last executing test programs: 3.226453474s ago: executing program 1 (id=20410): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="0000090000980500000000000800", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.071273882s ago: executing program 1 (id=20412): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f00000014c0)=""/224, 0x0, 0xe0, 0x1}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x40, 0x40, 0x41}, 0x5e) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000180), 0xfff, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000002c0)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) 1.738189357s ago: executing program 1 (id=20414): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000300)="e5df", 0x0}, 0x20) 1.522260125s ago: executing program 1 (id=20416): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x88500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xc449}, 0x8121, 0x0, 0x80000001, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.278663276s ago: executing program 1 (id=20425): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000000", @ANYRES32], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) 1.238289867s ago: executing program 0 (id=20427): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.152498751s ago: executing program 1 (id=20430): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f00000003c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0x40000) 1.094664744s ago: executing program 4 (id=20431): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000680)="879b"}, 0x20) 1.038502836s ago: executing program 0 (id=20433): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0x12b) 1.023298156s ago: executing program 2 (id=20434): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\twrm'], 0xa) 961.994869ms ago: executing program 4 (id=20435): r0 = socket$kcm(0xa, 0x6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f20e"]) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000100)=r1, 0x120) 934.61707ms ago: executing program 0 (id=20436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061118c000000000046000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 930.02414ms ago: executing program 2 (id=20437): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b95908d387dbe9abc89b0000ec", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 900.969042ms ago: executing program 3 (id=20438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)) 828.594975ms ago: executing program 4 (id=20439): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c98cda2948ef0f440d7cad29567e15a7d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf225571f2487fc86acc2bff7d5664abebd6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552d703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8498856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa086d2a39f13f60b51136a945f780687aad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f91b52fc0b241c2db99a187c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b152d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x3, 0x5, 0x0, &(0x7f0000000740)) 794.082716ms ago: executing program 0 (id=20440): r0 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000100730109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xb}, 0x94) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 760.976548ms ago: executing program 2 (id=20441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000001000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 681.231491ms ago: executing program 2 (id=20442): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 681.106501ms ago: executing program 4 (id=20443): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 627.568143ms ago: executing program 0 (id=20444): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x8, 0x100000000}, 0x880, 0x9, 0xfffffffa, 0x0, 0xc, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x122) 608.468174ms ago: executing program 3 (id=20445): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000680)="879b"}, 0x20) 590.149535ms ago: executing program 4 (id=20446): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f00000014c0)=""/224, 0x0, 0xe0, 0x1}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x40, 0x40, 0x41}, 0x5e) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000180), 0xfff, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000002c0)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) 480.983319ms ago: executing program 3 (id=20447): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\twrm'], 0xa) 316.595296ms ago: executing program 4 (id=20448): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000180)=@in6={0xa, 0xffff, 0x0, @mcast1, 0x6}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) syz_clone(0x40001400, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 315.972896ms ago: executing program 0 (id=20458): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f00000014c0)=""/224, 0x0, 0xe0, 0x1}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x40, 0x40, 0x41}, 0x5e) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000180), 0xfff, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000002c0)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) 315.485386ms ago: executing program 2 (id=20449): r0 = socket$kcm(0xa, 0x6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f20e"]) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141399ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc0000001a002364bbd93964a8d0bdc802b9be2500"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000100)=r1, 0x120) 315.406946ms ago: executing program 3 (id=20450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061118c000000000046000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 204.679761ms ago: executing program 3 (id=20451): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b95908d387dbe9abc89b0000ec", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 184.024062ms ago: executing program 2 (id=20452): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="0000090000980500000000000800", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=20453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000001000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) kernel console output (not intermixed with test programs): e 1 has an invalid length. [ 662.708701][ T2442] netlink: 'syz.2.14850': attribute type 3 has an invalid length. [ 662.728411][ T2442] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.14850'. [ 665.345998][ T2567] netlink: 'syz.2.14903': attribute type 1 has an invalid length. [ 665.654640][ T2587] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14910'. [ 666.369259][ T2632] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14930'. [ 668.364677][ T2705] netlink: 'syz.3.14957': attribute type 29 has an invalid length. [ 668.399356][ T2705] netlink: 'syz.3.14957': attribute type 29 has an invalid length. [ 668.443973][ T2710] netlink: 'syz.3.14957': attribute type 29 has an invalid length. [ 668.941425][ T2743] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.14972'. [ 669.093599][ T2758] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.14976'. [ 669.112644][ T2751] netlink: 'syz.0.14978': attribute type 2 has an invalid length. [ 669.131098][ T2751] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.14978'. [ 669.723803][ T2800] netlink: 'syz.4.14994': attribute type 2 has an invalid length. [ 669.735127][ T2801] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.14993'. [ 669.740914][ T2800] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.14994'. [ 671.051091][ T2850] netlink: 'syz.3.15014': attribute type 3 has an invalid length. [ 671.083491][ T2850] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.15014'. [ 671.443351][ T2873] netlink: 'syz.3.15027': attribute type 7 has an invalid length. [ 671.471071][ T2875] netlink: 'syz.2.15028': attribute type 29 has an invalid length. [ 671.508590][ T2875] netlink: 'syz.2.15028': attribute type 29 has an invalid length. [ 671.525332][ T2880] netlink: 'syz.1.15029': attribute type 10 has an invalid length. [ 671.592841][ T2880] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15029'. [ 671.652423][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 671.697737][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 671.748482][ T2880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 671.842239][ T2891] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.15034'. [ 672.460690][ T2934] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15050'. [ 672.497584][ T2934] device lo left promiscuous mode [ 672.532134][ T2941] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.15053'. [ 672.543246][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 672.595188][ T2934] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 672.636923][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 672.672018][ T2934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 673.138832][ T2978] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.15065'. [ 673.351318][ T2988] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.15068'. [ 673.381462][ T2989] validate_nla: 12 callbacks suppressed [ 673.381480][ T2989] netlink: 'syz.2.15071': attribute type 10 has an invalid length. [ 673.460375][ T2989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15071'. [ 673.490215][ T2989] device lo left promiscuous mode [ 673.516073][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 673.576484][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 673.614882][ T2989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 673.835958][ T3008] netlink: 'syz.2.15080': attribute type 21 has an invalid length. [ 673.867679][ T3008] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.15080'. [ 674.630851][ T3034] netlink: 'syz.4.15091': attribute type 10 has an invalid length. [ 674.667379][ T3034] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15091'. [ 674.716253][ T3034] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 674.732031][ T3034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.060949][ T3051] netlink: 'syz.0.15097': attribute type 21 has an invalid length. [ 675.103487][ T3051] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.15097'. [ 675.324194][ T3067] netlink: 'syz.3.15107': attribute type 7 has an invalid length. [ 675.360466][ T3067] netlink: 'syz.3.15107': attribute type 6 has an invalid length. [ 675.793050][ T3090] netlink: 'syz.3.15118': attribute type 27 has an invalid length. [ 675.914474][ T3096] netlink: 'syz.4.15121': attribute type 7 has an invalid length. [ 675.964494][ T3096] netlink: 'syz.4.15121': attribute type 6 has an invalid length. [ 676.359819][ T3120] netlink: 'syz.2.15134': attribute type 27 has an invalid length. [ 676.952536][ T3153] __nla_validate_parse: 2 callbacks suppressed [ 676.952554][ T3153] netlink: 10 bytes leftover after parsing attributes in process `syz.3.15148'. [ 677.254671][ T3169] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.15153'. [ 677.406261][ T3178] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.15170'. [ 677.451616][ T3172] delete_channel: no stack [ 677.675807][ T3191] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.15165'. [ 677.707644][ T3197] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.15168'. [ 677.735932][ T3197] netlink: 18430 bytes leftover after parsing attributes in process `syz.4.15168'. [ 677.865515][ T3205] netlink: 184 bytes leftover after parsing attributes in process `syz.0.15172'. [ 677.894028][ T3209] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.15174'. [ 677.993218][ T3211] delete_channel: no stack [ 678.048056][ T3218] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.15178'. [ 678.050557][ T3215] netlink: 197324 bytes leftover after parsing attributes in process `syz.3.15180'. [ 678.127508][ T3220] device lo left promiscuous mode [ 678.132865][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 678.184315][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 678.225240][ T3220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 678.823382][ T3249] delete_channel: no stack [ 678.926864][ T3257] validate_nla: 8 callbacks suppressed [ 678.926899][ T3257] netlink: 'syz.0.15194': attribute type 1 has an invalid length. [ 679.013571][ T3257] netlink: 'syz.0.15194': attribute type 3 has an invalid length. [ 679.074397][ T3263] netlink: 'syz.2.15199': attribute type 10 has an invalid length. [ 679.113116][ T3263] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 679.206253][ T3263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.339567][ T3276] netlink: 'syz.0.15203': attribute type 1 has an invalid length. [ 679.604876][ T3294] delete_channel: no stack [ 679.824650][ T3307] netlink: 'syz.0.15218': attribute type 10 has an invalid length. [ 679.882624][ T3307] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 679.910797][ T3312] netlink: 'syz.4.15219': attribute type 1 has an invalid length. [ 679.947687][ T3307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.961031][ T3312] netlink: 'syz.4.15219': attribute type 3 has an invalid length. [ 682.709824][ T3420] __nla_validate_parse: 10 callbacks suppressed [ 682.709843][ T3420] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.15268'. [ 682.851721][ T3433] netlink: 'syz.1.15273': attribute type 4 has an invalid length. [ 682.866729][ T3433] netlink: 'syz.1.15273': attribute type 8 has an invalid length. [ 682.881994][ T3433] netlink: 197324 bytes leftover after parsing attributes in process `syz.1.15273'. [ 683.094887][ T3448] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.15290'. [ 683.214597][ T3457] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.15286'. [ 683.426987][ T3476] netlink: 'syz.2.15292': attribute type 4 has an invalid length. [ 683.459839][ T3476] netlink: 197324 bytes leftover after parsing attributes in process `syz.2.15292'. [ 683.605717][ T3491] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.15297'. [ 683.923166][ T3515] netlink: 144308 bytes leftover after parsing attributes in process `syz.3.15309'. [ 684.006138][ T3525] validate_nla: 1 callbacks suppressed [ 684.006155][ T3525] netlink: 'syz.4.15312': attribute type 4 has an invalid length. [ 684.085262][ T3525] netlink: 'syz.4.15312': attribute type 8 has an invalid length. [ 684.152060][ T3525] netlink: 197324 bytes leftover after parsing attributes in process `syz.4.15312'. [ 684.272876][ T3544] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.15319'. [ 684.639193][ T3574] netlink: 182 bytes leftover after parsing attributes in process `syz.4.15334'. [ 685.614432][ T3593] netlink: 'syz.3.15343': attribute type 1 has an invalid length. [ 685.790157][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.796616][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.662524][ T3655] netlink: 'syz.2.15371': attribute type 3 has an invalid length. [ 687.833457][ T3667] __nla_validate_parse: 2 callbacks suppressed [ 687.833478][ T3667] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.15377'. [ 687.896964][ T3667] netlink: get zone limit has 8 unknown bytes [ 687.924918][ T3671] netlink: 'syz.2.15380': attribute type 21 has an invalid length. [ 687.948927][ T3671] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.15380'. [ 688.262202][ T3687] netlink: 'syz.0.15389': attribute type 3 has an invalid length. [ 688.287541][ T3687] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.15389'. [ 688.430768][ T3701] netlink: 'syz.3.15395': attribute type 21 has an invalid length. [ 688.457620][ T3701] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.15395'. [ 688.490236][ T3703] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.15396'. [ 688.508182][ T3703] netlink: get zone limit has 8 unknown bytes [ 688.932309][ T3728] netlink: 'syz.3.15406': attribute type 3 has an invalid length. [ 