last executing test programs: 2.913683001s ago: executing program 2 (id=31698): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x40, 0x7, 0x0, 0x7fffffff, 0x9d6d1, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x800, 0x7fff, 0x7, 0x1, 0x81, 0x4, 0x5, 0x0, 0x4000000, 0x0, 0x80000001}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 2.286673067s ago: executing program 0 (id=31712): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2.285980427s ago: executing program 1 (id=31703): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40010102) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.285756397s ago: executing program 2 (id=31704): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) 2.285608117s ago: executing program 4 (id=31705): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2.152164995s ago: executing program 1 (id=31706): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xd1f, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.078798689s ago: executing program 2 (id=31707): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) r3 = getpid() sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="5f1a20b5bda8", 0x6}], 0x1, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00, 0xee01}}}], 0x20, 0x20008000}, 0x20008800) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 2.003999794s ago: executing program 1 (id=31708): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.003809673s ago: executing program 3 (id=31709): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000540)="f4000900062b2f25fe80000000000000dc8b2b8b816937dcef1258850f238466cc00007a000000ad6e91880b", 0x2c}], 0x1}, 0x0) 2.003706723s ago: executing program 4 (id=31710): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0xa) 1.999925303s ago: executing program 0 (id=31719): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 1.956537876s ago: executing program 2 (id=31711): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6402, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x18, &(0x7f0000000100), 0x4) 1.800444155s ago: executing program 4 (id=31713): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fffffffffd, 0x1, 0x0, 0x0, 0x704a, 0x0, 0x0, 0x9}, 0x0, 0x2000000000007, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}, {&(0x7f0000000180)="23480d95ed94c4265b88f5532b5a63b5a84615cc674c206880d2eade17b1b60edf2ac4126ba663cce2046c70b60f7f5cfd0c621f483e40757769dbdf76ebcf74e4400bc1d6a8", 0xffe0}], 0x3a}, 0x80) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 1.71126533s ago: executing program 3 (id=31714): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x40, 0x7, 0x0, 0x7fffffff, 0x9d6d1, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x800, 0x7fff, 0x7, 0x1, 0x81, 0x4, 0x5, 0x0, 0x4000000, 0x0, 0x80000001}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 712.419828ms ago: executing program 2 (id=31715): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="58db1d", 0x0, 0x0, 0x0, 0x40}, 0x38) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 690.08267ms ago: executing program 0 (id=31716): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x8) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640), 0x4) 689.64374ms ago: executing program 3 (id=31717): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0xfe33) write$cgroup_subtree(r0, 0x0, 0x0) 671.453061ms ago: executing program 4 (id=31718): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 528.562049ms ago: executing program 3 (id=31720): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40010102) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 524.983789ms ago: executing program 1 (id=31721): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5761, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 376.383658ms ago: executing program 0 (id=31722): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xd1f, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 323.720901ms ago: executing program 3 (id=31723): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) r3 = getpid() sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="5f1a20b5bda8", 0x6}], 0x1, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00, 0xee01}}}], 0x20, 0x20008000}, 0x20008800) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 302.658922ms ago: executing program 4 (id=31724): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 231.516436ms ago: executing program 1 (id=31725): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f00000002c0), &(0x7f00000002c0)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20) 193.302149ms ago: executing program 2 (id=31726): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 183.672539ms ago: executing program 0 (id=31727): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 143.931881ms ago: executing program 3 (id=31728): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}, 0x80, 0x0}, 0x20000881) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000008400000006"], 0x18}, 0x41) bpf$PROG_LOAD(0x5, 0x0, 0x0) 79.353625ms ago: executing program 4 (id=31729): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 176.22µs ago: executing program 0 (id=31730): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 0s ago: executing program 1 (id=31731): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x40, 0x7, 0x0, 0x7fffffff, 0x9d6d1, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x800, 0x7fff, 0x7, 0x1, 0x81, 0x4, 0x5, 0x0, 0x4000000, 0x0, 0x80000001}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 1][T31906] tun0: persist enabled [ 1768.289198][T31906] tun0: tun_chr_ioctl cmd 1074025675 [ 1768.295082][T31906] tun0: persist enabled [ 1768.300048][T31909] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.28512'. [ 1768.336138][T31910] netlink: 'syz.4.28513': attribute type 3 has an invalid length. [ 1768.361374][T31910] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.28513'. [ 1768.628149][ T9] tipc: Subscription rejected, illegal request [ 1768.988941][T31946] tun0: tun_chr_ioctl cmd 1074025675 [ 1768.998699][T31946] tun0: persist enabled [ 1769.008525][T31946] tun0: tun_chr_ioctl cmd 1074025675 [ 1769.020218][T31946] tun0: persist enabled [ 1769.119108][T31950] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.28529'. [ 1769.148925][T31952] netlink: 'syz.1.28530': attribute type 3 has an invalid length. [ 1769.167877][T31952] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.28530'. [ 1769.536351][T31971] netlink: 'syz.1.28541': attribute type 11 has an invalid length. [ 1769.562597][T31971] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.28541'. [ 1769.847303][T31981] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.28546'. [ 1770.027477][T31970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1770.160052][T31985] netlink: 'syz.2.28548': attribute type 3 has an invalid length. [ 1770.198560][T31985] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.28548'. [ 1770.835317][T15389] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1771.891774][T32042] netlink: 'syz.0.28574': attribute type 1 has an invalid length. [ 1771.922795][T32042] netlink: 5 bytes leftover after parsing attributes in process `syz.0.28574'. [ 1772.388877][T32065] openvswitch: netlink: Message has 48126 unknown bytes. [ 1772.666073][T32076] syz.3.28589[32076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1772.666241][T32076] syz.3.28589[32076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1772.674651][T32079] netlink: 'syz.4.28591': attribute type 1 has an invalid length. [ 1773.037949][T32093] netlink: 'syz.4.28598': attribute type 10 has an invalid length. [ 1773.514480][T32106] netlink: 'syz.3.28602': attribute type 29 has an invalid length. [ 1773.543633][T32106] netlink: 'syz.3.28602': attribute type 3 has an invalid length. [ 1773.572104][T32106] __nla_validate_parse: 3 callbacks suppressed [ 1773.572141][T32106] netlink: 132 bytes leftover after parsing attributes in process `syz.3.28602'. [ 1774.032165][T32120] netlink: 'syz.3.28608': attribute type 1 has an invalid length. [ 1774.082255][T32120] netlink: 5 bytes leftover after parsing attributes in process `syz.3.28608'. [ 1774.216422][T32122] syz.4.28609[32122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1774.216612][T32122] syz.4.28609[32122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1774.753721][T32140] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.28617'. [ 1775.665900][T32179] netlink: 40227 bytes leftover after parsing attributes in process `syz.4.28634'. [ 1776.093683][T32191] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.28637'. [ 1776.132666][T32192] netlink: 132 bytes leftover after parsing attributes in process `syz.2.28639'. [ 1776.149688][T32191] openvswitch: netlink: Message has 48126 unknown bytes. [ 1777.088302][T32217] netlink: 'syz.1.28652': attribute type 29 has an invalid length. [ 1777.110105][T32217] netlink: 'syz.1.28652': attribute type 3 has an invalid length. [ 1777.131114][T32217] netlink: 132 bytes leftover after parsing attributes in process `syz.1.28652'. [ 1779.134224][T32266] netlink: 'syz.3.28673': attribute type 25 has an invalid length. [ 1779.152582][T32266] netlink: 'syz.3.28673': attribute type 29 has an invalid length. [ 1780.699764][T32311] netlink: 'syz.2.28692': attribute type 29 has an invalid length. [ 1780.711198][T32311] netlink: 'syz.2.28692': attribute type 3 has an invalid length. [ 1780.742994][T32311] netlink: 132 bytes leftover after parsing attributes in process `syz.2.28692'. [ 1781.767587][T32340] netlink: 'syz.0.28705': attribute type 29 has an invalid length. [ 1781.782640][T32340] netlink: 'syz.0.28705': attribute type 3 has an invalid length. [ 1781.823167][T32340] netlink: 132 bytes leftover after parsing attributes in process `syz.0.28705'. [ 1782.824413][T32387] netlink: 'syz.4.28724': attribute type 29 has an invalid length. [ 1782.850405][T32386] netlink: 132 bytes leftover after parsing attributes in process `syz.0.28736'. [ 1782.864105][T32387] netlink: 'syz.4.28724': attribute type 3 has an invalid length. [ 1782.872994][T32387] netlink: 132 bytes leftover after parsing attributes in process `syz.4.28724'. [ 1782.886391][T32389] device pim6reg1 entered promiscuous mode [ 1783.050129][T32393] netlink: 'syz.4.28728': attribute type 2 has an invalid length. [ 1783.080517][T32393] netlink: 'syz.4.28728': attribute type 1 has an invalid length. [ 1783.106774][T32393] netlink: 'syz.4.28728': attribute type 2 has an invalid length. [ 1783.121509][T32393] netlink: 198452 bytes leftover after parsing attributes in process `syz.4.28728'. [ 1783.165141][T32397] netlink: 'syz.0.28741': attribute type 29 has an invalid length. [ 1783.182084][T32397] netlink: 'syz.0.28741': attribute type 3 has an invalid length. [ 1783.191366][T32397] netlink: 132 bytes leftover after parsing attributes in process `syz.0.28741'. [ 1783.859756][T32424] netlink: 132 bytes leftover after parsing attributes in process `syz.3.28742'. [ 1783.888767][T32426] netlink: 'syz.1.28744': attribute type 2 has an invalid length. [ 1783.933244][T32426] netlink: 'syz.1.28744': attribute type 1 has an invalid length. [ 1783.947611][T32426] netlink: 'syz.1.28744': attribute type 2 has an invalid length. [ 1783.955792][T32426] netlink: 198452 bytes leftover after parsing attributes in process `syz.1.28744'. [ 1784.017535][T32430] netlink: 132 bytes leftover after parsing attributes in process `syz.4.28746'. [ 1784.807498][T32458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.28760'. [ 1784.838055][T32459] device pim6reg1 entered promiscuous mode [ 1785.852013][T32473] device 1 entered promiscuous mode [ 1786.549536][T32489] device pim6reg1 entered promiscuous mode [ 1786.679082][T32496] __nla_validate_parse: 2 callbacks suppressed [ 1786.679147][T32496] netlink: 132 bytes leftover after parsing attributes in process `syz.4.28778'. [ 1787.307763][T32507] device 0 entered promiscuous mode [ 1787.340628][T32510] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.28782'. [ 1788.005068][T32528] device pim6reg1 entered promiscuous mode [ 1788.277394][T32538] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.28798'. [ 1788.631310][T32556] validate_nla: 9 callbacks suppressed [ 1788.631327][T32556] netlink: 'syz.0.28805': attribute type 2 has an invalid length. [ 1788.801332][T32556] device 1 entered promiscuous mode [ 1789.815437][T32575] netlink: 'syz.4.28814': attribute type 15 has an invalid length. [ 1789.836794][T32575] netlink: 'syz.4.28814': attribute type 7 has an invalid length. [ 1789.864363][T32579] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.28812'. [ 1790.850939][T32618] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.28832'. [ 1790.866602][T32619] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.28833'. [ 1791.140485][T32631] netlink: 132 bytes leftover after parsing attributes in process `syz.3.28849'. [ 1791.553170][T32650] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.28846'. [ 1791.631774][T32652] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.28847'. [ 1791.877138][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.883571][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.307252][T32679] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.28862'. [ 1792.348521][T32682] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.28864'. [ 1792.460767][T32684] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.28875'. [ 1792.575406][T32691] netlink: 132 bytes leftover after parsing attributes in process `syz.2.28868'. [ 1792.791833][T32703] netlink: 128244 bytes leftover after parsing attributes in process `syz.1.28874'. [ 1792.822251][T32703] netlink: zone id is out of range [ 1792.833715][T32703] netlink: zone id is out of range [ 1792.838903][T32703] netlink: zone id is out of range [ 1792.857584][T32703] netlink: zone id is out of range [ 1792.878831][T32703] netlink: zone id is out of range [ 1792.887503][T32703] netlink: zone id is out of range [ 1792.893158][T32703] netlink: zone id is out of range [ 1792.898484][T32703] netlink: zone id is out of range [ 1792.907278][T32703] netlink: zone id is out of range [ 1792.915276][T32703] netlink: zone id is out of range [ 1793.076558][T32715] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.28879'. [ 1793.253124][T32723] netlink: 132 bytes leftover after parsing attributes in process `syz.1.28883'. [ 1793.769615][T32746] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.28893'. [ 1794.117357][T32766] syz.2.28904[32766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1794.117517][T32766] syz.2.28904[32766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1794.290516][ T308] netlink: 128244 bytes leftover after parsing attributes in process `syz.2.28908'. [ 1796.578504][ T319] netlink: 'syz.2.28912': attribute type 10 has an invalid length. [ 1796.602829][ T319] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.28912'. [ 1797.041148][ T344] netlink: 'syz.4.28922': attribute type 3 has an invalid length. [ 1797.636328][ T371] netlink: 'syz.4.28935': attribute type 