[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. Starting Load/Save RF Kill Switch Status... [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.126' (ECDSA) to the list of known hosts. 2021/10/18 12:39:27 fuzzer started 2021/10/18 12:39:28 dialing manager at 10.128.0.169:45165 2021/10/18 12:39:28 syscalls: 1698 2021/10/18 12:39:28 code coverage: enabled 2021/10/18 12:39:28 comparison tracing: enabled 2021/10/18 12:39:28 extra coverage: enabled 2021/10/18 12:39:28 setuid sandbox: enabled 2021/10/18 12:39:28 namespace sandbox: enabled 2021/10/18 12:39:28 Android sandbox: /sys/fs/selinux/policy does not exist 2021/10/18 12:39:28 fault injection: enabled 2021/10/18 12:39:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/10/18 12:39:28 net packet injection: enabled 2021/10/18 12:39:28 net device setup: enabled 2021/10/18 12:39:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/10/18 12:39:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/10/18 12:39:28 USB emulation: enabled 2021/10/18 12:39:28 hci packet injection: enabled 2021/10/18 12:39:28 wifi device emulation: enabled 2021/10/18 12:39:28 802.15.4 emulation: enabled 2021/10/18 12:39:28 fetching corpus: 0, signal 0/2000 (executing program) syzkaller login: [ 70.604334][ T6562] cgroup: Unknown subsys name 'net' [ 70.616166][ T6562] cgroup: Unknown subsys name 'rlimit' 2021/10/18 12:39:28 fetching corpus: 50, signal 49579/52693 (executing program) 2021/10/18 12:39:28 fetching corpus: 100, signal 57954/62434 (executing program) 2021/10/18 12:39:29 fetching corpus: 150, signal 66924/72577 (executing program) [ 71.213185][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.219957][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 2021/10/18 12:39:29 fetching corpus: 200, signal 74498/81246 (executing program) 2021/10/18 12:39:29 fetching corpus: 250, signal 79667/87476 (executing program) 2021/10/18 12:39:29 fetching corpus: 300, signal 85353/94097 (executing program) 2021/10/18 12:39:29 fetching corpus: 350, signal 90403/100016 (executing program) 2021/10/18 12:39:29 fetching corpus: 400, signal 94664/105140 (executing program) 2021/10/18 12:39:29 fetching corpus: 450, signal 99433/110686 (executing program) 2021/10/18 12:39:30 fetching corpus: 500, signal 103528/115540 (executing program) 2021/10/18 12:39:30 fetching corpus: 550, signal 106249/119080 (executing program) 2021/10/18 12:39:30 fetching corpus: 600, signal 108933/122568 (executing program) 2021/10/18 12:39:30 fetching corpus: 650, signal 112457/126750 (executing program) 2021/10/18 12:39:30 fetching corpus: 700, signal 116096/130895 (executing program) 2021/10/18 12:39:30 fetching corpus: 750, signal 118892/134285 (executing program) 2021/10/18 12:39:31 fetching corpus: 800, signal 120840/136929 (executing program) 2021/10/18 12:39:31 fetching corpus: 850, signal 125464/141814 (executing program) 2021/10/18 12:39:31 fetching corpus: 900, signal 128241/145003 (executing program) 2021/10/18 12:39:31 fetching corpus: 950, signal 129928/147225 (executing program) 2021/10/18 12:39:31 fetching corpus: 1000, signal 132383/150085 (executing program) 2021/10/18 12:39:31 fetching corpus: 1050, signal 135278/153323 (executing program) 2021/10/18 12:39:32 fetching corpus: 1100, signal 137071/155515 (executing program) 2021/10/18 12:39:32 fetching corpus: 1150, signal 138966/157809 (executing program) 2021/10/18 12:39:32 fetching corpus: 1200, signal 140892/160118 (executing program) 2021/10/18 12:39:32 fetching corpus: 1250, signal 142650/162250 (executing program) 2021/10/18 12:39:32 fetching corpus: 1300, signal 145387/165162 (executing program) 2021/10/18 12:39:32 fetching corpus: 1350, signal 147991/167812 (executing program) 2021/10/18 12:39:33 fetching corpus: 1400, signal 149737/169816 (executing program) 2021/10/18 12:39:33 fetching corpus: 1450, signal 151709/171937 (executing program) 2021/10/18 12:39:33 fetching corpus: 1500, signal 153309/173712 (executing program) 2021/10/18 12:39:33 fetching corpus: 1550, signal 154833/175450 (executing program) 2021/10/18 12:39:33 fetching corpus: 1600, signal 156225/177090 (executing program) 2021/10/18 12:39:33 fetching corpus: 1650, signal 157188/178409 (executing program) 2021/10/18 12:39:33 fetching corpus: 1700, signal 158581/180037 (executing program) 2021/10/18 12:39:34 fetching corpus: 1750, signal 159979/181665 (executing program) 2021/10/18 12:39:34 fetching corpus: 1800, signal 161451/183264 (executing program) 2021/10/18 12:39:34 fetching corpus: 1850, signal 162838/184778 (executing program) 2021/10/18 12:39:34 fetching corpus: 1900, signal 164123/186239 (executing program) 2021/10/18 12:39:34 fetching corpus: 1950, signal 165198/187525 (executing program) 2021/10/18 12:39:34 fetching corpus: 2000, signal 166400/188840 (executing program) 2021/10/18 12:39:35 fetching corpus: 2050, signal 167826/190290 (executing program) 2021/10/18 12:39:35 fetching corpus: 2100, signal 169418/191823 (executing program) 2021/10/18 12:39:35 fetching corpus: 2150, signal 170339/192913 (executing program) 2021/10/18 12:39:35 fetching corpus: 2200, signal 171398/194055 (executing program) 2021/10/18 12:39:35 fetching corpus: 2250, signal 172597/195247 (executing program) 2021/10/18 12:39:35 fetching corpus: 2300, signal 174403/196792 (executing program) 2021/10/18 12:39:35 fetching corpus: 2350, signal 175053/197618 (executing program) 2021/10/18 12:39:35 fetching corpus: 2400, signal 176042/198657 (executing program) 2021/10/18 12:39:36 fetching corpus: 2450, signal 177835/200103 (executing program) 2021/10/18 12:39:36 fetching corpus: 2500, signal 178950/201152 (executing program) 2021/10/18 12:39:36 fetching corpus: 2550, signal 179820/202031 (executing program) 2021/10/18 12:39:36 fetching corpus: 2600, signal 180917/203045 (executing program) 2021/10/18 12:39:36 fetching corpus: 2650, signal 181589/203837 (executing program) 2021/10/18 12:39:37 fetching corpus: 2700, signal 182555/204733 (executing program) 2021/10/18 12:39:37 fetching corpus: 2750, signal 183481/205643 (executing program) 2021/10/18 12:39:37 fetching corpus: 2800, signal 184434/206557 (executing program) 2021/10/18 12:39:37 fetching corpus: 2850, signal 185213/207322 (executing program) 2021/10/18 12:39:37 fetching corpus: 2900, signal 186291/208288 (executing program) 2021/10/18 12:39:37 fetching corpus: 2950, signal 187187/209061 (executing program) 2021/10/18 12:39:38 fetching corpus: 3000, signal 188034/209826 (executing program) 2021/10/18 12:39:38 fetching corpus: 3050, signal 188907/210621 (executing program) 2021/10/18 12:39:38 fetching corpus: 3100, signal 189405/211214 (executing program) 2021/10/18 12:39:38 fetching corpus: 3150, signal 190219/211931 (executing program) 2021/10/18 12:39:38 fetching corpus: 3200, signal 191043/212612 (executing program) 2021/10/18 12:39:38 fetching corpus: 3250, signal 191755/213249 (executing program) 2021/10/18 12:39:38 fetching corpus: 3300, signal 192941/214115 (executing program) 2021/10/18 12:39:39 fetching corpus: 3350, signal 193838/214797 (executing program) 2021/10/18 12:39:39 fetching corpus: 3400, signal 194816/215491 (executing program) 2021/10/18 12:39:39 fetching corpus: 3450, signal 195773/216143 (executing program) 2021/10/18 12:39:39 fetching corpus: 3500, signal 196478/216689 (executing program) 2021/10/18 12:39:39 fetching corpus: 3550, signal 197492/217356 (executing program) 2021/10/18 12:39:40 fetching corpus: 3600, signal 198123/217864 (executing program) 2021/10/18 12:39:40 fetching corpus: 3650, signal 199100/218535 (executing program) 2021/10/18 12:39:40 fetching corpus: 3700, signal 199848/219047 (executing program) 2021/10/18 12:39:40 fetching corpus: 3750, signal 200545/219526 (executing program) 2021/10/18 12:39:40 fetching corpus: 3800, signal 201699/220150 (executing program) 2021/10/18 12:39:40 fetching corpus: 3850, signal 202572/220666 (executing program) 2021/10/18 12:39:41 fetching corpus: 3900, signal 203342/221145 (executing program) 2021/10/18 12:39:41 fetching corpus: 3950, signal 203984/221545 (executing program) 2021/10/18 12:39:41 fetching corpus: 4000, signal 204726/221950 (executing program) 2021/10/18 12:39:41 fetching corpus: 4050, signal 205557/222412 (executing program) 2021/10/18 12:39:41 fetching corpus: 4100, signal 206094/222748 (executing program) 2021/10/18 12:39:42 fetching corpus: 4150, signal 206773/223096 (executing program) 2021/10/18 12:39:42 fetching corpus: 4200, signal 207577/223485 (executing program) 2021/10/18 12:39:42 fetching corpus: 4250, signal 208079/223759 (executing program) 2021/10/18 12:39:42 fetching corpus: 4300, signal 208797/224115 (executing program) 2021/10/18 12:39:42 fetching corpus: 4350, signal 209532/224467 (executing program) 2021/10/18 12:39:42 fetching corpus: 4400, signal 210406/224827 (executing program) 2021/10/18 12:39:43 fetching corpus: 4450, signal 211112/225128 (executing program) 2021/10/18 12:39:43 fetching corpus: 4500, signal 211572/225354 (executing program) 2021/10/18 12:39:43 fetching corpus: 4550, signal 212637/225730 (executing program) 2021/10/18 12:39:43 fetching corpus: 4600, signal 213617/226053 (executing program) 2021/10/18 12:39:43 fetching corpus: 4650, signal 214148/226285 (executing program) 2021/10/18 12:39:43 fetching corpus: 4700, signal 214924/226541 (executing program) 2021/10/18 12:39:44 fetching corpus: 4750, signal 215761/226779 (executing program) 2021/10/18 12:39:44 fetching corpus: 4800, signal 216378/226994 (executing program) 2021/10/18 12:39:44 fetching corpus: 4850, signal 217022/227183 (executing program) 2021/10/18 12:39:44 fetching corpus: 4900, signal 217753/227373 (executing program) 2021/10/18 12:39:44 fetching corpus: 4950, signal 218293/227546 (executing program) 2021/10/18 12:39:44 fetching corpus: 5000, signal 218886/227698 (executing program) 2021/10/18 12:39:45 fetching corpus: 5050, signal 219632/227859 (executing program) 2021/10/18 12:39:45 fetching corpus: 5100, signal 220331/228011 (executing program) 2021/10/18 12:39:45 fetching corpus: 5150, signal 220802/228147 (executing program) 2021/10/18 12:39:45 fetching corpus: 5200, signal 221633/228295 (executing program) 2021/10/18 12:39:45 fetching corpus: 5250, signal 222030/228374 (executing program) 2021/10/18 12:39:45 fetching corpus: 