688.945388][ T3728] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.15406'. [ 690.133034][ T3742] netlink: 'syz.4.15412': attribute type 21 has an invalid length. [ 690.192167][ T3742] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.15412'. [ 690.203658][ T3747] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.15417'. [ 690.247505][ T3747] netlink: get zone limit has 8 unknown bytes [ 690.489360][ T3765] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.15425'. [ 690.604211][ T3772] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.15439'. [ 693.422941][ T3868] __nla_validate_parse: 4 callbacks suppressed [ 693.423010][ T3868] netlink: 76 bytes leftover after parsing attributes in process `syz.0.15467'. [ 693.626054][ T3881] netlink: 'syz.0.15486': attribute type 10 has an invalid length. [ 693.766118][ T3881] device hsr_slave_0 left promiscuous mode [ 693.795092][ T3893] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.15481'. [ 693.851271][ T3896] netlink: 'syz.2.15484': attribute type 29 has an invalid length. [ 693.898855][ T3896] netlink: 'syz.2.15484': attribute type 29 has an invalid length. [ 694.806166][ T3904] netlink: 'syz.1.15488': attribute type 1 has an invalid length. [ 694.832173][ T3904] netlink: 5 bytes leftover after parsing attributes in process `syz.1.15488'. [ 695.401346][ T3943] netlink: 'syz.4.15504': attribute type 29 has an invalid length. [ 695.431601][ T3943] netlink: 'syz.4.15504': attribute type 29 has an invalid length. [ 695.477676][ T3948] netlink: 'syz.1.15506': attribute type 10 has an invalid length. [ 695.607530][ T3948] device hsr_slave_0 left promiscuous mode [ 696.126018][ T3979] netlink: 'syz.3.15520': attribute type 29 has an invalid length. [ 696.178166][ T3981] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.15521'. [ 696.207532][ T3979] netlink: 'syz.3.15520': attribute type 29 has an invalid length. [ 696.496549][ T4002] netlink: 'syz.2.15527': attribute type 10 has an invalid length. [ 697.782091][ T4020] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.15537'. [ 697.817660][ T4021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15535'. [ 698.376881][ T4049] netlink: 'syz.4.15549': attribute type 1 has an invalid length. [ 698.466193][ T4049] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.15549'. [ 698.895130][ T4078] netlink: 'syz.4.15564': attribute type 2 has an invalid length. [ 698.943720][ T4078] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.15564'. [ 698.985549][ T4081] netlink: 'syz.2.15565': attribute type 1 has an invalid length. [ 699.010277][ T4081] netlink: 5 bytes leftover after parsing attributes in process `syz.2.15565'. [ 700.240699][ T4130] netlink: 'syz.3.15587': attribute type 2 has an invalid length. [ 700.273624][ T4130] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.15587'. [ 700.432383][ T4139] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.15600'. [ 700.816117][ T4157] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.15597'. [ 701.120717][ T4167] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.15603'. [ 702.176939][ T4282] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.15626'. [ 702.275211][ T4291] sock: sock_set_timeout: `syz.2.15629' (pid 4291) tries to set negative timeout [ 703.046168][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15651'. [ 703.198472][ T4342] netlink: 'syz.1.15665': attribute type 29 has an invalid length. [ 703.224883][ T4342] netlink: 'syz.1.15665': attribute type 29 has an invalid length. [ 703.297368][ T4342] netlink: 'syz.1.15665': attribute type 29 has an invalid length. [ 703.825001][ T4365] netlink: 'syz.3.15668': attribute type 25 has an invalid length. [ 703.917469][ T4365] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.15668'. [ 704.791032][ T4390] netlink: 'syz.2.15678': attribute type 29 has an invalid length. [ 705.027463][ T4390] netlink: 'syz.2.15678': attribute type 29 has an invalid length. [ 705.046060][ T4397] netlink: 'syz.2.15678': attribute type 29 has an invalid length. [ 705.178470][ T4406] netlink: 'syz.4.15682': attribute type 25 has an invalid length. [ 705.204290][ T4405] netlink: 'syz.1.15683': attribute type 3 has an invalid length. [ 705.204796][ T4406] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.15682'. [ 705.257542][ T4405] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15683'. [ 705.485889][ T4419] netlink: 64 bytes leftover after parsing attributes in process `syz.4.15689'. [ 705.755927][ T4434] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15700'. [ 706.246141][ T4455] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15709'. [ 706.554604][ T4467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15726'. [ 706.608440][ T4468] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15715'. [ 707.125954][ T4495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15729'. [ 707.819437][ T4530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15743'. [ 708.616643][ T4573] IPv6: NLM_F_CREATE should be specified when creating new route [ 716.545021][ T4869] netlink: 'syz.2.15909': attribute type 1 has an invalid length. [ 716.596165][ T4869] __nla_validate_parse: 2 callbacks suppressed [ 716.596181][ T4869] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.15909'. [ 717.293472][ T4902] netlink: 'syz.1.15924': attribute type 29 has an invalid length. [ 717.324610][ T4905] netlink: 'syz.0.15925': attribute type 1 has an invalid length. [ 717.338761][ T4902] netlink: 'syz.1.15924': attribute type 29 has an invalid length. [ 717.367734][ T4907] netlink: 'syz.1.15924': attribute type 29 has an invalid length. [ 717.376508][ T4905] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.15925'. [ 718.071215][ T4941] netlink: 'syz.2.15941': attribute type 29 has an invalid length. [ 718.103939][ T4941] netlink: 'syz.2.15941': attribute type 29 has an invalid length. [ 718.127713][ T4948] netlink: 'syz.2.15941': attribute type 29 has an invalid length. [ 720.095667][ T5009] netlink: 'syz.0.15970': attribute type 3 has an invalid length. [ 720.110214][ T5009] netlink: 'syz.0.15970': attribute type 1 has an invalid length. [ 720.120874][ T5009] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.15970'. [ 720.252848][ T5015] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 721.266633][ T5032] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.15982'. [ 721.301672][ T5034] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.15983'. [ 721.852660][ T5066] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.15999'. [ 722.522838][ T5101] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.16013'. [ 722.951595][ T5121] validate_nla: 1 callbacks suppressed [ 722.951614][ T5121] netlink: 'syz.3.16023': attribute type 3 has an invalid length. [ 722.998758][ T5121] netlink: 'syz.3.16023': attribute type 1 has an invalid length. [ 723.030480][ T5121] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.16023'. [ 724.364794][ T5185] netlink: 'syz.2.16050': attribute type 1 has an invalid length. [ 724.409749][ T5185] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.16050'. [ 724.519777][ T5189] netlink: 'syz.4.16053': attribute type 10 has an invalid length. [ 724.567419][ T5189] netlink: 'syz.4.16053': attribute type 10 has an invalid length. [ 724.600511][ T5194] netlink: 'syz.4.16053': attribute type 10 has an invalid length. [ 725.187565][ T5204] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.16060'. [ 725.498617][ T5212] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16065'. [ 725.766796][ T5226] netlink: 'syz.2.16072': attribute type 10 has an invalid length. [ 725.852423][ T5226] netlink: 'syz.2.16072': attribute type 10 has an invalid length. [ 725.879923][ T5233] netlink: 'syz.2.16072': attribute type 10 has an invalid length. [ 725.900020][ T5234] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.16075'. [ 725.916169][ T5231] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.16073'. [ 725.977370][ T5234] netlink: 3064 bytes leftover after parsing attributes in process `syz.4.16075'. [ 726.245548][ T5243] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16080'. [ 726.959324][ T5262] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.16089'. [ 727.133227][ T5270] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16093'. [ 727.200470][ T5270] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.16093'. [ 727.385211][ T5282] netlink: 'syz.4.16099': attribute type 16 has an invalid length. [ 727.435393][ T5282] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16099'. [ 728.183384][ T5325] validate_nla: 1 callbacks suppressed [ 728.183401][ T5325] netlink: 'syz.3.16117': attribute type 16 has an invalid length. [ 728.238675][ T5325] netlink: 'syz.3.16117': attribute type 3 has an invalid length. [ 728.259030][ T5325] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16117'. [ 728.511355][ T5344] netlink: 'syz.2.16138': attribute type 16 has an invalid length. [ 728.547401][ T5344] netlink: 'syz.2.16138': attribute type 3 has an invalid length. [ 728.607198][ T5344] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16138'. [ 729.268713][ T5390] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16158'. [ 729.631384][ T5405] netlink: 'syz.1.16153': attribute type 153 has an invalid length. [ 729.670542][ T5405] netlink: 69544 bytes leftover after parsing attributes in process `syz.1.16153'. [ 729.887583][ T5418] netlink: 'syz.3.16172': attribute type 1 has an invalid length. [ 729.922246][ T5418] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.16172'. [ 729.967603][ T5418] netlink: 'syz.3.16172': attribute type 1 has an invalid length. [ 731.539122][ T5490] netlink: 'syz.4.16191': attribute type 153 has an invalid length. [ 731.580056][ T5490] netlink: 69544 bytes leftover after parsing attributes in process `syz.4.16191'. [ 731.976647][ T5519] netlink: 'syz.3.16206': attribute type 3 has an invalid length. [ 732.962903][ T5574] syz.1.16230 (5574) used obsolete PPPIOCDETACH ioctl [ 733.029636][ T5577] netlink: 'syz.2.16231': attribute type 3 has an invalid length. [ 733.666100][ T5615] netlink: 'syz.2.16249': attribute type 29 has an invalid length. [ 733.697087][ T5615] netlink: 'syz.2.16249': attribute type 29 has an invalid length. [ 733.747505][ T5620] netlink: 'syz.2.16249': attribute type 29 has an invalid length. [ 734.150370][ T5649] netlink: 'syz.2.16264': attribute type 2 has an invalid length. [ 734.298745][ T5659] netlink: 'syz.4.16268': attribute type 29 has an invalid length. [ 734.330106][ T5659] netlink: 'syz.4.16268': attribute type 29 has an invalid length. [ 734.341516][ T5659] netlink: 'syz.4.16268': attribute type 29 has an invalid length. [ 734.749269][ T5687] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.16279'. [ 734.816043][ T5690] netlink: 'syz.1.16282': attribute type 2 has an invalid length. [ 735.218559][ T5720] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.16296'. [ 735.345349][ T5726] netlink: 'syz.0.16298': attribute type 2 has an invalid length. [ 735.363926][ T5728] netlink: 'syz.3.16299': attribute type 21 has an invalid length. [ 735.381419][ T5728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16299'. [ 735.593690][ T5741] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.16305'. [ 736.209392][ T5778] netlink: 180 bytes leftover after parsing attributes in process `syz.0.16319'. [ 736.854590][ T5821] netlink: 180 bytes leftover after parsing attributes in process `syz.4.16339'. [ 737.688705][ T5871] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.16364'. [ 738.229594][ T5903] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.16379'. [ 738.892952][ T5936] validate_nla: 5 callbacks suppressed [ 738.892989][ T5936] netlink: 'syz.3.16395': attribute type 17 has an invalid length. [ 738.961350][ T5942] netlink: 'syz.4.16393': attribute type 3 has an invalid length. [ 739.008484][ T5942] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.16393'. [ 740.169824][ T6008] netlink: 'syz.0.16426': attribute type 17 has an invalid length. [ 740.631671][ T6040] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16442'. [ 740.661881][ T6040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 741.239622][ T6072] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16458'. [ 741.474593][ T6082] netlink: 'syz.2.16462': attribute type 28 has an invalid length. [ 741.514160][ T6082] netlink: 'syz.2.16462': attribute type 4 has an invalid length. [ 741.554228][ T6082] netlink: 136 bytes leftover after parsing attributes in process `syz.2.16462'. [ 746.188111][ T6304] netlink: 'syz.1.16560': attribute type 1 has an invalid length. [ 746.196154][ T6304] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.16560'. [ 747.229252][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.235615][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.452903][ T6329] netlink: 'syz.1.16581': attribute type 11 has an invalid length. [ 747.495713][ T6329] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.16581'. [ 747.769593][ T6353] netlink: 'syz.1.16582': attribute type 12 has an invalid length. [ 747.802824][ T6357] netlink: 'syz.4.16583': attribute type 9 has an invalid length. [ 747.813062][ T6353] netlink: 172 bytes leftover after parsing attributes in process `syz.1.16582'. [ 747.832455][ T6357] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.16583'. [ 748.355432][ T6389] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.16596'. [ 748.814399][ T6415] netlink: 'syz.3.16606': attribute type 9 has an invalid length. [ 748.822771][ T6415] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16606'. [ 748.936042][ T6419] netlink: 'syz.3.16608': attribute type 11 has an invalid length. [ 748.953173][ T6419] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.16608'. [ 748.968714][ T6417] netlink: 'syz.2.16607': attribute type 12 has an invalid length. [ 748.976662][ T6417] netlink: 172 bytes leftover after parsing attributes in process `syz.2.16607'. [ 749.406043][ T6445] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.16620'. [ 749.591860][ T6454] netlink: 'syz.2.16624': attribute type 11 has an invalid length. [ 749.609678][ T6456] netlink: 'syz.4.16626': attribute type 12 has an invalid length. [ 749.624484][ T6454] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.16624'. [ 750.792628][ T6499] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 752.444421][ T6563] netlink: 'syz.3.16673': attribute type 46 has an invalid length. [ 752.456827][ T6563] __nla_validate_parse: 1 callbacks suppressed [ 752.456846][ T6563] netlink: 55 bytes leftover after parsing attributes in process `syz.3.16673'. [ 752.656807][ T6576] netlink: 140 bytes leftover after parsing attributes in process `syz.3.16676'. [ 752.962160][ T6597] netlink: 'syz.2.16683': attribute type 1 has an invalid length. [ 752.981904][ T6597] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.16683'. [ 753.081729][ T6599] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.16686'. [ 753.641719][ T6627] netlink: 140 bytes leftover after parsing attributes in process `syz.1.16697'. [ 753.882512][ T6641] netlink: 'syz.4.16700': attribute type 1 has an invalid length. [ 753.906824][ T6641] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.16700'. [ 754.246197][ T6657] netlink: 'syz.4.16707': attribute type 25 has an invalid length. [ 754.259605][ T6657] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.16707'. [ 754.311101][ T6658] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16705'. [ 754.352244][ T6658] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 754.392343][ T6658] CPU: 0 PID: 6658 Comm: syz.3.16705 Not tainted syzkaller #0 [ 754.399883][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 754.409984][ T6658] Call Trace: [ 754.413292][ T6658] [ 754.416264][ T6658] dump_stack_lvl+0x168/0x230 [ 754.421002][ T6658] ? show_regs_print_info+0x20/0x20 [ 754.426259][ T6658] ? load_image+0x3b0/0x3b0 [ 754.430845][ T6658] sysfs_warn_dup+0x8a/0xa0 [ 754.435407][ T6658] sysfs_do_create_link_sd+0xc0/0x110 [ 754.440843][ T6658] device_add+0x7ed/0xfb0 [ 754.445246][ T6658] wiphy_register+0x1d67/0x2b20 [ 754.450252][ T6658] ? cfg80211_event_work+0x40/0x40 [ 754.455588][ T6658] ? minstrel_ht_alloc+0x808/0x980 [ 754.460804][ T6658] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 754.466942][ T6658] ieee80211_register_hw+0x29b1/0x39d0 [ 754.472605][ T6658] ? ieee80211_tasklet_handler+0x20/0x20 [ 754.478305][ T6658] ? rcu_is_watching+0x11/0xa0 [ 754.483127][ T6658] ? memset+0x1e/0x40 [ 754.487158][ T6658] ? hrtimer_init+0x10c/0x220 [ 754.491892][ T6658] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 754.497694][ T6658] hwsim_new_radio_nl+0xa6f/0xc40 [ 754.502798][ T6658] genl_rcv_msg+0xbc6/0xf40 [ 754.507374][ T6658] ? genl_bind+0x370/0x370 [ 754.511938][ T6658] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 754.517705][ T6658] ? verify_lock_unused+0x140/0x140 [ 754.522956][ T6658] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 754.528729][ T6658] ? perf_trace_lock+0x2ec/0x370 [ 754.533716][ T6658] ? hwsim_tx_info_frame_received_nl+0x1010/0x1010 [ 754.540309][ T6658] netlink_rcv_skb+0x1e0/0x430 [ 754.545121][ T6658] ? genl_bind+0x370/0x370 [ 754.549705][ T6658] ? netlink_ack+0xb60/0xb60 [ 754.554388][ T6658] ? __lock_acquire+0x7c60/0x7c60 [ 754.559472][ T6658] ? preempt_count_add+0x8d/0x190 [ 754.564543][ T6658] ? down_read+0x1aa/0x2e0 [ 754.569021][ T6658] genl_rcv+0x24/0x40 [ 754.573047][ T6658] netlink_unicast+0x774/0x920 [ 754.577997][ T6658] netlink_sendmsg+0x8ab/0xbc0 [ 754.582816][ T6658] ? netlink_getsockopt+0x560/0x560 [ 754.588056][ T6658] ? aa_sock_msg_perm+0x94/0x150 [ 754.593038][ T6658] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 754.598373][ T6658] ? security_socket_sendmsg+0x7c/0xa0 [ 754.603872][ T6658] ? netlink_getsockopt+0x560/0x560 [ 754.609121][ T6658] ____sys_sendmsg+0x5a2/0x8c0 [ 754.613948][ T6658] ? memset+0x1e/0x40 [ 754.617980][ T6658] ? __sys_sendmsg_sock+0x30/0x30 [ 754.623079][ T6658] ? import_iovec+0x6f/0xa0 [ 754.627639][ T6658] ___sys_sendmsg+0x1f0/0x260 [ 754.632390][ T6658] ? __sys_sendmsg+0x250/0x250 [ 754.637221][ T6658] ? trace_event_raw_event_lock+0x250/0x250 [ 754.643236][ T6658] ? __fdget+0x18b/0x210 [ 754.647532][ T6658] __se_sys_sendmsg+0x190/0x250 [ 754.652435][ T6658] ? __x64_sys_sendmsg+0x80/0x80 [ 754.657420][ T6658] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 754.663500][ T6658] ? lockdep_hardirqs_on+0x94/0x140 [ 754.668751][ T6658] do_syscall_64+0x4c/0xa0 [ 754.673209][ T6658] ? clear_bhb_loop+0x30/0x80 [ 754.677921][ T6658] ? clear_bhb_loop+0x30/0x80 [ 754.682646][ T6658] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 754.688589][ T6658] RIP: 0033:0x7f3694e3f749 [ 754.693040][ T6658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.712687][ T6658] RSP: 002b:00007f36930a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.721147][ T6658] RAX: ffffffffffffffda RBX: 00007f3695095fa0 RCX: 00007f3694e3f749 [ 754.729174][ T6658] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 754.737181][ T6658] RBP: 00007f3694ec3f91 R08: 0000000000000000 R09: 0000000000000000 [ 754.745189][ T6658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.753194][ T6658] R13: 00007f3695096038 R14: 00007f3695095fa0 R15: 00007ffebc407958 [ 754.761331][ T6658] [ 755.067106][ T6669] netlink: 140 bytes leftover after parsing attributes in process `syz.2.16715'. [ 755.602097][ T6692] netlink: 'syz.1.16721': attribute type 1 has an invalid length. [ 755.652947][ T6692] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.16721'. [ 756.082109][ T6717] netlink: 'syz.0.16744': attribute type 7 has an invalid length. [ 756.940504][ T6759] netlink: 'syz.2.16762': attribute type 7 has an invalid length. [ 756.962345][ T6764] netlink: 'syz.1.16753': attribute type 12 has an invalid length. [ 756.981650][ T6764] netlink: 'syz.1.16753': attribute type 11 has an invalid length. [ 757.566428][ T6792] __nla_validate_parse: 3 callbacks suppressed [ 757.566449][ T6792] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.16767'. [ 757.645961][ T6792] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 757.670488][ T6792] CPU: 0 PID: 6792 Comm: syz.4.16767 Not tainted syzkaller #0 [ 757.678018][ T6792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 757.688199][ T6792] Call Trace: [ 757.691510][ T6792] [ 757.694473][ T6792] dump_stack_lvl+0x168/0x230 [ 757.699198][ T6792] ? show_regs_print_info+0x20/0x20 [ 757.704442][ T6792] ? load_image+0x3b0/0x3b0 [ 757.709020][ T6792] sysfs_warn_dup+0x8a/0xa0 [ 757.713588][ T6792] sysfs_do_create_link_sd+0xc0/0x110 [ 757.719004][ T6792] device_add+0x7ed/0xfb0 [ 757.723392][ T6792] wiphy_register+0x1d67/0x2b20 [ 757.728342][ T6792] ? cfg80211_event_work+0x40/0x40 [ 757.733585][ T6792] ? minstrel_ht_alloc+0x808/0x980 [ 757.738757][ T6792] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 757.744884][ T6792] ieee80211_register_hw+0x29b1/0x39d0 [ 757.750425][ T6792] ? ieee80211_tasklet_handler+0x20/0x20 [ 757.756121][ T6792] ? rcu_is_watching+0x11/0xa0 [ 757.760944][ T6792] ? memset+0x1e/0x40 [ 757.764974][ T6792] ? hrtimer_init+0x10c/0x220 [ 757.769720][ T6792] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 757.775531][ T6792] hwsim_new_radio_nl+0xa6f/0xc40 [ 757.780650][ T6792] genl_rcv_msg+0xbc6/0xf40 [ 757.785317][ T6792] ? genl_bind+0x370/0x370 [ 757.789808][ T6792] ? verify_lock_unused+0x140/0x140 [ 757.795050][ T6792] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 757.800299][ T6792] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 757.806092][ T6792] ? perf_trace_lock+0x2ec/0x370 [ 757.811196][ T6792] ? hwsim_tx_info_frame_received_nl+0x1010/0x1010 [ 757.817789][ T6792] netlink_rcv_skb+0x1e0/0x430 [ 757.822606][ T6792] ? genl_bind+0x370/0x370 [ 757.827072][ T6792] ? netlink_ack+0xb60/0xb60 [ 757.831715][ T6792] ? __lock_acquire+0x7c60/0x7c60 [ 757.836794][ T6792] ? preempt_count_add+0x8d/0x190 [ 757.841868][ T6792] ? down_read+0x1aa/0x2e0 [ 757.846333][ T6792] genl_rcv+0x24/0x40 [ 757.850441][ T6792] netlink_unicast+0x774/0x920 [ 757.855277][ T6792] netlink_sendmsg+0x8ab/0xbc0 [ 757.860102][ T6792] ? netlink_getsockopt+0x560/0x560 [ 757.865351][ T6792] ? aa_sock_msg_perm+0x94/0x150 [ 757.870334][ T6792] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 757.875763][ T6792] ? security_socket_sendmsg+0x7c/0xa0 [ 757.881263][ T6792] ? netlink_getsockopt+0x560/0x560 [ 757.886507][ T6792] ____sys_sendmsg+0x5a2/0x8c0 [ 757.891328][ T6792] ? memset+0x1e/0x40 [ 757.895350][ T6792] ? __sys_sendmsg_sock+0x30/0x30 [ 757.900432][ T6792] ? import_iovec+0x6f/0xa0 [ 757.904994][ T6792] ___sys_sendmsg+0x1f0/0x260 [ 757.909746][ T6792] ? __sys_sendmsg+0x250/0x250 [ 757.914579][ T6792] ? trace_event_raw_event_lock+0x250/0x250 [ 757.920555][ T6792] ? __fdget+0x18b/0x210 [ 757.924842][ T6792] __se_sys_sendmsg+0x190/0x250 [ 757.929743][ T6792] ? __x64_sys_sendmsg+0x80/0x80 [ 757.934805][ T6792] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 757.940860][ T6792] ? lockdep_hardirqs_on+0x94/0x140 [ 757.946147][ T6792] do_syscall_64+0x4c/0xa0 [ 757.950604][ T6792] ? clear_bhb_loop+0x30/0x80 [ 757.955401][ T6792] ? clear_bhb_loop+0x30/0x80 [ 757.960119][ T6792] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 757.966102][ T6792] RIP: 0033:0x7f7ae7c2d749 [ 757.970557][ T6792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.990212][ T6792] RSP: 002b:00007f7ae5e94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.998680][ T6792] RAX: ffffffffffffffda RBX: 00007f7ae7e83fa0 RCX: 00007f7ae7c2d749 [ 758.006784][ T6792] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 758.014792][ T6792] RBP: 00007f7ae7cb1f91 R08: 0000000000000000 R09: 0000000000000000 [ 758.022799][ T6792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.030823][ T6792] R13: 00007f7ae7e84038 R14: 00007f7ae7e83fa0 R15: 00007ffc8416d9b8 [ 758.038891][ T6792] [ 758.276378][ T6796] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.16770'. [ 759.074424][ T6830] netlink: 'syz.4.16785': attribute type 2 has an invalid length. [ 759.127434][ T6830] netlink: 'syz.4.16785': attribute type 1 has an invalid length. [ 759.173467][ T6830] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.16785'. [ 759.475913][ T6856] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.16798'. [ 759.786641][ T6881] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.16810'. [ 759.806213][ T6881] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 759.846981][ T6881] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 760.306551][ T6919] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.16826'. [ 760.367391][ T6919] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 760.395756][ T6919] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 760.733969][ T6947] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.16839'. [ 760.824537][ T6951] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.16852'. [ 760.938810][ T6954] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16843'. [ 761.027409][ T6954] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 761.079195][ T6954] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 761.123072][ T6963] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16857'. [ 761.406460][ T6977] netlink: 'syz.1.16853': attribute type 3 has an invalid length. [ 761.451701][ T6977] netlink: 'syz.1.16853': attribute type 1 has an invalid length. [ 761.468697][ T6976] netlink: 'syz.4.16854': attribute type 27 has an invalid length. [ 761.595840][ T6990] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 761.643932][ T6990] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 761.930549][ T7006] device bridge0 entered promiscuous mode [ 761.957100][ T7010] netlink: 'syz.1.16870': attribute type 3 has an invalid length. [ 762.056081][ T7015] netlink: 'syz.0.16872': attribute type 3 has an invalid length. [ 762.073097][ T7015] netlink: 'syz.0.16872': attribute type 1 has an invalid length. [ 762.348218][ T7018] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 762.361287][ T7018] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 762.672741][ T7043] netlink: 'syz.2.16886': attribute type 3 has an invalid length. [ 762.683352][ T7044] __nla_validate_parse: 11 callbacks suppressed [ 762.683370][ T7044] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16884'. [ 762.703641][ T7043] netlink: 'syz.2.16886': attribute type 1 has an invalid length. [ 762.712125][ T7043] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.16886'. [ 764.034505][ T7079] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16899'. [ 764.294413][ T7092] device bridge0 entered promiscuous mode [ 764.869371][ T7127] device bridge0 entered promiscuous mode [ 765.484821][ T7167] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16942'. [ 766.036930][ T7202] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16960'. [ 766.686727][ T7236] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16977'. [ 766.698453][ T7235] netlink: 'syz.2.16987': attribute type 1 has an invalid length. [ 766.706309][ T7235] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.16987'. [ 767.080128][ T7264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16989'. [ 767.113212][ T7264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16989'. [ 767.136467][ T7256] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16989'. [ 767.340988][ T7278] netlink: 'syz.0.16999': attribute type 1 has an invalid length. [ 770.643556][ T7439] __nla_validate_parse: 3 callbacks suppressed [ 770.643575][ T7439] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17075'. [ 770.757807][ T7439] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17075'. [ 770.819311][ T7444] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17075'. [ 771.219588][ T7467] netlink: 'syz.1.17087': attribute type 10 has an invalid length. [ 771.727864][ T7485] netlink: 'syz.0.17094': attribute type 11 has an invalid length. [ 772.202334][ T7496] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17099'. [ 772.235669][ T7496] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17099'. [ 772.256534][ T7496] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17099'. [ 772.300323][ T7502] netlink: 'syz.1.17101': attribute type 29 has an invalid length. [ 772.319741][ T7502] netlink: 'syz.1.17101': attribute type 29 has an invalid length. [ 772.365761][ T7503] netlink: 'syz.1.17101': attribute type 29 has an invalid length. [ 772.931882][ T7536] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17116'. [ 773.000042][ T7536] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17116'. [ 773.053148][ T7537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17116'. [ 774.273449][ T7570] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.17134'. [ 775.777794][ T7604] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.17149'. [ 776.427046][ T7628] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.17161'. [ 776.677147][ T7639] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.17165'. [ 776.861128][ T7643] netlink: 'syz.3.17167': attribute type 2 has an invalid length. [ 776.878750][ T7643] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.17167'. [ 777.203521][ T7662] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.17177'. [ 777.374720][ T7670] netlink: 'syz.2.17181': attribute type 2 has an invalid length. [ 777.396287][ T7670] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.17181'. [ 777.486182][ T7674] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.17183'. [ 777.510228][ T7676] netlink: 'syz.2.17184': attribute type 7 has an invalid length. [ 777.557471][ T7676] netlink: 'syz.2.17184': attribute type 1 has an invalid length. [ 777.616914][ T7676] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.17184'. [ 777.830265][ T7686] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.17198'. [ 778.076268][ T7692] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.17192'. [ 778.192934][ T7698] netlink: 'syz.1.17194': attribute type 2 has an invalid length. [ 778.424018][ T7708] netlink: 'syz.3.17201': attribute type 7 has an invalid length. [ 778.459714][ T7708] netlink: 'syz.3.17201': attribute type 1 has an invalid length. [ 778.806185][ T7727] netlink: 'syz.1.17210': attribute type 3 has an invalid length. [ 782.629387][ T7869] __nla_validate_parse: 4 callbacks suppressed [ 782.629405][ T7869] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.17276'. [ 782.846856][ T7878] netlink: 'syz.0.17280': attribute type 3 has an invalid length. [ 782.884057][ T7878] netlink: 'syz.0.17280': attribute type 8 has an invalid length. [ 782.902606][ T7878] netlink: 197324 bytes leftover after parsing attributes in process `syz.0.17280'. [ 783.463997][ T7897] netlink: 14 bytes leftover after parsing attributes in process `syz.3.17290'. [ 784.212284][ T7932] netlink: 14 bytes leftover after parsing attributes in process `syz.1.17304'. [ 784.858295][ T7940] netlink: 'syz.1.17307': attribute type 3 has an invalid length. [ 784.886812][ T7940] netlink: 'syz.1.17307': attribute type 8 has an invalid length. [ 784.910807][ T7940] netlink: 197324 bytes leftover after parsing attributes in process `syz.1.17307'. [ 785.380212][ T7956] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.17313'. [ 785.487642][ T7959] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.17327'. [ 785.522606][ T7961] netlink: 'syz.0.17328': attribute type 9 has an invalid length. [ 785.532508][ T7961] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.17328'. [ 785.971104][ T7977] netlink: 14 bytes leftover after parsing attributes in process `syz.2.17322'. [ 786.904225][ T8008] netlink: 'syz.0.17340': attribute type 33 has an invalid length. [ 786.914030][ T8008] netlink: 164 bytes leftover after parsing