last executing test programs: 2.553796563s ago: executing program 2 (id=1432): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0}, 0x100208, 0xca, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x3a) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x9000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 2.111568889s ago: executing program 3 (id=1428): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.10902427s ago: executing program 2 (id=1430): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000180)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x24004080) 1.927150372s ago: executing program 3 (id=1433): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000340)=r5, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1800", 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.556996247s ago: executing program 3 (id=1436): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) 1.515923559s ago: executing program 1 (id=1438): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16e4ff0000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1f, 0x1, 0xffffffff, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.444898269s ago: executing program 3 (id=1439): socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f96d24fc601100", 0x16}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180d000000000000000000000000000085000010ae00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee8430"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x72) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) write$cgroup_subtree(r2, 0x0, 0xfe33) 1.330095571s ago: executing program 0 (id=1440): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) 1.264466222s ago: executing program 1 (id=1441): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='\f', 0x1}], 0x1}, 0xfffc) 1.226850223s ago: executing program 0 (id=1442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1b, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400fff8b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000001000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.094053274s ago: executing program 2 (id=1443): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.093878704s ago: executing program 1 (id=1444): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4093, 0xffd}, {&(0x7f0000000840)=""/4074, 0xfea}, {&(0x7f0000003540)=""/4130, 0x1022}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000140)=""/181, 0xb5}], 0x7}, 0x102) 1.003712876s ago: executing program 0 (id=1445): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000340)=r5, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1800", 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 931.691047ms ago: executing program 2 (id=1446): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x90430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x80008, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) 869.981028ms ago: executing program 1 (id=1447): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000040), 0x3) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) 522.703143ms ago: executing program 1 (id=1448): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x110, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x106181, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89ef, &(0x7f0000000000)={r0}) 480.123444ms ago: executing program 3 (id=1449): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1f, 0x1, 0xffffffff, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 419.269395ms ago: executing program 0 (id=1450): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xff93, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e0000d81500010084c06fb300000000080005007a010401a80016002000034004000000035c0461c9ab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798aeaa73e2fad95667e0fcd4c306dcdf63951f215ce3bb9ad809d5e1cace81000cffece0b494566d05f3d1269f0dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 293.854166ms ago: executing program 2 (id=1451): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) 292.733276ms ago: executing program 1 (id=1459): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{}]}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000340)=r5, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1800", 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 263.593027ms ago: executing program 3 (id=1452): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xd, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x82}], 0x1}, 0x0) 121.738009ms ago: executing program 0 (id=1453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000808, 0x0, 0x0}}, 0x10) 102.551059ms ago: executing program 2 (id=1454): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 0 (id=1455): r0 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.18' (ED25519) to the list of known hosts. [ 79.883325][ T5776] cgroup: Unknown subsys name 'net' [ 80.054019][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.754936][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.776327][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.795496][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.803937][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.812776][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.820519][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.828305][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.836089][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.843353][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.852002][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.859901][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.868264][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.877088][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.884590][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.891671][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.899639][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.900684][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.914380][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.935882][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.956748][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.965216][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.973067][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.980637][ T5801] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.988324][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.995874][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.513727][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 84.645716][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 84.682284][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.690335][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.697891][ T5790] bridge_slave_0: entered allmulticast mode [ 84.705085][ T5790] bridge_slave_0: entered promiscuous mode [ 84.720369][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 84.742689][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 84.758855][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.766252][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.773503][ T5790] bridge_slave_1: entered allmulticast mode [ 84.780901][ T5790] bridge_slave_1: entered promiscuous mode [ 84.906948][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.914181][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.921888][ T5788] bridge_slave_0: entered allmulticast mode [ 84.929048][ T5788] bridge_slave_0: entered promiscuous mode [ 84.939694][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.952408][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.980135][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.988090][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.995361][ T5788] bridge_slave_1: entered allmulticast mode [ 85.002327][ T5788] bridge_slave_1: entered promiscuous mode [ 85.111190][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.123772][ T5790] team0: Port device team_slave_0 added [ 85.142047][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.151988][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.159687][ T5786] bridge_slave_0: entered allmulticast mode [ 85.167354][ T5786] bridge_slave_0: entered promiscuous mode [ 85.177658][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.200898][ T5790] team0: Port device team_slave_1 added [ 85.207603][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.218213][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.225977][ T5785] bridge_slave_0: entered allmulticast mode [ 85.232932][ T5785] bridge_slave_0: entered promiscuous mode [ 85.241432][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.248789][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.256207][ T5786] bridge_slave_1: entered allmulticast mode [ 85.263369][ T5786] bridge_slave_1: entered promiscuous mode [ 85.308023][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.315398][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.322821][ T5785] bridge_slave_1: entered allmulticast mode [ 85.330766][ T5785] bridge_slave_1: entered promiscuous mode [ 85.364093][ T5788] team0: Port device team_slave_0 added [ 85.373824][ T5788] team0: Port device team_slave_1 added [ 85.409324][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.427694][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.441012][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.462591][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.469732][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.495932][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.509692][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.517386][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.543373][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.557220][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.634177][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.641594][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.667631][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.683466][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.692166][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.718248][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.733780][ T5785] team0: Port device team_slave_0 added [ 85.743094][ T5785] team0: Port device team_slave_1 added [ 85.752238][ T5786] team0: Port device team_slave_0 added [ 85.778655][ T5786] team0: Port device team_slave_1 added [ 85.867574][ T5790] hsr_slave_0: entered promiscuous mode [ 85.874073][ T5790] hsr_slave_1: entered promiscuous mode [ 85.885615][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.892611][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.921984][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.934499][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.941807][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.968045][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.995849][ T5801] Bluetooth: hci0: command tx timeout [ 85.995870][ T5798] Bluetooth: hci1: command tx timeout [ 86.016364][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.023469][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.049879][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.061893][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.069159][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.075261][ T5801] Bluetooth: hci2: command tx timeout [ 86.095324][ T5798] Bluetooth: hci3: command tx timeout [ 86.106246][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.121606][ T5788] hsr_slave_0: entered promiscuous mode [ 86.128532][ T5788] hsr_slave_1: entered promiscuous mode [ 86.135367][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.143143][ T5788] Cannot create hsr debugfs directory [ 86.230310][ T5785] hsr_slave_0: entered promiscuous mode [ 86.237142][ T5785] hsr_slave_1: entered promiscuous mode [ 86.243497][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.251806][ T5785] Cannot create hsr debugfs directory [ 86.359761][ T5786] hsr_slave_0: entered promiscuous mode [ 86.366357][ T5786] hsr_slave_1: entered promiscuous mode [ 86.372600][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.380384][ T5786] Cannot create hsr debugfs directory [ 86.703940][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.718318][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.729138][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.759960][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.830237][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.853942][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.864436][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.879939][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.960944][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.983206][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.006302][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.037918][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.108509][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.120049][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.166272][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.194212][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.398181][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.453119][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.501393][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.508929][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.559377][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.566621][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.596231][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.613014][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.663431][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.702366][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.738839][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.746159][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.786466][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.793645][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.817462][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.824664][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.894433][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.901671][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.991795][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.063203][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.077372][ T5798] Bluetooth: hci1: command tx timeout [ 88.088561][ T5798] Bluetooth: hci0: command tx timeout [ 88.121228][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.156506][ T5798] Bluetooth: hci2: command tx timeout [ 88.161408][ T5801] Bluetooth: hci3: command tx timeout [ 88.185981][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.193184][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.230636][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.237886][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.484411][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.651841][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.690073][ T5790] veth0_vlan: entered promiscuous mode [ 88.731844][ T5790] veth1_vlan: entered promiscuous mode [ 88.760517][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.827114][ T5785] veth0_vlan: entered promiscuous mode [ 88.869349][ T5785] veth1_vlan: entered promiscuous mode [ 88.907945][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.923167][ T5788] veth0_vlan: entered promiscuous mode [ 88.963248][ T5790] veth0_macvtap: entered promiscuous mode [ 88.971766][ T5788] veth1_vlan: entered promiscuous mode [ 89.009165][ T5790] veth1_macvtap: entered promiscuous mode [ 89.029467][ T5785] veth0_macvtap: entered promiscuous mode [ 89.062671][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.083784][ T5785] veth1_macvtap: entered promiscuous mode [ 89.113495][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.129382][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.140993][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.151112][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.159927][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.177775][ T5786] veth0_vlan: entered promiscuous mode [ 89.200310][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.211402][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.223195][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.259289][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.270080][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.284474][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.297934][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.307602][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.316553][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.325378][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.340871][ T5786] veth1_vlan: entered promiscuous mode [ 89.386907][ T5788] veth0_macvtap: entered promiscuous mode [ 89.440231][ T5788] veth1_macvtap: entered promiscuous mode [ 89.531974][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.552548][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.582460][ T5786] veth0_macvtap: entered promiscuous mode [ 89.592385][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.605826][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.616958][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.628527][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.640980][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.671725][ T5786] veth1_macvtap: entered promiscuous mode [ 