5300, signal 222882/228496 (executing program) 2021/10/18 12:39:46 fetching corpus: 5350, signal 223403/228591 (executing program) 2021/10/18 12:39:46 fetching corpus: 5400, signal 224070/228668 (executing program) 2021/10/18 12:39:46 fetching corpus: 5450, signal 224560/228728 (executing program) 2021/10/18 12:39:46 fetching corpus: 5500, signal 225243/228787 (executing program) 2021/10/18 12:39:46 fetching corpus: 5550, signal 225960/228838 (executing program) 2021/10/18 12:39:46 fetching corpus: 5600, signal 226377/228871 (executing program) 2021/10/18 12:39:46 fetching corpus: 5612, signal 226503/228893 (executing program) 2021/10/18 12:39:46 fetching corpus: 5612, signal 226503/228904 (executing program) 2021/10/18 12:39:46 fetching corpus: 5612, signal 226503/228904 (executing program) 2021/10/18 12:39:48 starting 6 fuzzer processes 12:39:48 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "9bcb10", 0x10, 0x11, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 12:39:48 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000540)) 12:39:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003840)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0xa, 0x0, &(0x7f0000000380)) 12:39:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 12:39:49 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x94, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x67, 0x33, @probe_response={@with_ht={{{}, {}, @device_b, @broadcast, @from_mac}}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x94}}, 0x0) 12:39:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) [ 92.267165][ T6575] chnl_net:caif_netlink_parms(): no params data found [ 92.570786][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.579504][ T6575] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.609990][ T6575] device bridge_slave_0 entered promiscuous mode [ 92.640185][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.647282][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.663139][ T6575] device bridge_slave_1 entered promiscuous mode [ 92.695717][ T6577] chnl_net:caif_netlink_parms(): no params data found [ 92.729861][ T6575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.761593][ T6575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.805424][ T6575] team0: Port device team_slave_0 added [ 92.816418][ T6575] team0: Port device team_slave_1 added [ 92.894431][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.903213][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.930166][ T6575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.942838][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.950047][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.957802][ T6577] device bridge_slave_0 entered promiscuous mode [ 92.971210][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.983511][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.009875][ T6575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.030374][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.037600][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.086189][ T6577] device bridge_slave_1 entered promiscuous mode [ 93.171066][ T6577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.236513][ T6575] device hsr_slave_0 entered promiscuous mode [ 93.245490][ T6575] device hsr_slave_1 entered promiscuous mode [ 93.254765][ T6577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.363423][ T6577] team0: Port device team_slave_0 added [ 93.373950][ T6577] team0: Port device team_slave_1 added [ 93.381563][ T6579] chnl_net:caif_netlink_parms(): no params data found [ 93.496236][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.509019][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.548977][ T6577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.614661][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.623891][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.650858][ T6577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.757162][ T6577] device hsr_slave_0 entered promiscuous mode [ 93.764792][ T6577] device hsr_slave_1 entered promiscuous mode [ 93.772813][ T6577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.783043][ T6577] Cannot create hsr debugfs directory [ 93.849235][ T2396] Bluetooth: hci0: command 0x0409 tx timeout [ 93.876200][ T6604] chnl_net:caif_netlink_parms(): no params data found [ 93.944334][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.952159][ T6579] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.963186][ T6579] device bridge_slave_0 entered promiscuous mode [ 94.003324][ T6579] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.010700][ T6579] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.019987][ T6579] device bridge_slave_1 entered promiscuous mode [ 94.088013][ T2978] Bluetooth: hci1: command 0x0409 tx timeout [ 94.151405][ T6575] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.171755][ T6579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.201904][ T6575] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.211613][ T6575] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.227607][ T6579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.242181][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.249844][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.257573][ T6604] device bridge_slave_0 entered promiscuous mode [ 94.270135][ T6575] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.290304][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.300551][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.309365][ T6604] device bridge_slave_1 entered promiscuous mode [ 94.366275][ T6604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.405995][ T6604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.420467][ T6579] team0: Port device team_slave_0 added [ 94.432441][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 94.477135][ T6579] team0: Port device team_slave_1 added [ 94.546068][ T6757] chnl_net:caif_netlink_parms(): no params data found [ 94.576375][ T6604] team0: Port device team_slave_0 added [ 94.586978][ T6604] team0: Port device team_slave_1 added [ 94.624393][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.632470][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.659619][ T6579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.707564][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.714718][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.746053][ T6579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.770862][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.778026][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.806081][ T6604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.823678][ T6577] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.849083][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.856055][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.883017][ T6604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.917180][ T6577] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.926740][ T6577] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.940194][ T6579] device hsr_slave_0 entered promiscuous mode [ 94.947377][ T6579] device hsr_slave_1 entered promiscuous mode [ 94.954564][ T6579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.962511][ T6579] Cannot create hsr debugfs directory [ 95.019091][ T6577] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.044342][ T6604] device hsr_slave_0 entered promiscuous mode [ 95.053605][ T6604] device hsr_slave_1 entered promiscuous mode [ 95.060345][ T6604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.068515][ T6604] Cannot create hsr debugfs directory [ 95.076236][ T6757] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.086699][ T6757] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.095945][ T6757] device bridge_slave_0 entered promiscuous mode [ 95.112096][ T6757] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.119587][ T6757] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.127516][ T6757] device bridge_slave_1 entered promiscuous mode [ 95.137718][ T2995] Bluetooth: hci4: command 0x0409 tx timeout [ 95.236789][ T6757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.251399][ T6757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.365503][ T6757] team0: Port device team_slave_0 added [ 95.413428][ T6757] team0: Port device team_slave_1 added [ 95.453204][ T6575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.501325][ T6757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.508674][ T6757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.535286][ T2396] Bluetooth: hci5: command 0x0409 tx timeout [ 95.536342][ T6757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.571048][ T6757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.578217][ T6757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.605719][ T6757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.621730][ T6575] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.639754][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.650654][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.658720][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.667241][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.677319][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.684681][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.693026][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.702787][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.711420][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.718665][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.773599][ T6757] device hsr_slave_0 entered promiscuous mode [ 95.780819][ T6757] device hsr_slave_1 entered promiscuous mode [ 95.787991][ T6757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.795566][ T6757] Cannot create hsr debugfs directory [ 95.804331][ T6577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.814779][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.849894][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.864712][ T6579] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.884970][ T6579] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.901465][ T6579] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.930433][ T7912] Bluetooth: hci0: command 0x041b tx timeout [ 95.949581][ T6579] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.981273][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.990221][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.001736][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.012030][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.021430][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.070198][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.078501][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.086177][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.095707][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.105376][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.115283][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.124371][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.139177][ T6577] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.187460][ T7912] Bluetooth: hci1: command 0x041b tx timeout [ 96.193740][ T6604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.206579][ T6604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.223413][ T6575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.233428][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.243863][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.253566][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.260735][ T7912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.271283][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.285129][ T6604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.296447][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.305152][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.314237][ T8115] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.321402][ T8115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.331091][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.360528][ T6604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.370179][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.409004][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.422772][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.431584][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.445067][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.455185][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.477719][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.485225][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.499626][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 96.518275][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.527006][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.542377][ T6575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.562517][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.571445][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.585785][ T6757] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.603086][ T6757] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.613392][ T6757] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.642910][ T6757] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.654024][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.696669][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.707666][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.725610][ T6579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.756302][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.768905][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.779399][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.787092][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.825656][ T6575] device veth0_vlan entered promiscuous mode [ 96.834046][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.845546][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.862239][ T6579] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.880282][ T6577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.889118][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.896986][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.917085][ T6575] device veth1_vlan entered promiscuous mode [ 96.933343][ T6604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.943121][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.953307][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.964711][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.973846][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.981041][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.013128][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.021523][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.029969][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.039172][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.048233][ T2396] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.055414][ T2396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.064272][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.111394][ T6577] device veth0_vlan entered promiscuous mode [ 97.119905][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.129603][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.138524][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.147926][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.155637][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.164220][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.172911][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.182172][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.192271][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.202064][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.210579][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.218090][ T8114] Bluetooth: hci4: command 0x041b tx timeout [ 97.218952][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.250606][ T6604] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.264618][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.275363][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.284764][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.293856][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.302489][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.311502][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.320141][ T2396] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.327295][ T2396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.335977][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.348397][ T6577] device veth1_vlan entered promiscuous mode [ 97.362832][ T6579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.374351][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.395842][ T6757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.410138][ T6575] device veth0_macvtap entered promiscuous mode [ 97.417084][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.425255][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.437401][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.446027][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.455235][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.464027][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.472669][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.481873][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.490732][ T2396] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.498067][ T2396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.505795][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.535800][ T6757] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.551604][ T6575] device veth1_macvtap entered promiscuous mode [ 97.559513][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.571243][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.579293][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.587095][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.595613][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.603375][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.629403][ T2396] Bluetooth: hci5: command 0x041b tx timeout [ 97.641798][ T6579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.658369][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.666908][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.676646][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.686467][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.693634][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.702115][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.711568][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.720760][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.727929][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.735549][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.744903][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.754354][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.763752][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.783672][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.813592][ T6577] device veth0_macvtap entered promiscuous mode [ 97.828096][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.835981][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.844830][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.855292][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.864875][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.874548][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.883832][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.892950][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.901953][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.910773][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.920081][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.929449][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.940391][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.949315][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.961605][ T6604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.976601][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.003016][ T6577] device veth1_macvtap entered promiscuous mode [ 98.009997][ T2396] Bluetooth: hci0: command 0x040f tx timeout [ 