last executing test programs: 2.131901472s ago: executing program 1 (id=16917): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}, 0x20008000) 1.979523679s ago: executing program 1 (id=16921): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x200, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 1.673474971s ago: executing program 1 (id=16932): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xd) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053"], 0xfe33) 1.424271442s ago: executing program 4 (id=16933): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141686189f034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 1.423108442s ago: executing program 1 (id=16934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$TUNSETVNETHDRSZ(r0, 0x800454e0, &(0x7f0000000480)=0x70dfd79b) 1.423006852s ago: executing program 3 (id=16935): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.345656075s ago: executing program 2 (id=16936): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055) 1.342797925s ago: executing program 3 (id=16937): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @short={0x2, 0x0, 0x1555d}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000180)="27031c00160014000200", 0xa}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b3", 0x1c}, {&(0x7f00000001c0)="d3892a1dd62a92884ea7897528236c", 0xf}], 0x3}, 0x24000008) 1.203957141s ago: executing program 2 (id=16938): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) 1.203288291s ago: executing program 0 (id=16950): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f00000006c0)=""/177, 0xb1}], 0x5}, 0x120) 1.198811801s ago: executing program 3 (id=16951): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.198219861s ago: executing program 4 (id=16952): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055) 1.173326732s ago: executing program 1 (id=16939): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x17}, 0x48) 1.125733654s ago: executing program 0 (id=16940): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0x2000000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, &(0x7f0000000000), 0x84) 999.530689ms ago: executing program 0 (id=16941): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x80044944, 0x0) 938.982382ms ago: executing program 3 (id=16942): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000069006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 877.758704ms ago: executing program 0 (id=16945): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 877.054114ms ago: executing program 4 (id=16946): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90a24fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 218.728802ms ago: executing program 1 (id=16947): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c000000, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x7ff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 216.448472ms ago: executing program 2 (id=16948): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2c, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x1b, &(0x7f0000000800), 0x4) 206.119922ms ago: executing program 3 (id=16949): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) 197.676812ms ago: executing program 4 (id=16953): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="950000000000ff"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0xc}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0xc) 189.197913ms ago: executing program 0 (id=16960): perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xfffffffffffffeff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 174.352433ms ago: executing program 2 (id=16954): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006babda3fe3d86e17aa0a046b5a6c1d0048007ea60864160af36504001a003800317c39aa50c82c2b76111d001931a0e69ee517d34460bca705251e6182949a3651f60a84c9f4218e13fbb277ff2fd31be8d0c2db330b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)=""/213, 0xd5}, {&(0x7f0000000ec0)=""/243, 0xf3}, {&(0x7f0000002140)=""/4058, 0xfda}, {&(0x7f0000000c00)=""/248, 0xf8}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000e40)=""/21, 0x15}, {&(0x7f0000000fc0)=""/195, 0xc3}, {&(0x7f0000000500)=""/155, 0x9b}, {&(0x7f0000000880)=""/64, 0x40}, {&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000001140)=""/71, 0x47}, {&(0x7f00000015c0)=""/245, 0xf5}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f00000014c0)=""/242, 0xf2}], 0x10}, 0x0) 129.621705ms ago: executing program 4 (id=16955): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000), 0x8) sendmsg$inet(r0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000100)='jx\"E', 0x4}], 0x1}, 0x40041) 88.556447ms ago: executing program 2 (id=16956): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0x2000000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, &(0x7f0000000000), 0x84) 88.027057ms ago: executing program 3 (id=16957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x3d, 0x0, 0x1, 0x20}, {0x4d}, {0x6, 0x0, 0xfe}]}) 79.746467ms ago: executing program 0 (id=16958): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 37.614029ms ago: executing program 2 (id=16959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 0s ago: executing program 4 (id=16961): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000040), 0x3b) kernel console output (not intermixed with test programs): ith an inconsistent configuration, please check. [ 394.929959][T21084] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8160'. [ 395.394899][T21119] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8178'. [ 395.473033][T21121] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.8190'. [ 395.631875][T21131] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.8184'. [ 397.243777][T21203] validate_nla: 7 callbacks suppressed [ 397.243793][T21203] netlink: 'syz.3.8219': attribute type 2 has an invalid length. [ 397.303630][T21203] netlink: 'syz.3.8219': attribute type 8 has an invalid length. [ 397.311812][T21203] __nla_validate_parse: 3 callbacks suppressed [ 397.311827][T21203] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8219'. [ 397.349523][T21205] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8220'. [ 397.396381][T21215] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.8226'. [ 397.841951][T21243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8238'. [ 397.951206][T21252] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8251'. [ 398.288972][T21281] netlink: 'syz.2.8257': attribute type 21 has an invalid length. [ 398.408406][T21290] netlink: 'syz.1.8260': attribute type 21 has an invalid length. [ 398.416603][T21290] IPv6: NLM_F_CREATE should be specified when creating new route [ 398.474444][T21293] netlink: 'syz.3.8263': attribute type 4 has an invalid length. [ 398.500162][T21293] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8263'. [ 398.898681][T21318] netlink: 'syz.0.8270': attribute type 21 has an invalid length. [ 398.909919][T21317] netlink: 'syz.1.8282': attribute type 272 has an invalid length. [ 398.950246][T21317] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8282'. [ 399.114112][T21327] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8276'. [ 399.232333][T21334] netlink: 'syz.0.8291': attribute type 1 has an invalid length. [ 399.280278][T21334] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.8291'. [ 399.349440][T21338] netlink: 'syz.1.8281': attribute type 19 has an invalid length. [ 399.643367][T21352] netlink: 'syz.0.8288': attribute type 21 has an invalid length. [ 399.679110][T21352] IPv6: NLM_F_CREATE should be specified when creating new route [ 399.694205][T21356] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8290'. [ 400.162365][T21389] IPv6: NLM_F_CREATE should be specified when creating new route [ 400.493036][T21412] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 402.271487][T21508] validate_nla: 10 callbacks suppressed [ 402.271505][T21508] netlink: 'syz.4.8369': attribute type 41 has an invalid length. [ 402.327892][T21508] netlink: 'syz.4.8369': attribute type 4 has an invalid length. [ 402.352649][T21508] __nla_validate_parse: 6 callbacks suppressed [ 402.352668][T21508] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8369'. [ 402.402525][T21508] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 403.035386][T21517] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8373'. [ 403.463641][T21550] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8389'. [ 403.665872][T21566] netlink: 'syz.2.8398': attribute type 10 has an invalid length. [ 404.931286][T21624] netlink: 'syz.4.8426': attribute type 10 has an invalid length. [ 406.747682][T21668] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.8456'. [ 408.212263][T21714] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.8472'. [ 408.344482][T21718] netlink: 'syz.0.8474': attribute type 5 has an invalid length. [ 408.375119][T21718] netlink: 'syz.0.8474': attribute type 15 has an invalid length. [ 408.630801][T21738] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8484'. [ 408.794236][T21746] netlink: 'syz.0.8488': attribute type 7 has an invalid length. [ 408.930951][T21753] netlink: 'syz.3.8490': attribute type 5 has an invalid length. [ 408.967291][T21753] netlink: 'syz.3.8490': attribute type 15 has an invalid length. [ 409.133332][T21765] netlink: 'syz.1.8507': attribute type 5 has an invalid length. [ 409.180899][T21765] netlink: 'syz.1.8507': attribute type 15 has an invalid length. [ 409.196017][T21770] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8499'. [ 409.492884][T21788] netlink: 'syz.2.8509': attribute type 1 has an invalid length. [ 409.526238][T21788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8509'. [ 409.651272][T21792] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8512'. [ 409.855613][T21806] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8517'. [ 409.900194][T21811] netlink: 'syz.3.8518': attribute type 29 has an invalid length. [ 409.955382][T21811] netlink: 'syz.3.8518': attribute type 29 has an invalid length. [ 410.696491][T21868] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8548'. [ 411.393862][T21897] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8562'. [ 411.662911][T21905] hsr0: VLAN not yet supported [ 412.249041][T21945] raw_sendmsg: syz.0.8587 forgot to set AF_INET. Fix it! [ 413.397322][T22033] validate_nla: 8 callbacks suppressed [ 413.397338][T22033] netlink: 'syz.4.8629': attribute type 21 has an invalid length. [ 413.805737][T22063] netlink: 'syz.3.8644': attribute type 6 has an invalid length. [ 414.204026][T22099] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8662'. [ 414.502190][T22122] netlink: 'syz.2.8674': attribute type 11 has an invalid length. [ 414.540459][T22122] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8674'. [ 414.606848][T22128] netlink: 'syz.0.8675': attribute type 6 has an invalid length. [ 414.827236][T22147] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8685'. [ 415.037609][T22164] netlink: 'syz.4.8694': attribute type 6 has an invalid length. [ 415.195280][T22176] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8700'. [ 415.575543][T22212] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8715'. [ 415.994164][T22242] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8734'. [ 416.386017][T22276] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8749'. [ 416.818941][T22307] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8766'. [ 416.929063][T22323] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8772'. [ 417.337198][T22357] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8789'. [ 417.388640][T22363] netlink: 'syz.2.8793': attribute type 2 has an invalid length. [ 418.298437][T22429] netlink: 'syz.4.8826': attribute type 2 has an invalid length. [ 418.796812][T22459] netlink: 'syz.1.8840': attribute type 2 has an invalid length. [ 418.884079][T22466] netlink: 'syz.4.8843': attribute type 29 has an invalid length. [ 418.905961][T22466] netlink: 'syz.4.8843': attribute type 29 has an invalid length. [ 419.258785][T22501] netlink: 'syz.2.8861': attribute type 29 has an invalid length. [ 419.280334][T22503] __nla_validate_parse: 8 callbacks suppressed [ 419.280351][T22503] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.8873'. [ 419.295427][T22501] netlink: 'syz.2.8861': attribute type 29 has an invalid length. [ 419.329528][T22506] netlink: 103 bytes leftover after parsing attributes in process `syz.4.8864'. [ 419.436894][T22512] netlink: 'syz.2.8865': attribute type 21 has an invalid length. [ 419.470653][T22512] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8865'. [ 419.494444][T22512] netlink: 'syz.2.8865': attribute type 4 has an invalid length. [ 419.538070][T22512] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8865'. [ 419.559306][T22520] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8869'. [ 419.772495][T22535] netlink: 'syz.3.8877': attribute type 29 has an invalid length. [ 419.781546][T22535] netlink: 'syz.3.8877': attribute type 29 has an invalid length. [ 419.819329][T22539] netlink: 'syz.4.8880': attribute type 30 has an invalid length. [ 419.997616][T22553] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8885'. [ 420.057803][T22553] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8885'. [ 420.109895][T22565] netlink: 140 bytes leftover after parsing attributes in process `syz.0.8891'. [ 420.250995][T22577] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8898'. [ 420.317930][T22581] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8910'. [ 421.654478][T22649] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 422.083218][T22691] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 423.134597][T22788] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 424.182002][T22885] validate_nla: 22 callbacks suppressed [ 424.182019][T22885] netlink: 'syz.2.9047': attribute type 2 has an invalid length. [ 424.477258][T22912] __nla_validate_parse: 15 callbacks suppressed [ 424.477276][T22912] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9059'. [ 424.537468][T22915] netlink: 'syz.1.9063': attribute type 2 has an invalid length. [ 424.545920][T22918] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9062'. [ 424.565860][T22915] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.9063'. [ 424.910998][T22949] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9077'. [ 425.519697][T22997] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9101'. [ 425.553907][T23000] netlink: 'syz.0.9103': attribute type 7 has an invalid length. [ 425.802624][T23020] netlink: 'syz.2.9114': attribute type 21 has an invalid length. [ 425.817900][T23020] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9114'. [ 425.829720][T23023] netlink: 'syz.0.9115': attribute type 10 has an invalid length. [ 425.835502][T23024] netlink: 'syz.1.9116': attribute type 3 has an invalid length. [ 425.855173][T23024] netlink: 'syz.1.9116': attribute type 1 has an invalid length. [ 425.863033][T23023] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9115'. [ 425.881506][T23024] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9116'. [ 426.374118][T23054] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9132'. [ 426.473664][T23064] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9134'. [ 426.914606][T23102] netlink: 'syz.1.9154': attribute type 3 has an invalid length. [ 426.952869][T23106] device bridge_slave_1 left promiscuous mode [ 426.962546][T23106] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.987640][T23106] device bridge_slave_0 left promiscuous mode [ 427.002806][T23106] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.024819][T23106] bond0: (slave bridge0): Releasing backup interface [ 427.391381][T23140] netlink: 'syz.2.9173': attribute type 3 has an invalid length. [ 427.429336][T23140] netlink: 'syz.2.9173': attribute type 1 has an invalid length. [ 428.141353][T23188] device bridge_slave_1 left promiscuous mode [ 428.160412][T23188] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.189788][T23188] device bridge_slave_0 left promiscuous mode [ 428.223633][T23188] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.978337][T23188] bond0: (slave bridge0): Releasing backup interface [ 429.384768][T23215] validate_nla: 4 callbacks suppressed [ 429.384793][T23215] netlink: 'syz.2.9213': attribute type 23 has an invalid length. [ 429.606669][T23238] netlink: 'syz.0.9225': attribute type 10 has an invalid length. [ 429.634768][T23238] netlink: 'syz.0.9225': attribute type 10 has an invalid length. [ 429.906237][T23266] __nla_validate_parse: 11 callbacks