last executing test programs: 1.92822011s ago: executing program 2 (id=21064): r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 1.832693602s ago: executing program 2 (id=21076): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0xfffe, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="81", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="180000000000000084000000000000004805dc00000009002000"], 0x38}, 0x0) 971.127475ms ago: executing program 2 (id=21081): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200001b00000000000000b296ffff850000004100000095000000000000003af1f53778422dccc1c3e37f5ed9fef666387df316ddb9043b838619eb042c080f5e94778ec365075dd75aaaa969f99760a84a18cb0534ba5f8ac821babe107f0000004c5b4692af9eac983e8f8ff0d856912643dddc1a5d2b904a5b066005b2342eccfad67243af92826de6e0e7ae1025806b557b7c98c031a61dd9f91b1c71b45c29d26439c985eada75"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 827.530157ms ago: executing program 2 (id=21085): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000f100008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 662.85032ms ago: executing program 2 (id=21090): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="950000000000ffffff9500000000886268a3000000000000005d"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0xc}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001140)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x74, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x29, 0x36}}, @ip_pktinfo={{0x1c, 0x4c000000, 0x8, {0x0, @broadcast, @remote}}}], 0x58}, 0x0) 654.16142ms ago: executing program 0 (id=21091): r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 621.777871ms ago: executing program 4 (id=21092): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/136, 0x88}], 0x1, &(0x7f0000002f40)=""/244, 0xf4}, 0x0) close(r1) 620.90754ms ago: executing program 3 (id=21102): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc) 539.240982ms ago: executing program 2 (id=21093): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0xfffe, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="81", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="180000000000000084000000000000004805dc00000009002000"], 0x38}, 0x0) 526.166492ms ago: executing program 0 (id=21094): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) 511.646542ms ago: executing program 3 (id=21095): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xff12}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x0, &(0x7f0000000180)="a06ad876d56a0064d082778c3938", 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 439.210063ms ago: executing program 0 (id=21096): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0) 439.095353ms ago: executing program 4 (id=21097): r0 = socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 373.166264ms ago: executing program 3 (id=21098): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='GPL\x00'}, 0x80) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000004c0)=r1, 0x4) 372.755784ms ago: executing program 4 (id=21099): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.stat\x00', 0x60ff, 0x8cffffff) 314.245456ms ago: executing program 3 (id=21100): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x1e, 0x0, 0x0) 310.118746ms ago: executing program 0 (id=21101): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 294.969096ms ago: executing program 1 (id=21103): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f00000000c0), 0x0}, 0x20) 294.246946ms ago: executing program 4 (id=21104): r0 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000008003501"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 207.286547ms ago: executing program 1 (id=21105): r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 206.911137ms ago: executing program 4 (id=21106): r0 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, &(0x7f00000001c0), 0x4) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) 167.890048ms ago: executing program 3 (id=21107): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, @perf_bp={0x0, 0xe}, 0x101000, 0x7, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xfc41}], 0x1}, 0x40000) 167.336568ms ago: executing program 1 (id=21108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 120.891868ms ago: executing program 0 (id=21109): perf_event_open(&(0x7f0000000180)={0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @private0}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x0) 120.655128ms ago: executing program 1 (id=21110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) 75.480189ms ago: executing program 0 (id=21111): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) 70.869949ms ago: executing program 1 (id=21112): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 616.14µs ago: executing program 3 (id=21113): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 468.57µs ago: executing program 4 (id=21114): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 0s ago: executing program 1 (id=21123): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) kernel console output (not intermixed with test programs): alid length. [ 458.952017][T29712] netlink: 'syz.4.12455': attribute type 1 has an invalid length. [ 458.959961][T29712] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12455'. [ 459.030661][T29720] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12460'. [ 459.212604][T29737] netlink: 'syz.0.12475': attribute type 2 has an invalid length. [ 459.221530][T29737] netlink: 'syz.0.12475': attribute type 2 has an invalid length. [ 459.229411][T29737] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12475'. [ 461.946022][T29965] validate_nla: 11 callbacks suppressed [ 461.946038][T29965] netlink: 'syz.2.12583': attribute type 7 has an invalid length. [ 462.136568][T29980] netlink: 'syz.1.12591': attribute type 21 has an invalid length. [ 462.298616][T29998] netlink: 'syz.0.12599': attribute type 7 has an invalid length. [ 462.537506][T30014] netlink: 'syz.0.12605': attribute type 16 has an invalid length. [ 462.664158][T30020] netlink: 'syz.3.12607': attribute type 39 has an invalid length. [ 462.769024][T30024] __nla_validate_parse: 22 callbacks suppressed [ 462.769040][T30024] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12610'. [ 463.136995][T30054] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12629'. [ 463.556650][T30112] netlink: 'syz.4.12654': attribute type 1 has an invalid length. [ 463.603614][T30112] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.12654'. [ 463.670148][T30123] netlink: 'syz.2.12662': attribute type 21 has an invalid length. [ 463.860055][T30144] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.12671'. [ 464.088604][T30166] netlink: 'syz.2.12682': attribute type 4 has an invalid length. [ 464.108781][T30166] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12682'. [ 464.501124][T30214] netlink: 'syz.3.12704': attribute type 1 has an invalid length. [ 464.533853][T30214] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.12704'. [ 464.591159][T30221] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.12721'. [ 464.863600][T30253] netlink: 'syz.0.12725': attribute type 1 has an invalid length. [ 464.910249][T30253] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.12725'. [ 465.078740][T30275] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12735'. [ 465.117656][T30278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12737'. [ 467.176890][T30434] netlink: 'syz.3.12817': attribute type 10 has an invalid length. [ 467.452240][T30462] netlink: 'syz.3.12831': attribute type 3 has an invalid length. [ 467.779693][T30498] netlink: 'syz.0.12849': attribute type 3 has an invalid length. [ 467.805436][T30498] __nla_validate_parse: 10 callbacks suppressed [ 467.805451][T30498] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.12849'. [ 468.006061][T30520] netlink: 'syz.0.12856': attribute type 3 has an invalid length. [ 468.018613][T30520] netlink: 'syz.0.12856': attribute type 1 has an invalid length. [ 468.040138][T30520] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12856'. [ 468.076392][T30528] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12861'. [ 468.086194][T30526] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.12857'. [ 468.203523][T30537] netlink: 'syz.2.12865': attribute type 10 has an invalid length. [ 468.212084][T30537] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12865'. [ 468.280124][T30546] netlink: 180 bytes leftover after parsing attributes in process `syz.0.12871'. [ 468.329954][T30550] netlink: 'syz.4.12874': attribute type 3 has an invalid length. [ 468.370828][T30550] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12874'. [ 468.433651][T30564] netlink: 'syz.3.12879': attribute type 3 has an invalid length. [ 468.443852][T30564] netlink: 'syz.3.12879': attribute type 1 has an invalid length. [ 468.459647][T30564] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12879'. [ 468.472052][T30563] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.12881'. [ 468.580450][T30578] netlink: 180 bytes leftover after parsing attributes in process `syz.2.12888'. [ 468.610776][T30580] netlink: 'syz.0.12889': attribute type 21 has an invalid length. [ 470.097646][T30698] device hsr_slave_0 left promiscuous mode [ 470.135673][T30698] device hsr_slave_1 left promiscuous mode [ 470.178405][T30705] delete_channel: no stack [ 470.182933][T30705] delete_channel: no stack [ 471.866292][T30816] delete_channel: no stack [ 471.879052][T30816] delete_channel: no stack [ 472.229812][T30862] validate_nla: 21 callbacks suppressed [ 472.229829][T30862] netlink: 'syz.2.13023': attribute type 1 has an invalid length. [ 472.307059][T30868] delete_channel: no stack [ 472.338236][T30868] delete_channel: no stack [ 472.592166][T30898] netlink: 'syz.4.13043': attribute type 10 has an invalid length. [ 472.620644][T30900] netlink: 'syz.0.13045': attribute type 1 has an invalid length. [ 472.623591][T30898] device hsr_slave_0 left promiscuous mode [ 472.653073][T30898] device hsr_slave_1 left promiscuous mode [ 473.185174][T30939] netlink: 'syz.2.13064': attribute type 10 has an invalid length. [ 473.217334][T30939] device hsr_slave_0 left promiscuous mode [ 473.328294][T30939] device hsr_slave_1 left promiscuous mode [ 474.604129][T31006] __nla_validate_parse: 22 callbacks suppressed [ 474.604145][T31006] netlink: 164 bytes leftover after parsing attributes in process `syz.0.13095'. [ 474.690942][T31008] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.13096'. [ 474.860386][T31019] netlink: 'syz.0.13102': attribute type 1 has an invalid length. [ 475.906779][T31041] netlink: 'syz.2.13111': attribute type 9 has an invalid length. [ 475.919886][T31042] netlink: 'syz.1.13109': attribute type 10 has an invalid length. [ 475.940154][T31041] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.13111'. [ 475.951805][T31042] device hsr_slave_0 left promiscuous mode [ 475.979349][T31042] device hsr_slave_1 left promiscuous mode [ 476.059232][T31053] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13117'. [ 476.260140][T31069] netlink: 67 bytes leftover after parsing attributes in process `syz.0.13125'. [ 476.285261][T31069] IPv6: NLM_F_CREATE should be specified when creating new route [ 476.293844][T31069] IPv6: Can't replace route, no match found [ 476.419038][T31088] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13133'. [ 476.451351][T31090] netlink: 'syz.3.13131': attribute type 10 has an invalid length. [ 476.486447][T31090] device hsr_slave_0 left promiscuous mode [ 476.494250][T31090] device hsr_slave_1 left promiscuous mode [ 476.565162][T31102] netlink: 'syz.0.13139': attribute type 3 has an invalid length. [ 