[ 486.254522][T31792] veth0_vlan: entered promiscuous mode [ 486.387320][T31792] veth1_vlan: entered promiscuous mode [ 487.320480][T31792] veth0_macvtap: entered promiscuous mode [ 487.575458][T31792] veth1_macvtap: entered promiscuous mode [ 488.260362][T31792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.435326][T31792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.585458][ T1043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.654037][ T1043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.676461][ T1043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.754064][ T1043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.180618][T32039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.206519][T32039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.372177][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.397332][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.549386][ T1106] validate_nla: 115 callbacks suppressed [ 489.549402][ T1106] netlink: 'syz.2.7926': attribute type 10 has an invalid length. [ 489.567823][ T1108] netlink: 'syz.4.7929': attribute type 10 has an invalid length. [ 489.571343][ T1107] netlink: 'syz.5.7927': attribute type 10 has an invalid length. [ 489.582359][ T1111] netlink: 'syz.0.7928': attribute type 10 has an invalid length. [ 489.590585][ T1110] netlink: 'syz.1.7925': attribute type 10 has an invalid length. [ 489.657598][ T1117] netlink: 'syz.3.7468': attribute type 10 has an invalid length. [ 489.718373][ T1118] FAULT_INJECTION: forcing a failure. [ 489.718373][ T1118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.780897][ T1112] bond0: entered promiscuous mode [ 489.783248][ T1112] bond_slave_0: entered promiscuous mode [ 489.818079][ T1112] bond_slave_1: entered promiscuous mode [ 489.835436][ T1118] CPU: 0 UID: 0 PID: 1118 Comm: syz.3.7468 Not tainted syzkaller #0 PREEMPT(full) [ 489.835455][ T1118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 489.835462][ T1118] Call Trace: [ 489.835468][ T1118] [ 489.835474][ T1118] dump_stack_lvl+0x189/0x250 [ 489.835493][ T1118] ? __pfx____ratelimit+0x10/0x10 [ 489.835508][ T1118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.835521][ T1118] ? __pfx__printk+0x10/0x10 [ 489.835540][ T1118] should_fail_ex+0x414/0x560 [ 489.835556][ T1118] _copy_to_user+0x31/0xb0 [ 489.835569][ T1118] simple_read_from_buffer+0xe1/0x170 [ 489.835587][ T1118] proc_fail_nth_read+0x1b3/0x220 [ 489.835601][ T1118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.835614][ T1118] ? rw_verify_area+0x2a6/0x4d0 [ 489.835626][ T1118] ? __lock_acquire+0xab9/0xd20 [ 489.835636][ T1118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.835647][ T1118] vfs_read+0x200/0xa30 [ 489.835658][ T1118] ? fdget_pos+0x247/0x320 [ 489.835675][ T1118] ? __pfx___mutex_lock+0x10/0x10 [ 489.835691][ T1118] ? __pfx_vfs_read+0x10/0x10 [ 489.835705][ T1118] ? __fget_files+0x2a/0x420 [ 489.835721][ T1118] ? __fget_files+0x3a0/0x420 [ 489.835733][ T1118] ? __fget_files+0x2a/0x420 [ 489.835748][ T1118] ksys_read+0x145/0x250 [ 489.835761][ T1118] ? __pfx_ksys_read+0x10/0x10 [ 489.835774][ T1118] ? do_syscall_64+0xbe/0xfa0 [ 489.835791][ T1118] do_syscall_64+0xfa/0xfa0 [ 489.835804][ T1118] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.835817][ T1118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.835834][ T1118] ? clear_bhb_loop+0x60/0xb0 [ 489.835844][ T1118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.835851][ T1118] RIP: 0033:0x7f059138e15c [ 489.835859][ T1118] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 489.835867][ T1118] RSP: 002b:00007f0592285030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 489.835880][ T1118] RAX: ffffffffffffffda RBX: 00007f05915e6180 RCX: 00007f059138e15c [ 489.835887][ T1118] RDX: 000000000000000f RSI: 00007f05922850a0 RDI: 0000000000000006 [ 489.835894][ T1118] RBP: 00007f0592285090 R08: 0000000000000000 R09: 0000000000000000 [ 489.835900][ T1118] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000001 [ 489.835907][ T1118] R13: 00007f05915e6218 R14: 00007f05915e6180 R15: 00007ffd6373a3f8 [ 489.835926][ T1118] [ 489.951849][ T1112] batadv0: entered promiscuous mode [ 489.958392][ T1112] debugfs: 'hsr1' already exists in 'hsr' [ 489.964231][ T1112] Cannot create hsr debugfs directory [ 489.967115][ T1112] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 489.977265][ T1127] netlink: 'syz.5.7930': attribute type 10 has an invalid length. [ 489.982433][ T1128] netlink: 'syz.4.7933': attribute type 10 has an invalid length. [ 489.997371][ T1129] netlink: 'syz.0.7932': attribute type 10 has an invalid length. [ 490.023057][ T1117] syz_tun: entered promiscuous mode [ 490.046166][ T1117] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 490.091003][ T5763] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 490.119377][ T1138] netlink: 'syz.1.7934': attribute type 10 has an invalid length. [ 490.126360][ T5763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 490.141129][ T5763] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 490.177449][T20583] bond0: (slave syz_tun): Releasing backup interface [ 490.181007][ T5763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 490.188164][ T5763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 490.392401][ T1042] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.503420][ T1042] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.613315][ T1042] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.700874][ T1042] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.004385][ T1042] bridge_slave_1: left allmulticast mode [ 491.006986][ T1042] bridge_slave_1: left promiscuous mode [ 491.010293][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.030771][ T1042] bridge_slave_0: left allmulticast mode [ 491.033239][ T1042] bridge_slave_0: left promiscuous mode [ 491.035845][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.840117][ T1042] bond0 (unregistering): left promiscuous mode [ 491.842949][ T1042] bond_slave_0: left promiscuous mode [ 491.845467][ T1042] bond_slave_1: left promiscuous mode [ 491.940097][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.015648][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.065995][ T1042] bond0 (unregistering): Released all slaves [ 492.241859][T15681] Bluetooth: hci1: command tx timeout [ 492.271037][T25064] bond0: (slave syz_tun): Releasing backup interface [ 492.295078][T30380] bond0: (slave syz_tun): Releasing backup interface [ 492.341710][T31792] bond0: (slave syz_tun): Releasing backup interface [ 492.372438][T22063] bond0: (slave syz_tun): Releasing backup interface [ 492.544116][ T1042] batadv0: left promiscuous mode [ 492.565552][ T1042] hsr_slave_0: left promiscuous mode [ 492.568688][ T1042] hsr_slave_1: left promiscuous mode [ 492.580347][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.583653][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.590965][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.594157][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.616308][ T1042] veth1_macvtap: left promiscuous mode [ 492.629675][ T1042] veth0_macvtap: left promiscuous mode [ 492.632289][ T1042] veth1_vlan: left promiscuous mode [ 492.634761][ T1042] veth0_vlan: left promiscuous mode [ 493.205665][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 493.251954][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 493.362591][T15681] Bluetooth: hci3: command 0x0406 tx timeout [ 493.604890][T23536] bond0: (slave syz_tun): Releasing backup interface [ 493.914290][ T1042] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.991783][ T1042] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.046485][ T1042] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.101204][ T1042] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.298087][ T1042] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.381025][ T1042] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.438583][ T1042] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.475074][ T1042] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.668499][ T1042] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.741594][ T1042] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.791758][ T1042] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.842714][ T1042] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.001975][ T1042] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.062303][ T1042] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.128521][ T1042] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.203913][ T1042] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.400523][ T1042] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.461176][ T1042] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.505749][ T1042] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.574328][ T1042] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.737117][ T1042] bridge_slave_1: left allmulticast mode [ 495.744623][ T1042] bridge_slave_1: left promiscuous mode [ 495.747314][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.763713][ T1042] bridge_slave_0: left allmulticast mode [ 495.766313][ T1042] bridge_slave_0: left promiscuous mode [ 495.780399][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.795206][ T1042] bridge_slave_1: left allmulticast mode [ 495.797857][ T1042] bridge_slave_1: left promiscuous mode [ 495.810100][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.816223][ T1042] bridge_slave_0: left allmulticast mode [ 495.818837][ T1042] bridge_slave_0: left promiscuous mode [ 495.830357][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.844222][ T1042] bridge_slave_1: left allmulticast mode [ 495.846779][ T1042] bridge_slave_1: left promiscuous mode [ 495.849596][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.872548][ T1042] bridge_slave_0: left allmulticast mode [ 495.875213][ T1042] bridge_slave_0: left promiscuous mode [ 495.877864][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.893095][ T1042] bridge_slave_1: left allmulticast mode [ 495.903078][ T1042] bridge_slave_1: left promiscuous mode [ 495.905621][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.926322][ T1042] bridge_slave_0: left allmulticast mode [ 495.928651][ T1042] bridge_slave_0: left promiscuous mode [ 495.940486][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.952635][ T1042] bridge_slave_1: left allmulticast mode [ 495.955154][ T1042] bridge_slave_1: left promiscuous mode [ 495.957780][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.971618][ T1042] bridge_slave_0: left allmulticast mode [ 495.974177][ T1042] bridge_slave_0: left promiscuous mode [ 495.976741][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.368298][ T1042] bond0 (unregistering): left promiscuous mode [ 496.371548][ T1042] bond_slave_0: left promiscuous mode [ 496.373789][ T1042] bond_slave_1: left promiscuous mode [ 496.376959][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.382880][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.387974][ T1042] bond0 (unregistering): Released all slaves [ 496.608522][ T1042] bond0 (unregistering): left promiscuous mode [ 496.613693][ T1042] bond_slave_0: left promiscuous mode [ 496.616197][ T1042] bond_slave_1: left promiscuous mode [ 496.619976][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.625298][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.631594][ T1042] bond0 (unregistering): Released all slaves [ 496.830127][ T1042] bond0 (unregistering): left promiscuous mode [ 496.832867][ T1042] bond_slave_0: left promiscuous mode [ 496.835440][ T1042] bond_slave_1: left promiscuous mode [ 496.839035][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.845052][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.850876][ T1042] bond0 (unregistering): Released all slaves [ 497.046763][ T1042] bond0 (unregistering): left promiscuous mode [ 497.049775][ T1042] bond_slave_0: left promiscuous mode [ 497.052260][ T1042] bond_slave_1: left promiscuous mode [ 497.055805][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.062158][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.067139][ T1042] bond0 (unregistering): Released all slaves [ 497.279237][ T1042] bond0 (unregistering): left promiscuous mode [ 497.282789][ T1042] bond_slave_0: left promiscuous mode [ 497.285223][ T1042] bond_slave_1: left promiscuous mode [ 497.288752][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.295454][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.301849][ T1042] bond0 (unregistering): Released all slaves [ 498.178649][ T1042] batadv0: left promiscuous mode [ 498.202966][ T1042] hsr_slave_0: left promiscuous mode [ 498.215514][ T1042] hsr_slave_1: left promiscuous mode [ 498.220783][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.224005][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.240505][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.243813][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.252188][ T1042] batadv0: left promiscuous mode [ 498.267394][ T1042] hsr_slave_0: left promiscuous mode [ 498.272256][ T1042] hsr_slave_1: left promiscuous mode [ 498.274996][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.278055][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.283597][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.286781][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.291126][ T1042] batadv0: left promiscuous mode [ 498.296578][ T1042] hsr_slave_0: left promiscuous mode [ 498.299372][ T1042] hsr_slave_1: left promiscuous mode [ 498.303264][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.306385][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.310591][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.313736][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.317487][ T1042] batadv0: left promiscuous mode [ 498.326308][ T1042] hsr_slave_0: left promiscuous mode [ 498.329440][ T1042] hsr_slave_1: left promiscuous mode [ 498.333540][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.336631][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.340790][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.344026][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.347643][ T1042] batadv0: left promiscuous mode [ 498.353856][ T1042] hsr_slave_0: left promiscuous mode [ 498.356658][ T1042] hsr_slave_1: left promiscuous mode [ 498.359320][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.364460][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.368521][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.372239][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.408209][ T1042] veth1_macvtap: left promiscuous mode [ 498.411733][ T1042] veth0_macvtap: left promiscuous mode [ 498.414135][ T1042] veth1_vlan: left promiscuous mode [ 498.416308][ T1042] veth0_vlan: left promiscuous mode [ 498.419356][ T1042] veth1_macvtap: left promiscuous mode [ 498.422410][ T1042] veth0_macvtap: left promiscuous mode [ 498.424792][ T1042] veth1_vlan: left promiscuous mode [ 498.427296][ T1042] veth0_vlan: left promiscuous mode [ 498.430962][ T1042] veth1_macvtap: left promiscuous mode [ 498.433351][ T1042] veth0_macvtap: left promiscuous mode [ 498.435849][ T1042] veth1_vlan: left promiscuous mode [ 498.438271][ T1042] veth0_vlan: left promiscuous mode [ 498.442168][ T1042] veth1_macvtap: left promiscuous mode [ 498.444553][ T1042] veth0_macvtap: left promiscuous mode [ 498.447555][ T1042] veth1_vlan: left promiscuous mode [ 498.450330][ T1042] veth0_vlan: left promiscuous mode [ 498.452969][ T1042] veth1_macvtap: left promiscuous mode [ 498.455390][ T1042] veth0_macvtap: left promiscuous mode [ 498.457852][ T1042] veth1_vlan: left promiscuous mode [ 498.461357][ T1042] veth0_vlan: left promiscuous mode [ 499.007207][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 499.031972][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 499.477691][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 499.503902][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 499.946826][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 499.966944][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 500.430938][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 500.452082][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 500.883473][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 500.909305][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 506.643702][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.646452][ T1314] ieee802154 phy1 wpan1: encryption failed: -22