suppressed [ 429.906255][T23266] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9235'. [ 430.008028][T23272] netlink: 'syz.4.9240': attribute type 39 has an invalid length. [ 430.218741][T23292] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9250'. [ 430.562865][T23318] device bridge_slave_1 left promiscuous mode [ 430.591832][T23318] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.023569][T23318] device bridge_slave_0 left promiscuous mode [ 431.035389][T23318] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.354845][T23318] bond0: (slave bridge0): Releasing backup interface [ 431.408309][T23320] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9263'. [ 431.424474][T23322] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9264'. [ 431.517767][T23338] netlink: 'syz.3.9285': attribute type 23 has an invalid length. [ 431.545278][T23344] netlink: 'syz.2.9271': attribute type 39 has an invalid length. [ 431.907043][T23374] netlink: 'syz.0.9291': attribute type 23 has an invalid length. [ 432.121984][T23398] netlink: 'syz.0.9303': attribute type 39 has an invalid length. [ 432.498712][T23431] sctp: [Deprecated]: syz.1.9318 (pid 23431) Use of int in max_burst socket option deprecated. [ 432.498712][T23431] Use struct sctp_assoc_value instead [ 432.629137][T23445] netlink: 'syz.3.9326': attribute type 39 has an invalid length. [ 432.847050][T23462] netlink: 'syz.4.9336': attribute type 21 has an invalid length. [ 432.927211][T23466] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9337'. [ 433.275156][T23502] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9355'. [ 433.299853][T23508] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9358'. [ 433.456324][T23521] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.9366'. [ 433.600202][T23538] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.9373'. [ 433.607460][T23536] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9372'. [ 433.645089][T23536] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 434.231989][T23602] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 434.263973][T23602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.546686][T23633] validate_nla: 10 callbacks suppressed [ 434.546702][T23633] netlink: 'syz.3.9420': attribute type 10 has an invalid length. [ 434.765864][T23636] device bridge_slave_1 left promiscuous mode [ 434.772247][T23636] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.781055][T23636] device bridge_slave_0 left promiscuous mode [ 434.811783][T23636] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.836103][T23636] bond0: (slave bridge0): Releasing backup interface [ 435.285946][T23685] device bridge_slave_1 left promiscuous mode [ 435.292242][T23685] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.327112][T23685] device bridge_slave_0 left promiscuous mode [ 435.347848][T23685] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.386072][T23685] bond0: (slave bridge0): Releasing backup interface [ 435.428190][T23690] __nla_validate_parse: 7 callbacks suppressed [ 435.428207][T23690] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9458'. [ 435.443793][T23693] netlink: 'syz.2.9447': attribute type 10 has an invalid length. [ 435.451789][T23693] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9447'. [ 435.730914][T23706] netlink: 'syz.0.9467': attribute type 21 has an invalid length. [ 435.854522][T23719] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9462'. [ 436.097869][T23744] netlink: 'syz.2.9474': attribute type 21 has an invalid length. [ 436.423338][T23776] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9492'. [ 436.537734][T23791] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9498'. [ 436.675146][T23800] netlink: 'syz.3.9513': attribute type 10 has an invalid length. [ 436.706807][T23806] netlink: 'syz.1.9506': attribute type 9 has an invalid length. [ 436.724881][T23806] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.9506'. [ 437.078126][T23839] netlink: 'syz.0.9522': attribute type 9 has an invalid length. [ 437.103028][T23839] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.9522'. [ 437.486317][T23878] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9542'. [ 437.668861][T23893] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.9550'. [ 437.727667][T23897] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9552'. [ 437.753333][T23901] netlink: 'syz.3.9554': attribute type 46 has an invalid length. [ 437.945822][T23915] netlink: 'syz.3.9560': attribute type 21 has an invalid length. [ 438.144537][T23941] netlink: 'syz.4.9575': attribute type 2 has an invalid length. [ 438.628982][T23982] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 438.647140][T23982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.588865][T24066] validate_nla: 13 callbacks suppressed [ 439.588884][T24066] netlink: 'syz.0.9635': attribute type 2 has an invalid length. [ 439.620570][T24066] netlink: 'syz.0.9635': attribute type 4 has an invalid length. [ 439.811424][T24087] netlink: 'syz.2.9645': attribute type 46 has an invalid length. [ 440.087426][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.093786][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.183359][T24119] netlink: 'syz.0.9659': attribute type 21 has an invalid length. [ 440.437887][T24139] netlink: 'syz.2.9673': attribute type 8 has an invalid length. [ 440.753012][T24164] __nla_validate_parse: 24 callbacks suppressed [ 440.753031][T24164] netlink: 180 bytes leftover after parsing attributes in process `syz.3.9684'. [ 440.789157][T24165] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9683'. [ 440.827942][T24171] netlink: 'syz.0.9687': attribute type 8 has an invalid length. [ 440.949093][T24184] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9694'. [ 440.971852][T24186] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.9695'. [ 441.079979][T24195] netlink: 180 bytes leftover after parsing attributes in process `syz.2.9700'. [ 441.191857][T24205] netlink: 'syz.1.9703': attribute type 8 has an invalid length. [ 441.403260][T24226] netlink: 180 bytes leftover after parsing attributes in process `syz.0.9713'. [ 441.495895][T24238] netlink: 'syz.4.9720': attribute type 8 has an invalid length. [ 441.625626][T24250] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9725'. [ 441.995538][T24276] netlink: 'syz.3.9737': attribute type 8 has an invalid length. [ 442.146590][T24288] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9744'. [ 442.351738][T24302] netlink: 182 bytes leftover after parsing attributes in process `syz.4.9752'. [ 442.591666][T24329] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.9764'. [ 443.630842][T24393] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 443.655412][T24393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.817362][T24407] netlink: 'syz.1.9801': attribute type 3 has an invalid length. [ 444.071371][T24425] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 444.093554][T24425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.650316][T24466] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 444.666640][T24466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.857090][T24476] validate_nla: 2 callbacks suppressed [ 444.857105][T24476] netlink: 'syz.4.9838': attribute type 1 has an invalid length. [ 444.875756][T24478] netlink: 'syz.3.9840': attribute type 3 has an invalid length. [ 445.123053][T24495] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 445.142280][T24495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.192344][T24502] sctp: [Deprecated]: syz.1.9850 (pid 24502) Use of struct sctp_assoc_value in delayed_ack socket option. [ 445.192344][T24502] Use struct sctp_sack_info instead [ 445.947998][T24555] delete_channel: no stack [ 445.976276][T24559] netlink: 'syz.4.9879': attribute type 1 has an invalid length. [ 445.991531][T24559] __nla_validate_parse: 10 callbacks suppressed [ 445.991547][T24559] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.9879'. [ 446.028984][T24563] netlink: 'syz.3.9880': attribute type 21 has an invalid length. [ 446.055044][T24563] netlink: 'syz.3.9880': attribute type 1 has an invalid length. [ 446.070105][T24563] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9880'. [ 446.082881][T24568] netlink: 'syz.4.9892': attribute type 13 has an invalid length. [ 446.101188][T24568] netlink: 160 bytes leftover after parsing attributes in process `syz.4.9892'. [ 446.126322][T24568] erspan0: refused to change device tx_queue_len [ 446.140474][T24572] netlink: 'syz.2.9885': attribute type 1 has an invalid length. [ 446.148592][T24568] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 446.160767][T24572] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.9885'. [ 446.180357][T24572] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9885'. [ 447.237990][T24601] netlink: 'syz.4.9897': attribute type 21 has an invalid length. [ 447.254446][T24602] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9898'. [ 447.264593][T24601] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9897'. [ 447.286090][T24604] netlink: 'syz.1.9899': attribute type 10 has an invalid length. [ 447.328001][T24604] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 447.429785][T24608] netlink: 'syz.2.9902': attribute type 13 has an invalid length. [ 447.487688][T24608] netlink: 160 bytes leftover after parsing attributes in process `syz.2.9902'. [ 447.552960][T24608] erspan0: refused to change device tx_queue_len [ 447.580874][T24608] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 447.616474][T24615] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9907'. [ 447.625909][T24615] netlink: 6 bytes leftover after parsing attributes in process `syz.4.9907'. [ 447.806663][T24633] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 447.898879][T24640] IPv6: NLM_F_CREATE should be specified when creating new route [ 448.027541][T24653] erspan0: refused to change device tx_queue_len [ 448.042217][T24653] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 448.180526][T24668] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 448.248982][T24672] IPv6: NLM_F_CREATE should be specified when creating new route [ 448.590641][T24698] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 449.958983][T24765] validate_nla: 5 callbacks suppressed [ 449.959002][T24765] netlink: 'syz.1.9979': attribute type 20 has an invalid length. [ 450.800560][T24801] netlink: 'syz.2.9996': attribute type 20 has an invalid length. [ 450.895746][T24809] netlink: 'syz.0.9999': attribute type 16 has an invalid length. [ 450.965150][T24816] openvswitch: netlink: Flow actions attr not present in new flow. [ 451.425423][T24843] __nla_validate_parse: 25 callbacks suppressed [ 451.425440][T24843] netlink: 6 bytes leftover after parsing attributes in process `syz.0.10016'. [ 451.447105][T24843] openvswitch: netlink: Flow actions attr not present in new flow. [ 451.573377][T24853] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10022'. [ 451.769421][T24869] netlink: 6 bytes leftover after parsing attributes in process `syz.3.10030'. [ 451.831711][T24869] openvswitch: netlink: Flow actions attr not present in new flow. [ 451.936946][T24883] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10037'. [ 452.177800][T24905] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10056'. [ 453.085317][T24977] netlink: 'syz.4.10082': attribute type 21 has an invalid length. [ 453.093295][T24977] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10082'. [ 453.134137][T24977] netlink: 'syz.4.10082': attribute type 5 has an invalid length. [ 453.338205][T24993] netlink: 'syz.2.10091': attribute type 16 has an invalid length. [ 453.368606][T24993] netlink: 168 bytes leftover after parsing attributes in process `syz.2.10091'. [ 453.775649][T25029] delete_channel: no stack [ 453.776283][T25031] netlink: 'syz.2.10109': attribute type 21 has an invalid length. [ 453.910662][T25041] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.10115'. [ 453.920825][T25039] netlink: 'syz.2.10114': attribute type 3 has an invalid length. [ 454.105491][T25056] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.10121'. [ 454.180411][T25059] netlink: 'syz.4.10124': attribute type 19 has an invalid length. [ 454.196118][T25059] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10124'. [ 454.350339][T25070] openvswitch: netlink: Flow key attribute not present in set flow. [ 454.375130][T25073] delete_channel: no stack [ 454.379679][T25073] delete_channel: no stack [ 454.490253][T25085] netlink: 'syz.1.10137': attribute type 9 has an invalid length. [ 455.044199][T25132] netlink: get zone limit has 4 unknown bytes [ 455.257084][T25150] netlink: 'syz.1.10167': attribute type 40 has an invalid length. [ 455.440072][T25160] delete_channel: no stack [ 455.458610][T25160] delete_channel: no stack [ 455.608161][T25176] openvswitch: netlink: Flow key attribute not present in set flow. [ 455.888309][T25198] netlink: 'syz.1.10190': attribute type 19 has an invalid length. [ 456.097376][T25214] netlink: 'syz.1.10197': attribute type 3 has an invalid length. [ 457.982509][T25219] delete_channel: no stack [ 457.985705][T25222] __nla_validate_parse: 6 callbacks suppressed [ 457.985722][T25222] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.10209'. [ 458.407694][T25261] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.10220'. [ 458.410340][T25258] delete_channel: no stack [ 458.636281][T25282] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10226'. [ 458.733363][T25292] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10231'. [ 458.758692][T25292] netlink: get zone limit has 4 unknown bytes [ 458.873436][T25305] netlink: 'syz.1.10237': attribute type 41 has an invalid length. [ 458.902210][T25305] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10237'. [ 458.924744][T25305] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 459.106157][T25325] netlink: 'syz.2.10247': attribute type 40 has an invalid length. [ 459.148115][T25328] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10249'. [ 459.175083][T25328] netlink: get zone limit has 4 unknown bytes [ 459.196679][T25333] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.10253'. [ 459.212592][T25333] openvswitch: netlink: Key type 4112 is out of range max 29 [ 459.649274][T25375] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10271'. [ 459.715712][T25381] netlink: 'syz.2.10276': attribute type 41 has an invalid length. [ 459.723677][T25381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10276'. [ 459.748843][T25381] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 459.859556][T25394] device wlan0 entered promiscuous mode [ 459.883591][T25398] netlink: 'syz.0.10294': attribute type 41 has an invalid length. [ 459.924743][T25398] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10294'. [ 459.936033][T25398] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 460.129744][T25425] device wlan0 entered promiscuous mode [ 460.251326][T25435] netlink: 'syz.3.10303': attribute type 41 has an invalid length. [ 460.260361][T25435] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 460.277175][T15321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.316689][T25441] netlink: 'syz.2.10305': attribute type 21 has an invalid length. [ 460.438822][T25451] device wlan0 entered promiscuous mode [ 460.469664][T25457] netlink: 'syz.2.10314': attribute type 1 has an invalid length. [ 461.248749][T25477] netlink: 'syz.0.10331': attribute type 21 has an invalid length. [ 461.272123][T25479] netlink: 'syz.4.10317': attribute type 41 has an invalid length. [ 461.287378][T25479] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 461.310906][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 461.408862][T25488] netlink: 'syz.0.10322': attribute type 10 has an invalid length. [ 461.727240][T25505] netlink: 'syz.1.10337': attribute type 21 has an invalid length. [ 461.882807][T25522] netlink: 'syz.2.10345': attribute type 3 has an invalid length. [ 461.988626][T25536] netlink: 'syz.1.10351': attribute type 17 has an invalid length. [ 462.038841][T25536] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 462.065263][T25536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.100635][T25543] netlink: 'syz.2.10355': attribute type 21 has an invalid length. [ 462.190922][T25548] netlink: 'syz.3.10359': attribute type 2 has an invalid length. [ 462.435189][T25569] device hsr_slave_0 left promiscuous mode [ 462.453912][T25569] device hsr_slave_1 left promiscuous mode [ 463.057994][T25617] __nla_validate_parse: 19 callbacks suppressed [ 