89.712909][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.729468][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.730748][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.754053][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.764635][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.776149][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.788432][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.833829][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.854517][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.864503][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.874082][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.901798][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.915974][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.927148][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.938021][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.948050][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.958941][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.977461][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.011490][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.028109][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.040999][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.052637][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.063384][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.073918][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.084928][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.096393][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.109025][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.143409][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.147952][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.164776][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.165376][ T5801] Bluetooth: hci0: command tx timeout [ 90.173535][ T5798] Bluetooth: hci1: command tx timeout [ 90.173690][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.194371][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.194679][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.236284][ T5801] Bluetooth: hci3: command tx timeout [ 90.238482][ T5798] Bluetooth: hci2: command tx timeout [ 90.488262][ T2902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.520467][ T2902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.607994][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.627999][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.714135][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.750600][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.846397][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.862981][ C0] hrtimer: interrupt took 67336 ns [ 90.907025][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.238381][ T5801] Bluetooth: hci1: command tx timeout [ 92.241634][ T9] cfg80211: failed to load regulatory.db [ 92.244022][ T5798] Bluetooth: hci0: command tx timeout [ 92.321688][ T5798] Bluetooth: hci3: command tx timeout [ 92.327394][ T5801] Bluetooth: hci2: command tx timeout [ 93.125555][ T5909] warning: `syz.2.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.961354][ T5944] syzkaller0: entered promiscuous mode [ 96.967150][ T5944] syzkaller0: entered allmulticast mode [ 101.155311][ T5966] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.34'. [ 102.581067][ T6012] -1: renamed from syzkaller0 [ 105.033862][ T6032] syz.0.62 (6032) used obsolete PPPIOCDETACH ioctl [ 107.653192][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.742832][ T6070] bridge_slave_0 (unregistering): left allmulticast mode [ 107.750190][ T6070] bridge_slave_0 (unregistering): left promiscuous mode [ 107.758987][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.951079][ T6150] netlink: 'syz.3.111': attribute type 1 has an invalid length. [ 116.959245][ T6150] netlink: 'syz.3.111': attribute type 4 has an invalid length. [ 116.967129][ T6150] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.111'. [ 118.265793][ T6187] syz.0.126[6187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.265960][ T6187] syz.0.126[6187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.080132][ T6269] sit0: entered allmulticast mode [ 123.153919][ T6272] sit0: entered promiscuous mode [ 124.894590][ T6278] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 124.904478][ T6281] netlink: 'syz.2.158': attribute type 10 has an invalid length. [ 124.913442][ T6281] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 124.928806][ T6281] team0: Port device virt_wifi0 added [ 124.939716][ T6284] netlink: 'syz.2.158': attribute type 10 has an invalid length. [ 124.993057][ T6284] batman_adv: batadv0: Adding interface: team0 [ 125.020034][ T6284] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.050731][ T6284] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 125.656004][ T6304] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.168'. [ 126.309299][ T5798] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 127.278162][ T2902] wlan1: Trigger new scan to find an IBSS to join [ 129.658437][ T6357] sit0: entered allmulticast mode [ 129.850326][ T6357] sit0: entered promiscuous mode [ 132.237371][ T137] wlan1: Trigger new scan to find an IBSS to join [ 133.185954][ T34] wlan1: Creating new IBSS network, BSSID 3e:51:c3:9a:4b:57 [ 133.202521][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.223173][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.294270][ T6400] sit0: entered allmulticast mode [ 135.302987][ T6401] sit0: entered promiscuous mode [ 135.641066][ T6409] 7B’ç÷ï: renamed from syzkaller0 [ 139.247794][ T6435] syzkaller0: entered promiscuous mode [ 139.275071][ T6435] syzkaller0: entered allmulticast mode [ 143.489004][ T6479] 7B’ç÷ï: renamed from syzkaller0 [ 146.440984][ T6510] bond_slave_1: mtu less than device minimum [ 146.711548][ T5798] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 146.720112][ T5798] Bluetooth: hci3: Invalid handle: 0x85b0 > 0x0eff [ 147.395575][ T6537] syzkaller0: entered promiscuous mode [ 147.423608][ T6537] syzkaller0: entered allmulticast mode [ 147.457657][ T6540] syz.1.248 (6540) used greatest stack depth: 19504 bytes left [ 148.835510][ T5798] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 148.843260][ T5798] Bluetooth: hci2: Invalid handle: 0x85b0 > 0x0eff [ 149.976397][ T6561] Zero length message leads to an empty skb [ 150.852435][ T5798] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 150.860998][ T5798] Bluetooth: hci1: Invalid handle: 0x85b0 > 0x0eff [ 151.024857][ T6587] syz.2.276 (6587) used greatest stack depth: 19472 bytes left [ 153.877681][ T6641] sit0: left promiscuous mode [ 154.487959][ T6649] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.294'. [ 154.673088][ T6663] bridge0: port 3(team0) entered blocking state [ 154.709917][ T6663] bridge0: port 3(team0) entered disabled state [ 154.725001][ T6663] team0: entered allmulticast mode [ 154.740690][ T6663] team_slave_0: entered allmulticast mode [ 154.750897][ T6663] team_slave_1: entered allmulticast mode [ 154.786560][ T6663] team0: entered promiscuous mode [ 154.791705][ T6663] team_slave_0: entered promiscuous mode [ 154.800832][ T6663] team_slave_1: entered promiscuous mode [ 154.810050][ T6663] bridge0: port 3(team0) entered blocking state [ 154.817027][ T6663] bridge0: port 3(team0) entered forwarding state [ 154.919936][ T6667] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 154.997229][ T6660] wg2: entered promiscuous mode [ 155.008136][ T6660] wg2: entered allmulticast mode [ 156.770836][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.778726][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.793157][ T6682] bridge0: entered allmulticast mode [ 156.855396][ T6683] bridge_slave_1: left allmulticast mode [ 156.861202][ T6683] bridge_slave_1: left promiscuous mode [ 156.896395][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.914986][ T6683] bridge_slave_0: left allmulticast mode [ 156.920912][ T6683] bridge_slave_0: left promiscuous mode [ 156.933175][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.000030][ T6687] netlink: 'syz.0.306': attribute type 29 has an invalid length. [ 157.150381][ T6687] netlink: 'syz.0.306': attribute type 29 has an invalid length. [ 157.165354][ T6690] netlink: 'syz.0.306': attribute type 29 has an invalid length. [ 157.480848][ T6700] bridge0: port 1(team0) entered blocking state [ 157.518352][ T6700] bridge0: port 1(team0) entered disabled state [ 157.569457][ T6700] team0: entered allmulticast mode [ 157.600685][ T6700] team_slave_0: entered allmulticast mode [ 157.636248][ T6700] team_slave_1: entered allmulticast mode [ 157.691503][ T6700] team0: entered promiscuous mode [ 157.720927][ T6700] team_slave_0: entered promiscuous mode [ 157.759903][ T6700] team_slave_1: entered promiscuous mode [ 157.794076][ T6700] bridge0: port 1(team0) entered blocking state [ 157.800809][ T6700] bridge0: port 1(team0) entered forwarding state [ 157.874869][ T6699] wg2: entered promiscuous mode [ 157.879972][ T6699] wg2: entered allmulticast mode [ 159.034286][ T6722] wg2: entered promiscuous mode [ 159.044754][ T6722] wg2: entered allmulticast mode [ 159.079103][ T6726] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.323'. [ 162.644262][ T6733] syzkaller0: entered promiscuous mode [ 162.652414][ T6733] syzkaller0: entered allmulticast mode [ 163.275087][ T2916] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 164.764109][ T6771] wg2: entered promiscuous mode [ 164.769190][ T6771] wg2: entered allmulticast mode [ 164.920184][ T6776] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.334'. [ 166.317757][ T6797] netlink: 'syz.1.344': attribute type 10 has an invalid length. [ 166.419423][ T6797] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 166.966546][ T6807] syzkaller0: entered promiscuous mode [ 166.988064][ T6807] syzkaller0: entered allmulticast mode [ 168.941403][ T6817] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.428427][ T6839] syz.3.360 (6839) used greatest stack depth: 18504 bytes left [ 170.622060][ T6849] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.365'. [ 170.842468][ T6851] netlink: 'syz.2.366': attribute type 21 has an invalid length. [ 170.871787][ T6851] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.893208][ T6851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.901027][ T6851] IPv6: NLM_F_CREATE should be set when creating new route [ 170.908501][ T6851] IPv6: NLM_F_CREATE should be set when creating new route [ 170.915889][ T6851] IPv6: NLM_F_CREATE should be set when creating new route [ 171.313555][ T6858] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 171.790298][ T6855] syzkaller0: entered promiscuous mode [ 171.803586][ T6855] syzkaller0: entered allmulticast mode [ 171.841557][ T6858] netlink: 'syz.2.370': attribute type 10 has an invalid length. [ 171.874085][ T6858] syz_tun: entered promiscuous mode [ 171.923435][ T6858] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 174.608182][ T6890] netlink: 'syz.3.381': attribute type 10 has an invalid length. [ 174.634588][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.655129][ T6890] bridge_slave_1: left allmulticast mode [ 174.661566][ T6890] bridge_slave_1: left promiscuous mode [ 174.668461][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.682683][ T6890] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 174.770892][ T6893] syzkaller0: entered promiscuous mode [ 174.792643][ T6893] syzkaller0: entered allmulticast mode [ 175.326585][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 175.707050][ T6903] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.384'. [ 177.568745][ T6918] syzkaller0: entered promiscuous mode [ 177.574403][ T6918] syzkaller0: entered allmulticast mode [ 179.094152][ T6925] netlink: 'syz.0.392': attribute type 21 has an invalid length. [ 179.102257][ T6925] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.113555][ T6925] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.120854][ T6925] IPv6: NLM_F_CREATE should be set when creating new route [ 179.128222][ T6925] IPv6: NLM_F_CREATE should be set when creating new route [ 179.135516][ T6925] IPv6: NLM_F_CREATE should be set when creating new route [ 181.081212][ T6952] syzkaller0: entered promiscuous mode [ 181.087158][ T6952] syzkaller0: entered allmulticast mode [ 181.136557][ T6959] netlink: 'syz.3.404': attribute type 21 has an invalid length. [ 181.157181][ T6959] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.185135][ T6959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.192537][ T6959] IPv6: NLM_F_CREATE should be set when creating new route [ 181.199946][ T6959] IPv6: NLM_F_CREATE should be set when creating new route [ 181.207353][ T6959] IPv6: NLM_F_CREATE should be set when creating new route [ 183.473542][ T6962] netlink: 'syz.0.405': attribute type 10 has an invalid length. [ 183.482699][ T6962] syz_tun: entered promiscuous mode [ 183.509518][ T6962] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 183.522586][ T6968] macsec0: entered promiscuous mode [ 183.546504][ T6968] macsec0: entered allmulticast mode [ 183.552538][ T6968] veth1_macvtap: entered allmulticast mode [ 184.552138][ T6984] syzkaller0: entered promiscuous mode [ 184.558599][ T6984] syzkaller0: entered allmulticast mode [ 186.921646][ T7011] netlink: 'syz.3.419': attribute type 10 has an invalid length. [ 186.946959][ T7011] syz_tun: entered promiscuous mode [ 187.001255][ T7011] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 187.293741][ T7015] syzkaller0: entered promiscuous mode [ 187.387320][ T7015] syzkaller0: entered allmulticast mode [ 190.762076][ T7051] macsec0: entered promiscuous mode [ 190.792924][ T7051] macsec0: entered allmulticast mode [ 190.808764][ T7051] veth1_macvtap: entered allmulticast mode [ 192.740601][ T7061] syzkaller0: entered promiscuous mode [ 192.762337][ T7061] syzkaller0: entered allmulticast mode [ 194.300246][ T2986] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 194.750356][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.757067][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.420916][ T7125] syzkaller0: entered promiscuous mode [ 197.430033][ T7125] syzkaller0: entered allmulticast mode [ 202.321456][ T7151] wg2: left promiscuous mode [ 202.326254][ T7151] wg2: left allmulticast mode [ 204.926988][ T7178] syzkaller0: entered promiscuous mode [ 204.932531][ T7178] syzkaller0: entered allmulticast mode [ 206.957343][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 206.958343][ T5799] Bluetooth: hci0: command 0x0406 tx timeout [ 206.973294][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 206.974646][ T5104] Bluetooth: hci1: command 0x0406 tx timeout [ 207.378083][ T5791] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 207.378160][ T5791] Bluetooth: hci3: unexpected event for opcode 0x2064 [ 207.550214][ T5791] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 208.620568][ T5791] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 208.671877][ T7226] syzkaller0: entered allmulticast mode [ 208.928562][ T7233] netlink: 'syz.3.494': attribute type 10 has an invalid length. [ 208.961469][ T7233] veth1_vlan: entered allmulticast mode [ 209.216310][ T7233] team0: Device veth1_vlan failed to register rx_handler [ 210.202636][ T7233] syz.3.494 (7233) used greatest stack depth: 18024 bytes left [ 210.411666][ T7241] netlink: 'syz.2.502': attribute type 10 has an invalid length. [ 210.436922][ T7241] netlink: 55 bytes leftover after parsing attributes in process `syz.2.502'. [ 210.635231][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 210.704920][ T7241] team0: Port device virt_wifi0 removed [ 211.062720][ T7252] netlink: 'syz.0.505': attribute type 39 has an invalid length. [ 211.356827][ T7255] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.506'. [ 211.736354][ T5791] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 211.856860][ T5791] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6 [ 212.293893][ T5791] Bluetooth: hci2: unexpected cc 0x1004 length: 12 > 11 [ 212.309557][ T5791] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 212.460031][ T7283] netlink: 'syz.1.518': attribute type 39 has an invalid length. [ 212.763989][ T7288] netlink: 'syz.0.517': attribute type 10 has an invalid length. [ 212.805095][ T7288] netlink: 55 bytes leftover after parsing attributes in process `syz.0.517'. [ 213.763512][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 214.007641][ T5791] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 215.062391][ T7313] netlink: 'syz.3.530': attribute type 10 has an invalid length. [ 215.101256][ T7313] netlink: 55 bytes leftover after parsing attributes in process `syz.3.530'. [ 215.288987][ T7322] netlink: 'syz.2.534': attribute type 10 has an invalid length. [ 215.359045][ T7322] veth1_vlan: entered allmulticast mode [ 215.826426][ T7322] team0: Device veth1_vlan failed to register rx_handler [ 216.075041][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 216.330126][ T5791] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 216.338958][ T5791] Bluetooth: hci2: Injecting HCI hardware error event [ 216.347493][ T5801] Bluetooth: hci2: hardware error 0x00 [ 216.355096][ T5791] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 218.640892][ T5798] Bluetooth: hci1: unexpected cc 0x1004 length: 12 > 11 [ 218.656205][ T5798] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 219.697363][ T7351] netlink: 164 bytes leftover after parsing attributes in process `syz.0.544'. [ 219.736658][ T7349] netlink: 164 bytes leftover after parsing attributes in process `syz.0.544'. [ 220.022049][ T7357] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 220.081248][ T7357] netlink: 'syz.0.548': attribute type 10 has an invalid length. [ 220.130652][ T7357] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 220.131962][ T7361] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.549'. [ 220.484981][ T5801] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 220.516139][ T5801] Bluetooth: hci3: unexpected cc 0x1004 length: 12 > 11 [ 220.524075][ T5801] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 221.170163][ T7378] syzkaller0: entered allmulticast mode [ 222.125542][ T7401] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 222.140725][ T7401] netlink: 'syz.2.562': attribute type 10 has an invalid length. [ 222.150294][ T7401] bond0: (slave wlan1): Opening slave failed [ 222.243408][ T11] wlan1: Trigger new scan to find an IBSS to join [ 222.532770][ T7406] netlink: 1 bytes leftover after parsing attributes in process `syz.2.565'. [ 