98.018743][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.028233][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.036500][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.046859][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.056172][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.065485][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.074817][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.085748][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.125617][ T6757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.136407][ T6757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.152593][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.162397][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.172624][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.181671][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.190521][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.200506][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.208637][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.216985][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.225895][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.234829][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.244857][ T6579] device veth0_vlan entered promiscuous mode [ 98.247590][ T8223] Bluetooth: hci1: command 0x040f tx timeout [ 98.257038][ T6575] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.267670][ T6575] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.276838][ T6575] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.286949][ T6575] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.313922][ T6604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.332021][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.342069][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.350520][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.365529][ T6579] device veth1_vlan entered promiscuous mode [ 98.475830][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 98.487999][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.501482][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.513193][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 98.524308][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.536079][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.552305][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.561775][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.573371][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.577682][ T8114] Bluetooth: hci2: command 0x040f tx timeout [ 98.590448][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.621968][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.637479][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.645002][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.654720][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.693347][ T6577] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.715817][ T6577] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.736210][ T6577] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.745848][ T6577] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.773494][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.782758][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.800543][ T6757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.814685][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.848268][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.880636][ T6579] device veth0_macvtap entered promiscuous mode [ 98.973166][ T6579] device veth1_macvtap entered promiscuous mode [ 99.035991][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.045378][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.055037][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.064314][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.074750][ T6604] device veth0_vlan entered promiscuous mode [ 99.120336][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.155188][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.172471][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.195486][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 99.230881][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.242106][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.252880][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 99.264126][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.275942][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.292022][ T6604] device veth1_vlan entered promiscuous mode [ 99.299308][ T7912] Bluetooth: hci4: command 0x040f tx timeout [ 99.320421][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.328876][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.338547][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.346400][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.356109][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.371427][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 99.387132][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.395193][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.407003][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.416837][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 99.428060][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.440232][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.469266][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.481605][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.493542][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.520919][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.521316][ T6579] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.535506][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.541182][ T6579] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.556175][ T6579] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.565697][ T6579] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.601345][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.610845][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.613228][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.622194][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.636130][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.645037][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.687496][ T20] Bluetooth: hci5: command 0x040f tx timeout [ 99.699266][ T6604] device veth0_macvtap entered promiscuous mode [ 99.712788][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.723508][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.735304][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.793101][ T6757] device veth0_vlan entered promiscuous mode 12:39:57 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "9bcb10", 0x10, 0x11, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) [ 99.849544][ T6604] device veth1_macvtap entered promiscuous mode [ 99.858013][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.878775][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 12:39:57 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000540)) [ 99.914803][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.952611][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 12:39:57 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "9bcb10", 0x10, 0x11, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) [ 99.965712][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.002410][ T6757] device veth1_vlan entered promiscuous mode [ 100.087699][ T20] Bluetooth: hci0: command 0x0419 tx timeout 12:39:57 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000540)) [ 100.130199][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 100.152005][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 12:39:58 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "9bcb10", 0x10, 0x11, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) [ 100.176121][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 100.202527][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.237629][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 100.259312][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 12:39:58 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000540)) [ 100.284559][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.361955][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.370841][ T2951] Bluetooth: hci1: command 0x0419 tx timeout [ 100.375650][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 12:39:58 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000540)) [ 100.420036][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 100.460043][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 12:39:58 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 100.475483][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 100.498683][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.526479][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 100.557144][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.575378][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.586140][ T254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.606686][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.616673][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.642099][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.653039][ T254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.657587][ T8115] Bluetooth: hci2: command 0x0419 tx timeout [ 100.670692][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.718033][ T6604] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.738729][ T6604] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.761004][ T6604] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.770782][ T6604] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.789510][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.806543][ T8323] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 100.829706][ T8323] netlink: 'syz-executor.1': attribute type 18 has an invalid length. [ 100.863022][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.876301][ T6757] device veth0_macvtap entered promiscuous mode [ 100.954853][ T6757] device veth1_macvtap entered promiscuous mode [ 100.974727][ T1214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.993839][ T1214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.025310][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 101.065733][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.077098][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 101.088163][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.098093][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 101.109106][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.119873][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 101.132635][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.145684][ T6757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.165104][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.173778][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.187717][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.208160][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 101.253652][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.279825][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 101.291474][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 12:39:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003840)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0xa, 0x0, &(0x7f0000000380)) [ 101.302110][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 101.314618][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.325269][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 101.339623][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.357177][ T6757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.377692][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 101.392105][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.406068][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.421756][ T6757] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.450303][ T6757] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.471464][ T6757] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.513113][ T6757] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.546268][ T1214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.591384][ T1214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.635334][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.677463][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.685684][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.717171][ T254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.720327][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.725638][ T254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.767064][ T5] Bluetooth: hci5: command 0x0419 tx timeout [ 101.831951][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.879131][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.904489][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.922333][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.054855][ T8391] chnl_net:caif_netlink_parms(): no params data found [ 106.127315][ T8391] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.134661][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.144518][ T8391] device bridge_slave_0 entered promiscuous mode [ 106.158475][ T8391] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.165876][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.177515][ T8391] device bridge_slave_1 entered promiscuous mode [ 106.210167][ T8391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.221791][ T8391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.260037][ T8391] team0: Port device team_slave_0 added [ 106.268586][ T8391] team0: Port device team_slave_1 added [ 106.299136][ T8391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.306963][ T8391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.334634][ T8391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.349072][ T8391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.356337][ T8391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.382333][ T8391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.426841][ T8391] device hsr_slave_0 entered promiscuous mode [ 106.433897][ T8391] device hsr_slave_1 entered promiscuous mode [ 106.440923][ T8391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.449873][ T8391] Cannot create hsr debugfs directory [ 106.580728][ T8391] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.591641][ T8391] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.612655][ T8391] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.627704][ T8391] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.652954][ T8391] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.660560][ T8391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.669181][ T8391] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.676473][ T8391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.731922][ T8391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.751852][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.763108][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.772043][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.782540][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 106.797705][ T8391] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.810951][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.819618][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.827040][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.841112][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.849796][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.857065][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.882642][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.891926][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.907047][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.923639][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.932650][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.944123][ T8391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.971540][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.979339][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.997368][ T8391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.022131][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.035694][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.081982][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.093677][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.107068][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.114840][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.126280][ T8391] device veth0_vlan entered promiscuous mode [ 107.142170][ T8391] device veth1_vlan entered promiscuous mode [ 107.168662][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.177215][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.185455][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.195646][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.208916][ T8391] device veth0_macvtap entered promiscuous mode [ 107.221210][ T8391] device veth1_macvtap entered promiscuous mode [ 107.238537][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.249617][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.260419][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.272345][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.282925][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.294985][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.305394][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.316719][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.329341][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.341098][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.353298][ T8391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.364209][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.373595][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.382873][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.392452][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.405178][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 107.416601][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.426506][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 107.437171][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.447434][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 107.458578][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.469442][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 107.483249][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.493453][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 107.504379][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.517429][ T8391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.530412][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.541334][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.554891][ T8391] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.563963][ T8391] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.580342][ T8391] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.593681][ T8391] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.696151][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.704245][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.724435][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.755403][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.772641][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.785704][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:40:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 12:40:05 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000540)) 12:40:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003840)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0xa, 0x0, &(0x7f0000000380)) 12:40:05 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 12:40:05 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x94, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x67, 0x33, @probe_response={@with_ht={{{}, {}, @device_b, @broadcast, @from_mac}}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x94}}, 0x0) 12:40:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) [ 107.846430][ T7912] Bluetooth: hci3: command 0x0409 tx timeout 12:40:05 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000540)) [ 108.026209][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 12:40:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 12:40:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) [ 108.091134][ T8753] netlink: 'syz-executor.1': attribute type 15 has an invalid length. 