last executing test programs: 3.356844691s ago: executing program 4 (id=4350): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 3.117675982s ago: executing program 1 (id=4352): perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)="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") r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x4008240b, &(0x7f00000013c0)) 2.967564005s ago: executing program 1 (id=4356): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='!*', 0x2}], 0x1}, 0x20008081) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/186, 0xba}], 0x1}, 0x2002) 2.068581622s ago: executing program 1 (id=4359): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000001000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.068223492s ago: executing program 4 (id=4361): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x20000015) 1.765711588s ago: executing program 1 (id=4380): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:23', @ANYRESHEX], 0xa) 1.641606129s ago: executing program 1 (id=4383): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/55, 0x37}], 0x1}, 0x101) 1.62819875s ago: executing program 4 (id=4384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x17) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'geneve1\x00', @random="c8ab57bbc658"}) 1.406294359s ago: executing program 4 (id=4374): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='!*', 0x2}], 0x1}, 0x20008081) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/186, 0xba}], 0x1}, 0x2002) 1.16013107s ago: executing program 3 (id=4376): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='c 1:2', @ANYRESOCT], 0x1d) 958.765758ms ago: executing program 3 (id=4378): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x1d, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 957.316758ms ago: executing program 2 (id=4393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xb08e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 816.32776ms ago: executing program 0 (id=4382): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'cpuset'}]}, 0x8) 814.98741ms ago: executing program 3 (id=4396): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 733.757027ms ago: executing program 0 (id=4385): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 634.596886ms ago: executing program 0 (id=4387): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x1f, &(0x7f0000000100)=r1, 0x4) 634.321426ms ago: executing program 3 (id=4388): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 550.230023ms ago: executing program 0 (id=4389): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f00000000c0), 0xb9) 550.066553ms ago: executing program 2 (id=4390): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 482.796418ms ago: executing program 2 (id=4391): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4093, 0xffd}, 0x0) 362.341619ms ago: executing program 0 (id=4392): perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)="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") r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x4008240b, &(0x7f00000013c0)) 362.150529ms ago: executing program 3 (id=4394): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af3653c002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000029e79c7ad2600375b3f54", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 358.712159ms ago: executing program 4 (id=4405): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000001000008500000095000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) 309.902974ms ago: executing program 2 (id=4395): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 252.379699ms ago: executing program 1 (id=4397): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/237, 0xed}, {&(0x7f0000001300)=""/4077, 0xfed}], 0x2}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 217.142202ms ago: executing program 4 (id=4398): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"/3098], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x4e1d, @multicast2=0xe0000018}, 0x10, &(0x7f0000000180)=[{&(0x7f00000005c0)="476de32199", 0x5}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @dev}}}], 0x20}, 0x0) 104.403401ms ago: executing program 0 (id=4399): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 104.200591ms ago: executing program 2 (id=4400): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'cpuset'}]}, 0x8) 104.055991ms ago: executing program 3 (id=4401): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x9, 0x8, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300), &(0x7f00000000c0), 0xe47, r0}, 0x38) 0s ago: executing program 2 (id=4402): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): DDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.691812][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.734185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.752851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.789020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.826005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.849850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.871531][ T7985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.959805][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.985088][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.004961][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.014452][ T8116] netlink: 'syz.1.1812': attribute type 4 has an invalid length. [ 201.245738][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.263664][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.293575][ T7968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.372198][ T7985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.390599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.400388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.431678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.449857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.484931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.494241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.505548][ T7985] device veth0_vlan entered promiscuous mode [ 201.520542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.530342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.545404][ T7985] device veth1_vlan entered promiscuous mode [ 201.595490][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.608106][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 201.624957][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.644086][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.657783][ T7985] device veth0_macvtap entered promiscuous mode [ 201.680225][ T7985] device veth1_macvtap entered promiscuous mode [ 201.704726][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.720722][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.731145][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.775757][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.816751][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.837263][ T8153] netlink: 'syz.1.1805': attribute type 29 has an invalid length. [ 201.862043][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.882509][ T8153] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1805'. [ 201.894317][ T7985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.919980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 201.937200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 201.959988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.983176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.999421][ T8153] netlink: 'syz.1.1805': attribute type 29 has an invalid length. [ 202.016804][ T8153] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1805'. [ 202.365546][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.490823][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.639467][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.851328][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.982968][ T3652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.995566][ T3652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.004069][ T3652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.013640][ T3652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.022644][ T3652] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 203.037273][ T3652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.424863][ T3652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.434574][ T3652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.442661][ T3652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.450518][ T3652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.458068][ T3652] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 203.465329][ T3652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.758742][ T3650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.768921][ T3650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.777308][ T3650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.785956][ T3650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.812082][ T3650] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 203.824624][ T3650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.887064][ T3650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.898535][ T3650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.907497][ T3650] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.923844][ T3650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.934516][ T3650] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 203.942626][ T3650] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.241353][ T8215] netlink: 'syz.2.1822': attribute type 10 has an invalid length. [ 204.279343][ T8215] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 204.386161][ T8178] chnl_net:caif_netlink_parms(): no params data found [ 204.452438][ T8221] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1823'. [ 204.477985][ T8221] netlink: 'syz.2.1823': attribute type 1 has an invalid length. [ 204.925439][ T8199] chnl_net:caif_netlink_parms(): no params data found [ 204.945407][ T8188] chnl_net:caif_netlink_parms(): no params data found [ 204.979493][ T8178] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.998811][ T8178] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.017576][ T8178] device bridge_slave_0 entered promiscuous mode [ 205.106663][ T3650] Bluetooth: hci0: command tx timeout [ 205.159069][ T8196] chnl_net:caif_netlink_parms(): no params data found [ 205.171320][ T8178] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.180120][ T8178] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.189293][ T8178] device bridge_slave_1 entered promiscuous mode [ 205.288022][ T8178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.306902][ T9] device hsr_slave_0 left promiscuous mode [ 205.313555][ T9] device hsr_slave_1 left promiscuous mode [ 205.320503][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.328182][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.335946][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.343736][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.351577][ T9] device bridge_slave_1 left promiscuous mode [ 205.358568][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.368429][ T9] device bridge_slave_0 left promiscuous mode [ 205.374732][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.396850][ T9] device veth1_macvtap left promiscuous mode [ 205.402905][ T9] device veth0_macvtap left promiscuous mode [ 205.410122][ T9] device veth1_vlan left promiscuous mode [ 205.415936][ T9] device veth0_vlan left promiscuous mode [ 205.498608][ T3650] Bluetooth: hci2: command tx timeout [ 205.844288][ T9] team0 (unregistering): Port device team_slave_1 removed [ 205.881149][ T9] team0 (unregistering): Port device team_slave_0 removed [ 205.901613][ T3650] Bluetooth: hci3: command tx timeout [ 205.918223][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.960843][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.979149][ T3650] Bluetooth: hci4: command tx timeout [ 206.340332][ T9] bond0 (unregistering): Released all slaves [ 206.449888][ T8178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.573412][ T8196] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.587393][ T8196] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.595848][ T8196] device bridge_slave_0 entered promiscuous mode [ 206.636871][ T8188] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.643987][ T8188] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.676600][ T8188] device bridge_slave_0 entered promiscuous mode [ 206.684252][ T8196] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.691572][ T8196] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.699672][ T8196] device bridge_slave_1 entered promiscuous mode [ 206.711336][ T8199] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.718663][ T8199] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.732176][ T8199] device bridge_slave_0 entered promiscuous mode [ 206.755486][ T8178] team0: Port device team_slave_0 added [ 206.767539][ T8188] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.775134][ T8188] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.787544][ T8188] device bridge_slave_1 entered promiscuous mode [ 206.808810][ T8199] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.816848][ T8199] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.824575][ T8199] device bridge_slave_1 entered promiscuous mode [ 206.843856][ T8178] team0: Port device team_slave_1 added [ 206.871811][ T8196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.913222][ T8188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.929620][ T8196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.973874][ T8199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.008917][ T8199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.059240][ T8178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.076582][ T8178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.123811][ T8178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.167810][ T8188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.185104][ T3650] Bluetooth: hci0: command tx timeout [ 207.268004][ T8178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.275004][ T8178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.304454][ T8178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.341672][ T8280] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1832'. [ 207.409814][ T8196] team0: Port device team_slave_0 added [ 207.434034][ T8199] team0: Port device team_slave_0 added [ 207.455555][ T8188] team0: Port device team_slave_0 added [ 207.488743][ T8199] team0: Port device team_slave_1 added [ 207.496086][ T8196] team0: Port device team_slave_1 added [ 207.584163][ T3650] Bluetooth: hci2: command tx timeout [ 207.749105][ T8188] team0: Port device team_slave_1 added [ 