476.581657][T31102] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13139'. [ 476.620228][T31105] netlink: 67 bytes leftover after parsing attributes in process `syz.4.13142'. [ 476.643790][T31105] IPv6: NLM_F_CREATE should be specified when creating new route [ 476.662024][T31105] IPv6: Can't replace route, no match found [ 476.696690][T31112] netlink: 'syz.2.13146': attribute type 39 has an invalid length. [ 476.781565][T31120] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13150'. [ 476.992417][T31144] netlink: 67 bytes leftover after parsing attributes in process `syz.2.13159'. [ 477.009981][T31144] IPv6: NLM_F_CREATE should be specified when creating new route [ 477.018901][T31144] IPv6: Can't replace route, no match found [ 477.156051][T31158] sctp: [Deprecated]: syz.4.13167 (pid 31158) Use of int in max_burst socket option deprecated. [ 477.156051][T31158] Use struct sctp_assoc_value instead [ 477.510761][T31188] validate_nla: 4 callbacks suppressed [ 477.510776][T31188] netlink: 'syz.3.13191': attribute type 10 has an invalid length. [ 477.661147][T31188] team0 (unregistering): Port device team_slave_0 removed [ 477.718480][T31188] team0 (unregistering): Port device team_slave_1 removed [ 477.741118][T31188] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.760268][T31188] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.780481][T31188] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.809300][T31188] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.675741][T31185] ODEBUG: Out of memory. ODEBUG disabled [ 478.698872][T31188] team0 (unregistering): Port device geneve1 removed [ 478.767426][T31209] netlink: 'syz.1.13202': attribute type 10 has an invalid length. [ 479.172794][T31211] netlink: 'syz.4.13190': attribute type 39 has an invalid length. [ 479.275264][T31221] netlink: 'syz.3.13198': attribute type 1 has an invalid length. [ 479.378297][T31227] netlink: 'syz.4.13201': attribute type 9 has an invalid length. [ 479.907256][T31253] netlink: 'syz.4.13215': attribute type 10 has an invalid length. [ 480.215364][T31271] netlink: 'syz.1.13223': attribute type 9 has an invalid length. [ 480.224663][T31271] __nla_validate_parse: 5 callbacks suppressed [ 480.224676][T31271] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.13223'. [ 480.493477][T31298] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13247'. [ 480.608692][T31303] netlink: 'syz.4.13236': attribute type 39 has an invalid length. [ 480.733912][T31314] netlink: 'syz.2.13245': attribute type 10 has an invalid length. [ 480.777374][T31319] netlink: 'syz.0.13248': attribute type 9 has an invalid length. [ 480.801148][T31319] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.13248'. [ 480.978660][T31329] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13252'. [ 481.151165][T31337] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13256'. [ 481.319065][T31344] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13261'. [ 481.578093][T31359] team0 (unregistering): Port device team_slave_0 removed [ 481.585304][T31367] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.13271'. [ 481.626701][T31359] team0 (unregistering): Port device team_slave_1 removed [ 481.688378][T31359] team0 (unregistering): Port device veth0_to_bond removed [ 481.728771][T31359] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.751491][T31359] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.761085][T31359] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.772509][T31359] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.813095][T31359] team0 (unregistering): Port device geneve1 removed [ 482.785885][T31398] netlink: 830 bytes leftover after parsing attributes in process `syz.4.13285'. [ 482.825794][T31400] validate_nla: 4 callbacks suppressed [ 482.825810][T31400] netlink: 'syz.0.13288': attribute type 21 has an invalid length. [ 482.861007][T31400] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13288'. [ 483.199560][T31440] netlink: 'syz.4.13306': attribute type 21 has an invalid length. [ 483.240029][T31440] netlink: 156 bytes leftover after parsing attributes in process `syz.4.13306'. [ 483.344366][T31455] netlink: 'syz.4.13315': attribute type 10 has an invalid length. [ 483.401646][T31455] team0 (unregistering): Port device C removed [ 483.438583][T31455] team0 (unregistering): Port device team_slave_1 removed [ 483.484498][T31455] team0 (unregistering): Port device veth0_to_bond removed [ 483.515887][T31455] team0 (unregistering): Port device geneve1 removed [ 483.543094][T31462] netlink: 'syz.3.13319': attribute type 10 has an invalid length. [ 483.800549][T31482] netlink: 'syz.2.13325': attribute type 21 has an invalid length. [ 484.079095][T31513] netlink: 'syz.0.13341': attribute type 10 has an invalid length. [ 484.551989][T31549] netlink: 'syz.1.13361': attribute type 9 has an invalid length. [ 484.879659][T31575] netlink: 'syz.0.13374': attribute type 10 has an invalid length. [ 485.023552][T31585] netlink: 'syz.4.13379': attribute type 9 has an invalid length. [ 485.235557][T31599] netlink: 'syz.0.13385': attribute type 10 has an invalid length. [ 485.337273][T31599] team0 (unregistering): Port device team_slave_0 removed [ 485.400025][T31599] team0 (unregistering): Port device team_slave_1 removed [ 485.426838][T31599] team0 (unregistering): Port device geneve1 removed [ 485.493974][T31607] __nla_validate_parse: 8 callbacks suppressed [ 485.493990][T31607] netlink: 10 bytes leftover after parsing attributes in process `syz.1.13388'. [ 485.523141][T31617] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.13393'. [ 485.587677][T31619] netlink: 168 bytes leftover after parsing attributes in process `syz.4.13395'. [ 485.793518][T31642] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.13415'. [ 485.828443][T31647] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.13409'. [ 485.945857][T31651] team0 (unregistering): Port device C removed [ 485.967736][T31651] team0 (unregistering): Port device team_slave_1 removed [ 485.987570][T31651] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.006590][T31651] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.036287][T31651] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.064963][T31651] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.113984][T31651] team0 (unregistering): Port device geneve1 removed [ 486.525233][T31706] netlink: 10 bytes leftover after parsing attributes in process `syz.4.13447'. [ 486.623874][T31715] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13440'. [ 486.716888][T31721] netlink: 10 bytes leftover after parsing attributes in process `syz.2.13455'. [ 486.818893][T31733] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13451'. [ 486.893810][T31743] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13456'. [ 487.425191][T31798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 487.432495][T31798] IPv6: NLM_F_CREATE should be set when creating new route [ 487.439746][T31798] IPv6: NLM_F_CREATE should be set when creating new route [ 488.206976][T31862] sctp: [Deprecated]: syz.2.13515 (pid 31862) Use of int in maxseg socket option. [ 488.206976][T31862] Use struct sctp_assoc_value instead [ 488.415636][T31877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.422924][T31877] IPv6: NLM_F_CREATE should be set when creating new route [ 488.430183][T31877] IPv6: NLM_F_CREATE should be set when creating new route [ 488.437407][T31877] IPv6: NLM_F_CREATE should be set when creating new route [ 488.853299][T31918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.860576][T31918] IPv6: NLM_F_CREATE should be set when creating new route [ 488.867863][T31918] IPv6: NLM_F_CREATE should be set when creating new route [ 488.875068][T31918] IPv6: NLM_F_CREATE should be set when creating new route [ 489.017747][T31921] delete_channel: no stack [ 489.026540][T31924] validate_nla: 13 callbacks suppressed [ 489.026554][T31924] netlink: 'syz.1.13544': attribute type 21 has an invalid length. [ 489.246012][T31940] netlink: 'syz.2.13552': attribute type 5 has an invalid length. [ 489.284187][T31940] netlink: 'syz.2.13552': attribute type 15 has an invalid length. [ 489.446884][T31955] netlink: 'syz.2.13560': attribute type 16 has an invalid length. [ 489.468829][T31955] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 489.796754][T31983] netlink: 'syz.4.13574': attribute type 10 has an invalid length. [ 489.828654][T31983] netlink: 'syz.4.13574': attribute type 10 has an invalid length. [ 489.862201][T31991] netlink: 'syz.3.13578': attribute type 21 has an invalid length. [ 489.960354][T32002] netlink: 'syz.3.13582': attribute type 5 has an invalid length. [ 490.017534][T32002] netlink: 'syz.3.13582': attribute type 15 has an invalid length. [ 490.176002][T32026] sctp: [Deprecated]: syz.1.13595 (pid 32026) Use of int in maxseg socket option. [ 490.176002][T32026] Use struct sctp_assoc_value instead [ 490.213917][T32030] netlink: 'syz.4.13606': attribute type 5 has an invalid length. [ 490.312834][T32038] delete_channel: no stack [ 490.596048][T32068] __nla_validate_parse: 19 callbacks suppressed [ 490.596062][T32068] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13625'. [ 490.618766][T32071] delete_channel: no stack [ 490.688327][T32078] netlink: 76 bytes leftover after parsing attributes in process `syz.0.13618'. [ 490.846108][T32098] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13629'. [ 490.875599][T32098] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13629'. [ 490.922508][T32103] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13638'. [ 490.949621][T32110] netlink: 105084 bytes leftover after parsing attributes in process `syz.2.13634'. [ 490.952937][T32112] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13635'. [ 491.232234][T32143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13650'. [ 491.261802][T32143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13650'. [ 491.382332][T32160] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13668'. [ 491.480713][T32172] netlink: get zone limit has 4 unknown bytes [ 492.743312][T32269] netlink: get zone limit has 4 unknown bytes [ 493.234927][T32309] netlink: get zone limit has 4 unknown bytes [ 493.376018][T32318] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 494.053953][T32361] validate_nla: 19 callbacks suppressed [ 494.053970][T32361] netlink: 'syz.2.13751': attribute type 39 has an invalid length. [ 494.718041][T32403] netlink: 'syz.0.13770': attribute type 6 has an invalid length. [ 494.797700][T32409] netlink: 'syz.1.13774': attribute type 39 has an invalid length. [ 495.398766][T32444] netlink: 'syz.4.13792': attribute type 6 has an invalid length. [ 495.752378][T32462] __nla_validate_parse: 13 callbacks suppressed [ 495.752393][T32462] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.13800'. [ 496.024294][T32475] netlink: 'syz.4.13817': attribute type 21 has an invalid length. [ 496.073646][T32475] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13817'. [ 496.117385][T32475] netlink: 'syz.4.13817': attribute type 3 has an invalid length. [ 496.147504][T32475] netlink: 3 bytes leftover after parsing attributes in process `syz.4.13817'. [ 496.156883][T32483] netlink: 'syz.3.13808': attribute type 6 has an invalid length. [ 496.165207][T32483] netlink: 168 bytes leftover after parsing attributes in process `syz.3.13808'. [ 496.198794][T32489] netlink: 164 bytes leftover after parsing attributes in process `syz.2.13813'. [ 496.530349][T32519] netlink: 'syz.3.13828': attribute type 21 has an invalid length. [ 496.568347][T32519] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13828'. [ 496.586178][T32519] netlink: 'syz.3.13828': attribute type 3 has an invalid length. [ 496.601364][T32519] netlink: 3 bytes leftover