attributes in process `syz.0.17340'. [ 788.057631][ T8064] __nla_validate_parse: 1 callbacks suppressed [ 788.057648][ T8064] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17367'. [ 788.225720][ T8071] netlink: 152 bytes leftover after parsing attributes in process `syz.0.17370'. [ 788.638845][ T8084] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17386'. [ 789.118532][ T8107] netlink: 'syz.3.17380': attribute type 29 has an invalid length. [ 789.127011][ T8107] netlink: 'syz.3.17380': attribute type 29 has an invalid length. [ 789.140378][ T8110] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17382'. [ 789.158254][ T8111] netlink: 'syz.3.17380': attribute type 29 has an invalid length. [ 789.268860][ T8113] netlink: 'syz.3.17384': attribute type 1 has an invalid length. [ 789.328289][ T8118] netlink: 'syz.1.17401': attribute type 29 has an invalid length. [ 789.336581][ T8118] netlink: 'syz.1.17401': attribute type 29 has an invalid length. [ 789.378470][ T8121] netlink: 'syz.1.17401': attribute type 29 has an invalid length. [ 789.753835][ T8144] device wlan1 entered promiscuous mode [ 789.763064][ T8142] mac80211_hwsim hwsim7 O3ãc¤±: renamed from wlan1 [ 790.225732][ T8163] netlink: 10 bytes leftover after parsing attributes in process `syz.2.17412'. [ 790.970082][ T8196] netlink: 10 bytes leftover after parsing attributes in process `syz.1.17426'. [ 791.627087][ T8235] netlink: 10 bytes leftover after parsing attributes in process `syz.0.17442'. [ 791.823777][ T8249] netlink: 'syz.2.17454': attribute type 1 has an invalid length. [ 791.851430][ T8249] netlink: 199572 bytes leftover after parsing attributes in process `syz.2.17454'. [ 791.939714][ T8258] netlink: 72 bytes leftover after parsing attributes in process `syz.0.17459'. [ 792.868937][ T8275] device wlan1 entered promiscuous mode [ 793.199843][ T8292] netlink: 399 bytes leftover after parsing attributes in process `syz.4.17481'. [ 793.428874][ T8304] netlink: 'syz.1.17479': attribute type 1 has an invalid length. [ 793.497623][ T8304] netlink: 199572 bytes leftover after parsing attributes in process `syz.1.17479'. [ 793.522967][ T8303] netlink: 72 bytes leftover after parsing attributes in process `syz.4.17478'. [ 793.926111][ T8326] netlink: 399 bytes leftover after parsing attributes in process `syz.0.17489'. [ 794.095556][ T8338] netlink: 'syz.3.17494': attribute type 3 has an invalid length. [ 794.156434][ T8338] netlink: 'syz.3.17494': attribute type 181 has an invalid length. [ 794.248264][ T8343] netlink: 'syz.4.17498': attribute type 13 has an invalid length. [ 794.276647][ T8343] netlink: 160 bytes leftover after parsing attributes in process `syz.4.17498'. [ 794.301346][ T8343] erspan0: refused to change device tx_queue_len [ 794.346399][ T8343] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 794.584224][ T8355] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.17511'. [ 795.286306][ T8378] netlink: 'syz.2.17514': attribute type 13 has an invalid length. [ 795.315184][ T8378] netlink: 160 bytes leftover after parsing attributes in process `syz.2.17514'. [ 795.345365][ T8378] erspan0: refused to change device tx_queue_len [ 795.377373][ T8378] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 795.399938][ T8383] ref_ctr_offset mismatch. inode: 0x4506 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 795.804132][ T8397] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.17522'. [ 796.186984][ T8415] netlink: 'syz.3.17542': attribute type 13 has an invalid length. [ 796.229035][ T8415] netlink: 160 bytes leftover after parsing attributes in process `syz.3.17542'. [ 796.231837][ T8419] netlink: 'syz.4.17532': attribute type 3 has an invalid length. [ 796.265738][ T8419] netlink: 'syz.4.17532': attribute type 181 has an invalid length. [ 796.456877][ T8420] ref_ctr_offset mismatch. inode: 0x44f0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 796.492186][ T8415] erspan0: refused to change device tx_queue_len [ 796.531121][ T8415] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 797.025881][ T8452] netlink: 'syz.3.17550': attribute type 21 has an invalid length. [ 797.661325][ T8488] netlink: 'syz.2.17566': attribute type 21 has an invalid length. [ 797.897049][ T8499] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.17571'. [ 798.186884][ T8517] netlink: 'syz.0.17582': attribute type 21 has an invalid length. [ 798.361048][ T8529] netlink: 168 bytes leftover after parsing attributes in process `syz.2.17587'. [ 798.473120][ T8532] netlink: 'syz.3.17589': attribute type 17 has an invalid length. [ 798.501450][ T8532] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17589'. [ 798.539864][ T8532] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 798.576136][ T8532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 798.604968][ T8539] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.17592'. [ 798.790226][ T8546] netlink: 152 bytes leftover after parsing attributes in process `syz.0.17605'. [ 798.853702][ T8546] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 798.905479][ T8546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 799.159917][ T8563] netlink: 168 bytes leftover after parsing attributes in process `syz.3.17601'. [ 800.274555][ T8618] validate_nla: 1 callbacks suppressed [ 800.274573][ T8618] netlink: 'syz.1.17630': attribute type 21 has an invalid length. [ 800.307390][ T8618] netlink: 'syz.1.17630': attribute type 1 has an invalid length. [ 800.346016][ T8622] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.17628'. [ 800.472105][ T8627] netlink: 168 bytes leftover after parsing attributes in process `syz.0.17631'. [ 800.858826][ T8648] netlink: 'syz.3.17645': attribute type 21 has an invalid length. [ 800.901824][ T8648] netlink: 'syz.3.17645': attribute type 1 has an invalid length. [ 801.113422][ T8657] netlink: 64 bytes leftover after parsing attributes in process `syz.1.17649'. [ 801.323517][ T8672] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.17656'. [ 801.452905][ T8680] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.17660'. [ 803.101601][ T8769] netlink: 'syz.3.17701': attribute type 3 has an invalid length. [ 803.411487][ T8791] __nla_validate_parse: 7 callbacks suppressed [ 803.411522][ T8791] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.17712'. [ 803.523631][ T8799] netlink: 'syz.3.17718': attribute type 10 has an invalid length. [ 803.534201][ T8799] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.17718'. [ 803.550463][ T8801] netlink: 'syz.2.17717': attribute type 3 has an invalid length. [ 803.617380][ T8801] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.17717'. [ 804.114008][ T8832] netlink: 56 bytes leftover after parsing attributes in process `syz.4.17731'. [ 804.123947][ T8832] netlink: 56 bytes leftover after parsing attributes in process `syz.4.17731'. [ 804.151625][ T8832] netlink: 56 bytes leftover after parsing attributes in process `syz.4.17731'. [ 804.296975][ T8841] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.17735'. [ 806.157802][ T8897] netlink: 'syz.4.17763': attribute type 3 has an invalid length. [ 806.166060][ T8897] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.17763'. [ 806.183756][ T8899] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.17762'. [ 806.611252][ T8922] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17774'. [ 806.690936][ T8927] netlink: 'syz.2.17777': attribute type 2 has an invalid length. [ 806.721545][ T8927] netlink: 'syz.2.17777': attribute type 8 has an invalid length. [ 807.139180][ T8957] netlink: 'syz.1.17791': attribute type 2 has an invalid length. [ 807.164643][ T8957] netlink: 'syz.1.17791': attribute type 8 has an invalid length. [ 807.956197][ T8998] netlink: 'syz.1.17809': attribute type 3 has an invalid length. [ 808.676653][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.683201][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.704503][ T9032] netlink: 'syz.3.17822': attribute type 3 has an invalid length. [ 808.727461][ T9032] __nla_validate_parse: 6 callbacks suppressed [ 808.727492][ T9032] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.17822'. [ 810.239493][ T9070] netlink: 'syz.2.17840': attribute type 3 has an invalid length. [ 810.275411][ T9070] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.17840'. [ 811.548958][ T9099] netlink: 'syz.0.17852': attribute type 3 has an invalid length. [ 811.564877][ T9099] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.17852'. [ 812.632061][ T9109] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.17857'. [ 812.661654][ T9109] tc_dump_action: action bad kind [ 812.894863][ T9129] netlink: 'syz.1.17867': attribute type 30 has an invalid length. [ 812.983389][ T9133] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.17869'. [ 813.202014][ T9139] netlink: 'syz.0.17874': attribute type 3 has an invalid length. [ 813.212419][ T9139] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.17874'. [ 814.455364][ T9148] netlink: 'syz.0.17885': attribute type 3 has an invalid length. [ 814.482158][ T9148] netlink: 1034 bytes leftover after parsing attributes in process `syz.0.17885'. [ 814.561625][ T9155] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.17879'. [ 814.622564][ T9155] tc_dump_action: action bad kind [ 814.639533][ T9161] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.17882'. [ 816.393107][ T9203] netlink: 763 bytes leftover after parsing attributes in process `syz.2.17904'. [ 816.489011][ T9206] netlink: 'syz.0.17905': attribute type 3 has an invalid length. [ 816.497215][ T9206] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.17905'. [ 816.580303][ T9214] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.17909'. [ 816.606230][ T9215] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17906'. [ 816.641807][ T9215] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17906'. [ 816.703849][ T9209] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17906'. [ 817.276744][ T9265] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.17934'. [ 820.022976][ T9397] __nla_validate_parse: 6 callbacks suppressed [ 820.022993][ T9397] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.18000'. [ 820.575626][ T9425] netlink: 'syz.1.18011': attribute type 29 has an invalid length. [ 820.624802][ T9425] netlink: 'syz.1.18011': attribute type 29 has an invalid length. [ 820.633660][ T9429] netlink: 'syz.1.18011': attribute type 29 has an invalid length. [ 820.958426][ T9444] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.18020'. [ 821.516295][ T9462] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.18030'. [ 821.748503][ T9469] netlink: 'syz.4.18033': attribute type 29 has an invalid length. [ 821.756758][ T9469] netlink: 'syz.4.18033': attribute type 29 has an invalid length. [ 821.858367][ T9473] netlink: 'syz.4.18033': attribute type 29 has an invalid length. [ 822.364852][ T9501] netlink: 'syz.0.18045': attribute type 46 has an invalid length. [ 822.504569][ T9511] netlink: 'syz.2.18052': attribute type 29 has an invalid length. [ 822.526325][ T9511] netlink: 'syz.2.18052': attribute type 29 has an invalid length. [ 822.556919][ T9511] netlink: 'syz.2.18052': attribute type 29 has an invalid length. [ 822.582731][ T9513] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.18054'. [ 822.982974][ T9531] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.18061'. [ 823.361370][ T9554] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.18073'. [ 823.693534][ T9566] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 823.757762][ T9566] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 823.815434][ T9566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 824.073926][ T9582] netlink: 209588 bytes leftover after parsing attributes in process `syz.4.18088'. [ 824.485555][ T9598] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.18098'. [ 824.527683][ T9607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18099'. [ 824.643812][ T9607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18099'. [ 825.204402][ T9644] __nla_validate_parse: 4 callbacks suppressed [ 825.204418][ T9644] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18117'. [ 825.224554][ T9646] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.18118'. [ 825.390470][ T9658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18121'. [ 825.503229][ T9658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18121'. [ 825.527775][ T9654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18121'. [ 825.856635][ T9683] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18134'. [ 825.964600][ T9689] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.18138'. [ 826.030254][ T9695] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.18139'. [ 826.175830][ T9701] validate_nla: 1 callbacks suppressed [ 826.175849][ T9701] netlink: 'syz.4.18144': attribute type 10 has an invalid length. [ 826.222320][ T9699] netlink: 156 bytes leftover after parsing attributes in process `syz.2.18142'. [ 826.899894][ T9719] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.18152'. [ 826.945425][ T9723] netlink: 'syz.0.18156': attribute type 21 has an invalid length. [ 826.976275][ T9723] netlink: 'syz.0.18156': attribute type 6 has an invalid length. [ 829.392611][ T9831] netlink: 'syz.2.18206': attribute type 21 has an invalid length. [ 829.429509][ T9831] netlink: 'syz.2.18206': attribute type 6 has an invalid length. [ 829.971605][ T9855] netlink: 'syz.2.18217': attribute type 4 has an invalid length. [ 830.038709][ T9855] netlink: 'syz.2.18217': attribute type 1 has an invalid length. [ 830.625915][ T9899] netlink: 'syz.3.18238': attribute type 29 has an invalid length. [ 830.674215][ T9899] netlink: 'syz.3.18238': attribute type 29 has an invalid length. [ 830.707752][ T9907] netlink: 'syz.3.18238': attribute type 29 has an invalid length. [ 830.748675][ T9909] __nla_validate_parse: 12 callbacks suppressed [ 830.748703][ T9909] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.18243'. [ 831.217915][ T9943] netlink: 156 bytes leftover after parsing attributes in process `syz.0.18255'. [ 831.236745][ T9946] validate_nla: 2 callbacks suppressed [ 831.236761][ T9946] netlink: 'syz.3.18259': attribute type 4 has an invalid length. [ 831.301717][ T9946] netlink: 'syz.3.18259': attribute type 1 has an invalid length. [ 831.333301][ T9946] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.18259'. [ 831.477513][ T9958] netlink: 'syz.3.18266': attribute type 3 has an invalid length. [ 831.494531][ T9958] netlink: 'syz.3.18266': attribute type 1 has an invalid length. [ 831.518406][ T9958] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.18266'. [ 831.629906][ T9965] netlink: 'syz.1.18280': attribute type 3 has an invalid length. [ 831.640079][ T9965] netlink: 'syz.1.18280': attribute type 1 has an invalid length. [ 831.659078][ T9965] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.18280'. [ 831.879139][ T9977] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18273'. [ 831.890016][ T9977] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18273'. [ 831.926829][ T9977] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18273'. [ 832.003035][ T9985] netlink: 156 bytes leftover after parsing attributes in process `syz.3.18275'. [ 832.419066][T10010] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18291'. [ 832.483143][T10013] netlink: 'syz.4.18292': attribute type 3 has an invalid length. [ 832.527286][T10013] netlink: 'syz.4.18292': attribute type 1 has an invalid length. [ 833.200144][T10052] netlink: 'syz.4.18309': attribute type 2 has an invalid length. [ 833.592625][T10074] netlink: 'syz.0.18321': attribute type 2 has an invalid length. [ 835.919202][T10221] __nla_validate_parse: 11 callbacks suppressed [ 835.919223][T10221] netlink: 144 bytes leftover after parsing attributes in process `syz.2.18389'. [ 