16 has an invalid length. [ 1799.650239][ T444] netlink: 'syz.2.28966': attribute type 16 has an invalid length. [ 1800.309703][ T466] netlink: 'syz.1.28976': attribute type 3 has an invalid length. [ 1800.352838][ T466] __nla_validate_parse: 3 callbacks suppressed [ 1800.352856][ T466] netlink: 132 bytes leftover after parsing attributes in process `syz.1.28976'. [ 1800.887353][ T490] device pim6reg1 entered promiscuous mode [ 1801.857102][T15365] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1802.311090][ T541] netlink: 'syz.0.29013': attribute type 11 has an invalid length. [ 1802.320986][ T541] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.29013'. [ 1802.436336][ T540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1802.881860][ T562] device pim6reg1 entered promiscuous mode [ 1803.215118][ T579] netlink: 'syz.2.29031': attribute type 11 has an invalid length. [ 1803.223899][ T579] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.29031'. [ 1803.276091][ T578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1804.673099][ T636] netlink: 'syz.2.29056': attribute type 21 has an invalid length. [ 1804.734899][ T636] netlink: 'syz.2.29056': attribute type 1 has an invalid length. [ 1804.747784][ T636] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.29056'. [ 1804.771937][ T639] netlink: 'syz.0.29058': attribute type 17 has an invalid length. [ 1805.429295][ T663] netlink: 'syz.0.29066': attribute type 2 has an invalid length. [ 1805.445330][ T663] netlink: 10 bytes leftover after parsing attributes in process `syz.0.29066'. [ 1805.745138][ T671] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.29070'. [ 1806.156606][ T689] netlink: 'syz.1.29079': attribute type 21 has an invalid length. [ 1806.168062][ T689] netlink: 'syz.1.29079': attribute type 1 has an invalid length. [ 1806.177513][ T689] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.29079'. [ 1806.255789][ T691] netlink: 'syz.0.29091': attribute type 4 has an invalid length. [ 1806.302838][ T691] netlink: 140 bytes leftover after parsing attributes in process `syz.0.29091'. [ 1806.316716][ T695] netlink: 'syz.4.29083': attribute type 17 has an invalid length. [ 1806.423849][ T699] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.29084'. [ 1806.877636][ T719] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 1806.905125][ T719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.093211][ T728] netlink: 176 bytes leftover after parsing attributes in process `syz.0.29099'. [ 1807.105969][ T729] netlink: 'syz.1.29098': attribute type 4 has an invalid length. [ 1807.114677][ T729] netlink: 140 bytes leftover after parsing attributes in process `syz.1.29098'. [ 1808.426021][ T758] netlink: 'syz.1.29112': attribute type 33 has an invalid length. [ 1808.475067][ T758] netlink: 152 bytes leftover after parsing attributes in process `syz.1.29112'. [ 1808.637760][ T763] netlink: 176 bytes leftover after parsing attributes in process `syz.0.29116'. [ 1809.136585][ T789] netlink: 176 bytes leftover after parsing attributes in process `syz.3.29127'. [ 1809.705083][ T4285] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1810.326815][ T848] netlink: 'syz.3.29157': attribute type 33 has an invalid length. [ 1812.078034][ T937] netlink: 'syz.0.29191': attribute type 10 has an invalid length. [ 1812.097303][ T937] __nla_validate_parse: 3 callbacks suppressed [ 1812.097320][ T937] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.29191'. [ 1812.390650][ T947] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.29196'. [ 1813.616712][ T1000] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.29219'. [ 1814.866701][ T1040] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.29232'. [ 1820.295401][ T1206] netlink: 'syz.2.29307': attribute type 11 has an invalid length. [ 1820.315233][ T1206] netlink: 176 bytes leftover after parsing attributes in process `syz.2.29307'. [ 1820.554221][ T1212] netlink: 'syz.1.29309': attribute type 2 has an invalid length. [ 1820.562219][ T1212] netlink: 10 bytes leftover after parsing attributes in process `syz.1.29309'. [ 1821.188392][ T1221] netlink: 'syz.3.29314': attribute type 6 has an invalid length. [ 1821.759610][ T1241] netlink: 'syz.2.29323': attribute type 2 has an invalid length. [ 1821.789252][ T1241] netlink: 10 bytes leftover after parsing attributes in process `syz.2.29323'. [ 1821.835617][ T1243] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.29324'. [ 1821.882895][ T1243] net_ratelimit: 129 callbacks suppressed [ 1821.882916][ T1243] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1823.398786][ T1287] netlink: 'syz.4.29338': attribute type 11 has an invalid length. [ 1823.424829][ T1287] netlink: 176 bytes leftover after parsing attributes in process `syz.4.29338'. [ 1824.833602][ T1321] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.29353'. [ 1824.860006][ T1321] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1826.391316][ T1367] netlink: 'syz.0.29380': attribute type 21 has an invalid length. [ 1826.402932][ T1372] delete_channel: no stack [ 1826.409990][ T1372] delete_channel: no stack [ 1828.741939][ T1464] delete_channel: no stack [ 1828.774688][ T1464] delete_channel: no stack [ 1829.821850][ T1501] netlink: 'syz.1.29435': attribute type 3 has an invalid length. [ 1829.822477][ T1502] delete_channel: no stack [ 1829.868135][ T1502] delete_channel: no stack [ 1829.873407][ T1501] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.29435'. [ 1830.239852][ T1517] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.29442'. [ 1832.383292][ T1586] netlink: 'syz.3.29476': attribute type 3 has an invalid length. [ 1832.412007][ T1586] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.29476'. [ 1832.607465][ T1594] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.29479'. [ 1832.885015][T15389] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1833.278578][ T1622] netlink: 'syz.4.29492': attribute type 3 has an invalid length. [ 1833.299366][ T1622] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.29492'. [ 1833.546423][ T1631] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.29494'. [ 1837.458120][ T1721] netlink: 'syz.3.29535': attribute type 9 has an invalid length. [ 1837.497597][ T1721] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.29535'. [ 1837.780497][ T1729] pimreg1: tun_chr_ioctl cmd 21731 [ 1838.742878][ T1751] sock: sock_timestamping_bind_phc: sock not bind to device [ 1839.057779][ T1761] netlink: 152 bytes leftover after parsing attributes in process `syz.0.29554'. [ 1841.667526][ T1794] sock: sock_timestamping_bind_phc: sock not bind to device [ 1841.715072][ T1798] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.29570'. [ 1842.295562][ T1814] netlink: 'syz.3.29579': attribute type 2 has an invalid length. [ 1842.435594][ T1818] netlink: 'syz.0.29581': attribute type 4 has an invalid length. [ 1842.483064][ T1818] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.29581'. [ 1843.889815][ T1825] sock: sock_timestamping_bind_phc: sock not bind to device [ 1844.678472][ T1857] netlink: 'syz.2.29600': attribute type 4 has an invalid length. [ 1844.727373][ T1857] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.29600'. [ 1844.788443][ T1859] sock: sock_timestamping_bind_phc: sock not bind to device [ 1844.886170][ T1861] netlink: 'syz.1.29601': attribute type 2 has an invalid length. [ 1846.186165][ T1897] netlink: 'syz.3.29617': attribute type 4 has an invalid length. [ 1846.212122][ T1899] netlink: 'syz.4.29627': attribute type 4 has an invalid length. [ 1846.233961][ T1897] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.29617'. [ 1846.271783][ T1899] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.29627'. [ 1846.711184][ T1914] device pim6reg1 entered promiscuous mode [ 1848.206659][ T1945] netlink: 'syz.4.29633': attribute type 4 has an invalid length. [ 1848.232611][ T1945] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.29633'. [ 1848.245374][ T1942] netlink: 'syz.2.29634': attribute type 2 has an invalid length. [ 1848.456844][ T1950] netlink: 'syz.3.29637': attribute type 3 has an invalid length. [ 1848.796394][ T1961] netlink: 'syz.3.29644': attribute type 4 has an invalid length. [ 1848.806526][ T1961] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.29644'. [ 1849.157488][ T1966] netlink: 'syz.1.29658': attribute type 3 has an invalid length. [ 1849.287114][ T4285] Bluetooth: hci4: unexpected event 0x36 length: 151 > 7 [ 1849.697764][ T1988] netlink: 'syz.4.29655': attribute type 2 has an invalid length. [ 1850.245946][ T2004] netlink: 'syz.4.29664': attribute type 3 has an invalid length. [ 1851.241160][ T2045] netlink: 'syz.2.29683': attribute type 3 has an invalid length. [ 1851.447120][ T2055] device pim6reg1 entered promiscuous mode [ 1853.209459][ T2128] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.29727'. [ 1853.229503][ T2128] netlink: 6320 bytes leftover after parsing attributes in process `syz.4.29727'. [ 1853.249741][ T2128] tc_dump_action: action bad kind [ 1853.315658][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.322046][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.335087][ T2130] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.29728'. [ 1854.041326][ T2164] sock: sock_timestamping_bind_phc: sock not bind to device [ 1854.182792][ T2172] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.29746'. [ 1856.553032][ T2251] sock: sock_timestamping_bind_phc: sock not bind to device [ 1857.135146][ T2253] netlink: 'syz.4.29787': attribute type 21 has an invalid length. [ 1857.151721][ T2253] netlink: 156 bytes leftover after parsing attributes in process `syz.4.29787'. [ 1857.468845][ T2267] netlink: 'syz.0.29795': attribute type 1 has an invalid length. [ 1857.487221][ T2269] netlink: 'syz.4.29796': attribute type 22 has an invalid length. [ 1857.495761][ T2267] netlink: 5 bytes leftover after parsing attributes in process `syz.0.29795'. [ 1858.434601][ T2308] netlink: 'syz.3.29812': attribute type 13 has an invalid length. [ 1858.443194][ T2308] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.29812'. [ 1858.605234][T15365] tipc: Subscription rejected, illegal request [ 1858.636271][ T2320] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.29819'. [ 1859.043179][ T2340] netlink: 'syz.1.29830': attribute type 29 has an invalid length. [ 1859.093266][ T2340] netlink: 'syz.1.29830': attribute type 29 has an invalid length. [ 1859.218714][T15365] tipc: Subscription rejected, illegal request [ 1859.845110][ T2380] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.29855'. [ 1859.854795][ T2380] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.29855'. [ 1859.866657][ T2380] netlink: 2 bytes leftover after parsing attributes in process `syz.2.29855'. [ 1859.946957][ T9] tipc: Subscription rejected, illegal request [ 1860.941203][ T2421] netlink: 'syz.3.29861': attribute type 2 has an invalid length. [ 1861.167747][ T2434] netlink: 198388 bytes leftover after parsing attributes in process `syz.3.29866'. [ 1861.324007][ T2443] netlink: 'syz.0.29870': attribute type 21 has an invalid length. [ 1861.332066][ T2443] netlink: 156 bytes leftover after parsing attributes in process `syz.0.29870'. [ 1861.811720][ T2464] netlink: 'syz.4.29877': attribute type 4 has an invalid length. [ 1861.868867][ T2464] netlink: 124468 bytes leftover after parsing attributes in process `syz.4.29877'. [ 1862.235785][ T2483] netlink: 'syz.0.29884': attribute type 2 has an invalid length. [ 1863.880498][ T2492] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.29897'. [ 1863.907244][ T2492] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.29897'. [ 1863.922899][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1863.959197][ T2492] netlink: 2 bytes leftover after parsing attributes in process `syz.0.29897'. [ 1863.973654][ T2496] netlink: 'syz.2.29887': attribute type 21 has an invalid length. [ 1863.992318][ T2496] netlink: 156 bytes leftover after parsing attributes in process `syz.2.29887'. [ 1864.027309][ T2498] netlink: 'syz.1.29888': attribute type 22 has an invalid length. [ 1864.375905][ T2517] netlink: 'syz.0.29895': attribute type 29 has an invalid length. [ 1864.390048][ T2517] netlink: 'syz.0.29895': attribute type 29 has an invalid length. [ 1864.878141][ T2531] netlink: 'syz.0.29900': attribute type 13 has an invalid length. [ 1864.916072][ T2531] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.29900'. [ 1865.006078][ T2533] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.29902'. [ 1865.042468][ T2533] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.29902'. [ 1865.072717][ T2533] netlink: 2 bytes leftover after parsing attributes in process `syz.3.29902'. [ 1865.288276][ T2547] netlink: 'syz.3.29907': attribute type 21 has an invalid length. [ 1865.296418][ T2547] netlink: 156 bytes leftover after parsing attributes in process `syz.3.29907'. [ 1865.768232][ T2564] netlink: 'syz.3.29913': attribute type 29 has an invalid length. [ 1865.777623][ T2564] netlink: 'syz.3.29913': attribute type 29 has an invalid length. [ 1865.947712][ T2575] netlink: 'syz.4.29917': attribute type 13 has an invalid length. [ 1865.976458][ T2575] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.29917'. [ 1868.568778][ T2672] validate_nla: 3 callbacks suppressed [ 1868.568799][ T2672] netlink: 'syz.3.29952': attribute type 4 has an invalid length. [ 1868.622744][ T2674] netlink: 'syz.2.29954': attribute type 2 has an invalid length. [ 1870.674089][ T2759] netlink: 'syz.4.29989': attribute type 13 has an invalid length. [ 1870.682189][ T2759] __nla_validate_parse: 2 callbacks suppressed [ 1870.682205][ T2759] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.29989'. [ 1870.985899][ T2779] netlink: 'syz.3.29995': attribute type 11 has an invalid length. [ 1870.999800][ T2779] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.29995'. [ 1871.094705][ T2767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1871.582891][ T2807] netlink: 'syz.0.30004': attribute type 13 has an invalid length. [ 1871.612463][ T2807] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.30004'. [ 1872.077867][ T2831] cgroup: fork rejected by pids controller in /syz2 [ 1872.666493][ T2852] netlink: 'syz.1.30020': attribute type 13 has an invalid length. [ 1872.693419][ T2852] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.30020'. [ 1873.425239][ T9] device 0 left promiscuous mode [ 1873.463143][ T9] device .d left promiscuous mode [ 1873.524109][ T9] device 1 left promiscuous mode [ 1873.647874][ T9] tipc: Left network mode [ 1873.746294][ T2883] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1873.759843][ T2883] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1873.768110][ T2883] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1873.779255][ T2883] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1873.788860][ T2883] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1873.797308][ T2883] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1874.220249][ T2895] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.30046'. [ 1875.648653][T25512] tipc: Subscription rejected, illegal request [ 1875.704807][ T2882] chnl_net:caif_netlink_parms(): no params data found [ 1875.872640][T26750] Bluetooth: hci3: command 0x0409 tx timeout [ 1876.027320][ T2882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1876.036146][ T2882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.045700][ T2882] device bridge_slave_0 entered promiscuous mode [ 1876.095056][ T2882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1876.105384][ T2882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.142567][ T2882] device bridge_slave_1 entered promiscuous mode [ 1876.252305][ T2882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1876.306738][ T2882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1876.426919][ T2882] team0: Port device team_slave_0 added [ 1876.445064][ T2882] team0: Port device team_slave_1 added [ 1876.539607][ T2882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1876.552977][ T2882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1876.615192][T25512] tipc: Subscription rejected, illegal request [ 1876.660802][ T2882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1876.707606][ T2882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1876.763028][ T2882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1876.828143][ T2882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1877.010752][ T2882] device hsr_slave_0 entered promiscuous mode [ 1877.026578][ T2882] device hsr_slave_1 entered promiscuous mode [ 1877.050566][ T2882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1877.058596][ T2882] Cannot create hsr debugfs directory [ 1877.811464][ T2997] cgroup: fork rejected by pids controller in /syz1 [ 1877.952517][T26750] Bluetooth: hci3: command 0x041b tx timeout [ 1878.365932][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1878.382755][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1878.390899][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1878.408392][ T2883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1878.419193][ T2883] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1878.428161][ T2883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1879.786834][ T3005] chnl_net:caif_netlink_parms(): no params data found [ 1879.811749][ T3026] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.30079'. [ 1879.893513][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.959449][ T2882] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1880.024859][ T2882] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1880.032826][ T2883] Bluetooth: hci3: command 0x040f tx timeout [ 1880.115225][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.123794][T26750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1880.134499][T26750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1880.142271][T26750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1880.151800][T26750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1880.160394][T26750] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1880.167935][T26750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1880.182647][ T2882] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1880.281784][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.295873][ T2882] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1880.406032][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.444947][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1880.452112][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1880.470738][ T3005] device bridge_slave_0 entered promiscuous mode [ 1880.501423][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1880.512636][T26750] Bluetooth: hci0: command 0x0409 tx timeout [ 1880.520353][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1880.553699][ T3005] device bridge_slave_1 entered promiscuous mode [ 1880.676597][ T3005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1880.760853][ T3005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1880.854915][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.901546][ T2882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1880.953150][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.981610][ T3005] team0: Port device team_slave_0 added [ 1881.010163][ T3005] team0: Port device team_slave_1 added [ 1881.057498][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1881.067813][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1881.082188][ T2882] 8021q: adding VLAN 0 to HW filter on device team0 [ 1881.141099][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.172320][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1881.218033][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1881.238469][T15389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1881.245685][T15389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1881.287505][ T3005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1881.300462][ T3005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1881.332070][ T3005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1881.398456][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.425380][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1881.444862][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1881.474657][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1881.495089][T15389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1881.502253][T15389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1881.523094][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1881.553234][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1881.569730][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1881.576621][T26750] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 1881.585559][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1881.610600][ T3005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1881.618248][ T3005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1881.650650][ T3005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1881.669572][ T3071] netlink: 112 bytes leftover after parsing attributes in process `syz.3.30089'. [ 1881.688568][ T3037] chnl_net:caif_netlink_parms(): no params data found [ 1881.703176][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1881.750763][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1881.761343][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1881.770629][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1881.780661][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1881.789842][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1881.798885][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1881.843312][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1881.871836][ T3076] netlink: 'syz.0.30101': attribute type 10 has an invalid length. [ 1881.883828][ T3076] netlink: 152 bytes leftover after parsing attributes in process `syz.0.30101'. [ 1881.914948][ T3005] device hsr_slave_0 entered promiscuous mode [ 1881.924389][ T3078] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.30091'. [ 1881.934776][ T3005] device hsr_slave_1 entered promiscuous mode [ 1881.941631][ T3005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1881.960460][ T3005] Cannot create hsr debugfs directory [ 1882.112672][T26750] Bluetooth: hci3: command 0x0419 tx timeout [ 1882.237219][ T9] device 0 left promiscuous mode [ 1882.272514][T26750] Bluetooth: hci2: command 0x0409 tx timeout [ 1882.345748][ T3037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1882.378924][ T3037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1882.424299][ T3037] device bridge_slave_0 entered promiscuous mode [ 1882.455946][ T3096] netlink: 'syz.3.30095': attribute type 3 has an invalid length. [ 1882.464646][ T3037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1882.473930][ T3096] netlink: 'syz.3.30095': attribute type 7 has an invalid length. [ 1882.481821][ T3096] netlink: 198388 bytes leftover after parsing attributes in process `syz.3.30095'. [ 1882.488674][ T3037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1882.502026][ T3037] device bridge_slave_1 entered promiscuous mode [ 1882.538827][ T9] tipc: Left network mode [ 1882.596197][T26750] Bluetooth: hci0: command 0x041b tx timeout [ 1882.621402][ T3037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1882.664928][ T3037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1882.911437][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1882.933297][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1883.028818][ T2882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1883.046090][ T3037] team0: Port device team_slave_0 added [ 1883.066564][ T3037] team0: Port device team_slave_1 added [ 1883.231034][ T3037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1883.238468][ T3037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1883.266905][ T3037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1883.340212][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1883.353982][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1883.396793][ T3037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1883.409804][ T3037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1883.447275][ T3037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1883.590966][ T2882] device veth0_vlan entered promiscuous mode [ 1883.645879][ T3037] device hsr_slave_0 entered promiscuous mode [ 1883.659002][ T3037] device hsr_slave_1 entered promiscuous mode [ 1883.667840][ T3037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1883.676114][ T3037] Cannot create hsr debugfs directory [ 1883.681748][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1883.691357][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1883.701484][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1883.710027][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1883.790800][ T2882] device veth1_vlan entered promiscuous mode [ 1883.997754][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1884.006844][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1884.018606][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1884.028438][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1884.053962][ T2882] device veth0_macvtap entered promiscuous mode [ 1884.149484][ T2882] device veth1_macvtap entered promiscuous mode [ 1884.174834][ T3005] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1884.189365][ T3005] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1884.228429][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1884.243467][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1884.258273][ T3005] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1884.310303][ T3005] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1884.324106][ T2882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1884.331466][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1884.352723][T26750] Bluetooth: hci2: command 0x041b tx timeout [ 1884.359642][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1884.393672][ T2882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.407907][ T2882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.417894][ T2882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.428530][ T2882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.440227][ T2882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1884.491929][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1884.509175][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1884.538098][ T2882] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.547252][ T2882] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.557395][ T2882] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.569750][ T2882] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.675239][T26750] Bluetooth: hci0: command 0x040f tx timeout [ 1884.907618][ T3005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1884.972655][T15365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1884.980548][T15365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1885.074684][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1885.083468][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1885.091402][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1885.119268][ T3005] 8021q: adding VLAN 0 to HW filter on device team0 [ 1885.228628][T15380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1885.239116][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1885.249948][T15380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1885.258581][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1885.268011][T15365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1885.275216][T15365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1885.345383][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1885.363352][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1885.371632][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1885.381466][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1885.390446][T15365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1885.397680][T15365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1885.407048][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1885.417039][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1885.435911][ T9] device hsr_slave_0 left promiscuous mode [ 1885.449761][ T9] device hsr_slave_1 left promiscuous mode [ 1885.483049][ T9] device hsr_slave_0 left promiscuous mode [ 1885.503055][ T9] device hsr_slave_1 left promiscuous mode [ 1885.526135][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1885.562645][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1885.581000][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1885.598985][ T3155] netlink: 'syz.3.30107': attribute type 29 has an invalid length. [ 1885.608220][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1885.656095][ T9] device bridge_slave_1 left promiscuous mode [ 1885.673934][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1885.775850][ T9] device bridge_slave_0 left promiscuous mode [ 1885.794203][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1885.876124][ T9] device veth0_macvtap left promiscuous mode [ 1885.882605][ T9] device veth1_vlan left promiscuous mode [ 1886.433433][T26750] Bluetooth: hci2: command 0x040f tx timeout [ 1886.475727][ T3180] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.30102'. [ 1886.752597][T26750] Bluetooth: hci0: command 0x0419 tx timeout [ 1886.941317][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1886.951937][ T9] device bond_slave_1 left promiscuous mode [ 1887.130094][ T9] bond0 (unregistering): Released all slaves [ 1887.189445][ T9] team0 (unregistering): Port device geneve1 removed [ 1887.589729][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1887.629705][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1887.672723][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1887.715858][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1888.002301][ T9] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1888.011788][ T9] bond0 (unregistering): Released all slaves [ 1888.099322][ T3037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1888.116063][ T3155] netlink: 'syz.3.30107': attribute type 29 has an invalid length. [ 1888.125353][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1888.146374][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1888.166547][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1888.188665][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1888.215218][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1888.230792][ T3037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1888.272990][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1888.281569][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1888.340167][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1888.350417][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1888.361497][ T3037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1888.371757][ T3037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1888.391223][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1888.523524][T26750] Bluetooth: hci2: command 0x0419 tx timeout [ 1888.717259][ T3200] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.30105'. [ 1888.834527][ T3201] netlink: 'syz.0.30117': attribute type 1 has an invalid length. [ 1888.876846][ T3201] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.30117'. [ 1889.049449][ T3037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1889.128128][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1889.193533][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1889.209244][ T3037] 8021q: adding VLAN 0 to HW filter on device team0 [ 1889.239227][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1889.271001][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1889.290367][T15365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1889.297638][T15365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1889.388066][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1889.404220][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1889.434441][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1889.470011][T15365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1889.477251][T15365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1889.538655][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1889.583839][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1889.642425][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1889.666521][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1889.701874][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1889.734241][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1889.756616][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1889.775828][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1889.793541][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1889.823407][ T3037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1889.854740][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1889.869615][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1889.884131][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1889.898868][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1889.915684][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1889.948730][ T3005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1890.401771][ T3237] netlink: 112 bytes leftover after parsing attributes in process `syz.2.30119'. [ 1890.804041][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1890.838915][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1890.867053][ T3037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1890.954799][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1890.984958][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1891.054995][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1891.110565][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1891.165771][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1891.183630][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1891.204166][ T3037] device veth0_vlan entered promiscuous mode [ 1891.253638][ T3037] device veth1_vlan entered promiscuous mode [ 1891.266612][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1891.277366][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1891.331176][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1891.341718][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1891.367391][ T3005] device veth0_vlan entered promiscuous mode [ 1891.379295][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1891.391395][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1891.402264][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1891.419446][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1891.431538][ T3037] device veth0_macvtap entered promiscuous mode [ 1891.450138][ T3005] device veth1_vlan entered promiscuous mode [ 1891.468368][ T3037] device veth1_macvtap entered promiscuous mode [ 1891.549651][ T3005] device veth0_macvtap entered promiscuous mode [ 1891.560962][ T3005] device veth1_macvtap entered promiscuous mode [ 1891.569774][ T3037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1891.582080][ T3037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.599173][ T3037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1891.609047][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1891.618098][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1891.627700][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1891.637361][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1891.648293][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1891.666479][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1891.677666][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1891.688925][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1891.700199][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1891.712058][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1891.734304][ T3037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1891.751508][ T3037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.761889][ T3037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1891.774247][ T3037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.785718][ T3037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1891.803818][ T3005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1891.815098][ T3005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.825575][ T3005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1891.836817][ T3005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.848495][ T3005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1891.857648][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1891.867938][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1891.877133][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1891.886052][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1891.898097][ T3037] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.909105][ T3037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.918684][ T3037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.934830][ T3037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.948315][ T3005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1891.961878][ T3005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.973352][ T3005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1891.984375][ T3005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.994498][ T3005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1892.005300][ T3005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1892.016745][ T3005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1892.028492][ T3005] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.038975][ T3005] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.047924][ T3005] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.057392][ T3005] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.069397][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1892.081604][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1892.192024][T15389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1892.201472][T15389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1892.209904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1892.241553][T15389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1892.252844][T15389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1892.264784][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1892.295183][T15380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1892.305234][T15380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1892.320463][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1892.341214][T15389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1892.354228][T15389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1892.361858][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1892.468136][T15389] tipc: Subscription rejected, illegal request [ 1892.902177][ T3290] netlink: 'syz.2.30141': attribute type 29 has an invalid length. [ 1892.943988][ T3290] netlink: 'syz.2.30141': attribute type 29 has an invalid length. [ 1893.009045][ T3290] netlink: 'syz.2.30141': attribute type 29 has an invalid length. [ 1893.059469][ T3290] netlink: 'syz.2.30141': attribute type 29 has an invalid length. [ 1893.114100][ T3290] netlink: 'syz.2.30141': attribute type 29 has an invalid length. [ 1893.503527][ T3298] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.30146'. [ 1894.127791][ T3316] netlink: 112 bytes leftover after parsing attributes in process `syz.4.30155'. [ 1894.573862][ T3337] netlink: 'syz.0.30173': attribute type 7 has an invalid length. [ 1894.942858][T15380] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1895.144382][ T3361] netlink: 'syz.1.30169': attribute type 29 has an invalid length. [ 1895.172273][ T3357] netlink: 'syz.2.30170': attribute type 1 has an invalid length. [ 1895.183749][ T3357] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.30170'. [ 1895.204881][ T3361] netlink: 'syz.1.30169': attribute type 29 has an invalid length. [ 1895.218383][ T3364] netlink: 'syz.1.30169': attribute type 29 has an invalid length. [ 1895.261986][ T3361] netlink: 'syz.1.30169': attribute type 29 has an invalid length. [ 1895.300734][ T3361] netlink: 'syz.1.30169': attribute type 29 has an invalid length. [ 1895.630607][ T3370] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.30186'. [ 1896.481182][ T3389] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.30182'. [ 1896.800607][ T3401] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.30199'. [ 1896.868144][ T3405] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.30191'. [ 1900.138083][ T3496] netlink: 168 bytes leftover after parsing attributes in process `syz.2.30233'. [ 1902.177669][ T3555] netlink: 168 bytes leftover after parsing attributes in process `syz.3.30261'. [ 1902.561939][ T3571] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.30268'. [ 1902.586255][ T3571] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.30268'. [ 1902.607671][ T3571] netlink: 2 bytes leftover after parsing attributes in process `syz.3.30268'. [ 1903.613734][ T3579] netlink: 'syz.1.30272': attribute type 7 has an invalid length. [ 1903.621636][ T3579] netlink: 'syz.1.30272': attribute type 1 has an invalid length. [ 1903.678970][ T3579] netlink: 'syz.1.30272': attribute type 1 has an invalid length. [ 1903.705120][ T3583] netlink: 'syz.3.30271': attribute type 41 has an invalid length. [ 1903.717038][ T3579] netlink: 'syz.1.30272': attribute type 2 has an invalid length. [ 1903.745971][ T3579] netlink: 'syz.1.30272': attribute type 14 has an invalid length. [ 1903.756798][ T3583] netlink: 40 bytes leftover after parsing attributes in process `syz.3.30271'. [ 1903.776496][ T3579] netlink: 'syz.1.30272': attribute type 3 has an invalid length. [ 1903.806924][ T3579] netlink: 'syz.1.30272': attribute type 4 has an invalid length. [ 1903.848698][ T3579] netlink: 'syz.1.30272': attribute type 6 has an invalid length. [ 1903.882407][ T3579] netlink: 'syz.1.30272': attribute type 7 has an invalid length. [ 1903.890313][ T3579] netlink: 207236 bytes leftover after parsing attributes in process `syz.1.30272'. [ 1905.578614][ T3617] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.30298'. [ 1905.762217][T25507] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.909463][ T2883] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1906.920961][T25507] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.921016][ T2883] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1906.939710][ T2883] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1906.948916][ T2883] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1906.957556][ T2883] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1906.965729][ T2883] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1907.648507][T25507] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1907.665052][ T3655] netlink: 176 bytes leftover after parsing attributes in process `syz.3.30297'. [ 1907.815213][T25507] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1907.924571][ T3642] chnl_net:caif_netlink_parms(): no params data found [ 1908.136447][ T3676] netlink: 207236 bytes leftover after parsing attributes in process `syz.2.30304'. [ 1908.993228][ T2883] Bluetooth: hci2: command 0x0409 tx timeout [ 1909.008399][ T3642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1909.015774][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1909.032249][ T3642] device bridge_slave_0 entered promiscuous mode [ 1909.076060][ T3642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1909.083994][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1909.092221][ T3642] device bridge_slave_1 entered promiscuous mode [ 1909.118721][ T3642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1909.148310][ T3642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1909.202052][ T3642] team0: Port device team_slave_0 added [ 1909.216585][ T3642] team0: Port device team_slave_1 added [ 1909.249354][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1909.258621][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1909.292962][ T3642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1909.307431][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1909.315140][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1909.348754][ T3642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1909.436479][ T3642] device hsr_slave_0 entered promiscuous mode [ 1909.449292][ T3642] device hsr_slave_1 entered promiscuous mode [ 1910.194977][T25507] device hsr_slave_0 left promiscuous mode [ 1910.212754][T25507] device hsr_slave_1 left promiscuous mode [ 