last executing test programs: 1.572723065s ago: executing program 0 (id=3021): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={r0, 0x7, 0x4, 0xffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x3c, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x259fdbfd, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xf, 0x3}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 1.515778428s ago: executing program 0 (id=3024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, &(0x7f0000000080)=0x10) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r6, &(0x7f0000000080)="0b000300010001", 0x7) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xd, 0x0, &(0x7f0000000200)="1d5fe8317ca952a2ba4bfee0f0", 0x0, 0x200020fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) 725.078596ms ago: executing program 3 (id=3049): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0xfc, 0xfd, 0xffeff034}, {0x6, 0x37, 0x1, 0x9}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) unshare(0x10000000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) close(r1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x20040884) 607.594041ms ago: executing program 0 (id=3054): r0 = socket$tipc(0x1e, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004094}, 0x4000000) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) 563.458024ms ago: executing program 0 (id=3057): unshare(0x2a060400) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xfffffffd}, 0x1c) listen(r1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "66f59e", 0x28, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x80, 0x4, 0x0, 0x4, {[@md5sig={0x13, 0x12, "0681440e908315ac0cb825524e64a502"}]}}}}}}}}, 0x0) 519.198396ms ago: executing program 0 (id=3058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x5) 449.325219ms ago: executing program 1 (id=3060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) epoll_create1(0x80000) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="8f33d196afdc"}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 436.075139ms ago: executing program 2 (id=3061): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r0, 0x7, 0x4, 0xffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x3c, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x259fdbfd, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xf, 0x3}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 392.507401ms ago: executing program 3 (id=3062): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x20040800) sendmsg$NFT_BATCH(r0, 0x0, 0x10) writev(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24040800) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28010000070a0103"], 0x128}, 0x1, 0x0, 0x0, 0x200440d5}, 0x4000) 374.464093ms ago: executing program 4 (id=3063): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e0010000000100000000a0001005a5ef7edc063000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x10}}]}}}]}, 0x40}}, 0x0) 363.230833ms ago: executing program 2 (id=3064): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000020000000000ff025958f3317aaa1226536a120000000000000000000000000001e00000020000000000000000000000e84e20000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc001b0000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c0100001a0007002abd700000000000fe80000000000000000000000000001b00000000000000000000000000000000000300004e220000000000000200", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000efff00"], 0x10c}}, 0x8000) 333.908704ms ago: executing program 3 (id=3065): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) close(0x4) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write(r1, &(0x7f0000004780)="240000001ee55f01141000f80700b3586bf8d17b46878f08f606c2e553187c00000800000000cc1fed7ab47107a188a3f163bc434d557ac957eac46599010000003132b9dfd68ad3307afc9af631b8fb76b7c2d036e49db727030db47f94e1c5b71e2f8400f0ad266fb363f4a7c1ace6cdbac7978675c8dd2829f4074ae05f9340f02836ad802a084aa2e0d3003a03983c1fd8f04786f30557c2f57a578d663aae7c4480000000000000", 0xaa) recvmmsg(0xffffffffffffffff, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendfile(r1, r2, 0x0, 0xffffffff000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003704e0788cacb8f5655eedd90296", @ANYRES32=0x0], 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 330.433654ms ago: executing program 2 (id=3066): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000002177fbac141516e0000001440c0510b18000890304000084508864325f003901050b038da1005725181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 313.148525ms ago: executing program 0 (id=3067): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, &(0x7f0000000080)=0x10) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r6, &(0x7f0000000080)="0b000300010001", 0x7) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xd, 0x0, &(0x7f0000000200)="1d5fe8317ca952a2ba4bfee0f0", 0x0, 0x200020fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) 291.240366ms ago: executing program 3 (id=3068): r0 = socket$tipc(0x1e, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004094}, 0x4000000) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) 269.329547ms ago: executing program 1 (id=3069): bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x84000000, 0x0) close(0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 209.33842ms ago: executing program 2 (id=3070): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0x0, 0x0, 0xa1}, 0xfec3) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x8000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) 209.10224ms ago: executing program 4 (id=3071): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x0, 0x7800, 0x10, 0x804}}) 209.03771ms ago: executing program 4 (id=3072): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x22020600) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280)) 204.00595ms ago: executing program 3 (id=3073): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee", 0x1d}], 0x1}, 0x0) 188.715831ms ago: executing program 1 (id=3074): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000780)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x28, r1, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x20040890) 176.440712ms ago: executing program 2 (id=3075): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r0, 0x7, 0x4, 0xffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x3c, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x259fdbfd, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xf, 0x3}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 120.959734ms ago: executing program 4 (id=3076): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB="0000210000000000000042be83d04f26ab2c821e", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001b40), &(0x7f0000001c40), 0x5, r1}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f0000000140)}, 0x20) 120.824974ms ago: executing program 1 (id=3077): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000020000000000ff025958f3317aaa1226536a120000000000000000000000000001e00000020000000000000000000000e84e20000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc001b0000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c0100001a0007002abd700000000000fe80000000000000000000000000001b00000000000000000000000000000000000300004e220000000000000200", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000efff00"], 0x10c}}, 0x8000) 120.374204ms ago: executing program 2 (id=3078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x5) 76.056256ms ago: executing program 4 (id=3079): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) close(0x4) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write(r1, &(0x7f0000004780)="240000001ee55f01141000f80700b3586bf8d17b46878f08f606c2e553187c00000800000000cc1fed7ab47107a188a3f163bc434d557ac957eac46599010000003132b9dfd68ad3307afc9af631b8fb76b7c2d036e49db727030db47f94e1c5b71e2f8400f0ad266fb363f4a7c1ace6cdbac7978675c8dd2829f4074ae05f9340f02836ad802a084aa2e0d3003a03983c1fd8f04786f30557c2f57a578d663aae7c4480000000000000", 0xaa) recvmmsg(0xffffffffffffffff, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendfile(r1, r2, 0x0, 0xffffffff000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003704e0788cacb8f5655eedd90296", @ANYRES32=0x0], 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 75.606356ms ago: executing program 1 (id=3080): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000002177fbac141516e0000001440c0510b18000890304000084508864325f003901050b038da1005725181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 23.884199ms ago: executing program 1 (id=3081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) epoll_create1(0x80000) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="8f33d196afdc"}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 23.332529ms ago: executing program 4 (id=3082): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x2040400) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000ff0900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000000340), &(0x7f0000000a00)=""/4096}, 0x20) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 0s ago: executing program 3 (id=3083): r0 = socket$tipc(0x1e, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004094}, 0x4000000) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4, 0x3}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) kernel console output (not intermixed with test programs): 50.616772][ T5509] vhci_hcd vhci_hcd.0: Device attached [ 50.618131][ T5516] vhci_hcd: connection closed [ 50.618227][ T5512] vhci_hcd: connection closed [ 50.618365][ T5514] vhci_hcd: connection closed [ 50.619989][ T5510] vhci_hcd: connection closed [ 50.621187][ T39] vhci_hcd: stop threads [ 50.622697][ T39] vhci_hcd: release socket [ 50.623531][ T39] vhci_hcd: disconnect device [ 50.624505][ T39] vhci_hcd: stop threads [ 50.625298][ T39] vhci_hcd: release socket [ 50.628539][ T39] vhci_hcd: disconnect device [ 50.629503][ T39] vhci_hcd: stop threads [ 50.630271][ T39] vhci_hcd: release socket [ 50.631170][ T39] vhci_hcd: disconnect device [ 50.632163][ T39] vhci_hcd: stop threads [ 50.632926][ T39] vhci_hcd: release socket [ 50.633710][ T39] vhci_hcd: disconnect device [ 51.282933][ T5537] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 51.584510][ T5557] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 51.587336][ T5557] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 51.589661][ T5557] vhci_hcd vhci_hcd.0: Device attached [ 51.593122][ T5557] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 51.594364][ T5557] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 51.597430][ T5557] vhci_hcd vhci_hcd.0: Device attached [ 51.599750][ T5557] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 51.600907][ T5557] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 51.602230][ T5557] vhci_hcd vhci_hcd.0: Device attached [ 51.603901][ T5557] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 51.605007][ T5557] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 51.607205][ T5557] vhci_hcd vhci_hcd.0: Device attached [ 51.608526][ T5562] vhci_hcd: connection closed [ 51.608543][ T5560] vhci_hcd: connection closed [ 51.608648][ T5564] vhci_hcd: connection closed [ 51.610471][ T1839] vhci_hcd: stop threads [ 51.610491][ T5558] vhci_hcd: connection closed [ 51.611269][ T1839] vhci_hcd: release socket [ 51.613572][ T1839] vhci_hcd: disconnect device [ 51.614500][ T1839] vhci_hcd: stop threads [ 51.616048][ T1839] vhci_hcd: release socket [ 51.616805][ T1839] vhci_hcd: disconnect device [ 51.617944][ T1839] vhci_hcd: stop threads [ 51.618701][ T1839] vhci_hcd: release socket [ 51.619542][ T1839] vhci_hcd: disconnect device [ 51.620544][ T1839] vhci_hcd: stop threads [ 51.621269][ T1839] vhci_hcd: release socket [ 51.622073][ T1839] vhci_hcd: disconnect device [ 51.676111][ T4342] Bluetooth: hci1: command 0x0405 tx timeout [ 51.974977][ T14] cfg80211: failed to load regulatory.db [ 52.249039][ T5574] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 52.896348][ T5600] netlink: 'syz.2.449': attribute type 1 has an invalid length. [ 52.897987][ T5600] __nla_validate_parse: 8 callbacks suppressed [ 52.897998][ T5600] netlink: 756 bytes leftover after parsing attributes in process `syz.2.449'. [ 53.045841][ T1839] wlan1: Trigger new scan to find an IBSS to join [ 53.985567][ T9] wlan1: Creating new IBSS network, BSSID 06:eb:03:e0:7e:07 [ 54.177006][ T5661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.476'. [ 54.179046][ T5661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 54.181138][ T5661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 54.183117][ T5661] netlink: 108 bytes leftover after parsing attributes in process `syz.2.476'. [ 54.185051][ T5661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.476'. [ 54.187346][ T5661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.476'. [ 54.577371][ T5706] Bluetooth: MGMT ver 1.22 [ 54.591107][ T5706] device syzkaller0 entered promiscuous mode [ 54.854653][ T5729] device syzkaller1 entered promiscuous mode [ 54.858299][ T5729] raw_sendmsg: syz.4.508 forgot to set AF_INET. Fix it! [ 54.874511][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'. [ 54.923322][ T5734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 54.925248][ T5734] netlink: 'syz.2.510': attribute type 1 has an invalid length. [ 54.979175][ T5734] netlink: 48 bytes leftover after parsing attributes in process `syz.2.510'. [ 55.067908][ T5744] netlink: 'syz.2.514': attribute type 1 has an invalid length. [ 55.069355][ T5744] netlink: 'syz.2.514': attribute type 2 has an invalid length. [ 55.073900][ T5744] netlink: 'syz.2.514': attribute type 11 has an invalid length. [ 55.100609][ T5743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.174144][ T5750] device syzkaller0 entered promiscuous mode [ 64.476899][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.478148][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.929751][ T5761] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 66.010503][ T5786] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 66.261434][ T5813] device syzkaller0 entered promiscuous mode [ 66.410127][ T5821] dccp_v6_rcv: dropped packet with invalid checksum [ 66.811961][ T4411] tipc: Subscription rejected, illegal request [ 66.824731][ T5831] __nla_validate_parse: 1 callbacks suppressed [ 