463.058013][T25617] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10391'. [ 463.078710][T25617] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 463.095956][T25617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.484070][T25662] device hsr_slave_0 left promiscuous mode [ 463.494131][T25662] device hsr_slave_1 left promiscuous mode [ 463.700410][T25683] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.10427'. [ 463.891624][T25706] device hsr_slave_0 left promiscuous mode [ 463.904648][T25706] device hsr_slave_1 left promiscuous mode [ 464.143595][T25729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10450'. [ 464.256015][T25740] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.10456'. [ 464.370125][T25752] device hsr_slave_0 left promiscuous mode [ 464.385884][T25752] device hsr_slave_1 left promiscuous mode [ 464.467011][T25761] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10466'. [ 464.808056][T25797] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.10484'. [ 464.938546][T25810] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.10489'. [ 464.954690][T25810] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 465.139985][T25831] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10501'. [ 465.375079][T25850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10510'. [ 465.550175][T25863] validate_nla: 12 callbacks suppressed [ 465.550195][T25863] netlink: 'syz.3.10516': attribute type 2 has an invalid length. [ 465.586485][T25863] netlink: 119 bytes leftover after parsing attributes in process `syz.3.10516'. [ 465.722230][T25874] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 465.739902][T25878] netlink: 'syz.3.10523': attribute type 21 has an invalid length. [ 465.954653][T25894] netlink: 'syz.1.10530': attribute type 21 has an invalid length. [ 466.125586][T25902] netlink: 'syz.1.10534': attribute type 21 has an invalid length. [ 466.160087][T25902] netlink: 'syz.1.10534': attribute type 4 has an invalid length. [ 466.227386][T25902] netlink: 'syz.1.10534': attribute type 3 has an invalid length. [ 466.439006][T25928] netlink: 'syz.1.10547': attribute type 2 has an invalid length. [ 466.633805][T25944] netlink: 'syz.4.10556': attribute type 40 has an invalid length. [ 466.768749][T25955] netlink: 'syz.0.10562': attribute type 21 has an invalid length. [ 466.792019][T25958] netlink: 'syz.4.10561': attribute type 46 has an invalid length. [ 468.102734][T26062] __nla_validate_parse: 24 callbacks suppressed [ 468.102756][T26062] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.10615'. [ 468.304657][T26082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10624'. [ 468.346904][T26079] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10622'. [ 468.375807][T26085] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10623'. [ 468.394683][T26085] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10623'. [ 468.560634][T26102] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.10633'. [ 468.696932][T26113] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10650'. [ 468.759394][T26119] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10652'. [ 469.095783][T26144] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10655'. [ 469.145062][T26149] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10658'. [ 470.679025][T26273] validate_nla: 36 callbacks suppressed [ 470.679041][T26273] netlink: 'syz.4.10717': attribute type 10 has an invalid length. [ 470.806189][T26279] netlink: 'syz.2.10719': attribute type 21 has an invalid length. [ 471.148821][T26304] netlink: 'syz.4.10734': attribute type 4 has an invalid length. [ 471.289370][T26312] netlink: 'syz.4.10736': attribute type 21 has an invalid length. [ 471.561889][T26338] netlink: 'syz.1.10748': attribute type 4 has an invalid length. [ 471.705268][T26349] netlink: 'syz.3.10752': attribute type 21 has an invalid length. [ 471.757059][T26353] netlink: 'syz.2.10754': attribute type 21 has an invalid length. [ 472.068157][T26376] netlink: 'syz.4.10767': attribute type 21 has an invalid length. [ 473.592343][T26497] netlink: 'syz.0.10826': attribute type 21 has an invalid length. [ 473.641498][T26497] __nla_validate_parse: 15 callbacks suppressed [ 473.641519][T26497] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10826'. [ 473.695037][T26497] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10826'. [ 473.889143][T26515] delete_channel: no stack [ 473.893693][T26515] delete_channel: no stack [ 473.985758][T26521] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.10850'. [ 474.155363][T26530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10844'. [ 474.810153][T26547] netlink: 'syz.2.10853': attribute type 3 has an invalid length. [ 474.857714][T26547] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10853'. [ 474.944143][T26554] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.10856'. [ 475.067192][T26558] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10859'. [ 475.125173][T26558] team0: Port device geneve0 added [ 475.501502][T26590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10874'. [ 475.792554][T26609] validate_nla: 1 callbacks suppressed [ 475.792570][T26609] netlink: 'syz.2.10883': attribute type 3 has an invalid length. [ 475.825688][T26609] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10883'. [ 475.837406][T26613] netlink: 'syz.1.10885': attribute type 5 has an invalid length. [ 475.891701][T26613] netlink: 168 bytes leftover after parsing attributes in process `syz.1.10885'. [ 475.926549][T26615] netlink: 'syz.4.10886': attribute type 10 has an invalid length. [ 475.984596][T26620] netlink: 'syz.1.10888': attribute type 2 has an invalid length. [ 476.436283][T26645] netlink: 'syz.1.10898': attribute type 3 has an invalid length. [ 476.444429][T26646] netlink: 'syz.4.10899': attribute type 5 has an invalid length. [ 476.648706][T26657] netlink: 'syz.1.10904': attribute type 4 has an invalid length. [ 476.668132][T26657] netlink: 'syz.1.10904': attribute type 16 has an invalid length. [ 476.740544][T26665] netlink: 'syz.0.10909': attribute type 10 has an invalid length. [ 476.864102][T26665] team0: Port device geneve0 added [ 477.000731][T26670] netlink: 'syz.4.10913': attribute type 3 has an invalid length. [ 477.889878][T26694] team0: Port device geneve0 added [ 479.040673][T26736] __nla_validate_parse: 7 callbacks suppressed [ 479.040692][T26736] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.10944'. [ 479.426027][T26765] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.10958'. [ 479.824684][T26797] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.10974'. [ 480.038222][T26809] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10978'. [ 480.139319][T26809] team0: Port device geneve0 added [ 481.295105][T26870] validate_nla: 8 callbacks suppressed [ 481.295127][T26870] netlink: 'syz.3.11010': attribute type 3 has an invalid length. [ 481.391772][T26870] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11010'. [ 482.300827][T26906] netlink: 'syz.1.11028': attribute type 16 has an invalid length. [ 482.345877][T26906] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11028'. [ 482.365195][T26906] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 483.012847][T26943] netlink: 'syz.1.11043': attribute type 33 has an invalid length. [ 483.038494][T26943] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11043'. [ 483.689759][T26977] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11062'. [ 484.270510][T26992] netlink: 'syz.4.11065': attribute type 10 has an invalid length. [ 484.280796][T26992] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11065'. [ 484.349946][T26992] team0: Port device geneve0 added [ 484.451814][T27000] netlink: 10 bytes leftover after parsing attributes in process `syz.2.11070'. [ 484.547513][T27004] netlink: 'syz.2.11073': attribute type 33 has an invalid length. [ 484.573313][T27004] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11073'. [ 484.844717][T27012] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.11078'. [ 484.990197][T27014] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11079'. [ 485.517058][T27023] netlink: 'syz.0.11093': attribute type 10 has an invalid length. [ 485.738328][T27036] netlink: 'syz.3.11088': attribute type 33 has an invalid length. [ 485.755273][T27036] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11088'. [ 485.885884][T27049] device lo entered promiscuous mode [ 485.891419][T27049] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 485.955085][T27052] netlink: 'syz.2.11095': attribute type 13 has an invalid length. [ 486.032424][T27060] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11098'. [ 486.119924][T27066] netlink: 'syz.0.11105': attribute type 29 has an invalid length. [ 486.170229][T27072] netlink: 'syz.1.11107': attribute type 21 has an invalid length. [ 486.191033][T27072] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11107'. [ 486.298938][T27077] device lo entered promiscuous mode [ 486.304460][T27077] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 486.400976][T27088] netlink: 'syz.1.11114': attribute type 13 has an invalid length. [ 486.474343][T27092] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11117'. [ 486.525386][T27096] netlink: 'syz.2.11118': attribute type 29 has an invalid length. [ 486.536259][T27099] netlink: 'syz.3.11121': attribute type 21 has an invalid length. [ 486.544253][T27099] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11121'. [ 486.698225][T27112] netlink: 'syz.3.11127': attribute type 10 has an invalid length. [ 486.869089][T27123] netlink: 'syz.0.11131': attribute type 13 has an invalid length. [ 487.076785][T27131] netlink: 'syz.3.11134': attribute type 29 has an invalid length. [ 487.354068][T27151] netlink: 'syz.0.11153': attribute type 5 has an invalid length. [ 487.676974][T27174] netlink: 'syz.0.11155': attribute type 2 has an invalid length. [ 487.690509][T27174] netlink: 'syz.0.11155': attribute type 2 has an invalid length. [ 487.967112][T27193] device lo entered promiscuous mode [ 487.996118][T27193] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 488.024087][T27195] netlink: 'syz.2.11164': attribute type 10 has an invalid length. [ 489.329346][T27290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.465084][T27300] __nla_validate_parse: 6 callbacks suppressed [ 489.465103][T27300] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11218'. [ 489.816171][T27327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.920405][T27336] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.11233'. [ 489.976165][T27343] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11235'. [ 490.294482][T27364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.309796][T27371] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.11252'. [ 491.021004][T27422] syz.0.11277[27422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.021103][T27422] syz.0.11277[27422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.179041][T27438] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11286'. [ 491.990104][T27507] syz.3.11318[27507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.990202][T27507] syz.3.11318[27507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 492.285870][T27527] validate_nla: 13 callbacks suppressed [ 492.285890][T27527] netlink: 'syz.3.11328': attribute type 8 has an invalid length. [ 492.360734][T27527] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.11328'. [ 492.373594][T27531] netlink: 'syz.0.11330': attribute type 3 has an invalid length. [ 492.386516][T27531] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11330'. [ 492.657670][T27551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11340'. [ 493.065658][T27588] netlink: 'syz.2.11360': attribute type 10 has an invalid length. [ 493.177952][T27595] netlink: 'syz.1.11362': attribute type 8 has an invalid length. [ 493.195931][T27588] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.218118][T27595] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.11362'. [ 493.229598][T27588] bond0: (slave team0): Enslaving as an active interface with an up link [ 493.258820][T27591] netlink: 'syz.3.11361': attribute type 10 has an invalid length. [ 493.479006][T27614] netlink: 'syz.3.11372': attribute type 3 has an invalid length. [ 493.497153][T27614] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11372'. [ 493.567331][T27618] netlink: 'syz.0.11374': attribute type 21 has an invalid length. [ 493.755250][T27630] netlink: 'syz.2.11381': attribute type 8 has an invalid length. [ 493.941749][T27648] netlink: 'syz.3.11387': attribute type 21 has an invalid length. [ 493.985069][T27650] netlink: 'syz.1.11388': attribute type 3 has an invalid length. [ 494.731993][T27698] delete_channel: no stack [ 495.552772][T27754] delete_channel: no stack [ 496.100832][T27809] __nla_validate_parse: 4 callbacks suppressed [ 496.100851][T27809] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11469'. [ 496.124807][T27812] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11470'. [ 496.354960][T27828] netlink: 172 bytes leftover after parsing attributes in process `syz.3.11477'. [ 496.476098][T27838] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11483'. [ 496.765148][T27848] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.801002][T27848] bond0: (slave team0): Enslaving as an active interface with an up link [ 496.904340][T27866] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11494'. [ 496.943486][T27868] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11496'. [ 497.122495][T27876] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11501'. [ 497.316602][T27889] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.356769][T27889] bond0: (slave team0): Enslaving as an active interface with an up link [ 497.378515][T27891] netlink: 172 bytes leftover after parsing attributes in process `syz.2.11506'. [ 497.584194][T27906] validate_nla: 5 callbacks suppressed [ 497.584214][T27906] netlink: 'syz.3.11516': attribute type 4 has an invalid length. [ 497.616437][T27913] netlink: 'syz.1.11517': attribute type 21 has an invalid length. [ 497.624413][T27913] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11517'. [ 497.625255][T27906] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11516'. [ 497.872199][T27932] netlink: 'syz.2.11528': attribute type 6 has an invalid length. [ 498.459590][T27977] netlink: 'syz.0.11559': attribute type 6 has an invalid length. [ 498.493681][T27980] netlink: 'syz.1.11549': attribute type 10 has an invalid length. [ 498.566978][T27980] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.602589][T27980] bond0: (slave team0): Enslaving as an active interface with an up link [ 498.954657][T28015] netlink: 'syz.3.11565': attribute type 6 has an invalid length. [ 500.750664][T28160] netlink: 'syz.3.11638': attribute type 4 has an invalid length. [ 501.115147][T28186] netlink: 'syz.1.11654': attribute type 21 has an invalid length. [ 501.145050][T28186] __nla_validate_parse: 7 callbacks suppressed [ 501.145067][T28186] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11654'. [ 501.281220][T28195] netlink: 'syz.4.11659': attribute type 4 has an invalid length. [ 501.537625][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.544005][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.988613][T28240] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.11678'. [ 502.297825][T28268] netlink: 'syz.2.11693': attribute type 21 has an invalid length. [ 502.370295][T28274] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.11695'. [ 502.409246][T28277] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.11696'. [ 502.727486][T28303] delete_channel: no stack [ 503.038455][T28334] validate_nla: 1 callbacks suppressed [ 503.038474][T28334] netlink: 'syz.3.11725': attribute type 21 has an invalid length. [ 503.115063][T28339] delete_channel: no stack [ 503.155223][T28343] netlink: 10 bytes leftover after parsing attributes in process `syz.3.11730'. [ 503.771703][T28389] netlink: 'syz.4.11754': attribute type 21 has an invalid length. [ 503.798759][T28389] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11754'. [ 503.828772][T28394] netlink: 196 bytes leftover after parsing attributes in process `syz.2.11755'. [ 504.145095][T28415] netlink: 148 bytes leftover after parsing attributes in process `syz.2.11762'. [ 504.277367][T28426] netlink: 10 bytes leftover after parsing attributes in process `syz.2.11769'. [ 504.407054][T28437] netlink: 'syz.1.11776': attribute type 27 has an invalid length. [ 504.415527][T28437] netlink: 