.305249][ T3557] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.314028][ T3557] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.322630][ T3557] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 244.329908][ T3557] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.458438][ T102] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.543292][ T102] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.572260][ T8783] device syzkaller0 entered promiscuous mode [ 244.653573][ T102] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.730986][ T102] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.131091][ T8768] chnl_net:caif_netlink_parms(): no params data found [ 245.151532][ T8797] tun0: tun_chr_ioctl cmd 21731 [ 245.218128][ T8797] device veth0_vlan left promiscuous mode [ 245.252985][ T8797] device veth0_vlan entered promiscuous mode [ 245.386896][ T8819] device syzkaller0 entered promiscuous mode [ 245.623735][ T8768] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.652254][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.659990][ T8768] device bridge_slave_0 entered promiscuous mode [ 245.669755][ T8768] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.677334][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.685858][ T8768] device bridge_slave_1 entered promiscuous mode [ 245.777463][ T8768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.858034][ T8768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.964559][ T8842] netlink: 'syz.3.2122': attribute type 10 has an invalid length. [ 245.991588][ T8842] device bond0 entered promiscuous mode [ 245.997339][ T8842] device bond_slave_0 entered promiscuous mode [ 246.017697][ T8842] device bond_slave_1 entered promiscuous mode [ 246.100290][ T8842] team0: Port device bond0 removed [ 246.118835][ T8842] batman_adv: batadv0: Adding interface: bond0 [ 246.136464][ T8842] batman_adv: batadv0: The MTU of interface bond0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.165804][ T8842] batman_adv: batadv0: Not using interface bond0 (retrying later): interface not active [ 246.223607][ T8768] team0: Port device team_slave_0 added [ 246.249142][ T8768] team0: Port device team_slave_1 added [ 246.324333][ T8853] device syzkaller0 entered promiscuous mode [ 246.380769][ T8768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.392748][ T8768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.419595][ T8768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.430341][ T3551] Bluetooth: hci1: command tx timeout [ 246.545488][ T8768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.555032][ T8768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.583726][ T8768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.798119][ T8768] device hsr_slave_0 entered promiscuous mode [ 246.837512][ T8768] device hsr_slave_1 entered promiscuous mode [ 246.851332][ T8768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.858905][ T8768] Cannot create hsr debugfs directory [ 246.968642][ T8878] netlink: 'syz.3.2141': attribute type 10 has an invalid length. [ 247.123134][ T102] device hsr_slave_0 left promiscuous mode [ 247.142193][ T102] device hsr_slave_1 left promiscuous mode [ 247.157909][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.183948][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.214623][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.231525][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.244420][ T102] device vlan0 left promiscuous mode [ 247.249861][ T102] bridge0: port 3(vlan0) entered disabled state [ 247.274971][ T102] device bridge_slave_1 left promiscuous mode [ 247.287492][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.297561][ T102] device bridge_slave_0 left promiscuous mode [ 247.323702][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.356345][ T102] device veth0_macvtap left promiscuous mode [ 247.362527][ T102] device veth1_vlan left promiscuous mode [ 247.368292][ T102] device veth0_vlan left promiscuous mode [ 247.948426][ T102] team0 (unregistering): Port device team_slave_1 removed [ 247.976519][ T102] team0 (unregistering): Port device team_slave_0 removed [ 248.003235][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.036850][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.155127][ T102] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 248.226892][ T102] team0 (unregistering): Port device bond0 removed [ 248.299012][ T102] bond0 (unregistering): Released all slaves [ 248.393232][ T8911] netlink: 'syz.1.2152': attribute type 2 has an invalid length. [ 248.409147][ T8911] netlink: 'syz.1.2152': attribute type 12 has an invalid length. [ 248.500719][ T3557] Bluetooth: hci1: command tx timeout [ 248.558637][ T8915] netlink: 'syz.1.2154': attribute type 10 has an invalid length. [ 248.567480][ T8915] device bond0 entered promiscuous mode [ 248.580850][ T8915] device bond_slave_0 entered promiscuous mode [ 248.587370][ T8915] device bond_slave_1 entered promiscuous mode [ 248.601965][ T8915] batman_adv: batadv0: Adding interface: bond0 [ 248.613618][ T8915] batman_adv: batadv0: The MTU of interface bond0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.661672][ T8915] batman_adv: batadv0: Interface activated: bond0 [ 248.802394][ T8925] netlink: 'syz.0.2158': attribute type 29 has an invalid length. [ 248.820907][ T8925] netlink: 'syz.0.2158': attribute type 29 has an invalid length. [ 248.848320][ T8925] netlink: 'syz.0.2158': attribute type 29 has an invalid length. [ 248.886523][ T8925] netlink: 'syz.0.2158': attribute type 29 has an invalid length. [ 248.917516][ T8925] netlink: 'syz.0.2158': attribute type 29 has an invalid length. [ 248.930278][ T8932] netlink: 'syz.2.2161': attribute type 10 has an invalid length. [ 248.944340][ T8932] __nla_validate_parse: 10 callbacks suppressed [ 248.944354][ T8932] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2161'. [ 248.965659][ T8932] bridge0: port 4(vlan1) entered blocking state [ 248.972359][ T8932] bridge0: port 4(vlan1) entered disabled state [ 248.980005][ T8932] device vlan1 entered promiscuous mode [ 248.993734][ T8932] bridge0: port 4(vlan1) entered blocking state [ 249.000199][ T8932] bridge0: port 4(vlan1) entered forwarding state [ 249.180021][ T8941] netlink: 'syz.2.2164': attribute type 2 has an invalid length. [ 249.223901][ T8939] tap0: tun_chr_ioctl cmd 1074025681 [ 249.315675][ T8768] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 249.339478][ T8768] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 249.371902][ T8768] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 249.426731][ T8768] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 249.504490][ T8951] device bond0 entered promiscuous mode [ 249.510224][ T8951] device bond_slave_0 entered promiscuous mode [ 249.528284][ T8951] device bond_slave_1 entered promiscuous mode [ 249.548434][ T8951] batman_adv: batadv0: Adding interface: bond0 [ 249.581264][ T8951] batman_adv: batadv0: The MTU of interface bond0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.647506][ T8951] batman_adv: batadv0: Interface activated: bond0 [ 249.755115][ T8953] device syzkaller0 entered promiscuous mode [ 249.791701][ T8960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2173'. [ 249.819102][ T8960] bridge0: port 1(vlan1) entered blocking state [ 249.834927][ T8960] bridge0: port 1(vlan1) entered disabled state [ 249.861701][ T8960] device vlan1 entered promiscuous mode [ 249.867752][ T8960] bridge0: port 1(vlan1) entered blocking state [ 249.874122][ T8960] bridge0: port 1(vlan1) entered forwarding state [ 250.591118][ T3557] Bluetooth: hci1: command tx timeout [ 251.184863][ T8969] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2176'. [ 251.202649][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.394946][ T8768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.430899][ T8981] tap0: tun_chr_ioctl cmd 1074025681 [ 251.448497][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.465703][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.503772][ T8768] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.524161][ T8984] device pim6reg1 entered promiscuous mode [ 251.587345][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.611868][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.630535][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.637686][ T3594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.664556][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.682399][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.692453][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.699627][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.711265][ T8990] device bond0 entered promiscuous mode [ 251.716865][ T8990] device bond_slave_0 entered promiscuous mode [ 251.741031][ T8990] device bond_slave_1 entered promiscuous mode [ 251.757870][ T8990] device dummy0 entered promiscuous mode [ 251.812769][ T8990] team0: Port device bond0 removed [ 251.820045][ T8990] batman_adv: batadv0: Adding interface: bond0 [ 251.827629][ T8990] batman_adv: batadv0: The MTU of interface bond0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.861944][ T8990] batman_adv: batadv0: Not using interface bond0 (retrying later): interface not active [ 