66.824745][ T5831] netlink: 148 bytes leftover after parsing attributes in process `syz.4.548'. [ 66.898138][ T5843] netlink: 'syz.2.554': attribute type 1 has an invalid length. [ 66.899492][ T5843] netlink: 'syz.2.554': attribute type 2 has an invalid length. [ 66.900971][ T5843] netlink: 244 bytes leftover after parsing attributes in process `syz.2.554'. [ 66.903354][ T5843] netlink: 'syz.2.554': attribute type 11 has an invalid length. [ 66.914899][ T5842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.118234][ T5866] netlink: 148 bytes leftover after parsing attributes in process `syz.1.563'. [ 67.125727][ T5866] netlink: 56 bytes leftover after parsing attributes in process `syz.1.563'. [ 67.129121][ T5868] netlink: 48 bytes leftover after parsing attributes in process `syz.0.564'. [ 67.130997][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 67.159850][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 67.161617][ T5872] netlink: 'syz.1.566': attribute type 18 has an invalid length. [ 67.162922][ T5872] netlink: 'syz.1.566': attribute type 20 has an invalid length. [ 67.164292][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 67.698781][ T5899] netlink: 148 bytes leftover after parsing attributes in process `syz.2.578'. [ 67.700686][ T5899] netlink: 56 bytes leftover after parsing attributes in process `syz.2.578'. [ 67.796829][ T5905] netlink: 'syz.2.581': attribute type 18 has an invalid length. [ 67.798212][ T5905] netlink: 'syz.2.581': attribute type 20 has an invalid length. [ 67.878660][ T5858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 68.540730][ T5965] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 68.542551][ T5965] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 68.544149][ T5965] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 68.546140][ T5965] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 68.571262][ T5965] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.946453][ T5997] netlink: 'syz.2.622': attribute type 20 has an invalid length. [ 69.043237][ T6007] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.044729][ T6007] IPv6: NLM_F_CREATE should be set when creating new route [ 69.220998][ T6025] netlink: 'syz.0.642': attribute type 1 has an invalid length. [ 69.222672][ T6025] netlink: 'syz.0.642': attribute type 2 has an invalid length. [ 69.224893][ T6025] netlink: 'syz.0.642': attribute type 11 has an invalid length. [ 69.240173][ T6024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.395993][ T6036] netlink: 'syz.4.636': attribute type 16 has an invalid length. [ 69.422673][ T6038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.424010][ T6038] IPv6: NLM_F_CREATE should be set when creating new route [ 70.067269][ T6074] device gretap0 entered promiscuous mode [ 70.089830][ T6083] ip_tunnel: non-ECT from 10.1.1.1 with TOS=0x2 [ 70.106872][ T6074] device gretap0 left promiscuous mode [ 70.221279][ T6090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.222813][ T6090] IPv6: NLM_F_CREATE should be set when creating new route [ 70.597984][ T6121] device gretap0 entered promiscuous mode [ 70.636096][ T6121] device gretap0 left promiscuous mode [ 70.688048][ T6123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.689507][ T6123] IPv6: NLM_F_CREATE should be set when creating new route [ 70.923931][ T6153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.179636][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.219109][ T6165] device gretap0 entered promiscuous mode [ 71.268255][ T6165] device gretap0 left promiscuous mode [ 71.436249][ T6191] device syzkaller0 entered promiscuous mode [ 71.470092][ T1518] wiimote 0005:057E:0306.0004: item fetching failed at offset 14/15 [ 71.471708][ T1518] wiimote 0005:057E:0306.0004: HID parse failed [ 71.473099][ T1518] wiimote: probe of 0005:057E:0306.0004 failed with error -22 [ 71.910030][ T6212] __nla_validate_parse: 42 callbacks suppressed [ 71.910042][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 71.926796][ T6214] netlink: 148 bytes leftover after parsing attributes in process `syz.0.710'. [ 72.207614][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.713'. [ 72.209843][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.713'. [ 72.213352][ T6221] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 72.214987][ T6221] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 72.216777][ T6221] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 72.218351][ T6221] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 72.274274][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.714'. [ 72.276125][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.714'. [ 72.328941][ T6224] device gretap0 entered promiscuous mode [ 72.359817][ T4455] wiimote 0005:057E:0306.0005: item fetching failed at offset 14/15 [ 72.361452][ T4455] wiimote 0005:057E:0306.0005: HID parse failed [ 72.362794][ T4455] wiimote: probe of 0005:057E:0306.0005 failed with error -22 [ 72.373488][ T6224] device gretap0 left promiscuous mode [ 72.582116][ T6241] device syzkaller1 entered promiscuous mode [ 72.677870][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 72.679710][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'. [ 72.681436][ T6247] validate_nla: 5 callbacks suppressed [ 72.681449][ T6247] netlink: 'syz.0.721': attribute type 18 has an invalid length. [ 72.684015][ T6247] netlink: 'syz.0.721': attribute type 20 has an invalid length. [ 72.716323][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.722'. [ 72.784785][ T6254] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 72.827045][ T6254] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 72.920363][ T4376] wiimote 0005:057E:0306.0006: item fetching failed at offset 14/15 [ 72.922122][ T4376] wiimote 0005:057E:0306.0006: HID parse failed [ 72.923971][ T4376] wiimote: probe of 0005:057E:0306.0006 failed with error -22 [ 73.142737][ T6270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.730'. [ 73.174189][ T6270] device gretap0 entered promiscuous mode [ 73.227170][ T6270] device gretap0 left promiscuous mode [ 73.323705][ T6283] netlink: 'syz.1.733': attribute type 18 has an invalid length. [ 73.328892][ T6283] netlink: 'syz.1.733': attribute type 20 has an invalid length. [ 73.380748][ T6287] device syzkaller1 entered promiscuous mode [ 73.487896][ T6293] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 73.490204][ T6296] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 73.525137][ T14] wiimote 0005:057E:0306.0007: unbalanced collection at end of report description [ 73.527910][ T14] wiimote 0005:057E:0306.0007: HID parse failed [ 73.529870][ T14] wiimote: probe of 0005:057E:0306.0007 failed with error -22 [ 73.844004][ T6312] device gretap0 entered promiscuous mode [ 73.886342][ T6312] device gretap0 left promiscuous mode [ 73.968021][ T6314] netlink: 'syz.0.746': attribute type 18 has an invalid length. [ 73.969662][ T6314] netlink: 'syz.0.746': attribute type 20 has an invalid length. [ 74.160280][ T6330] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 74.162862][ T6330] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 74.218201][ T14] wiimote 0005:057E:0306.0008: unbalanced collection at end of report description [ 74.220027][ T14] wiimote 0005:057E:0306.0008: HID parse failed [ 74.221435][ T14] wiimote: probe of 0005:057E:0306.0008 failed with error -22 [ 74.467343][ T6349] device gretap0 entered promiscuous mode [ 74.516143][ T6349] device gretap0 left promiscuous mode [ 74.607696][ T6351] netlink: 'syz.3.759': attribute type 18 has an invalid length. [ 74.609073][ T6351] netlink: 'syz.3.759': attribute type 20 has an invalid length. [ 74.614369][ T6204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.760755][ T6363] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 74.762831][ T6363] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 74.784060][ T4379] wiimote 0005:057E:0306.0009: unbalanced collection at end of report description [ 74.786147][ T4379] wiimote 0005:057E:0306.0009: HID parse failed [ 74.787673][ T4379] wiimote: probe of 0005:057E:0306.0009 failed with error -22 [ 74.966863][ T6387] device gretap0 entered promiscuous mode [ 74.987767][ T6387] device gretap0 left promiscuous mode [ 75.088941][ T6390] netlink: 'syz.4.773': attribute type 18 has an invalid length. [ 75.090626][ T6390] netlink: 'syz.4.773': attribute type 20 has an invalid length. [ 75.096046][ T6390] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.097738][ T6390] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.099274][ T6390] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.100092][ T14] wiimote 0005:057E:0306.000A: unbalanced collection at end of report description [ 75.100766][ T6390] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.102565][ T14] wiimote 0005:057E:0306.000A: HID parse failed [ 75.107441][ T14] wiimote: probe of 0005:057E:0306.000A failed with error -22 [ 75.340424][ T6416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.347560][ T6416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.468438][ T4376] wiimote 0005:057E:0306.000B: unbalanced collection at end of report description [ 75.471269][ T4376] wiimote 0005:057E:0306.000B: HID parse failed [ 75.472909][ T4376] wiimote: probe of 0005:057E:0306.000B failed with error -22 [ 75.526184][ T6433] device gretap0 entered promiscuous mode [ 75.567202][ T6433] device gretap0 left promiscuous mode [ 75.571594][ T6440] netlink: 'syz.3.794': attribute type 11 has an invalid length. [ 75.653195][ T6439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.709272][ T6449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.710725][ T6449] IPv6: NLM_F_CREATE should be set when creating new route [ 75.712844][ T6449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.762763][ T4379] wiimote 0005:057E:0306.000C: unbalanced collection at end of report description [ 75.764630][ T4379] wiimote 0005:057E:0306.000C: HID parse failed [ 75.767520][ T4379] wiimote: probe of 0005:057E:0306.000C failed with error -22 [ 75.767777][ T6454] tipc: Started in network mode [ 75.770346][ T6454] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 75.773058][ T6454] tipc: Enabled bearer , priority 10 [ 75.859365][ T6464] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 75.861730][ T6464] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 75.936780][ T6470] device gretap0 entered promiscuous mode [ 75.976493][ T6470] device gretap0 left promiscuous mode [ 76.128049][ T4455] wiimote 0005:057E:0306.000D: unbalanced collection at end of report description [ 76.130014][ T4455] wiimote 0005:057E:0306.000D: HID parse failed [ 76.132728][ T4455] wiimote: probe of 0005:057E:0306.000D failed with error -22 [ 76.682551][ T4376] wiimote 0005:057E:0306.000E: unbalanced collection at end of report description [ 76.684301][ T4376] wiimote 0005:057E:0306.000E: HID parse failed [ 76.686827][ T4376] wiimote: probe of 0005:057E:0306.000E failed with error -22 [ 76.766232][ T4376] tipc: Node number set to 4269801488 [ 76.782507][ T6518] netlink: 'syz.3.828': attribute type 11 has an invalid length. [ 76.793196][ T6517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.139560][ T14] wiimote 0005:057E:0306.000F: unbalanced collection at end of report description [ 77.141440][ T14] wiimote 0005:057E:0306.000F: HID parse failed [ 77.142859][ T14] wiimote: probe of 0005:057E:0306.000F failed with error -22 [ 77.332720][ T6540] __nla_validate_parse: 37 callbacks suppressed [ 77.332739][ T6540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.836'. [ 77.337083][ T6540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.836'. [ 77.377080][ T6540] device gretap0 entered promiscuous mode [ 77.406207][ T6540] device gretap0 left promiscuous mode [ 77.488232][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 77.489940][ T6542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.526139][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 77.527688][ T6544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.528973][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 77.530670][ T6547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.839'. [ 77.564599][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 77.734602][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.852'. [ 77.737228][ T6575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.741758][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.852'. [ 77.743579][ T6575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.772393][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'. [ 78.341978][ T6646] device syzkaller1 entered promiscuous mode [ 79.296258][ T6688] device syzkaller1 entered promiscuous mode [ 79.912352][ T6730] device syzkaller1 entered promiscuous mode [ 80.473387][ T6766] device syzkaller1 entered promiscuous mode [ 81.080124][ T6800] device syzkaller1 entered promiscuous mode [ 81.503439][ T6828] device syzkaller1 entered promiscuous mode [ 82.219405][ T6877] device syzkaller1 entered promiscuous mode [ 82.359934][ T6879] __nla_validate_parse: 16 callbacks suppressed [ 82.360020][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 82.651210][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1000'. [ 82.653807][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1000'. [ 82.675853][ T6901] device syzkaller1 entered promiscuous mode [ 82.698637][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 82.843507][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1009'. [ 82.886994][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'. [ 82.889381][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'. [ 82.930846][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1015'. [ 82.943242][ T6935] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 82.948221][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1016'. [ 83.109267][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 83.120542][ T6946] device syzkaller1 entered promiscuous mode [ 83.495230][ T6985] device syzkaller1 entered promiscuous mode [ 83.889925][ T7033] device syzkaller1 entered promiscuous mode [ 83.964895][ T7043] x_tables: unsorted underflow at hook 2 [ 84.003660][ T7043] Bluetooth: ISO socket layer initialized [ 84.048235][ T7053] netlink: 'syz.0.1067': attribute type 11 has an invalid length. [ 