'syz.1.11776': attribute type 4 has an invalid length. [ 504.430817][T28437] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11776'. [ 504.625867][T28443] netlink: 'syz.3.11788': attribute type 10 has an invalid length. [ 504.773653][T28443] team0 (unregistering): Port device team_slave_0 removed [ 504.831154][T28443] team0 (unregistering): Port device team_slave_1 removed [ 504.875695][T28443] team0 (unregistering): Port device geneve0 removed [ 504.940723][T28454] netlink: 'syz.0.11782': attribute type 2 has an invalid length. [ 504.958261][T28454] netlink: 'syz.0.11782': attribute type 8 has an invalid length. [ 505.048429][T28464] netlink: 'syz.1.11787': attribute type 21 has an invalid length. [ 505.152482][T28469] netlink: 'syz.4.11790': attribute type 3 has an invalid length. [ 505.423941][T28489] netlink: 'syz.3.11799': attribute type 27 has an invalid length. [ 505.619885][T28496] bond0: (slave team0): Releasing backup interface [ 505.703374][T28496] team0 (unregistering): Port device team_slave_0 removed [ 505.774027][T28496] team0 (unregistering): Port device team_slave_1 removed [ 505.817534][T28496] team0 (unregistering): Port device geneve0 removed [ 506.229195][T28545] __nla_validate_parse: 13 callbacks suppressed [ 506.229214][T28545] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11826'. [ 506.311479][T28552] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11828'. [ 506.366026][T28556] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11829'. [ 506.417005][T28558] bond0: (slave team0): Releasing backup interface [ 506.525367][T28558] team0 (unregistering): Port device team_slave_0 removed [ 506.566967][T28558] team0 (unregistering): Port device team_slave_1 removed [ 506.599458][T28558] team0 (unregistering): Port device geneve0 removed [ 506.635351][T28574] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11840'. [ 506.871548][T28592] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11846'. [ 506.966864][T28597] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.11852'. [ 506.984541][T28599] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11851'. [ 507.017861][T28597] openvswitch: netlink: Message has 20476 unknown bytes. [ 507.171373][T28613] netlink: 5 bytes leftover after parsing attributes in process `syz.4.11856'. [ 507.199607][T28616] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.11858'. [ 507.239659][T28619] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.11861'. [ 507.812788][T28668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.855702][T28668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.904731][T28668] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 507.922897][T28668] bond0 (unregistering): Released all slaves [ 507.952266][T28683] openvswitch: netlink: Message has 20476 unknown bytes. [ 508.006836][T28679] bond0: (slave team0): Releasing backup interface [ 508.057360][T28689] validate_nla: 26 callbacks suppressed [ 508.057379][T28689] netlink: 'syz.2.11896': attribute type 1 has an invalid length. [ 508.084022][T28679] team0 (unregistering): Port device team_slave_0 removed [ 508.109223][T28679] team0 (unregistering): Port device team_slave_1 removed [ 508.153234][T28679] team0 (unregistering): Port device geneve0 removed [ 508.216858][T28697] netlink: 'syz.2.11900': attribute type 2 has an invalid length. [ 508.794488][T28747] netlink: 'syz.1.11924': attribute type 10 has an invalid length. [ 508.885714][T28747] bond0: (slave team0): Releasing backup interface [ 508.944623][T28747] team0 (unregistering): Port device team_slave_0 removed [ 508.984440][T28747] team0 (unregistering): Port device team_slave_1 removed [ 509.026295][T28747] team0 (unregistering): Port device geneve0 removed [ 509.334215][T28761] netlink: 'syz.0.11932': attribute type 21 has an invalid length. [ 509.574749][T28777] netlink: 'syz.3.11942': attribute type 2 has an invalid length. [ 509.597754][T28777] netlink: 'syz.3.11942': attribute type 8 has an invalid length. [ 510.013542][T28812] netlink: 'syz.2.11969': attribute type 21 has an invalid length. [ 510.420084][T28844] netlink: 'syz.0.11974': attribute type 10 has an invalid length. [ 510.486974][T28847] netlink: 'syz.1.11976': attribute type 21 has an invalid length. [ 510.606089][T28858] delete_channel: no stack [ 510.943146][T28873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.980137][T28873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.012271][T28873] bond0 (unregistering): Released all slaves [ 511.074667][T28876] netlink: 'syz.1.11990': attribute type 10 has an invalid length. [ 511.385810][T28909] delete_channel: no stack [ 511.696499][T28924] __nla_validate_parse: 20 callbacks suppressed [ 511.696518][T28924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12013'. [ 512.037561][T28940] delete_channel: no stack [ 512.059370][T28941] netlink: 100 bytes leftover after parsing attributes in process `syz.2.12031'. [ 512.310849][T28951] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12027'. [ 512.443289][T28957] netlink: 601 bytes leftover after parsing attributes in process `syz.3.12032'. [ 512.892985][T28987] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.12045'. [ 512.996179][T28992] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12047'. [ 513.183124][T28992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.272181][T28992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.325207][T28992] bond0 (unregistering): Released all slaves [ 513.365001][T29005] validate_nla: 7 callbacks suppressed [ 513.365017][T29005] netlink: 'syz.4.12053': attribute type 21 has an invalid length. [ 513.379953][T29005] netlink: 100 bytes leftover after parsing attributes in process `syz.4.12053'. [ 513.855925][T29061] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12078'. [ 513.922200][T29061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.990616][T29061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.011078][T29061] bond0 (unregistering): Released all slaves [ 514.254590][T29094] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 514.764291][T29138] netlink: 'syz.0.12119': attribute type 21 has an invalid length. [ 514.786967][T29138] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12119'. [ 514.796785][T29138] netlink: 'syz.0.12119': attribute type 4 has an invalid length. [ 514.811557][T29140] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.12120'. [ 516.177926][T29245] netlink: 'syz.2.12173': attribute type 21 has an invalid length. [ 516.195077][T29245] netlink: 'syz.2.12173': attribute type 4 has an invalid length. [ 516.387364][T29261] netlink: 'syz.3.12179': attribute type 2 has an invalid length. [ 516.590238][T29275] netlink: 'syz.0.12188': attribute type 4 has an invalid length. [ 516.762193][T29288] __nla_validate_parse: 4 callbacks suppressed [ 516.762210][T29288] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12195'. [ 516.963471][T29305] netlink: 'syz.2.12202': attribute type 21 has an invalid length. [ 517.267858][T29324] netlink: 'syz.2.12213': attribute type 2 has an invalid length. [ 517.298711][T29324] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12213'. [ 517.389779][T29327] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12224'. [ 517.515087][T29333] netlink: 'syz.2.12216': attribute type 4 has an invalid length. [ 517.527199][T29337] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12218'. [ 517.545324][T29337] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12218'. [ 517.679493][T29349] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12225'. [ 517.712505][T29355] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12227'. [ 517.779901][T29358] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12229'. [ 518.248581][T29408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12254'. [ 518.444727][T29422] validate_nla: 10 callbacks suppressed [ 518.444744][T29422] netlink: 'syz.4.12260': attribute type 10 has an invalid length. [ 518.549322][T29422] netlink: 168 bytes leftover after parsing attributes in process `syz.4.12260'. [ 518.647366][T29444] netlink: 'syz.2.12272': attribute type 29 has an invalid length. [ 518.657392][T29444] netlink: 'syz.2.12272': attribute type 29 has an invalid length. [ 518.880431][T29468] netlink: 'syz.1.12284': attribute type 10 has an invalid length. [ 518.976497][T29475] netlink: 'syz.4.12288': attribute type 29 has an invalid length. [ 519.004260][T29475] netlink: 'syz.4.12288': attribute type 29 has an invalid length. [ 520.559545][T29627] netlink: 'syz.0.12363': attribute type 3 has an invalid length. [ 520.670264][T29636] netlink: 'syz.1.12377': attribute type 3 has an invalid length. [ 521.851439][T29752] netlink: 'syz.0.12422': attribute type 49 has an invalid length. [ 522.512511][T29791] netlink: 'syz.3.12443': attribute type 10 has an invalid length. [ 523.266579][T29847] sctp: [Deprecated]: syz.0.12471 (pid 29847) Use of int in maxseg socket option. [ 523.266579][T29847] Use struct sctp_assoc_value instead [ 523.980154][T29873] validate_nla: 2 callbacks suppressed [ 523.980173][T29873] netlink: 'syz.0.12482': attribute type 10 has an invalid length. [ 524.053332][T29878] netlink: 'syz.2.12485': attribute type 11 has an invalid length. [ 524.226090][T29891] __nla_validate_parse: 18 callbacks suppressed [ 524.226107][T29891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12493'. [ 524.241446][T29892] netlink: 26 bytes leftover after parsing attributes in process `syz.1.12492'. [ 524.358034][T29904] netlink: 'syz.0.12498': attribute type 10 has an invalid length. [ 524.397408][T29907] sctp: [Deprecated]: syz.3.12499 (pid 29907) Use of int in maxseg socket option. [ 524.397408][T29907] Use struct sctp_assoc_value instead [ 524.458457][T29911] netlink: 'syz.1.12500': attribute type 21 has an invalid length. [ 524.532442][T29918] netlink: 26 bytes leftover after parsing attributes in process `syz.3.12506'. [ 524.698766][T29934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12511'. [ 524.863289][T29949] netlink: 'syz.0.12519': attribute type 21 has an invalid length. [ 524.880099][T29950] netlink: 26 bytes leftover after parsing attributes in process `syz.4.12520'. [ 525.083127][T29968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12527'. [ 525.234377][T29980] netlink: 'syz.3.12534': attribute type 11 has an invalid length. [ 525.393918][T29993] netlink: 'syz.3.12540': attribute type 21 has an invalid length. [ 525.646660][T30014] netlink: 'syz.4.12549': attribute type 21 has an invalid length. [ 525.743349][T30020] netlink: 'syz.4.12552': attribute type 1 has an invalid length. [ 525.874849][T30030] netlink: 'syz.2.12569': attribute type 1 has an invalid length. [ 527.447582][T30159] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12622'. [ 527.915848][T30209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 527.923148][T30209] IPv6: NLM_F_CREATE should be set when creating new route [ 527.930466][T30209] IPv6: NLM_F_CREATE should be set when creating new route [ 528.064954][T30219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12653'. [ 528.266600][T30240] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12662'. [ 528.397176][T30253] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.12669'. [ 528.841429][T30287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 528.848756][T30287] IPv6: NLM_F_CREATE should be set when creating new route [ 528.856121][T30287] IPv6: NLM_F_CREATE should be set when creating new route [ 529.267121][T30315] validate_nla: 11 callbacks suppressed [ 529.267138][T30315] netlink: 'syz.2.12709': attribute type 21 has an invalid length. [ 529.292951][T30317] netlink: 'syz.0.12699': attribute type 21 has an invalid length. [ 529.310637][T30317] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 529.317981][T30317] IPv6: NLM_F_CREATE should be set when creating new route [ 529.325311][T30317] IPv6: NLM_F_CREATE should be set when creating new route [ 529.335041][T30315] netlink: 'syz.2.12709': attribute type 1 has an invalid length. [ 529.432601][T30322] netlink: 'syz.4.12701': attribute type 7 has an invalid length. [ 529.465288][T30322] netlink: 'syz.4.12701': attribute type 6 has an invalid length. [ 529.495530][T30328] netlink: 'syz.2.12704': attribute type 22 has an invalid length. [ 529.523983][T30328] __nla_validate_parse: 4 callbacks suppressed [ 529.524008][T30328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12704'. [ 529.747209][T30347] netlink: 'syz.0.12715': attribute type 21 has an invalid length. [ 529.768790][T30347] netlink: 'syz.0.12715': attribute type 1 has an invalid length. [ 529.773172][T30354] netlink: 'syz.3.12718': attribute type 7 has an invalid length. [ 529.795269][T30354] netlink: 'syz.3.12718': attribute type 6 has an invalid length. [ 529.910392][T30361] netlink: 10 bytes leftover after parsing attributes in process `syz.0.12722'. [ 530.070760][T30379] netlink: 164 bytes leftover after parsing attributes in process `syz.4.12729'. [ 530.271304][T30395] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12735'. [ 530.296800][T30399] netlink: 10 bytes leftover after parsing attributes in process `syz.1.12737'. [ 530.315298][T30395] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 530.570496][T30419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 530.577816][T30419] IPv6: NLM_F_CREATE should be set when creating new route [ 530.585145][T30419] IPv6: NLM_F_CREATE should be set when creating new route [ 530.592499][T30419] IPv6: NLM_F_CREATE should be set when creating new route [ 530.638883][T30423] netlink: 10 bytes leftover after parsing attributes in process `syz.2.12752'. [ 530.934713][T30450] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12763'. [ 531.307234][T30476] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12773'. [ 531.355017][T30476] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 531.376022][T30478] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.12775'. [ 531.391427][T30481] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12777'. [ 531.548187][T30493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.555502][T30493] IPv6: NLM_F_CREATE should be set when creating new route [ 531.562783][T30493] IPv6: NLM_F_CREATE should be set when creating new route [ 531.570078][T30493] IPv6: NLM_F_CREATE should be set when creating new route [ 531.779823][T30510] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 532.157866][T30536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 532.165184][T30536] IPv6: NLM_F_CREATE should be set when creating new route [ 532.172478][T30536] IPv6: NLM_F_CREATE should be set when creating new route [ 532.179780][T30536] IPv6: NLM_F_CREATE should be set when creating new route [ 534.280207][T30664] validate_nla: 21 callbacks suppressed [ 534.280224][T30664] netlink: 'syz.1.12866': attribute type 1 has an invalid length. [ 534.505803][T30673] netlink: 'syz.1.12872': attribute type 21 has an invalid length. [ 534.936177][T30697] netlink: 'syz.0.12884': attribute type 3 has an invalid length. [ 534.994634][T30697] __nla_validate_parse: 12 callbacks suppressed [ 534.994649][T30697] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.12884'. [ 535.252337][T30721] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.12897'. [ 535.307597][T30724] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12899'. [ 535.345783][T30726] netlink: 'syz.0.12900': attribute type 21 has an invalid length. [ 535.694709][T30746] netlink: 'syz.2.12908': attribute type 1 has an invalid length. [ 535.975161][T30756] netlink: 'syz.3.12913': attribute type 21 has an invalid length. [ 536.216144][T30762] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.12916'. [ 536.578204][T30782] netlink: 'syz.0.12936': attribute type 41 has an invalid length. [ 536.802563][T30801] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.12933'. [ 537.386136][T30830] netlink: 'syz.2.12950': attribute type 21 has an invalid length. [ 537.414224][T30830] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12950'. [ 537.694351][T30843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.738675][T30844] netlink: 'syz.3.12957': attribute type 41 has an invalid length. [ 538.065752][T30865] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12967'. [ 538.113563][T30864] netlink: 'syz.0.12964': attribute type 21 has an invalid length. [ 538.345891][T30883] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12986'. [ 538.591786][T30892] IPv6: NLM_F_CREATE should be specified when creating new route [ 538.625681][T30892] IPv6: Can't replace route, no match found [ 538.747670][T30896] IPv6: Can't