207.976477][ T3650] Bluetooth: hci3: command tx timeout [ 208.056579][ T3650] Bluetooth: hci4: command tx timeout [ 208.066109][ T8199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.076329][ T8199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.126325][ T8199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.361216][ T8178] device hsr_slave_0 entered promiscuous mode [ 208.368717][ T8178] device hsr_slave_1 entered promiscuous mode [ 208.375451][ T8178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.384082][ T8178] Cannot create hsr debugfs directory [ 208.393133][ T8196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.401034][ T8196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.428875][ T8196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.441596][ T8199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.450671][ T8199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.477723][ T8199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.489559][ T8188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.496857][ T8188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.523314][ T8188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.537024][ T8188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.544076][ T8188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.572164][ T8188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.604905][ T8294] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1835'. [ 208.615083][ T8196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.626436][ T8196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.679226][ T8196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.256484][ T3650] Bluetooth: hci0: command tx timeout [ 209.504215][ T8188] device hsr_slave_0 entered promiscuous mode [ 209.511588][ T8188] device hsr_slave_1 entered promiscuous mode [ 209.519318][ T8188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.527703][ T8188] Cannot create hsr debugfs directory [ 209.538158][ T8199] device hsr_slave_0 entered promiscuous mode [ 209.565522][ T8199] device hsr_slave_1 entered promiscuous mode [ 209.573286][ T8199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.582027][ T8199] Cannot create hsr debugfs directory [ 209.664711][ T3650] Bluetooth: hci2: command tx timeout [ 209.697679][ T8196] device hsr_slave_0 entered promiscuous mode [ 209.754379][ T8196] device hsr_slave_1 entered promiscuous mode [ 209.766514][ T8196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.786351][ T8196] Cannot create hsr debugfs directory [ 210.056362][ T3650] Bluetooth: hci3: command tx timeout [ 210.136607][ T3650] Bluetooth: hci4: command tx timeout [ 210.843039][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.953269][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.077938][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.188374][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.337121][ T3650] Bluetooth: hci0: command tx timeout [ 211.736619][ T3652] Bluetooth: hci2: command tx timeout [ 212.137592][ T3650] Bluetooth: hci3: command tx timeout [ 212.216430][ T3652] Bluetooth: hci4: command tx timeout [ 212.275755][ T8188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.297835][ T8188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.311666][ T8188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.323383][ T8188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.406798][ T8365] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1848'. [ 212.415887][ T8365] netlink: 'syz.2.1848': attribute type 3 has an invalid length. [ 212.557620][ T8371] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1849'. [ 212.840106][ T8382] tap0: tun_chr_ioctl cmd 1074025677 [ 212.845699][ T8382] tap0: linktype set to 270 [ 213.074183][ T8188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.157978][ T8386] tap0: tun_chr_ioctl cmd 2148553947 [ 213.174583][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.186838][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.232891][ T8188] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.270931][ T8199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.289457][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.319123][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.337137][ T3702] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.344271][ T3702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.366990][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.407191][ T8199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.452120][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.467761][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.476159][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.483285][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.493351][ T8199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.528410][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.540330][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.549419][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.558252][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.568573][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.577505][ T8199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.615187][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.628667][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.658802][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.667742][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.717910][ T8188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.743591][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.751871][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.761357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.070117][ T8199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.143253][ T8178] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.170600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.187803][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.212932][ T8199] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.259512][ T8178] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.270883][ T8178] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.280716][ T8178] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.292654][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.305378][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.315011][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.322136][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.331405][ T8405] netlink: 'syz.2.1858': attribute type 21 has an invalid length. [ 214.339896][ T8405] netlink: 'syz.2.1858': attribute type 6 has an invalid length. [ 214.347732][ T8405] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1858'. [ 214.385880][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.397186][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.406039][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.415446][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.422719][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.458604][ T8188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.509943][ T9] device hsr_slave_0 left promiscuous mode [ 214.517850][ T9] device hsr_slave_1 left promiscuous mode [ 214.535571][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.556407][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.576870][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.601186][ T9] device bridge_slave_1 left promiscuous mode [ 214.614724][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.625484][ T9] device bridge_slave_0 left promiscuous mode [ 214.632124][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.643015][ T9] device hsr_slave_0 left promiscuous mode [ 214.649578][ T9] device hsr_slave_1 left promiscuous mode [ 214.655789][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.663527][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.672451][ T9] device bridge_slave_1 left promiscuous mode [ 214.682834][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.691355][ T9] device bridge_slave_0 left promiscuous mode [ 214.699516][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.713124][ T9] device hsr_slave_0 left promiscuous mode [ 214.720910][ T9] device hsr_slave_1 left promiscuous mode [ 214.728222][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.735668][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.743908][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.751379][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.759188][ T9] device bridge_slave_1 left promiscuous mode [ 214.765353][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.773765][ T9] device bridge_slave_0 left promiscuous mode [ 214.780643][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.819165][ T9] device veth1_macvtap left promiscuous mode [ 214.825227][ T9] device veth0_macvtap left promiscuous mode [ 214.832808][ T9] device veth1_vlan left promiscuous mode [ 214.838811][ T9] device veth0_vlan left promiscuous mode [ 214.845697][ T9] device veth1_macvtap left promiscuous mode [ 214.852101][ T9] device veth0_macvtap left promiscuous mode [ 214.866563][ T9] device veth1_vlan left promiscuous mode [ 214.873765][ T9] device veth0_vlan left promiscuous mode [ 215.363289][ T9] team0 (unregistering): Port device team_slave_1 removed [ 215.401058][ T9] team0 (unregistering): Port device team_slave_0 removed [ 215.435176][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.471080][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.762670][ T9] bond0 (unregistering): Released all slaves [ 215.977986][ T9] team0 (unregistering): Port device team_slave_1 removed [ 216.011999][ T9] team0 (unregistering): Port device team_slave_0 removed [ 216.047578][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.085837][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.400914][ T9] bond0 (unregistering): Released all slaves [ 216.599813][ T9] team0 (unregistering): Port device virt_wifi0 removed [ 216.754956][ T9] team0 (unregistering): Port device team_slave_1 removed [ 216.792029][ T9] team0 (unregistering): Port device team_slave_0 removed [ 216.824411][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.861186][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.180788][ T9] bond0 (unregistering): Released all slaves [ 217.268221][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.275724][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.283652][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.293320][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.302509][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.313671][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.323065][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.331944][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.346119][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.372688][ T8199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.418876][ T8199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.472639][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.482289][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.502410][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.513118][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.547255][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.560376][ T8196] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.649302][ T8196] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.717585][ T8196] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.745403][ T8178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.762296][ T8196] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.793816][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.812238][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.862505][ T8178] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.918286][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.961684][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.990847][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.009632][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.025934][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.033148][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.068651][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.079682][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.101663][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.117487][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.124708][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.174297][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.197820][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.303627][ T8188] device veth0_vlan entered promiscuous mode [ 218.318135][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.338310][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.357073][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.374720][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.387817][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.410583][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.435689][ T8199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.454166][ T8188] device veth1_vlan entered promiscuous mode [ 218.466683][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.475740][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.484854][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.493036][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.509863][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.525116][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.535292][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.549472][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.562726][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.588494][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.605230][ T8196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.659627][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.671861][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.715257][ T8196] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.749978][ T8188] device veth0_macvtap entered promiscuous mode [ 218.768966][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.789716][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.827238][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.859367][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.886210][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.913346][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.956090][ T8199] device veth0_vlan entered promiscuous mode [ 218.997135][ T8188] device veth1_macvtap entered promiscuous mode [ 219.037451][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.058112][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.082272][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.092659][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.170760][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.191072][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.211098][ T3666] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.218292][ T3666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.253281][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.282126][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.322990][ T3666] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.330194][ T3666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.393997][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.419736][ T8199] device veth1_vlan entered promiscuous mode [ 219.467432][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 219.484159][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.513233][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.548091][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.573197][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.621279][ T8188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.666946][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.684082][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.711101][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.742360][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.771216][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.794449][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.814932][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.843646][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.869788][ T8178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.890111][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.924042][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.956171][ T8188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.992761][ T8199] device veth0_macvtap entered promiscuous mode [ 220.029231][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.038087][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.065183][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.083664][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.096211][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.111778][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.124318][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.144756][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.154267][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.167847][ T8188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.183546][ T8188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.202616][ T8188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.219864][ T8188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.235655][ T8196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.262145][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.350030][ T8199] device veth1_macvtap entered promiscuous mode [ 220.398025][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.406095][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.477390][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.515489][ T8199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.544754][ T8199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.563147][ T8199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.577869][ T8199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.604347][ T8199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.641150][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.669272][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.690078][ T8178] device veth0_vlan entered promiscuous mode [ 220.719995][ T8199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.750787][ T8199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.770605][ T8199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.799885][ T8199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.837025][ T8199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.845143][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.884138][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.912815][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.928896][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.960010][ T8178] device veth1_vlan entered promiscuous mode [ 220.988914][ T8199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.999041][ T8199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.031597][ T8199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.042269][ T8199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.053209][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.065874][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.082867][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.117301][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.125366][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.177170][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.193331][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 221.215098][ T3702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.248556][ T3702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.252060][ T8196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.284470][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.297924][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.305426][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.323205][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.355999][ T8178] device veth0_macvtap entered promiscuous mode [ 221.391814][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.403779][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.459338][ T8178] device veth1_macvtap entered promiscuous mode [ 221.482482][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.518249][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.548080][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.593417][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.637274][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.649826][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.680967][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.710523][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.744354][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.772104][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.802709][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.830561][ T8178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.846097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 221.858834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.867767][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.876735][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.890129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.907699][ T8196] device veth0_vlan entered promiscuous mode [ 221.935401][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.963201][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.973520][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.984855][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.995028][ T8178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.005844][ T8178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.023792][ T8178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.049396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.062165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.122931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.167758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.185947][ T8196] device veth1_vlan entered promiscuous mode [ 222.208427][ T8178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.257033][ T8178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.266101][ T8178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.275531][ T8178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.327403][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.387020][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.436407][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 222.444358][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.474384][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.528666][ T8196] device veth0_macvtap entered promiscuous mode [ 222.580709][ T8196] device veth1_macvtap entered promiscuous mode [ 222.613837][ T3666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.630837][ T3666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.692787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.707456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.715708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 223.361539][ T3702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.365240][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.380121][ T3702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.390518][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.414456][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.425701][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.436217][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.448180][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.459044][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.469897][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.481371][ T8196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.536101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 223.574166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.599261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.644590][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.696599][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.746283][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.777569][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.812543][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.834228][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.852518][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.865135][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.912269][ T8196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.936594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.972609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.010060][ T8196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.036647][ T8196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.045379][ T8196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.072527][ T8196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.192738][ T8575] netlink: 'syz.0.1893': attribute type 10 has an invalid length. [ 224.248026][ T8575] team0: Port device netdevsim0 added [ 224.387221][ T3666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.396833][ T3666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.417340][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 224.473427][ T3702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.505245][ T3702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.562433][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 224.981599][ T8607] netlink: 'syz.0.1902': attribute type 25 has an invalid length. [ 225.507793][ T8635] netlink: 'syz.2.1915': attribute type 10 has an invalid length. [ 225.515696][ T8635] device bridge_slave_0 left promiscuous mode [ 225.562734][ T8635] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.793775][ T8650] tap0: tun_chr_ioctl cmd 35108 [ 226.268563][ T8678] netlink: 'syz.3.1932': attribute type 29 has an invalid length. [ 226.337687][ T8678] netlink: 'syz.3.1932': attribute type 29 has an invalid length. [ 226.404750][ T8687] netlink: 'syz.0.1936': attribute type 1 has an invalid length. [ 226.422131][ T8687] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1936'. [ 226.465195][ T8685] netlink: 'syz.3.1932': attribute type 29 has an invalid length. [ 226.515827][ T8689] netlink: 'syz.3.1932': attribute type 29 has an invalid length. [ 227.056184][ T8719] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1948'. [ 228.184690][ T8757] ref_ctr_offset mismatch. inode: 0x9e offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 230.670309][ T8822] tun0: tun_chr_ioctl cmd 2147767521 [ 230.763251][ T8828] netlink: 'syz.0.1995': attribute type 2 has an invalid length. [ 230.790851][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 232.474766][ T8890] delete_channel: no stack [ 232.681058][ T8906] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2031'. [ 232.906738][ T8917] syz.2.2036 (8917) used obsolete PPPIOCDETACH ioctl [ 233.287715][ T8938] netlink: 'syz.2.2045': attribute type 46 has an invalid length. [ 233.297016][ T8937] tun1: tun_chr_ioctl cmd 2148553947 [ 234.194611][ T8956] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2056'. [ 234.837990][ T8994] tap0: tun_chr_ioctl cmd 1074025673 [ 235.862672][ T9023] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 235.872835][ T9023] dvmrp1: linktype set to 805 [ 235.909892][ T9028] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2088'. [ 236.380923][ T9055] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2101'. [ 238.345859][ T9147] netlink: 'syz.0.2144': attribute type 2 has an invalid length. [ 238.379617][ T9147] netlink: 'syz.0.2144': attribute type 1 has an invalid length. [ 238.760830][ T9167] netlink: 'syz.1.2153': attribute type 21 has an invalid length. [ 238.796128][ T9167] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.2153'. [ 239.017663][ T9177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.025288][ T9177] IPv6: NLM_F_CREATE should be set when creating new route [ 239.032704][ T9177] IPv6: NLM_F_CREATE should be set when creating new route [ 239.040077][ T9177] IPv6: NLM_F_CREATE should be set when creating new route [ 239.298380][ T9193] tap0: tun_chr_ioctl cmd 1074025677 [ 239.303905][ T9193] tap0: linktype set to 804 [ 239.418000][ T9199] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 239.425168][ T9199] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 239.735584][ T9219] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2178'. [ 240.494165][ T9256] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2195'. [ 240.526508][ T9256] netlink: 'syz.0.2195': attribute type 3 has an invalid length. [ 240.566410][ T9256] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2195'. [ 240.894488][ T9275] tap0: tun_chr_ioctl cmd 2147767507 [ 241.370697][ T9301] tap0: tun_chr_ioctl cmd 1074025677 [ 241.376192][ T9301] tap0: linktype set to 531 [ 242.612516][ T9364] netlink: 'syz.0.2247': attribute type 7 has an invalid length. [ 242.686693][ T9372] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2250'. [ 243.489753][ T9418] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.2271'. [ 243.645195][ T9426] netlink: 'syz.0.2275': attribute type 22 has an invalid length. [ 243.683219][ T9426] netlink: 14378 bytes leftover after parsing attributes in process `syz.0.2275'. [ 244.274185][ T9450] netlink: 35347 bytes leftover after parsing attributes in process `syz.0.2287'. [ 