1910.219449][T25507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1910.229346][T25507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1910.240941][T25507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1910.250734][T25507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1910.262143][T25507] device bridge_slave_1 left promiscuous mode [ 1910.270773][T25507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1910.289768][T25507] device bridge_slave_0 left promiscuous mode [ 1910.299462][T25507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1910.340961][T25507] device veth1_macvtap left promiscuous mode [ 1910.350414][T25507] device veth0_macvtap left promiscuous mode [ 1910.360765][T25507] device veth1_vlan left promiscuous mode [ 1910.370107][T25507] device veth0_vlan left promiscuous mode [ 1910.908854][T25507] team0 (unregistering): Port device team_slave_1 removed [ 1910.950572][T25507] team0 (unregistering): Port device team_slave_0 removed [ 1910.990295][T25507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1911.030908][T25507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1911.082565][ T2883] Bluetooth: hci2: command 0x041b tx timeout [ 1911.313970][T25507] bond0 (unregistering): Released all slaves [ 1911.417329][ T3642] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1911.428473][ T3642] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1911.440783][ T3642] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1911.460247][ T3642] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1911.633835][ T3642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1911.652899][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1911.665930][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1911.687972][ T3642] 8021q: adding VLAN 0 to HW filter on device team0 [ 1911.707488][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1911.723284][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1911.742725][T15365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1911.749983][T15365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1911.764274][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1911.798378][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1911.808386][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1911.821805][T25512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1911.828993][T25512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1911.839010][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1911.848273][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1911.867579][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1911.884834][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1911.923207][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1911.931885][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1911.967311][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1911.976216][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1911.992638][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1912.001158][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1912.010664][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1912.022499][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1912.362962][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1912.370507][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1912.386731][ T3642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1912.418199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1912.427284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1912.465236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1912.478851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1912.489654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1912.502218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1912.511567][ T3642] device veth0_vlan entered promiscuous mode [ 1912.540564][ T3642] device veth1_vlan entered promiscuous mode [ 1912.567425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1912.578408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1912.590673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1912.600948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1912.613716][ T3642] device veth0_macvtap entered promiscuous mode [ 1912.626853][ T3642] device veth1_macvtap entered promiscuous mode [ 1912.648219][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1912.660870][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1912.672055][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1912.683695][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1912.695412][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1912.705394][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1912.715015][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1912.723529][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1912.732808][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1912.744265][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1912.760568][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1912.771583][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1912.782818][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1912.794297][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1912.805082][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1912.816791][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1912.844763][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1912.854835][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1912.867129][ T3642] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.876208][ T3642] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.886863][ T3642] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.899296][ T3642] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.005331][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1913.025751][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1913.043507][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1913.086790][T25507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1913.097069][T25507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1913.113600][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1913.153716][ T2883] Bluetooth: hci2: command 0x040f tx timeout [ 1914.755653][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.762080][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.771245][ T3789] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.30324'. [ 1914.845980][ T3787] cgroup: fork rejected by pids controller in /syz0 [ 1914.911471][ T3794] validate_nla: 19 callbacks suppressed [ 1914.911491][ T3794] netlink: 'syz.2.30329': attribute type 4 has an invalid length. [ 1914.926180][ T3794] netlink: 152 bytes leftover after parsing attributes in process `syz.2.30329'. [ 1914.940614][ T3794] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1915.170372][ T3802] netlink: 188 bytes leftover after parsing attributes in process `syz.4.30332'. [ 1915.232831][ T2883] Bluetooth: hci2: command 0x0419 tx timeout [ 1916.389908][ T3823] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.30342'. [ 1917.111916][T25512] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.255295][T25512] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.403059][T25512] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.443475][ T3837] netlink: 'syz.2.30348': attribute type 1 has an invalid length. [ 1917.562097][T25512] bond0: (slave netdevsim0): Releasing backup interface [ 1917.590931][T25512] device netdevsim0 left promiscuous mode [ 1917.631456][T25512] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.986632][ T3851] netlink: 188 bytes leftover after parsing attributes in process `syz.3.30354'. [ 1918.018532][T25512] device 0 left promiscuous mode [ 1918.106731][T25512] device .*! left promiscuous mode [ 1918.193106][T25512] device 1 left promiscuous mode [ 1918.247030][T26750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1918.257286][T26750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1918.266128][T26750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1918.275042][T26750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1918.290321][T26750] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1918.297848][T26750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1919.910415][T25512] tipc: Left network mode [ 1920.355478][T26750] Bluetooth: hci4: command 0x0409 tx timeout [ 1920.580016][ T3895] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.30366'. [ 1920.775591][ T3904] netlink: 188 bytes leftover after parsing attributes in process `syz.1.30370'. [ 1920.825509][ T3858] chnl_net:caif_netlink_parms(): no params data found [ 1920.994628][ T3911] netlink: 'syz.3.30374': attribute type 10 has an invalid length. [ 1921.005094][ T3911] netlink: 'syz.3.30374': attribute type 19 has an invalid length. [ 1921.038217][ T3911] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.30374'. [ 1922.442423][T26750] Bluetooth: hci4: command 0x041b tx timeout [ 1922.603298][ T3858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.610459][ T3858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1922.629649][ T3858] device bridge_slave_0 entered promiscuous mode [ 1922.655018][ T3858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1922.682511][ T3858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1922.722207][ T3858] device bridge_slave_1 entered promiscuous mode [ 1923.014547][ T3858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1923.036863][ T3858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1923.130724][ T3961] netlink: 188 bytes leftover after parsing attributes in process `syz.2.30387'. [ 1923.210245][ T3858] team0: Port device team_slave_0 added [ 1923.228393][ T3963] netlink: 'syz.1.30388': attribute type 21 has an invalid length. [ 1923.262427][ T3858] team0: Port device team_slave_1 added [ 1923.436702][ T3858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1923.456085][ T3858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1923.524141][ T3858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1923.588718][ T3858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1923.601505][ T3858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1923.628639][ T3858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1923.693254][ T3858] device hsr_slave_0 entered promiscuous mode [ 1923.700320][ T3858] device hsr_slave_1 entered promiscuous mode [ 1923.717079][ T3858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1923.725142][ T3858] Cannot create hsr debugfs directory [ 1924.079660][T25512] device hsr_slave_0 left promiscuous mode [ 1924.103131][T25512] device hsr_slave_1 left promiscuous mode [ 1924.113063][T25512] device bridge_slave_1 left promiscuous mode [ 1924.119347][T25512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1924.128853][T25512] device bridge_slave_0 left promiscuous mode [ 1924.135262][T25512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.166302][T25512] device veth1_macvtap left promiscuous mode [ 1924.173302][T25512] device veth0_macvtap left promiscuous mode [ 1924.179552][T25512] device veth1_vlan left promiscuous mode [ 1924.522587][T26750] Bluetooth: hci4: command 0x040f tx timeout [ 1924.664459][T25512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1924.674222][T25512] device bond_slave_1 left promiscuous mode [ 1924.897695][T25512] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1924.906545][T25512] device bridge0 left promiscuous mode [ 1924.912094][T25512] bond0 (unregistering): Released all slaves [ 1925.425267][ T3858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1925.440952][ T3858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1925.451148][ T3858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1925.465713][ T3858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1925.599112][ T3858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1925.616031][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1925.636635][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1925.665062][ T3858] 8021q: adding VLAN 0 to HW filter on device team0 [ 1925.677315][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1925.690918][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1925.708208][T15389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1925.715414][T15389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1925.724731][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1925.736399][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1925.745578][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1925.756691][T15389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1925.763892][T15389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1925.785236][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1925.810598][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1925.839990][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1925.851666][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1925.866582][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1925.878209][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1925.890403][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1925.902076][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1925.918912][ T3858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1925.936054][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1925.948239][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1925.969400][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1925.978769][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1926.068913][T15389] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1926.344377][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1926.351950][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1926.376963][ T3858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1926.409155][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1926.421174][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1926.456648][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1926.466271][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1926.478396][ T3858] device veth0_vlan entered promiscuous mode [ 1926.486248][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1926.495682][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1926.509595][ T3858] device veth1_vlan entered promiscuous mode [ 1926.539787][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1926.554209][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1926.569185][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1926.579461][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1926.592684][T26750] Bluetooth: hci4: command 0x0419 tx timeout [ 1926.601714][ T3858] device veth0_macvtap entered promiscuous mode [ 1926.618647][ T3858] device veth1_macvtap entered promiscuous mode [ 1926.649680][ T3858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1926.665911][ T3858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1926.687263][ T3858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1926.703425][ T3858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1926.719447][ T3858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1926.731473][ T3858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1926.747789][ T3858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1926.762879][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1926.771767][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1926.786448][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1926.797349][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1926.814244][ T3858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1926.830794][ T3858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1926.841543][ T3858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1926.857737][ T3858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1926.868617][ T3858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1926.884984][ T3858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1926.896291][ T3858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1926.910309][ T3858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1926.927224][ T3858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1926.940561][ T3858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.949656][ T3858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.958726][ T3858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.969075][ T3858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.980929][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1926.997627][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1927.109581][T25507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1927.123879][T25507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1927.131516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1927.166121][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1927.174537][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1927.183991][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1928.460884][ T4061] netlink: 'syz.2.30398': attribute type 21 has an invalid length. [ 1928.488982][ T4061] netlink: 'syz.2.30398': attribute type 6 has an invalid length. [ 1928.508140][ T4061] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30398'. [ 1934.148751][ T4216] netlink: 'syz.4.30451': attribute type 21 has an invalid length. [ 1934.220377][ T4216] netlink: 'syz.4.30451': attribute type 6 has an invalid length. [ 1934.289570][ T4216] netlink: 132 bytes leftover after parsing attributes in process `syz.4.30451'. [ 1934.428250][ T4224] device sit0 entered promiscuous mode [ 1936.493589][ T4271] netlink: 'syz.3.30473': attribute type 3 has an invalid length. [ 1937.882039][ T4319] device sit0 entered promiscuous mode [ 1938.537395][ T4331] netlink: 'syz.4.30499': attribute type 3 has an invalid length. [ 1938.641369][ T4331] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.30499'. [ 1939.346500][ T4350] netlink: 'syz.1.30509': attribute type 3 has an invalid length. [ 1940.059019][ T4368] netlink: 'syz.3.30517': attribute type 3 has an invalid length. [ 1940.123135][ T4368] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.30517'. [ 1941.336704][ T4412] netlink: 'syz.1.30534': attribute type 3 has an invalid length. [ 1941.376201][ T4412] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.30534'. [ 1945.047141][ T4492] netlink: 'syz.1.30565': attribute type 33 has an invalid length. [ 1945.061199][ T4492] netlink: 164 bytes leftover after parsing attributes in process `syz.1.30565'. [ 1947.946206][ T4561] netlink: 176 bytes leftover after parsing attributes in process `syz.0.30598'. [ 1948.646097][ T4581] netlink: 'syz.0.30607': attribute type 10 has an invalid length. [ 1948.925947][ T4581] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1948.964504][ T4587] netlink: 'syz.3.30610': attribute type 33 has an invalid length. [ 1948.982911][ T4587] netlink: 164 bytes leftover after parsing attributes in process `syz.3.30610'. [ 1950.201153][ T4622] netlink: 176 bytes leftover after parsing attributes in process `syz.2.30637'. [ 1951.303353][ T4644] device sit0 entered promiscuous mode [ 1953.854027][ T4695] netlink: 'syz.4.30657': attribute type 10 has an invalid length. [ 1954.039022][ T4695] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1954.090044][ T4693] device sit0 entered promiscuous mode [ 1955.532672][ T4743] netlink: 132 bytes leftover after parsing attributes in process `syz.0.30676'. [ 1956.993835][T15389] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1957.006256][ T4776] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30692'. [ 1957.360358][ T4787] netlink: 'syz.2.30698': attribute type 10 has an invalid length. [ 1957.603745][ T4787] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1960.058392][ T4822] netlink: 'syz.1.30709': attribute type 10 has an invalid length. [ 1960.149573][ T4822] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1961.003953][ T4840] device sit0 entered promiscuous mode [ 1962.064524][ T4862] device sit0 left promiscuous mode [ 1962.302611][ T4864] device sit0 entered promiscuous mode [ 1962.959045][ T4871] netlink: 'syz.3.30731': attribute type 10 has an invalid length. [ 1963.146874][ T4871] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1963.527183][ T4891] sctp: [Deprecated]: syz.2.30740 (pid 4891) Use of int in maxseg socket option. [ 1963.527183][ T4891] Use struct sctp_assoc_value instead [ 1964.146549][ T4908] device sit0 left promiscuous mode [ 1964.251746][ T4912] netlink: 'syz.4.30750': attribute type 10 has an invalid length. [ 1964.293956][ T4913] device sit0 entered promiscuous mode [ 1966.187780][ T4953] netlink: 'syz.1.30765': attribute type 10 has an invalid length. [ 1966.996626][T15389] wlan1: Trigger new scan to find an IBSS to join [ 1967.052737][ T4980] device sit0 left promiscuous mode [ 1967.273670][ T4982] device sit0 entered promiscuous mode [ 1968.188011][ T4988] netlink: 'syz.4.30783': attribute type 10 has an invalid length. [ 1968.310090][ T5000] device sit0 left promiscuous mode [ 1968.488812][ T5004] device sit0 entered promiscuous mode [ 1970.033448][T15389] wlan1: Trigger new scan to find an IBSS to join [ 1971.559488][T15389] wlan1: Creating new IBSS network, BSSID e6:98:8b:d4:53:3f [ 1976.195880][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.202363][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.212577][ T5122] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.30838'. [ 1977.758811][ T5152] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.30855'. [ 1979.689913][ T5189] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.30869'. [ 1979.966057][ T5191] device syzkaller0 entered promiscuous mode [ 1983.297789][ T5235] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.30896'. [ 1983.495191][T15365] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1984.068280][T15365] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1984.300664][T15365] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1984.427740][T15365] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1985.279884][ T2883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1985.302138][ T2883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1985.325316][ T2883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1985.379141][ T2883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1985.419164][ T2883] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1985.441994][ T2883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1985.715117][ T5260] netlink: 'syz.3.30900': attribute type 3 has an invalid length. [ 1985.761526][ T5260] netlink: 'syz.3.30900': attribute type 2 has an invalid length. [ 1985.793560][ T5260] netlink: 'syz.3.30900': attribute type 9 has an invalid length. [ 1985.819920][ T5260] netlink: 201344 bytes leftover after parsing attributes in process `syz.3.30900'. [ 1985.848987][ T5264] netlink: 126288 bytes leftover after parsing attributes in process `syz.1.30902'. [ 1986.075779][ T5255] chnl_net:caif_netlink_parms(): no params data found [ 1986.208776][ T5255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1986.217964][ T5255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1986.226868][ T5255] device bridge_slave_0 entered promiscuous mode [ 1986.260338][ T5255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1986.267741][ T5255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1986.286728][ T5255] device bridge_slave_1 entered promiscuous mode [ 1986.370781][ T5255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1986.389581][ T5255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1986.470401][ T5255] team0: Port device team_slave_0 added [ 1986.502943][ T5255] team0: Port device team_slave_1 added [ 1986.536053][ T5255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1986.544402][ T5255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1986.571201][ T5255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1986.615970][ T5255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1986.623633][ T5255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1986.650728][ T5255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1986.720042][ T5255] device hsr_slave_0 entered promiscuous mode [ 1986.729303][ T5255] device hsr_slave_1 entered promiscuous mode [ 1986.737203][ T5255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1986.744967][ T5255] Cannot create hsr debugfs directory [ 1986.875401][T15365] bond0: (slave wlan1): Releasing backup interface [ 1987.105611][T15365] device hsr_slave_0 left promiscuous mode [ 1987.112106][T15365] device hsr_slave_1 left promiscuous mode [ 1987.119275][T15365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1987.126961][T15365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1987.138318][T15365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1987.145956][T15365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1987.154680][T15365] device bridge_slave_1 left promiscuous mode [ 1987.161024][T15365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1987.170948][T15365] device bridge_slave_0 left promiscuous mode [ 1987.177624][T15365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1987.222627][T15365] device veth1_macvtap left promiscuous mode [ 1987.228742][T15365] device veth0_macvtap left promiscuous mode [ 1987.243691][T15365] device veth1_vlan left promiscuous mode [ 1987.249591][T15365] device veth0_vlan left promiscuous mode [ 1987.553623][ T2883] Bluetooth: hci0: command 0x0409 tx timeout [ 1987.926682][T15365] team0 (unregistering): Port device team_slave_1 removed [ 1987.968137][T15365] team0 (unregistering): Port device team_slave_0 removed [ 1988.008067][T15365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1988.055020][T15365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1988.340014][T15365] bond0 (unregistering): Released all slaves [ 1988.833717][ T5255] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1988.845359][ T5255] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1988.855644][ T5255] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1988.892960][ T5255] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1989.040139][ T5255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1989.064026][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1989.073503][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1989.085122][ T5255] 8021q: adding VLAN 0 to HW filter on device team0 [ 1989.097751][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1989.107966][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1989.116964][T15365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1989.124159][T15365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1989.144448][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1989.153941][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1989.163906][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1989.174455][T15365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1989.181593][T15365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1989.191185][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1989.206713][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1989.226554][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1989.237148][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1989.246824][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1989.258041][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1989.276965][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1989.285971][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1989.296438][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1989.305271][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1989.314797][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1989.326088][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1989.633183][ T2883] Bluetooth: hci0: command 0x041b tx timeout [ 1989.647014][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1989.656014][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1989.668762][ T5255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1990.168608][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1990.178669][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1990.228143][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1990.237238][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1990.248762][ T5255] device veth0_vlan entered promiscuous mode [ 1990.258965][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1990.275627][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1990.297157][ T5255] device veth1_vlan entered promiscuous mode [ 1990.321923][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1990.344344][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1990.354224][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1990.365482][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1990.377716][ T5255] device veth0_macvtap entered promiscuous mode [ 1990.397243][ T5255] device veth1_macvtap entered promiscuous mode [ 1990.415089][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1990.426531][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.437237][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1990.456089][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.467344][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1990.485281][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.500317][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1990.511988][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1990.521193][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1990.529732][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1990.538877][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1990.552091][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1990.564047][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.575237][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1990.587956][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.598889][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1990.616676][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.626857][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1990.637609][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.649193][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1990.659295][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1990.669154][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1990.681640][ T5255] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.692150][ T5255] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.707230][ T5255] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.717492][ T5255] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.831633][T15389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1990.846197][T15389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1990.854023][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1990.886446][T25512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1990.901834][T25512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1990.910342][T15365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1991.714836][ T2883] Bluetooth: hci0: command 0x040f tx timeout [ 1991.859281][ T5380] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.30909'. [ 1992.164810][ T5387] netlink: 'syz.1.30912': attribute type 1 has an invalid length. [ 1992.230678][ T5387] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.30912'. [ 1992.503633][ T5390] netlink: 15007 bytes leftover after parsing attributes in process `syz.2.30915'. [ 1992.865221][ T5402] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.30919'. [ 1993.599217][ T5526] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.30926'. [ 1993.802476][ T2883] Bluetooth: hci0: command 0x0419 tx timeout [ 1993.824643][ T5534] netlink: 15007 bytes leftover after parsing attributes in process `syz.3.30929'. [ 1994.515962][ T5542] netlink: 'syz.2.30930': attribute type 3 has an invalid length. [ 1994.536086][ T5542] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.30930'. [ 1994.748730][T15384] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1994.924084][T15384] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1995.058485][T15384] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1995.231450][T15384] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1995.340861][ T5565] netlink: 'syz.1.30937': attribute type 3 has an invalid length. [ 1995.397531][ T5565] netlink: 'syz.1.30937': attribute type 2 has an invalid length. [ 1995.450998][ T5565] netlink: 'syz.1.30937': attribute type 9 has an invalid length. [ 1995.505017][ T5565] netlink: 201344 bytes leftover after parsing attributes in process `syz.1.30937'. [ 1996.097963][ T2883] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1996.124114][ T2883] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1996.134558][ T2883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1996.142839][ T2883] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1996.150858][ T2883] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1996.158514][ T2883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1997.035592][ T5594] netlink: 15007 bytes leftover after parsing attributes in process `syz.4.30943'. [ 1997.379117][ T5603] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.30945'. [ 1998.202476][T26750] Bluetooth: hci4: command 0x0409 tx timeout [ 1998.762478][T26750] Bluetooth: hci3: command 0x0406 tx timeout [ 1998.839808][ T5628] netlink: 'syz.4.30952': attribute type 3 has an invalid length. [ 1998.853912][ T5628] netlink: 'syz.4.30952': attribute type 2 has an invalid length. [ 1998.861925][ T5628] netlink: 'syz.4.30952': attribute type 9 has an invalid length. [ 1998.870585][ T5628] netlink: 201344 bytes leftover after parsing attributes in process `syz.4.30952'. [ 1998.939156][ T5622] device syzkaller0 entered promiscuous mode [ 1999.011082][ T5576] chnl_net:caif_netlink_parms(): no params data found [ 2000.275366][T26750] Bluetooth: hci4: command 0x041b tx timeout [ 2001.159033][ T5576] bridge0: port 1(bridge_slave_0) entered blocking state [ 2001.209781][ T5576] bridge0: port 1(bridge_slave_0) entered disabled state [ 2001.221044][ T5656] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.30957'. [ 2001.231465][ T5576] device bridge_slave_0 entered promiscuous mode [ 2001.535877][T15384] bond0: (slave wlan1): Releasing backup interface [ 2001.598299][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state [ 2001.609917][ T5576] bridge0: port 2(bridge_slave_1) entered disabled state [ 2001.641985][T25507] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2001.660883][ T5576] device bridge_slave_1 entered promiscuous mode [ 2001.691711][ T5660] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.30959'. [ 2002.101854][ T5576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2002.148962][ T5576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2002.244634][T15384] device hsr_slave_0 left promiscuous mode [ 2002.259553][T15384] device hsr_slave_1 left promiscuous mode [ 2002.273440][T15384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2002.298635][T15384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2002.352462][T26750] Bluetooth: hci4: command 0x040f tx timeout [ 2002.646589][ T5690] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.30971'. [ 2002.884700][T15384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2002.909765][T15384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2003.156494][T15384] device bridge_slave_1 left promiscuous mode [ 2003.168715][T15384] bridge0: port 2(bridge_slave_1) entered disabled state [ 2003.191397][T15384] device bridge_slave_0 left promiscuous mode [ 2003.204845][T15384] bridge0: port 1(bridge_slave_0) entered disabled state [ 2003.276173][T15384] device veth1_macvtap left promiscuous mode [ 2003.290506][T15384] device veth0_macvtap left promiscuous mode [ 2003.303711][T15384] device veth1_vlan left promiscuous mode [ 2003.316415][T15384] device veth0_vlan left promiscuous mode [ 2003.855419][T15384] team0 (unregistering): Port device team_slave_1 removed [ 2003.894944][T15384] team0 (unregistering): Port device team_slave_0 removed [ 2003.936315][T15384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2003.982144][T15384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2004.268138][T15384] bond0 (unregistering): Released all slaves [ 2004.378393][ T5576] team0: Port device team_slave_0 added [ 2004.398741][ T5576] team0: Port device team_slave_1 added [ 2004.432444][ T2883] Bluetooth: hci4: command 0x0419 tx timeout [ 2004.473918][ T5691] device syzkaller0 entered promiscuous mode [ 2004.510860][ T5702] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.30983'. [ 2006.144310][T26750] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 2007.315934][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2007.341692][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2007.416405][ T5576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2007.431990][ T5734] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.30986'. [ 2007.453962][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2007.460973][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2007.489997][ T5576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2007.801178][ T5576] device hsr_slave_0 entered promiscuous mode [ 2007.851093][ T5576] device hsr_slave_1 entered promiscuous mode [ 2007.918210][ T5576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2007.937730][ T5576] Cannot create hsr debugfs directory [ 2008.179293][ T5752] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.30993'. [ 2008.623320][ T5764] netlink: 'syz.2.30996': attribute type 1 has an invalid length. [ 2008.631226][ T5764] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.30996'. [ 2008.726095][ T5772] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.30999'. [ 2009.190392][ T5787] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.31008'. [ 2009.321445][ T5576] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2009.352168][ T5576] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2009.381380][ T5576] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2009.459028][ T5576] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2009.759976][ T5576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2009.827298][ T5812] netlink: 'syz.4.31015': attribute type 4 has an invalid length. [ 2009.843244][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2009.883912][ T5812] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.31015'. [ 2009.884372][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2009.986921][ T5576] 8021q: adding VLAN 0 to HW filter on device team0 [ 2010.024995][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2010.040355][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2010.078332][T25507] bridge0: port 1(bridge_slave_0) entered blocking state [ 2010.085569][T25507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2010.107410][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2010.125769][ T5814] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.31016'. [ 2010.168916][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2010.198756][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2010.220796][T15384] bridge0: port 2(bridge_slave_1) entered blocking state [ 2010.228065][T15384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2010.313100][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2010.334149][T15384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2010.421344][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2010.451596][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2010.470237][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2010.504306][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2010.612723][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2010.702118][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2010.732226][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2010.804119][ T5576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2010.868148][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2010.940008][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2010.972198][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2012.222080][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2012.242731][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2012.275438][ T5576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2012.379363][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2012.418205][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2012.504674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2012.523673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2012.564652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2012.590521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2012.624347][ T5576] device veth0_vlan entered promiscuous mode [ 2012.665337][ T5576] device veth1_vlan entered promiscuous mode [ 2012.759530][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2012.779774][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2012.821847][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2012.852797][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2012.879320][ T5576] device veth0_macvtap entered promiscuous mode [ 2012.918206][ T5576] device veth1_macvtap entered promiscuous mode [ 2013.012842][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2013.034294][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.070958][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2013.101336][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.130418][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2013.151512][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.181203][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2013.209439][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2013.229383][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.241218][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2013.255856][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.275829][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2013.302505][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.322380][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2013.352421][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.365395][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2013.380214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2013.389041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2013.472061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2013.503579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2013.526402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2013.551216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2013.576943][ T5576] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2013.609589][ T5576] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2013.620499][ T5576] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2013.642489][ T5576] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2013.828622][T25512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2013.850022][T25512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2013.876888][T25507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2013.950279][T15384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2013.959503][T15384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2013.971845][T25512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2015.287356][ T5891] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.31035'. [ 2016.920696][ T5930] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.31051'. [ 2019.413150][ T5975] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.31067'. [ 2019.870986][T26750] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 2023.167431][T26750] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 2025.800747][ T6103] netlink: 112 bytes leftover after parsing attributes in process `syz.3.31126'. [ 2029.035274][ T6112] device wg2 entered promiscuous mode [ 2029.473971][ T2883] Bluetooth: hci2: command 0x0406 tx timeout [ 2032.974653][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2034.923035][ T6203] netlink: 132 bytes leftover after parsing attributes in process `syz.1.31165'. [ 2035.479106][ T6225] device wg2 entered promiscuous mode [ 2037.639107][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.645543][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2041.056271][ T6347] device syzkaller0 entered promiscuous mode [ 2041.075806][ T6351] netlink: 16083 bytes leftover after parsing attributes in process `syz.2.31228'. [ 2046.527681][ T6380] netlink: 16083 bytes leftover after parsing attributes in process `syz.0.31241'. [ 2046.550408][ T6401] device syzkaller0 entered promiscuous mode [ 2046.785190][T26750] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2046.793214][ T6411] netlink: 'syz.2.31255': attribute type 7 has an invalid length. [ 2046.809462][ T6411] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.31255'. [ 2047.170285][ T6421] netlink: 