replace route, no match found [ 539.127444][T30914] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12990'. [ 539.531136][T30946] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13007'. [ 539.566729][T30949] validate_nla: 3 callbacks suppressed [ 539.566747][T30949] netlink: 'syz.1.13009': attribute type 3 has an invalid length. [ 539.644175][T30955] netlink: 'syz.4.13012': attribute type 21 has an invalid length. [ 540.043153][T30982] netlink: 'syz.4.13024': attribute type 1 has an invalid length. [ 540.070295][T30982] __nla_validate_parse: 2 callbacks suppressed [ 540.070312][T30982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13024'. [ 540.250195][T30991] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.13028'. [ 540.625541][T31010] netlink: 149044 bytes leftover after parsing attributes in process `syz.4.13038'. [ 540.630605][T31012] netlink: 'syz.3.13039': attribute type 1 has an invalid length. [ 540.657614][T31012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13039'. [ 540.702746][T31015] netlink: 168 bytes leftover after parsing attributes in process `syz.2.13042'. [ 541.070306][T31051] netlink: 'syz.2.13056': attribute type 1 has an invalid length. [ 541.090217][T31051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13056'. [ 541.100784][T31055] netlink: 168 bytes leftover after parsing attributes in process `syz.4.13058'. [ 541.250595][T31068] netlink: 'syz.4.13066': attribute type 19 has an invalid length. [ 541.515600][T31089] delete_channel: no stack [ 541.565168][T31096] netlink: 'syz.1.13076': attribute type 30 has an invalid length. [ 541.605105][T31100] netlink: 'syz.3.13081': attribute type 19 has an invalid length. [ 541.674791][T31105] netlink: 'syz.0.13083': attribute type 6 has an invalid length. [ 541.693345][T31105] netlink: 140 bytes leftover after parsing attributes in process `syz.0.13083'. [ 541.708278][T31110] netlink: 'syz.4.13084': attribute type 9 has an invalid length. [ 541.727327][T31110] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.13084'. [ 541.895315][T31125] delete_channel: no stack [ 541.897524][T31128] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13093'. [ 542.251078][T31159] delete_channel: no stack [ 542.548866][T31190] delete_channel: no stack [ 542.997563][T31219] delete_channel: no stack [ 544.778759][T31363] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 544.805139][T31363] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 544.887354][T31373] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 545.158161][T31396] validate_nla: 18 callbacks suppressed [ 545.158178][T31396] netlink: 'syz.1.13227': attribute type 1 has an invalid length. [ 545.199268][T31398] delete_channel: no stack [ 545.235161][T31396] __nla_validate_parse: 17 callbacks suppressed [ 545.235177][T31396] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.13227'. [ 545.260710][T31405] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13232'. [ 545.527834][T31432] netlink: 3 bytes leftover after parsing attributes in process `syz.0.13244'. [ 545.542065][T31430] delete_channel: no stack [ 545.905596][T31457] delete_channel: no stack [ 545.929133][T31461] netlink: 'syz.0.13260': attribute type 10 has an invalid length. [ 545.940645][T31461] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13260'. [ 546.312740][T31490] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13273'. [ 546.368015][T31493] netlink: 'syz.2.13274': attribute type 1 has an invalid length. [ 546.395014][T31493] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.13274'. [ 546.434494][T31495] netlink: 'syz.4.13275': attribute type 3 has an invalid length. [ 546.486305][T31497] netlink: 'syz.1.13276': attribute type 1 has an invalid length. [ 546.495093][T31495] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.13275'. [ 546.501390][T31497] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.13276'. [ 546.533306][T31497] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13276'. [ 546.679488][T31509] netlink: 192440 bytes leftover after parsing attributes in process `syz.1.13280'. [ 546.735093][T31509] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 546.887326][T31519] netlink: 'syz.4.13290': attribute type 4 has an invalid length. [ 546.911791][T31523] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 546.942734][T31523] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 547.363501][T31548] netlink: 'syz.4.13303': attribute type 17 has an invalid length. [ 547.384803][T31550] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 547.398306][T31550] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 547.547778][T31562] netlink: 'syz.0.13310': attribute type 4 has an invalid length. [ 548.131503][T31615] netlink: 'syz.4.13335': attribute type 2 has an invalid length. [ 548.301011][T31630] netlink: 'syz.0.13343': attribute type 3 has an invalid length. [ 549.453978][T31727] IPv6: NLM_F_CREATE should be specified when creating new route [ 550.166283][T31780] validate_nla: 6 callbacks suppressed [ 550.166301][T31780] netlink: 'syz.0.13415': attribute type 1 has an invalid length. [ 550.286920][T31794] netlink: 'syz.4.13423': attribute type 21 has an invalid length. [ 550.315276][T31794] __nla_validate_parse: 17 callbacks suppressed [ 550.315293][T31794] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13423'. [ 550.389367][T31794] netlink: 'syz.4.13423': attribute type 1 has an invalid length. [ 550.427906][T31806] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13430'. [ 550.796540][T31838] netlink: 'syz.0.13444': attribute type 1 has an invalid length. [ 550.804422][T31838] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.13444'. [ 550.817665][T31842] netlink: 'syz.1.13457': attribute type 1 has an invalid length. [ 550.868136][T31842] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.13457'. [ 551.049230][T31864] netlink: 'syz.0.13455': attribute type 16 has an invalid length. [ 551.072295][T31864] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13455'. [ 551.082341][T31863] netlink: 'syz.1.13456': attribute type 21 has an invalid length. [ 551.293380][T31887] netlink: 'syz.1.13480': attribute type 6 has an invalid length. [ 551.543256][T31908] netlink: 'syz.2.13477': attribute type 16 has an invalid length. [ 551.581301][T31908] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13477'. [ 551.596048][T31911] netlink: 'syz.1.13478': attribute type 1 has an invalid length. [ 551.624224][T31911] netlink: 101600 bytes leftover after parsing attributes in process `syz.1.13478'. [ 552.284155][T31979] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.13524'. [ 552.402708][T31990] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.13517'. [ 552.669330][T32017] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.13532'. [ 554.608977][T32214] tc_dump_action: action bad kind [ 555.302206][T32289] tc_dump_action: action bad kind [ 555.491743][T32303] validate_nla: 16 callbacks suppressed [ 555.491760][T32303] netlink: 'syz.4.13671': attribute type 12 has an invalid length. [ 555.525703][T32303] __nla_validate_parse: 15 callbacks suppressed [ 555.525722][T32303] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13671'. [ 555.627052][T32317] tc_dump_action: action bad kind [ 555.776919][T32335] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13687'. [ 555.786341][T32333] netlink: 'syz.4.13686': attribute type 6 has an invalid length. [ 555.807256][T32338] netlink: 'syz.3.13689': attribute type 4 has an invalid length. [ 555.827383][T32338] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13689'. [ 556.206258][T32378] netlink: 'syz.0.13705': attribute type 6 has an invalid length. [ 556.211748][T32384] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13721'. [ 556.216108][T32381] netlink: 830 bytes leftover after parsing attributes in process `syz.3.13706'. [ 556.509642][T32412] netlink: 'syz.3.13724': attribute type 6 has an invalid length. [ 556.744798][T32436] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13735'. [ 557.049754][T32463] delete_channel: no stack [ 557.066677][T32471] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13750'. [ 557.229174][T32486] netlink: 'syz.0.13762': attribute type 21 has an invalid length. [ 557.272406][T32486] netlink: 'syz.0.13762': attribute type 1 has an invalid length. [ 557.295302][T32486] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13762'. [ 557.397165][T32501] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13770'. [ 557.415199][T32505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13769'. [ 558.347456][T32591] netlink: 'syz.2.13813': attribute type 21 has an invalid length. [ 558.588898][T32616] netlink: 'syz.3.13824': attribute type 1 has an invalid length. [ 558.631513][T32616] netlink: 'syz.3.13824': attribute type 3 has an invalid length. [ 560.608044][T32761] validate_nla: 5 callbacks suppressed [ 560.608060][T32761] netlink: 'syz.1.13898': attribute type 1 has an invalid length. [ 560.641948][T32761] __nla_validate_parse: 15 callbacks suppressed [ 560.641964][T32761] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.13898'. [ 560.695695][T32761] netlink: 'syz.1.13898': attribute type 1 has an invalid length. [ 560.760017][T32767] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13904'. [ 560.931188][ T313] netlink: 'syz.1.13908': attribute type 10 has an invalid length. [ 561.023536][ T319] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.13911'. [ 561.096928][ T328] netlink: 'syz.2.13915': attribute type 17 has an invalid length. [ 561.131387][ T328] netlink: 'syz.2.13915': attribute type 16 has an invalid length. [ 561.145046][ T331] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13918'. [ 561.158006][ T328] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13915'. [ 561.170808][ T333] netlink: 'syz.0.13916': attribute type 1 has an invalid length. [ 561.188056][ T337] netlink: 'syz.4.13919': attribute type 8 has an invalid length. [ 561.214369][ T337] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13919'. [ 561.224267][ T333] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.13916'. [ 561.255026][ T333] netlink: 'syz.0.13916': attribute type 1 has an invalid length. [ 561.309877][ T347] netlink: set zone limit has 8 unknown bytes [ 561.317175][ T346] netlink: 'syz.2.13924': attribute type 10 has an invalid length. [ 561.478304][ T360] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13930'. [ 561.587861][ T373] netlink: 'syz.1.13938': attribute type 8 has an invalid length. [ 561.651782][ T373] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13938'. [ 561.785680][ T395] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.13949'. [ 562.825551][ T467] netlink: set zone limit has 8 unknown bytes [ 562.976670][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.983047][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.229658][ T545] netlink: 'syz.1.14024': attribute type 11 has an invalid length. [ 564.370965][ T557] TCP: TCP_TX_DELAY enabled [ 564.697749][ T581] netlink: 'syz.2.14040': attribute type 11 has an invalid length. [ 565.238590][ T615] netlink: 'syz.0.14054': attribute type 11 has an invalid length. [ 565.616218][ T643] netlink: 'syz.3.14070': attribute type 11 has an invalid length. [ 565.755102][ T654] device lo left promiscuous mode [ 565.786600][ T654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 565.809499][ T655] validate_nla: 8 callbacks suppressed [ 565.809518][ T655] netlink: 'syz.0.14076': attribute type 5 has an invalid length. [ 566.131175][ T694] netlink: 'syz.1.14095': attribute type 5 has an invalid length. [ 566.359203][ T711] netlink: 'syz.3.14106': attribute type 3 has an invalid length. [ 566.373424][ T711] __nla_validate_parse: 9 callbacks suppressed [ 566.373441][ T711] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.14106'. [ 566.524417][ T726] netlink: 'syz.4.14112': attribute type 5 has an invalid length. [ 566.556289][ T723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 566.655588][ T734] netlink: 'syz.0.14117': attribute type 30 has an invalid length. [ 566.858159][ T747] netlink: 'syz.2.14125': attribute type 5 has an invalid length. [ 566.966651][ T763] netlink: 'syz.2.14131': attribute type 30 has an invalid length. [ 567.049485][ T769] netlink: 'syz.4.14132': attribute type 3 has an invalid length. [ 567.094298][ T769] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.14132'. [ 567.295027][ T788] netlink: 'syz.0.14143': attribute type 16 has an invalid length. [ 567.302991][ T788] netlink: 168 bytes leftover after parsing attributes in process `syz.0.14143'. [ 567.587238][ T817] netlink: 'syz.3.14155': attribute type 10 has an invalid length. [ 567.612350][ T817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14155'. [ 567.670188][ T826] netlink: 168 bytes leftover after parsing attributes in process `syz.1.14162'. [ 567.815754][ T839] netlink: 164 bytes leftover after parsing attributes in process `syz.4.14166'. [ 568.008251][ T859] netlink: 168 bytes leftover after parsing attributes in process `syz.4.14176'. [ 568.200714][ T874] netlink: 164 bytes leftover after parsing attributes in process `syz.0.14183'. [ 568.307066][ T882] netlink: 164 bytes leftover after parsing attributes in process `syz.1.14199'. [ 568.409930][ T896] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14205'. [ 569.997400][ T1084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 570.846744][ T1180] validate_nla: 24 callbacks suppressed [ 570.846763][ T1180] netlink: 'syz.3.14319': attribute type 11 has an invalid length. [ 570.861828][ T1176] netlink: 'syz.4.14318': attribute type 1 has an invalid length. [ 571.005338][ T1193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.441302][ T1230] netlink: 'syz.1.14340': attribute type 1 has an invalid length. [ 571.460258][ T1230] __nla_validate_parse: 23 callbacks suppressed [ 571.460275][ T1230] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.14340'. [ 571.488549][ T1232] netlink: 180 bytes leftover after parsing attributes in process `syz.4.14343'. [ 571.597330][ T1244] netlink: 'syz.4.14346': attribute type 11 has an invalid length. [ 572.266812][ T1297] netlink: 'syz.1.14372': attribute type 41 has an invalid length. [ 572.526975][ T1325] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.14384'. [ 572.643482][ T1335] netlink: 'syz.2.14390': attribute type 41 has an invalid length. [ 573.101425][ T1378] netlink: 21 bytes leftover after parsing attributes in process `syz.4.14409'. [ 573.123160][ T1378] ksmbd: Unknown IPC event: 0, ignore. [ 573.240383][ T1388] netlink: 'syz.4.14413': attribute type 28 has an invalid length. [ 573.283135][ T1388] netlink: 'syz.4.14413': attribute type 29 has an invalid length. [ 573.313523][ T1388] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14413'. [ 573.338524][ T1394] netlink: 10 bytes leftover after parsing attributes in process `syz.2.14415'. [ 573.458702][ T1398] netlink: 'syz.1.14428': attribute type 28 has an invalid length. [ 573.481177][ T1398] netlink: 'syz.1.14428': attribute type 29 has an invalid length. [ 573.504977][ T1398] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14428'. [ 573.639301][ T1414] netlink: 21 bytes leftover after parsing attributes in process `syz.3.14423'. [ 573.679864][ T1414] ksmbd: Unknown IPC event: 0, ignore. [ 574.104120][ T1435] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14434'. [ 574.248793][ T1442] netlink: 5 bytes leftover after parsing attributes in process `syz.1.14436'. [ 574.370631][ T1450] ksmbd: Unknown IPC event: 0, ignore. [ 575.146666][ T1507] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.165439][ T1507] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.217329][ T1507] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.241460][ T1507] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.356640][ T1515] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 575.863045][ T1553] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 576.038961][ T1569] Zero length message leads to an empty skb [ 576.129308][ T1579] validate_nla: 13 callbacks suppressed [ 576.129325][ T1579] netlink: 'syz.1.14502': attribute type 15 has an invalid length. [ 576.173518][ T1579] netlink: 'syz.1.14502': attribute type 5 has an invalid length. [ 576.295072][ T1590] netlink: 'syz.1.14507': attribute type 1 has an invalid length. [ 576.322591][ T1590] netlink: 'syz.1.14507': attribute type 3 has an invalid length. [ 576.511642][ T1605] netlink: 'syz.4.14525': attribute type 10 has an invalid length. [ 576.552266][ T1605] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.600753][ T1605] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.624487][ T1605] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.647378][ T1605] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.692456][ T1616] netlink: 'syz.2.14519': attribute type 15 has an invalid length. [ 576.732944][ T1616] netlink: 'syz.2.14519': attribute type 5 has an invalid length. [ 576.764560][ T1616] __nla_validate_parse: 8 callbacks suppressed [ 576.764577][ T1616] netlink: 144 bytes leftover after parsing attributes in process `syz.2.14519'. [ 577.086955][ T1638] netlink: 'syz.1.14529': attribute type 39 has an invalid length. [ 577.108737][ T1641] netlink: 'syz.4.14532': attribute type 10 has an invalid length. [ 577.125064][ T1641] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14532'. [ 577.180631][ T1641] netlink: 'syz.4.14532': attribute type 10 has an invalid length. [ 577.194995][ T1641] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14532'. [ 577.285660][ T1653] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14549'. [ 577.305069][ T1653] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14549'. [ 578.110425][ T1728] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14576'. [ 578.265389][ T1743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14583'. [ 578.665527][ T1777] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14598'. [ 578.878112][ T1798] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14609'. [ 579.184855][ T1821] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14620'. [ 581.159849][ T1983] IPv6: Can't replace route, no match found [ 581.195951][ T1982] validate_nla: 18 callbacks suppressed [ 581.195966][ T1982] netlink: 'syz.4.14690': attribute type 10 has an invalid length. [ 581.393051][ T2001] netlink: 'syz.3.14701': attribute type 1 has an invalid length. [ 581.534720][ T2016] IPv6: Can't replace route, no match found [ 582.417345][ T2073] IPv6: Can't replace route, no match found [ 583.047318][ T2118] netlink: 'syz.0.14752': attribute type 9 has an invalid length. [ 583.068837][ T2118] __nla_validate_parse: 10 callbacks suppressed [ 583.068857][ T2118] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.14752'. [ 583.225341][ T2128] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.14759'. [ 583.818301][ T2174] netlink: 'syz.2.14778': attribute type 9 has an invalid length. [ 583.828820][ T2174] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.14778'. [ 584.265917][ T2204] netlink: 'syz.0.14796': attribute type 21 has an invalid length. [ 584.299135][ T2204] IPv6: Can't replace route, no match found [ 584.407864][ T2214] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.14802'. [ 584.513484][ T2216] netlink: 26 bytes leftover after parsing attributes in process `syz.1.14804'. [ 585.135601][ T2265] netlink: 'syz.1.14827': attribute type 21 has an invalid length. [ 585.143619][ T2265] IPv6: Can't replace route, no match found [ 585.663222][ T2310] netlink: 'syz.4.14849': attribute type 9 has an invalid length. [ 585.680082][ T2310] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.14849'. [ 585.732050][ T2316] delete_channel: no stack [ 585.827725][ T2322] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.14855'. [ 586.353909][ T2349] netlink: 'syz.3.14867': attribute type 21 has an invalid length. [ 586.527471][ T2358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14873'. [ 586.576138][ T2361] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.14874'. [ 586.647255][ T2364] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.14875'. [ 586.735497][ T2366] netlink: 'syz.1.14887': attribute type 8 has an invalid length. [ 586.860916][ T2376] netlink: 'syz.3.14880': attribute type 15 has an invalid length. [ 586.885989][ T2376] netlink: 'syz.3.14880': attribute type 7 has an invalid length. [ 586.964152][ T2385] netlink: 'syz.4.14885': attribute type 21 has an invalid length. [ 587.259064][ T2412] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 587.306896][ T2416] netlink: 'syz.0.14902': attribute type 21 has an invalid length. [ 587.351456][ T2418] netlink: 'syz.4.14904': attribute type 4 has an invalid length. [ 587.442927][ T2425] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 587.578265][ T2443] netlink: 'syz.0.14923': attribute type 15 has an invalid length. [ 587.615398][ T2443] netlink: 'syz.0.14923': attribute type 7 has an invalid length. [ 587.655494][ T2446] netlink: 'syz.4.14915': attribute type 4 has an invalid length. [ 587.698465][ T2446] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 588.078447][ T2490] __nla_validate_parse: 11 callbacks suppressed [ 588.078462][ T2490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14932'. [ 588.132192][ T2490] netlink: 13 bytes leftover after parsing attributes in process `syz.1.14932'. [ 588.463469][ T2520] netlink: 184 bytes leftover after parsing attributes in process `syz.2.14944'. [ 588.531733][ T2524] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14947'. [ 588.627968][ T2528] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14948'. [ 588.677429][ T2532] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14950'. [ 588.759558][ T2542] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14954'. [ 588.839536][ T2542] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 588.867493][ T2552] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.14958'. [ 589.073087][ T2568] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14964'. [ 589.268542][ T2588] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14972'. [ 589.323082][ T2588] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 595.419561][ T2917] __nla_validate_parse: 8 callbacks suppressed [ 595.419592][ T2917] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.15102'. [ 595.852155][ T2941] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15109'. [ 595.976291][ T2948] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.15115'. [ 596.484921][ T2976] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.15122'. [ 596.852058][ T2988] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.15129'. [ 597.857998][ T3016] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15154'. [ 598.008160][ T3021] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.15144'. [ 598.097514][ T3027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15158'. [ 599.512198][ T3063] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.15164'. [ 599.761219][ T3071] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.15177'. [ 599.873160][ T3077] validate_nla: 14 callbacks suppressed [ 599.873180][ T3077] netlink: 'syz.2.15166': attribute type 10 has an invalid length. [ 599.925257][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 599.973648][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 600.035223][ T3077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 601.186325][ T3106] __nla_validate_parse: 2 callbacks suppressed [ 601.186357][ T3106] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.15182'. [ 602.133925][ T3123] netlink: 'syz.3.15190': attribute type 10 has an invalid length. [ 602.145007][ T3123] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15190'. [ 602.187628][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 602.232615][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 602.268758][ T3123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 605.524986][ T3229] netlink: 'syz.0.15250': attribute type 17 has an invalid length. [ 606.040254][ T3258] netlink: 'syz.2.15256': attribute type 17 has an invalid length. [ 607.500171][ T3318] netlink: 'syz.2.15283': attribute type 4 has an invalid length. [ 607.517634][ T3318] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.15283'. [ 607.951646][ T3341] netlink: 'syz.3.15292': attribute type 17 has an invalid length. [ 608.171360][ T3355] netlink: 'syz.1.15298': attribute type 4 has an invalid length. [ 608.219603][ T3355] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15298'. [ 608.659962][ T3376] netlink: 'syz.1.15307': attribute type 17 has an invalid length. [ 608.806338][ T3383] netlink: 'syz.1.15312': attribute type 19 has an invalid length. [ 608.831680][ T3385] netlink: 'syz.0.15323': attribute type 5 has an invalid length. [ 608.965655][ T3394] netlink: 'syz.3.15329': attribute type 5 has an invalid length. [ 609.436614][ T3420] netlink: 'syz.3.15332': attribute type 19 has an invalid length. [ 610.535812][ T3484] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.15361'. [ 611.106057][ T3490] validate_nla: 5 callbacks suppressed [ 611.106073][ T3490] netlink: 'syz.0.15363': attribute type 21 has an invalid length. [ 611.140264][ T3490] netlink: 'syz.0.15363': attribute type 1 has an invalid length. [ 611.168044][ T3494] netlink: 'syz.1.15364': attribute type 5 has an invalid length. [ 611.196122][ T3498] netlink: 140 bytes leftover after parsing attributes in process `syz.3.15366'. [ 611.271738][ T3505] netlink: 399 bytes leftover after parsing attributes in process `syz.4.15379'. [ 612.253026][ T3588] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15404'. [ 612.420892][ T3598] netlink: 'syz.2.15410': attribute type 29 has an invalid length. [ 612.442061][ T3598] netlink: 'syz.2.15410': attribute type 29 has an invalid length. [ 612.454096][ T3598] netlink: 'syz.2.15410': attribute type 29 has an invalid length. [ 613.495405][ T3630] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.15423'. [ 613.556966][ T3632] netlink: 'syz.4.15424': attribute type 17 has an invalid length. [ 613.612155][ T3636] netlink: 399 bytes leftover after parsing attributes in process `syz.2.15426'. [ 613.977052][ T3663] netlink: 'syz.1.15441': attribute type 17 has an invalid length. [ 614.106212][ T3673] netlink: 'syz.1.15446': attribute type 29 has an invalid length. [ 614.128771][ T3673] netlink: 'syz.1.15446': attribute type 29 has an invalid length. [ 614.149949][ T3677] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15448'. [ 614.701820][ T3716] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15465'. [ 615.196841][ T3748] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15482'. [ 616.034367][ T3749] delete_channel: no stack [ 616.200837][ T3768] sock: sock_set_timeout: `syz.0.15489' (pid 3768) tries to set negative timeout [ 616.392588][ T3782] delete_channel: no stack [ 616.544466][ T3800] sock: sock_set_timeout: `syz.1.15506' (pid 3800) tries to set negative timeout [ 617.542371][ T3820] delete_channel: no stack [ 617.805233][ T3848] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.15529'. [ 618.534454][ T3895] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15549'. [ 618.545058][ T3895] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15549'. [ 618.556622][ T3895] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15549'. [ 618.729983][ T3905] validate_nla: 6 callbacks suppressed [ 618.730001][ T3905] netlink: 'syz.0.15564': attribute type 3 has an invalid length. [ 618.754816][ T3905] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.15564'. [ 618.818405][ T3913] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.15557'. [ 619.110266][ T3932] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.15565'. [ 619.393671][ T3955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15576'. [ 619.410426][ T3955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15576'. [ 619.426327][ T3950] netlink: 'syz.2.15571': attribute type 3 has an invalid length. [ 619.433066][ T3955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15576'. [ 619.445890][ T3950] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.15571'. [ 619.984365][ T3995] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 620.017563][ T3999] netlink: 'syz.2.15595': attribute type 21 has an invalid length. [ 621.827539][ T4121] netlink: 'syz.0.15648': attribute type 11 has an invalid length. [ 623.035427][ T4203] netlink: 'syz.2.15689': attribute type 2 has an invalid length. [ 623.385708][ T4241] sock: sock_set_timeout: `syz.3.15704' (pid 4241) tries to set negative timeout [ 624.033001][ T4269] sock: sock_set_timeout: `syz.0.15720' (pid 4269) tries to set negative timeout [ 624.326412][ T4273] __nla_validate_parse: 8 callbacks suppressed [ 624.326428][ T4273] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.15722'. [ 624.406792][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.413188][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.643691][ T4300] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.15734'. [ 624.915756][ T4308] netlink: 'syz.2.15739': attribute type 1 has an invalid length. [ 624.965858][ T4308] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.15739'. [ 625.055645][ T4317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15741'. [ 625.208894][ T4344] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.15747'. [ 625.562201][ T4379] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15755'. [ 626.021612][ T4422] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.15770'. [ 626.166534][ T4431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15773'. [ 627.587992][ T4501] netlink: 164 bytes leftover after parsing attributes in process `syz.3.15803'. [ 629.770431][ T4557] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.15832'. [ 629.918362][ T4571] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.15836'. [ 630.898535][ T4594] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.15848'. [ 632.616398][ T4652] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.15876'. [ 632.741323][ T4665] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.15882'. [ 633.267449][ T4697] netlink: 'syz.1.15900': attribute type 7 has an invalid length. [ 633.292019][ T4697] netlink: 'syz.1.15900': attribute type 6 has an invalid length. [ 633.304240][ T4701] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.15899'. [ 633.383315][ T4707] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.15904'. [ 633.395327][ T4705] netlink: 'syz.2.15903': attribute type 17 has an invalid length. [ 633.415158][ T4705] netlink: 148 bytes leftover after parsing attributes in process `syz.2.15903'. [ 633.827948][ T4736] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.15918'. [ 634.220309][ T4768] netlink: 'syz.1.15932': attribute type 3 has an invalid length. [ 634.248832][ T4768] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15932'. [ 634.529489][ T4789] netlink: 'syz.3.15939': attribute type 7 has an invalid length. [ 634.546779][ T4791] netlink: 'syz.2.15943': attribute type 29 has an invalid length. [ 634.557539][ T4789] netlink: 'syz.3.15939': attribute type 6 has an invalid length. [ 634.580112][ T4791] netlink: 'syz.2.15943': attribute type 29 has an invalid length. [ 634.606147][ T4796] netlink: 'syz.2.15943': attribute type 29 has an invalid length. [ 634.868633][ T4812] netlink: 'syz.0.15950': attribute type 9 has an invalid length. [ 634.908294][ T4812] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.15950'. [ 635.484596][ T4846] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15966'. [ 635.640225][ T4859] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.15972'. [ 636.074491][ T4881] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15983'. [ 636.390435][ T4900] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.15993'. [ 637.168877][ T4917] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16001'. [ 638.393960][ T4940] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16008'. [ 638.597508][ T4952] validate_nla: 11 callbacks suppressed [ 638.597526][ T4952] netlink: 'syz.2.16017': attribute type 1 has an invalid length. [ 638.615145][ T4952] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.16017'. [ 638.626847][ T4952] netlink: 'syz.2.16017': attribute type 1 has an invalid length. [ 638.826317][ T4960] netlink: 'syz.2.16020': attribute type 33 has an invalid length. [ 638.844346][ T4960] netlink: 164 bytes leftover after parsing attributes in process `syz.2.16020'. [ 639.106897][ T4980] netlink: 'syz.3.16030': attribute type 29 has an invalid length. [ 639.145244][ T4980] netlink: 'syz.3.16030': attribute type 29 has an invalid length. [ 639.164180][ T4985] netlink: 'syz.3.16030': attribute type 29 has an invalid length. [ 639.746885][ T5019] netlink: 'syz.0.16046': attribute type 29 has an invalid length. [ 639.775194][ T5019] netlink: 'syz.0.16046': attribute type 29 has an invalid length. [ 639.795779][ T5019] netlink: 'syz.0.16046': attribute type 29 has an invalid length. [ 640.317317][ T5024] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.16060'. [ 640.550147][ T5029] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.16062'. [ 