251.894374][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.903783][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.922241][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.942501][ T8994] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2187'. [ 251.968339][ T8994] bridge0: port 3(vlan1) entered blocking state [ 251.991747][ T8994] bridge0: port 3(vlan1) entered disabled state [ 252.010948][ T8994] device vlan1 entered promiscuous mode [ 252.017303][ T8994] bridge0: port 3(vlan1) entered blocking state [ 252.023801][ T8994] bridge0: port 3(vlan1) entered forwarding state [ 252.064072][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.074648][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.118253][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.131206][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.147072][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.156226][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.165169][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.179551][ T8768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.192920][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.212926][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.299038][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.660715][ T3557] Bluetooth: hci1: command tx timeout [ 252.814130][ T9013] tap0: tun_chr_ioctl cmd 1074025681 [ 252.842799][ T9020] device pim6reg1 entered promiscuous mode [ 253.049268][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.081521][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.096027][ T8768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.138197][ T9038] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2203'. [ 253.438927][ T9052] tap0: tun_chr_ioctl cmd 1074025681 [ 253.482526][ T9055] device pim6reg1 entered promiscuous mode [ 253.732309][ T9065] validate_nla: 26 callbacks suppressed [ 253.732326][ T9065] netlink: 'syz.1.2213': attribute type 29 has an invalid length. [ 253.749054][ T9065] netlink: 'syz.1.2213': attribute type 29 has an invalid length. [ 253.765313][ T9067] netlink: 'syz.2.2215': attribute type 10 has an invalid length. [ 253.776064][ T9065] netlink: 'syz.1.2213': attribute type 29 has an invalid length. [ 253.789673][ T9067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2215'. [ 253.799964][ T9065] netlink: 'syz.1.2213': attribute type 29 has an invalid length. [ 253.816241][ T9067] netlink: 'syz.2.2215': attribute type 10 has an invalid length. [ 253.838021][ T9067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2215'. [ 253.850667][ T9065] netlink: 'syz.1.2213': attribute type 29 has an invalid length. [ 253.858651][ T9071] netlink: 'syz.3.2216': attribute type 10 has an invalid length. [ 253.881064][ T9071] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2216'. [ 253.945727][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.955285][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.965929][ T9077] netlink: 'syz.2.2218': attribute type 11 has an invalid length. [ 253.978016][ T9077] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2218'. [ 254.012714][ T9079] netlink: 'syz.0.2217': attribute type 27 has an invalid length. [ 254.028155][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 254.037838][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 254.046082][ T9079] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.2217'. [ 254.071235][ T8768] device veth0_vlan entered promiscuous mode [ 254.097021][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 254.112295][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 254.121337][ T9082] tap0: tun_chr_ioctl cmd 1074025681 [ 254.555841][ T8768] device veth1_vlan entered promiscuous mode [ 254.574785][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 254.594001][ T9092] device pim6reg1 entered promiscuous mode [ 254.648966][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 254.659029][ T9105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2228'. [ 254.674697][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 254.685179][ T9105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2228'. [ 254.715983][ T8768] device veth0_macvtap entered promiscuous mode [ 254.747229][ T8768] device veth1_macvtap entered promiscuous mode [ 254.768579][ T9109] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2230'. [ 254.805833][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.877507][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.889759][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.915625][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.938193][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.948786][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.964385][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.976582][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.996997][ T8768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.018422][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 255.037154][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 255.045797][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.069969][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.095018][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.113273][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.127554][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.149673][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.165588][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.176757][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.187043][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.238930][ T9135] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2241'. [ 255.267796][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.279095][ T8768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.308298][ T9135] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2241'. [ 255.321092][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.329716][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.381863][ T8768] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.420548][ T8768] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.442141][ T8768] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.473166][ T8768] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.482515][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.488796][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.587953][ T9142] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.2242'. [ 255.645189][ T9144] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2243'. [ 255.791322][ T3897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.821004][ T3897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.861404][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 255.878108][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.909891][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.934752][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 256.078006][ T9163] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2251'. [ 259.858896][ T9279] validate_nla: 15 callbacks suppressed [ 259.858908][ T9279] netlink: 'syz.2.2296': attribute type 27 has an invalid length. [ 259.964030][ T9279] __nla_validate_parse: 8 callbacks suppressed [ 259.964047][ T9279] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.2296'. [ 260.397937][ T26] audit: type=1804 audit(1719847076.135:5): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2307" name="/root/syzkaller.RARq1S/504/memory.events" dev="sda1" ino=1954 res=1 errno=0 [ 261.388758][ T9338] netlink: 'syz.3.2324': attribute type 27 has an invalid length. [ 261.420747][ T9338] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2324'. [ 264.144077][ T9458] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2381'. [ 264.185997][ T9458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.578404][ T9473] netlink: 'syz.3.2390': attribute type 29 has an invalid length. [ 264.586713][ T9473] netlink: 'syz.3.2390': attribute type 29 has an invalid length. [ 264.596061][ T9473] netlink: 'syz.3.2390': attribute type 29 has an invalid length. [ 265.666005][ T9514] device syzkaller0 entered promiscuous mode [ 268.297513][ T9581] can: request_module (can-proto-0) failed. [ 268.626339][ T9538] tap0: tun_chr_ioctl cmd 1074025677 [ 268.641035][ T9538] tap0: linktype set to 778 [ 268.712825][ T9592] netlink: 'syz.2.2443': attribute type 29 has an invalid length. [ 268.741035][ T9592] netlink: 'syz.2.2443': attribute type 29 has an invalid length. [ 268.759596][ T9596] netlink: 'syz.2.2443': attribute type 29 has an invalid length. [ 268.776133][ T9592] netlink: 'syz.2.2443': attribute type 29 has an invalid length. [ 268.883678][ T9596] netlink: 'syz.2.2443': attribute type 29 has an invalid length. [ 269.521484][ T9616] bond_slave_1: mtu less than device minimum [ 269.727350][ T9624] netlink: 'syz.3.2459': attribute type 29 has an invalid length. [ 269.750947][ T9624] netlink: 'syz.3.2459': attribute type 29 has an invalid length. [ 269.789829][ T9624] netlink: 'syz.3.2459': attribute type 29 has an invalid length. [ 269.819734][ T9624] netlink: 'syz.3.2459': attribute type 29 has an invalid length. [ 269.851870][ T9624] netlink: 'syz.3.2459': attribute type 29 has an invalid length. [ 269.867376][ T9632] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2462'. [ 270.064869][ T9643] syz.0.2467[9643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.065015][ T9643] syz.0.2467[9643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.303640][ T9654] device syzkaller0 entered promiscuous mode [ 270.339816][ T9660] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 270.353472][ T9660] pim6reg0: linktype set to 823 [ 272.089433][ T9661] device syzkaller0 entered promiscuous mode [ 273.765208][ T9724] validate_nla: 11 callbacks suppressed [ 273.765224][ T9724] netlink: 'syz.3.2494': attribute type 29 has an invalid length. [ 274.606481][ T9718] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 274.613858][ T9718] pim6reg0: linktype set to 823 [ 274.622768][ T9724] netlink: 'syz.3.2494': attribute type 29 has an invalid length. [ 274.706672][ T9732] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2496'. [ 274.722579][ T9732] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 274.736940][ T9734] netlink: 'syz.3.2497': attribute type 29 has an invalid length. [ 274.760940][ T9734] netlink: 'syz.3.2497': attribute type 29 has an invalid length. [ 274.790923][ T9742] netlink: 'syz.3.2497': attribute type 29 has an invalid length. [ 274.820960][ T9734] netlink: 'syz.3.2497': attribute type 29 has an invalid length. [ 274.859323][ T9734] netlink: 'syz.3.2497': attribute type 29 has an invalid length. [ 275.035939][ T9757] netlink: 'syz.1.2508': attribute type 29 has an invalid length. [ 275.064549][ T9757] netlink: 'syz.1.2508': attribute type 29 has an invalid length. [ 275.087210][ T9757] netlink: 'syz.1.2508': attribute type 29 has an invalid length. [ 275.164242][ T9764] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 275.180247][ T9764] pim6reg0: linktype set to 823 [ 275.186824][ T9766] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2512'. [ 275.212561][ T9766] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 275.613104][ T9798] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2527'. [ 275.710656][ T9798] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 275.759839][ T9802] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 275.786067][ T9802] pim6reg0: linktype set to 823 [ 275.877649][ T9807] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2530'. [ 276.227212][ T9827] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2540'. [ 276.238913][ T9827] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 276.248419][ T9826] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2539'. [ 276.572761][ T9842] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 276.580106][ T9842] pim6reg0: linktype set to 823 [ 276.745227][ T9853] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2551'. [ 276.773541][ T9853] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 276.816832][ T9858] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2554'. [ 277.419121][ T9898] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2572'. [ 277.839214][ T9930] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2587'. [ 278.576459][ T9974] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2605'. [ 279.016687][ T9997] device veth1_macvtap left promiscuous mode [ 279.036249][ T9997] device macsec0 left promiscuous mode [ 279.064569][T10001] device veth1_macvtap entered promiscuous mode [ 279.090668][T10001] device macsec0 entered promiscuous mode [ 280.246404][T10029] device syzkaller0 entered promiscuous mode [ 281.723944][T10047] device veth1_macvtap left promiscuous mode [ 281.730181][T10047] device macsec0 left promiscuous mode [ 281.748232][T10050] device veth1_macvtap entered promiscuous mode [ 281.755590][T10050] device macsec0 entered promiscuous mode [ 281.770796][T10076] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2653'. [ 281.978454][T10090] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.2660'. [ 282.157989][T10102] device veth1_macvtap entered promiscuous mode [ 282.183112][T10102] device macsec0 entered promiscuous mode [ 282.222245][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 282.350839][T10114] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2670'. [ 282.599650][T10126] syz.1.2676[10126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.599744][T10126] syz.1.2676[10126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.749631][T10139] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2683'. [ 282.784350][T10140] device veth1_macvtap entered promiscuous mode [ 282.800989][T10140] device macsec0 entered promiscuous mode [ 282.808093][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 283.326245][T10174] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2698'. [ 283.343915][T10172] device veth1_macvtap left promiscuous mode [ 283.350025][T10172] device macsec0 left promiscuous mode [ 