244.583749][ T9466] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2296'. [ 244.822034][ T9480] netlink: 35347 bytes leftover after parsing attributes in process `syz.4.2302'. [ 245.337820][ T9486] netlink: 35347 bytes leftover after parsing attributes in process `syz.3.2315'. [ 245.633070][ T9505] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2312'. [ 245.975256][ T9521] netlink: 35347 bytes leftover after parsing attributes in process `syz.2.2321'. [ 246.661443][ T9541] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2330'. [ 247.220032][ T9572] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2348'. [ 248.234080][ T9620] netlink: 'syz.4.2370': attribute type 10 has an invalid length. [ 248.313656][ T9620] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2370'. [ 248.346396][ T9620] device lo entered promiscuous mode [ 248.387649][ T9620] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 248.979985][ T9659] netlink: 'syz.3.2389': attribute type 10 has an invalid length. [ 249.018707][ T9659] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2389'. [ 249.048175][ T9659] device lo entered promiscuous mode [ 249.076585][ T9659] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 249.245797][ T9673] tap0: tun_chr_ioctl cmd 1074025678 [ 249.258811][ T9673] tap0: group set to 0 [ 249.613854][ T9691] Â: renamed from pim6reg1 [ 249.667043][ T9697] netlink: 'syz.0.2414': attribute type 10 has an invalid length. [ 249.685168][ T9697] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2414'. [ 249.698359][ T9697] device lo entered promiscuous mode [ 249.703883][ T9697] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 251.409182][ T9749] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.2427'. [ 252.267353][ T9794] Â: renamed from pim6reg1 [ 252.274279][ T9797] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2460'. [ 252.325343][ T9799] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2449'. [ 252.348124][ T9799] netlink: 'syz.4.2449': attribute type 4 has an invalid length. [ 252.373189][ T9799] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2449'. [ 252.481592][ T9801] tun0: tun_chr_ioctl cmd 1074812118 [ 252.798830][ T9815] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2459'. [ 252.848876][ T9815] netlink: 'syz.4.2459': attribute type 1 has an invalid length. [ 252.874140][ T9815] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2459'. [ 253.209154][ T9830] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.2467'. [ 253.786146][ T9854] Â: renamed from pim6reg1 [ 253.909350][ T9861] netlink: 'syz.1.2478': attribute type 12 has an invalid length. [ 253.946347][ T9861] netlink: 'syz.1.2478': attribute type 1 has an invalid length. [ 253.964425][ T9861] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2478'. [ 253.994858][ T9861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.094202][ T8199] cgroup: fork rejected by pids controller in /syz3 [ 254.204395][ T9877] netlink: 'syz.4.2488': attribute type 29 has an invalid length. [ 254.222895][ T9877] netlink: 'syz.4.2488': attribute type 29 has an invalid length. [ 254.251359][ T9877] netlink: 'syz.4.2488': attribute type 29 has an invalid length. [ 254.330173][ T9877] netlink: 'syz.4.2488': attribute type 29 has an invalid length. [ 254.535199][ T3702] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.620549][ T3702] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.670254][ T3702] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.739148][ T3702] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.858943][ T9884] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2493'. [ 255.334341][ T3652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.345489][ T3652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.353930][ T3652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.362489][ T3652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.379852][ T3652] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 255.387354][ T3652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.583157][ T9910] netlink: 'syz.2.2499': attribute type 21 has an invalid length. [ 255.617865][ T9910] netlink: 12374 bytes leftover after parsing attributes in process `syz.2.2499'. [ 255.658028][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.664399][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.967874][ T9929] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2504'. [ 256.004512][ T9917] Â: renamed from pim6reg1 [ 256.639039][ T9959] netlink: 'syz.0.2516': attribute type 27 has an invalid length. [ 256.647807][ T9959] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.2516'. [ 256.835034][ T9900] chnl_net:caif_netlink_parms(): no params data found [ 257.416590][ T3650] Bluetooth: hci4: command tx timeout [ 258.049757][T10006] netlink: 'syz.1.2531': attribute type 8 has an invalid length. [ 258.086296][T10006] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2531'. [ 258.237714][ T9900] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.254423][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.294097][ T9900] device bridge_slave_0 entered promiscuous mode [ 258.352994][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.376768][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.410315][ T9900] device bridge_slave_1 entered promiscuous mode [ 258.549651][T10019] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2539'. [ 258.662697][ T3702] device hsr_slave_0 left promiscuous mode [ 258.742104][ T3702] device hsr_slave_1 left promiscuous mode [ 258.754278][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.788904][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.843586][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.863678][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.929783][ T3702] device bridge_slave_1 left promiscuous mode [ 258.957161][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.965903][ T3702] device bridge_slave_0 left promiscuous mode [ 258.983181][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.077450][ T3702] device veth1_macvtap left promiscuous mode [ 259.083529][ T3702] device veth0_macvtap left promiscuous mode [ 259.098995][ T3702] device veth1_vlan left promiscuous mode [ 259.104848][ T3702] device veth0_vlan left promiscuous mode [ 259.496806][ T3650] Bluetooth: hci4: command tx timeout [ 259.729938][ T3702] team0 (unregistering): Port device team_slave_1 removed [ 259.764529][ T3702] team0 (unregistering): Port device team_slave_0 removed [ 259.797018][ T3702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.836847][ T3702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.167728][ T3702] bond0 (unregistering): Released all slaves [ 260.228284][ T9900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.237695][T10045] netlink: 'syz.0.2548': attribute type 2 has an invalid length. [ 260.245565][T10045] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2548'. [ 260.273704][T10056] Â: renamed from pim6reg1 [ 260.302970][ T9900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.427412][ T9900] team0: Port device team_slave_0 added [ 260.498720][ T9900] team0: Port device team_slave_1 added [ 260.549404][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.571153][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.686319][ T9900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.716402][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.739157][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.773359][ T9900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.821886][T10078] netlink: 'syz.1.2564': attribute type 5 has an invalid length. [ 260.984010][T10085] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2559'. [ 261.097231][ T9900] device hsr_slave_0 entered promiscuous mode [ 261.134761][ T9900] device hsr_slave_1 entered promiscuous mode [ 261.230624][T10087] netlink: 'syz.0.2568': attribute type 33 has an invalid length. [ 261.286471][T10087] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2568'. [ 261.576361][ T3652] Bluetooth: hci4: command tx timeout [ 263.656360][ T3650] Bluetooth: hci4: command tx timeout [ 265.015765][T10114] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2569'. [ 265.463010][T10149] netlink: 'syz.1.2581': attribute type 41 has an invalid length. [ 265.484463][T10149] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2581'. [ 265.661414][ T9900] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 265.699298][ T9900] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.744020][ T9900] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.775648][ T9900] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 266.135095][ T9900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.190073][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.208012][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.274307][ T9900] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.311729][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.337555][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.373329][ T3666] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.380568][ T3666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.428067][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.447614][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.467414][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.503049][ T3666] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.510227][ T3666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.576995][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.605300][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.637532][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.671621][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.690593][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.737696][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.766319][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.775179][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.784658][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.798414][ T9900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.864173][ T9900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.879392][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.916842][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.594915][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.610706][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.644295][ T9900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.732212][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.772071][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.858397][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.876959][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.917358][ T9900] device veth0_vlan entered promiscuous mode [ 267.929788][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.956163][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.990147][ T9900] device veth1_vlan entered promiscuous mode [ 268.126356][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.134476][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.164635][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.184081][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.213909][ T9900] device veth0_macvtap entered promiscuous mode [ 268.237367][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.293784][ T9900] device veth1_macvtap entered promiscuous mode [ 268.381588][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.416485][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.439720][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.486557][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.507700][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.541953][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.588140][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.635858][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.666106][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.721483][T10274] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2625'. [ 268.743241][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2625'. [ 268.783181][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2625'. [ 268.796569][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2625'. [ 268.866455][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.885048][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.926182][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.968901][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.026380][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.062409][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.099570][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.133889][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.156029][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.184838][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.224584][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.293302][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.323948][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.367600][ T9900] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.406171][ T9900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.434128][ T9900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.472177][ T9900] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.530499][T10288] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2632'. [ 269.798929][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.833526][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.884117][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 269.913901][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.943106][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.973630][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 271.273502][T10361] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2656'. [ 271.292972][T10361] netlink: 'syz.4.2656': attribute type 8 has an invalid length. [ 271.311983][T10360] netlink: 'syz.3.2655': attribute type 12 has an invalid length. [ 271.366811][T10360] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.2655'. [ 271.445166][T10366] netlink: 'syz.1.2658': attribute type 27 has an invalid length. [ 271.501781][T10366] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.2658'. [ 273.069746][T10435] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.2684'. [ 273.207971][T10445] tun0: tun_chr_ioctl cmd 1074025681 [ 273.504918][T10459] tap0: tun_chr_ioctl cmd 1074025677 [ 273.516579][T10459] tap0: linktype set to 825 [ 274.729642][T10533] netlink: 'syz.3.2718': attribute type 4 has an invalid length. [ 274.887478][T10540] netlink: 'syz.0.2721': attribute type 1 has an invalid length. [ 274.935653][T10540] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2721'. [ 275.726501][T10575] tun0: tun_chr_ioctl cmd 1074025694 [ 275.925255][T10584] tap0: tun_chr_ioctl cmd 1074025677 [ 275.943377][T10584] tap0: linktype set to 0 [ 276.454299][T10605] syz.4.2745[10605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.454398][T10605] syz.4.2745[10605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.007735][T10631] netlink: 'syz.4.2752': attribute type 21 has an invalid length. [ 277.090100][T10631] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2752'. [ 277.134327][T10638] netlink: 'syz.2.2757': attribute type 49 has an invalid length. [ 277.145275][T10635] netlink: 'syz.1.2755': attribute type 2 has an invalid length. [ 277.161356][T10635] netlink: 'syz.1.2755': attribute type 8 has an invalid length. [ 277.192958][T10635] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2755'. [ 277.233444][T10638] netlink: 'syz.2.2757': attribute type 49 has an invalid length. [ 277.253211][T10642] netlink: 'syz.1.2755': attribute type 2 has an invalid length. [ 277.267065][T10642] netlink: 'syz.1.2755': attribute type 8 has an invalid length. [ 277.275205][T10642] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2755'. [ 277.785420][T10670] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.2770'. [ 279.380382][T10727] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2794'. [ 279.581792][T10741] netlink: 'syz.3.2802': attribute type 2 has an invalid length. [ 279.595206][T10741] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.2802'. [ 280.054720][T10764] netlink: 'syz.1.2815': attribute type 10 has an invalid length. [ 280.063269][T10764] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2815'. [ 280.219712][T10766] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2814'. [ 280.242889][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2814'. [ 280.252594][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2814'. [ 280.409509][T10774] netlink: zone id is out of range [ 280.420178][T10774] netlink: zone id is out of range [ 280.475844][T10777] netlink: 'syz.2.2818': attribute type 4 has an invalid length. [ 280.487571][T10774] netlink: zone id is out of range [ 281.073988][T10774] netlink: set zone limit has 8 unknown bytes [ 281.510912][T10806] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 283.130848][T10860] __nla_validate_parse: 7 callbacks suppressed [ 283.130869][T10860] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2856'. [ 283.167901][T10860] validate_nla: 4 callbacks suppressed [ 283.167928][T10860] netlink: 'syz.3.2856': attribute type 3 has an invalid length. [ 283.235360][T10862] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2857'. [ 283.390363][T10868] tap0: tun_chr_ioctl cmd 1074025677 [ 283.395843][T10868] tap0: linktype set to 270 [ 283.590215][T10871] tap0: tun_chr_ioctl cmd 2148553947 [ 283.827299][T10880] netlink: 'syz.3.2865': attribute type 21 has an invalid length. [ 283.835217][T10880] netlink: 'syz.3.2865': attribute type 6 has an invalid length. [ 283.871135][T10880] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2865'. [ 287.018844][T10973] netlink: 'syz.2.2906': attribute type 10 has an invalid length. [ 287.086190][T10973] team0: Port device netdevsim0 added [ 287.764008][T10996] netlink: 'syz.4.2917': attribute type 25 has an invalid length. [ 287.933276][T11003] netlink: 'syz.4.2929': attribute type 10 has an invalid length. [ 287.941330][T11003] device bridge_slave_0 left promiscuous mode [ 287.953120][T11003] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.844266][T11044] tap0: tun_chr_ioctl cmd 35108 [ 289.077535][T11059] bond0: (slave wlan1): Error: Slave device does not support XDP [ 289.359313][T11074] netlink: 'syz.0.2954': attribute type 29 has an invalid length. [ 289.384652][T11074] netlink: 'syz.0.2954': attribute type 29 has an invalid length. [ 289.440175][T11081] netlink: 'syz.0.2954': attribute type 29 has an invalid length. [ 289.465258][T11080] netlink: 'syz.4.2957': attribute type 1 has an invalid length. [ 289.493465][T11080] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2957'. [ 289.514509][T11074] netlink: 'syz.0.2954': attribute type 29 has an invalid length. [ 289.531509][T11087] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2960'. [ 293.092119][T11196] tun0: tun_chr_ioctl cmd 2147767521 [ 294.931564][T11257] delete_channel: no stack [ 295.273958][T11274] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3049'. [ 295.791196][T11297] netlink: 'syz.1.3058': attribute type 46 has an invalid length. [ 296.009640][T11312] tun1: tun_chr_ioctl cmd 2148553947 [ 296.444567][T11322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3071'. [ 297.263989][T11354] tap0: tun_chr_ioctl cmd 1074025673 [ 298.038025][T11391] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3104'. [ 298.151856][T11395] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 298.176081][T11395] dvmrp1: linktype set to 805 [ 298.857700][T11418] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3116'. [ 300.824868][T11512] netlink: 'syz.3.3159': attribute type 2 has an invalid length. [ 300.847702][T11512] netlink: 'syz.3.3159': attribute type 1 has an invalid length. [ 301.471945][T11536] netlink: 'syz.3.3169': attribute type 21 has an invalid length. [ 301.491017][T11536] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.3169'. [ 301.536625][T11540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 301.543904][T11540] IPv6: NLM_F_CREATE should be set when creating new route [ 301.551193][T11540] IPv6: NLM_F_CREATE should be set when creating new route [ 301.558448][T11540] IPv6: NLM_F_CREATE should be set when creating new route [ 302.288691][T11566] tap0: tun_chr_ioctl cmd 1074025677 [ 302.312751][T11566] tap0: linktype set to 804 [ 302.606311][T11571] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 302.612989][T11571] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 303.101268][T11581] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3192'. [ 303.148643][T11581] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.982325][T11629] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3214'. [ 304.002180][T11629] netlink: 'syz.1.3214': attribute type 3 has an invalid length. [ 304.072915][T11629] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3214'. [ 304.292427][T11641] tap0: tun_chr_ioctl cmd 2147767507 [ 305.684917][T11682] tap0: tun_chr_ioctl cmd 1074025677 [ 305.705696][T11682] tap0: linktype set to 531 [ 306.413227][T11725] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3256'. [ 307.163779][T11770] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3279'. [ 307.354952][T11779] netlink: 'syz.3.3284': attribute type 22 has an invalid length. [ 307.386731][T11779] netlink: 14378 bytes leftover after parsing attributes in process `syz.3.3284'. [ 308.283889][T11826] tap0: tun_chr_ioctl cmd 1074812118 [ 309.413174][T11871] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3328'. [ 309.467697][T11874] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3330'. [ 309.501902][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3330'. [ 309.504713][T11878] netlink: 'syz.2.3332': attribute type 29 has an invalid length. [ 309.555433][T11878] netlink: 'syz.2.3332': attribute type 29 has an invalid length. [ 309.582999][T11881] netlink: 'syz.2.3332': attribute type 29 has an invalid length. [ 309.632033][T11883] netlink: 'syz.2.3332': attribute type 29 has an invalid length. [ 309.829122][T11893] netlink: 'syz.1.3340': attribute type 3 has an invalid length. [ 309.856396][T11893] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3340'. [ 311.017259][ T3666] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.131368][ T3666] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.253508][T11954] netlink: 4031 bytes leftover after parsing attributes in process `syz.2.3369'. [ 311.271367][ T3666] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.407605][ T3666] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.580597][T11963] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 311.645480][ T3650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.655504][ T3650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.666566][ T3650] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.687453][ T3650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.694906][ T3650] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 311.704017][ T3650] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.456431][T12008] netlink: 131996 bytes leftover after parsing attributes in process `syz.1.3389'. [ 312.712958][T12015] tap0: tun_chr_ioctl cmd 1074025677 [ 312.727376][T12015] tap0: linktype set to 65534 [ 312.845648][T12024] netlink: 35347 bytes leftover after parsing attributes in process `syz.1.3393'. [ 312.864347][T11970] chnl_net:caif_netlink_parms(): no params data found [ 313.519958][T11970] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.538725][T11970] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.553758][T11970] device bridge_slave_0 entered promiscuous mode [ 313.568474][T11970] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.585889][T11970] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.597207][T11970] device bridge_slave_1 entered promiscuous mode [ 313.736562][ T3650] Bluetooth: hci4: command tx timeout [ 313.887155][ T3666] bond0: (slave wlan1): Releasing backup interface [ 313.930774][T11970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.971962][T11970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.991595][T12078] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.3409'. [ 314.056656][ T3650] Bluetooth: hci1: command 0x0406 tx timeout [ 314.078220][T12082] netlink: 'syz.2.3412': attribute type 3 has an invalid length. [ 314.085988][T12082] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3412'. [ 314.219240][T12087] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3414'. [ 314.252182][T11970] team0: Port device team_slave_0 added [ 314.263821][T12085] netlink: 'syz.0.3413': attribute type 13 has an invalid length. [ 314.272117][T12085] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.3413'. [ 314.313283][T11970] team0: Port device team_slave_1 added [ 314.407540][ T3666] device hsr_slave_0 left promiscuous mode [ 314.415354][ T3666] device hsr_slave_1 left promiscuous mode [ 314.438161][ T3666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.452309][ T3666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.478976][ T3666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.494632][ T3666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.532761][ T3666] device bridge_slave_1 left promiscuous mode [ 314.547308][ T3666] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.560055][ T3666] device bridge_slave_0 left promiscuous mode [ 314.567506][ T3666] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.603189][ T3666] device veth1_macvtap left promiscuous mode [ 314.609482][ T3666] device veth0_macvtap left promiscuous mode [ 314.615588][ T3666] device veth1_vlan left promiscuous mode [ 314.621753][ T3666] device veth0_vlan left promiscuous mode [ 314.993787][ T3666] team0 (unregistering): Port device team_slave_1 removed [ 315.028542][ T3666] team0 (unregistering): Port device team_slave_0 removed [ 315.061803][ T3666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.101362][ T3666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.421115][ T3666] bond0 (unregistering): Released all slaves [ 315.517473][T11970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.524449][T11970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.575952][T11970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.603096][T11970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.646278][T11970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.724808][T11970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.817441][ T3650] Bluetooth: hci4: command tx timeout [ 315.825174][T12113] netlink: 'syz.0.3427': attribute type 27 has an invalid length. [ 315.897114][T12113] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.3427'. [ 315.942143][T11970] device hsr_slave_0 entered promiscuous mode [ 315.972395][T11970] device hsr_slave_1 entered promiscuous mode [ 316.078235][T12122] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.3429'. [ 317.203921][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.210305][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.822855][T12160] netlink: 35347 bytes leftover after parsing attributes in process `syz.2.3440'. [ 317.906538][ T3650] Bluetooth: hci4: command tx timeout [ 318.344543][T11970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 318.394659][T11970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 318.442745][T11970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 318.452598][T11970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 318.736792][T11970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.809260][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.843611][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.885377][T11970] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.939222][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.959018][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.007979][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.015175][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.114326][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.140807][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.172776][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.183076][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.190248][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.205529][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.214705][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.256782][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.283684][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.301623][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.314488][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.359046][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 319.372224][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 319.383622][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.396079][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 319.411990][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.424468][T11970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 319.976426][ T3650] Bluetooth: hci4: command tx timeout [ 320.527285][T11970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.566928][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.574816][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.609812][ T7965] cgroup: fork rejected by pids controller in /syz2 [ 320.646038][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.672923][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 320.960346][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 