after parsing attributes in process `syz.3.13828'. [ 497.056722][T32563] netlink: 'syz.0.13850': attribute type 21 has an invalid length. [ 497.082399][T32563] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13850'. [ 497.147959][T32563] netlink: 3 bytes leftover after parsing attributes in process `syz.0.13850'. [ 497.261417][T32589] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13861'. [ 497.856874][T32640] openvswitch: netlink: Key type 4112 is out of range max 29 [ 499.288531][T32739] openvswitch: netlink: Key type 4112 is out of range max 29 [ 499.434466][T32746] validate_nla: 6 callbacks suppressed [ 499.434483][T32746] netlink: 'syz.0.13940': attribute type 1 has an invalid length. [ 499.785897][ T303] openvswitch: netlink: Key type 4112 is out of range max 29 [ 500.196863][ T331] openvswitch: netlink: IP tunnel dst address not specified [ 500.395779][ T343] openvswitch: netlink: Key type 4112 is out of range max 29 [ 500.895433][ T375] __nla_validate_parse: 16 callbacks suppressed [ 500.895450][ T375] netlink: 10 bytes leftover after parsing attributes in process `syz.2.13986'. [ 501.104085][ T391] delete_channel: no stack [ 501.174083][ T397] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.13998'. [ 501.227352][ T397] openvswitch: netlink: IP tunnel dst address not specified [ 501.384335][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.390695][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.508149][ T413] netlink: 10 bytes leftover after parsing attributes in process `syz.3.14003'. [ 501.617838][ T421] netlink: 'syz.1.14008': attribute type 21 has an invalid length. [ 501.756570][ T432] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.14014'. [ 501.771815][ T432] openvswitch: netlink: IP tunnel dst address not specified [ 501.891105][ T446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14022'. [ 502.703991][ T510] netlink: 'syz.3.14053': attribute type 19 has an invalid length. [ 502.736428][ T510] netlink: 55 bytes leftover after parsing attributes in process `syz.3.14053'. [ 502.767335][ T514] delete_channel: no stack [ 502.897374][ T526] netlink: 'syz.3.14061': attribute type 21 has an invalid length. [ 502.915861][ T528] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14062'. [ 503.271775][ T566] netlink: 'syz.2.14080': attribute type 21 has an invalid length. [ 503.288614][ T560] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14077'. [ 503.458672][ T577] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14085'. [ 503.504915][ T577] netlink: 6 bytes leftover after parsing attributes in process `syz.2.14085'. [ 503.919062][ T607] netlink: 'syz.1.14101': attribute type 19 has an invalid length. [ 504.358964][ T634] netlink: 'syz.0.14114': attribute type 19 has an invalid length. [ 505.262223][ T695] netlink: 'syz.3.14145': attribute type 6 has an invalid length. [ 505.449690][ T712] netlink: 'syz.0.14152': attribute type 29 has an invalid length. [ 505.618522][ T720] netlink: 'syz.2.14156': attribute type 3 has an invalid length. [ 505.711862][ T728] netlink: 'syz.3.14160': attribute type 21 has an invalid length. [ 505.823603][ T740] netlink: 'syz.0.14167': attribute type 5 has an invalid length. [ 505.953168][ T750] netlink: 'syz.1.14172': attribute type 3 has an invalid length. [ 505.995358][ T750] __nla_validate_parse: 11 callbacks suppressed [ 505.995374][ T750] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.14172'. [ 506.212323][ T772] netlink: 'syz.0.14181': attribute type 6 has an invalid length. [ 506.304850][ T780] netlink: 'syz.1.14185': attribute type 5 has an invalid length. [ 506.380998][ T784] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14199'. [ 506.420859][ T784] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 506.435975][ T789] netlink: 'syz.4.14191': attribute type 29 has an invalid length. [ 506.455789][ T792] netlink: 'syz.3.14190': attribute type 3 has an invalid length. [ 506.484127][ T792] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.14190'. [ 507.005823][ T820] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14205'. [ 507.536291][ T853] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14222'. [ 508.094292][ T892] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14241'. [ 508.143258][ T892] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 508.249346][ T903] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.14247'. [ 508.900966][ T954] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.14283'. [ 509.482207][ T984] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.14287'. [ 509.634657][ T993] netlink: 176 bytes leftover after parsing attributes in process `syz.0.14292'. [ 510.381787][ T1076] validate_nla: 16 callbacks suppressed [ 510.381802][ T1076] netlink: 'syz.2.14326': attribute type 7 has an invalid length. [ 510.448822][ T1084] netlink: 'syz.1.14340': attribute type 21 has an invalid length. [ 510.643135][ T1090] netlink: 'syz.0.14343': attribute type 27 has an invalid length. [ 511.432666][ T1174] netlink: 'syz.0.14371': attribute type 21 has an invalid length. [ 511.475424][ T1174] __nla_validate_parse: 2 callbacks suppressed [ 511.475439][ T1174] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14371'. [ 511.521578][ T1186] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14374'. [ 511.531214][ T1186] openvswitch: netlink: Flow key attribute not present in set flow. [ 511.595331][ T1194] netlink: 'syz.0.14376': attribute type 1 has an invalid length. [ 511.615906][ T1194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14376'. [ 511.981044][ T1227] netlink: 'syz.2.14391': attribute type 27 has an invalid length. [ 511.994091][ T1227] netlink: 164 bytes leftover after parsing attributes in process `syz.2.14391'. [ 512.600077][ T1279] netlink: 'syz.3.14417': attribute type 21 has an invalid length. [ 512.678928][ T1283] device lo entered promiscuous mode [ 512.684383][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 512.815404][ T1303] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14430'. [ 512.825163][ T1303] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 512.843403][ T1306] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14429'. [ 512.870592][ T1308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14431'. [ 512.882690][ T1306] openvswitch: netlink: Flow key attribute not present in set flow. [ 512.885253][ T1308] netlink: 'syz.2.14431': attribute type 3 has an invalid length. [ 512.901163][ T1308] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14431'. [ 513.096766][ T1330] netlink: 'syz.1.14440': attribute type 21 has an invalid length. [ 513.305353][ T1355] netlink: 'syz.4.14453': attribute type 6 has an invalid length. [ 513.373348][ T1360] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14455'. [ 513.607527][ T1381] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 513.942489][ T1414] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.14479'. [ 513.959010][ T1414] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 515.401430][ T1546] validate_nla: 6 callbacks suppressed [ 515.401446][ T1546] netlink: 'syz.4.14552': attribute type 3 has an invalid length. [ 515.471545][ T1553] netlink: 'syz.3.14546': attribute type 10 has an invalid length. [ 516.284855][ T1610] netlink: 'syz.0.14576': attribute type 2 has an invalid length. [ 516.556165][ T1640] netlink: 'syz.4.14599': attribute type 49 has an invalid length. [ 516.614126][ T1647] netlink: 'syz.3.14591': attribute type 12 has an invalid length. [ 516.622529][ T1647] __nla_validate_parse: 12 callbacks suppressed [ 516.622542][ T1647] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14591'. [ 516.657077][ T1651] netlink: 'syz.2.14593': attribute type 28 has an invalid length. [ 516.681025][ T1651] netlink: 2 bytes leftover after parsing attributes in process `syz.2.14593'. [ 516.775282][ T1666] netlink: 180 bytes leftover after parsing attributes in process `syz.2.14612'. [ 517.013160][ T1687] netlink: 'syz.1.14614': attribute type 3 has an invalid length. [ 517.074547][ T1687] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.14614'. [ 517.130161][ T1697] netlink: 830 bytes leftover after parsing attributes in process `syz.0.14618'. [ 517.264828][ T1705] netlink: 830 bytes leftover after parsing attributes in process `syz.1.14633'. [ 517.472184][ T1720] netlink: 'syz.4.14629': attribute type 3 has an invalid length. [ 517.507251][ T1720] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.14629'. [ 517.508804][ T1723] netlink: 'syz.1.14625': attribute type 2 has an invalid length. [ 517.662022][ T1731] netlink: 'syz.0.14636': attribute type 49 has an invalid length. [ 517.863152][ T1741] netlink: 2 bytes leftover after parsing attributes in process `syz.1.14641'. [ 517.998779][ T1752] netlink: 180 bytes leftover after parsing attributes in process `syz.3.14644'. [ 518.083415][ T1759] netlink: 2 bytes leftover after parsing attributes in process `syz.0.14658'. [ 520.953749][ T1963] validate_nla: 17 callbacks suppressed [ 520.953765][ T1963] netlink: 'syz.1.14751': attribute type 21 has an invalid length. [ 520.974846][ T1965] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 520.983215][ T1965] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 521.069539][ T1971] netlink: 'syz.3.14756': attribute type 3 has an invalid length. [ 521.268773][ T1988] netlink: 'syz.3.14764': attribute type 6 has an invalid length. [ 521.396659][ T2001] netlink: 'syz.4.14770': attribute type 3 has an invalid length. [ 521.663464][ T2025] netlink: 'syz.4.14781': attribute type 6 has an invalid length. [ 521.765806][ T2038] netlink: 'syz.2.14787': attribute type 3 has an invalid length. [ 521.787746][ T2038] __nla_validate_parse: 14 callbacks suppressed [ 521.787761][ T2038] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.14787'. [ 521.967765][ T2054] netlink: 'syz.4.14796': attribute type 21 has an invalid length. [ 521.970330][ T2056] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14797'. [ 521.985280][ T2056] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 522.000886][ T2056] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 522.098384][ T2063] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.14811'. [ 522.117151][ T2063] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 522.125406][ T2063] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 522.188915][ T2066] netlink: 'syz.2.14800': attribute type 6 has an invalid length. [ 522.414888][ T2082] netlink: 10 bytes leftover after parsing attributes in process `syz.2.14809'. [ 522.463271][ T2087] netlink: 'syz.0.14812': attribute type 21 has an invalid length. [ 523.088817][ T2103] netlink: 'syz.1.14817': attribute type 6 has an invalid length. [ 525.142136][ T2232] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14884'. [ 525.917661][ T2261] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14898'. [ 525.992818][ T2263] validate_nla: 5 callbacks suppressed [ 525.992834][ T2263] netlink: 'syz.4.14899': attribute type 29 has an invalid length. [ 526.007313][ T2263] netlink: 'syz.4.14899': attribute type 3 has an invalid length. [ 526.039980][ T2263] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14899'. [ 526.418506][ T2295] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14916'. [ 526.444513][ T2297] netlink: 'syz.1.14917': attribute type 29 has an invalid length. [ 526.472633][ T2297] netlink: 'syz.1.14917': attribute type 3 has an invalid length. [ 526.494073][ T2297] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14917'. [ 526.771172][ T2324] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14929'. [ 526.842742][ T2331] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14934'. [ 526.884597][ T2339] netlink: 'syz.0.14935': attribute type 29 has