283.391602][T10172] device veth1_macvtap entered promiscuous mode [ 283.408168][T10172] device macsec0 entered promiscuous mode [ 284.003759][T10207] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2712'. [ 285.626888][T10296] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2753'. [ 287.730303][T10401] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2799'. [ 288.216452][T10433] tun0: tun_chr_ioctl cmd 2147767506 [ 290.948271][T10543] device syzkaller0 entered promiscuous mode [ 291.038836][T10549] validate_nla: 22 callbacks suppressed [ 291.038879][T10549] netlink: 'syz.4.2868': attribute type 13 has an invalid length. [ 291.058796][T10549] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2868'. [ 292.349879][T10607] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2894'. [ 292.379075][T10607] netlink: 'syz.4.2894': attribute type 1 has an invalid length. [ 292.415412][T10607] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2894'. [ 292.961437][T10634] netlink: 'syz.4.2906': attribute type 29 has an invalid length. [ 292.969590][T10634] netlink: 'syz.4.2906': attribute type 29 has an invalid length. [ 293.010127][T10634] netlink: 'syz.4.2906': attribute type 29 has an invalid length. [ 293.132930][T10645] netlink: 'syz.3.2910': attribute type 2 has an invalid length. [ 293.162391][T10645] netlink: 'syz.3.2910': attribute type 1 has an invalid length. [ 293.187494][T10645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.421204][T10667] netlink: 'syz.3.2919': attribute type 29 has an invalid length. [ 293.429341][T10667] netlink: 'syz.3.2919': attribute type 29 has an invalid length. [ 293.483369][T10667] netlink: 'syz.3.2919': attribute type 29 has an invalid length. [ 293.586456][T10679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.755138][ T3551] Bluetooth: hci5: unexpected event 0x0f length: 15 > 4 [ 295.039557][T10743] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 295.058441][T10743] pim6reg0: linktype set to 769 [ 295.159962][T10755] syz.2.2959[10755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.160434][T10755] syz.2.2959[10755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.370781][T10767] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 295.442522][T10767] device syzkaller0 entered promiscuous mode [ 295.610063][T10786] syz.3.2973[10786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.610160][T10786] syz.3.2973[10786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.205540][T10818] syz.2.2986[10818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.222617][T10818] syz.2.2986[10818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.133624][T10788] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 297.151087][T10788] pim6reg0: linktype set to 769 [ 297.323580][T10844] syz.1.2998[10844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.323670][T10844] syz.1.2998[10844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.611103][T10863] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 297.652025][T10863] pim6reg0: linktype set to 769 [ 297.679212][T10871] syz.4.3012[10871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.679316][T10871] syz.4.3012[10871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.963274][T10892] device syzkaller0 entered promiscuous mode [ 298.197318][T10907] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 298.205541][T10907] pim6reg0: linktype set to 769 [ 298.418639][T10925] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 298.655301][T10933] device syzkaller0 entered promiscuous mode [ 298.823878][ T3551] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 298.832450][ T3551] Bluetooth: hci5: Injecting HCI hardware error event [ 298.840375][ T3557] Bluetooth: hci5: hardware error 0x00 [ 298.900818][T10944] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 298.921333][T10944] pim6reg0: linktype set to 769 [ 299.295752][T10971] bond0: (slave dummy0): Error: Slave device does not support XDP [ 299.437312][T10973] device syzkaller0 entered promiscuous mode [ 300.284419][T10997] validate_nla: 11 callbacks suppressed [ 300.284437][T10997] netlink: 'syz.4.3071': attribute type 6 has an invalid length. [ 300.379707][T11001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3072'. [ 300.530350][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.539727][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.547604][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.555835][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.567377][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 300.575382][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.741381][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.892260][T11020] device