222.562871][ T7410] netlink: 'syz.0.567': attribute type 15 has an invalid length. [ 222.573817][ T7410] netlink: 'syz.0.567': attribute type 5 has an invalid length. [ 222.588497][ T7410] netlink: 144 bytes leftover after parsing attributes in process `syz.0.567'. [ 222.732831][ T5801] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 222.742521][ T5801] Bluetooth: hci1: Injecting HCI hardware error event [ 222.750944][ T5801] Bluetooth: hci1: hardware error 0x00 [ 222.878221][ T7414] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.572'. [ 222.946250][ T7418] netlink: 'syz.2.571': attribute type 10 has an invalid length. [ 222.954608][ T7418] netlink: 40 bytes leftover after parsing attributes in process `syz.2.571'. [ 222.970317][ T7418] team0: entered promiscuous mode [ 222.980979][ T7418] team_slave_0: entered promiscuous mode [ 222.993821][ T7418] team_slave_1: entered promiscuous mode [ 223.001945][ T7418] team0: entered allmulticast mode [ 223.014950][ T7418] team_slave_0: entered allmulticast mode [ 223.029798][ T7418] team_slave_1: entered allmulticast mode [ 223.109487][ T7418] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.118755][ T7418] batman_adv: batadv0: Interface activated: team0 [ 223.126767][ T7418] batman_adv: batadv0: Interface deactivated: team0 [ 223.134099][ T7418] batman_adv: batadv0: Removing interface: team0 [ 223.149244][ T7418] bridge0: port 3(team0) entered blocking state [ 223.157397][ T7418] bridge0: port 3(team0) entered disabled state [ 223.181758][ T7418] bridge0: port 3(team0) entered blocking state [ 223.188940][ T7418] bridge0: port 3(team0) entered forwarding state [ 223.580093][ T7428] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 223.599212][ T7428] netlink: 'syz.1.577': attribute type 10 has an invalid length. [ 223.627403][ T7428] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 224.178814][ T7441] netlink: 'syz.1.581': attribute type 15 has an invalid length. [ 224.197392][ T7441] netlink: 'syz.1.581': attribute type 5 has an invalid length. [ 224.207232][ T7441] netlink: 144 bytes leftover after parsing attributes in process `syz.1.581'. [ 224.218008][ T7444] netlink: 1 bytes leftover after parsing attributes in process `syz.3.580'. [ 224.565090][ T5798] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 224.574005][ T5798] Bluetooth: hci3: Injecting HCI hardware error event [ 224.582554][ T5798] Bluetooth: hci3: hardware error 0x00 [ 224.877855][ T5801] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 225.275089][ T2879] wlan1: Trigger new scan to find an IBSS to join [ 225.571146][ T7462] netlink: 'syz.1.588': attribute type 9 has an invalid length. [ 225.601619][ T7462] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.588'. [ 225.790429][ T7467] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 225.849277][ T7467] netlink: 'syz.3.591': attribute type 10 has an invalid length. [ 226.045737][ T7467] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 226.237112][ T11] wlan1: Trigger new scan to find an IBSS to join [ 226.564415][ T7479] netlink: 'syz.2.595': attribute type 33 has an invalid length. [ 226.635837][ T5798] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 226.642477][ T7479] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.595'. [ 227.041628][ T7489] netlink: 'syz.2.599': attribute type 15 has an invalid length. [ 227.062763][ T7489] netlink: 'syz.2.599': attribute type 5 has an invalid length. [ 227.082065][ T7489] netlink: 144 bytes leftover after parsing attributes in process `syz.2.599'. [ 227.470023][ T7497] netlink: 'syz.2.602': attribute type 39 has an invalid length. [ 227.799518][ T7502] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 227.885417][ T7504] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 227.897254][ T7505] netlink: 'syz.1.605': attribute type 10 has an invalid length. [ 227.941396][ T7501] netlink: 'syz.3.604': attribute type 10 has an invalid length. [ 227.993617][ T7507] sit0: left allmulticast mode [ 228.153204][ T7510] netlink: 'syz.2.607': attribute type 10 has an invalid length. [ 228.195556][ T7510] macvlan1: entered allmulticast mode [ 228.201203][ T7510] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 228.287814][ T7518] netlink: 'syz.3.609': attribute type 15 has an invalid length. [ 228.311029][ T7518] netlink: 144 bytes leftover after parsing attributes in process `syz.3.609'. [ 228.540109][ T7521] ÿÿÿÿge0: port 1(macsec0) entered blocking state [ 228.574048][ T7521] ÿÿÿÿge0: port 1(macsec0) entered disabled state [ 228.587408][ T7521] macsec0: entered allmulticast mode [ 228.592774][ T7521] veth1_macvtap: entered allmulticast mode [ 228.630306][ T7521] macsec0: entered promiscuous mode [ 229.276618][ T137] wlan1: Trigger new scan to find an IBSS to join [ 229.501696][ T7543] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 229.663396][ T7545] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 229.759747][ T7545] bond0: (slave wlan1): Opening slave failed [ 230.198760][ T7560] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 230.226730][ T7560] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 230.271826][ T2879] wlan1: Creating new IBSS network, BSSID a2:ae:30:b5:2a:7d [ 230.331360][ T7564] veth1_vlan: entered allmulticast mode [ 230.986507][ T7564] team0: Device veth1_vlan failed to register rx_handler [ 233.788505][ T7579] validate_nla: 5 callbacks suppressed [ 233.788525][ T7579] netlink: 'syz.3.632': attribute type 39 has an invalid length. [ 233.950974][ T7584] netlink: 'syz.2.634': attribute type 10 has an invalid length. [ 233.975384][ T7584] bond0: (slave bond_slave_0): Releasing backup interface [ 234.005677][ T7586] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 234.061970][ T7586] netlink: 'syz.1.633': attribute type 10 has an invalid length. [ 234.318256][ T7597] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 234.332513][ T7597] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 234.430503][ T7590] netlink: 'syz.0.636': attribute type 9 has an invalid length. [ 234.465553][ T7590] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.636'. [ 234.953052][ T7608] netlink: 'syz.3.644': attribute type 39 has an invalid length. [ 235.949846][ T7621] netlink: 'syz.1.648': attribute type 39 has an invalid length. [ 236.205107][ T7624] netlink: 'syz.0.650': attribute type 10 has an invalid length. [ 236.213266][ T7624] netlink: 40 bytes leftover after parsing attributes in process `syz.0.650'. [ 237.032105][ T7638] bridge0: port 3(bond0) entered blocking state [ 237.070949][ T7638] bridge0: port 3(bond0) entered disabled state [ 237.117820][ T7638] bond0: entered allmulticast mode [ 237.154362][ T7638] bond_slave_0: entered allmulticast mode [ 237.206711][ T7638] bond_slave_1: entered allmulticast mode [ 237.257022][ T7638] syz_tun: entered allmulticast mode [ 237.305708][ T7638] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 237.422463][ T7638] bond0: entered promiscuous mode [ 237.453592][ T7638] bond_slave_0: entered promiscuous mode [ 237.461348][ T7638] bond_slave_1: entered promiscuous mode [ 237.485550][ T7638] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 237.596245][ T7638] bridge0: port 3(bond0) entered blocking state [ 237.602674][ T7638] bridge0: port 3(bond0) entered forwarding state [ 237.701339][ T7645] netlink: 'syz.1.654': attribute type 39 has an invalid length. [ 238.197472][ T7717] : renamed from bond0 (while UP) [ 238.462442][ T7721] netlink: 'syz.0.666': attribute type 10 has an invalid length. [ 238.568020][ T7721] bridge0: port 4(netdevsim0) entered blocking state [ 238.588508][ T7721] bridge0: port 4(netdevsim0) entered disabled state [ 238.676653][ T7721] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 238.788297][ T7721] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 238.882128][ T7725] netlink: 'syz.3.659': attribute type 9 has an invalid length. [ 238.894312][ T7725] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.659'. [ 239.205295][ T7730] netlink: 'syz.1.660': attribute type 10 has an invalid length. [ 239.295057][ T7730] netlink: 40 bytes leftover after parsing attributes in process `syz.1.660'. [ 239.347640][ T7730] team0: entered promiscuous mode [ 239.392248][ T7730] team_slave_0: entered promiscuous mode [ 239.438659][ T7730] team_slave_1: entered promiscuous mode [ 239.476432][ T7730] team0: entered allmulticast mode [ 239.509685][ T5798] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 239.527596][ T7730] team_slave_0: entered allmulticast mode [ 239.556759][ T7730] team_slave_1: entered allmulticast mode [ 239.612312][ T7730] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 239.872799][ T7738] netlink: 'syz.3.664': attribute type 10 has an invalid length. [ 239.898699][ T7738] : (slave bond_slave_0): Releasing backup interface [ 240.826226][ T7748] netlink: 'syz.2.670': attribute type 39 has an invalid length. [ 241.099715][ T7752] netlink: 'syz.1.672': attribute type 10 has an invalid length. [ 241.156166][ T5798] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6 [ 242.070235][ T7764] netlink: 'syz.3.675': attribute type 10 has an invalid length. [ 242.117716][ T7764] netlink: 40 bytes leftover after parsing attributes in process `syz.3.675'. [ 242.487295][ T7766] netlink: 'syz.0.677': attribute type 10 has an invalid length. [ 242.536263][ T7766] bond0: (slave bond_slave_0): Releasing backup interface [ 242.560806][ T7766] bond_slave_0: left promiscuous mode [ 242.597065][ T7766] bond_slave_0: left allmulticast mode [ 243.931245][ T7782] netlink: 'syz.0.683': attribute type 39 has an invalid length. [ 244.516513][ T7784] netlink: 'syz.2.684': attribute type 10 has an invalid length. [ 244.727891][ T7784] bridge0: port 4(netdevsim0) entered blocking state [ 244.785919][ T7784] bridge0: port 4(netdevsim0) entered disabled state [ 244.954247][ T7784] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 245.197947][ T7784] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 245.607068][ T7793] syzkaller0: entered promiscuous mode [ 245.629318][ T7793] syzkaller0: entered allmulticast mode [ 245.823691][ T6653] syzkaller0: tun_net_xmit 48 [ 245.837807][ T7800] netlink: 'syz.0.696': attribute type 10 has an invalid length. [ 245.866154][ T7800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.696'. [ 248.521546][ T7803] netlink: 'syz.2.688': attribute type 9 has an invalid length. [ 248.529532][ T7803] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.688'. [ 248.943484][ T7819] netlink: 'syz.1.689': attribute type 10 has an invalid length. [ 248.964850][ T7819] bond0: (slave bond_slave_0): Releasing backup interface [ 249.392526][ T7832] netlink: 'syz.2.705': attribute type 10 has an invalid length. [ 249.477665][ T7835] netlink: 'syz.3.698': attribute type 10 has an invalid length. [ 249.553376][ T7835] bridge0: port 2(netdevsim0) entered blocking state [ 249.596309][ T7835] bridge0: port 2(netdevsim0) entered disabled state [ 249.615792][ T7835] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 249.658600][ T7835] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 249.785712][ T7842] syzkaller0: entered promiscuous mode [ 249.839633][ T7842] syzkaller0: entered allmulticast mode [ 249.856197][ T5881] syzkaller0: tun_net_xmit 48 [ 250.264397][ T7850] bridge0: port 4() entered blocking state [ 250.277377][ T7850] bridge0: port 4() entered disabled state [ 250.291636][ T7850] : entered allmulticast mode [ 250.297167][ T7850] bond_slave_1: entered allmulticast mode [ 250.303372][ T7850] bridge_slave_1: entered allmulticast mode [ 250.357458][ T7850] syz_tun: entered allmulticast mode [ 250.419495][ T7850] : entered promiscuous mode [ 250.424576][ T7850] bond_slave_1: entered promiscuous mode [ 250.438423][ T7850] bridge_slave_1: entered promiscuous mode [ 251.588516][ T5798] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 251.598701][ T5798] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 252.513315][ T7861] netlink: 'syz.0.708': attribute type 10 has an invalid length. [ 252.521247][ T7861] netlink: 40 bytes leftover after parsing attributes in process `syz.0.708'. [ 253.116271][ T7883] pim6reg1: entered promiscuous mode [ 253.136087][ T7883] pim6reg1: entered allmulticast mode [ 256.092948][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.101491][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.249827][ T7920] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 256.316203][ T7920] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 256.355458][ T7920] veth0_to_bridge: entered allmulticast mode [ 256.417265][ T7920] veth0_to_bridge: entered promiscuous mode [ 256.521284][ T7922] netlink: set zone limit has 8 unknown bytes [ 256.563661][ T7922] netlink: 'syz.2.729': attribute type 153 has an invalid length. [ 256.604923][ T7922] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.729'. [ 258.560316][ T5798] Bluetooth: hci0: unexpected event 0x17 length: 15 > 6 [ 262.061641][ T7981] netlink: 10 bytes leftover after parsing attributes in process `syz.0.751'. [ 262.177560][ T7981] macvlan0: entered promiscuous mode [ 262.476175][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 268.657708][ T8070] bridge0: port 5(bond0) entered blocking state [ 268.669457][ T8070] bridge0: port 5(bond0) entered disabled state [ 268.697659][ T8070] bond0: entered allmulticast mode [ 268.703368][ T8072] netlink: set zone limit has 8 unknown bytes [ 268.715844][ T8070] bond_slave_1: entered allmulticast mode [ 268.742433][ T8072] netlink: 'syz.0.781': attribute type 153 has an invalid length. [ 268.756301][ T8070] syz_tun: entered allmulticast mode [ 268.762029][ T8072] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.781'. [ 268.797823][ T8070] bond0: entered promiscuous mode [ 268.803069][ T8070] bond_slave_1: entered promiscuous mode [ 268.811393][ T8070] bridge0: port 5(bond0) entered blocking state [ 268.818334][ T8070] bridge0: port 5(bond0) entered forwarding state [ 269.322081][ T8089] netlink: 10 bytes leftover after parsing attributes in process `syz.2.787'. [ 269.333069][ T8089] macvlan0: entered promiscuous mode [ 269.891454][ T5798] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 270.760171][ T8128] netlink: 10 bytes leftover after parsing attributes in process `syz.1.802'. [ 270.782612][ T8128] macvlan0: entered promiscuous mode [ 270.991748][ T5798] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 272.235673][ T48] wlan1: Trigger new scan to find an IBSS to join [ 273.055172][ T8166] netlink: 10 bytes leftover after parsing attributes in process `syz.3.818'. [ 273.075861][ T8166] macvlan0: entered promiscuous mode [ 276.024374][ T8208] syzkaller0: entered promiscuous mode [ 276.048464][ T8208] syzkaller0: entered allmulticast mode [ 276.081089][ T5881] syzkaller0: tun_net_xmit 48 [ 276.237399][ T48] wlan1: Trigger new scan to find an IBSS to join [ 277.953991][ T8223] netlink: 10 bytes leftover after parsing attributes in process `syz.3.838'. [ 278.429839][ T8237] netlink: set zone limit has 8 unknown bytes [ 278.451807][ T8237] netlink: 'syz.1.841': attribute type 153 has an invalid length. [ 278.465835][ T8237] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.841'. [ 279.198506][ T2986] wlan1: Trigger new scan to find an IBSS to join [ 279.340418][ T48] wlan1: Creating new IBSS network, BSSID 6a:ba:f8:ed:fe:48 [ 280.017115][ T8252] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 280.045957][ T8252] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 280.072774][ T8252] veth0_to_bridge: entered allmulticast mode [ 280.109312][ T8252] veth0_to_bridge: entered promiscuous mode [ 280.983588][ T8266] syzkaller0: entered promiscuous mode [ 280.993326][ T8266] syzkaller0: entered allmulticast mode [ 281.008609][ T6653] syzkaller0: tun_net_xmit 48 [ 282.874519][ T8284] netlink: set zone limit has 8 unknown bytes [ 282.890759][ T8284] netlink: 'syz.0.867': attribute type 153 has an invalid length. [ 282.906010][ T8284] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.867'. [ 284.039023][ T8296] netlink: set zone limit has 8 unknown bytes [ 284.058721][ T8296] netlink: 'syz.0.871': attribute type 153 has an invalid length. [ 284.067876][ T8296] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.871'. [ 284.110519][ T8300] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 284.130446][ T8300] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 284.153167][ T8300] veth0_to_bridge: entered allmulticast mode [ 284.201460][ T8300] veth0_to_bridge: entered promiscuous mode [ 284.501533][ T8309] netlink: set zone limit has 8 unknown bytes [ 285.074292][ T8313] netlink: 10 bytes leftover after parsing attributes in process `syz.0.869'. [ 286.393608][ T8330] netlink: set zone limit has 8 unknown bytes [ 286.442208][ T8330] netlink: 'syz.0.875': attribute type 153 has an invalid length. [ 286.453233][ T8330] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.875'. [ 286.559522][ T8336] netlink: 'syz.2.876': attribute type 64 has an invalid length. [ 286.851051][ T8341] netlink: set zone limit has 8 unknown bytes [ 288.804353][ T8369] netlink: 'syz.1.888': attribute type 153 has an invalid length. [ 288.921678][ T8369] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.888'. [ 289.266285][ T8373] delete_channel: no stack [ 289.676118][ T8378] netlink: set zone limit has 8 unknown bytes [ 289.783702][ T8380] netlink: 'syz.3.892': attribute type 10 has an invalid length. [ 289.853512][ T8380] : (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 289.878787][ T8380] : (slave hsr0): The slave device specified does not support setting the MAC address [ 289.894526][ T8380] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 289.908853][ T8380] : (slave hsr0): Error -22 calling dev_set_mtu [ 289.930965][ T8380] netlink: 'syz.3.892': attribute type 27 has an invalid length. [ 289.939784][ T8380] C: renamed from team_slave_0 (while UP) [ 290.415723][ T8398] netlink: 'syz.2.898': attribute type 153 has an invalid length. [ 290.423734][ T8398] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.898'. [ 290.719892][ T8404] netlink: 'syz.2.901': attribute type 15 has an invalid length. [ 