an invalid length. [ 526.912258][ T2339] netlink: 'syz.0.14935': attribute type 3 has an invalid length. [ 526.927161][ T2339] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14935'. [ 526.927480][ T2341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14939'. [ 526.987221][ T2341] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14939'. [ 527.011191][ T2347] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14941'. [ 527.206645][ T2361] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14948'. [ 527.249719][ T2365] netlink: 'syz.3.14950': attribute type 10 has an invalid length. [ 527.284480][ T2365] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14950'. [ 527.322538][ T2365] device caif0 entered promiscuous mode [ 527.334727][ T2365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 527.350348][ T2366] netlink: 'syz.4.14958': attribute type 21 has an invalid length. [ 527.364816][ T2366] netlink: 128 bytes leftover after parsing attributes in process `syz.4.14958'. [ 527.374941][ T2366] netlink: 'syz.4.14958': attribute type 4 has an invalid length. [ 527.396273][ T2371] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14951'. [ 527.463390][ T2379] netlink: 10 bytes leftover after parsing attributes in process `syz.4.14956'. [ 527.946792][ T2437] netlink: 'syz.1.14986': attribute type 29 has an invalid length. [ 528.725673][ T2507] device caif0 entered promiscuous mode [ 528.732664][ T2507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 529.819839][ T2633] openvswitch: netlink: Message has 20476 unknown bytes. [ 530.998353][ T2786] validate_nla: 17 callbacks suppressed [ 530.998367][ T2786] netlink: 'syz.3.15127': attribute type 1 has an invalid length. [ 531.175641][ T2812] netlink: 'syz.3.15139': attribute type 11 has an invalid length. [ 531.185467][ T2808] netlink: 'syz.0.15138': attribute type 28 has an invalid length. [ 531.199615][ T2808] netlink: 'syz.0.15138': attribute type 29 has an invalid length. [ 531.269744][ T2819] openvswitch: netlink: Message has 20476 unknown bytes. [ 532.315031][ T2850] netlink: 'syz.4.15153': attribute type 21 has an invalid length. [ 532.335497][ T2853] __nla_validate_parse: 33 callbacks suppressed [ 532.335512][ T2853] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15167'. [ 532.468386][ T2864] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15162'. [ 532.545640][ T2866] netlink: 'syz.0.15175': attribute type 11 has an invalid length. [ 532.795037][ T2887] netlink: 'syz.1.15171': attribute type 41 has an invalid length. [ 532.901634][ T2897] netlink: 'syz.3.15174': attribute type 28 has an invalid length. [ 532.921629][ T2897] netlink: 'syz.3.15174': attribute type 29 has an invalid length. [ 532.939046][ T2897] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15174'. [ 533.151781][ T2922] netlink: 'syz.2.15189': attribute type 41 has an invalid length. [ 533.276987][ T2940] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15193'. [ 533.549044][ T2963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15199'. [ 533.855641][ T2992] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.15215'. [ 534.279558][ T3028] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15234'. [ 534.490152][ T3043] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.15241'. [ 534.590789][ T3054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15246'. [ 534.752070][ T3066] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.15252'. [ 536.053680][ T3148] validate_nla: 9 callbacks suppressed [ 536.053696][ T3148] netlink: 'syz.3.15288': attribute type 33 has an invalid length. [ 536.885367][ T3186] netlink: 'syz.0.15308': attribute type 33 has an invalid length. [ 537.786853][ T3260] __nla_validate_parse: 8 callbacks suppressed [ 537.786870][ T3260] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.15340'. [ 537.812732][ T3260] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.15340'. [ 537.954555][ T3275] netlink: 'syz.1.15356': attribute type 21 has an invalid length. [ 538.289572][ T3304] netlink: 'syz.3.15361': attribute type 21 has an invalid length. [ 538.472433][ T3326] netlink: 'syz.3.15371': attribute type 21 has an invalid length. [ 538.572309][ T3331] netlink: 'syz.2.15374': attribute type 21 has an invalid length. [ 539.101470][ T3378] netlink: 'syz.3.15395': attribute type 3 has an invalid length. [ 539.118758][ T3378] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.15395'. [ 539.143389][ T3380] netlink: 'syz.0.15396': attribute type 1 has an invalid length. [ 539.180686][ T3380] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.15396'. [ 539.557679][ T3409] netlink: 'syz.1.15411': attribute type 3 has an invalid length. [ 539.618185][ T3409] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15411'. [ 539.636323][ T3414] netlink: 'syz.3.15414': attribute type 1 has an invalid length. [ 539.658473][ T3414] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.15414'. [ 539.795186][ T3424] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15417'. [ 540.115262][ T3449] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.15428'. [ 540.204310][ T3461] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15436'. [ 540.788429][ T3534] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15466'. [ 540.951926][ T3555] sctp: [Deprecated]: syz.1.15474 (pid 3555) Use of int in maxseg socket option. [ 540.951926][ T3555] Use struct sctp_assoc_value instead [ 540.994073][ T3561] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 542.006930][ T3678] validate_nla: 2 callbacks suppressed [ 542.006945][ T3678] netlink: 'syz.2.15534': attribute type 3 has an invalid length. [ 542.190741][ T3693] sctp: [Deprecated]: syz.0.15541 (pid 3693) Use of int in maxseg socket option. [ 542.190741][ T3693] Use struct sctp_assoc_value instead [ 542.819690][ T3728] __nla_validate_parse: 17 callbacks suppressed [ 542.819707][ T3728] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15561'. [ 542.842849][ T3730] sctp: [Deprecated]: syz.2.15560 (pid 3730) Use of int in maxseg socket option. [ 542.842849][ T3730] Use struct sctp_assoc_value instead [ 543.312546][ T3760] netlink: 140 bytes leftover after parsing attributes in process `syz.1.15572'. [ 543.370057][ T3770] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.15589'. [ 543.394466][ T3772] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.15577'. [ 543.452876][ T3777] netlink: 140 bytes leftover after parsing attributes in process `syz.2.15594'. [ 543.519722][ T3782] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15581'. [ 543.551452][ T3782] netlink: 'syz.0.15581': attribute type 3 has an invalid length. [ 543.577034][ T3790] netlink: 'syz.4.15586': attribute type 19 has an invalid length. [ 543.625794][ T3796] netlink: 'syz.0.15592': attribute type 21 has an invalid length. [ 543.756051][ T3808] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15600'. [ 543.772745][ T3808] device caif0 left promiscuous mode [ 543.780222][ T3808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 543.867544][ T3820] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15606'. [ 543.885051][ T3820] netlink: 'syz.4.15606': attribute type 3 has an invalid length. [ 543.894533][ T3825] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.15608'. [ 544.008196][ T3843] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.15611'. [ 544.031902][ T3849] netlink: 'syz.1.15615': attribute type 21 has an invalid length. [ 544.604092][ T3904] netlink: 'syz.2.15644': attribute type 21 has an invalid length. [ 544.895140][ T3942] device caif0 left promiscuous mode [ 544.910077][ T3942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.154852][ T3970] netlink: 'syz.2.15673': attribute type 3 has an invalid length. [ 545.274940][ T3989] netlink: 'syz.2.15691': attribute type 3 has an invalid length. [ 545.302697][ T3991] netlink: 'syz.4.15681': attribute type 21 has an invalid length. [ 545.662729][ T4034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 548.356838][ T4329] __nla_validate_parse: 29 callbacks suppressed [ 548.356855][ T4329] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15810'. [ 548.417328][ T4332] validate_nla: 10 callbacks suppressed [ 548.417343][ T4332] netlink: 'syz.2.15821': attribute type 6 has an invalid length. [ 548.447252][ T4332] netlink: 168 bytes leftover after parsing attributes in process `syz.2.15821'. [ 548.933667][ T4367] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.15828'. [ 548.948573][ T4364] netlink: 144 bytes leftover after parsing attributes in process `syz.1.15826'. [ 549.341251][ T4394] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.15840'. [ 549.554234][ T4411] netlink: 'syz.4.15849': attribute type 29 has an invalid length. [ 549.578650][ T4411] netlink: 'syz.4.15849': attribute type 29 has an invalid length. [ 549.598398][ T4411] netlink: 'syz.4.15849': attribute type 29 has an invalid length. [ 550.937680][ T4445] netlink: 'syz.2.15864': attribute type 1 has an invalid length. [ 550.945624][ T4445] netlink: 5 bytes leftover after parsing attributes in process `syz.2.15864'. [ 551.376884][ T4475] netlink: 'syz.2.15879': attribute type 29 has an invalid length. [ 551.401992][ T4475] netlink: 'syz.2.15879': attribute type 29 has an invalid length. [ 551.416719][ T4475] netlink: 'syz.2.15879': attribute type 29 has an invalid length. [ 551.588889][ T4481] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.15885'. [ 551.590002][ T4484] netlink: 'syz.1.15884': attribute type 1 has an invalid length. [ 551.620094][ T4484] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.15884'. [ 552.243643][ T4508] netlink: 'syz.0.15893': attribute type 29 has an invalid length. [ 552.404704][ T4522] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.15899'. [ 552.508150][ T4527] netlink: 168 bytes leftover after parsing attributes in process `syz.1.15903'. [ 553.382912][ T4594] __nla_validate_parse: 4 callbacks suppressed [ 553.382929][ T4594] netlink: 168 bytes leftover after parsing attributes in process `syz.2.15933'. [ 553.433105][ T4600] validate_nla: 4 callbacks suppressed [ 553.433121][ T4600] netlink: 'syz.3.15939': attribute type 3 has an invalid length. [ 553.457543][ T4602] netlink: 'syz.0.15938': attribute type 1 has an invalid length. [ 553.466625][ T4600] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.15939'. [ 553.497252][ T4602] netlink: 5 bytes leftover after parsing attributes in process `syz.0.15938'. [ 553.872726][ T4629] netlink: 'syz.0.15953': attribute type 1 has an invalid length. [ 553.888225][ T4629] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.15953'. [ 553.910020][ T4634] netlink: 'syz.4.15954': attribute type 1 has an invalid length. [ 553.931818][ T4634] netlink: 5 bytes leftover after parsing attributes in process `syz.4.15954'. [ 553.993562][ T4639] netlink: 168 bytes leftover after parsing attributes in process `syz.0.15955'. [ 554.746105][ T4654] netlink: 763 bytes leftover after parsing attributes in process `syz.3.15962'. [ 554.999359][ T4668] netlink: 'syz.1.15967': attribute type 1 has an invalid length. [ 555.041902][ T4668] netlink: 5 bytes leftover after parsing attributes in process `syz.1.15967'. [ 555.998819][ T4697] netlink: 'syz.2.15982': attribute type 1 has an invalid length. [ 556.010865][ T4698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15981'. [ 556.020804][ T4697] netlink: 5 bytes leftover after parsing attributes in process `syz.2.15982'. [ 556.731309][ T4724] netlink: 'syz.3.15995': attribute type 3 has an invalid length. [ 556.924791][ T4732] netlink: 'syz.1.15997': attribute type 1 has an invalid length. [ 557.407201][ T4760] netlink: 'syz.2.16012': attribute type 1 has an invalid length. [ 557.862174][ T4782] netlink: 'syz.0.16021': attribute