syzkaller0 entered promiscuous mode [ 300.910677][ T3557] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 301.093168][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.214225][T11027] netlink: 'syz.4.3083': attribute type 6 has an invalid length. [ 301.229941][T11004] chnl_net:caif_netlink_parms(): no params data found [ 301.311098][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.438853][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.470105][T11036] netlink: 'syz.4.3085': attribute type 21 has an invalid length. [ 301.672619][T11004] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.707346][T11052] [ 301.709707][T11052] ====================================================== [ 301.711569][T11004] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.716706][T11052] WARNING: possible circular locking dependency detected [ 301.730741][T11052] 6.1.96-syzkaller #0 Not tainted [ 301.735763][T11052] ------------------------------------------------------ [ 301.742781][T11052] syz.2.3092/11052 is trying to acquire lock: [ 301.748863][T11052] ffff88814c720170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2b0/0x380 [ 301.749241][T11004] device bridge_slave_0 entered promiscuous mode [ 301.759406][T11052] [ 301.759406][T11052] but task is already holding lock: [ 301.759413][T11052] ffff88814c71eb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x1a0/0x6e0 [ 301.759467][T11052] [ 301.759467][T11052] which lock already depends on the new lock. [ 301.759467][T11052] [ 301.794789][T11052] [ 301.794789][T11052] the existing dependency chain (in reverse order) is: [ 301.803802][T11052] [ 301.803802][T11052] -> #3 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 301.812243][T11052] lock_acquire+0x1f8/0x5a0 [ 301.817287][T11052] percpu_down_write+0x50/0x2f0 [ 301.820341][T11004] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.822663][T11052] ext4_ind_migrate+0x254/0x760 [ 301.822685][T11052] ext4_fileattr_set+0xe9b/0x1770 [ 301.822709][T11052] vfs_fileattr_set+0x8f3/0xd30 [ 301.822735][T11052] do_vfs_ioctl+0x1cd1/0x2a90 [ 301.822752][T11052] __se_sys_ioctl+0x81/0x160 [ 301.822777][T11052] do_syscall_64+0x3b/0xb0 [ 301.822803][T11052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.822829][T11052] [ 301.822829][T11052] -> #2 (&sb->s_type->i_mutex_key#8 [ 301.833268][T11004] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.835182][T11052] ){++++}-{3:3} [ 301.842883][T11004] device bridge_slave_1 entered promiscuous mode [ 301.846040][T11052] : [ 301.846047][T11052] lock_acquire+0x1f8/0x5a0 [ 301.899144][T11052] down_read+0xad/0xa30 [ 301.903807][T11052] ext4_bmap+0x4b/0x410 [ 301.908487][T11052] bmap+0xa1/0xd0 [ 301.912634][T11052] jbd2_journal_flush+0x5b5/0xc40 [ 301.918180][T11052] ext4_ioctl+0x3986/0x5f60 [ 301.923190][T11052] __se_sys_ioctl+0xf1/0x160 [ 301.928281][T11052] do_syscall_64+0x3b/0xb0 [ 301.933205][T11052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.939636][T11052] [ 301.939636][T11052] -> #1 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 301.948389][T11052] lock_acquire+0x1f8/0x5a0 [ 301.953403][T11052] mutex_lock_io_nested+0x134/0xab0 [ 301.959122][T11052] jbd2_journal_flush+0x29b/0xc40 [ 301.964673][T11052] ext4_ioctl+0x3986/0x5f60 [ 301.969695][T11052] __se_sys_ioctl+0xf1/0x160 [ 301.974817][T11052] do_syscall_64+0x3b/0xb0 [ 301.979745][T11052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.986150][T11052] [ 301.986150][T11052] -> #0 (&journal->j_barrier){+.+.}-{3:3}: [ 301.994127][T11052] validate_chain+0x1661/0x5950 [ 301.999490][T11052] __lock_acquire+0x125b/0x1f80 [ 302.004847][T11052] lock_acquire+0x1f8/0x5a0 [ 302.009854][T11052] __mutex_lock+0x132/0xd80 [ 302.014857][T11052] jbd2_journal_lock_updates+0x2b0/0x380 [ 302.020996][T11052] ext4_change_inode_journal_flag+0x1a8/0x6e0 [ 302.027568][T11052] ext4_fileattr_set+0xe04/0x1770 [ 302.033099][T11052] vfs_fileattr_set+0x8f3/0xd30 [ 302.038454][T11052] do_vfs_ioctl+0x1cd1/0x2a90 [ 302.043630][T11052] __se_sys_ioctl+0x81/0x160 [ 302.048726][T11052] do_syscall_64+0x3b/0xb0 [ 302.053660][T11052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.060078][T11052] [ 302.060078][T11052] other info that might help us debug this: [ 302.060078][T11052] [ 302.070293][T11052] Chain exists of: [ 302.070293][T11052] &journal->j_barrier --> &sb->s_type->i_mutex_key#8 --> &sbi->s_writepages_rwsem [ 302.070293][T11052] [ 302.085485][T11052] Possible unsafe locking scenario: [ 302.085485][T11052] [ 302.092917][T11052] CPU0 CPU1 [ 302.098263][T11052] ---- ---- [ 302.103616][T11052] lock(&sbi->s_writepages_rwsem); [ 302.108796][T11052] lock(&sb->s_type->i_mutex_key#8); [ 