290.750877][ T8404] netlink: 'syz.2.901': attribute type 5 has an invalid length. [ 290.842136][ T8404] netlink: 144 bytes leftover after parsing attributes in process `syz.2.901'. [ 291.555293][ T8420] netlink: set zone limit has 8 unknown bytes [ 292.037808][ T8429] netlink: 'syz.3.908': attribute type 153 has an invalid length. [ 292.055327][ T8429] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.908'. [ 293.119700][ T8437] netlink: 'syz.1.912': attribute type 39 has an invalid length. [ 293.135039][ T8435] netlink: 'syz.2.910': attribute type 10 has an invalid length. [ 293.157007][ T8435] netlink: 152 bytes leftover after parsing attributes in process `syz.2.910'. [ 293.171196][ T8435] bridge0: port 3(team0) entered disabled state [ 293.283558][ T8435] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 293.305605][ T8442] netlink: 'syz.1.912': attribute type 39 has an invalid length. [ 293.397054][ T8442] veth0_macvtap: left promiscuous mode [ 293.529948][ T8447] netlink: set zone limit has 8 unknown bytes [ 294.573694][ T8462] netlink: 'syz.2.919': attribute type 2 has an invalid length. [ 294.605079][ T8462] netlink: 164 bytes leftover after parsing attributes in process `syz.2.919'. [ 295.900904][ T8484] veth1_macvtap: left allmulticast mode [ 295.944670][ T8484] veth1_macvtap: left promiscuous mode [ 295.995620][ T8484] macsec0: left promiscuous mode [ 296.405686][ T8487] veth1_macvtap: entered promiscuous mode [ 296.411509][ T8487] veth1_macvtap: entered allmulticast mode [ 296.444876][ T8487] macsec0: entered promiscuous mode [ 297.566477][ T8509] netlink: set zone limit has 8 unknown bytes [ 297.593801][ T8509] validate_nla: 1 callbacks suppressed [ 297.593816][ T8509] netlink: 'syz.2.944': attribute type 153 has an invalid length. [ 297.656039][ T8509] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.944'. [ 297.906126][ T8516] netlink: 'syz.3.936': attribute type 64 has an invalid length. [ 298.603270][ T8533] veth1_macvtap: left allmulticast mode [ 298.733928][ T8533] veth1_macvtap: left promiscuous mode [ 298.917990][ T8535] veth1_macvtap: entered promiscuous mode [ 298.961920][ T8535] veth1_macvtap: entered allmulticast mode [ 299.018270][ T8538] netlink: 'syz.2.946': attribute type 39 has an invalid length. [ 299.392597][ T8543] netlink: 'syz.2.946': attribute type 39 has an invalid length. [ 299.417920][ T8543] veth0_macvtap: left promiscuous mode [ 299.563029][ T8551] netlink: set zone limit has 8 unknown bytes [ 299.631429][ T8551] netlink: 'syz.0.949': attribute type 153 has an invalid length. [ 299.672703][ T8551] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.949'. [ 299.723614][ T8553] netlink: 'syz.3.950': attribute type 15 has an invalid length. [ 299.740428][ T8553] netlink: 'syz.3.950': attribute type 5 has an invalid length. [ 299.759458][ T8553] netlink: 144 bytes leftover after parsing attributes in process `syz.3.950'. [ 300.555991][ T8571] netlink: 'syz.0.953': attribute type 64 has an invalid length. [ 302.675040][ T8591] netlink: 'syz.3.964': attribute type 39 has an invalid length. [ 303.259983][ T8594] netlink: 'syz.1.963': attribute type 15 has an invalid length. [ 303.291991][ T8594] netlink: 'syz.1.963': attribute type 5 has an invalid length. [ 303.348282][ T8594] netlink: 144 bytes leftover after parsing attributes in process `syz.1.963'. [ 303.485289][ T8602] netlink: 'syz.3.964': attribute type 39 has an invalid length. [ 303.566255][ T8602] veth0_macvtap: left promiscuous mode [ 308.344810][ T8643] netlink: 'syz.0.979': attribute type 15 has an invalid length. [ 308.369306][ T8643] netlink: 'syz.0.979': attribute type 5 has an invalid length. [ 308.467614][ T8643] netlink: 144 bytes leftover after parsing attributes in process `syz.0.979'. [ 309.785109][ T8656] netlink: 'syz.0.981': attribute type 39 has an invalid length. [ 309.987193][ T8658] netlink: 'syz.0.981': attribute type 39 has an invalid length. [ 310.146689][ T8658] veth0_macvtap: left promiscuous mode [ 313.677312][ T8696] netlink: 'syz.2.1000': attribute type 39 has an invalid length. [ 313.805040][ T8699] netlink: 'syz.2.1000': attribute type 39 has an invalid length. [ 314.605385][ T8707] netlink: 'syz.0.1003': attribute type 15 has an invalid length. [ 314.613398][ T8707] netlink: 'syz.0.1003': attribute type 5 has an invalid length. [ 314.703480][ T8707] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1003'. [ 315.192346][ T5798] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 317.521129][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.544259][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.249443][ T8761] netlink: set zone limit has 8 unknown bytes [ 318.317815][ T8761] netlink: 'syz.0.1029': attribute type 153 has an invalid length. [ 318.336955][ T8761] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1029'. [ 319.116195][ T8791] netlink: set zone limit has 8 unknown bytes [ 319.132378][ T8791] netlink: 'syz.0.1042': attribute type 153 has an invalid length. [ 319.142560][ T8791] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1042'. [ 319.839664][ T8807] netlink: 'syz.3.1049': attribute type 15 has an invalid length. [ 319.853032][ T8807] netlink: 'syz.3.1049': attribute type 5 has an invalid length. [ 319.862720][ T8807] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1049'. [ 319.996788][ T8813] netlink: set zone limit has 8 unknown bytes [ 320.018940][ T8813] netlink: 'syz.2.1053': attribute type 153 has an invalid length. [ 320.128234][ T8813] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1053'. [ 325.256505][ T5798] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 326.057080][ T5798] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 327.052503][ T9041] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 327.066596][ T9041] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 328.213990][ T9078] netlink: set zone limit has 8 unknown bytes [ 328.957132][ T9105] netlink: set zone limit has 8 unknown bytes [ 329.026390][ T9105] netlink: 'syz.2.1183': attribute type 153 has an invalid length. [ 329.039577][ T9105] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1183'. [ 330.437973][ T9138] netlink: set zone limit has 8 unknown bytes [ 330.479806][ T9138] netlink: 'syz.1.1197': attribute type 153 has an invalid length. [ 330.504868][ T9138] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1197'. [ 330.807325][ T9145] netlink: 'syz.2.1201': attribute type 10 has an invalid length. [ 330.825012][ T9145] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1201'. [ 330.834448][ T9145] bridge0: port 3(dummy0) entered blocking state [ 330.885095][ T9145] bridge0: port 3(dummy0) entered disabled state [ 330.892255][ T9145] dummy0: entered allmulticast mode [ 330.919362][ T9145] dummy0: entered promiscuous mode [ 330.927666][ T9145] bridge0: port 3(dummy0) entered blocking state [ 330.934254][ T9145] bridge0: port 3(dummy0) entered forwarding state [ 335.735440][ T9199] netlink: 'syz.2.1225': attribute type 10 has an invalid length. [ 335.778365][ T9199] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1225'. [ 335.825954][ T9199] ipvlan1: entered promiscuous mode [ 335.843866][ T9199] bridge0: port 6(ipvlan1) entered blocking state [ 335.861939][ T9199] bridge0: port 6(ipvlan1) entered disabled state [ 335.881456][ T9199] ipvlan1: entered allmulticast mode [ 335.894953][ T9199] veth0_vlan: entered allmulticast mode [ 335.923194][ T9199] ipvlan1: left allmulticast mode [ 335.934874][ T9199] veth0_vlan: left allmulticast mode [ 339.243907][ T9232] netlink: set zone limit has 8 unknown bytes [ 339.254050][ T5798] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 339.321573][ T9232] netlink: 'syz.2.1240': attribute type 153 has an invalid length. [ 339.376689][ T9232] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1240'. [ 343.500596][ T9287] netlink: 'syz.3.1262': attribute type 10 has an invalid length. [ 343.522613][ T9287] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1262'. [ 343.543020][ T9287] ipvlan1: entered promiscuous mode [ 343.570460][ T9287] bridge0: port 5(ipvlan1) entered blocking state [ 343.589973][ T9287] bridge0: port 5(ipvlan1) entered disabled state [ 343.608824][ T9287] ipvlan1: entered allmulticast mode [ 343.629628][ T9287] veth0_vlan: entered allmulticast mode [ 343.654524][ T9287] ipvlan1: left allmulticast mode [ 343.676993][ T9287] veth0_vlan: left allmulticast mode [ 344.290959][ T5798] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 345.943223][ T9314] netlink: 'syz.0.1275': attribute type 10 has an invalid length. [ 346.036376][ T9314] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1275'. [ 346.073762][ T9314] ipvlan1: entered promiscuous mode [ 346.178395][ T9314] bridge0: port 5(ipvlan1) entered blocking state [ 346.274914][ T9314] bridge0: port 5(ipvlan1) entered disabled state [ 346.281740][ T9314] ipvlan1: entered allmulticast mode [ 346.395219][ T9314] veth0_vlan: entered allmulticast mode [ 346.476291][ T9314] ipvlan1: left allmulticast mode [ 346.481441][ T9314] veth0_vlan: left allmulticast mode [ 