12:40:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003840)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0xa, 0x0, &(0x7f0000000380)) 12:40:05 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x94, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x67, 0x33, @probe_response={@with_ht={{{}, {}, @device_b, @broadcast, @from_mac}}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x94}}, 0x0) [ 108.134653][ T8753] netlink: 'syz-executor.1': attribute type 18 has an invalid length. 12:40:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 12:40:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x94, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x67, 0x33, @probe_response={@with_ht={{{}, {}, @device_b, @broadcast, @from_mac}}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x94}}, 0x0) 12:40:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 12:40:06 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x94, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x67, 0x33, @probe_response={@with_ht={{{}, {}, @device_b, @broadcast, @from_mac}}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x94}}, 0x0) 12:40:06 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 12:40:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r0, r1, 0x0, 0x8000) 12:40:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001440)={0x54, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x54}}, 0x0) 12:40:06 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f001000"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "0bf0ab1dbf1e288bd6a6f180b3676c24e94ecf107003510b69c7fd831318b92d53f597bd93bb594c367cbefdc08a5114a72b24ed42f86c5397d1dcd5e4ddc512259b9c52ad48048885d2dd7f6c0c723279b0963f3628ddb303047a77bd9679709b756b1652518599d9df82829d6aaa505b22475581d613080a948424a1789c34d37606e125f76fb27ad81ad247fe7c9b9ba6fc875f29e0add3355531c32bdefc5ad55f73cb37e5079de087601b31709e6aa913f60525f598bf29edfe9b02dae7b949c00ae68fc0a898c503db636b8d6f0ed0f65db9b6b9d17288e7f308f2863548e7b164ad27cd663a74a8bd1be6c60cef278a2d8a80ab47bb3a0a8cf76c5a23"}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x0, 0x0, 0xa}}]}}]}, 0x170}}, 0x0) 12:40:06 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x94, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x67, 0x33, @probe_response={@with_ht={{{}, {}, @device_b, @broadcast, @from_mac}}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x94}}, 0x0) 12:40:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) writev(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7e7afa7ffb9eccdec261973572b2dd7d36d1a1ddb069cc9a9c0d01dba68d4e8789ce78c47fd35220e2341900000000d90100f7fd30066ccf51d75a30ace41b3c08b1c7785ad3764889864448e0da82609777853b80c05e3a174101c0538e8d3bef8758e5d2436482e86f34db45838b7c796317e9b85e43ffee0aff54c2768981c4f17e1eea299b9efc445b99499de909090501375516fd4cf9ff1e9c9aaf46c82a5093c0dc5374f80925b635e45a24bc9a9d6f15c57f598394a3c7a7"], 0x9ad) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) [ 108.896382][ T25] audit: type=1804 audit(1634560806.683:2): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir520509323/syzkaller.ebrUcB/4/memory.events" dev="sda1" ino=13939 res=1 errno=0 [ 108.913321][ T8790] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:40:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001440)={0x54, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x54}}, 0x0) [ 109.032635][ T8795] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.048627][ T25] audit: type=1804 audit(1634560806.763:3): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir520509323/syzkaller.ebrUcB/4/memory.events" dev="sda1" ino=13939 res=1 errno=0 12:40:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r0, r1, 0x0, 0x8000) 12:40:06 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x94, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x67, 0x33, @probe_response={@with_ht={{{}, {}, @device_b, @broadcast, @from_mac}}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x94}}, 0x0) [ 109.088740][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 12:40:06 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f001000"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x0, 0x0, 0xa}}]}}]}, 0x170}}, 0x0) [ 109.162347][ T8799] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 109.211896][ T8799] netlink: 'syz-executor.1': attribute type 18 has an invalid length. [ 109.271799][ T25] audit: type=1804 audit(1634560807.063:4): pid=8805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir520509323/syzkaller.ebrUcB/5/memory.events" dev="sda1" ino=13953 res=1 errno=0 12:40:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) writev(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7e7afa7ffb9eccdec261973572b2dd7d36d1a1ddb069cc9a9c0d01dba68d4e8789ce78c47fd35220e2341900000000d90100f7fd30066ccf51d75a30ace41b3c08b1c7785ad3764889864448e0da82609777853b80c05e3a174101c0538e8d3bef8758e5d2436482e86f34db45838b7c796317e9b85e43ffee0aff54c2768981c4f17e1eea299b9efc445b99499de909090501375516fd4cf9ff1e9c9aaf46c82a5093c0dc5374f80925b635e45a24bc9a9d6f15c57f598394a3c7a7"], 0x9ad) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 12:40:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001440)={0x54, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x54}}, 0x0) [ 109.334508][ T8809] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 12:40:07 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 12:40:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) writev(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7e7afa7ffb9eccdec261973572b2dd7d36d1a1ddb069cc9a9c0d01dba68d4e8789ce78c47fd35220e2341900000000d90100f7fd30066ccf51d75a30ace41b3c08b1c7785ad3764889864448e0da82609777853b80c05e3a174101c0538e8d3bef8758e5d2436482e86f34db45838b7c796317e9b85e43ffee0aff54c2768981c4f17e1eea299b9efc445b99499de909090501375516fd4cf9ff1e9c9aaf46c82a5093c0dc5374f80925b635e45a24bc9a9d6f15c57f598394a3c7a7"], 0x9ad) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 12:40:07 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f001000"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x0, 0x0, 0xa}}]}}]}, 0x170}}, 0x0) 12:40:07 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r0, r1, 0x0, 0x8000) 12:40:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001440)={0x54, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x54}}, 0x0) [ 109.935885][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 109.946931][ T8829] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.973640][ T25] audit: type=1804 audit(1634560807.763:5): pid=8827 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir520509323/syzkaller.ebrUcB/6/memory.events" dev="sda1" ino=13957 res=1 errno=0 [ 110.057691][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 12:40:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) writev(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7e7afa7ffb9eccdec261973572b2dd7d36d1a1ddb069cc9a9c0d01dba68d4e8789ce78c47fd35220e2341900000000d90100f7fd30066ccf51d75a30ace41b3c08b1c7785ad3764889864448e0da82609777853b80c05e3a174101c0538e8d3bef8758e5d2436482e86f34db45838b7c796317e9b85e43ffee0aff54c2768981c4f17e1eea299b9efc445b99499de909090501375516fd4cf9ff1e9c9aaf46c82a5093c0dc5374f80925b635e45a24bc9a9d6f15c57f598394a3c7a7"], 0x9ad) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 12:40:07 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r0, r1, 0x0, 0x8000) [ 110.125313][ T8832] netlink: 'syz-executor.1': attribute type 15 has an invalid length. 12:40:07 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f001000"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "0bf0ab1dbf1e288bd6a6f180b3676c24e94ecf107003510b69c7fd831318b92d53f597bd93bb594c367cbefdc08a5114a72b24ed42f86c5397d1dcd5e4ddc512259b9c52ad48048885d2dd7f6c0c723279b0963f3628ddb303047a77bd9679709b756b1652518599d9df82829d6aaa505b22475581d613080a948424a1789c34d37606e125f76fb27ad81ad247fe7c9b9ba6fc875f29e0add3355531c32bdefc5ad55f73cb37e5079de087601b31709e6aa913f60525f598bf29edfe9b02dae7b949c00ae68fc0a898c503db636b8d6f0ed0f65db9b6b9d17288e7f308f2863548e7b164ad27cd663a74a8bd1be6c60cef278a2d8a80ab47bb3a0a8cf76c5a23"}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x0, 0x0, 0xa}}]}}]}, 0x170}}, 0x0) [ 110.167490][ T8832] netlink: 'syz-executor.1': attribute type 18 has an invalid length. 12:40:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) writev(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7e7afa7ffb9eccdec261973572b2dd7d36d1a1ddb069cc9a9c0d01dba68d4e8789ce78c47fd35220e2341900000000d90100f7fd30066ccf51d75a30ace41b3c08b1c7785ad3764889864448e0da82609777853b80c05e3a174101c0538e8d3bef8758e5d2436482e86f34db45838b7c796317e9b85e43ffee0aff54c2768981c4f17e1eea299b9efc445b99499de909090501375516fd4cf9ff1e9c9aaf46c82a5093c0dc5374f80925b635e45a24bc9a9d6f15c57f598394a3c7a7"], 0x9ad) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) [ 110.354733][ T8842] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.366245][ T25] audit: type=1804 audit(1634560808.163:6): pid=8841 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir520509323/syzkaller.ebrUcB/7/memory.events" dev="sda1" ino=13967 res=1 errno=0 12:40:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) writev(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7e7afa7ffb9eccdec261973572b2dd7d36d1a1ddb069cc9a9c0d01dba68d4e8789ce78c47fd35220e2341900000000d90100f7fd30066ccf51d75a30ace41b3c08b1c7785ad3764889864448e0da82609777853b80c05e3a174101c0538e8d3bef8758e5d2436482e86f34db45838b7c796317e9b85e43ffee0aff54c2768981c4f17e1eea299b9efc445b99499de909090501375516fd4cf9ff1e9c9aaf46c82a5093c0dc5374f80925b635e45a24bc9a9d6f15c57f598394a3c7a7"], 0x9ad) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 12:40:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) writev(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7e7afa7ffb9eccdec261973572b2dd7d36d1a1ddb069cc9a9c0d01dba68d4e8789ce78c47fd35220e2341900000000d90100f7fd30066ccf51d75a30ace41b3c08b1c7785ad3764889864448e0da82609777853b80c05e3a174101c0538e8d3bef8758e5d2436482e86f34db45838b7c796317e9b85e43ffee0aff54c2768981c4f17e1eea299b9efc445b99499de909090501375516fd4cf9ff1e9c9aaf46c82a5093c0dc5374f80925b635e45a24bc9a9d6f15c57f598394a3c7a7"], 