641.502178][ T5080] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.16072'. [ 641.520453][ T5073] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.16072'. [ 642.036960][ T5116] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.16090'. [ 642.083397][ T5111] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.16090'. [ 643.145183][ T5148] syz.2.16106 (5148) used obsolete PPPIOCDETACH ioctl [ 643.430896][ T5164] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.16117'. [ 643.472529][ T5166] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.16118'. [ 643.867012][ T5182] syz.0.16126[5182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 643.867110][ T5182] syz.0.16126[5182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 643.988739][ T5189] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.16129'. [ 644.047539][ T5191] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.16131'. [ 645.808480][ T5277] __nla_validate_parse: 4 callbacks suppressed [ 645.808498][ T5277] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.16172'. [ 646.341123][ T5309] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16188'. [ 646.357568][ T5310] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16187'. [ 646.385823][ T5310] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16187'. [ 646.405357][ T5307] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16187'. [ 646.547354][ T5322] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.16194'. [ 646.907013][ T5338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16202'. [ 647.632726][ T5371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16216'. [ 647.653490][ T5371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16216'. [ 647.697355][ T5368] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16216'. [ 651.151654][ T5569] netlink: 'syz.1.16311': attribute type 29 has an invalid length. [ 651.171007][ T5569] netlink: 'syz.1.16311': attribute type 29 has an invalid length. [ 651.207631][ T5572] netlink: 'syz.1.16311': attribute type 29 has an invalid length. [ 651.738117][ T5613] netlink: 'syz.2.16327': attribute type 29 has an invalid length. [ 651.765585][ T5613] netlink: 'syz.2.16327': attribute type 29 has an invalid length. [ 651.786418][ T5613] netlink: 'syz.2.16327': attribute type 29 has an invalid length. [ 652.109380][ T5645] netlink: 'syz.4.16344': attribute type 29 has an invalid length. [ 652.139339][ T5645] netlink: 'syz.4.16344': attribute type 29 has an invalid length. [ 652.164738][ T5653] netlink: 'syz.4.16344': attribute type 29 has an invalid length. [ 652.452601][ T5672] netlink: 'syz.4.16355': attribute type 1 has an invalid length. [ 652.462282][ T5672] __nla_validate_parse: 2 callbacks suppressed [ 652.462329][ T5672] netlink: 5 bytes leftover after parsing attributes in process `syz.4.16355'. [ 652.593996][ T5684] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.16359'. [ 652.862901][ T5708] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.16373'. [ 652.961150][ T5717] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.16376'. [ 653.112046][ T5727] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.16391'. [ 653.323432][ T5742] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.16389'. [ 653.480519][ T5754] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.16395'. [ 653.536992][ T5758] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.16398'. [ 653.573652][ T5760] netlink: 5 bytes leftover after parsing attributes in process `syz.3.16399'. [ 653.783608][ T5777] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.16406'. [ 656.486580][ T5921] validate_nla: 10 callbacks suppressed [ 656.486599][ T5921] netlink: 'syz.2.16472': attribute type 3 has an invalid length. [ 657.495002][ T5985] __nla_validate_parse: 8 callbacks suppressed [ 657.495020][ T5985] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.16498'. [ 657.634076][ T5990] netlink: 'syz.3.16501': attribute type 3 has an invalid length. [ 657.674832][ T5990] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.16501'. [ 658.168826][ T6034] netlink: 'syz.0.16517': attribute type 3 has an invalid length. [ 658.178203][ T6034] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.16517'. [ 658.539350][ T6067] netlink: 'syz.1.16533': attribute type 3 has an invalid length. [ 658.548318][ T6067] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.16533'. [ 658.565590][ T6068] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.16534'. [ 663.461015][ T6323] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.16649'. [ 663.586877][ T6323] netlink: get zone limit has 8 unknown bytes [ 665.017169][ T6392] netlink: 'syz.3.16682': attribute type 3 has an invalid length. [ 665.095111][ T6392] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.16682'. [ 665.722306][ T6415] netlink: 'syz.0.16692': attribute type 29 has an invalid length. [ 665.815880][ T6415] netlink: 'syz.0.16692': attribute type 29 has an invalid length. [ 665.858071][ T6417] netlink: 'syz.0.16692': attribute type 29 has an invalid length. [ 666.356181][ T6437] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.16702'. [ 666.436618][ T6437] netlink: get zone limit has 8 unknown bytes [ 666.667592][ T6452] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.16710'. [ 667.608045][ T6466] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16715'. [ 667.687200][ T6466] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 667.755177][ T6466] CPU: 0 PID: 6466 Comm: syz.3.16715 Not tainted syzkaller #0 [ 667.762801][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 667.772920][ T6466] Call Trace: [ 667.776238][ T6466] [ 667.779200][ T6466] dump_stack_lvl+0x168/0x230 [ 667.783941][ T6466] ? show_regs_print_info+0x20/0x20 [ 667.789181][ T6466] ? load_image+0x3b0/0x3b0 [ 667.793736][ T6466] ? sysfs_warn_dup+0x61/0xa0 [ 667.798460][ T6466] sysfs_warn_dup+0x8a/0xa0 [ 667.803012][ T6466] sysfs_do_create_link_sd+0xc0/0x110 [ 667.808428][ T6466] device_add+0x7ed/0xfb0 [ 667.812815][ T6466] wiphy_register+0x1d67/0x2b20 [ 667.817752][ T6466] ? cfg80211_event_work+0x40/0x40 [ 667.822903][ T6466] ? minstrel_ht_alloc+0x808/0x980 [ 667.828073][ T6466] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 667.834199][ T6466] ieee80211_register_hw+0x29b1/0x39d0 [ 667.839701][ T6466] ? lockdep_hardirqs_on+0x94/0x140 [ 667.844962][ T6466] ? ieee80211_tasklet_handler+0x20/0x20 [ 667.850646][ T6466] ? rcu_is_watching+0x11/0xa0 [ 667.855452][ T6466] ? memset+0x1e/0x40 [ 667.859488][ T6466] ? hrtimer_init+0x10c/0x220 [ 667.864223][ T6466] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 667.870012][ T6466] hwsim_new_radio_nl+0xa6f/0xc40 [ 667.875092][ T6466] genl_rcv_msg+0xbc6/0xf40 [ 667.879654][ T6466] ? genl_bind+0x370/0x370 [ 667.884120][ T6466] ? verify_lock_unused+0x140/0x140 [ 667.889362][ T6466] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 667.894623][ T6466] ? dev_queue_xmit+0x20/0x20 [ 667.899339][ T6466] ? hwsim_tx_info_frame_received_nl+0x1010/0x1010 [ 667.905901][ T6466] netlink_rcv_skb+0x1e0/0x430 [ 667.910708][ T6466] ? genl_bind+0x370/0x370 [ 667.915170][ T6466] ? netlink_ack+0xb60/0xb60 [ 667.919805][ T6466] ? __lock_acquire+0x7c60/0x7c60 [ 667.924879][ T6466] ? preempt_count_add+0x8d/0x190 [ 667.929944][ T6466] ? down_read+0x1aa/0x2e0 [ 667.934399][ T6466] genl_rcv+0x24/0x40 [ 667.938409][ T6466] netlink_unicast+0x774/0x920 [ 667.943220][ T6466] netlink_sendmsg+0x8ab/0xbc0 [ 667.948025][ T6466] ? netlink_getsockopt+0x560/0x560 [ 667.953256][ T6466] ? aa_sock_msg_perm+0x94/0x150 [ 667.958226][ T6466] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 667.963545][ T6466] ? security_socket_sendmsg+0x7c/0xa0 [ 667.969041][ T6466] ? netlink_getsockopt+0x560/0x560 [ 667.974278][ T6466] ____sys_sendmsg+0x5a2/0x8c0 [ 667.979096][ T6466] ? memset+0x1e/0x40 [ 667.983118][ T6466] ? __sys_sendmsg_sock+0x30/0x30 [ 667.988187][ T6466] ? import_iovec+0x6f/0xa0 [ 667.992738][ T6466] ___sys_sendmsg+0x1f0/0x260 [ 667.997460][ T6466] ? __sys_sendmsg+0x250/0x250 [ 668.002278][ T6466] ? percpu_counter_add_batch+0x13b/0x160 [ 668.008058][ T6466] ? __fdget+0x18b/0x210 [ 668.012339][ T6466] __se_sys_sendmsg+0x190/0x250 [ 668.017228][ T6466] ? __x64_sys_sendmsg+0x80/0x80 [ 668.022195][ T6466] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 668.028231][ T6466] ? lockdep_hardirqs_on+0x94/0x140 [ 668.033470][ T6466] do_syscall_64+0x4c/0xa0 [ 668.037924][ T6466] ? clear_bhb_loop+0x30/0x80 [ 668.042635][ T6466] ? clear_bhb_loop+0x30/0x80 [ 668.047343][ T6466] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 668.053279][ T6466] RIP: 0033:0x7fccd949c749 [ 668.057727][ T6466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.077377][ T6466] RSP: 002b:00007fccd76e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.085837][ T6466] RAX: ffffffffffffffda RBX: 00007fccd96f3090 RCX: 00007fccd949c749 [ 668.093851][ T6466] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 668.101858][ T6466] RBP: 00007fccd9520f91 R08: 0000000000000000 R09: 0000000000000000 [ 668.109874][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.117883][ T6466] R13: 00007fccd96f3128 R14: 00007fccd96f3090 R15: 00007ffc7b131c78 [ 668.125908][ T6466] [ 668.802010][ T6472] netlink: 'syz.2.16719': attribute type 27 has an invalid length. [ 669.152918][ T6498] netlink: 'syz.4.16733': attribute type 29 has an invalid length. [ 669.196355][ T6498] netlink: 'syz.4.16733': attribute type 29 has an invalid length. [ 669.206726][ T6500] netlink: 'syz.4.16733': attribute type 29 has an invalid length. [ 669.249025][ T6499] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.16731'. [ 669.443553][ T6515] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.16736'. [ 669.572439][ T6520] netlink: 'syz.1.16741': attribute type 2 has an invalid length. [ 669.594927][ T6520] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.16741'. [ 669.640469][ T6521] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.16740'. [ 669.681545][ T6521] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 669.741449][ T6528] netlink: 'syz.1.16745': attribute type 29 has an invalid length. [ 670.077415][ T6544] validate_nla: 2 callbacks suppressed [ 670.077435][ T6544] netlink: 'syz.4.16750': attribute type 10 has an invalid length. [ 670.171626][ T6547] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.16753'. [ 670.444212][ T6556] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.16757'. [ 670.481398][ T6565] netlink: 'syz.2.16760': attribute type 29 has an invalid length. [ 670.626230][ T6565] netlink: 'syz.2.16760': attribute type 29 has an invalid length. [ 670.647176][ T6571] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.16763'. [ 670.722400][ T6571] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 670.860521][ T6571] CPU: 1 PID: 6571 Comm: syz.0.16763 Not tainted syzkaller #0 [ 670.868067][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 670.878163][ T6571] Call Trace: [ 670.881475][ T6571] [ 670.884433][ T6571] dump_stack_lvl+0x168/0x230 [ 670.889161][ T6571] ? show_regs_print_info+0x20/0x20 [ 670.894438][ T6571] ? load_image+0x3b0/0x3b0 [ 670.899004][ T6571] sysfs_warn_dup+0x8a/0xa0 [ 670.903528][ T6571] sysfs_do_create_link_sd+0xc0/0x110 [ 670.908926][ T6571] device_add+0x7ed/0xfb0 [ 670.913317][ T6571] wiphy_register+0x1d67/0x2b20 [ 670.918237][ T6571] ? cfg80211_event_work+0x40/0x40 [ 670.923381][ T6571] ? minstrel_ht_alloc+0x808/0x980 [ 670.928546][ T6571] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 670.934663][ T6571] ieee80211_register_hw+0x29b1/0x39d0 [ 670.940191][ T6571] ? ieee80211_tasklet_handler+0x20/0x20 [ 670.945954][ T6571] ? rcu_is_watching+0x11/0xa0 [ 670.950753][ T6571] ? memset+0x1e/0x40 [ 670.954765][ T6571] ? hrtimer_init+0x10c/0x220 [ 670.959474][ T6571] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 670.965277][ T6571] hwsim_new_radio_nl+0xa6f/0xc40 [ 670.970381][ T6571] genl_rcv_msg+0xbc6/0xf40 [ 670.974935][ T6571] ? genl_bind+0x370/0x370 [ 670.979392][ T6571] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 670.985139][ T6571] ? verify_lock_unused+0x140/0x140 [ 670.990374][ T6571] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 670.996136][ T6571] ? perf_trace_lock+0x2ec/0x370 [ 671.001113][ T6571] ? hwsim_tx_info_frame_received_nl+0x1010/0x1010 [ 671.007765][ T6571] netlink_rcv_skb+0x1e0/0x430 [ 671.012559][ T6571] ? genl_bind+0x370/0x370 [ 671.017015][ T6571] ? netlink_ack+0xb60/0xb60 [ 671.021644][ T6571] ? __lock_acquire+0x7c60/0x7c60 [ 671.026795][ T6571] ? preempt_count_add+0x8d/0x190 [ 671.031941][ T6571] ? down_read+0x1aa/0x2e0 [ 671.036393][ T6571] genl_rcv+0x24/0x40 [ 671.040395][ T6571] netlink_unicast+0x774/0x920 [ 671.045221][ T6571] netlink_sendmsg+0x8ab/0xbc0 [ 671.050048][ T6571] ? netlink_getsockopt+0x560/0x560 [ 671.055281][ T6571] ? aa_sock_msg_perm+0x94/0x150 [ 671.060249][ T6571] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 671.065583][ T6571] ? security_socket_sendmsg+0x7c/0xa0 [ 671.071065][ T6571] ? netlink_getsockopt+0x560/0x560 [ 671.076289][ T6571] ____sys_sendmsg+0x5a2/0x8c0 [ 671.081092][ T6571] ? memset+0x1e/0x40 [ 671.085100][ T6571] ? __sys_sendmsg_sock+0x30/0x30 [ 671.090173][ T6571] ? import_iovec+0x6f/0xa0 [ 671.094713][ T6571] ___sys_sendmsg+0x1f0/0x260 [ 671.099442][ T6571] ? __sys_sendmsg+0x250/0x250 [ 671.104258][ T6571] ? trace_event_raw_event_lock+0x250/0x250 [ 671.110234][ T6571] ? __fdget+0x18b/0x210 [ 671.114538][ T6571] __se_sys_sendmsg+0x190/0x250 [ 671.119466][ T6571] ? __x64_sys_sendmsg+0x80/0x80 [ 671.124425][ T6571] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 671.130502][ T6571] ? lockdep_hardirqs_on+0x94/0x140 [ 671.135754][ T6571] do_syscall_64+0x4c/0xa0 [ 671.140241][ T6571] ? clear_bhb_loop+0x30/0x80 [ 671.144952][ T6571] ? clear_bhb_loop+0x30/0x80 [ 671.149710][ T6571] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 671.155635][ T6571] RIP: 0033:0x7f2d45998749 [ 671.160084][ T6571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.179803][ T6571] RSP: 002b:00007f2d43bff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.188273][ T6571] RAX: ffffffffffffffda RBX: 00007f2d45beefa0 RCX: 00007f2d45998749 [ 671.196276][ T6571] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 671.204281][ T6571] RBP: 00007f2d45a1cf91 R08: 0000000000000000 R09: 0000000000000000 [ 671.212301][ T6571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.220298][ T6571] R13: 00007f2d45bef038 R14: 00007f2d45beefa0 R15: 00007fffbfcf6a38 [ 671.228333][ T6571] [ 672.316676][ T6572] netlink: 'syz.2.16760': attribute type 29 has an invalid length. [ 672.337839][ T6583] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.16767'. [ 672.379583][ T6586] netlink: 14 bytes leftover after parsing attributes in process `syz.4.16768'. [ 672.681991][ T6601] netlink: 'syz.4.16774': attribute type 27 has an invalid length. [ 673.079986][ T6620] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16786'. [ 673.139349][ T6620] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 674.111182][ T6665] netlink: 'syz.2.16809': attribute type 2 has an invalid length. [ 674.194237][ T6667] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 674.229582][ T6667] CPU: 1 PID: 6667 Comm: syz.1.16807 Not tainted syzkaller #0 [ 674.237216][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 674.247306][ T6667] Call Trace: [ 674.250617][ T6667] [ 674.253586][ T6667] dump_stack_lvl+0x168/0x230 [ 674.258321][ T6667] ? show_regs_print_info+0x20/0x20 [ 674.263559][ T6667] ? load_image+0x3b0/0x3b0 [ 674.268131][ T6667] sysfs_warn_dup+0x8a/0xa0 [ 674.272670][ T6667] sysfs_do_create_link_sd+0xc0/0x110 [ 674.278082][ T6667] device_add+0x7ed/0xfb0 [ 674.282495][ T6667] wiphy_register+0x1d67/0x2b20 [ 674.287422][ T6667] ? cfg80211_event_work+0x40/0x40 [ 674.292565][ T6667] ? minstrel_ht_alloc+0x808/0x980 [ 674.297719][ T6667] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 674.303838][ T6667] ieee80211_register_hw+0x29b1/0x39d0 [ 674.309379][ T6667] ? ieee80211_tasklet_handler+0x20/0x20 [ 674.315095][ T6667] ? rcu_is_watching+0x11/0xa0 [ 674.319915][ T6667] ? memset+0x1e/0x40 [ 674.323933][ T6667] ? hrtimer_init+0x10c/0x220 [ 674.328657][ T6667] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 674.334463][ T6667] hwsim_new_radio_nl+0xa6f/0xc40 [ 674.339559][ T6667] genl_rcv_msg+0xbc6/0xf40 [ 674.344136][ T6667] ? genl_bind+0x370/0x370 [ 674.348616][ T6667] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 674.354372][ T6667] ? verify_lock_unused+0x140/0x140 [ 674.359624][ T6667] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 674.365403][ T6667] ? perf_trace_lock+0x2ec/0x370 [ 674.370396][ T6667] ? hwsim_tx_info_frame_received_nl+0x1010/0x1010 [ 674.376969][ T6667] netlink_rcv_skb+0x1e0/0x430 [ 674.381782][ T6667] ? genl_bind+0x370/0x370 [ 674.386244][ T6667] ? netlink_ack+0xb60/0xb60 [ 674.390884][ T6667] ? __lock_acquire+0x7c60/0x7c60 [ 674.395965][ T6667] ? preempt_count_add+0x8d/0x190 [ 674.401044][ T6667] ? down_read+0x1aa/0x2e0 [ 674.405506][ T6667] genl_rcv+0x24/0x40 [ 674.409521][ T6667] netlink_unicast+0x774/0x920 [ 674.414332][ T6667] netlink_sendmsg+0x8ab/0xbc0 [ 674.419141][ T6667] ? netlink_getsockopt+0x560/0x560 [ 674.424384][ T6667] ? aa_sock_msg_perm+0x94/0x150 [ 674.429367][ T6667] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 674.434683][ T6667] ? security_socket_sendmsg+0x7c/0xa0 [ 674.440168][ T6667] ? netlink_getsockopt+0x560/0x560 [ 674.445417][ T6667] ____sys_sendmsg+0x5a2/0x8c0 [ 674.450234][ T6667] ? memset+0x1e/0x40 [ 674.454250][ T6667] ? __sys_sendmsg_sock+0x30/0x30 [ 674.459334][ T6667] ? import_iovec+0x6f/0xa0 [ 674.463891][ T6667] ___sys_sendmsg+0x1f0/0x260 [ 674.468625][ T6667] ? __sys_sendmsg+0x250/0x250 [ 674.473466][ T6667] ? trace_event_raw_event_lock+0x250/0x250 [ 674.479456][ T6667] ? __fdget+0x18b/0x210 [ 674.483742][ T6667] __se_sys_sendmsg+0x190/0x250 [ 674.488648][ T6667] ? __x64_sys_sendmsg+0x80/0x80 [ 674.493615][ T6667] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 674.499671][ T6667] ? lockdep_hardirqs_on+0x94/0x140 [ 674.504928][ T6667] do_syscall_64+0x4c/0xa0 [ 674.509422][ T6667] ? clear_bhb_loop+0x30/0x80 [ 674.514153][ T6667] ? clear_bhb_loop+0x30/0x80 [ 674.518877][ T6667] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 674.524801][ T6667] RIP: 0033:0x7f60f10af749 [ 674.529252][ T6667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.548895][ T6667] RSP: 002b:00007f60ef316038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.557349][ T6667] RAX: ffffffffffffffda RBX: 00007f60f1305fa0 RCX: 00007f60f10af749 [ 674.565359][ T6667] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 674.573372][ T6667] RBP: 00007f60f1133f91 R08: 0000000000000000 R09: 0000000000000000 [ 674.581380][ T6667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.589388][ T6667] R13: 00007f60f1306038 R14: 00007f60f1305fa0 R15: 00007ffd16b2b988 [ 674.597431][ T6667] [ 675.148072][ T6696] __nla_validate_parse: 2 callbacks suppressed [ 675.148094][ T6696] netlink: 14 bytes leftover after parsing attributes in process `syz.2.16822'. [ 675.437015][ T6712] netlink: 'syz.2.16829': attribute type 11 has an invalid length. [ 675.456589][ T6712] netlink: 140 bytes leftover after parsing attributes in process `syz.2.16829'. [ 675.821852][ T6726] netlink: 'syz.4.16834': attribute type 4 has an invalid length. [ 675.906233][ T6726] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.16834'. [ 676.954470][ T6787] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.16862'. [ 677.769000][ T6805] netlink: 'syz.1.16882': attribute type 2 has an invalid length. [ 677.814947][ T6805] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.16882'. [ 678.579304][ T6852] netlink: 'syz.4.16894': attribute type 2 has an invalid length. [ 678.627946][ T6852] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.16894'. [ 679.537604][ T6902] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.16918'. [ 679.979559][ T6929] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.16932'. [ 680.636907][ T6956] delete_channel: no stack [ 680.754572][ T6962] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.16946'. [ 681.396139][ T6968] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.16949'. [ 681.415878][ T6974] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16960'. [ 681.436765][ T6968] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.16949'. [ 681.590582][ T6986] [ 681.592966][ T6986] ====================================================== [ 681.600006][ T6986] WARNING: possible circular locking dependency detected [ 681.607022][ T6986] syzkaller #0 Not tainted [ 681.611422][ T6986] ------------------------------------------------------ [ 681.618534][ T6986] syz.2.16959/6986 is trying to acquire lock: [ 681.624587][ T6986] ffff8880739e3238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 681.633460][ T6986] [ 681.633460][ T6986] but task is already holding lock: [ 681.640822][ T6986] ffff8880b903a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 681.650288][ T6986] [ 681.650288][ T6986] which lock already depends on the new lock. [ 681.650288][ T6986] [ 681.660683][ T6986] [ 681.660683][ T6986] the existing dependency chain (in reverse order) is: [ 681.669689][ T6986] [ 681.669689][ T6986] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 681.676991][ T6986] _raw_spin_lock_nested+0x2e/0x40 [ 681.682630][ T6986] raw_spin_rq_lock_nested+0x26/0x140 [ 681.688549][ T6986] task_fork_fair+0x5c/0x350 [ 681.693657][ T6986] sched_cgroup_fork+0x2c6/0x320 [ 681.699119][ T6986] copy_process+0x22d1/0x3e00 [ 681.704307][ T6986] kernel_clone+0x219/0x930 [ 681.709326][ T6986] kernel_thread+0xc8/0x120 [ 681.714337][ T6986] rest_init+0x21/0x330 [ 681.719023][ T6986] start_kernel+0x486/0x530 [ 681.724039][ T6986] secondary_startup_64_no_verify+0xb1/0xbb [ 681.730445][ T6986] [ 681.730445][ T6986] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 681.737727][ T6986] _raw_spin_lock_irqsave+0xa4/0xf0 [ 681.743438][ T6986] try_to_wake_up+0x5c/0x1050 [ 681.748650][ T6986] __wake_up_common+0x2a4/0x4e0 [ 681.754016][ T6986] __wake_up+0x108/0x180 [ 681.758770][ T6986] tty_port_default_wakeup+0xa5/0xf0 [ 681.764564][ T6986] serial8250_tx_chars+0x629/0x830 [ 681.770190][ T6986] serial8250_handle_irq+0x519/0x610 [ 681.775986][ T6986] serial8250_default_handle_irq+0xb4/0x1a0 [ 681.782390][ T6986] serial8250_interrupt+0x9b/0x1c0 [ 681.788010][ T6986] __handle_irq_event_percpu+0x291/0x9b0 [ 681.794164][ T6986] handle_irq_event+0xa5/0x220 [ 681.799523][ T6986] handle_edge_irq+0x243/0xb20 [ 681.804796][ T6986] __common_interrupt+0xd7/0x1e0 [ 681.810246][ T6986] common_interrupt+0xb0/0xd0 [ 681.815432][ T6986] asm_common_interrupt+0x22/0x40 [ 681.820969][ T6986] default_idle+0xb/0x10 [ 681.825718][ T6986] default_idle_call+0x81/0xc0 [ 681.830994][ T6986] do_idle+0x21b/0x5b0 [ 681.835580][ T6986] cpu_startup_entry+0x14/0x20 [ 681.840859][ T6986] start_secondary+0x31f/0x430 [ 681.846138][ T6986] secondary_startup_64_no_verify+0xb1/0xbb [ 681.852544][ T6986] [ 681.852544][ T6986] -> #3 (&tty->write_wait){-.-.}-{2:2}: [ 681.860263][ T6986] _raw_spin_lock_irqsave+0xa4/0xf0 [ 681.865985][ T6986] __wake_up+0xed/0x180 [ 681.870666][ T6986] tty_port_default_wakeup+0xa5/0xf0 [ 681.876462][ T6986] serial8250_tx_chars+0x629/0x830 [ 681.882089][ T6986] serial8250_handle_irq+0x519/0x610 [ 681.887909][ T6986] serial8250_default_handle_irq+0xb4/0x1a0 [ 681.894314][ T6986] serial8250_interrupt+0x9b/0x1c0 [ 681.899940][ T6986] __handle_irq_event_percpu+0x291/0x9b0 [ 681.906084][ T6986] handle_irq_event+0xa5/0x220 [ 681.911383][ T6986] handle_edge_irq+0x243/0xb20 [ 681.916657][ T6986] __common_interrupt+0xd7/0x1e0 [ 681.922102][ T6986] common_interrupt+0xb0/0xd0 [ 681.927307][ T6986] asm_common_interrupt+0x22/0x40 [ 681.932843][ T6986] default_idle+0xb/0x10 [ 681.937593][ T6986] default_idle_call+0x81/0xc0 [ 681.942869][ T6986] do_idle+0x21b/0x5b0 [ 681.947450][ T6986] cpu_startup_entry+0x14/0x20 [ 681.952724][ T6986] start_secondary+0x31f/0x430 [ 681.957998][ T6986] secondary_startup_64_no_verify+0xb1/0xbb [ 681.964401][ T6986] [ 681.964401][ T6986] -> #2 (&port_lock_key){-.-.}-{2:2}: [ 681.971988][ T6986] _raw_spin_lock_irqsave+0xa4/0xf0 [ 681.977695][ T6986] serial8250_console_write+0x170/0xf80 [ 681.983749][ T6986] console_unlock+0xc86/0x1200 [ 681.989018][ T6986] vprintk_emit+0xc0/0x150 [ 681.993943][ T6986] _printk+0xcc/0x110 [ 681.998433][ T6986] register_console+0x682/0x960 [ 682.003790][ T6986] univ8250_console_init+0x41/0x50 [ 682.009411][ T6986] console_init+0x177/0x5d0 [ 682.014424][ T6986] start_kernel+0x2f9/0x530 [ 682.019446][ T6986] secondary_startup_64_no_verify+0xb1/0xbb [ 682.025849][ T6986] [ 682.025849][ T6986] -> #1 (console_owner){-...}-{0:0}: [ 682.033309][ T6986] console_lock_spinning_enable+0x51/0x60 [ 682.039537][ T6986] console_unlock+0x9f8/0x1200 [ 682.044808][ T6986] vprintk_emit+0xc0/0x150 [ 682.049734][ T6986] _printk+0xcc/0x110 [ 682.054230][ T6986] debug_objects_oom+0x89/0x2f0 [ 682.059592][ T6986] debug_object_activate+0x409/0x480 [ 682.065387][ T6986] kvfree_call_rcu+0xb5/0x7c0 [ 682.070572][ T6986] trie_update_elem+0x86e/0xc50 [ 682.075968][ T6986] bpf_map_update_value+0x57d/0x650 [ 682.081677][ T6986] generic_map_update_batch+0x525/0x7c0 [ 682.087730][ T6986] bpf_map_do_batch+0x466/0x600 [ 682.093117][ T6986] __sys_bpf+0x601/0x670 [ 682.097870][ T6986] __x64_sys_bpf+0x78/0x90 [ 682.102805][ T6986] do_syscall_64+0x4c/0xa0 [ 682.107735][ T6986] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 682.114135][ T6986] [ 682.114135][ T6986] -> #0 (&trie->lock){....}-{2:2}: [ 682.121421][ T6986] __lock_acquire+0x2c33/0x7c60 [ 682.126920][ T6986] lock_acquire+0x197/0x3f0 [ 682.131951][ T6986] _raw_spin_lock_irqsave+0xa4/0xf0 [ 682.137745][ T6986] trie_delete_elem+0x90/0x710 [ 682.143018][ T6986] bpf_prog_623e6f2ef079c172+0x4a/0x54c [ 682.149074][ T6986] bpf_trace_run2+0x15b/0x2d0 [ 682.154344][ T6986] trace_tlb_flush+0xe6/0x110 [ 682.159527][ T6986] switch_mm_irqs_off+0x6e3/0x9a0 [ 682.165057][ T6986] __schedule+0x1024/0x4390 [ 682.170071][ T6986] preempt_schedule_common+0x82/0xd0 [ 682.175864][ T6986] preempt_schedule+0xa7/0xb0 [ 682.181050][ T6986] preempt_schedule_thunk+0x16/0x18 [ 682.186757][ T6986] _raw_spin_unlock+0x36/0x40 [ 682.191944][ T6986] __text_poke+0x64b/0x7b0 [ 682.196868][ T6986] text_poke_bp_batch+0x138/0x7c0 [ 682.202495][ T6986] text_poke_finish+0x16/0x30 [ 682.207686][ T6986] arch_jump_label_transform_apply+0x13/0x20 [ 682.214176][ T6986] static_key_enable_cpuslocked+0x11f/0x240 [ 682.220583][ T6986] static_key_enable+0x16/0x20 [ 682.225858][ T6986] tracepoint_add_func+0x83b/0x9a0 [ 682.231483][ T6986] tracepoint_probe_register_prio_may_exist+0x5c/0x90 [ 682.238754][ T6986] bpf_raw_tracepoint_open+0x69d/0x780 [ 682.244724][ T6986] __sys_bpf+0x48b/0x670 [ 682.249490][ T6986] __x64_sys_bpf+0x78/0x90 [ 682.254413][ T6986] do_syscall_64+0x4c/0xa0 [ 682.259338][ T6986] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 682.265748][ T6986] [ 682.265748][ T6986] other info that might help us debug this: [ 682.265748][ T6986] [ 682.275961][ T6986] Chain exists of: [ 682.275961][ T6986] &trie->lock --> &p->pi_lock --> &rq->__lock [ 682.275961][ T6986] [ 682.287932][ T6986] Possible unsafe locking scenario: [ 682.287932][ T6986] [ 682.295381][ T6986] CPU0 CPU1 [ 682.300730][ T6986] ---- ---- [ 682.306084][ T6986] lock(&rq->__lock); [ 682.310140][ T6986] lock(&p->pi_lock); [ 682.316722][ T6986] lock(&rq->__lock); [ 682.323294][ T6986] lock(&trie->lock); [ 682.327348][ T6986] [ 682.327348][ T6986] *** DEADLOCK *** [ 682.327348][ T6986] [ 682.335473][ T6986] 6 locks held by syz.2.16959/6986: [ 682.340652][ T6986] #0: ffffffff8c15c4c8 (tracepoints_mutex){+.+.}-{3:3}, at: tracepoint_probe_register_prio_may_exist+0x40/0x90 [ 682.352466][ T6986] #1: ffffffff8bfbaed0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0xe/0x20 [ 682.362109][ T6986] #2: ffffffff8c1a85a8 (jump_label_mutex){+.+.}-{3:3}, at: static_key_enable_cpuslocked+0xc2/0x240 [ 682.372873][ T6986] #3: ffffffff8bfd1f88 (text_mutex){+.+.}-{3:3}, at: arch_jump_label_transform_apply+0xe/0x20 [ 682.383214][ T6986] #4: ffff8880b903a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 682.393123][ T6986] #5: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 682.402415][ T6986] [ 682.402415][ T6986] stack backtrace: [ 682.408287][ T6986] CPU: 0 PID: 6986 Comm: syz.2.16959 Not tainted syzkaller #0 [ 682.415731][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 682.425772][ T6986] Call Trace: [ 682.429039][ T6986] [ 682.431962][ T6986] dump_stack_lvl+0x168/0x230 [ 682.436628][ T6986] ? load_image+0x3b0/0x3b0 [ 682.441116][ T6986] ? show_regs_print_info+0x20/0x20 [ 682.446323][ T6986] ? print_circular_bug+0x12b/0x1a0 [ 682.451513][ T6986] check_noncircular+0x274/0x310 [ 682.456439][ T6986] ? add_chain_block+0x940/0x940 [ 682.461366][ T6986] ? lockdep_lock+0xdc/0x1e0 [ 682.465945][ T6986] ? lock_release+0xba/0x870 [ 682.470528][ T6986] ? mark_lock+0x94/0x320 [ 682.474852][ T6986] __lock_acquire+0x2c33/0x7c60 [ 682.479696][ T6986] ? unwind_next_frame+0x1296/0x1d90 [ 682.484981][ T6986] ? __lock_acquire+0x12d9/0x7c60 [ 682.489996][ T6986] ? verify_lock_unused+0x140/0x140 [ 682.495198][ T6986] lock_acquire+0x197/0x3f0 [ 682.499695][ T6986] ? trie_delete_elem+0x90/0x710 [ 682.504626][ T6986] ? read_lock_is_recursive+0x10/0x10 [ 682.509994][ T6986] _raw_spin_lock_irqsave+0xa4/0xf0 [ 682.515181][ T6986] ? trie_delete_elem+0x90/0x710 [ 682.520108][ T6986] ? _raw_spin_lock+0x40/0x40 [ 682.524775][ T6986] trie_delete_elem+0x90/0x710 [ 682.529529][ T6986] ? __lock_acquire+0x7c60/0x7c60 [ 682.534549][ T6986] bpf_prog_623e6f2ef079c172+0x4a/0x54c [ 682.540082][ T6986] bpf_trace_run2+0x15b/0x2d0 [ 682.544749][ T6986] ? bpf_trace_run1+0x2d0/0x2d0 [ 682.549586][ T6986] ? trace_tlb_flush+0x4d/0x110 [ 682.554427][ T6986] trace_tlb_flush+0xe6/0x110 [ 682.559094][ T6986] switch_mm_irqs_off+0x6e3/0x9a0 [ 682.564106][ T6986] ? switch_mm+0x120/0x120 [ 682.568510][ T6986] ? psi_task_switch+0x495/0x810 [ 682.573456][ T6986] __schedule+0x1024/0x4390 [ 682.577958][ T6986] ? __lock_acquire+0x7c60/0x7c60 [ 682.582976][ T6986] ? release_firmware_map_entry+0x190/0x190 [ 682.588858][ T6986] ? mark_lock+0x94/0x320 [ 682.593181][ T6986] ? preempt_schedule+0xa7/0xb0 [ 682.598023][ T6986] preempt_schedule_common+0x82/0xd0 [ 682.603298][ T6986] ? trace_tlb_flush+0x6/0x110 [ 682.608052][ T6986] preempt_schedule+0xa7/0xb0 [ 682.612748][ T6986] ? schedule_preempt_disabled+0x20/0x20 [ 682.618391][ T6986] ? __lock_acquire+0x7c60/0x7c60 [ 682.623444][ T6986] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 682.629609][ T6986] preempt_schedule_thunk+0x16/0x18 [ 682.634802][ T6986] _raw_spin_unlock+0x36/0x40 [ 682.639472][ T6986] __text_poke+0x64b/0x7b0 [ 682.643896][ T6986] ? trace_tlb_flush+0x6/0x110 [ 682.648647][ T6986] ? text_poke+0x90/0x90 [ 682.652882][ T6986] ? arch_jump_label_transform_apply+0xe/0x20 [ 682.658943][ T6986] ? trace_tlb_flush+0x6/0x110 [ 682.663698][ T6986] text_poke_bp_batch+0x138/0x7c0 [ 682.668728][ T6986] ? mutex_unlock+0x10/0x10 [ 682.673223][ T6986] ? text_poke_loc_init+0x570/0x570 [ 682.678418][ T6986] ? arch_jump_label_transform_queue+0x76/0xd0 [ 682.684569][ T6986] ? __jump_label_update+0x36c/0x390 [ 682.689847][ T6986] text_poke_finish+0x16/0x30 [ 682.694512][ T6986] arch_jump_label_transform_apply+0x13/0x20 [ 682.700482][ T6986] static_key_enable_cpuslocked+0x11f/0x240 [ 682.706367][ T6986] ? perf_trace_tlb_flush+0x340/0x340 [ 682.711732][ T6986] static_key_enable+0x16/0x20 [ 682.716486][ T6986] tracepoint_add_func+0x83b/0x9a0 [ 682.721596][ T6986] ? perf_trace_tlb_flush+0x340/0x340 [ 682.726958][ T6986] tracepoint_probe_register_prio_may_exist+0x5c/0x90 [ 682.733711][ T6986] ? perf_trace_tlb_flush+0x340/0x340 [ 682.739076][ T6986] bpf_raw_tracepoint_open+0x69d/0x780 [ 682.744532][ T6986] ? bpf_obj_get_info_by_fd+0x2a80/0x2a80 [ 682.750250][ T6986] ? __might_fault+0xb3/0x110 [ 682.754917][ T6986] ? bpf_lsm_bpf+0x5/0x10 [ 682.759238][ T6986] ? security_bpf+0x7a/0xa0 [ 682.763732][ T6986] __sys_bpf+0x48b/0x670 [ 682.767966][ T6986] ? bpf_link_show_fdinfo+0x340/0x340 [ 682.773329][ T6986] ? vtime_user_exit+0x2dc/0x400 [ 682.778260][ T6986] __x64_sys_bpf+0x78/0x90 [ 682.782670][ T6986] do_syscall_64+0x4c/0xa0 [ 682.787075][ T6986] ? clear_bhb_loop+0x30/0x80 [ 682.791740][ T6986] ? clear_bhb_loop+0x30/0x80 [ 682.796407][ T6986] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 682.802322][ T6986] RIP: 0033:0x7fdc5fb99749 [ 682.806725][ T6986] Code: Unable to access opcode bytes at RIP 0x7fdc5fb9971f. [ 682.814073][ T6986] RSP: 002b:00007fdc5de00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 682.822564][ T6986] RAX: ffffffffffffffda RBX: 00007fdc5fdeffa0 RCX: 00007fdc5fb99749 [ 682.830527][ T6986] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 682.838485][ T6986] RBP: 00007fdc5fc1df91 R08: 0000000000000000 R09: 0000000000000000 [ 682.846460][ T6986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.854420][ T6986] R13: 00007fdc5fdf0038 R14: 00007fdc5fdeffa0 R15: 00007ffc1105d1e8 [ 682.862397][ T6986] [ 685.846362][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.852688][ T1421] ieee802154 phy1 wpan1: encryption failed: -22