type 153 has an invalid length. [ 558.584433][ T4793] netlink: 'syz.4.16026': attribute type 1 has an invalid length. [ 558.595848][ T4793] __nla_validate_parse: 4 callbacks suppressed [ 558.595887][ T4793] netlink: 5 bytes leftover after parsing attributes in process `syz.4.16026'. [ 559.386680][ T4820] netlink: 'syz.1.16038': attribute type 8 has an invalid length. [ 559.394630][ T4820] netlink: 197324 bytes leftover after parsing attributes in process `syz.1.16038'. [ 560.603319][ T4856] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16051'. [ 560.888327][ T4874] netlink: 4093 bytes leftover after parsing attributes in process `syz.4.16062'. [ 560.935779][ T4884] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.16063'. [ 561.043944][ T4891] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16070'. [ 561.070904][ T4894] netlink: 'syz.0.16081': attribute type 12 has an invalid length. [ 561.097859][ T4894] netlink: 172 bytes leftover after parsing attributes in process `syz.0.16081'. [ 561.522379][ T4925] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16085'. [ 561.728122][ T4947] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.16093'. [ 562.085201][ T4969] netlink: 'syz.4.16104': attribute type 12 has an invalid length. [ 562.136753][ T4969] netlink: 172 bytes leftover after parsing attributes in process `syz.4.16104'. [ 562.920081][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.926398][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.516571][ T5010] netlink: 'syz.3.16123': attribute type 12 has an invalid length. [ 563.560103][ T5013] netlink: 'syz.2.16138': attribute type 12 has an invalid length. [ 563.696281][ T5024] __nla_validate_parse: 3 callbacks suppressed [ 563.696297][ T5024] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.16127'. [ 564.198386][ T5072] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.16150'. [ 564.682253][ T5109] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.16172'. [ 565.715488][ T5126] netlink: 'syz.1.16179': attribute type 12 has an invalid length. [ 565.730595][ T5126] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.16179'. [ 566.181706][ T5173] netlink: 'syz.4.16204': attribute type 12 has an invalid length. [ 566.196252][ T5173] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.16204'. [ 566.450080][ T5182] netlink: 'syz.4.16208': attribute type 2 has an invalid length. [ 566.463980][ T5182] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.16208'. [ 567.203372][ T5198] netlink: 'syz.0.16224': attribute type 2 has an invalid length. [ 567.237345][ T5198] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.16224'. [ 567.408777][ T5212] netlink: 'syz.0.16217': attribute type 12 has an invalid length. [ 567.435698][ T5212] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.16217'. [ 568.787413][ T5251] netlink: 'syz.0.16239': attribute type 21 has an invalid length. [ 568.809590][ T5255] netlink: 'syz.1.16241': attribute type 1 has an invalid length. [ 568.824738][ T5255] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.16241'. [ 568.827217][ T5251] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16239'. [ 568.877183][ T5251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16239'. [ 569.289972][ T5286] netlink: 'syz.4.16258': attribute type 1 has an invalid length. [ 569.339011][ T5286] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.16258'. [ 569.453909][ T5295] netlink: 'syz.1.16262': attribute type 21 has an invalid length. [ 569.505559][ T5295] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16262'. [ 569.559609][ T5295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16262'. [ 569.865239][ T5324] netlink: 'syz.3.16274': attribute type 1 has an invalid length. [ 569.905866][ T5324] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.16274'. [ 570.112318][ T5345] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16281'. [ 570.130274][ T5345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16281'. [ 571.309810][ T5398] validate_nla: 1 callbacks suppressed [ 571.309826][ T5398] netlink: 'syz.4.16306': attribute type 21 has an invalid length. [ 571.716713][ T5434] netlink: 180 bytes leftover after parsing attributes in process `syz.0.16325'. [ 572.538065][ T5512] netlink: 'syz.3.16370': attribute type 29 has an invalid length. [ 572.560665][ T5512] netlink: 'syz.3.16370': attribute type 29 has an invalid length. [ 572.626784][ T5519] netlink: 'syz.3.16370': attribute type 29 has an invalid length. [ 572.713544][ T5532] netlink: 'syz.2.16379': attribute type 21 has an invalid length. [ 573.043993][ T5562] netlink: 'syz.0.16384': attribute type 21 has an invalid length. [ 573.385058][ T5587] syz.3.16397 (5587) used obsolete PPPIOCDETACH ioctl [ 573.669887][ T5618] netlink: 'syz.2.16412': attribute type 29 has an invalid length. [ 573.682088][ T5618] netlink: 'syz.2.16412': attribute type 29 has an invalid length. [ 573.696530][ T5618] netlink: 'syz.2.16412': attribute type 29 has an invalid length. [ 573.736545][ T5626] netlink: 'syz.3.16416': attribute type 2 has an invalid length. [ 573.956914][ T5649] __nla_validate_parse: 6 callbacks suppressed [ 573.956931][ T5649] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.16437'. [ 574.272495][ T5675] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16438'. [ 574.709464][ T5716] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.16455'. [ 574.765103][ T5722] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.16460'. [ 574.808240][ T5726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16463'. [ 575.197792][ T5759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16478'. [ 575.395456][ T5782] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.16487'. [ 576.335194][ T5859] validate_nla: 15 callbacks suppressed [ 576.335210][ T5859] netlink: 'syz.3.16524': attribute type 3 has an invalid length. [ 576.367854][ T5859] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.16524'. [ 576.432164][ T5869] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.16527'. [ 576.557049][ T5881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16535'. [ 577.033940][ T5918] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 577.071989][ T5918] openvswitch: netlink: Message has 1 unknown bytes. [ 577.556779][ T5934] netlink: 'syz.4.16560': attribute type 11 has an invalid length. [ 578.075426][ T5988] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 578.087205][ T5988] openvswitch: netlink: Message has 1 unknown bytes. [ 578.301656][ T6012] netlink: 'syz.1.16595': attribute type 11 has an invalid length. [ 578.314436][ T6013] netlink: 'syz.2.16604': attribute type 2 has an invalid length. [ 578.323332][ T6013] netlink: 'syz.2.16604': attribute type 2 has an invalid length. [ 578.660445][ T6021] netlink: 'syz.0.16607': attribute type 11 has an invalid length. [ 578.709829][ T6028] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 578.729174][ T6028] openvswitch: netlink: Message has 1 unknown bytes. [ 580.228383][ T6108] netlink: 'syz.4.16636': attribute type 1 has an invalid length. [ 580.238601][ T6108] __nla_validate_parse: 12 callbacks suppressed [ 580.238641][ T6108] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.16636'. [ 581.084055][ T6124] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16647'. [ 581.136659][ T6130] netlink: 62967 bytes leftover after parsing attributes in process `syz.0.16650'. [ 581.212612][ T6134] netlink: 'syz.4.16652': attribute type 27 has an invalid length. [ 581.252153][ T6141] netlink: 'syz.1.16654': attribute type 9 has an invalid length. [ 581.322805][ T6141] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.16654'. [ 581.357690][ T6147] netlink: 'syz.0.16658': attribute type 5 has an invalid length. [ 581.397198][ T6147] netlink: 176 bytes leftover after parsing attributes in process `syz.0.16658'. [ 581.459013][ T6157] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.16663'. [ 581.494251][ T6157] openvswitch: netlink: Tunnel attr 0 has unexpected len 338 expected 8 [ 581.545957][ T6164] netlink: 'syz.2.16676': attribute type 5 has an invalid length. [ 581.554345][ T6164] netlink: 176 bytes leftover after parsing attributes in process `syz.2.16676'. [ 581.834702][ T6196] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16681'. [ 581.848358][ T6196] openvswitch: netlink: Tunnel attr 0 has unexpected len 338 expected 8 [ 581.888860][ T6202] netlink: 'syz.1.16683': attribute type 5 has an invalid length. [ 581.896808][ T6202] netlink: 176 bytes leftover after parsing attributes in process `syz.1.16683'. [ 582.112453][ T6221] netlink: 62967 bytes leftover after parsing attributes in process `syz.1.16701'. [ 582.336108][ T6236] netlink: 'syz.2.16696': attribute type 1 has an invalid length. [ 582.711772][ T6255] netlink: 'syz.2.16706': attribute type 9 has an invalid length. [ 583.149336][ T6298] netlink: 'syz.4.16722': attribute type 9 has an invalid length. [ 583.253903][ T6308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.264772][ T6310] openvswitch: netlink: Tunnel attr 0 has unexpected len 338 expected 8 [ 583.282093][ T6308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.301123][ T6308] bond0 (unregistering): Released all slaves [ 583.625432][ T6342] netlink: 'syz.0.16742': attribute type 9 has an invalid length. [ 583.902253][ T6371] netlink: 'syz.0.16757': attribute type 1 has an invalid length. [ 585.753134][ T6492] netlink: 'syz.1.16815': attribute type 29 has an invalid length. [ 585.771688][ T6492] netlink: 'syz.1.16815': attribute type 29 has an invalid length. [ 586.297338][ T6535] __nla_validate_parse: 20 callbacks suppressed [ 586.297356][ T6535] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16836'. [ 586.385779][ T6541] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.16838'. [ 586.396145][ T6543] netlink: 4079 bytes leftover after parsing attributes in process `syz.0.16837'. [ 587.041998][ T6580] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.16858'. [ 587.075943][ T6580] netlink: 8454 bytes leftover after parsing attributes in process `syz.1.16858'. [ 587.134403][ T6588] validate_nla: 2 callbacks suppressed [ 587.134418][ T6588] netlink: 'syz.4.16862': attribute type 29 has an invalid length. [ 587.152778][ T6588] netlink: 'syz.4.16862': attribute type 29 has an invalid length. [ 587.164878][ T6588] netlink: 'syz.4.16862': attribute type 29 has an invalid length. [ 587.299130][ T6600] netlink: 'syz.4.16868': attribute type 33 has an invalid length. [ 587.312470][ T6600] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16868'. [ 587.345964][ T6602] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.16869'. [ 587.442093][ T6612] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.16873'. [ 587.589248][ T6622] netlink: 'syz.0.16874': attribute type 29 has an invalid length. [ 587.654628][ T6622] netlink: 'syz.0.16874': attribute type 29 has an invalid length. [ 587.666970][ T6628] netlink: 'syz.0.16874': attribute type 29 has an invalid length. [ 587.728217][ T6632] netlink: 'syz.0.16883': attribute type 33 has an invalid length. [ 587.736716][ T6632] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16883'. [ 587.837682][ T6642] netlink: 'syz.1.16897': attribute type 33 has an invalid length. [ 587.858622][ T6642] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16897'. [ 587.986357][ T6656] netlink: 'syz.2.16895': attribute type 29 has an invalid length. [ 591.392147][ T6901] __nla_validate_parse: 11 callbacks suppressed [ 591.392165][ T6901] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.17010'. [ 591.916331][ T6922] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.17021'. [ 592.033869][ T6927] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.17024'. [ 592.313410][ T6934] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.17027'. [ 592.644826][ T6948] sock: sock_set_timeout: `syz.0.17033' (pid 6948) tries to set negative timeout [ 592.936251][ T6974] sock: sock_set_timeout: `syz.2.17046' (pid 6974) tries to set negative timeout [ 593.369505][ T7011] sock: sock_set_timeout: `syz.3.17061' (pid 7011) tries to set negative timeout [ 594.385541][ T7085] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 595.197732][ T7148] validate_nla: 16 callbacks suppressed [ 595.197748][ T7148] netlink: 'syz.2.17129': attribute type 29 has an invalid length. [ 595.228213][ T7148] netlink: 'syz.2.17129': attribute type 29 has an invalid length. [ 595.238172][ T7148] netlink: 'syz.2.17129': attribute type 29 has an invalid length. [ 595.566471][ T7177] syz.1.17144[7177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 595.566560][ T7177] syz.1.17144[7177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.827527][ T7229] netlink: 'syz.4.17171': attribute type 29 has an invalid length. [ 596.858062][ T7229] netlink: 'syz.4.17171': attribute type 29 has an invalid length. [ 596.866743][ T7232] netlink: 'syz.4.17171': attribute type 29 has an invalid length. [ 597.155862][ T7246] syz.3.17177[7246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 597.155944][ T7246] syz.3.17177[7246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 597.773238][ T7291] netlink: 'syz.1.17196': attribute type 29 has an invalid length. [ 597.809287][ T7291] netlink: 'syz.1.17196': attribute type 29 has an invalid length. [ 597.826201][ T7293] delete_channel: no stack [ 597.843343][ T7296] netlink: 'syz.1.17196': attribute type 29 has an invalid length. [ 598.606108][ T7354] netlink: 'syz.3.17228': attribute type 29 has an invalid length. [ 598.673712][ T7360] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.17231'. [ 599.034620][ T7390] delete_channel: no stack [ 600.053014][ T7460] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.17280'. [ 600.290518][ T7478] validate_nla: 10 callbacks suppressed [ 600.290587][ T7478] netlink: 'syz.4.17288': attribute type 2 has an invalid length. [ 600.838079][ T7510] netlink: 'syz.2.17302': attribute type 2 has an invalid length. [ 601.410085][ T7548] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.17322'. [ 602.276403][ T7601] netlink: 'syz.0.17354': attribute type 10 has an invalid length. [ 602.310572][ T7601] netlink: 'syz.0.17354': attribute type 10 has an invalid length. [ 603.849285][ T7638] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.17360'. [ 604.027603][ T7649] netlink: 'syz.3.17363': attribute type 10 has an invalid length. [ 604.035734][ T7649] netlink: 'syz.3.17363': attribute type 10 has an invalid length. [ 604.567852][ T7676] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.17377'. [ 604.784328][ T7681] netlink: 'syz.4.17380': attribute type 10 has an invalid length. [ 604.843508][ T7681] netlink: 'syz.4.17380': attribute type 10 has an invalid length. [ 605.766791][ T7716] netlink: 'syz.1.17393': attribute type 10 has an invalid length. [ 605.820276][ T7716] netlink: 'syz.1.17393': attribute type 10 has an invalid length. [ 606.064783][ T7728] wlan1: mtu greater than device maximum [ 606.967346][ T7747] netlink: 'syz.4.17408': attribute type 1 has an invalid length. [ 606.975182][ T7747] netlink: 'syz.4.17408': attribute type 3 has an invalid length. [ 607.076967][ T7747] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17408'. [ 607.098196][ T7754] netlink: 'syz.2.17410': attribute type 10 has an invalid length. [ 607.106305][ T7754] netlink: 'syz.2.17410': attribute type 10 has an invalid length. [ 608.063671][ T7792] netlink: 'syz.4.17431': attribute type 10 has an invalid length. [ 608.094804][ T7792] netlink: 'syz.4.17431': attribute type 10 has an invalid length. [ 608.275253][ T7800] netlink: 'syz.4.17444': attribute type 10 has an invalid length. [ 608.347389][ T7800] netlink: 'syz.4.17444': attribute type 10 has an invalid length. [ 608.677978][ T7822] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.17445'. [ 613.673049][ T7974] validate_nla: 1 callbacks suppressed [ 613.673065][ T7974] netlink: 'syz.4.17512': attribute type 3 has an invalid length. [ 613.767328][ T7974] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.17512'. [ 613.942906][ T7987] netlink: 'syz.3.17527': attribute type 3 has an invalid length. [ 613.971275][ T7987] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.17527'. [ 616.105461][ T8103] netlink: 'syz.1.17573': attribute type 21 has an invalid length. [ 619.534176][ T8229] netlink: 'syz.1.17629': attribute type 29 has an invalid length. [ 619.586868][ T8223] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17625'. [ 619.617761][ T8229] netlink: 'syz.1.17629': attribute type 29 has an invalid length. [ 619.646233][ T8232] netlink: 'syz.1.17629': attribute type 29 has an invalid length. [ 620.295785][ T8265] netlink: 'syz.2.17645': attribute type 29 has an invalid length. [ 620.347430][ T8265] netlink: 'syz.2.17645': attribute type 29 has an invalid length. [ 620.372776][ T8270] netlink: 'syz.2.17645': attribute type 29 has an invalid length. [ 621.895429][ T8337] netlink: 'syz.3.17679': attribute type 29 has an invalid length. [ 621.911920][ T8344] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17681'. [ 621.949877][ T8344] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17681'. [ 621.997271][ T8352] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17681'. [ 622.046060][ T8337] netlink: 'syz.3.17679': attribute type 29 has an invalid length. [ 622.056913][ T8347] netlink: 'syz.3.17679': attribute type 29 has an invalid length. [ 622.487608][ T8380] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17698'. [ 622.557837][ T8380] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17698'. [ 622.578928][ T8385] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17698'. [ 622.755664][ T8389] netlink: 'syz.4.17701': attribute type 29 has an invalid length. [ 623.220496][ T8410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17713'. [ 623.259240][ T8410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17713'. [ 623.291160][ T8414] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17713'. [ 624.260392][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.266829][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.624153][ T8502] __nla_validate_parse: 1 callbacks suppressed [ 624.624170][ T8502] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.17756'. [ 625.243284][ T8508] netlink: 180 bytes leftover after parsing attributes in process `syz.2.17770'. [ 625.276895][ T8508] netlink: 180 bytes leftover after parsing attributes in process `syz.2.17770'. [ 625.327391][ T8514] validate_nla: 6 callbacks suppressed [ 625.327405][ T8514] netlink: 'syz.4.17762': attribute type 3 has an invalid length. [ 625.362044][ T8514] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17762'. [ 625.481861][ T8526] netlink: 'syz.4.17768': attribute type 8 has an invalid length. [ 625.510544][ T8526] netlink: 'syz.4.17768': attribute type 3 has an invalid length. [ 625.535233][ T8526] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.17768'. [ 626.430972][ T8568] netlink: 'syz.4.17790': attribute type 10 has an invalid length. [ 626.444207][ T8568] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.17790'. [ 626.470217][ T8569] netlink: 'syz.1.17791': attribute type 1 has an invalid length. [ 626.495427][ T8569] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.17791'. [ 626.532816][ T8571] netlink: 'syz.0.17792': attribute type 3 has an invalid length. [ 626.545979][ T8571] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17792'. [ 627.148750][ T8611] netlink: 'syz.2.17810': attribute type 8 has an invalid length. [ 627.156588][ T8611] netlink: 'syz.2.17810': attribute type 3 has an invalid length. [ 627.165399][ T8611] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.17810'. [ 627.670249][ T8638] netlink: 'syz.0.17822': attribute type 1 has an invalid length. [ 627.703239][ T8638] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.17822'. [ 628.136152][ T8674] netlink: 'syz.4.17838': attribute type 1 has an invalid length. [ 628.517552][ T8703] netlink: 'syz.2.17851': attribute type 11 has an invalid length. [ 630.700371][ T8805] validate_nla: 3 callbacks suppressed [ 630.700387][ T8805] netlink: 'syz.1.17899': attribute type 12 has an invalid length. [ 630.778729][ T8805] netlink: 'syz.1.17899': attribute type 11 has an invalid length. [ 630.818232][ T8805] __nla_validate_parse: 4 callbacks suppressed [ 630.818247][ T8805] netlink: 178840 bytes leftover after parsing attributes in process `syz.1.17899'. [ 631.764260][ T8875] netlink: 'syz.1.17934': attribute type 2 has an invalid length. [ 631.779162][ T8875] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.17934'. [ 632.666039][ T8940] netlink: 'syz.2.17965': attribute type 3 has an invalid length. [ 632.694074][ T8940] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17965'. [ 634.276313][ T8996] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.17993'. [ 634.689809][ T9029] netlink: 'syz.4.18008': attribute type 21 has an invalid length. [ 634.698214][ T9029] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18008'. [ 635.059223][ T9046] netlink: 'syz.3.18018': attribute type 7 has an invalid length. [ 635.301943][ T9064] netlink: 'syz.3.18025': attribute type 3 has an invalid length. [ 635.317872][ T9064] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18025'. [ 635.814883][ T9093] netlink: 'syz.1.18042': attribute type 21 has an invalid length. [ 635.838956][ T9093] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18042'. [ 636.050945][ T9112] netlink: 'syz.4.18050': attribute type 7 has an invalid length. [ 636.127962][ T9118] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.18051'. [ 636.211859][ T9124] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.18056'. [ 636.363606][ T9134] netlink: 'syz.0.18060': attribute type 21 has an invalid length. [ 636.388607][ T9134] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18060'. [ 636.535799][ T9147] netlink: 'syz.0.18066': attribute type 7 has an invalid length. [ 636.896601][ T9174] netlink: 'syz.0.18080': attribute type 3 has an invalid length. [ 636.915719][ T9174] netlink: 1034 bytes leftover after parsing attributes in process `syz.0.18080'. [ 636.988666][ T9180] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.18082'. [ 637.314633][ T9208] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.18097'. [ 637.460877][ T9217] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18101'. [ 637.488958][ T9217] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18101'. [ 637.525549][ T9221] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.18103'. [ 638.296043][ T9276] netlink: 'syz.2.18138': attribute type 3 has an invalid length. [ 638.932118][ T9307] netlink: 'syz.1.18145': attribute type 3 has an invalid length. [ 640.466650][ T9417] netlink: 'syz.3.18194': attribute type 21 has an invalid length. [ 641.262003][ T9439] __nla_validate_parse: 14 callbacks suppressed [ 641.262020][ T9439] netlink: 763 bytes leftover after parsing attributes in process `syz.2.18205'. [ 642.717929][ T9479] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.18225'. [ 643.003611][ T9493] netlink: 763 bytes leftover after parsing attributes in process `syz.1.18231'. [ 644.696963][ T9544] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.18256'. [ 646.613221][ T9617] netlink: 'syz.2.18290': attribute type 3 has an invalid length. [ 646.646015][ T9617] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.18290'. [ 646.673527][ T9625] netlink: 164 bytes leftover after parsing attributes in process `syz.0.18293'. [ 