320.980853][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 321.043504][T11970] device veth0_vlan entered promiscuous mode [ 321.065065][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 321.105266][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 321.192019][T11970] device veth1_vlan entered promiscuous mode [ 321.944039][ T3650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.977291][ T3650] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.985367][ T3650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.998483][ T3666] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.011312][ T3650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.032390][ T3650] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 322.040340][ T3650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.118209][ T3666] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.137327][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 322.145905][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 322.163154][T11970] device veth0_macvtap entered promiscuous mode [ 322.191967][ T3666] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.233360][T11970] device veth1_macvtap entered promiscuous mode [ 322.331700][ T3666] team0: Port device netdevsim0 removed [ 322.351176][ T3666] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.420784][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.445532][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.466250][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.483859][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.512279][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.536250][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.546080][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.576271][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.599337][T11970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.611909][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.625971][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.643109][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.653610][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.669227][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.681862][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.695124][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.711076][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.737464][T11970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.759886][T11970] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.784634][T11970] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.808412][T11970] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.817734][T11970] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.849935][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 322.858659][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 322.876489][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 322.885230][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 322.900983][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 322.912433][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 323.095304][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.127375][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.193614][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 323.205732][T12262] chnl_net:caif_netlink_parms(): no params data found [ 323.259137][ T3702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.272957][ T3702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.299951][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 323.401936][T12262] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.409785][T12262] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.418413][T12262] device bridge_slave_0 entered promiscuous mode [ 323.427258][T12262] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.434492][T12262] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.443333][T12262] device bridge_slave_1 entered promiscuous mode [ 323.492858][T12262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.505474][T12262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.553529][T12262] team0: Port device team_slave_0 added [ 323.561436][T12262] team0: Port device team_slave_1 added [ 323.585215][T12262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.592652][T12262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.621604][T12262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.707987][T12262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.715031][T12262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.775438][T12262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.136372][ T3652] Bluetooth: hci1: command tx timeout [ 324.651616][T12262] device hsr_slave_0 entered promiscuous mode [ 324.679078][T12262] device hsr_slave_1 entered promiscuous mode [ 324.688874][T12262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.746277][T12262] Cannot create hsr debugfs directory [ 325.320720][T12364] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.3493'. [ 325.560967][ T3666] bond0: (slave wlan1): Releasing backup interface [ 326.004265][ T3666] device hsr_slave_0 left promiscuous mode [ 326.026871][ T3666] device hsr_slave_1 left promiscuous mode [ 326.037265][ T3666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.072293][ T3666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.081500][ T3666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.089031][ T3666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.104156][ T3666] device bridge_slave_1 left promiscuous mode [ 326.128980][ T3666] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.216418][ T3652] Bluetooth: hci1: command tx timeout [ 326.282795][ T3666] device veth1_macvtap left promiscuous mode [ 326.310449][ T3666] device veth0_macvtap left promiscuous mode [ 326.341028][ T3666] device veth1_vlan left promiscuous mode [ 326.363383][ T3666] device veth0_vlan left promiscuous mode [ 326.851226][ T3666] team0 (unregistering): Port device team_slave_1 removed [ 326.884064][ T3666] team0 (unregistering): Port device team_slave_0 removed [ 326.915337][ T3666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.954437][ T3666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.272009][ T3666] bond0 (unregistering): Released all slaves [ 328.093821][T12262] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 328.139071][T12262] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 328.165034][T12262] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 328.189573][T12262] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 328.296316][ T3643] Bluetooth: hci1: command tx timeout [ 328.596420][T12262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.610777][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.674999][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.726816][T12262] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.778067][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.808046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.859021][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.866377][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.911014][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.935495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.967170][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.996958][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.004073][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.061708][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.126000][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.165198][T12498] tap0: tun_chr_ioctl cmd 2147767507 [ 329.200063][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.225263][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.260711][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.281210][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.298651][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.314371][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.323382][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.334265][T12503] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3543'. [ 329.344217][T12503] netlink: 'syz.4.3543': attribute type 3 has an invalid length. [ 329.353992][T12503] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3543'. [ 329.371140][T12262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.403012][T12262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.426862][ T3650] Bluetooth: hci2: command 0x0406 tx timeout [ 329.426885][ T3651] Bluetooth: hci3: command 0x0406 tx timeout [ 329.432883][ T3650] Bluetooth: hci0: command 0x0406 tx timeout [ 329.447089][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.493122][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.218770][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.238451][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.262929][T12262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.326976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 330.350606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.377339][ T3651] Bluetooth: hci1: command tx timeout [ 330.399160][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 330.417534][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.433138][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.441184][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.462469][T12262] device veth0_vlan entered promiscuous mode [ 330.488455][T12262] device veth1_vlan entered promiscuous mode [ 330.525290][T12262] device veth0_macvtap entered promiscuous mode [ 330.543517][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 330.582749][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 330.622555][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 330.647566][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 330.695919][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.744708][T12262] device veth1_macvtap entered promiscuous mode [ 330.800379][T12573] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3566'. [ 330.895904][T12262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.906874][T12262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.945292][T12262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.028728][T12262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.071011][T12262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.092566][T12262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.129759][T12262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.151951][T12262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.189410][T12262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.245675][T12597] tap0: tun_chr_ioctl cmd 1074025677 [ 331.266583][T12597] tap0: linktype set to 804 [ 331.271397][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.287261][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.326083][T12262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.375480][T12262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.386642][T12262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.406482][T12262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.422671][T12262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.433958][T12262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.446476][T12262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.457246][T12262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.468547][T12262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.533105][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.542020][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.556015][T12262] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.567630][T12262] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.581597][T12262] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.590982][T12262] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.786518][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.794644][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.814641][T12618] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 331.821363][T12618] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 331.855884][T12621] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.863189][T12621] IPv6: NLM_F_CREATE should be set when creating new route [ 331.870507][T12621] IPv6: NLM_F_CREATE should be set when creating new route [ 331.877784][T12621] IPv6: NLM_F_CREATE should be set when creating new route [ 331.885907][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 331.937533][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.945558][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.008969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 332.514269][T12649] netlink: 'syz.2.3593': attribute type 21 has an invalid length. [ 332.536432][T12649] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.3593'. [ 332.743244][T12659] netlink: 'syz.2.3598': attribute type 2 has an invalid length. [ 332.759732][T12659] netlink: 'syz.2.3598': attribute type 1 has an invalid length. [ 332.854995][T12667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 332.862727][T12667] IPv6: NLM_F_CREATE should be set when creating new route [ 332.870038][T12667] IPv6: NLM_F_CREATE should be set when creating new route [ 332.877373][T12667] IPv6: NLM_F_CREATE should be set when creating new route [ 333.153137][T12678] tap0: tun_chr_ioctl cmd 1074025677 [ 333.163964][T12678] tap0: linktype set to 804 [ 333.330934][T12686] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 333.337757][T12686] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 335.245337][T12749] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 335.251831][T12749] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 335.409869][T12763] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3650'. [ 335.745218][T12775] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3657'. [ 335.911771][T12785] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 335.931804][T12785] dvmrp1: linktype set to 805 [ 336.764478][T12822] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 336.785798][T12822] dvmrp1: linktype set to 805 [ 336.846905][T12826] tap0: tun_chr_ioctl cmd 1074025673 [ 338.060750][T12879] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3704'. [ 338.392026][T12894] netlink: 'syz.4.3708': attribute type 46 has an invalid length. [ 338.796926][T12908] delete_channel: no stack [ 340.145434][T12948] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3734'. [ 340.451549][T12963] netlink: 'syz.3.3754': attribute type 2 has an invalid length. [ 340.497215][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3754'. [ 341.155363][T12993] tun1: tun_chr_ioctl cmd 2147767521 [ 342.167560][T13021] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3770'. [ 342.864117][T13043] tun1: tun_chr_ioctl cmd 2148553947 [ 346.412194][T13154] tap0: tun_chr_ioctl cmd 2148553947 [ 347.502298][T13181] tap0: tun_chr_ioctl cmd 1074025677 [ 347.512755][T13181] tap0: linktype set to 270 [ 348.787039][T13205] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3865'. [ 349.178303][T13223] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3861'. [ 349.208113][T13223] netlink: zone id is out of range [ 349.230610][T13223] netlink: zone id is out of range [ 349.250688][T13223] netlink: zone id is out of range [ 349.577318][T13223] netlink: set zone limit has 8 unknown bytes [ 349.864319][T13241] syz.2.3881[13241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.864426][T13241] syz.2.3881[13241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.473890][T13275] tap0: tun_chr_ioctl cmd 1074025677 [ 351.523521][T13275] tap0: linktype set to 0 [ 352.123905][T13309] tap0: tun_chr_ioctl cmd 1074025677 [ 352.140083][T13309] tap0: linktype set to 825 [ 352.402597][T13320] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3906'. [ 352.839119][T13343] netlink: 'syz.1.3919': attribute type 12 has an invalid length. [ 352.858139][T13343] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.3919'. [ 352.874615][T13344] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3918'. [ 352.943784][T13344] netlink: 'syz.3.3918': attribute type 8 has an invalid length. [ 353.506093][T13380] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3934'. [ 353.556354][T13380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 353.595842][T13380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 353.671727][T13380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 354.927993][T13446] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3968'. [ 355.217569][T13456] netlink: 'syz.4.3969': attribute type 33 has an invalid length. [ 355.246113][T13456] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3969'. [ 355.631315][T13467] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3974'. [ 355.894290][T13475] Â: renamed from pim6reg1 [ 356.338176][T13485] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3983'. [ 356.405318][T13492] netlink: 'syz.2.3986': attribute type 8 has an invalid length. [ 356.436380][T13492] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3986'. [ 356.863957][T13514] netlink: 'syz.1.4009': attribute type 29 has an invalid length. [ 356.886025][T13514] netlink: 'syz.1.4009': attribute type 29 has an invalid length. [ 356.922417][T13519] netlink: 'syz.1.4009': attribute type 29 has an invalid length. [ 356.943268][T13518] Â: renamed from pim6reg1 [ 356.985945][T13514] netlink: 'syz.1.4009': attribute type 29 has an invalid length. [ 357.024436][T13523] netlink: 'syz.3.4001': attribute type 21 has an invalid length. [ 357.053980][T13525] netlink: 'syz.0.4015': attribute type 12 has an invalid length. [ 357.097563][T13525] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4015'. [ 357.113217][T13523] netlink: 12374 bytes leftover after parsing attributes in process `syz.3.4001'. [ 357.126986][T13525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.322380][T13537] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4006'. [ 357.413443][T13542] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4022'. [ 357.952966][T13564] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.4021'. [ 358.019836][T13567] validate_nla: 1 callbacks suppressed [ 358.019854][T13567] netlink: 'syz.0.4023': attribute type 1 has an invalid length. [ 358.783112][T13607] tun1: tun_chr_ioctl cmd 1074812118 [ 358.953162][T13616] netlink: 'syz.1.4057': attribute type 4 has an invalid length. [ 359.697853][ T4361] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.885590][ T4361] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.015039][ T4361] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.143108][ T4361] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.339585][ T3643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.353754][ T3643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.370086][ T3643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.379410][ T3643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.395606][ T3652] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 360.408439][ T3643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.631922][T13678] netlink: 'syz.1.4073': attribute type 27 has an invalid length. [ 360.666666][T13678] __nla_validate_parse: 6 callbacks suppressed [ 360.666684][T13678] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.4073'. [ 361.182322][T13665] chnl_net:caif_netlink_parms(): no params data found [ 361.482410][T13665] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.512598][T13665] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.528518][T13665] device bridge_slave_0 entered promiscuous mode [ 361.617084][T13665] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.637014][T13665] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.667321][T13665] device bridge_slave_1 entered promiscuous mode [ 362.034139][T13665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.050727][T13665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.136046][T13665] team0: Port device team_slave_0 added [ 362.329221][T13665] team0: Port device team_slave_1 added [ 362.426423][ T4361] device hsr_slave_0 left promiscuous mode [ 362.456814][ T3651] Bluetooth: hci1: command tx timeout [ 363.224631][ T4361] device hsr_slave_1 left promiscuous mode [ 363.263075][ T4361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.313338][ T4361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.347145][ T4361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.375493][ T4361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.399173][ T4361] device bridge_slave_1 left promiscuous mode [ 363.405464][ T4361] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.441549][ T4361] device bridge_slave_0 left promiscuous mode [ 363.460867][ T4361] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.530819][ T4361] device veth1_macvtap left promiscuous mode [ 363.565060][ T4361] device veth0_macvtap left promiscuous mode [ 363.595696][ T4361] device veth1_vlan left promiscuous mode [ 363.606737][ T4361] device veth0_vlan left promiscuous mode [ 364.132230][ T4361] team0 (unregistering): Port device team_slave_1 removed [ 364.172223][ T4361] team0 (unregistering): Port device team_slave_0 removed [ 364.205699][ T4361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.242210][ T4361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.548094][ T3643] Bluetooth: hci1: command tx timeout [ 364.632325][ T4361] bond0 (unregistering): Released all slaves [ 364.707181][T13665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.714161][T13665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.740476][T13665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.757675][T13665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.764647][T13665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.790946][T13665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.899171][T13665] device hsr_slave_0 entered promiscuous mode [ 364.924394][T13665] device hsr_slave_1 entered promiscuous mode [ 365.078288][T13665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.086857][T13665] Cannot create hsr debugfs directory [ 365.922836][T13665] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 365.934154][T13665] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 365.949525][T13665] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 365.963728][T13665] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 366.064626][T13665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.085744][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.094992][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.111847][T13665] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.126388][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.135354][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.145965][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.153141][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.161067][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 366.176453][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.184992][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.192150][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.212290][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 366.220552][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 366.230288][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 366.242831][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 366.258867][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 366.270003][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 366.288607][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 366.297969][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 366.309490][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 366.318014][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.328179][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 366.337451][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.350023][T13665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 366.576697][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 366.584159][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 366.598469][T13665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.616325][ T3651] Bluetooth: hci1: command tx timeout [ 366.624387][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 366.633393][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.668654][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 366.677256][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.685798][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 366.693846][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 366.703971][T13665] device veth0_vlan entered promiscuous mode [ 366.719699][T13665] device veth1_vlan entered promiscuous mode [ 366.752388][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 366.761112][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 366.770144][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 366.778948][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 366.789849][T13665] device veth0_macvtap entered promiscuous mode [ 366.798696][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 366.809347][T13665] device veth1_macvtap entered promiscuous mode [ 366.828146][T13665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.839267][T13665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.849454][T13665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.861056][T13665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.871790][T13665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.882514][T13665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.892675][T13665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.908716][T13665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.922747][T13665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.935474][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 366.954318][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 366.968603][T13665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.980171][T13665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.990446][T13665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.001755][T13665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.012392][T13665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.023200][T13665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.033329][T13665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.051511][T13665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.070476][T13665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.080577][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 367.094047][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 367.108733][T13665] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.123538][T13665] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.133379][T13665] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.147869][T13665] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.243540][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.254070][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.278437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 367.304234][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.318610][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.334275][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 367.463258][T13848] netlink: 'syz.0.4117': attribute type 41 has an invalid length. [ 367.531064][T13848] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4117'. [ 368.420716][T13883] tap0: tun_chr_ioctl cmd 2147767517 [ 368.698020][ T3651] Bluetooth: hci1: command tx timeout [ 370.932271][T13940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4145'. [ 371.414051][T13950] Â: renamed from pim6reg1 [ 373.108144][T13967] netlink: 'syz.1.4162': attribute type 33 has an invalid length. [ 373.158867][T13967] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4162'. [ 374.320664][T13989] Â: renamed from pim6reg1 [ 375.213783][T14013] netlink: 'syz.3.4177': attribute type 33 has an invalid length. [ 375.243425][T14013] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4177'. [ 375.630451][T14028] netlink: 'syz.3.4185': attribute type 27 has an invalid length. [ 375.673865][T14028] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.4185'. [ 376.628992][T14050] netlink: 'syz.3.4197': attribute type 33 has an invalid length. [ 376.656361][T14050] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4197'. [ 377.806822][T14075] tun1: tun_chr_ioctl cmd 1074025681 [ 378.538117][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.544459][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.781397][T14092] netlink: 'syz.3.4214': attribute type 33 has an invalid length. [ 378.817858][T14092] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4214'. [ 381.045555][T14158] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4242'. [ 381.059999][T14158] netlink: 'syz.2.4242': attribute type 8 has an invalid length. [ 382.020560][T14189] tun1: tun_chr_ioctl cmd 1074025694 [ 383.259337][T14217] netlink: 'syz.0.4268': attribute type 21 has an invalid length. [ 383.284410][T14217] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.4268'. [ 383.335600][T14219] tap0: tun_chr_ioctl cmd 1074025677 [ 383.342544][T14219] tap0: linktype set to 0 [ 385.040701][T14246] netlink: 'syz.4.4279': attribute type 2 has an invalid length. [ 385.065115][T14246] netlink: 'syz.4.4279': attribute type 8 has an invalid length. [ 385.102467][T14246] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4279'. [ 386.203533][T14271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4294'. [ 386.234275][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4294'. [ 