348.366289][ T9340] netlink: set zone limit has 8 unknown bytes [ 348.424532][ T9340] netlink: 'syz.3.1289': attribute type 153 has an invalid length. [ 348.457533][ T9340] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1289'. [ 350.146981][ T9360] netlink: 'syz.1.1293': attribute type 10 has an invalid length. [ 350.187880][ T9360] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1293'. [ 350.198203][ T9360] ipvlan1: entered promiscuous mode [ 350.885793][ T9365] netlink: 'syz.1.1296': attribute type 5 has an invalid length. [ 351.573799][ T9373] netlink: set zone limit has 8 unknown bytes [ 351.601716][ T9373] netlink: 'syz.3.1300': attribute type 153 has an invalid length. [ 351.636447][ T9373] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1300'. [ 354.434345][ T9404] netlink: 'syz.0.1316': attribute type 2 has an invalid length. [ 354.453712][ T9404] netlink: 'syz.0.1316': attribute type 8 has an invalid length. [ 354.472014][ T9404] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1316'. [ 356.134949][ T9427] netlink: 'syz.2.1325': attribute type 2 has an invalid length. [ 356.157840][ T9427] netlink: 'syz.2.1325': attribute type 1 has an invalid length. [ 356.181198][ T9427] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1325'. [ 356.522345][ T9434] netlink: 'syz.1.1328': attribute type 21 has an invalid length. [ 356.539677][ T9434] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1328'. [ 356.584877][ T9434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1328'. [ 357.280209][ T9443] netlink: 'syz.0.1332': attribute type 153 has an invalid length. [ 357.305194][ T9443] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1332'. [ 359.571519][ T9473] netlink: 'syz.0.1344': attribute type 153 has an invalid length. [ 359.613345][ T9473] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1344'. [ 360.693332][ T9501] netlink: 'syz.2.1364': attribute type 21 has an invalid length. [ 360.711124][ T9501] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1364'. [ 360.735461][ T9501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1364'. [ 360.964960][ T9505] netlink: 'syz.2.1358': attribute type 153 has an invalid length. [ 360.972951][ T9505] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1358'. [ 361.364930][ T9517] vlan1: entered allmulticast mode [ 361.370610][ T9517] veth0_vlan: entered allmulticast mode [ 361.399466][ T9519] netlink: 'syz.2.1363': attribute type 10 has an invalid length. [ 362.530365][ T9537] netlink: 'syz.2.1373': attribute type 153 has an invalid length. [ 362.548636][ T9537] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1373'. [ 362.848645][ T9549] Illegal XDP return value 4294967274 on prog (id 754) dev N/A, expect packet loss! [ 362.995047][ T5798] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 363.709691][ T9574] ÿ: renamed from bond_slave_0 [ 364.180689][ T9590] dummy0: left allmulticast mode [ 364.187977][ T9590] dummy0: left promiscuous mode [ 364.194029][ T9590] bridge0: port 3(dummy0) entered disabled state [ 364.207003][ T9590] bond0: left allmulticast mode [ 364.211919][ T9590] bond_slave_1: left allmulticast mode [ 364.225166][ T9590] syz_tun: left allmulticast mode [ 364.230280][ T9590] bond0: left promiscuous mode [ 364.238739][ T9590] bond_slave_1: left promiscuous mode [ 364.245143][ T9590] bridge0: port 5(bond0) entered disabled state [ 364.275427][ T9590] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 364.292346][ T9590] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 364.306217][ T9590] bridge0: port 4(netdevsim0) entered disabled state [ 364.318264][ T9590] bridge_slave_1: left allmulticast mode [ 364.324101][ T9590] bridge_slave_1: left promiscuous mode [ 364.334425][ T9590] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.357921][ T9590] bridge_slave_0: left allmulticast mode [ 364.363689][ T9590] bridge_slave_0: left promiscuous mode [ 364.370175][ T9590] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.476835][ T9598] @ÿ: renamed from bond_slave_0 [ 364.695915][ T9604] netlink: 'syz.2.1403': attribute type 2 has an invalid length. [ 364.703724][ T9604] netlink: 'syz.2.1403': attribute type 8 has an invalid length. [ 364.712935][ T9604] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1403'. [ 365.571392][ T9624] @ÿ: renamed from bond_slave_0 [ 365.742572][ T9632] netlink: 'syz.1.1415': attribute type 2 has an invalid length. [ 365.755053][ T9632] netlink: 'syz.1.1415': attribute type 8 has an invalid length. [ 365.762846][ T9632] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1415'. [ 366.774334][ T9656] @ÿ: renamed from bond_slave_0 [ 366.864095][ T9658] netlink: 'syz.1.1426': attribute type 13 has an invalid length. [ 367.159255][ T9668] netlink: 'syz.3.1428': attribute type 2 has an invalid length. [ 367.167248][ T9668] netlink: 'syz.3.1428': attribute type 8 has an invalid length. [ 367.180970][ T9668] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1428'. [ 367.875259][ T9690] netlink: 'syz.0.1440': attribute type 13 has an invalid length. [ 368.836572][ T9716] netlink: 'syz.0.1450': attribute type 3 has an invalid length. [ 368.862477][ T9716] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1450'. [ 368.971850][ T9720] netlink: 'syz.2.1451': attribute type 13 has an invalid length. [ 369.029160][ T9722] netlink: 'syz.3.1452': attribute type 10 has an invalid length. [ 369.196742][ T48] wlan1: Trigger new scan to find an IBSS to join [ 369.203276][ T48] ================================================================================ [ 369.221023][ T48] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1209:5 [ 369.236459][ T48] index 1 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 369.263725][ T48] CPU: 1 PID: 48 Comm: kworker/u4:3 Not tainted 6.6.97-syzkaller #0 [ 369.271790][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.281885][ T48] Workqueue: events_unbound cfg80211_wiphy_work [ 369.288186][ T48] Call Trace: [ 369.291493][ T48] [ 369.294449][ T48] dump_stack_lvl+0x16c/0x230 [ 369.299153][ T48] ? show_regs_print_info+0x20/0x20 [ 369.304384][ T48] ? load_image+0x3b0/0x3b0 [ 369.308966][ T48] ? mutex_lock_nested+0x20/0x20 [ 369.314004][ T48] ubsan_epilogue+0xa/0x30 [ 369.318476][ T48] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 369.324263][ T48] ieee80211_request_ibss_scan+0x4eb/0x790 [ 369.330150][ T48] ieee80211_ibss_work+0xdfd/0x10c0 [ 369.335423][ T48] ? ieee80211_ibss_rx_queued_mgmt+0x2ac0/0x2ac0 [ 369.341808][ T48] ? mark_lock+0x94/0x320 [ 369.346204][ T48] ? ieee80211_iface_work+0xbca/0xc70 [ 369.351641][ T48] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.356908][ T48] cfg80211_wiphy_work+0x225/0x260 [ 369.362103][ T48] ? process_scheduled_works+0x957/0x15b0 [ 369.367888][ T48] process_scheduled_works+0xa45/0x15b0 [ 369.373515][ T48] ? assign_work+0x400/0x400 [ 369.378145][ T48] ? assign_work+0x39e/0x400 [ 369.382764][ T48] worker_thread+0xa55/0xfc0 [ 369.387403][ T48] kthread+0x2fa/0x390 [ 369.391494][ T48] ? pr_cont_work+0x560/0x560 [ 369.396190][ T48] ? kthread_blkcg+0xd0/0xd0 [ 369.400819][ T48] ret_from_fork+0x48/0x80 [ 369.405275][ T48] ? kthread_blkcg+0xd0/0xd0 [ 369.409884][ T48] ret_from_fork_asm+0x11/0x20 [ 369.414696][ T48] [ 369.430765][ T48] ================================================================================ [ 369.440679][ T48] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 369.447938][ T48] CPU: 1 PID: 48 Comm: kworker/u4:3 Not tainted 6.6.97-syzkaller #0 [ 369.455977][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.466083][ T48] Workqueue: events_unbound cfg80211_wiphy_work [ 369.472397][ T48] Call Trace: [ 369.475713][ T48] [ 369.478682][ T48] dump_stack_lvl+0x16c/0x230 [ 369.483422][ T48] ? show_regs_print_info+0x20/0x20 [ 369.488673][ T48] ? load_image+0x3b0/0x3b0 [ 369.493244][ T48] panic+0x2c0/0x710 [ 369.497194][ T48] ? bpf_jit_dump+0xd0/0xd0 [ 369.501930][ T48] ? mutex_lock_nested+0x20/0x20 [ 369.506938][ T48] check_panic_on_warn+0x84/0xa0 [ 369.511936][ T48] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 369.517729][ T48] ieee80211_request_ibss_scan+0x4eb/0x790 [ 369.523604][ T48] ieee80211_ibss_work+0xdfd/0x10c0 [ 369.528876][ T48] ? ieee80211_ibss_rx_queued_mgmt+0x2ac0/0x2ac0 [ 369.535258][ T48] ? mark_lock+0x94/0x320 [ 369.539663][ T48] ? ieee80211_iface_work+0xbca/0xc70 [ 369.545096][ T48] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.550349][ T48] cfg80211_wiphy_work+0x225/0x260 [ 369.555512][ T48] ? process_scheduled_works+0x957/0x15b0 [ 369.561257][ T48] process_scheduled_works+0xa45/0x15b0 [ 369.566850][ T48] ? assign_work+0x400/0x400 [ 369.571466][ T48] ? assign_work+0x39e/0x400 [ 369.576079][ T48] worker_thread+0xa55/0xfc0 [ 369.580708][ T48] kthread+0x2fa/0x390 [ 369.584791][ T48] ? pr_cont_work+0x560/0x560 [ 369.589479][ T48] ? kthread_blkcg+0xd0/0xd0 [ 369.594074][ T48] ret_from_fork+0x48/0x80 [ 369.598520][ T48] ? kthread_blkcg+0xd0/0xd0 [ 369.603134][ T48] ret_from_fork_asm+0x11/0x20 [ 369.607930][ T48] [ 369.611267][ T48] Kernel Offset: disabled [ 369.615684][ T48] Rebooting in 86400 seconds..