836.686465][T10276] validate_nla: 3 callbacks suppressed [ 836.686482][T10276] netlink: 'syz.3.18417': attribute type 29 has an invalid length. [ 836.731926][T10276] netlink: 'syz.3.18417': attribute type 29 has an invalid length. [ 836.765142][T10276] netlink: 'syz.3.18417': attribute type 29 has an invalid length. [ 837.251820][T10313] netlink: 'syz.2.18430': attribute type 3 has an invalid length. [ 837.266277][T10313] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.18430'. [ 838.791947][T10366] netlink: 164 bytes leftover after parsing attributes in process `syz.3.18470'. [ 838.818508][T10370] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18462'. [ 840.130673][T10401] netlink: 'syz.0.18487': attribute type 21 has an invalid length. [ 840.506486][T10424] netlink: 'syz.1.18486': attribute type 11 has an invalid length. [ 840.572593][T10424] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.18486'. [ 840.743136][T10438] netlink: 'syz.4.18493': attribute type 21 has an invalid length. [ 841.253737][T10461] netlink: 'syz.4.18507': attribute type 11 has an invalid length. [ 841.284924][T10461] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.18507'. [ 841.455800][T10470] netlink: 164 bytes leftover after parsing attributes in process `syz.2.18511'. [ 841.681797][T10479] netlink: 'syz.1.18515': attribute type 19 has an invalid length. [ 842.624081][T10504] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18527'. [ 842.940488][T10518] netlink: 140 bytes leftover after parsing attributes in process `syz.0.18534'. [ 843.277683][T10539] netlink: 'syz.0.18544': attribute type 46 has an invalid length. [ 843.458901][T10551] netlink: 'syz.2.18550': attribute type 10 has an invalid length. [ 843.467087][T10551] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.18550'. [ 844.324945][T10607] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18573'. [ 844.372186][T10610] netlink: 'syz.3.18589': attribute type 10 has an invalid length. [ 844.407534][T10610] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.18589'. [ 845.024036][T10648] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.18597'. [ 845.502107][T10675] netlink: 'syz.1.18610': attribute type 10 has an invalid length. [ 845.523772][T10675] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.18610'. [ 845.593398][T10678] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.18612'. [ 846.552285][T10733] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 846.653159][T10738] __nla_validate_parse: 3 callbacks suppressed [ 846.653192][T10738] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18639'. [ 848.716429][T10811] netlink: 'syz.1.18676': attribute type 11 has an invalid length. [ 848.795333][T10811] netlink: 140 bytes leftover after parsing attributes in process `syz.1.18676'. [ 849.522210][T10845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18694'. [ 849.750189][T10852] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18708'. [ 849.994903][T10865] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18713'. [ 850.172777][T10876] netlink: 'syz.0.18717': attribute type 2 has an invalid length. [ 850.224801][T10876] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18717'. [ 850.365972][T10888] netlink: set zone limit has 8 unknown bytes [ 850.945972][T10908] netlink: 'syz.3.18724': attribute type 2 has an invalid length. [ 850.954547][T10908] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18724'. [ 851.115092][T10912] netlink: set zone limit has 8 unknown bytes [ 851.642718][T10938] netlink: 'syz.3.18738': attribute type 12 has an invalid length. [ 851.667089][T10938] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.18738'. [ 851.927860][T10957] netlink: 'syz.2.18748': attribute type 9 has an invalid length. [ 851.935930][T10957] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.18748'. [ 851.959688][T10960] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 852.022391][T10962] netlink: 'syz.4.18751': attribute type 21 has an invalid length. [ 852.259091][T10980] netlink: 'syz.1.18760': attribute type 12 has an invalid length. [ 852.292556][T10980] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.18760'. [ 852.355167][T10987] netlink: 'syz.4.18764': attribute type 9 has an invalid length. [ 852.371887][T10987] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18764'. [ 852.395804][T10989] netlink: 'syz.2.18763': attribute type 21 has an invalid length. [ 852.676263][T11011] netlink: 'syz.0.18775': attribute type 12 has an invalid length. [ 852.735438][T11011] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.18775'. [ 854.206432][T11069] validate_nla: 1 callbacks suppressed [ 854.206450][T11069] netlink: 'syz.3.18801': attribute type 3 has an invalid length. [ 854.214458][T11072] netlink: 'syz.2.18803': attribute type 4 has an invalid length. [ 854.237360][T11069] netlink: 152988 bytes leftover after parsing attributes in process `syz.3.18801'. [ 854.281796][T11072] netlink: 'syz.2.18803': attribute type 8 has an invalid length. [ 854.298186][T11072] netlink: 197324 bytes leftover after parsing attributes in process `syz.2.18803'. [ 854.338574][T11078] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.18816'. [ 855.594792][T11120] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18825'. [ 855.639393][T11124] netlink: 'syz.0.18828': attribute type 4 has an invalid length. [ 855.666960][T11124] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.18828'. [ 856.631877][T11184] netlink: 'syz.1.18857': attribute type 4 has an invalid length. [ 856.707242][T11186] __nla_validate_parse: 2 callbacks suppressed [ 856.707264][T11186] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18858'. [ 857.206072][T11219] netlink: 'syz.3.18871': attribute type 4 has an invalid length. [ 857.217113][T11219] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.18871'. [ 857.276084][T11223] netlink: 'syz.1.18876': attribute type 21 has an invalid length. [ 857.284420][T11223] netlink: 128 bytes leftover after parsing attributes in process `syz.1.18876'. [ 857.294612][T11223] netlink: 'syz.1.18876': attribute type 4 has an invalid length. [ 857.303385][T11223] netlink: 'syz.1.18876': attribute type 5 has an invalid length. [ 857.332116][T11223] netlink: 3 bytes leftover after parsing attributes in process `syz.1.18876'. [ 857.516457][T11233] netlink: 'syz.4.18891': attribute type 21 has an invalid length. [ 857.566160][T11233] netlink: 128 bytes leftover after parsing attributes in process `syz.4.18891'. [ 857.598424][T11233] netlink: 3 bytes leftover after parsing attributes in process `syz.4.18891'. [ 857.913412][T11260] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.18889'. [ 858.117412][T11274] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.18899'. [ 858.179904][T11276] netlink: 128 bytes leftover after parsing attributes in process `syz.3.18900'. [ 858.232925][T11276] netlink: 3 bytes leftover after parsing attributes in process `syz.3.18900'. [ 860.165254][T11400] validate_nla: 6 callbacks suppressed [ 860.165271][T11400] netlink: 'syz.4.18963': attribute type 29 has an invalid length. [ 860.385954][T11411] netlink: 'syz.2.18967': attribute type 3 has an invalid length. [ 860.684156][T11432] netlink: 'syz.1.18979': attribute type 29 has an invalid length. [ 860.916883][T11446] netlink: 'syz.3.18984': attribute type 3 has an invalid length. [ 861.683896][T11486] netlink: 'syz.4.19004': attribute type 3 has an invalid length. [ 861.745712][T11486] __nla_validate_parse: 4 callbacks suppressed [ 861.745738][T11486] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.19004'. [ 861.941840][T11496] netlink: 144 bytes leftover after parsing attributes in process `syz.2.19008'. [ 862.475481][T11516] netlink: 'syz.3.19018': attribute type 3 has an invalid length. [ 862.498256][T11516] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.19018'. [ 862.602021][T11527] netlink: 'syz.1.19024': attribute type 3 has an invalid length. [ 862.641104][T11527] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19024'. [ 862.868009][T11542] netlink: 'syz.3.19030': attribute type 21 has an invalid length. [ 862.906175][T11542] netlink: 128 bytes leftover after parsing attributes in process `syz.3.19030'. [ 862.916010][T11542] netlink: 3 bytes leftover after parsing attributes in process `syz.3.19030'. [ 862.933733][T11547] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.19033'. [ 862.947880][T11545] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.19034'. [ 862.964911][T11547] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.19033'. [ 863.609562][T11585] netlink: 'syz.1.19051': attribute type 21 has an invalid length. [ 863.644092][T11585] netlink: 128 bytes leftover after parsing attributes in process `syz.1.19051'. [ 864.241306][T11624] netlink: 'syz.0.19069': attribute type 21 has an invalid length. [ 865.304633][T11690] validate_nla: 5 callbacks suppressed [ 865.304649][T11690] netlink: 'syz.4.19098': attribute type 1 has an invalid length. [ 865.375475][T11694] netlink: 'syz.3.19101': attribute type 3 has an invalid length. [ 865.950526][T11725] netlink: 'syz.1.19116': attribute type 3 has an invalid length. [ 866.041498][T11730] netlink: 'syz.0.19117': attribute type 1 has an invalid length. [ 868.703070][T11873] netlink: 'syz.1.19180': attribute type 4 has an invalid length. [ 868.796566][T11878] syz.3.19186[11878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.796668][T11878] syz.3.19186[11878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.839360][T11873] __nla_validate_parse: 13 callbacks suppressed [ 868.839378][T11873] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.19180'. [ 870.109141][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.115569][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.436958][T11924] netlink: 'syz.0.19209': attribute type 6 has an invalid length. [ 870.477497][T11924] netlink: 164 bytes leftover after parsing attributes in process `syz.0.19209'. [ 870.968612][T11946] netlink: 156 bytes leftover after parsing attributes in process `syz.4.19218'. [ 872.481077][T12000] netlink: 'syz.3.19253': attribute type 6 has an invalid length. [ 872.542431][T12000] netlink: 164 bytes leftover after parsing attributes in process `syz.3.19253'. [ 873.390364][T12028] netlink: 'syz.2.19257': attribute type 6 has an invalid length. [ 873.420854][T12028] netlink: 164 bytes leftover after parsing attributes in process `syz.2.19257'. [ 873.597244][T12033] netlink: 135856 bytes leftover after parsing attributes in process `syz.2.19259'. [ 873.646058][T12033] netlink: 8454 bytes leftover after parsing attributes in process `syz.2.19259'. [ 873.803735][T12036] netlink: 156 bytes leftover after parsing attributes in process `syz.2.19260'. [ 874.522316][T12056] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.19269'. [ 875.029225][T12079] netlink: 135856 bytes leftover after parsing attributes in process `syz.4.19278'. [ 875.114293][T12079] netlink: 8454 bytes leftover after parsing attributes in process `syz.4.19278'. [ 875.387826][T12099] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.19285'. [ 875.570422][T12108] netlink: 'syz.1.19287': attribute type 6 has an invalid length. [ 875.647406][T12108] netlink: 164 bytes leftover after parsing attributes in process `syz.1.19287'. [ 876.997730][T12127] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.19302'. [ 877.364575][T12144] netlink: 'syz.4.19306': attribute type 6 has an invalid length. [ 877.395793][T12144] netlink: 164 bytes leftover after parsing attributes in process `syz.4.19306'. [ 877.842562][T12172] netlink: 48 bytes leftover after parsing attributes in process `syz.2.19324'. [ 877.875092][T12172] netlink: 'syz.2.19324': attribute type 8 has an invalid length. [ 879.399730][T12220] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.19345'. [ 879.891822][T12253] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.19361'. [ 879.978334][T12245] delete_channel: no stack [ 880.194133][T12276] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.19373'. [ 880.229200][T12276] netlink: 8446 bytes leftover after parsing attributes in process `syz.3.19373'. [ 880.320069][T12284] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.19375'. [ 880.669743][T12289] delete_channel: no stack [ 880.791595][T12312] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.19390'. [ 880.832685][T12317] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.19394'. [ 880.886957][T12312] netlink: 8446 bytes leftover after parsing attributes in process `syz.2.19390'. [ 881.428176][T12354] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.19410'. [ 881.457426][T12340] delete_channel: no stack [ 881.477383][T12354] netlink: 8446 bytes leftover after parsing attributes in process `syz.1.19410'. [ 881.529117][T12360] netlink: 128 bytes leftover after parsing attributes in process `syz.3.19413'. [ 881.813873][T12375] netlink: 'syz.4.19422': attribute type 1 has an invalid length. [ 883.796444][T12465] netlink: 'syz.3.19462': attribute type 1 has an invalid length. [ 884.371837][T12498] netlink: 'syz.0.19480': attribute type 1 has an invalid length. [ 884.375929][T12500] netlink: 'syz.1.19481': attribute type 1 has an invalid length. [ 884.953110][T12533] __nla_validate_parse: 14 callbacks suppressed [ 884.953128][T12533] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.19497'. [ 885.060956][T12544] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.19502'. [ 885.092969][T12533] netlink: zone id is out of range [ 885.332594][T12552] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19505'. [ 885.891278][T12568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19513'. [ 886.020213][T12574] netlink: 'syz.0.19516': attribute type 1 has an invalid length. [ 886.494921][T12598] netlink: 'syz.1.19527': attribute type 21 has an invalid length. [ 886.505398][T12595] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.19528'. [ 886.560075][T12598] netlink: 'syz.1.19527': attribute type 1 has an invalid length. [ 886.577804][T12595] netlink: zone id is out of range [ 886.625164][T12598] netlink: 144 bytes leftover after parsing attributes in process `syz.1.19527'. [ 886.682379][T12603] netlink: 'syz.3.19529': attribute type 1 has an invalid length. [ 887.360275][T12630] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.19541'. [ 887.435044][T12630] netlink: zone id is out of range [ 887.684376][T12636] netlink: 'syz.4.19545': attribute type 21 has an invalid length. [ 887.723621][T12636] netlink: 'syz.4.19545': attribute type 1 has an invalid length. [ 887.774499][T12636] netlink: 144 bytes leftover after parsing attributes in process `syz.4.19545'. [ 887.979127][T12644] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19546'. [ 888.067966][T12653] netlink: 'syz.1.19552': attribute type 2 has an invalid length. [ 888.106696][T12653] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19552'. [ 888.340685][T12667] netlink: 'syz.2.19558': attribute type 21 has an invalid length. [ 888.373562][T12667] netlink: 'syz.2.19558': attribute type 1 has an invalid length. [ 888.408228][T12667] netlink: 'syz.2.19558': attribute type 2 has an invalid length. [ 888.504329][T12675] netlink: 'syz.3.19562': attribute type 21 has an invalid length. [ 888.539315][T12675] netlink: 'syz.3.19562': attribute type 1 has an invalid length. [ 889.081133][T12694] netlink: 'syz.3.19572': attribute type 3 has an invalid length. [ 889.320368][T12700] netlink: 'syz.3.19575': attribute type 21 has an invalid length. [ 890.015678][T12744] __nla_validate_parse: 7 callbacks suppressed [ 890.015732][T12744] netlink: 144 bytes leftover after parsing attributes in process `syz.2.19594'. [ 890.270334][T12753] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.19601'. [ 890.565019][T12761] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.19605'. [ 890.647072][T12761] veth0_to_bond: default FDB implementation only supports local addresses [ 890.751484][T12770] netlink: 152 bytes leftover after parsing attributes in process `syz.2.19608'. [ 891.022411][T12793] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.19615'. [ 891.049741][T12786] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.19615'. [ 891.263669][T12805] netlink: 144 bytes leftover after parsing attributes in process `syz.3.19626'. [ 891.373162][T12813] netlink: 144 bytes leftover after parsing attributes in process `syz.4.19630'. [ 891.758849][T12837] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.19638'. [ 891.780862][T12830] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.19638'. [ 893.305276][T12920] tap1: tun_chr_ioctl cmd 1074025677 [ 893.314408][T12920] tap1: linktype set to 0 [ 895.311691][T13000] tap0: tun_chr_ioctl cmd 1074025677 [ 895.362210][T13000] tap0: linktype set to 0 [ 896.444469][T13039] __nla_validate_parse: 7 callbacks suppressed [ 896.444489][T13039] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.19734'. [ 896.854319][T13058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 896.861609][T13058] IPv6: NLM_F_CREATE should be set when creating new route [ 896.868929][T13058] IPv6: NLM_F_CREATE should be set when creating new route [ 896.876215][T13058] IPv6: NLM_F_CREATE should be set when creating new route [ 897.006905][T13070] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.19748'. [ 897.096523][T13073] validate_nla: 14 callbacks suppressed [ 897.096542][T13073] netlink: 'syz.0.19750': attribute type 1 has an invalid length. [ 897.178638][T13073] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.19750'. [ 898.039597][T13096] tap0: tun_chr_ioctl cmd 1074025677 [ 898.087726][T13096] tap0: linktype set to 0 [ 899.023129][T13131] netlink: 'syz.2.19774': attribute type 1 has an invalid length. [ 899.128697][T13131] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.19774'. [ 900.035519][T13158] netlink: 'syz.1.19789': attribute type 1 has an invalid length. [ 900.044791][T13158] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.19789'. [ 901.432060][T13195] netlink: 'syz.3.19804': attribute type 1 has an invalid length. [ 901.459516][T13195] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.19804'. [ 902.266639][T13221] netlink: 'syz.2.19819': attribute type 2 has an invalid length. [ 902.350980][T13221] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19819'. [ 903.624596][T13259] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.19839'. [ 905.489897][T13259] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.19839'. [ 905.507246][T13276] netlink: 152 bytes leftover after parsing attributes in process `syz.3.19847'. [ 905.555930][T13276] tc_dump_action: action bad kind [ 905.599781][T13284] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.19850'. [ 905.709711][T13291] netlink: 'syz.0.19853': attribute type 4 has an invalid length. [ 905.791032][T13291] netlink: 'syz.0.19853': attribute type 1 has an invalid length. [ 905.817690][T13291] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.19853'. [ 906.149050][ T4188] cgroup: fork rejected by pids controller in /syz1 [ 906.213937][T13321] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.19869'. [ 906.225654][T13318] netlink: 152 bytes leftover after parsing attributes in process `syz.0.19867'. [ 906.238967][T13318] tc_dump_action: action bad kind [ 906.578075][T13333] netlink: 'syz.3.19874': attribute type 4 has an invalid length. [ 906.626021][T13333] netlink: 'syz.3.19874': attribute type 1 has an invalid length. [ 906.665358][T13333] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.19874'. [ 906.931063][ T4193] cgroup: fork rejected by pids controller in /syz4 [ 907.092453][T13354] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.19882'. [ 907.156031][T13357] netlink: 48 bytes leftover after parsing attributes in process `syz.2.19884'. [ 907.408490][T13339] chnl_net:caif_netlink_parms(): no params data found [ 907.965633][ T4182] cgroup: fork rejected by pids controller in /syz0 [ 908.172326][T13339] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.183064][T13339] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.194419][T13339] device bridge_slave_0 entered promiscuous mode [ 908.237792][T13339] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.244922][T13339] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.253313][T13339] device bridge_slave_1 entered promiscuous mode [ 908.279375][T13339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.295712][T13339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.334798][T13339] team0: Port device team_slave_0 added [ 908.345308][T13339] team0: Port device team_slave_1 added [ 908.403893][T13339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.411233][T13339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.437632][T13339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.468329][T13339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.480533][T13339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.508748][T13339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.622465][T13339] device hsr_slave_0 entered promiscuous mode [ 908.636207][T13339] device hsr_slave_1 entered promiscuous mode [ 908.907330][ T2440] Bluetooth: hci2: command 0x0409 tx timeout [ 908.919635][T13371] chnl_net:caif_netlink_parms(): no params data found [ 909.315581][T13371] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.362049][T13371] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.371526][T13371] device bridge_slave_0 entered promiscuous mode [ 909.381182][T13371] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.388696][T13371] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.397623][T13371] device bridge_slave_1 entered promiscuous mode [ 909.511373][T13371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.562585][T13371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.652685][T13371] team0: Port device team_slave_0 added [ 909.664791][T13371] team0: Port device team_slave_1 added [ 909.779249][T13371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.786389][T13371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.817409][ T6909] Bluetooth: hci3: command 0x0409 tx timeout [ 909.867273][T13371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.943537][T13371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.957203][T13371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.983737][T13371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.096982][T13371] device hsr_slave_0 entered promiscuous mode [ 910.114352][T13371] device hsr_slave_1 entered promiscuous mode [ 910.124196][T13371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 910.143748][T13371] Cannot create hsr debugfs directory [ 910.157730][T13389] chnl_net:caif_netlink_parms(): no params data found [ 910.184679][T13339] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 910.246199][T13339] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 910.283879][T13339] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 910.336282][T13339] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 910.529642][T13389] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.536744][T13389] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.568552][T13389] device bridge_slave_0 entered promiscuous mode [ 910.603068][T13389] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.610493][T13389] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.619318][T13389] device bridge_slave_1 entered promiscuous mode [ 910.702946][T13389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.738975][T13389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.788100][T13371] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.821471][T13389] team0: Port device team_slave_0 added [ 910.856324][T13371] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.897301][T13389] team0: Port device team_slave_1 added [ 910.930487][T13389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.945467][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.980675][T13389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.991681][ T6909] Bluetooth: hci2: command 0x041b tx timeout [ 911.008530][T13389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.015494][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.041860][T13389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.071095][T13339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.102121][T13371] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.160887][T13339] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.186291][T13371] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.204658][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 911.212728][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 911.224465][T13389] device hsr_slave_0 entered promiscuous mode [ 911.231784][T13389] device hsr_slave_1 entered promiscuous mode [ 911.238495][ T5324] Bluetooth: hci0: command 0x0409 tx timeout [ 911.246241][T13389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 911.253890][T13389] Cannot create hsr debugfs directory [ 911.262425][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 911.271485][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 911.280394][T13433] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.287517][T13433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.310056][ T4286] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.352305][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 911.363685][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 911.372791][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 911.381442][T13433] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.388977][T13433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.411039][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 911.450021][ T4286] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.479481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 911.495701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 911.504799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 911.513754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 911.523557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 911.539039][ T4286] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.557661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 911.568185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 911.576597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 911.589817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 911.598836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 911.619445][ T4286] bond0: (slave netdevsim0): Releasing backup interface [ 911.629520][ T4286] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.653252][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 911.867446][ T5322] Bluetooth: hci3: command 0x041b tx timeout [ 911.961316][T13371] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 911.978969][T13371] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 912.003194][T13371] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 912.020127][T13371] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 912.082973][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 912.092283][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 912.118149][T13339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.224876][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 912.238445][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 912.327172][T13339] device veth0_vlan entered promiscuous mode [ 912.347516][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 912.355917][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 912.365906][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 912.374588][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 912.389729][T13339] device veth1_vlan entered promiscuous mode [ 912.455973][T13371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.473441][T13339] device veth0_macvtap entered promiscuous mode [ 912.502659][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 912.512966][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 912.521606][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 912.530724][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 912.540786][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 912.552642][T13339] device veth1_macvtap entered promiscuous mode [ 912.586750][T13371] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.603812][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.614585][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.626172][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.636917][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.647038][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.658440][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.669010][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.679507][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.691118][T13339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.698975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 912.707417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 912.715226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 912.723563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 912.732511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 912.741222][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.748328][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.756305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 912.765693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 912.774788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 912.792673][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.803802][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.814047][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.824928][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.834932][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.845518][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.855371][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.865843][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.878342][T13339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 912.889665][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 912.900214][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 912.909411][T13428] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.916514][T13428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.927105][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 912.936198][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 912.961383][T13339] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.971314][T13339] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.995115][T13339] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.013289][T13339] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.037399][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 913.046639][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 913.066991][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 913.077681][ T6909] Bluetooth: hci2: command 0x040f tx timeout [ 913.088922][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 913.106933][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 913.116400][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 913.133919][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 913.186249][T13371] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 913.205368][T13371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 913.252206][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 913.269100][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 913.286285][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 