0x9ad) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 12:40:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) writev(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7e7afa7ffb9eccdec261973572b2dd7d36d1a1ddb069cc9a9c0d01dba68d4e8789ce78c47fd35220e2341900000000d90100f7fd30066ccf51d75a30ace41b3c08b1c7785ad3764889864448e0da82609777853b80c05e3a174101c0538e8d3bef8758e5d2436482e86f34db45838b7c796317e9b85e43ffee0aff54c2768981c4f17e1eea299b9efc445b99499de909090501375516fd4cf9ff1e9c9aaf46c82a5093c0dc5374f80925b635e45a24bc9a9d6f15c57f598394a3c7a7"], 0x9ad) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 12:40:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) writev(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7e7afa7ffb9eccdec261973572b2dd7d36d1a1ddb069cc9a9c0d01dba68d4e8789ce78c47fd35220e2341900000000d90100f7fd30066ccf51d75a30ace41b3c08b1c7785ad3764889864448e0da82609777853b80c05e3a174101c0538e8d3bef8758e5d2436482e86f34db45838b7c796317e9b85e43ffee0aff54c2768981c4f17e1eea299b9efc445b99499de909090501375516fd4cf9ff1e9c9aaf46c82a5093c0dc5374f80925b635e45a24bc9a9d6f15c57f598394a3c7a7"], 0x9ad) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 12:40:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f001000"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x0, 0x0, 0xa}}]}}]}, 0x170}}, 0x0) [ 111.124042][ T8870] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:40:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) writev(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7e7afa7ffb9eccdec261973572b2dd7d36d1a1ddb069cc9a9c0d01dba68d4e8789ce78c47fd35220e2341900000000d90100f7fd30066ccf51d75a30ace41b3c08b1c7785ad3764889864448e0da82609777853b80c05e3a174101c0538e8d3bef8758e5d2436482e86f34db45838b7c796317e9b85e43ffee0aff54c2768981c4f17e1eea299b9efc445b99499de909090501375516fd4cf9ff1e9c9aaf46c82a5093c0dc5374f80925b635e45a24bc9a9d6f15c57f598394a3c7a7"], 0x9ad) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 12:40:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f001000"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "0bf0ab1dbf1e288bd6a6f180b3676c24e94ecf107003510b69c7fd831318b92d53f597bd93bb594c367cbefdc08a5114a72b24ed42f86c5397d1dcd5e4ddc512259b9c52ad48048885d2dd7f6c0c723279b0963f3628ddb303047a77bd9679709b756b1652518599d9df82829d6aaa505b22475581d613080a948424a1789c34d37606e125f76fb27ad81ad247fe7c9b9ba6fc875f29e0add3355531c32bdefc5ad55f73cb37e5079de087601b31709e6aa913f60525f598bf29edfe9b02dae7b949c00ae68fc0a898c503db636b8d6f0ed0f65db9b6b9d17288e7f308f2863548e7b164ad27cd663a74a8bd1be6c60cef278a2d8a80ab47bb3a0a8cf76c5a23"}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x0, 0x0, 0xa}}]}}]}, 0x170}}, 0x0) 12:40:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) writev(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7e7afa7ffb9eccdec261973572b2dd7d36d1a1ddb069cc9a9c0d01dba68d4e8789ce78c47fd35220e2341900000000d90100f7fd30066ccf51d75a30ace41b3c08b1c7785ad3764889864448e0da82609777853b80c05e3a174101c0538e8d3bef8758e5d2436482e86f34db45838b7c796317e9b85e43ffee0aff54c2768981c4f17e1eea299b9efc445b99499de909090501375516fd4cf9ff1e9c9aaf46c82a5093c0dc5374f80925b635e45a24bc9a9d6f15c57f598394a3c7a7"], 0x9ad) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 12:40:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) writev(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7e7afa7ffb9eccdec261973572b2dd7d36d1a1ddb069cc9a9c0d01dba68d4e8789ce78c47fd35220e2341900000000d90100f7fd30066ccf51d75a30ace41b3c08b1c7785ad3764889864448e0da82609777853b80c05e3a174101c0538e8d3bef8758e5d2436482e86f34db45838b7c796317e9b85e43ffee0aff54c2768981c4f17e1eea299b9efc445b99499de909090501375516fd4cf9ff1e9c9aaf46c82a5093c0dc5374f80925b635e45a24bc9a9d6f15c57f598394a3c7a7"], 0x9ad) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) [ 111.463751][ T8880] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:40:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) writev(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7e7afa7ffb9eccdec261973572b2dd7d36d1a1ddb069cc9a9c0d01dba68d4e8789ce78c47fd35220e2341900000000d90100f7fd30066ccf51d75a30ace41b3c08b1c7785ad3764889864448e0da82609777853b80c05e3a174101c0538e8d3bef8758e5d2436482e86f34db45838b7c796317e9b85e43ffee0aff54c2768981c4f17e1eea299b9efc445b99499de909090501375516fd4cf9ff1e9c9aaf46c82a5093c0dc5374f80925b635e45a24bc9a9d6f15c57f598394a3c7a7"], 0x9ad) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 12:40:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f001000"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x0, 0x0, 0xa}}]}}]}, 0x170}}, 0x0) 12:40:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) writev(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7e7afa7ffb9eccdec261973572b2dd7d36d1a1ddb069cc9a9c0d01dba68d4e8789ce78c47fd35220e2341900000000d90100f7fd30066ccf51d75a30ace41b3c08b1c7785ad3764889864448e0da82609777853b80c05e3a174101c0538e8d3bef8758e5d2436482e86f34db45838b7c796317e9b85e43ffee0aff54c2768981c4f17e1eea299b9efc445b99499de909090501375516fd4cf9ff1e9c9aaf46c82a5093c0dc5374f80925b635e45a24bc9a9d6f15c57f598394a3c7a7"], 0x9ad) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 12:40:09 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r0, r1, 0x0, 0x8000) [ 112.005663][ T7912] Bluetooth: hci3: command 0x040f tx timeout 12:40:10 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) 12:40:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) writev(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7e7afa7ffb9eccdec261973572b2dd7d36d1a1ddb069cc9a9c0d01dba68d4e8789ce78c47fd35220e2341900000000d90100f7fd30066ccf51d75a30ace41b3c08b1c7785ad3764889864448e0da82609777853b80c05e3a174101c0538e8d3bef8758e5d2436482e86f34db45838b7c796317e9b85e43ffee0aff54c2768981c4f17e1eea299b9efc445b99499de909090501375516fd4cf9ff1e9c9aaf46c82a5093c0dc5374f80925b635e45a24bc9a9d6f15c57f598394a3c7a7"], 0x9ad) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) [ 112.210938][ T25] audit: type=1804 audit(1634560810.003:7): pid=8906 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260406170/syzkaller.8XNnfq/11/memory.events" dev="sda1" ino=13959 res=1 errno=0 12:40:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) writev(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7e7afa7ffb9eccdec261973572b2dd7d36d1a1ddb069cc9a9c0d01dba68d4e8789ce78c47fd35220e2341900000000d90100f7fd30066ccf51d75a30ace41b3c08b1c7785ad3764889864448e0da82609777853b80c05e3a174101c0538e8d3bef8758e5d2436482e86f34db45838b7c796317e9b85e43ffee0aff54c2768981c4f17e1eea299b9efc445b99499de909090501375516fd4cf9ff1e9c9aaf46c82a5093c0dc5374f80925b635e45a24bc9a9d6f15c57f598394a3c7a7"], 0x9ad) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 12:40:10 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r0, r1, 0x0, 0x8000) [ 112.430563][ T25] audit: type=1804 audit(1634560810.223:8): pid=8916 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260406170/syzkaller.8XNnfq/12/memory.events" dev="sda1" ino=13962 res=1 errno=0 12:40:10 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r0, r1, 0x0, 0x8000) 12:40:10 executing program 0: unshare(0x40000000) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xffff}]}}]}, 0x38}}, 0x0) r3 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x536, 0x0, 0x0, 0x0, 0x0, 0x601}}], 0x400000000000107, 0x0) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r4, &(0x7f0000000d00), 0x1bdd307, 0x0) [ 112.705403][ T25] audit: type=1804 audit(1634560810.493:9): pid=8922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260406170/syzkaller.8XNnfq/13/memory.events" dev="sda1" ino=13956 res=1 errno=0 12:40:10 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x4) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe3e) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 12:40:10 executing program 1: pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SFACILITIES(r0, 0x5452, &(0x7f0000000000)={0x57}) write$cgroup_pressure(r1, &(0x7f0000000040)={'some'}, 0x2f) 12:40:11 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x4) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe3e) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 12:40:11 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) 12:40:11 executing program 1: pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SFACILITIES(r0, 0x5452, &(0x7f0000000000)={0x57}) write$cgroup_pressure(r1, &(0x7f0000000040)={'some'}, 0x2f) 12:40:11 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x4) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe3e) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 12:40:11 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x4) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe3e) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 12:40:11 executing program 1: pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SFACILITIES(r0, 0x5452, &(0x7f0000000000)={0x57}) write$cgroup_pressure(r1, &(0x7f0000000040)={'some'}, 0x2f) 12:40:11 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x4) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe3e) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 12:40:11 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x4) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe3e) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 12:40:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x300, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x5c}}, 0x0) [ 114.087348][ T8115] Bluetooth: hci3: command 0x0419 tx timeout [ 118.565205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.573694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.135208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.143448][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.045776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.054214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.164649][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.173037][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.725044][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.733259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.646112][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.652747][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 