84.088870][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.106170][ T7053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.360576][ T7082] device syzkaller1 entered promiscuous mode [ 84.377174][ T7085] Bluetooth: MGMT ver 1.22 [ 84.851662][ T7127] device syzkaller1 entered promiscuous mode [ 84.894101][ T4342] Bluetooth: hci1: link tx timeout [ 84.895547][ T4342] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 84.897450][ T4342] Bluetooth: hci1: link tx timeout [ 84.898338][ T4342] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 85.260037][ T7161] validate_nla: 7 callbacks suppressed [ 85.260047][ T7161] netlink: 'syz.3.1108': attribute type 18 has an invalid length. [ 85.336026][ T7167] device syzkaller1 entered promiscuous mode [ 85.797215][ T7205] device syzkaller1 entered promiscuous mode [ 86.112566][ T7235] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 86.321937][ T7243] device syzkaller1 entered promiscuous mode [ 86.486534][ T7261] netlink: 'syz.3.1150': attribute type 18 has an invalid length. [ 86.831762][ T7279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.901830][ T7289] device syzkaller1 entered promiscuous mode [ 86.955401][ T4342] Bluetooth: hci1: command 0x0406 tx timeout [ 87.529572][ T7317] device syzkaller1 entered promiscuous mode [ 87.749084][ T7341] __nla_validate_parse: 30 callbacks suppressed [ 87.749097][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1186'. [ 87.752309][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1186'. [ 87.754700][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 87.764559][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1183'. [ 87.771656][ T7339] netlink: 'syz.2.1183': attribute type 18 has an invalid length. [ 87.920383][ T7358] device syzkaller1 entered promiscuous mode [ 88.071544][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1193'. [ 88.133784][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1198'. [ 88.136435][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1198'. [ 88.186313][ T4342] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 88.314840][ T7385] device macsec1 entered promiscuous mode [ 88.320862][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'. [ 88.432871][ T7397] device syzkaller1 entered promiscuous mode [ 88.857198][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1227'. [ 88.858878][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1227'. [ 88.860569][ T7435] netlink: 'syz.4.1227': attribute type 18 has an invalid length. [ 88.864119][ T7435] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 88.865724][ T7435] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 88.867241][ T7435] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 88.868809][ T7435] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 89.035423][ T4342] Bluetooth: hci1: command 0x0406 tx timeout [ 89.267664][ T7438] device syzkaller1 entered promiscuous mode [ 89.712921][ T7443] device syzkaller0 entered promiscuous mode [ 90.026788][ T7466] device gretap0 entered promiscuous mode [ 90.071744][ T7466] device gretap0 left promiscuous mode [ 90.216766][ T7477] netlink: 'syz.0.1242': attribute type 18 has an invalid length. [ 90.223057][ T7477] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 90.224607][ T7477] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 90.226273][ T7477] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 90.227821][ T7477] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 90.311284][ T7481] device syzkaller1 entered promiscuous mode [ 90.526669][ T7490] netlink: 'syz.3.1249': attribute type 11 has an invalid length. [ 90.575998][ T7490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.760877][ T7497] netlink: 'syz.1.1251': attribute type 1 has an invalid length. [ 90.762586][ T7497] netlink: 'syz.1.1251': attribute type 2 has an invalid length. [ 90.764856][ T7497] netlink: 'syz.1.1251': attribute type 11 has an invalid length. [ 90.779893][ T7494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.869722][ T7501] device gretap0 entered promiscuous mode [ 90.896554][ T7501] device gretap0 left promiscuous mode [ 90.977540][ T7507] tbf_change: 2 callbacks suppressed [ 90.977556][ T7507] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 90.979942][ T7508] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 91.005107][ T7510] device syzkaller1 entered promiscuous mode [ 91.021275][ T7512] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.023409][ T7512] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 91.091073][ T7516] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.093020][ T7516] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 91.097063][ T7514] device syzkaller0 entered promiscuous mode [ 91.190030][ T7528] netlink: 'syz.3.1264': attribute type 11 has an invalid length. [ 91.266318][ T7520] tipc: Started in network mode [ 91.267463][ T7520] tipc: Node identity 12f6f9feb46, cluster identity 4711 [ 91.269313][ T7520] tipc: Enabled bearer , priority 0 [ 91.316217][ T7528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.399399][ T7519] tipc: Disabling bearer [ 91.433272][ T7536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.487340][ T7540] device gretap0 entered promiscuous mode [ 91.526215][ T7540] device gretap0 left promiscuous mode [ 91.755424][ T4342] Bluetooth: hci1: command 0x0405 tx timeout [ 92.267098][ T7543] bond1 (unregistering): Released all slaves [ 92.271365][ T7544] netlink: 'syz.3.1269': attribute type 18 has an invalid length. [ 92.279805][ T7552] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 92.281434][ T7553] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 92.285254][ T7560] device syzkaller1 entered promiscuous mode [ 92.428002][ T7577] netlink: 'syz.4.1280': attribute type 1 has an invalid length. [ 92.429278][ T7577] netlink: 'syz.4.1280': attribute type 2 has an invalid length. [ 92.439419][ T7579] netlink: 'syz.2.1281': attribute type 11 has an invalid length. [ 92.446159][ T7577] netlink: 'syz.4.1280': attribute type 11 has an invalid length. [ 92.472819][ T7576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.481054][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 92.497369][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.498972][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.528860][ T7579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.752720][ T7612] netlink: 'syz.2.1289': attribute type 18 has an invalid length. [ 93.386632][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.425510][ T7641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.703002][ T7658] netlink: 'syz.3.1310': attribute type 1 has an invalid length. [ 93.704505][ T7658] netlink: 'syz.3.1310': attribute type 2 has an invalid length. [ 93.711848][ T7658] __nla_validate_parse: 18 callbacks suppressed [ 93.711863][ T7658] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1310'. [ 93.715339][ T7658] netlink: 'syz.3.1310': attribute type 11 has an invalid length. [ 93.743991][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1313'. [ 93.766241][ T7655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.844229][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1314'. [ 93.848702][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 93.850308][ T7671] netlink: 'syz.1.1314': attribute type 18 has an invalid length. [ 93.870500][ T7671] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 93.872178][ T7671] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 93.873866][ T7671] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 93.875531][ T7671] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 93.881687][ T7675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1317'. [ 93.884485][ T7675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1317'. [ 93.926793][ T7675] device gretap0 entered promiscuous mode [ 93.956099][ T7675] device gretap0 left promiscuous mode [ 94.705410][ T7703] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1326'. [ 94.745509][ T7704] device syzkaller0 entered promiscuous mode [ 94.766256][ T7708] netlink: 'syz.4.1332': attribute type 11 has an invalid length. [ 94.869009][ T7708] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.905811][ T7708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.002568][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1335'. [ 95.004266][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1335'. [ 95.006283][ T7727] netlink: 'syz.3.1335': attribute type 18 has an invalid length. [ 95.030969][ T7731] netlink: 756 bytes leftover after parsing attributes in process `syz.4.1340'. [ 95.498658][ T7755] netlink: 'syz.4.1348': attribute type 11 has an invalid length. [ 95.510965][ T7755] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.575789][ T7755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.622211][ T7761] netlink: 'syz.1.1351': attribute type 11 has an invalid length. [ 95.648517][ T7760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.141873][ T7807] validate_nla: 3 callbacks suppressed [ 96.141884][ T7807] netlink: 'syz.3.1369': attribute type 18 has an invalid length. [ 96.712490][ T7848] ip_tables: iptables: counters copy to user failed while replacing table [ 96.760291][ T7858] netlink: 'syz.2.1391': attribute type 11 has an invalid length. [ 96.841017][ T7866] device syzkaller0 entered promiscuous mode [ 97.092509][ T7890] netlink: 'syz.3.1403': attribute type 11 has an invalid length. [ 97.364145][ T7915] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 97.365904][ T7915] netlink: 'syz.3.1411': attribute type 2 has an invalid length. [ 97.368047][ T7915] netlink: 'syz.3.1411': attribute type 11 has an invalid length. [ 97.375288][ T7914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.419861][ T7916] netlink: 'syz.2.1410': attribute type 18 has an invalid length. [ 97.931866][ T7924] netlink: 'syz.4.1415': attribute type 11 has an invalid length. [ 97.985672][ T7926] device syzkaller0 entered promiscuous mode [ 98.220937][ T7952] netlink: 'syz.2.1425': attribute type 1 has an invalid length. [ 98.222314][ T7952] netlink: 'syz.2.1425': attribute type 2 has an invalid length. [ 98.225049][ T7952] netlink: 'syz.2.1425': attribute type 11 has an invalid length. [ 98.273749][ T7950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.293045][ T7960] netlink: 'syz.3.1428': attribute type 11 has an invalid length. [ 98.782950][ T7981] device syzkaller0 entered promiscuous mode [ 98.908029][ T7996] __nla_validate_parse: 25 callbacks suppressed [ 98.908040][ T7996] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1444'. [ 98.911837][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'. [ 98.922112][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'. [ 98.923973][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'. [ 99.109272][ T8012] netlink: 'syz.0.1449': attribute type 1 has an invalid length. [ 99.111091][ T8012] netlink: 'syz.0.1449': attribute type 2 has an invalid length. [ 99.112528][ T8012] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1449'. [ 99.153059][ T8012] netlink: 'syz.0.1449': attribute type 11 has an invalid length. [ 99.173770][ T8011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.232946][ T8026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1456'. [ 99.262633][ T8029] device syzkaller0 entered promiscuous mode [ 99.425201][ T8039] netlink: 'syz.2.1469': attribute type 11 has an invalid length. [ 99.449752][ T8039] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 99.476009][ T8039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.486499][ T8039] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.516632][ T8039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.519628][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1461'. [ 99.521042][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1461'. [ 99.834488][ T8060] device syzkaller0 entered promiscuous mode [ 99.949901][ T8069] netlink: 'syz.0.1474': attribute type 11 has an invalid length. [ 99.958269][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.986094][ T8069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.144193][ T8077] netlink: 'syz.1.1477': attribute type 1 has an invalid length. [ 100.146322][ T8077] netlink: 'syz.1.1477': attribute type 2 has an invalid length. [ 100.147637][ T8077] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1477'. [ 100.150275][ T8076] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1478'. [ 100.158492][ T8074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.403483][ T8094] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.437551][ T8094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.863553][ T8125] nla_validate_range_unsigned: 2 callbacks suppressed [ 100.863565][ T8125] netlink: 'syz.2.1498': attribute type 11 has an invalid length. [ 100.930308][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 100.938736][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.940209][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.976116][ T8128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.014145][ T8136] device syzkaller0 entered promiscuous mode [ 101.020345][ T8137] netlink: 'syz.0.1504': attribute type 11 has an invalid length. [ 101.153146][ T8134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.452977][ T8166] validate_nla: 8 callbacks suppressed [ 101.452988][ T8166] netlink: 'syz.2.1515': attribute type 6 has an invalid length. [ 101.629827][ T8185] netlink: 'syz.1.1523': attribute type 11 has an invalid length. [ 101.692512][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.725503][ T8185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.838539][ T8194] netlink: 'syz.0.1527': attribute type 6 has an invalid length. [ 102.220525][ T8240] device syzkaller0 entered promiscuous mode [ 102.323562][ T8243] netlink: 'syz.3.1545': attribute type 18 has an invalid length. [ 103.187543][ T8298] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 104.017576][ T8326] __nla_validate_parse: 19 callbacks suppressed [ 104.017588][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1577'. [ 104.148873][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1580'. [ 104.170180][ T8341] netlink: 'syz.1.1582': attribute type 11 has an invalid length. [ 104.460510][ T8345] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.517847][ T8345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.688363][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1590'. [ 104.907085][ T8381] netlink: 'syz.1.1598': attribute type 1 has an invalid length. [ 104.908669][ T8381] netlink: 'syz.1.1598': attribute type 2 has an invalid length. [ 104.910040][ T8381] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1598'. [ 104.913445][ T8381] netlink: 'syz.1.1598': attribute type 11 has an invalid length. [ 104.928816][ T8380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.393342][ T8412] netlink: 'syz.3.1611': attribute type 11 has an invalid length. [ 105.436185][ T1839] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 105.440408][ T8412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.940080][ T8442] netlink: 'syz.4.1623': attribute type 1 has an invalid length. [ 105.941583][ T8442] netlink: 'syz.4.1623': attribute type 2 has an invalid length. [ 105.943090][ T8442] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1623'. [ 105.945695][ T8442] netlink: 'syz.4.1623': attribute type 11 has an invalid length. [ 105.953341][ T8441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.474543][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1626'. [ 106.518247][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 106.520034][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1625'. [ 106.521750][ T8447] netlink: 'syz.1.1625': attribute type 18 has an invalid length. [ 106.597065][ T8457] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1630'. [ 106.741665][ T8467] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1634'. [ 106.766049][ T8473] netlink: 'syz.3.1637': attribute type 1 has an invalid length. [ 106.767424][ T8473] netlink: 'syz.3.1637': attribute type 2 has an invalid length. [ 106.771444][ T8473] netlink: 'syz.3.1637': attribute type 11 has an invalid length. [ 106.784872][ T8472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.689394][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.727946][ T8495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.819696][ T8512] netlink: 'syz.0.1651': attribute type 6 has an invalid length. [ 108.110150][ T8542] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.145499][ T8542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.369799][ T8552] netlink: 'syz.1.1667': attribute type 6 has an invalid length. [ 108.763034][ T8569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.825681][ T8569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.008581][ T8593] netlink: 'syz.0.1681': attribute type 18 has an invalid length. [ 109.013999][ T8600] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 109.056236][ T8601] __nla_validate_parse: 13 callbacks suppressed [ 109.056246][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1688'. [ 109.338863][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 109.345641][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.347858][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.385471][ T8612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.451972][ T8614] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1693'. [ 109.454880][ T8614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1693'. [ 109.798363][ T8625] netlink: 'syz.3.1698': attribute type 1 has an invalid length. [ 109.800152][ T8625] netlink: 'syz.3.1698': attribute type 2 has an invalid length. [ 109.801683][ T8625] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1698'. [ 109.804454][ T8625] netlink: 'syz.3.1698': attribute type 11 has an invalid length. [ 109.827355][ T8624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.900969][ T8631] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1701'. [ 109.965126][ T8637] netlink: 'syz.0.1704': attribute type 11 has an invalid length. [ 109.974655][ T8637] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.035497][ T8637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.071251][ T8640] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1705'. [ 110.074979][ T8640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1705'. [ 110.139543][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 110.141482][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1708'. [ 110.142992][ T8646] netlink: 'syz.0.1708': attribute type 18 has an invalid length. [ 110.403143][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1712'. [ 110.657297][ T8670] netlink: 'syz.2.1716': attribute type 11 has an invalid length. [ 110.664239][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 110.671833][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.673609][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.725971][ T8670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.854274][ T8685] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 111.073972][ T8693] netlink: 'syz.4.1729': attribute type 18 has an invalid length. [ 111.838937][ T8740] netlink: 'syz.3.1741': attribute type 18 has an invalid length. [ 111.915984][ T8747] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 111.922666][ T8748] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 112.143951][ T8758] netlink: 'syz.0.1750': attribute type 1 has an invalid length. [ 112.145560][ T8758] netlink: 'syz.0.1750': attribute type 2 has an invalid length. [ 112.147597][ T8758] netlink: 'syz.0.1750': attribute type 11 has an invalid length. [ 112.154519][ T8757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.913172][ T8803] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 113.068095][ T8812] netlink: 'syz.3.1772': attribute type 18 has an invalid length. [ 113.120593][ T8818] netlink: 'syz.2.1775': attribute type 1 has an invalid length. [ 113.122266][ T8818] netlink: 'syz.2.1775': attribute type 2 has an invalid length. [ 113.124528][ T8818] netlink: 'syz.2.1775': attribute type 11 has an invalid length. [ 113.132177][ T8816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.074613][ T8852] netlink: 'syz.0.1789': attribute type 1 has an invalid length. [ 114.077187][ T8852] netlink: 'syz.0.1789': attribute type 2 has an invalid length. [ 114.078880][ T8852] __nla_validate_parse: 38 callbacks suppressed [ 114.078893][ T8852] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1789'. [ 114.083744][ T8852] netlink: 'syz.0.1789': attribute type 11 has an invalid length. [ 114.092877][ T8851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.148884][ T8855] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1791'. [ 114.174792][ T8857] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 114.253109][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1793'. [ 114.255130][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 114.256999][ T8860] netlink: 'syz.4.1793': attribute type 18 has an invalid length. [ 114.518575][ T8864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1795'. [ 114.520487][ T8864] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1795'. [ 114.620730][ T8868] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1797'. [ 114.623711][ T8868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1797'. [ 114.831202][ T8882] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1803'. [ 114.918665][ T8889] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 115.048551][ T8891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1807'. [ 115.083240][ T8893] netlink: 'syz.4.1808': attribute type 1 has an invalid length. [ 115.091747][ T8892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.920187][ T8926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.122332][ T8939] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 116.124662][ T8939] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 116.931784][ T8980] netlink: 'syz.1.1847': attribute type 11 has an invalid length. [ 117.263979][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.305618][ T8981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.543652][ T9013] validate_nla: 5 callbacks suppressed [ 117.543661][ T9013] netlink: 'syz.1.1859': attribute type 1 has an invalid length. [ 117.550934][ T9013] netlink: 'syz.1.1859': attribute type 2 has an invalid length. [ 117.552963][ T9013] netlink: 'syz.1.1859': attribute type 11 has an invalid length. [ 117.559815][ T9016] netlink: 'syz.0.1860': attribute type 11 has an invalid length. [ 117.580232][ T9008] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 117.628602][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.668581][ T9020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.672247][ T9012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.676838][ T9022] device syzkaller0 entered promiscuous mode [ 117.927247][ T9044] netlink: 'syz.4.1866': attribute type 18 has an invalid length. [ 118.247410][ T9057] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 118.396713][ T9062] netlink: 'syz.2.1874': attribute type 11 has an invalid length. [ 118.401858][ T9062] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 118.406985][ T9062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.408763][ T9062] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.440104][ T9062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.538574][ T9066] device syzkaller0 entered promiscuous mode [ 118.568772][ T9071] netlink: 'syz.2.1878': attribute type 18 has an invalid length. [ 118.801425][ T9082] netlink: 'syz.0.1882': attribute type 1 has an invalid length. [ 118.803115][ T9082] netlink: 'syz.0.1882': attribute type 2 has an invalid length. [ 118.810626][ T9082] netlink: 'syz.0.1882': attribute type 11 has an invalid length. [ 118.818351][ T9081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.872909][ T9092] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 118.879208][ T9094] netlink: 'syz.4.1887': attribute type 11 has an invalid length. [ 118.889241][ T9094] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.899149][ T9094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.016223][ T9102] device syzkaller0 entered promiscuous mode [ 119.525288][ T9124] netlink: 'syz.4.1900': attribute type 11 has an invalid length. [ 119.563636][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.615531][ T9124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.692473][ T9132] __nla_validate_parse: 42 callbacks suppressed [ 119.692484][ T9132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1904'. [ 119.693116][ T9133] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1903'. [ 119.694138][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1904'. [ 119.702882][ T9133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1903'. [ 120.218677][ T9148] device syzkaller0 entered promiscuous mode [ 120.440634][ T9170] netlink: 'syz.2.1915': attribute type 11 has an invalid length. [ 120.485816][ T9168] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 120.491874][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 120.499129][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.500748][ T9170] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.545792][ T9170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.556983][ T9176] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1917'. [ 120.559934][ T9176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1917'. [ 121.098378][ T9185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1921'. [ 121.100426][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1921'. [ 121.173677][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 121.177751][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1925'. [ 121.180538][ T9189] netlink: 'syz.0.1925': attribute type 18 has an invalid length. [ 121.192187][ T9191] device syzkaller0 entered promiscuous mode [ 121.454533][ T9207] netlink: 'syz.2.1930': attribute type 11 has an invalid length. [ 121.503421][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 121.509461][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.510822][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.547838][ T9207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.988982][ T9220] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 122.147588][ T9230] netlink: 'syz.4.1938': attribute type 18 has an invalid length. [ 122.182433][ T9235] device syzkaller0 entered promiscuous mode [ 123.230616][ T9287] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 124.108475][ T9335] netlink: 'syz.1.1974': attribute type 11 has an invalid length. [ 124.422023][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 124.455611][ T9340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.808646][ T9370] __nla_validate_parse: 17 callbacks suppressed [ 124.808660][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1985'. [ 124.811582][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 124.813101][ T9370] netlink: 'syz.2.1985': attribute type 18 has an invalid length. [ 125.275059][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1994'. [ 125.307651][ T9399] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.330888][ T9401] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1997'. [ 125.333660][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'. [ 125.363113][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1999'. [ 125.372612][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1999'. [ 125.374356][ T9407] netlink: 'syz.4.1999': attribute type 18 has an invalid length. [ 125.733557][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'. [ 125.735275][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2011'. [ 125.736950][ T9442] netlink: 'syz.2.2011': attribute type 18 has an invalid length. [ 125.778765][ T9445] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.915881][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.917185][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.649226][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2027'. [ 126.650856][ T9491] netlink: 'syz.1.2027': attribute type 18 has an invalid length. [ 126.908088][ T9515] netlink: 'syz.4.2035': attribute type 1 has an invalid length. [ 126.909756][ T9515] netlink: 'syz.4.2035': attribute type 2 has an invalid length. [ 127.120622][ T9514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.202687][ T9526] netlink: 'syz.0.2038': attribute type 11 has an invalid length. [ 127.591324][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.635615][ T9533] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.810401][ T9567] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 128.985991][ T9650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.990013][ T9653] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 129.803990][ T9713] netlink: 'syz.0.2103': attribute type 11 has an invalid length. [ 129.813290][ T9709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.827109][ T9715] netlink: 'syz.2.2104': attribute type 11 has an invalid length. [ 130.268883][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 130.272615][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.276716][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.326509][ T9716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.370461][ T9725] __nla_validate_parse: 14 callbacks suppressed [ 130.370472][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2108'. [ 130.374314][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2108'. [ 130.379079][ T9725] netlink: 'syz.0.2108': attribute type 18 has an invalid length. [ 130.419879][ T9731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2110'. [ 130.553856][ T9744] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.557983][ T9743] tipc: Started in network mode [ 130.558890][ T9743] tipc: Node identity ca8a98059723, cluster identity 4711 [ 130.560281][ T9743] tipc: Enabled bearer , priority 0 [ 130.562502][ T9743] device syzkaller0 entered promiscuous mode [ 130.609313][ T9743] tipc: Resetting bearer [ 130.797308][ T9748] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2117'. [ 130.799324][ T9742] tipc: Resetting bearer [ 130.832613][ T9754] netlink: 'syz.1.2119': attribute type 11 has an invalid length. [ 130.851798][ T9757] netlink: 'syz.3.2120': attribute type 11 has an invalid length. [ 130.865989][ T9742] tipc: Disabling bearer [ 130.909971][ T9757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.914689][ T9753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.939688][ T9761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2122'. [ 131.144462][ T9771] device veth1_to_bond entered promiscuous mode [ 131.146168][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2127'. [ 131.257232][ T9771] device veth1_to_bond left promiscuous mode [ 131.351146][ T9772] device syzkaller1 entered promiscuous mode [ 131.442004][ T9787] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2131'. [ 131.655152][ T9790] tipc: Started in network mode [ 131.665470][ T9790] tipc: Node identity beb53db612dd, cluster identity 4711 [ 131.666915][ T9790] tipc: Enabled bearer , priority 0 [ 131.669305][ T9789] device syzkaller0 entered promiscuous mode [ 131.675238][ T9796] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2134'. [ 131.683065][ T9789] tipc: Resetting bearer [ 131.707672][ T9800] netlink: 'syz.2.2136': attribute type 11 has an invalid length. [ 131.709289][ T9788] tipc: Resetting bearer [ 131.766051][ T9788] tipc: Disabling bearer [ 131.768896][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2137'. [ 131.770369][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2137'. [ 131.772132][ T9798] netlink: 'syz.4.2137': attribute type 18 has an invalid length. [ 131.775207][ T9805] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 131.781881][ T9805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.783309][ T9805] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.835696][ T9805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.840553][ T9809] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 131.866617][ T9814] netlink: 'syz.1.2142': attribute type 11 has an invalid length. [ 131.920881][ T9813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.638136][ T9842] netlink: 'syz.2.2152': attribute type 18 has an invalid length. [ 132.758180][ T9855] tipc: Enabled bearer , priority 0 [ 132.760394][ T9855] device syzkaller0 entered promiscuous mode [ 132.797846][ T9855] tipc: Resetting bearer [ 132.804660][ T9854] tipc: Resetting bearer [ 132.896773][ T9854] tipc: Disabling bearer [ 132.898873][ T9862] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 133.219906][ T9889] netlink: 'syz.3.2167': attribute type 18 has an invalid length. [ 133.703940][ T9914] netlink: 'syz.1.2179': attribute type 18 has an invalid length. [ 133.835244][ T9927] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 134.136707][ T9943] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.179402][ T9943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.507259][ T9965] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 134.509017][ T9966] device veth1_to_bond entered promiscuous mode [ 134.597810][ T9968] device veth1_to_bond left promiscuous mode [ 134.612077][ T9972] netlink: 'syz.2.2201': attribute type 11 has an invalid length. [ 134.676175][ T9968] bond0: (slave bond_slave_1): Releasing backup interface [ 134.718041][ T9964] device syzkaller1 entered promiscuous mode [ 134.725015][ T9971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.336836][T10004] netlink: 'syz.4.2214': attribute type 18 has an invalid length. [ 135.380048][T10003] device veth1_to_bond entered promiscuous mode [ 135.381872][T10003] __nla_validate_parse: 23 callbacks suppressed [ 135.381881][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2215'. [ 135.447126][T10003] device veth1_to_bond left promiscuous mode [ 135.508847][T10032] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2223'. [ 135.512036][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'. [ 135.514252][T10030] netlink: 'syz.1.2222': attribute type 11 has an invalid length. [ 135.517866][T10032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2223'. [ 135.529282][T10003] bond0: (slave bond_slave_1): Releasing backup interface [ 135.553688][T10038] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 135.668004][T10017] device syzkaller1 entered promiscuous mode [ 135.675752][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2227'. [ 135.677461][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2227'. [ 135.679126][T10046] netlink: 'syz.2.2227': attribute type 18 has an invalid length. [ 135.686100][T10029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.774515][T10053] netlink: 'syz.2.2230': attribute type 29 has an invalid length. [ 135.839550][T10053] netlink: 'syz.2.2230': attribute type 29 has an invalid length. [ 135.921708][T10066] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2235'. [ 135.926714][T10066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2235'. [ 136.037983][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2240'. [ 136.039576][T10077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2240'. [ 136.041083][T10077] netlink: 'syz.0.2240': attribute type 18 has an invalid length. [ 136.630877][T10118] netlink: 'syz.1.2252': attribute type 18 has an invalid length. [ 136.671777][T10123] netlink: 'syz.1.2255': attribute type 11 has an invalid length. [ 136.686811][T10121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.734077][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 136.745849][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.747220][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 136.775803][T10126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.876427][T10146] tipc: Started in network mode [ 136.877419][T10146] tipc: Node identity 5ae9b92c5fb6, cluster identity 4711 [ 136.878951][T10146] tipc: Enabled bearer , priority 0 [ 136.895956][T10146] device syzkaller0 entered promiscuous mode [ 136.897500][T10146] tipc: Resetting bearer [ 136.915860][ T4346] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 136.917948][ T4346] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 136.919874][ T4346] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 136.921572][ T4346] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 136.923064][ T4346] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 136.924450][ T4346] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 136.926142][T10145] tipc: Resetting bearer [ 137.436297][ T1839] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 138.955464][ T4346] Bluetooth: hci5: command 0x0409 tx timeout [ 141.035430][ T4346] Bluetooth: hci5: command 0x041b tx timeout [ 143.115415][ T4346] Bluetooth: hci5: command 0x040f tx timeout [ 145.195398][ T4346] Bluetooth: hci5: command 0x0419 tx timeout [ 147.649359][T10145] tipc: Disabling bearer [ 147.663753][T10148] __nla_validate_parse: 4 callbacks suppressed [ 147.663770][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2266'. [ 147.666589][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'. [ 147.668207][T10148] netlink: 'syz.4.2266': attribute type 18 has an invalid length. [ 147.732811][ T24] tipc: Node number set to 90159404 [ 147.853655][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 147.895718][T10192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.898595][T10150] chnl_net:caif_netlink_parms(): no params data found [ 147.937484][T10193] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 147.971354][T10150] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.972649][T10150] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.974478][T10150] device bridge_slave_0 entered promiscuous mode [ 147.976686][T10150] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.978104][T10150] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.979784][T10150] device bridge_slave_1 entered promiscuous mode [ 147.997188][T10150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.001470][T10150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.039675][T10150] team0: Port device team_slave_0 added [ 148.041628][T10150] team0: Port device team_slave_1 added [ 148.210240][T10150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.211622][T10150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.217483][T10150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.219965][T10150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.221080][T10150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.225122][T10150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.276886][T10150] device hsr_slave_0 entered promiscuous mode [ 148.305638][T10150] device hsr_slave_1 entered promiscuous mode [ 148.335465][T10150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.337540][T10150] Cannot create hsr debugfs directory [ 148.467163][T10150] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.469085][T10150] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 148.470866][T10150] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.548481][T10150] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.550334][T10150] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 148.552204][T10150] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.568473][T10210] device syzkaller0 entered promiscuous mode [ 148.647581][T10150] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.649542][T10150] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 148.652245][T10150] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.699484][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 148.702166][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2280'. [ 148.704311][T10212] netlink: 'syz.3.2280': attribute type 18 has an invalid length. [ 148.767900][T10150] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.775903][T10150] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 148.778028][T10150] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.823448][T10225] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.846978][T10225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.358727][T10253] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 149.360526][T10150] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.396864][T10150] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.428435][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2294'. [ 149.430118][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2294'. [ 149.431808][T10257] netlink: 'syz.4.2294': attribute type 18 has an invalid length. [ 149.433328][T10150] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.466767][T10150] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.548709][T10259] device syzkaller0 entered promiscuous mode [ 149.560279][T10150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.564863][T10150] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.592165][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.593935][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.598763][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.600680][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.602689][ T528] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.603964][ T528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.606269][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.612647][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.614409][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.616729][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.618095][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.619737][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.623452][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.627201][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.629604][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.634491][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.638365][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.640069][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.645224][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.650546][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.691485][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.693225][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.697746][T10150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.758426][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.759900][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.763078][T10150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.772501][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.774392][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.784732][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.787303][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.789100][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.790641][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.798324][T10150] device