913.295132][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 913.317425][ T6909] Bluetooth: hci0: command 0x041b tx timeout [ 913.358297][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 913.396617][T13389] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 913.422791][T13389] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 913.476115][T13339] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 913.486952][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.497382][T13339] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 913.507040][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.521958][T13389] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 913.539248][T13433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.549600][T13433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.551015][T13389] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 913.581463][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 913.591301][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 913.599320][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 913.634299][T13371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.660026][T13433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.681900][T13433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.728944][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 913.829413][T13389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.906404][T13389] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.921841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 913.932746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 913.962759][ T4186] Bluetooth: hci3: command 0x040f tx timeout [ 913.975650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 913.984971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 913.994633][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.001757][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.010943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 914.019921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 914.028583][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.035659][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.043749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 914.065856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 914.089141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 914.102073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 914.111729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 914.121578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 914.130426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 914.146150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 914.154619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 914.164592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 914.173883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 914.183158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 914.204591][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 914.213772][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 914.235905][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 914.246478][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 914.260299][T13389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 914.273274][T13389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 914.283211][T13371] device veth0_vlan entered promiscuous mode [ 914.295241][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 914.304119][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 914.326410][T13371] device veth1_vlan entered promiscuous mode [ 914.383235][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 914.400811][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 914.410123][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 914.419681][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 914.438851][T13371] device veth0_macvtap entered promiscuous mode [ 914.459990][T13371] device veth1_macvtap entered promiscuous mode [ 914.522775][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.533563][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.543812][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.554593][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.564718][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.575605][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.585816][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.596676][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.606662][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.617334][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.628603][T13371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.646144][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.659901][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.671212][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.683277][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.693159][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.703726][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.713976][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.724811][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.735043][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.745778][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.758546][T13371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 914.766383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 914.774633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 914.783525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 914.792638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 914.801862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 914.811309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 914.824196][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 914.832368][T13428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 914.852411][T13389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.866614][T13371] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.875906][T13371] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.885162][T13371] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.894885][T13371] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.973220][T13371] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 914.984105][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.995220][T13371] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 915.006524][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.024901][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 915.038461][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 915.076560][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.086021][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.101766][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 915.114237][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 915.123481][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 915.133341][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 915.141754][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 915.149371][ T6909] Bluetooth: hci2: command 0x0419 tx timeout [ 915.174524][T13389] device veth0_vlan entered promiscuous mode [ 915.193411][T13433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.203277][T13433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.207031][T13389] device veth1_vlan entered promiscuous mode [ 915.219597][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 915.266922][T13389] device veth0_macvtap entered promiscuous mode [ 915.282774][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 915.294039][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 915.331624][T13467] netlink: 'syz.4.19889': attribute type 4 has an invalid length. [ 915.340085][T13467] netlink: 'syz.4.19889': attribute type 1 has an invalid length. [ 915.344815][T13389] device veth1_macvtap entered promiscuous mode [ 915.356270][T13467] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.19889'. [ 915.369263][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 915.378329][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 915.396082][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.407401][ T5324] Bluetooth: hci0: command 0x040f tx timeout [ 915.414661][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.424752][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.435792][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.446031][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.456781][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.466747][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.478823][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.489375][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.499845][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.509868][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.520372][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.532084][T13389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.565521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 915.607746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 915.649861][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.676712][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.696031][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.707007][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.728833][T13476] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.19896'. [ 915.761126][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.773709][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.795065][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.805988][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.816147][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.826926][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.836898][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.847607][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.861729][T13389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.918569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 915.928481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 915.953315][T13389] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.963381][T13389] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.972849][T13389] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.982084][T13389] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.050413][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 916.214484][T13389] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 916.232083][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.292191][T13389] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 916.319159][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.442933][T13433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.468059][T13433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.506883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 916.545514][T13428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.563364][T13428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.581124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 916.650111][T13506] netlink: 'syz.1.19913': attribute type 29 has an invalid length. [ 916.698929][T13506] netlink: 'syz.1.19913': attribute type 29 has an invalid length. [ 916.873124][T13507] netlink: 'syz.1.19913': attribute type 29 has an invalid length. [ 916.888543][T13512] netlink: 'syz.1.19913': attribute type 29 has an invalid length. [ 917.296484][T13540] netlink: 'syz.0.19929': attribute type 3 has an invalid length. [ 917.309845][T13540] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19929'. [ 917.468299][ T5324] Bluetooth: hci0: command 0x0419 tx timeout [ 917.699248][T13557] netlink: 'syz.1.19933': attribute type 4 has an invalid length. [ 917.717561][T13557] netlink: 'syz.1.19933': attribute type 1 has an invalid length. [ 917.738716][T13557] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.19933'. [ 918.550937][T13573] netlink: 'syz.4.19940': attribute type 3 has an invalid length. [ 918.597471][T13573] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19940'. [ 919.490081][T13607] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19955'. [ 920.205177][T13647] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19976'. [ 920.570879][T13670] validate_nla: 10 callbacks suppressed [ 920.570897][T13670] netlink: 'syz.0.19986': attribute type 29 has an invalid length. [ 920.604172][T13670] netlink: 'syz.0.19986': attribute type 29 has an invalid length. [ 920.666077][T13670] netlink: 'syz.0.19986': attribute type 29 has an invalid length. [ 920.739280][T13670] netlink: 'syz.0.19986': attribute type 29 has an invalid length. [ 921.065420][T13693] netlink: 'syz.3.19992': attribute type 3 has an invalid length. [ 921.147105][T13693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19992'. [ 921.327838][ T4286] batman_adv: batadv0: Interface deactivated: wlan0 [ 921.374704][ T4286] batman_adv: batadv0: Removing interface: wlan0 [ 921.618600][ T4286] device hsr_slave_1 left promiscuous mode [ 921.639191][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 921.646694][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.727301][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 921.749271][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.783510][ T4286] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 921.809750][ T4286] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 921.840850][ T4286] device bridge_slave_1 left promiscuous mode [ 921.865139][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.898728][ T4286] device bridge_slave_0 left promiscuous mode [ 921.913882][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.943713][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 921.961898][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.978095][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 921.986372][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.003349][ T4286] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 922.015512][ T4286] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 922.060345][ T4286] device hsr_slave_1 left promiscuous mode [ 922.068451][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.075952][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.084309][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.091930][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.100058][ T4286] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 922.109873][ T4286] device bridge_slave_1 left promiscuous mode [ 922.116124][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.125652][ T4286] device bridge_slave_0 left promiscuous mode [ 922.132390][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.153190][ T4286] device veth1_vlan left promiscuous mode [ 922.159799][ T4286] device veth0_vlan left promiscuous mode [ 922.166454][ T4286] device veth1_vlan left promiscuous mode [ 922.172899][ T4286] device veth0_vlan left promiscuous mode [ 922.448465][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.472068][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.526173][ T4286] bond0 (unregistering): Released all slaves [ 922.590327][ T4286] team0 (unregistering): Port device geneve1 removed [ 922.622921][ T4286] team0 (unregistering): Port device vlan0 removed [ 922.671857][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 922.694515][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.712375][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.773984][ T4286] bond0 (unregistering): Released all slaves [ 922.910005][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.926481][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.982777][ T4286] bond0 (unregistering): Released all slaves [ 923.188689][T13738] netlink: 'syz.2.20013': attribute