156.323206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.331429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.363744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.372155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.012504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.020800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.493089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.501559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.081971][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.088272][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.441892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.450004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.640796][ T2951] Bluetooth: hci5: command 0x0406 tx timeout [ 216.646916][ T2951] Bluetooth: hci0: command 0x0406 tx timeout [ 216.651745][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 216.658936][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 216.672681][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 229.920059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.928298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.000054][ T1052] Bluetooth: hci3: command 0x0406 tx timeout [ 250.395477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.403601][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.525161][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.531989][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 275.362354][ T26] INFO: task syz-executor.0:8926 blocked for more than 143 seconds. [ 275.370731][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 275.380903][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.391697][ T26] task:syz-executor.0 state:D stack:26928 pid: 8926 ppid: 6575 flags:0x00004004 [ 275.404380][ T26] Call Trace: [ 275.407718][ T26] __schedule+0xb44/0x5960 [ 275.414663][ T26] ? find_held_lock+0x2d/0x110 [ 275.419559][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 275.426678][ T26] ? io_schedule_timeout+0x140/0x140 [ 275.434532][ T26] schedule+0xd3/0x270 [ 275.438679][ T26] schedule_preempt_disabled+0xf/0x20 [ 275.446303][ T26] __mutex_lock+0xa34/0x12f0 [ 275.450942][ T26] ? ip_tunnel_init_net+0x2d5/0x9d0 [ 275.458564][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 275.466728][ T26] ? ip_tunnel_init_net+0x14e/0x9d0 [ 275.474170][ T26] ip_tunnel_init_net+0x2d5/0x9d0 [ 275.479245][ T26] ? ip_tunnel_changelink+0x540/0x540 [ 275.489387][ T26] ? ipip_exit_batch_net+0x20/0x20 [ 275.494981][ T26] ops_init+0xaf/0x470 [ 275.499886][ T26] setup_net+0x40f/0xa30 [ 275.504814][ T26] ? down_read_killable+0x1a9/0x480 [ 275.510046][ T26] ? ops_init+0x470/0x470 [ 275.515671][ T26] ? rcu_read_lock_sched_held+0x3a/0x70 [ 275.521600][ T26] copy_net_ns+0x319/0x760 [ 275.526291][ T26] create_new_namespaces+0x3f6/0xb20 [ 275.531697][ T26] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 275.537963][ T26] ksys_unshare+0x445/0x920 [ 275.543095][ T26] ? unshare_fd+0x1c0/0x1c0 [ 275.547632][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 275.554479][ T26] __x64_sys_unshare+0x2d/0x40 [ 275.559273][ T26] do_syscall_64+0x35/0xb0 [ 275.564164][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 275.570166][ T26] RIP: 0033:0x7ff30beeea39 [ 275.575016][ T26] RSP: 002b:00007ff309464188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 275.584005][ T26] RAX: ffffffffffffffda RBX: 00007ff30bff1f60 RCX: 00007ff30beeea39 [ 275.594637][ T26] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 275.604639][ T26] RBP: 00007ff30bf48c5f R08: 0000000000000000 R09: 0000000000000000 [ 275.614230][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.622708][ T26] R13: 00007fff47943c4f R14: 00007ff309464300 R15: 0000000000022000 [ 275.630737][ T26] [ 275.630737][ T26] Showing all locks held in the system: [ 275.638899][ T26] 3 locks held by kworker/0:0/5: [ 275.644336][ T26] #0: ffff888010c65d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 275.656801][ T26] #1: ffffc90000ca7db0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 275.667798][ T26] #2: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x83/0xe10 [ 275.678715][ T26] 5 locks held by kworker/u4:1/10: [ 275.684883][ T26] #0: ffff8880b9c31a58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2b/0x120 [ 275.695643][ T26] #1: ffff8880b9c1f9c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39d/0x480 [ 275.710768][ T26] #2: ffff888019f38d80 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0x93/0xe80 [ 275.721076][ T26] #3: ffffffff8b981ee0 (rcu_read_lock){....}-{1:2}, at: ieee80211_sta_active_ibss+0x86/0x350 [ 275.731945][ T26] #4: ffff8880b9c20030 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0xde/0x990 [ 275.741378][ T26] 1 lock held by khungtaskd/26: [ 275.747561][ T26] #0: ffffffff8b981ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 275.757771][ T26] 1 lock held by in:imklog/6398: [ 275.763160][ T26] #0: ffff88807285aaf0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 275.773844][ T26] 3 locks held by kworker/0:4/7912: [ 275.779048][ T26] #0: ffff888148120538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 275.790975][ T26] #1: ffffc9000bf17db0 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 275.802484][ T26] #2: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 275.813659][ T26] 2 locks held by syz-executor.0/8926: [ 275.819291][ T26] #0: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760 [ 275.829395][ T26] #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x2d5/0x9d0 [ 275.839537][ T26] 1 lock held by syz-executor.0/8930: [ 275.845076][ T26] #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 275.854831][ T26] [ 275.857163][ T26] ============================================= [ 275.857163][ T26] [ 275.866031][ T26] NMI backtrace for cpu 1 [ 275.870371][ T26] CPU: 1 PID: 26 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0 [ 275.878880][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.888926][ T26] Call Trace: [ 275.892196][ T26] dump_stack_lvl+0xcd/0x134 [ 275.896983][ T26] nmi_cpu_backtrace.cold+0x47/0x144 [ 275.902284][ T26] ? lapic_can_unplug_cpu+0x80/0x80 [ 275.907569][ T26] nmi_trigger_cpumask_backtrace+0x1ae/0x220 [ 275.913602][ T26] watchdog+0xc1d/0xf50 [ 275.917847][ T26] ? reset_hung_task_detector+0x30/0x30 [ 275.923585][ T26] kthread+0x3e5/0x4d0 [ 275.927673][ T26] ? set_kthread_struct+0x130/0x130 [ 275.933057][ T26] ret_from_fork+0x1f/0x30 [ 275.938423][ T26] Sending NMI from CPU 1 to CPUs 0: [ 275.943942][ C0] NMI backtrace for cpu 0 [ 275.943952][ C0] CPU: 0 PID: 14 Comm: rcu_preempt Not tainted 5.15.0-rc5-syzkaller #0 [ 275.943972][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.943984][ C0] RIP: 0010:lock_acquire+0x13b/0x510 [ 275.944017][ C0] Code: 85 14 01 00 00 65 48 8b 14 25 40 f0 01 00 48 8d ba 1c 0a 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 0c 01 <48> 89 f8 83 e0 07 83 c0 03 38 c8 7c 08 84 c9 0f 85 70 03 00 00 8b [ 275.944035][ C0] RSP: 0018:ffffc90000d37988 EFLAGS: 00000803 [ 275.944051][ C0] RAX: dffffc0000000000 RBX: 1ffff920001a6f33 RCX: 0000000000000000 [ 275.944064][ C0] RDX: ffff888011f09c80 RSI: 0000000000000003 RDI: ffff888011f0a69c [ 275.944077][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffff8880b9c32a0b [ 275.944089][ C0] R10: ffffed1017386541 R11: 0000000000000000 R12: 0000000000000000 [ 275.944101][ C0] R13: 0000000000000000 R14: ffff88801ba206e8 R15: 0000000000000000 [ 275.944113][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 275.944132][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.944147][ C0] CR2: 00007f0d06729010 CR3: 000000002487d000 CR4: 00000000003506f0 [ 275.944159][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 275.944170][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 275.944182][ C0] Call Trace: [ 275.944189][ C0] ? lock_release+0x720/0x720 [ 275.944212][ C0] ? find_held_lock+0x2d/0x110 [ 275.944234][ C0] vtime_task_switch_generic+0xb5/0x5a0 [ 275.944333][ C0] ? finish_task_switch.isra.0+0x6cf/0xb80 [ 275.944357][ C0] finish_task_switch.isra.0+0x6cf/0xb80 [ 275.944379][ C0] ? __switch_to+0x5cc/0x1060 [ 275.944470][ C0] __schedule+0xb4c/0x5960 [ 275.944491][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 275.944518][ C0] ? __mod_timer+0x83c/0xe30 [ 275.944557][ C0] ? run_timer_softirq+0x1c0/0x1d0 [ 275.944575][ C0] ? io_schedule_timeout+0x140/0x140 [ 275.944596][ C0] ? debug_object_destroy+0x210/0x210 [ 275.944646][ C0] schedule+0xd3/0x270 [ 275.944666][ C0] schedule_timeout+0x14a/0x2a0 [ 275.944688][ C0] ? usleep_range+0x170/0x170 [ 275.944710][ C0] ? destroy_timer_on_stack+0x20/0x20 [ 275.944735][ C0] ? btrfs_resize_thread_pool.part.0+0x1fa/0x266 [ 275.944785][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 275.944809][ C0] ? prepare_to_swait_event+0xee/0x470 [ 275.944831][ C0] rcu_gp_fqs_loop+0x186/0x800 [ 275.944855][ C0] ? force_qs_rnp+0x760/0x760 [ 275.944876][ C0] ? rcu_gp_init+0x906/0x12a0 [ 275.944900][ C0] rcu_gp_kthread+0x1de/0x320 [ 275.944921][ C0] ? rcu_gp_init+0x12a0/0x12a0 [ 275.944944][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 275.944968][ C0] ? __kthread_parkme+0x15f/0x220 [ 275.944995][ C0] ? rcu_gp_init+0x12a0/0x12a0 [ 275.945016][ C0] kthread+0x3e5/0x4d0 [ 275.945036][ C0] ? set_kthread_struct+0x130/0x130 [ 275.945059][ C0] ret_from_fork+0x1f/0x30 [ 275.949286][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 276.247090][ T26] CPU: 1 PID: 26 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0 [ 276.255551][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.265710][ T26] Call Trace: [ 276.269000][ T26] dump_stack_lvl+0xcd/0x134 [ 276.273635][ T26] panic+0x2b0/0x6dd [ 276.277734][ T26] ? __warn_printk+0xf3/0xf3 [ 276.282336][ T26] ? lapic_can_unplug_cpu+0x80/0x80 [ 276.287566][ T26] ? preempt_schedule_thunk+0x16/0x18 [ 276.292953][ T26] ? nmi_trigger_cpumask_backtrace+0x191/0x220 [ 276.299203][ T26] ? watchdog.cold+0x130/0x158 [ 276.304017][ T26] watchdog.cold+0x141/0x158 [ 276.308636][ T26] ? reset_hung_task_detector+0x30/0x30 [ 276.314202][ T26] kthread+0x3e5/0x4d0 [ 276.318269][ T26] ? set_kthread_struct+0x130/0x130 [ 276.323565][ T26] ret_from_fork+0x1f/0x30 [ 276.328440][ T26] Kernel Offset: disabled [ 276.332769][ T26] Rebooting in 86400 seconds..