'syz.3.31266': attribute type 7 has an invalid length. [ 2047.244774][ T6421] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.31266'. [ 2047.671993][ T6435] netlink: 14 bytes leftover after parsing attributes in process `syz.2.31265'. [ 2047.692139][ T6435] device hsr_slave_0 left promiscuous mode [ 2047.714313][ T6435] device hsr_slave_1 left promiscuous mode [ 2047.769675][ T2883] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2047.993733][ T6440] netlink: 'syz.1.31279': attribute type 7 has an invalid length. [ 2048.001637][ T6440] netlink: 191184 bytes leftover after parsing attributes in process `syz.1.31279'. [ 2048.211952][ T6444] netlink: 14 bytes leftover after parsing attributes in process `syz.0.31281'. [ 2048.273328][ T6444] device hsr_slave_0 left promiscuous mode [ 2048.311459][ T6444] device hsr_slave_1 left promiscuous mode [ 2049.243323][ T6469] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.31282'. [ 2049.354739][ T6471] netlink: 'syz.4.31283': attribute type 7 has an invalid length. [ 2049.373999][ T6471] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.31283'. [ 2049.989566][ T6488] netlink: 14 bytes leftover after parsing attributes in process `syz.1.31290'. [ 2051.732131][ T6488] device hsr_slave_0 left promiscuous mode [ 2051.742241][ T6488] device hsr_slave_1 left promiscuous mode [ 2052.150274][ T6512] netlink: 'syz.0.31299': attribute type 7 has an invalid length. [ 2052.173238][ T6512] netlink: 191184 bytes leftover after parsing attributes in process `syz.0.31299'. [ 2052.274311][ T6514] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.31301'. [ 2053.026757][ T6533] netlink: 14 bytes leftover after parsing attributes in process `syz.4.31310'. [ 2053.149379][ T6533] device hsr_slave_0 left promiscuous mode [ 2053.177136][ T6533] device hsr_slave_1 left promiscuous mode [ 2053.461634][ T6535] netlink: 'syz.0.31321': attribute type 1 has an invalid length. [ 2053.519599][ T6535] netlink: 'syz.0.31321': attribute type 4 has an invalid length. [ 2053.530713][ T6535] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.31321'. [ 2054.648091][ T6552] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.31316'. [ 2056.660237][ T6572] netlink: 'syz.2.31326': attribute type 1 has an invalid length. [ 2056.702812][ T6572] netlink: 'syz.2.31326': attribute type 4 has an invalid length. [ 2056.720969][ T6572] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.31326'. [ 2056.748043][ T6575] netlink: 14 bytes leftover after parsing attributes in process `syz.3.31327'. [ 2056.769448][ T6575] device hsr_slave_0 left promiscuous mode [ 2056.799868][ T6575] device hsr_slave_1 left promiscuous mode [ 2057.409087][ T6587] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.31332'. [ 2057.737644][ T6591] netlink: 14 bytes leftover after parsing attributes in process `syz.1.31344'. [ 2059.001115][ T6609] netlink: 'syz.1.31342': attribute type 1 has an invalid length. [ 2059.011686][ T6609] netlink: 'syz.1.31342': attribute type 4 has an invalid length. [ 2059.025758][ T6609] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.31342'. [ 2059.323389][ T6613] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.31345'. [ 2060.865219][ T6622] netlink: 'syz.3.31356': attribute type 10 has an invalid length. [ 2061.111558][ T6622] 8021q: adding VLAN 0 to HW filter on device team0 [ 2061.195778][ T6622] bond0: (slave team0): Enslaving as an active interface with an up link [ 2062.888200][ T6650] netlink: 'syz.1.31363': attribute type 10 has an invalid length. [ 2062.984375][ T6650] 8021q: adding VLAN 0 to HW filter on device team0 [ 2062.995036][ T6650] bond0: (slave team0): Enslaving as an active interface with an up link [ 2063.016153][ T6655] netlink: 'syz.0.31364': attribute type 1 has an invalid length. [ 2063.052489][ T6652] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.31364'. [ 2063.092031][ T6655] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.31364'. [ 2063.525444][ T6663] device syzkaller0 entered promiscuous mode [ 2064.726348][T25507] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2066.971809][ T6686] netlink: 14 bytes leftover after parsing attributes in process `syz.4.31376'. [ 2067.437650][ T6699] netlink: 'syz.2.31383': attribute type 10 has an invalid length. [ 2067.523466][ T6699] 8021q: adding VLAN 0 to HW filter on device team0 [ 2067.560772][ T6699] bond0: (slave team0): Enslaving as an active interface with an up link [ 2070.562232][ T6730] netlink: 14 bytes leftover after parsing attributes in process `syz.2.31395'. [ 2072.070250][ T6764] netlink: 14 bytes leftover after parsing attributes in process `syz.3.31410'. [ 2074.614219][ T6786] netlink: 'syz.3.31417': attribute type 2 has an invalid length. [ 2074.646843][ T6786] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.31417'. [ 2076.033777][ T6813] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.31430'. [ 2076.230361][ T6819] netlink: 'syz.2.31436': attribute type 2 has an invalid length. [ 2076.275380][ T6819] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.31436'. [ 2077.982899][ T6852] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.31451'. [ 2078.106287][ T6856] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.31453'. [ 2078.260888][ T6860] netlink: 'syz.4.31454': attribute type 2 has an invalid length. [ 2078.269409][ T6860] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.31454'. [ 2078.799968][ T6885] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.31466'. [ 2078.998764][ T6890] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.31468'. [ 2079.059203][ T2883] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 2079.756800][ T6921] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.31481'. [ 2080.129686][ T2883] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 2080.148980][ T6933] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.31485'. [ 2081.143699][ T2883] Bluetooth: hci1: ACL packet too small [ 2082.809382][ T6987] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.31516'. [ 2082.852511][ T6986] device veth0_to_team entered promiscuous mode [ 2083.096429][ T2883] Bluetooth: hci0: ACL packet too small [ 2083.204280][ T2883] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 2083.752605][ T7024] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.31532'. [ 2084.360421][ T2883] Bluetooth: hci3: ISO packet too small [ 2086.899599][ T2883] Bluetooth: hci4: ACL packet too small [ 2087.519361][ T7090] device veth0_to_team entered promiscuous mode [ 2088.048596][ T7105] netlink: 14 bytes leftover after parsing attributes in process `syz.0.31567'. [ 2088.084119][ T7105] openvswitch: netlink: Message has 6 unknown bytes. [ 2090.173931][ T7156] device veth0_to_team entered promiscuous mode [ 2090.556680][ T7177] device veth0_to_team entered promiscuous mode [ 2093.135540][ T7215] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.31609'. [ 2093.218515][ T7215] netlink: zone id is out of range [ 2093.261448][ T7215] netlink: zone id is out of range [ 2093.324244][ T7215] netlink: zone id is out of range [ 2093.329499][ T7215] netlink: zone id is out of range [ 2093.457333][ T7215] netlink: zone id is out of range [ 2093.512817][ T7215] netlink: zone id is out of range [ 2093.544101][ T7215] netlink: zone id is out of range [ 2093.562911][ T7215] netlink: zone id is out of range [ 2093.595605][ T7215] netlink: zone id is out of range [ 2093.600828][ T7215] netlink: zone id is out of range [ 2095.745495][T15389] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2095.893863][ T7250] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.31634'. [ 2096.202457][ T7261] netlink: 56 bytes leftover after parsing attributes in process `syz.3.31627'. [ 2096.488073][ T7261] netlink: 56 bytes leftover after parsing attributes in process `syz.3.31627'. [ 2096.749333][ T7277] netlink: 168 bytes leftover after parsing attributes in process `syz.2.31635'. [ 2097.447071][ T7306] netlink: 56 bytes leftover after parsing attributes in process `syz.1.31645'. [ 2097.484239][ T7306] netlink: 56 bytes leftover after parsing attributes in process `syz.1.31645'. [ 2097.600781][ T7313] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.31647'. [ 2098.191312][ T7320] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.31660'. [ 2098.287736][ T7323] netlink: 168 bytes leftover after parsing attributes in process `syz.3.31651'. [ 2098.598097][ T7334] net_ratelimit: 350 callbacks suppressed [ 2098.598119][ T7334] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2099.077126][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.083592][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.700402][ T7379] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2101.385106][ T7400] sctp: [Deprecated]: syz.0.31683 (pid 7400) Use of int in maxseg socket option. [ 2101.385106][ T7400] Use struct sctp_assoc_value instead [ 2102.037637][ T6234] wlan1: Trigger new scan to find an IBSS to join [ 2103.077786][T25507] wlan1: Trigger new scan to find an IBSS to join [ 2104.034901][T15380] wlan1: Trigger new scan to find an IBSS to join [ 2104.108083][ T7442] netlink: 112 bytes leftover after parsing attributes in process `syz.1.31699'. [ 2104.729404][ T7452] netlink: 830 bytes leftover after parsing attributes in process `syz.4.31705'. [ 2106.037083][ T6234] wlan1: Trigger new scan to find an IBSS to join [ 2106.520868][ T7490] netlink: 830 bytes leftover after parsing attributes in process `syz.1.31721'. [ 2106.992549][ T6234] wlan1: Trigger new scan to find an IBSS to join [ 2107.000314][ T6234] wlan1: Trigger new scan to find an IBSS to join [ 2107.200483][T15380] wlan1: Creating new IBSS network, BSSID 5a:1c:d8:e6:5c:43 [ 2107.228514][ T9] ------------[ cut here ]------------ [ 2107.234692][ T9] WARNING: CPU: 0 PID: 9 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 2107.244554][ T9] Modules linked in: [ 2107.248512][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 2107.255962][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2107.266264][ T9] Workqueue: cfg80211 cfg80211_event_work [ 2107.272074][ T9] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 2107.278408][ T9] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c1 ba ee f7 0f 0b eb bb e8 b8 ba ee f7 <0f> 0b eb b2 e8 af ba ee f7 0f 0b e9 77 fd ff ff e8 a3 ba ee f7 0f [ 2107.298260][ T9] RSP: 0000:ffffc900000e7aa0 EFLAGS: 00010293 [ 2107.304473][ T9] RAX: ffffffff8993b8f8 RBX: dffffc0000000000 RCX: ffff88813fec0000 [ 2107.312631][ T9] RDX: 0000000000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 2107.320960][ T9] RBP: ffffc900000e7b70 R08: ffffffff90af42a7 R09: 1ffffffff215e854 [ 2107.329062][ T9] R10: dffffc0000000000 R11: fffffbfff215e855 R12: ffff888067ddb5d8 [ 2107.337190][ T9] R13: 1ffff9200001cf5c R14: 0000000000000004 R15: ffff888065accc90 [ 2107.345257][ T9] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2107.354332][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2107.360993][ T9] CR2: 0000001b3041dff8 CR3: 000000007b156000 CR4: 00000000003506f0 [ 2107.369114][ T9] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 2107.377288][ T9] DR3: 0000000000008d24 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2107.385396][ T9] Call Trace: [ 2107.388726][ T9] [ 2107.391708][ T9] ? mutex_lock_nested+0x10/0x10 [ 2107.396852][ T9] ? trace_rdev_return_void+0x240/0x240 [ 2107.402775][ T9] cfg80211_process_wdev_events+0x3ad/0x550 [ 2107.408754][ T9] cfg80211_process_rdev_events+0x9d/0x110 [ 2107.414711][ T9] ? process_one_work+0x7b0/0x1160 [ 2107.420174][ T9] cfg80211_event_work+0x2b/0x40 [ 2107.425281][ T9] process_one_work+0x8a2/0x1160 [ 2107.430316][ T9] ? worker_detach_from_pool+0x240/0x240 [ 2107.436184][ T9] ? _raw_spin_lock_irq+0x86/0xf0 [ 2107.441270][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2107.446400][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2107.452005][ T9] ? kthread_data+0x4b/0xc0 [ 2107.456687][ T9] worker_thread+0xaa2/0x1270 [ 2107.461470][ T9] kthread+0x29d/0x330 [ 2107.465661][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 2107.470772][ T9] ? kthread_blkcg+0xd0/0xd0 [ 2107.475519][ T9] ret_from_fork+0x1f/0x30 [ 2107.480022][ T9] [ 2107.483133][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2107.490448][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 2107.497796][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2107.507895][ T9] Workqueue: cfg80211 cfg80211_event_work [ 2107.513675][ T9] Call Trace: [ 2107.516994][ T9] [ 2107.519959][ T9] dump_stack_lvl+0x188/0x24e [ 2107.524692][ T9] ? memcpy+0x3c/0x60 [ 2107.528721][ T9] ? show_regs_print_info+0x12/0x12 [ 2107.533975][ T9] ? load_image+0x400/0x400 [ 2107.538548][ T9] panic+0x2e5/0x730 [ 2107.543016][ T9] ? bpf_jit_dump+0xd0/0xd0 [ 2107.547577][ T9] ? ret_from_fork+0x1f/0x30 [ 2107.552221][ T9] __warn+0x2f8/0x4f0 [ 2107.556243][ T9] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2107.561844][ T9] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2107.567455][ T9] report_bug+0x2ba/0x4f0 [ 2107.571847][ T9] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2107.577458][ T9] handle_bug+0x3a/0x70 [ 2107.581670][ T9] exc_invalid_op+0x16/0x40 [ 2107.586229][ T9] asm_exc_invalid_op+0x16/0x20 [ 2107.591138][ T9] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 2107.597383][ T9] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c1 ba ee f7 0f 0b eb bb e8 b8 ba ee f7 <0f> 0b eb b2 e8 af ba ee f7 0f 0b e9 77 fd ff ff e8 a3 ba ee f7 0f [ 2107.617036][ T9] RSP: 0000:ffffc900000e7aa0 EFLAGS: 00010293 [ 2107.623141][ T9] RAX: ffffffff8993b8f8 RBX: dffffc0000000000 RCX: ffff88813fec0000 [ 2107.631146][ T9] RDX: 0000000000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 2107.639158][ T9] RBP: ffffc900000e7b70 R08: ffffffff90af42a7 R09: 1ffffffff215e854 [ 2107.647161][ T9] R10: dffffc0000000000 R11: fffffbfff215e855 R12: ffff888067ddb5d8 [ 2107.655156][ T9] R13: 1ffff9200001cf5c R14: 0000000000000004 R15: ffff888065accc90 [ 2107.663165][ T9] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2107.668755][ T9] ? mutex_lock_nested+0x10/0x10 [ 2107.673722][ T9] ? trace_rdev_return_void+0x240/0x240 [ 2107.679368][ T9] cfg80211_process_wdev_events+0x3ad/0x550 [ 2107.685333][ T9] cfg80211_process_rdev_events+0x9d/0x110 [ 2107.691177][ T9] ? process_one_work+0x7b0/0x1160 [ 2107.696322][ T9] cfg80211_event_work+0x2b/0x40 [ 2107.701297][ T9] process_one_work+0x8a2/0x1160 [ 2107.706280][ T9] ? worker_detach_from_pool+0x240/0x240 [ 2107.711933][ T9] ? _raw_spin_lock_irq+0x86/0xf0 [ 2107.716985][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2107.722056][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2107.727651][ T9] ? kthread_data+0x4b/0xc0 [ 2107.732209][ T9] worker_thread+0xaa2/0x1270 [ 2107.736967][ T9] kthread+0x29d/0x330 [ 2107.741067][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 2107.746131][ T9] ? kthread_blkcg+0xd0/0xd0 [ 2107.750772][ T9] ret_from_fork+0x1f/0x30 [ 2107.755252][ T9] [ 2107.758978][ T9] Kernel Offset: disabled [ 2107.763385][ T9] Rebooting in 86400 seconds..