type 3 has an invalid length. [ 923.218363][T13738] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20013'. [ 926.791633][T13807] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20045'. [ 926.864939][T13810] netlink: 'syz.2.20046': attribute type 11 has an invalid length. [ 927.177930][T13820] tap0: tun_chr_ioctl cmd 1074025677 [ 927.192886][T13820] tap0: linktype set to 270 [ 927.791366][T13855] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.20069'. [ 927.837759][T13855] netlink: 'syz.3.20069': attribute type 1 has an invalid length. [ 928.330038][T13889] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.20085'. [ 928.383596][T13889] netlink: 'syz.4.20085': attribute type 1 has an invalid length. [ 929.802221][T13966] netlink: 152 bytes leftover after parsing attributes in process `syz.4.20118'. [ 929.841573][T13967] netlink: 'syz.3.20116': attribute type 11 has an invalid length. [ 930.192313][T13980] tap0: tun_chr_ioctl cmd 1074025677 [ 930.222505][T13980] tap0: linktype set to 270 [ 930.654911][T14000] netlink: 'syz.0.20133': attribute type 11 has an invalid length. [ 931.549233][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.555567][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.144790][T14073] netlink: 64 bytes leftover after parsing attributes in process `syz.3.20169'. [ 932.804613][T14101] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20191'. [ 932.844380][T14101] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20191'. [ 932.884331][T14104] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20191'. [ 932.942446][T14101] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20191'. [ 933.075451][T14113] netlink: 64 bytes leftover after parsing attributes in process `syz.2.20185'. [ 933.103061][T14117] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.20187'. [ 933.381764][T14132] tap0: tun_chr_ioctl cmd 2147767511 [ 933.620655][T14145] netlink: 64 bytes leftover after parsing attributes in process `syz.0.20201'. [ 933.874786][T14162] tap0: tun_chr_ioctl cmd 2147767511 [ 934.146655][T14175] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20216'. [ 934.176602][T14175] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20216'. [ 934.676500][T14198] tap1: tun_chr_ioctl cmd 2147767511 [ 935.144718][T14211] netlink: zone id is out of range [ 935.165164][T14211] netlink: zone id is out of range [ 935.186491][T14211] netlink: zone id is out of range [ 935.213151][T14211] netlink: zone id is out of range [ 935.233909][T14211] netlink: zone id is out of range [ 935.246150][T14211] netlink: zone id is out of range [ 935.274505][T14211] netlink: zone id is out of range [ 935.303105][T14211] netlink: zone id is out of range [ 935.342077][T14211] netlink: zone id is out of range [ 935.350430][T14211] netlink: zone id is out of range [ 935.634727][T14226] netlink: 'syz.0.20240': attribute type 11 has an invalid length. [ 938.531757][T14371] __nla_validate_parse: 8 callbacks suppressed [ 938.531778][T14371] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.20302'. [ 938.756252][T14373] can: request_module (can-proto-0) failed. [ 938.950868][T14390] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.20310'. [ 939.005909][T14392] netlink: 'syz.2.20311': attribute type 3 has an invalid length. [ 939.037634][T14392] netlink: 'syz.2.20311': attribute type 1 has an invalid length. [ 939.049997][T14394] tap0: tun_chr_ioctl cmd 2147767506 [ 939.769288][T14427] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.20326'. [ 939.789173][T14430] netlink: 'syz.4.20328': attribute type 3 has an invalid length. [ 939.808218][T14430] netlink: 'syz.4.20328': attribute type 1 has an invalid length. [ 939.991923][T14436] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.20331'. [ 940.183246][T14442] netlink: 'syz.4.20336': attribute type 4 has an invalid length. [ 940.194999][T14442] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.20336'. [ 940.544962][T14447] can: request_module (can-proto-0) failed. [ 940.718354][T14461] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.20342'. [ 940.738541][T14460] netlink: 'syz.0.20343': attribute type 3 has an invalid length. [ 940.769784][T14460] netlink: 'syz.0.20343': attribute type 1 has an invalid length. [ 940.852789][T14463] netlink: 'syz.4.20344': attribute type 27 has an invalid length. [ 940.867675][T14463] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.20344'. [ 940.933735][T14467] tap0: tun_chr_ioctl cmd 2147767506 [ 941.393842][T14496] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.20360'. [ 941.983879][T14508] netlink: 'syz.0.20366': attribute type 27 has an invalid length. [ 942.075711][T14508] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.20366'. [ 943.019858][T14544] syz.2.20383[14544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 943.020004][T14544] syz.2.20383[14544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 943.102071][T14551] netlink: 44 bytes leftover after parsing attributes in process `syz.0.20386'. [ 943.596441][T14576] syz.1.20398[14576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 943.596682][T14576] syz.1.20398[14576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 943.903556][T14589] __nla_validate_parse: 1 callbacks suppressed [ 943.903575][T14589] netlink: 44 bytes leftover after parsing attributes in process `syz.4.20403'. [ 945.529681][T14614] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.20416'. [ 945.763902][T14635] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.20425'. [ 945.795081][T14637] tap0: tun_chr_ioctl cmd 2147767521 [ 945.993567][T13428] tipc: Subscription rejected, illegal request [ 946.206829][T14663] tap0: tun_chr_ioctl cmd 2147767520 [ 947.102306][T14697] [ 947.104703][T14697] ====================================================== [ 947.111751][T14697] WARNING: possible circular locking dependency detected [ 947.118820][T14697] syzkaller #0 Not tainted [ 947.123264][T14697] ------------------------------------------------------ [ 947.130289][T14697] syz.3.20453/14697 is trying to acquire lock: [ 947.136434][T14697] ffff888061051a38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 947.145314][T14697] [ 947.145314][T14697] but task is already holding lock: [ 947.152671][T14697] ffff8880b903a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 947.162152][T14697] [ 947.162152][T14697] which lock already depends on the new lock. [ 947.162152][T14697] [ 947.172541][T14697] [ 947.172541][T14697] the existing dependency chain (in reverse order) is: [ 947.181542][T14697] [ 947.181542][T14697] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 947.188834][T14697] _raw_spin_lock_nested+0x2e/0x40 [ 947.194466][T14697] raw_spin_rq_lock_nested+0x26/0x140 [ 947.200371][T14697] task_fork_fair+0x5c/0x350 [ 947.205480][T14697] sched_cgroup_fork+0x2c6/0x320 [ 947.210942][T14697] copy_process+0x22d1/0x3e00 [ 947.216140][T14697] kernel_clone+0x219/0x930 [ 947.221179][T14697] kernel_thread+0xc8/0x120 [ 947.226204][T14697] rest_init+0x21/0x330 [ 947.230885][T14697] start_kernel+0x486/0x530 [ 947.235905][T14697] secondary_startup_64_no_verify+0xb1/0xbb [ 947.242315][T14697] [ 947.242315][T14697] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 947.249635][T14697] _raw_spin_lock_irqsave+0xa4/0xf0 [ 947.255359][T14697] try_to_wake_up+0x5c/0x1050 [ 947.260554][T14697] __wake_up_common+0x2a4/0x4e0 [ 947.265926][T14697] __wake_up+0x108/0x180 [ 947.271220][T14697] tty_port_default_wakeup+0xa5/0xf0 [ 947.277070][T14697] serial8250_tx_chars+0x629/0x830 [ 947.282799][T14697] serial8250_handle_irq+0x519/0x610 [ 947.288628][T14697] serial8250_default_handle_irq+0xb4/0x1a0 [ 947.295050][T14697] serial8250_interrupt+0x9b/0x1c0 [ 947.300706][T14697] __handle_irq_event_percpu+0x291/0x9b0 [ 947.306894][T14697] handle_irq_event+0xa5/0x220 [ 947.312178][T14697] handle_edge_irq+0x243/0xb20 [ 947.317460][T14697] __common_interrupt+0xd7/0x1e0 [ 947.322933][T14697] common_interrupt+0xb0/0xd0 [ 947.328124][T14697] asm_common_interrupt+0x22/0x40 [ 947.333666][T14697] lock_is_held_type+0x13a/0x190 [ 947.339210][T14697] xas_reload+0xf9/0x470 [ 947.343965][T14697] next_uptodate_page+0x2a5/0x8b0 [ 947.349511][T14697] filemap_map_pages+0xebd/0x1390 [ 947.355063][T14697] handle_mm_fault+0x257d/0x43b0 [ 947.360660][T14697] do_user_addr_fault+0x489/0xc80 [ 947.366219][T14697] exc_page_fault+0x60/0x100 [ 947.371328][T14697] asm_exc_page_fault+0x22/0x30 [ 947.376704][T14697] [ 947.376704][T14697] -> #3 (&tty->write_wait){-...}-{2:2}: [ 947.384437][T14697] _raw_spin_lock_irqsave+0xa4/0xf0 [ 947.390175][T14697] __wake_up+0xed/0x180 [ 947.394868][T14697] tty_port_default_wakeup+0xa5/0xf0 [ 947.400687][T14697] serial8250_tx_chars+0x629/0x830 [ 947.406317][T14697] serial8250_handle_irq+0x519/0x610 [ 947.412157][T14697] serial8250_default_handle_irq+0xb4/0x1a0 [ 947.418571][T14697] serial8250_interrupt+0x9b/0x1c0 [ 947.424198][T14697] __handle_irq_event_percpu+0x291/0x9b0 [ 947.430350][T14697] handle_irq_event+0xa5/0x220 [ 947.435647][T14697] handle_edge_irq+0x243/0xb20 [ 947.440927][T14697] __common_interrupt+0xd7/0x1e0 [ 947.446381][T14697] common_interrupt+0xb0/0xd0 [ 947.451572][T14697] asm_common_interrupt+0x22/0x40 [ 947.457110][T14697] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 947.463367][T14697] uart_write+0x62f/0x880 [ 947.468319][T14697] n_tty_write+0xd21/0x1210 [ 947.473335][T14697] file_tty_write+0x557/0x910 [ 947.478535][T14697] vfs_write+0x712/0xd00 [ 947.483431][T14697] ksys_write+0x14d/0x250 [ 947.488291][T14697] do_syscall_64+0x4c/0xa0 [ 947.493224][T14697] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 947.499643][T14697] [ 947.499643][T14697] -> #2 (&port_lock_key){-...}-{2:2}: [ 947.507194][T14697] _raw_spin_lock_irqsave+0xa4/0xf0 [ 947.512909][T14697] serial8250_console_write+0x170/0xf80 [ 947.518973][T14697] console_unlock+0xc86/0x1200 [ 947.524247][T14697] vprintk_emit+0xc0/0x150 [ 947.529177][T14697] _printk+0xcc/0x110 [ 947.533672][T14697] register_console+0x682/0x960 [ 947.539032][T14697] univ8250_console_init+0x41/0x50 [ 947.544659][T14697] console_init+0x177/0x5d0 [ 947.549679][T14697] start_kernel+0x2f9/0x530 [ 947.554693][T14697] secondary_startup_64_no_verify+0xb1/0xbb [ 947.561099][T14697] [ 947.561099][T14697] -> #1 (console_owner){-...}-{0:0}: [ 947.568765][T14697] console_lock_spinning_enable+0x51/0x60 [ 947.575050][T14697] console_unlock+0x9f8/0x1200 [ 947.580341][T14697] vprintk_emit+0xc0/0x150 [ 947.585385][T14697] _printk+0xcc/0x110 [ 947.589887][T14697] debug_objects_oom+0x89/0x2f0 [ 947.595255][T14697] debug_object_activate+0x409/0x480 [ 947.601061][T14697] kvfree_call_rcu+0xb5/0x7c0 [ 947.606254][T14697] trie_update_elem+0x86e/0xc50 [ 947.611632][T14697] bpf_map_update_value+0x57d/0x650 [ 947.617368][T14697] generic_map_update_batch+0x525/0x7c0 [ 947.623443][T14697] bpf_map_do_batch+0x466/0x600 [ 947.628829][T14697] __sys_bpf+0x601/0x670 [ 947.633596][T14697] __x64_sys_bpf+0x78/0x90 [ 947.638532][T14697] do_syscall_64+0x4c/0xa0 [ 947.643467][T14697] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 947.649880][T14697] [ 947.649880][T14697] -> #0 (&trie->lock){....}-{2:2}: [ 947.657173][T14697] __lock_acquire+0x2c33/0x7c60 [ 947.662538][T14697] lock_acquire+0x197/0x3f0 [ 947.667556][T14697] _raw_spin_lock_irqsave+0xa4/0xf0 [ 947.673266][T14697] trie_delete_elem+0x90/0x710 [ 947.678554][T14697] bpf_prog_8f815ec174217266+0x51/0x35c [ 947.684609][T14697] bpf_trace_run2+0x15b/0x2d0 [ 947.689801][T14697] trace_tlb_flush+0xe6/0x110 [ 947.695012][T14697] switch_mm_irqs_off+0x6e3/0x9a0 [ 947.700547][T14697] __schedule+0x1024/0x4390 [ 947.705576][T14697] schedule+0x11b/0x1e0 [ 947.710243][T14697] exit_to_user_mode_loop+0x47/0x130 [ 947.716046][T14697] exit_to_user_mode_prepare+0xee/0x180 [ 947.722104][T14697] irqentry_exit_to_user_mode+0x5/0x30 [ 947.728091][T14697] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 947.734587][T14697] [ 947.734587][T14697] other info that might help us debug this: [ 947.734587][T14697] [ 947.744804][T14697] Chain exists of: [ 947.744804][T14697] &trie->lock --> &p->pi_lock --> &rq->__lock [ 947.744804][T14697] [ 947.756786][T14697] Possible unsafe locking scenario: [ 947.756786][T14697] [ 947.764225][T14697] CPU0 CPU1 [ 947.769577][T14697] ---- ---- [ 947.774927][T14697] lock(&rq->__lock); [ 947.779006][T14697] lock(&p->pi_lock); [ 947.785584][T14697] lock(&rq->__lock); [ 947.792159][T14697] lock(&trie->lock); [ 947.796233][T14697] [ 947.796233][T14697] *** DEADLOCK *** [ 947.796233][T14697] [ 947.804365][T14697] 2 locks held by syz.3.20453/14697: [ 947.809635][T14697] #0: ffff8880b903a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 947.819539][T14697] #1: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 947.828838][T14697] [ 947.828838][T14697] stack backtrace: [ 947.834715][T14697] CPU: 0 PID: 14697 Comm: syz.3.20453 Not tainted syzkaller #0 [ 947.842250][T14697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 947.852306][T14697] Call Trace: [ 947.855576][T14697] [ 947.858506][T14697] dump_stack_lvl+0x168/0x230 [ 947.863178][T14697] ? load_image+0x3b0/0x3b0 [ 947.867675][T14697] ? show_regs_print_info+0x20/0x20 [ 947.872870][T14697] ? print_circular_bug+0x12b/0x1a0 [ 947.878061][T14697] check_noncircular+0x274/0x310 [ 947.882991][T14697] ? add_chain_block+0x940/0x940 [ 947.887916][T14697] ? lockdep_lock+0xdc/0x1e0 [ 947.892501][T14697] ? mark_lock+0x94/0x320 [ 947.896820][T14697] ? _find_first_zero_bit+0xce/0xf0 [ 947.902011][T14697] __lock_acquire+0x2c33/0x7c60 [ 947.906872][T14697] ? __lock_acquire+0x12d9/0x7c60 [ 947.911888][T14697] ? verify_lock_unused+0x140/0x140 [ 947.917137][T14697] lock_acquire+0x197/0x3f0 [ 947.921632][T14697] ? trie_delete_elem+0x90/0x710 [ 947.926567][T14697] ? read_lock_is_recursive+0x10/0x10 [ 947.931938][T14697] _raw_spin_lock_irqsave+0xa4/0xf0 [ 947.937128][T14697] ? trie_delete_elem+0x90/0x710 [ 947.942059][T14697] ? _raw_spin_lock+0x40/0x40 [ 947.946746][T14697] trie_delete_elem+0x90/0x710 [ 947.951589][T14697] ? __lock_acquire+0x7c60/0x7c60 [ 947.956606][T14697] bpf_prog_8f815ec174217266+0x51/0x35c [ 947.962141][T14697] bpf_trace_run2+0x15b/0x2d0 [ 947.966813][T14697] ? bpf_trace_run1+0x2d0/0x2d0 [ 947.971657][T14697] ? __perf_event_task_sched_out+0xa6a/0xdb0 [ 947.977627][T14697] trace_tlb_flush+0xe6/0x110 [ 947.982293][T14697] switch_mm_irqs_off+0x6e3/0x9a0 [ 947.987311][T14697] ? switch_mm+0x120/0x120 [ 947.991720][T14697] ? psi_task_switch+0x495/0x810 [ 947.996659][T14697] __schedule+0x1024/0x4390 [ 948.001156][T14697] ? do_raw_spin_unlock+0x11d/0x230 [ 948.006367][T14697] ? release_firmware_map_entry+0x190/0x190 [ 948.012350][T14697] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 948.018330][T14697] ? lock_chain_count+0x20/0x20 [ 948.023183][T14697] ? __irq_exit_rcu+0x13b/0x220 [ 948.028025][T14697] schedule+0x11b/0x1e0 [ 948.032187][T14697] exit_to_user_mode_loop+0x47/0x130 [ 948.037465][T14697] exit_to_user_mode_prepare+0xee/0x180 [ 948.043014][T14697] irqentry_exit_to_user_mode+0x5/0x30 [ 948.048471][T14697] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 948.054449][T14697] RIP: 0033:0x7f3694d18334 [ 948.058857][T14697] Code: Unable to access opcode bytes at RIP 0x7f3694d1830a. [ 948.066221][T14697] RSP: 002b:00007ffebc407920 EFLAGS: 00000283 [ 948.072280][T14697] RAX: 00007f36948b41a0 RBX: 00007f36948b3e60 RCX: ffffffff81ce668e [ 948.080246][T14697] RDX: ffffffff81abd91c RSI: ffffffff81abd79f RDI: 00007f36948b4218 [ 948.088224][T14697] RBP: 00007f36948b3e08 R08: 00007f36948b4008 R09: 00007f3695082000 [ 948.096186][T14697] R10: 00007f36948af008 R11: 0000000000000003 R12: 00007f36948b3e00 [ 948.104152][T14697] R13: 0000000000000011 R14: 00007ffebc407a78 R15: 00007f36948af008 [ 948.112121][T14697] ? rcu_lock_acquire+0xe/0x30 [ 948.116879][T14697] ? walk_to_pmd+0x19c/0x240 [ 948.121458][T14697] ? walk_to_pmd+0x1f/0x240 [ 948.125953][T14697]