386.251842][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4294'. [ 386.279935][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4294'. [ 386.351795][T14277] netlink: 'syz.4.4295': attribute type 29 has an invalid length. [ 386.391400][T14277] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4295'. [ 386.403927][T14277] netlink: 'syz.4.4295': attribute type 29 has an invalid length. [ 386.430026][T14277] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4295'. [ 386.733906][T14287] netlink: 'syz.4.4298': attribute type 10 has an invalid length. [ 387.257950][T14287] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 387.276341][T14289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4300'. [ 387.305950][T14289] netlink: 'syz.3.4300': attribute type 1 has an invalid length. [ 388.269945][T14319] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4311'. [ 388.353298][T14322] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.4314'. [ 388.406380][T14322] netlink: zone id is out of range [ 388.422261][T14322] netlink: zone id is out of range [ 388.428412][T14322] netlink: zone id is out of range [ 388.594415][T14330] netlink: 'syz.1.4315': attribute type 10 has an invalid length. [ 388.652731][T14330] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 388.835177][T14336] netlink: 'syz.4.4321': attribute type 3 has an invalid length. [ 388.869686][T14322] netlink: set zone limit has 8 unknown bytes [ 389.317107][T14353] netlink: 'syz.1.4329': attribute type 21 has an invalid length. [ 389.347190][T14353] netlink: 'syz.1.4329': attribute type 6 has an invalid length. [ 390.665134][T14372] netlink: 'syz.0.4333': attribute type 10 has an invalid length. [ 390.750354][T14372] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 390.993870][T14379] netlink: 'syz.2.4353': attribute type 10 has an invalid length. [ 391.018047][T14379] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 391.503179][T14399] netlink: 'syz.2.4362': attribute type 25 has an invalid length. [ 391.512988][T14402] netlink: 'syz.1.4349': attribute type 10 has an invalid length. [ 391.567982][T14402] team0: Port device netdevsim0 added [ 391.845698][T14420] netlink: 'syz.3.4370': attribute type 25 has an invalid length. [ 393.192420][T14446] tap0: tun_chr_ioctl cmd 35108 [ 394.432061][T14495] netlink: 'syz.3.4394': attribute type 1 has an invalid length. [ 394.465495][T14495] __nla_validate_parse: 4 callbacks suppressed [ 394.465512][T14495] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4394'. [ 394.580203][T14502] netlink: 'syz.1.4397': attribute type 29 has an invalid length. [ 394.599763][T14502] netlink: 'syz.1.4397': attribute type 29 has an invalid length. [ 394.621024][T14505] netlink: 'syz.1.4397': attribute type 29 has an invalid length. [ 394.669832][T14502] netlink: 'syz.1.4397': attribute type 29 has an invalid length. [ 394.765378][T14511] bond0: (slave wlan1): Error: Slave device does not support XDP [ 394.811098][T14511] ================================================================== [ 394.819239][T14511] BUG: KASAN: use-after-free in cpu_map_enqueue+0xb6/0x370 [ 394.826453][T14511] Read of size 8 at addr ffff88807b8b0408 by task syz.0.4399/14511 [ 394.834333][T14511] [ 394.836659][T14511] CPU: 1 PID: 14511 Comm: syz.0.4399 Not tainted 6.1.112-syzkaller #0 [ 394.844801][T14511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 394.854848][T14511] Call Trace: [ 394.858115][T14511] [ 394.861034][T14511] dump_stack_lvl+0x1e3/0x2cb [ 394.865710][T14511] ? nf_tcp_handle_invalid+0x642/0x642 [ 394.871161][T14511] ? panic+0x764/0x764 [ 394.875216][T14511] ? _printk+0xd1/0x111 [ 394.879361][T14511] ? __virt_addr_valid+0x17f/0x530 [ 394.884468][T14511] ? __virt_addr_valid+0x17f/0x530 [ 394.889574][T14511] print_report+0x15f/0x4f0 [ 394.894066][T14511] ? __virt_addr_valid+0x17f/0x530 [ 394.899165][T14511] ? __virt_addr_valid+0x17f/0x530 [ 394.904265][T14511] ? __virt_addr_valid+0x45b/0x530 [ 394.909365][T14511] ? __phys_addr+0xb6/0x170 [ 394.913860][T14511] ? cpu_map_enqueue+0xb6/0x370 [ 394.918700][T14511] kasan_report+0x136/0x160 [ 394.923190][T14511] ? cpu_map_enqueue+0xb6/0x370 [ 394.928738][T14511] cpu_map_enqueue+0xb6/0x370 [ 394.933425][T14511] xdp_do_redirect_frame+0x2f0/0x660 [ 394.938719][T14511] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 394.944092][T14511] ? __mutex_unlock_slowpath+0x218/0x750 [ 394.949721][T14511] ? 0xffffffffa00038c0 [ 394.953895][T14511] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 394.959438][T14511] ? xdp_convert_md_to_buff+0x330/0x330 [ 394.964977][T14511] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 394.970865][T14511] ? 0xffffffffa00038c0 [ 394.975015][T14511] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 394.981259][T14511] ? __might_fault+0xbd/0x110 [ 394.985926][T14511] ? _copy_from_user+0x109/0x170 [ 394.990864][T14511] ? bpf_test_init+0x15a/0x180 [ 394.995623][T14511] ? xdp_convert_md_to_buff+0x5b/0x330 [ 395.001073][T14511] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 395.006442][T14511] ? dev_put+0x80/0x80 [ 395.010505][T14511] ? dev_put+0x80/0x80 [ 395.014561][T14511] bpf_prog_test_run+0x32f/0x3a0 [ 395.019499][T14511] __sys_bpf+0x3eb/0x6c0 [ 395.023734][T14511] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 395.029097][T14511] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 395.035249][T14511] ? print_irqtrace_events+0x210/0x210 [ 395.040699][T14511] ? print_irqtrace_events+0x210/0x210 [ 395.046149][T14511] ? syscall_enter_from_user_mode+0x2e/0x230 [ 395.052130][T14511] ? lockdep_hardirqs_on+0x94/0x130 [ 395.057316][T14511] __x64_sys_bpf+0x78/0x90 [ 395.061723][T14511] do_syscall_64+0x3b/0xb0 [ 395.066134][T14511] ? clear_bhb_loop+0x45/0xa0 [ 395.070811][T14511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.076706][T14511] RIP: 0033:0x7f8ffc17dff9 [ 395.081130][T14511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.100818][T14511] RSP: 002b:00007f8ffd018038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 395.109223][T14511] RAX: ffffffffffffffda RBX: 00007f8ffc335f80 RCX: 00007f8ffc17dff9 [ 395.117443][T14511] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 395.125403][T14511] RBP: 00007f8ffc1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 395.133361][T14511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.141317][T14511] R13: 0000000000000000 R14: 00007f8ffc335f80 R15: 00007ffeaf20b118 [ 395.149283][T14511] [ 395.152290][T14511] [ 395.154595][T14511] Allocated by task 14005: [ 395.158991][T14511] kasan_set_track+0x4b/0x70 [ 395.163571][T14511] __kasan_kmalloc+0x97/0xb0 [ 395.168145][T14511] __kmalloc_node+0xb3/0x230 [ 395.172717][T14511] bpf_map_kmalloc_node+0xce/0x1c0 [ 395.177817][T14511] cpu_map_update_elem+0x277/0xf60 [ 395.182929][T14511] map_update_elem+0x503/0x680 [ 395.187697][T14511] __sys_bpf+0x337/0x6c0 [ 395.191942][T14511] __x64_sys_bpf+0x78/0x90 [ 395.196360][T14511] do_syscall_64+0x3b/0xb0 [ 395.200772][T14511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.206660][T14511] [ 395.208968][T14511] Last potentially related work creation: [ 395.214661][T14511] kasan_save_stack+0x3b/0x60 [ 395.219336][T14511] __kasan_record_aux_stack+0xb0/0xc0 [ 395.224693][T14511] insert_work+0x54/0x3d0 [ 395.229008][T14511] __queue_work+0xb4b/0xf90 [ 395.233497][T14511] queue_work_on+0x14b/0x250 [ 395.238069][T14511] cpu_map_free+0xd7/0x1b0 [ 395.242472][T14511] process_one_work+0x8a9/0x11d0 [ 395.247395][T14511] worker_thread+0xa47/0x1200 [ 395.252058][T14511] kthread+0x28d/0x320 [ 395.256109][T14511] ret_from_fork+0x1f/0x30 [ 395.260512][T14511] [ 395.262816][T14511] Second to last potentially related work creation: [ 395.269380][T14511] kasan_save_stack+0x3b/0x60 [ 395.274048][T14511] __kasan_record_aux_stack+0xb0/0xc0 [ 395.279409][T14511] call_rcu+0x163/0xa10 [ 395.283558][T14511] __cpu_map_entry_replace+0x74/0x170 [ 395.288913][T14511] cpu_map_free+0xd7/0x1b0 [ 395.293313][T14511] process_one_work+0x8a9/0x11d0 [ 395.298238][T14511] worker_thread+0xa47/0x1200 [ 395.302901][T14511] kthread+0x28d/0x320 [ 395.306955][T14511] ret_from_fork+0x1f/0x30 [ 395.311376][T14511] [ 395.313684][T14511] The buggy address belongs to the object at ffff88807b8b0400 [ 395.313684][T14511] which belongs to the cache kmalloc-cg-256 of size 256 [ 395.328070][T14511] The buggy address is located 8 bytes inside of [ 395.328070][T14511] 256-byte region [ffff88807b8b0400, ffff88807b8b0500) [ 395.341153][T14511] [ 395.343462][T14511] The buggy address belongs to the physical page: [ 395.349865][T14511] page:ffffea0001ee2c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807b8b1600 pfn:0x7b8b0 [ 395.361304][T14511] head:ffffea0001ee2c00 order:1 compound_mapcount:0 compound_pincount:0 [ 395.369614][T14511] memcg:ffff88807891db01 [ 395.373833][T14511] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 395.381830][T14511] raw: 00fff00000010200 ffffea00009b0880 dead000000000005 ffff888017c42c80 [ 395.390399][T14511] raw: ffff88807b8b1600 000000008010000e 00000001ffffffff ffff88807891db01 [ 395.398963][T14511] page dumped because: kasan: bad access detected [ 395.405364][T14511] page_owner tracks the page as allocated [ 395.411076][T14511] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3635, tgid 3635 (syz-executor), ts 59024778366, free_ts 59005179549 [ 395.433809][T14511] post_alloc_hook+0x18d/0x1b0 [ 395.438565][T14511] get_page_from_freelist+0x322e/0x33b0 [ 395.444121][T14511] __alloc_pages+0x28d/0x770 [ 395.448710][T14511] alloc_slab_page+0x6a/0x150 [ 395.453380][T14511] new_slab+0x84/0x2d0 [ 395.457437][T14511] ___slab_alloc+0xc20/0x1270 [ 395.462101][T14511] __kmem_cache_alloc_node+0x19f/0x260 [ 395.467557][T14511] __kmalloc_node+0xa2/0x230 [ 395.472133][T14511] kvmalloc_node+0x6e/0x180 [ 395.476624][T14511] nf_hook_entries_grow+0x331/0x760 [ 395.481807][T14511] __nf_register_net_hook+0x29c/0x930 [ 395.487177][T14511] nf_register_net_hook+0xac/0x180 [ 395.492278][T14511] nf_register_net_hooks+0x3d/0x1a0 [ 395.497474][T14511] ip6t_register_table+0x4d0/0x7b0 [ 395.502574][T14511] ip6table_security_table_init+0x3e/0x60 [ 395.508368][T14511] xt_find_table_lock+0x2cc/0x3a0 [ 395.513423][T14511] page last free stack trace: [ 395.518081][T14511] free_unref_page_prepare+0xf63/0x1120 [ 395.523612][T14511] free_unref_page+0x33/0x3e0 [ 395.528273][T14511] qlist_free_all+0x76/0xe0 [ 395.532771][T14511] kasan_quarantine_reduce+0x156/0x170 [ 395.538220][T14511] __kasan_slab_alloc+0x1f/0x70 [ 395.543051][T14511] slab_post_alloc_hook+0x52/0x3a0 [ 395.548165][T14511] kmem_cache_alloc+0x10c/0x2d0 [ 395.553002][T14511] getname_flags+0xb8/0x4f0 [ 395.557493][T14511] __x64_sys_newfstatat+0x130/0x1e0 [ 395.562688][T14511] do_syscall_64+0x3b/0xb0 [ 395.567104][T14511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.572984][T14511] [ 395.575290][T14511] Memory state around the buggy address: [ 395.580902][T14511] ffff88807b8b0300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 395.588944][T14511] ffff88807b8b0380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 395.596988][T14511] >ffff88807b8b0400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 395.605027][T14511] ^ [ 395.609335][T14511] ffff88807b8b0480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 395.617379][T14511] ffff88807b8b0500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 395.625422][T14511] ================================================================== [ 395.633557][T14511] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 395.640755][T14511] CPU: 1 PID: 14511 Comm: syz.0.4399 Not tainted 6.1.112-syzkaller #0 [ 395.649003][T14511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 395.659069][T14511] Call Trace: [ 395.662351][T14511] [ 395.665292][T14511] dump_stack_lvl+0x1e3/0x2cb [ 395.669999][T14511] ? nf_tcp_handle_invalid+0x642/0x642 [ 395.675473][T14511] ? panic+0x764/0x764 [ 395.679556][T14511] ? vscnprintf+0x59/0x80 [ 395.683895][T14511] panic+0x318/0x764 [ 395.687801][T14511] ? check_panic_on_warn+0x1d/0xa0 [ 395.692917][T14511] ? memcpy_page_flushcache+0xfc/0xfc [ 395.698293][T14511] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 395.704194][T14511] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 395.710100][T14511] ? _raw_spin_unlock+0x40/0x40 [ 395.714968][T14511] ? print_report+0x4a3/0x4f0 [ 395.719652][T14511] check_panic_on_warn+0x7e/0xa0 [ 395.724584][T14511] ? cpu_map_enqueue+0xb6/0x370 [ 395.729434][T14511] end_report+0x66/0x110 [ 395.733668][T14511] kasan_report+0x143/0x160 [ 395.738160][T14511] ? cpu_map_enqueue+0xb6/0x370 [ 395.742998][T14511] cpu_map_enqueue+0xb6/0x370 [ 395.747665][T14511] xdp_do_redirect_frame+0x2f0/0x660 [ 395.752944][T14511] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 395.758331][T14511] ? __mutex_unlock_slowpath+0x218/0x750 [ 395.763958][T14511] ? 0xffffffffa00038c0 [ 395.768099][T14511] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 395.773630][T14511] ? xdp_convert_md_to_buff+0x330/0x330 [ 395.779160][T14511] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 395.785037][T14511] ? 0xffffffffa00038c0 [ 395.789182][T14511] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 395.795441][T14511] ? __might_fault+0xbd/0x110 [ 395.800109][T14511] ? _copy_from_user+0x109/0x170 [ 395.805032][T14511] ? bpf_test_init+0x15a/0x180 [ 395.809783][T14511] ? xdp_convert_md_to_buff+0x5b/0x330 [ 395.815228][T14511] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 395.820632][T14511] ? dev_put+0x80/0x80 [ 395.824694][T14511] ? dev_put+0x80/0x80 [ 395.828748][T14511] bpf_prog_test_run+0x32f/0x3a0 [ 395.833692][T14511] __sys_bpf+0x3eb/0x6c0 [ 395.837927][T14511] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 395.843303][T14511] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 395.849454][T14511] ? print_irqtrace_events+0x210/0x210 [ 395.854906][T14511] ? print_irqtrace_events+0x210/0x210 [ 395.860359][T14511] ? syscall_enter_from_user_mode+0x2e/0x230 [ 395.866324][T14511] ? lockdep_hardirqs_on+0x94/0x130 [ 395.871508][T14511] __x64_sys_bpf+0x78/0x90 [ 395.875914][T14511] do_syscall_64+0x3b/0xb0 [ 395.880311][T14511] ? clear_bhb_loop+0x45/0xa0 [ 395.884977][T14511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.890857][T14511] RIP: 0033:0x7f8ffc17dff9 [ 395.895267][T14511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.914858][T14511] RSP: 002b:00007f8ffd018038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 395.923344][T14511] RAX: ffffffffffffffda RBX: 00007f8ffc335f80 RCX: 00007f8ffc17dff9 [ 395.931303][T14511] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 395.939262][T14511] RBP: 00007f8ffc1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 395.947217][T14511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.955195][T14511] R13: 0000000000000000 R14: 00007f8ffc335f80 R15: 00007ffeaf20b118 [ 395.963210][T14511] [ 395.966524][T14511] Kernel Offset: disabled [ 395.970834][T14511] Rebooting in 86400 seconds..