302.116687][T11052] lock(&sbi->s_writepages_rwsem); [ 302.124385][T11052] lock(&journal->j_barrier); [ 302.129127][T11052] [ 302.129127][T11052] *** DEADLOCK *** [ 302.129127][T11052] [ 302.137248][T11052] 4 locks held by syz.2.3092/11052: [ 302.142421][T11052] #0: ffff88814c71c460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 302.152071][T11052] #1: ffff8880549d3628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_fileattr_set+0x135/0xd30 [ 302.162804][T11052] #2: ffff8880549d37c8 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_change_inode_journal_flag+0x115/0x6e0 [ 302.174533][T11052] #3: ffff88814c71eb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x1a0/0x6e0 [ 302.186266][T11052] [ 302.186266][T11052] stack backtrace: [ 302.192154][T11052] CPU: 1 PID: 11052 Comm: syz.2.3092 Not tainted 6.1.96-syzkaller #0 [ 302.200218][T11052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 302.210261][T11052] Call Trace: [ 302.213521][T11052] [ 302.216437][T11052] dump_stack_lvl+0x1e3/0x2cb [ 302.221102][T11052] ? nf_tcp_handle_invalid+0x642/0x642 [ 302.226555][T11052] ? print_circular_bug+0x12b/0x1a0 [ 302.231744][T11052] check_noncircular+0x2fa/0x3b0 [ 302.236680][T11052] ? lockdep_lock+0x2a0/0x2a0 [ 302.241342][T11052] ? add_chain_block+0x850/0x850 [ 302.246260][T11052] ? lockdep_lock+0x11f/0x2a0 [ 302.250933][T11052] ? validate_chain+0x112/0x5950 [ 302.255905][T11052] ? _find_first_zero_bit+0xd0/0x100 [ 302.261176][T11052] validate_chain+0x1661/0x5950 [ 302.266015][T11052] ? lockdep_unlock+0x165/0x300 [ 302.270868][T11052] ? reacquire_held_locks+0x660/0x660 [ 302.276253][T11052] ? validate_chain+0x13ce/0x5950 [ 302.281272][T11052] ? mark_lock+0x9a/0x340 [ 302.285587][T11052] ? mark_lock+0x9a/0x340 [ 302.289901][T11052] __lock_acquire+0x125b/0x1f80 [ 302.294740][T11052] lock_acquire+0x1f8/0x5a0 [ 302.299226][T11052] ? jbd2_journal_lock_updates+0x2b0/0x380 [ 302.305022][T11052] ? read_lock_is_recursive+0x10/0x10 [ 302.310381][T11052] ? __might_sleep+0xb0/0xb0 [ 302.314955][T11052] ? trace_event_raw_event_lock+0x240/0x240 [ 302.320840][T11052] ? do_raw_spin_unlock+0x137/0x8a0 [ 302.326036][T11052] ? lockdep_hardirqs_on+0x94/0x130 [ 302.331231][T11052] __mutex_lock+0x132/0xd80 [ 302.335731][T11052] ? jbd2_journal_lock_updates+0x2b0/0x380 [ 302.341526][T11052] ? jbd2_journal_lock_updates+0x29f/0x380 [ 302.347312][T11052] ? jbd2_journal_lock_updates+0x2b0/0x380 [ 302.353098][T11052] ? __lock_acquire+0x1f80/0x1f80 [ 302.358104][T11052] ? mutex_lock_nested+0x10/0x10 [ 302.363024][T11052] ? do_raw_read_unlock+0x70/0x70 [ 302.368030][T11052] ? rcu_sync_enter+0x202/0x340 [ 302.372867][T11052] jbd2_journal_lock_updates+0x2b0/0x380 [ 302.378483][T11052] ? jbd2_journal_wait_updates+0x2d0/0x2d0 [ 302.384288][T11052] ? rcu_is_watching+0x11/0xb0 [ 302.389031][T11052] ? _find_next_bit+0x11b/0x120 [ 302.393868][T11052] ? percpu_down_write+0x2b7/0x2f0 [ 302.398962][T11052] ? rcu_is_watching+0x11/0xb0 [ 302.403707][T11052] ext4_change_inode_journal_flag+0x1a8/0x6e0 [ 302.409761][T11052] ext4_fileattr_set+0xe04/0x1770 [ 302.414777][T11052] ? ext4_fileattr_get+0x200/0x200 [ 302.419877][T11052] ? rwsem_write_trylock+0x166/0x210 [ 302.425145][T11052] ? clear_nonspinnable+0x60/0x60 [ 302.430153][T11052] ? memset+0x1f/0x40 [ 302.434116][T11052] ? fileattr_fill_flags+0x1d0/0x300 [ 302.439387][T11052] ? fscrypt_prepare_setflags+0x5d/0x220 [ 302.445003][T11052] vfs_fileattr_set+0x8f3/0xd30 [ 302.449840][T11052] ? copy_fsxattr_to_user+0x3a0/0x3a0 [ 302.455200][T11052] do_vfs_ioctl+0x1cd1/0x2a90 [ 302.459858][T11052] ? __x64_compat_sys_ioctl+0x80/0x80 [ 302.465208][T11052] ? __lock_acquire+0x1f80/0x1f80 [ 302.470217][T11052] ? lockdep_hardirqs_on+0x94/0x130 [ 302.475400][T11052] ? __kmem_cache_free+0x25c/0x3c0 [ 302.480498][T11052] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 302.486131][T11052] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 302.491760][T11052] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 302.497389][T11052] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 302.502844][T11052] ? __fget_files+0x28/0x4a0 [ 302.507413][T11052] ? __fget_files+0x435/0x4a0 [ 302.512083][T11052] ? __fget_files+0x28/0x4a0 [ 302.516670][T11052] ? bpf_lsm_file_ioctl+0x5/0x10 [ 302.521589][T11052] ? security_file_ioctl+0x7d/0xa0 [ 302.526678][T11052] __se_sys_ioctl+0x81/0x160 [ 302.531266][T11052] do_syscall_64+0x3b/0xb0 [ 302.535689][T11052] ? clear_bhb_loop+0x45/0xa0 [ 302.540348][T11052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.546226][T11052] RIP: 0033:0x7f2a69175b99 [ 302.550635][T11052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 302.570242][T11052] RSP: 002b:00007f2a69eba048 EFLAGS: 00000246 ORIG_R