veth0_vlan entered promiscuous mode [ 149.802442][T10150] device veth1_vlan entered promiscuous mode [ 149.812573][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.814461][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.821359][T10150] device veth0_macvtap entered promiscuous mode [ 149.826357][T10150] device veth1_macvtap entered promiscuous mode [ 149.831501][T10150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.838527][T10150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.840168][T10150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.841947][T10150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.843864][T10150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.847027][T10150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.848765][T10150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.850405][T10150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.852946][T10150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.857940][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.859629][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.861101][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.866520][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.870386][T10150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.872077][T10150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.873923][T10150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.876200][T10150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.878420][T10150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.880498][T10150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.882605][T10150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.884805][T10150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.888604][T10150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.891423][T10150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.893010][T10150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.894943][T10150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.899194][T10150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.240363][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.242164][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.246177][T10281] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.295767][T10281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.427515][ T528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.428007][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2306'. [ 150.429042][ T528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.435011][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2306'. [ 150.437107][T10295] netlink: 'syz.1.2306': attribute type 18 has an invalid length. [ 150.438925][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.484527][ T528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.486765][ T528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.647858][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.749135][T10310] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 150.751519][T10310] sch_tbf: peakrate 257 is lower than or equals to rate 13227048128461824939 ! [ 150.853551][T10319] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.895833][T10319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.925453][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2315'. [ 150.973709][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2317'. [ 150.976305][T10328] netlink: 'syz.4.2317': attribute type 18 has an invalid length. [ 151.019584][T10330] device syzkaller0 entered promiscuous mode [ 151.166535][T10337] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 151.168069][T10339] sch_tbf: peakrate 257 is lower than or equals to rate 13227048128461824939 ! [ 151.398951][T10356] netlink: 'syz.3.2338': attribute type 1 has an invalid length. [ 151.400433][T10356] netlink: 'syz.3.2338': attribute type 2 has an invalid length. [ 151.402456][T10356] netlink: 'syz.3.2338': attribute type 11 has an invalid length. [ 151.478041][T10362] netlink: 'syz.3.2330': attribute type 18 has an invalid length. [ 151.664503][T10375] device syzkaller0 entered promiscuous mode [ 151.822764][T10377] device lo entered promiscuous mode [ 151.832266][T10377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.946109][T10383] device syzkaller0 entered promiscuous mode [ 151.951112][T10385] netlink: 'syz.1.2341': attribute type 11 has an invalid length. [ 152.126221][T10391] netlink: 'syz.0.2343': attribute type 18 has an invalid length. [ 152.257573][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 152.275940][T10401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.330568][T10404] device syzkaller0 entered promiscuous mode [ 152.411049][T10409] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 152.420139][T10409] sch_tbf: peakrate 257 is lower than or equals to rate 13227048128461824939 ! [ 152.433987][T10411] device lo entered promiscuous mode [ 152.441499][T10411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.962607][T10426] __nla_validate_parse: 14 callbacks suppressed [ 152.962619][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'. [ 152.965977][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2355'. [ 152.967741][T10426] netlink: 'syz.3.2355': attribute type 18 has an invalid length. [ 153.201193][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2363'. [ 153.218990][T10441] device syzkaller0 entered promiscuous mode [ 153.317772][T10456] device lo entered promiscuous mode [ 153.320204][T10456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.378609][T10459] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2368'. [ 153.381337][T10459] netlink: 'syz.2.2368': attribute type 11 has an invalid length. [ 153.521739][T10473] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 153.595453][ T4342] Bluetooth: hci3: command 0x0406 tx timeout [ 153.596719][ T4342] Bluetooth: hci2: command 0x0406 tx timeout [ 153.626891][T10475] device syzkaller0 entered promiscuous mode [ 153.862964][T10488] device syzkaller0 entered promiscuous mode [ 153.969067][T10497] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2383'. [ 153.971869][T10497] netlink: 'syz.1.2383': attribute type 11 has an invalid length. [ 154.036766][T10502] tipc: Enabled bearer , priority 0 [ 154.039459][T10505] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2385'. [ 154.044667][T10505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.085963][T10505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.167960][T10508] tipc: Resetting bearer [ 154.236852][T10501] tipc: Disabling bearer [ 154.239363][T10509] device syzkaller0 entered promiscuous mode [ 154.416541][T10532] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2395'. [ 154.419118][T10532] netlink: 'syz.3.2395': attribute type 11 has an invalid length. [ 154.429725][T10531] device syzkaller0 entered promiscuous mode [ 154.475490][T10536] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2398'. [ 154.625780][T10539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.704874][T10550] tipc: Enabled bearer , priority 0 [ 154.737012][T10550] tipc: Resetting bearer [ 154.826304][T10547] tipc: Disabling bearer [ 154.828406][T10553] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 155.035230][T10559] device syzkaller0 entered promiscuous mode [ 155.213996][T10569] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2409'. [ 155.216611][T10569] netlink: 'syz.3.2409': attribute type 11 has an invalid length. [ 155.259122][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2407'. [ 155.268687][T10571] netlink: 'syz.3.2410': attribute type 18 has an invalid length. [ 155.393161][T10576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.413166][T10580] device syzkaller0 entered promiscuous mode [ 155.551517][T10584] device syzkaller0 entered promiscuous mode [ 155.635069][T10596] netlink: 'syz.0.2421': attribute type 11 has an invalid length. [ 155.653815][T10594] device syzkaller0 entered promiscuous mode [ 155.748670][T10600] netlink: 'syz.1.2423': attribute type 18 has an invalid length. [ 155.846309][T10611] netlink: 'syz.4.2427': attribute type 11 has an invalid length. [ 155.859979][T10611] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.876289][T10611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.959642][T10617] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 155.964991][T10618] device syzkaller0 entered promiscuous mode [ 156.168160][T10624] device syzkaller0 entered promiscuous mode [ 156.320809][T10627] netlink: 'syz.3.2433': attribute type 11 has an invalid length. [ 156.391064][T10631] device syzkaller0 entered promiscuous mode [ 156.408350][T10633] netlink: 'syz.3.2436': attribute type 18 has an invalid length. [ 156.500315][T10635] device syzkaller0 entered promiscuous mode [ 156.617370][T10641] netlink: 'syz.0.2440': attribute type 11 has an invalid length. [ 156.621692][T10641] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.658744][T10641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.745953][T10643] device syzkaller0 entered promiscuous mode [ 156.859633][T10648] netlink: 'syz.4.2442': attribute type 10 has an invalid length. [ 156.861635][T10648] device dummy0 entered promiscuous mode [ 156.895246][T10657] netlink: 'syz.0.2445': attribute type 11 has an invalid length. [ 156.951860][T10660] device syzkaller0 entered promiscuous mode [ 157.066933][T10665] netlink: 'syz.3.2448': attribute type 18 has an invalid length. [ 157.269007][T10683] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 157.271043][T10683] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 157.272854][T10682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.645657][T10704] tipc: Enabled bearer , priority 0 [ 157.647374][T10704] device syzkaller0 entered promiscuous mode [ 157.654312][T10704] tipc: Resetting bearer [ 157.660181][T10706] netlink: 'syz.1.2465': attribute type 18 has an invalid length. [ 157.662193][T10703] tipc: Resetting bearer [ 157.696049][T10703] tipc: Disabling bearer [ 157.703719][T10708] device veth1_to_bond entered promiscuous mode [ 157.771245][T10708] device veth1_to_bond left promiscuous mode [ 157.865999][T10708] bond0: (slave bond_slave_1): Releasing backup interface [ 157.918847][T10711] device syzkaller1 entered promiscuous mode [ 157.935936][T10713] device lo entered promiscuous mode [ 157.944904][T10713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.023737][T10725] device syzkaller0 entered promiscuous mode [ 158.194291][T10737] __nla_validate_parse: 20 callbacks suppressed [ 158.194304][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2476'. [ 158.197461][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2476'. [ 158.199308][T10737] netlink: 'syz.1.2476': attribute type 18 has an invalid length. [ 158.275547][T10745] netlink: 'syz.1.2480': attribute type 11 has an invalid length. [ 158.277226][T10745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2480'. [ 158.282144][T10745] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.293659][T10749] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2482'. [ 158.302686][T10749] netlink: 'syz.4.2482': attribute type 11 has an invalid length. [ 158.315799][T10745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.424527][T10759] device syzkaller0 entered promiscuous mode [ 158.430289][T10761] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 158.497476][T10761] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 158.536102][T10755] device syzkaller0 entered promiscuous mode [ 158.618801][T10771] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2489'. [ 158.746498][T10781] device syzkaller0 entered promiscuous mode [ 158.764337][T10785] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2496'. [ 158.770300][T10785] netlink: 'syz.4.2496': attribute type 11 has an invalid length. [ 158.863952][T10789] device syzkaller0 entered promiscuous mode [ 158.991209][T10799] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2502'. [ 159.031778][T10801] device syzkaller0 entered promiscuous mode [ 159.102402][T10813] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2509'. [ 159.104761][T10813] netlink: 'syz.0.2509': attribute type 11 has an invalid length. [ 159.314787][T10834] device syzkaller0 entered promiscuous mode [ 159.331330][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2516'. [ 159.333696][T10837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2516'. [ 159.345629][T10837] netlink: 'syz.2.2516': attribute type 18 has an invalid length. [ 159.348512][T10837] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 159.349959][T10837] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 159.351380][T10837] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 159.352809][T10837] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 159.466250][T10847] device syzkaller0 entered promiscuous mode [ 159.571558][T10856] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 159.573587][T10856] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 160.207090][T10875] netlink: 'syz.4.2533': attribute type 18 has an invalid length. [ 160.234291][T10878] device syzkaller0 entered promiscuous mode [ 160.404279][T10886] device syzkaller0 entered promiscuous mode [ 160.537042][T10909] netlink: 'syz.4.2545': attribute type 18 has an invalid length. [ 160.632962][T10921] device syzkaller0 entered promiscuous mode [ 160.757498][T10925] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 161.052017][T10938] netlink: 'syz.3.2557': attribute type 11 has an invalid length. [ 161.091853][T10940] tipc: Enabled bearer , priority 0 [ 161.093530][T10940] device syzkaller0 entered promiscuous mode [ 161.100610][T10940] tipc: Resetting bearer [ 161.102673][T10939] tipc: Resetting bearer [ 161.136335][T10939] tipc: Disabling bearer [ 161.414669][T10946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.512153][T10953] device syzkaller0 entered promiscuous mode [ 161.603631][T10960] netlink: 'syz.0.2568': attribute type 11 has an invalid length. [ 162.163574][T10984] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 162.969494][T11001] tipc: Enabled bearer , priority 0 [ 162.971247][T11001] device syzkaller0 entered promiscuous mode [ 162.995034][T11009] netlink: 'syz.0.2585': attribute type 11 has an invalid length. [ 163.046076][T11009] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.095539][T11009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.100165][T11004] tipc: Resetting bearer [ 163.276497][T11007] bond0: (slave bond_slave_1): Releasing backup interface [ 163.457241][T11014] device syzkaller1 entered promiscuous mode [ 163.461084][T11000] tipc: Resetting bearer [ 163.507060][T11000] tipc: Disabling bearer [ 163.576758][T11024] device syzkaller0 entered promiscuous mode [ 163.661779][T11039] __nla_validate_parse: 13 callbacks suppressed [ 163.661791][T11039] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2596'. [ 163.665961][T11039] netlink: 'syz.0.2596': attribute type 11 has an invalid length. [ 163.711840][T11042] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 163.894238][T11052] device syzkaller0 entered promiscuous mode [ 163.993843][T11059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.088108][T11070] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2609'. [ 164.090984][T11070] netlink: 'syz.1.2609': attribute type 11 has an invalid length. [ 164.164600][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2608'. [ 164.167463][T11067] device syzkaller1 entered promiscuous mode [ 164.179574][T11076] device syzkaller0 entered promiscuous mode [ 164.549250][T11093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.582719][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2620'. [ 164.584511][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2620'. [ 164.595511][T11098] netlink: 'syz.4.2620': attribute type 18 has an invalid length. [ 164.609785][T11102] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2621'. [ 164.613611][T11101] device syzkaller0 entered promiscuous mode [ 164.618797][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2621'. [ 164.742358][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2630'. [ 164.749224][T11117] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 164.798609][T11117] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 164.962946][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2635'. [ 164.964671][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2635'. [ 164.966552][T11132] netlink: 'syz.2.2635': attribute type 18 has an invalid length. [ 164.973058][T11134] device syzkaller0 entered promiscuous mode [ 165.148932][T11145] device syzkaller0 entered promiscuous mode [ 165.612208][T11167] netlink: 'syz.3.2648': attribute type 18 has an invalid length. [ 165.653743][T11173] netlink: 'syz.1.2650': attribute type 1 has an invalid length. [ 165.664928][T11173] netlink: 'syz.1.2650': attribute type 11 has an invalid length. [ 165.680590][T11177] tipc: Enabling of bearer rejected, failed to enable media [ 165.741206][T11170] device syzkaller1 entered promiscuous mode [ 165.744902][T11179] device syzkaller0 entered promiscuous mode [ 165.891651][T11192] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.915954][T11192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.927750][T11197] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 165.934685][T11197] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 166.776756][T11230] netlink: 'syz.2.2668': attribute type 18 has an invalid length. [ 166.868739][T11232] tipc: Enabling of bearer rejected, failed to enable media [ 166.949948][T11244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.087355][T11259] netlink: 'syz.2.2677': attribute type 1 has an invalid length. [ 167.089077][T11259] netlink: 'syz.2.2677': attribute type 2 has an invalid length. [ 167.091315][T11259] netlink: 'syz.2.2677': attribute type 11 has an invalid length. [ 167.153385][T11262] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 167.155110][T11267] netlink: 'syz.1.2680': attribute type 18 has an invalid length. [ 167.157333][T11262] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 167.565844][T11278] device syzkaller1 entered promiscuous mode [ 167.843334][T11283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.923441][T11285] netlink: 'syz.3.2689': attribute type 1 has an invalid length. [ 167.925099][T11285] netlink: 'syz.3.2689': attribute type 2 has an invalid length. [ 167.930500][T11285] netlink: 'syz.3.2689': attribute type 11 has an invalid length. [ 168.318741][T11318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.332744][T11319] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 168.334853][T11319] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 168.403869][T11323] netlink: 'syz.1.2702': attribute type 11 has an invalid length. [ 169.001121][T11334] __nla_validate_parse: 22 callbacks suppressed [ 169.001134][T11334] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2707'. [ 169.005024][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2707'. [ 169.272234][T11345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.312090][T11350] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2714'. [ 169.316210][T11350] netlink: 'syz.3.2714': attribute type 11 has an invalid length. [ 169.446433][T11363] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2719'. [ 169.446442][ T319] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 169.467666][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2719'. [ 169.471843][T11367] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 169.473848][T11367] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 169.603892][T11382] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2727'. [ 169.621133][T11382] netlink: 'syz.3.2727': attribute type 11 has an invalid length. [ 169.744276][T11386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.889961][T11393] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 169.948288][T11397] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2734'. [ 169.951014][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'. [ 169.963031][T11398] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 169.971932][T11398] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 170.111952][T11408] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2739'. [ 170.114978][T11408] netlink: 'syz.2.2739': attribute type 11 has an invalid length. [ 170.356846][T11414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.597402][T11422] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2746'. [ 170.621604][ T4379] wiimote 0005:057E:0306.0010: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 170.623669][ T4379] wiimote 0005:057E:0306.0010: New device registered [ 170.629757][T11424] wiimote 0005:057E:0306.0010: Unhandled report 0 size 103 [ 170.631541][T11423] wiimote 0005:057E:0306.0010: Device removed [ 170.643581][T11425] fido_id[11425]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.838169][T11435] netlink: 'syz.3.2751': attribute type 11 has an invalid length. [ 171.235662][T11448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.393647][T11460] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 171.398529][T11460] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 171.490329][T11466] netlink: 'syz.2.2764': attribute type 11 has an invalid length. [ 171.675491][ T4379] wiimote 0005:057E:0306.0010: detected device: Nintendo Wii Remote (Gen 1) [ 171.679524][ T4379] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0010/input/input12 [ 171.683250][ T4379] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0010/input/input13 [ 171.691531][ T4379] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0010/input/input11 [ 172.200429][T11481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.293305][T11493] netlink: 'syz.3.2776': attribute type 11 has an invalid length. [ 172.632603][T11508] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 172.635851][T11508] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 172.872650][T11522] device lo entered promiscuous mode [ 172.886143][T11522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.041014][T11530] netlink: 'syz.0.2789': attribute type 11 has an invalid length. [ 173.505344][T11546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.606389][T11556] netlink: 'syz.2.2801': attribute type 11 has an invalid length. [ 173.694682][T11562] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 173.696980][T11562] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 174.199276][T11577] __nla_validate_parse: 12 callbacks suppressed [ 174.199291][T11577] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2808'. [ 174.203006][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2808'. [ 174.324206][T11585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.473317][T11591] netlink: 'syz.0.2815': attribute type 11 has an invalid length. [ 174.694683][T11604] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2820'. [ 174.698652][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'. [ 174.762696][T11612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.865070][ T4342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.868148][ T4342] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.869909][ T4342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.872090][ T4342] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.873832][ T4342] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 174.875477][ T4342] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.939573][T11621] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 174.942468][T11621] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 174.972321][T11619] chnl_net:caif_netlink_parms(): no params data found [ 174.990489][T11619] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.992042][T11619] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.993918][T11619] device bridge_slave_0 entered promiscuous mode [ 174.997758][T11619] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.999214][T11619] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.001035][T11619] device bridge_slave_1 entered promiscuous mode [ 175.009315][T11619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.012836][T11619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.021899][T11619] team0: Port device team_slave_0 added [ 175.024680][T11619] team0: Port device team_slave_1 added [ 175.031839][T11619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.033267][T11619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.038312][T11619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.041082][T11619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.042390][T11619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.047380][T11619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.117801][T11619] device hsr_slave_0 entered promiscuous mode [ 175.155806][T11619] device hsr_slave_1 entered promiscuous mode [ 175.195678][T11619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.197207][T11619] Cannot create hsr debugfs directory [ 175.308188][T11619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.310028][T11619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 175.311737][T11619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.396667][T11619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.398540][T11619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 175.400678][T11619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.507881][T11619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.509705][T11619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 175.511461][T11619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.512683][T11630] netlink: 'syz.2.2829': attribute type 11 has an invalid length. [ 175.636593][T11619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.638572][T11619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 175.640392][T11619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.731949][T11644] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2833'. [ 175.734500][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2833'. [ 175.834939][T11651] device syzkaller0 entered promiscuous mode [ 175.901725][T11654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.920043][T11619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.966797][T11619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.996808][T11619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.036786][T11619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.109617][T11619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.113519][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.115893][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.119027][T11619] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.121580][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.123621][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.125603][ T1839] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.126782][ T1839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.128456][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.131654][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.133745][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.142763][ T1839] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.143991][ T1839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.159885][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.164536][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.168938][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.169344][T11664] netlink: 'syz.1.2840': attribute type 11 has an invalid length. [ 176.171657][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.180790][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.182551][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.184396][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.231079][T11619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.233393][T11619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.236692][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.238875][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.241174][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.243031][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.244743][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.261779][T11668] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 176.264002][T11668] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 176.301745][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.303479][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.307289][T11619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.313427][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.315283][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.329032][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.331091][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.332976][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.334744][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.341549][T11619] device veth0_vlan entered promiscuous mode [ 176.345215][T11619] device veth1_vlan entered promiscuous mode [ 176.352617][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.354479][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.356778][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.358831][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.362035][T11619] device veth0_macvtap entered promiscuous mode [ 176.364649][T11619] device veth1_macvtap entered promiscuous mode [ 176.370644][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.372512][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.374394][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.376625][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.378410][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.380195][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.381933][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.383939][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.386333][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.388153][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.390547][T11619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.392094][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.394132][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.399709][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.401522][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.404361][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.406459][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.408131][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.410277][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.412044][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.413994][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.415931][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.417634][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.419189][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.420933][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.423217][T11619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.424714][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.430366][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.433938][T11619] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.435858][T11619] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.437423][T11619] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.438892][T11619] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.477261][ T319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.478746][ T319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.481243][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.493817][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.495072][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.503497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.602082][T11680] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2844'. [ 176.630497][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2845'. [ 176.634175][T11682] device erspan0 entered promiscuous mode [ 176.802393][T11688] device syzkaller0 entered promiscuous mode [ 176.956919][ T4346] Bluetooth: hci4: command 0x0409 tx timeout [ 176.972577][T11690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.084736][T11694] netlink: 'syz.1.2851': attribute type 11 has an invalid length. [ 177.189387][T11705] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2855'. [ 177.281999][ T4379] wiimote 0005:057E:0306.0011: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 177.284101][ T4379] wiimote 0005:057E:0306.0011: New device registered [ 177.289836][T11716] wiimote 0005:057E:0306.0011: Unhandled report 0 size 103 [ 177.291504][T11715] wiimote 0005:057E:0306.0011: Device removed [ 177.307323][T11717] fido_id[11717]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 177.419694][T11721] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.421697][T11721] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 178.000869][T11723] device syzkaller0 entered promiscuous mode [ 178.111253][T11725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.123457][T11727] netlink: 'syz.4.2864': attribute type 11 has an invalid length. [ 178.262783][T11741] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2870'. [ 178.325525][ T4379] wiimote 0005:057E:0306.0011: detected device: Nintendo Wii Remote (Gen 1) [ 178.329040][ T4379] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0011/input/input15 [ 178.336123][ T4379] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0011/input/input16 [ 178.338506][ T4379] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0011/input/input14 [ 178.489765][T11743] device syzkaller0 entered promiscuous mode [ 179.035964][ T4342] Bluetooth: hci4: command 0x041b tx timeout [ 181.125481][ T4346] Bluetooth: hci4: command 0x040f tx timeout [ 183.195638][ T4346] Bluetooth: hci4: command 0x0419 tx timeout [ 187.366200][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.367500][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.149283][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'. [ 189.150777][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2873'. [ 189.152194][T11752] validate_nla: 6 callbacks suppressed [ 189.152203][T11752] netlink: 'syz.4.2873': attribute type 18 has an invalid length. [ 189.179242][T11775] device syzkaller0 entered promiscuous mode [ 189.288139][T11778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.291514][T11785] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 189.293442][T11785] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 189.353608][T11792] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2883'. [ 189.570350][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2888'. [ 189.572185][T11806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2888'. [ 190.135458][T11812] device syzkaller0 entered promiscuous mode [ 190.331956][T11816] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2892'. [ 190.374820][T11821] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2894'. [ 201.233071][T11836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.241021][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2899'. [ 201.242687][T11858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2899'. [ 201.322486][T11866] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 201.324850][T11866] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 201.396455][T11878] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2907'. [ 201.436629][ T528] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 202.222699][T11886] device syzkaller0 entered promiscuous mode [ 213.032807][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2911'. [ 213.034471][T11888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2911'. [ 213.056110][T11909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.096431][T11916] device syzkaller0 entered promiscuous mode [ 213.158575][T11922] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2919'. [ 213.161204][T11922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2919'. [ 213.166226][T11918] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 213.282648][T11936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2934'. [ 213.291104][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2934'. [ 224.771656][T11926] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 224.775517][T11931] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 224.778743][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2927'. [ 224.780267][T11951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2927'. [ 224.888523][T11957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.952349][T11970] device syzkaller0 entered promiscuous mode [ 225.459116][T11979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2937'. [ 225.464923][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2937'. [ 225.530187][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2940'. [ 225.531870][T11985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2940'. [ 225.633461][T12000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.712803][T12006] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2950'. [ 225.716059][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2950'. [ 225.762790][T12011] device syzkaller0 entered promiscuous mode [ 225.873520][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2956'. [ 225.875243][T12025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2956'. [ 225.888965][T12018] device syzkaller0 entered promiscuous mode [ 226.452995][T12051] ieee802154 phy0 wpan0: encryption failed: -22 [ 233.436068][ T319] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 236.851798][T12049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.860559][T12071] __nla_validate_parse: 3 callbacks suppressed [ 236.860567][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2969'. [ 236.863304][T12071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2969'. [ 236.937078][T12080] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2973'. [ 236.939771][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2973'. [ 236.957833][T12076] device syzkaller0 entered promiscuous mode [ 237.043376][T12093] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 237.119335][T12098] bridge0: port 1(bridge_slave_0) entered listening state [ 237.153770][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 237.155511][T12100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2981'. [ 237.246199][T12113] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2987'. [ 237.249085][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2987'. [ 237.271599][T12109] device lo entered promiscuous mode [ 237.277434][T12109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.364765][T12126] device syzkaller0 entered promiscuous mode [ 237.510680][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2996'. [ 237.514744][T12138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2996'. [ 237.656328][T12154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.713511][T12162] device syzkaller0 entered promiscuous mode [ 237.827058][T12166] netlink: 'syz.3.3006': attribute type 1 has an invalid length. [ 237.988379][T12193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.063959][T12204] device syzkaller0 entered promiscuous mode [ 238.463768][T12230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.603489][T12244] device syzkaller0 entered promiscuous mode [ 238.763859][T12257] device lo left promiscuous mode [ 238.772128][T12257] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.774994][T12257] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.798340][T12256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.821118][T12261] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 239.019139][T12279] device syzkaller0 entered promiscuous mode [ 239.134587][T12288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.363381][T12319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.491196][T12329] device syzkaller0 entered promiscuous mode [ 239.564253][T12343] ------------[ cut here ]------------ [ 239.565311][T12343] WARNING: CPU: 1 PID: 12343 at net/netfilter/nft_socket.c:220 nft_socket_init+0x2a4/0x360 [ 239.567400][T12343] Modules linked in: [ 239.568187][T12343] CPU: 1 PID: 12343 Comm: syz.4.3082 Not tainted syzkaller #0 [ 239.569652][T12343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 239.571700][T12343] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 239.573148][T12343] pc : nft_socket_init+0x2a4/0x360 [ 239.574147][T12343] lr : nft_socket_init+0x2a4/0x360 [ 239.575129][T12343] sp : ffff800021747190 [ 239.575941][T12343] x29: ffff800021747190 x28: ffff60001c795000 x27: dfff800000000000 [ 239.577379][T12343] x26: ffff0000ed1b4822 x25: 1fffe0001c795004 x24: dfff800000000000 [ 239.578827][T12343] x23: 0000000000000001 x22: 0000000000000100 x21: ffff0000e3ca8020 [ 239.580271][T12343] x20: ffff0000ed1b4818 x19: ffff8000217472e0 x18: 0000000000000000 [ 239.581752][T12343] x17: 00000000ffff0000 x16: ffff800011bb65f8 x15: ffff800018508000 [ 239.583199][T12343] x14: 0000000000000001 x13: 1ffff00002a78071 x12: 0000000000080000 [ 239.584681][T12343] x11: 0000000000001cab x10: ffff80002a224000 x9 : ffff8000103f4bdc [ 239.586192][T12343] x8 : 0000000000001cac x7 : ffff8000103f5ad0 x6 : 0000000000000000 [ 239.587588][T12343] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 239.589139][T12343] x2 : 0000000000000008 x1 : 0000000000000100 x0 : 00000000000000ff [ 239.590634][T12343] Call trace: [ 239.591221][T12343] nft_socket_init+0x2a4/0x360 [ 239.592084][T12343] nf_tables_newrule+0x11b8/0x1be4 [ 239.593037][T12343] nfnetlink_rcv+0xc7c/0x1c54 [ 239.593862][T12343] netlink_unicast+0x5fc/0x80c [ 239.594694][T12343] netlink_sendmsg+0x6f0/0x9d8 [ 239.595502][T12343] ____sys_sendmsg+0x588/0x90c [ 239.596328][T12343] __sys_sendmsg+0x288/0x374 [ 239.597147][T12343] __arm64_sys_sendmsg+0x80/0x94 [ 239.598002][T12343] invoke_syscall+0x98/0x290 [ 239.598847][T12343] el0_svc_common+0x13c/0x258 [ 239.599693][T12343] do_el0_svc+0x5c/0x134 [ 239.600421][T12343] el0_svc+0x58/0x128 [ 239.601133][T12343] el0t_64_sync_handler+0x84/0xf0 [ 239.602034][T12343] el0t_64_sync+0x18c/0x190 [ 239.602823][T12343] irq event stamp: 290 [ 239.603546][T12343] hardirqs last enabled at (289): [] _raw_spin_unlock_irq+0x3c/0x90 [ 239.605235][T12343] hardirqs last disabled at (290): [] el1_dbg+0x24/0x80 [ 239.606694][T12343] softirqs last enabled at (278): [] local_bh_enable+0x10/0x34 [ 239.608307][T12343] softirqs last disabled at (272): [] local_bh_disable+0x10/0x34 [ 239.609904][T12343] ---[ end trace 0000000000000000 ]--- [ 248.795917][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.797140][ T2066] ieee802154 phy1 wpan1: encryption failed: -22