647.123645][ T9653] netlink: 'syz.4.18307': attribute type 3 has an invalid length. [ 647.141218][ T9653] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.18307'. [ 647.547590][ T9677] netlink: 164 bytes leftover after parsing attributes in process `syz.3.18320'. [ 647.996959][ T9709] netlink: 164 bytes leftover after parsing attributes in process `syz.1.18334'. [ 648.541139][ T9735] netlink: 'syz.3.18348': attribute type 10 has an invalid length. [ 648.631552][ T9744] netlink: 'syz.0.18350': attribute type 3 has an invalid length. [ 648.654167][ T9744] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.18350'. [ 648.778081][ T9755] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 649.023045][ T9779] netlink: 38831 bytes leftover after parsing attributes in process `syz.1.18370'. [ 649.164003][ T9796] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 649.221904][ T9798] netlink: 'syz.1.18377': attribute type 10 has an invalid length. [ 650.344394][ T9840] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.18398'. [ 650.982799][ T9900] netlink: 'syz.1.18430': attribute type 1 has an invalid length. [ 651.007431][ T9900] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.18430'. [ 651.668031][ T9942] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18448'. [ 651.902630][ T9960] netlink: 'syz.4.18456': attribute type 29 has an invalid length. [ 651.921107][ T9963] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.18459'. [ 651.930867][ T9960] netlink: 'syz.4.18456': attribute type 29 has an invalid length. [ 651.950106][ T9960] netlink: 'syz.4.18456': attribute type 29 has an invalid length. [ 653.053454][T10004] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.18478'. [ 653.418751][T10024] netlink: 'syz.1.18483': attribute type 29 has an invalid length. [ 653.471790][T10029] netlink: 'syz.0.18484': attribute type 1 has an invalid length. [ 653.497513][T10024] netlink: 'syz.1.18483': attribute type 29 has an invalid length. [ 653.505738][T10030] netlink: 'syz.1.18483': attribute type 29 has an invalid length. [ 653.511674][T10029] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.18484'. [ 653.532116][T10032] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18486'. [ 653.894314][T10056] netlink: 'syz.0.18499': attribute type 17 has an invalid length. [ 653.960363][T10056] netlink: 'syz.0.18499': attribute type 16 has an invalid length. [ 654.002870][T10062] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.18503'. [ 654.010564][T10056] netlink: 152 bytes leftover after parsing attributes in process `syz.0.18499'. [ 654.044171][T10062] netlink: 'syz.3.18503': attribute type 2 has an invalid length. [ 654.829757][T10077] netlink: 763 bytes leftover after parsing attributes in process `syz.0.18510'. [ 655.421339][T10115] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18526'. [ 655.592401][T10119] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.18528'. [ 656.830258][T10214] __nla_validate_parse: 4 callbacks suppressed [ 656.830273][T10214] netlink: 76 bytes leftover after parsing attributes in process `syz.1.18573'. [ 656.954510][T10224] validate_nla: 6 callbacks suppressed [ 656.954524][T10224] netlink: 'syz.1.18577': attribute type 1 has an invalid length. [ 656.979348][T10224] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.18577'. [ 657.398259][T10254] netlink: 'syz.3.18591': attribute type 1 has an invalid length. [ 657.415317][T10254] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.18591'. [ 657.524390][T10258] netlink: 76 bytes leftover after parsing attributes in process `syz.2.18603'. [ 657.822515][T10273] netlink: 'syz.0.18597': attribute type 3 has an invalid length. [ 657.839343][T10273] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.18597'. [ 659.984069][T10341] netlink: 'syz.3.18632': attribute type 3 has an invalid length. [ 660.020656][T10341] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.18632'. [ 660.195642][T10351] netlink: 'syz.3.18637': attribute type 29 has an invalid length. [ 660.248236][T10351] netlink: 'syz.3.18637': attribute type 29 has an invalid length. [ 660.275986][T10358] netlink: 'syz.3.18637': attribute type 29 has an invalid length. [ 661.580564][T10407] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.18663'. [ 661.816621][T10431] netlink: 'syz.1.18673': attribute type 29 has an invalid length. [ 661.843663][T10431] netlink: 'syz.1.18673': attribute type 29 has an invalid length. [ 661.873846][T10438] netlink: 'syz.1.18673': attribute type 29 has an invalid length. [ 662.057613][T10451] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.18682'. [ 662.502313][T10465] device vcan0 entered promiscuous mode [ 662.523468][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 664.340936][T10564] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18738'. [ 666.020189][T10649] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18770'. [ 667.101172][T10690] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.18789'. [ 667.123782][T10693] netlink: 'syz.4.18790': attribute type 21 has an invalid length. [ 667.168630][T10693] netlink: 156 bytes leftover after parsing attributes in process `syz.4.18790'. [ 667.943150][T10750] netlink: 'syz.0.18816': attribute type 7 has an invalid length. [ 667.951293][T10750] netlink: 140 bytes leftover after parsing attributes in process `syz.0.18816'. [ 668.411466][T10769] netlink: 'syz.0.18836': attribute type 21 has an invalid length. [ 668.434166][T10769] netlink: 156 bytes leftover after parsing attributes in process `syz.0.18836'. [ 669.013018][T10812] netlink: 'syz.2.18844': attribute type 21 has an invalid length. [ 669.036626][T10812] netlink: 156 bytes leftover after parsing attributes in process `syz.2.18844'. [ 669.213877][T10831] netlink: 'syz.2.18853': attribute type 7 has an invalid length. [ 669.248544][T10831] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18853'. [ 669.353078][T10842] netlink: 'syz.3.18870': attribute type 7 has an invalid length. [ 669.363228][T10842] netlink: 140 bytes leftover after parsing attributes in process `syz.3.18870'. [ 669.628310][T10869] netlink: 'syz.1.18873': attribute type 7 has an invalid length. [ 669.675422][T10869] netlink: 140 bytes leftover after parsing attributes in process `syz.1.18873'. [ 672.723699][T11022] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.18945'. [ 672.764926][T11022] tc_dump_action: action bad kind [ 673.314166][T11057] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.18959'. [ 673.384361][T11057] tc_dump_action: action bad kind [ 674.818688][T11095] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.18976'. [ 674.849674][T11095] tc_dump_action: action bad kind [ 678.396432][T11198] netlink: 'syz.3.19023': attribute type 2 has an invalid length. [ 678.485547][T11198] netlink: 'syz.3.19023': attribute type 8 has an invalid length. [ 678.513853][T11198] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19023'. [ 678.646788][T11210] netlink: 'syz.2.19032': attribute type 4 has an invalid length. [ 678.654870][T11210] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.19032'. [ 679.480058][T11217] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19037'. [ 679.536839][T11223] netlink: 'syz.0.19048': attribute type 2 has an invalid length. [ 679.566780][T11223] netlink: 'syz.0.19048': attribute type 8 has an invalid length. [ 679.585648][T11223] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19048'. [ 679.673441][T11237] netlink: 'syz.0.19045': attribute type 29 has an invalid length. [ 679.907674][T11260] netlink: 'syz.4.19057': attribute type 2 has an invalid length. [ 679.915541][T11260] netlink: 'syz.4.19057': attribute type 8 has an invalid length. [ 679.936121][T11260] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19057'. [ 679.996743][T11270] netlink: 'syz.1.19062': attribute type 29 has an invalid length. [ 680.170566][T11287] netlink: 'syz.2.19072': attribute type 2 has an invalid length. [ 680.183498][T11287] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.19072'. [ 680.393226][T11308] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19081'. [ 680.739726][T11346] netlink: 60 bytes leftover after parsing attributes in process `syz.4.19095'. [ 680.770486][T11350] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19101'. [ 680.785470][T11350] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19101'. [ 682.948330][T11509] openvswitch: netlink: Tunnel attr 14896 out of range max 16 [ 684.001313][T11575] __nla_validate_parse: 19 callbacks suppressed [ 684.001330][T11575] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19210'. [ 684.137280][T11580] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19216'. [ 684.147297][T11580] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19216'. [ 684.183071][T11580] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19216'. [ 684.343892][T11592] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.19220'. [ 684.504397][T11609] netlink: 830 bytes leftover after parsing attributes in process `syz.4.19227'. [ 684.520735][T11607] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.19225'. [ 684.712805][T11621] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19233'. [ 684.753379][T11621] openvswitch: netlink: Tunnel attr 14896 out of range max 16 [ 684.935467][T11630] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.19238'. [ 685.237466][T11652] netlink: 830 bytes leftover after parsing attributes in process `syz.0.19250'. [ 685.437059][T11661] validate_nla: 1 callbacks suppressed [ 685.437076][T11661] netlink: 'syz.0.19254': attribute type 3 has an invalid length. [ 685.595369][T11671] netlink: 'syz.0.19258': attribute type 3 has an invalid length. [ 685.613455][T11671] netlink: 'syz.0.19258': attribute type 1 has an invalid length. [ 685.699127][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.705427][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.791092][T11680] IPv6: Can't replace route, no match found [ 686.670261][T11719] openvswitch: netlink: Key type 2832 is out of range max 29 [ 686.960291][T11734] netlink: 'syz.1.19285': attribute type 3 has an invalid length. [ 687.499936][T11781] IPv6: Can't replace route, no match found [ 687.767075][T11800] netlink: 'syz.1.19326': attribute type 3 has an invalid length. [ 688.248334][T11839] netlink: 'syz.3.19335': attribute type 3 has an invalid length. [ 688.921304][T11874] netlink: 'syz.4.19351': attribute type 3 has an invalid length. [ 689.343875][T11907] __nla_validate_parse: 12 callbacks suppressed [ 689.343890][T11907] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.19367'. [ 689.694046][T11933] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.19386'. [ 689.717639][T11926] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.19386'. [ 689.870697][T11945] netlink: 184 bytes leftover after parsing attributes in process `syz.2.19383'. [ 690.070032][T11957] netlink: 'syz.0.19385': attribute type 3 has an invalid length. [ 690.113220][T11957] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.19385'. [ 690.261101][T11979] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.19394'. [ 690.292558][T11972] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.19394'. [ 690.478981][T11992] sctp: [Deprecated]: syz.0.19407 (pid 11992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 690.478981][T11992] Use struct sctp_sack_info instead [ 691.149969][T12037] netlink: 'syz.4.19427': attribute type 21 has an invalid length. [ 691.187486][T12037] netlink: 14530 bytes leftover after parsing attributes in process `syz.4.19427'. [ 691.593719][T12071] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.19445'. [ 691.897377][T12085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 691.904661][T12085] IPv6: NLM_F_CREATE should be set when creating new route [ 691.911948][T12085] IPv6: NLM_F_CREATE should be set when creating new route [ 691.919192][T12085] IPv6: NLM_F_CREATE should be set when creating new route [ 692.158924][T12111] sctp: [Deprecated]: syz.1.19464 (pid 12111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 692.158924][T12111] Use struct sctp_sack_info instead [ 692.539045][T12137] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.19476'. [ 693.052610][T12166] netlink: 'syz.3.19491': attribute type 21 has an invalid length. [ 693.234240][T12173] netlink: 'syz.3.19494': attribute type 29 has an invalid length. [ 693.417582][T12173] netlink: 'syz.3.19494': attribute type 29 has an invalid length. [ 693.438560][T12178] netlink: 'syz.3.19494': attribute type 29 has an invalid length. [ 693.883642][T12205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 693.890943][T12205] IPv6: NLM_F_CREATE should be set when creating new route [ 693.898232][T12205] IPv6: NLM_F_CREATE should be set when creating new route [ 693.905438][T12205] IPv6: NLM_F_CREATE should be set when creating new route [ 694.486606][T12243] netlink: 'syz.4.19526': attribute type 29 has an invalid length. [ 694.502422][T12245] __nla_validate_parse: 5 callbacks suppressed [ 694.502438][T12245] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19528'. [ 694.534525][T12243] netlink: 'syz.4.19526': attribute type 29 has an invalid length. [ 694.558124][T12249] netlink: 'syz.4.19526': attribute type 29 has an invalid length. [ 694.869927][T12277] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19543'. [ 694.935893][T12279] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19545'. [ 695.153941][T12287] netlink: 'syz.1.19548': attribute type 29 has an invalid length. [ 695.192207][T12287] netlink: 'syz.1.19548': attribute type 29 has an invalid length. [ 695.592908][T12304] netlink: 60 bytes leftover after parsing attributes in process `syz.4.19557'. [ 696.228453][T12342] validate_nla: 4 callbacks suppressed [ 696.228470][T12342] netlink: 'syz.4.19573': attribute type 29 has an invalid length. [ 696.247570][T12343] netlink: 'syz.0.19574': attribute type 2 has an invalid length. [ 696.259101][T12342] netlink: 'syz.4.19573': attribute type 29 has an invalid length. [ 696.287259][T12343] netlink: 'syz.0.19574': attribute type 3 has an invalid length. [ 696.295205][T12343] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19574'. [ 696.319647][T12342] netlink: 'syz.4.19573': attribute type 29 has an invalid length. [ 697.088245][T12377] netlink: 'syz.3.19592': attribute type 2 has an invalid length. [ 697.096169][T12377] netlink: 'syz.3.19592': attribute type 3 has an invalid length. [ 697.113728][T12380] netlink: 'syz.0.19591': attribute type 29 has an invalid length. [ 697.129681][T12377] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19592'. [ 697.154053][T12380] netlink: 'syz.0.19591': attribute type 29 has an invalid length. [ 697.198150][T12383] netlink: 'syz.0.19591': attribute type 29 has an invalid length. [ 697.374739][T12397] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.19601'. [ 697.654822][T12413] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19609'. [ 698.664647][T12449] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.19625'. [ 699.045060][T12467] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.19636'. [ 701.189009][T12568] __nla_validate_parse: 1 callbacks suppressed [ 701.189025][T12568] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.19683'. [ 702.559726][T12634] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19714'. [ 704.549608][T12696] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19745'. [ 705.754539][T12731] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.19764'. [ 706.220025][T12767] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.19778'. [ 706.512587][T12773] validate_nla: 4 callbacks suppressed [ 706.512603][T12773] netlink: 'syz.1.19780': attribute type 21 has an invalid length. [ 706.700908][T12789] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.19791'. [ 707.712780][T12813] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.19798'. [ 708.037760][T12833] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.19810'. [ 708.223641][T12845] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.19815'. [ 708.371887][T12853] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.19819'. [ 708.373479][T12854] netlink: 'syz.4.19816': attribute type 21 has an invalid length. [ 709.142765][T12866] netlink: 'syz.3.19835': attribute type 21 has an invalid length. [ 709.156415][T12871] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.19826'. [ 709.366555][T12888] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.19832'. [ 709.468212][T12897] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.19840'. [ 709.485500][T12898] netlink: 'syz.4.19838': attribute type 21 has an invalid length. [ 709.517709][T12898] netlink: 144 bytes leftover after parsing attributes in process `syz.4.19838'. [ 710.222784][T12964] netlink: 'syz.1.19870': attribute type 30 has an invalid length. [ 710.590389][T12992] netlink: 'syz.4.19882': attribute type 21 has an invalid length. [ 710.918363][T13021] netlink: 'syz.0.19905': attribute type 21 has an invalid length. [ 711.825434][T13028] netlink: 'syz.1.19899': attribute type 1 has an invalid length. [ 711.843073][T13028] __nla_validate_parse: 5 callbacks suppressed [ 711.843087][T13028] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.19899'. [ 711.864050][T13030] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.19900'. [ 712.148029][T13053] netlink: 56 bytes leftover after parsing attributes in process `syz.1.19911'. [ 712.220955][T13059] netlink: 'syz.4.19914': attribute type 30 has an invalid length. [ 712.352781][T13070] netlink: 'syz.0.19918': attribute type 1 has an invalid length. [ 712.394157][T13070] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.19918'. [ 712.404646][T13071] netlink: 'syz.3.19919': attribute type 21 has an invalid length. [ 712.570332][T13085] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.19926'. [ 712.590107][T13085] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.19926'. [ 712.619170][T13085] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.19926'. [ 712.784645][T13096] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.19943'. [ 712.811172][T13100] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.19933'. [ 712.812103][T13096] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.19943'. [ 712.832982][T13104] netlink: 'syz.3.19936': attribute type 1 has an invalid length. [ 713.004390][T13114] netlink: 'syz.2.19941': attribute type 29 has an invalid length. [ 713.023532][T13114] netlink: 'syz.2.19941': attribute type 29 has an invalid length. [ 713.161614][T13129] netlink: 'syz.0.19950': attribute type 7 has an invalid length. [ 713.496832][T13160] netlink: 'syz.1.19963': attribute type 21 has an invalid length. [ 714.798434][T13214] netlink: 'syz.3.19999': attribute type 46 has an invalid length. [ 716.115671][T13260] netlink: set zone limit has 8 unknown bytes [ 717.126625][T13286] netlink: 'syz.2.20022': attribute type 21 has an invalid length. [ 717.138037][T13286] __nla_validate_parse: 8 callbacks suppressed [ 717.138051][T13286] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.20022'. [ 717.241304][T13294] netlink: set zone limit has 8 unknown bytes [ 717.533550][T13320] netlink: 'syz.3.20039': attribute type 21 has an invalid length. [ 717.572107][T13320] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.20039'. [ 717.690609][T13329] netlink: 'syz.3.20043': attribute type 29 has an invalid length. [ 717.757478][T13329] netlink: 'syz.3.20043': attribute type 29 has an invalid length. [ 717.814959][T13330] netlink: 'syz.3.20043': attribute type 29 has an invalid length. [ 718.092057][T13350] netlink: 'syz.0.20054': attribute type 21 has an invalid length. [ 718.125624][T13350] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.20054'. [ 718.217648][T13361] netlink: 'syz.2.20058': attribute type 29 has an invalid length. [ 718.247347][T13361] netlink: 'syz.2.20058': attribute type 29 has an invalid length. [ 718.259857][T13361] netlink: 'syz.2.20058': attribute type 29 has an invalid length. [ 718.732900][T13392] netlink: 'syz.4.20072': attribute type 29 has an invalid length. [ 720.317724][T13457] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.20103'. [ 720.712568][T13485] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20114'. [ 720.813463][T13490] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.20119'. [ 721.199981][T13523] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.20135'. [ 721.233018][T13524] netlink: 132 bytes leftover after parsing attributes in process `syz.4.20134'. [ 721.304487][T13526] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.20147'. [ 721.560602][T13544] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.20144'. [ 722.182338][T13586] __nla_validate_parse: 3 callbacks suppressed [ 722.182355][T13586] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20164'. [ 722.200917][T13591] validate_nla: 6 callbacks suppressed [ 722.200934][T13591] netlink: 'syz.3.20168': attribute type 1 has an invalid length. [ 722.267462][T13591] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.20168'. [ 722.354433][T13602] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.20174'. [ 722.599507][T13627] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.20188'. [ 723.185714][T13659] netlink: 'syz.2.20203': attribute type 2 has an invalid length. [ 723.321712][T13665] netlink: 'syz.2.20216': attribute type 3 has an invalid length. [ 723.361462][T13665] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.20216'. [ 723.892669][T13707] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.20225'. [ 723.942896][T13711] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.20228'. [ 725.225793][T13832] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.20285'. [ 725.236817][T13833] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.20284'. [ 725.442103][T13852] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.20294'. [ 726.831580][T13927] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 726.901929][T13927] CPU: 1 PID: 13927 Comm: syz.3.20327 Not tainted 5.15.186-syzkaller #0 [ 726.910315][T13927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 726.920381][T13927] Call Trace: [ 726.923663][T13927] [ 726.926603][T13927] dump_stack_lvl+0x168/0x230 [ 726.931305][T13927] ? show_regs_print_info+0x20/0x20 [ 726.936517][T13927] ? load_image+0x3b0/0x3b0 [ 726.941059][T13927] sysfs_warn_dup+0x8a/0xa0 [ 726.945576][T13927] sysfs_do_create_link_sd+0xc0/0x110 [ 726.951090][T13927] device_add+0x7ed/0xfb0 [ 726.955461][T13927] wiphy_register+0x1d67/0x2b20 [ 726.960363][T13927] ? cfg80211_event_work+0x40/0x40 [ 726.965487][T13927] ? minstrel_ht_alloc+0x808/0x980 [ 726.970626][T13927] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 726.976727][T13927] ieee80211_register_hw+0x29b1/0x39d0 [ 726.982247][T13927] ? ieee80211_tasklet_handler+0x20/0x20 [ 726.987904][T13927] ? rcu_is_watching+0x11/0xa0 [ 726.992681][T13927] ? memset+0x1e/0x40 [ 726.996675][T13927] ? hrtimer_init+0x10c/0x220 [ 727.001371][T13927] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 727.007135][T13927] hwsim_new_radio_nl+0xa6f/0xc40 [ 727.012206][T13927] genl_rcv_msg+0xbc6/0xf40 [ 727.016748][T13927] ? genl_bind+0x370/0x370 [ 727.021198][T13927] ? verify_lock_unused+0x140/0x140 [ 727.026402][T13927] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 727.031609][T13927] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 727.037345][T13927] ? perf_trace_lock+0x2ec/0x370 [ 727.042284][T13927] ? hwsim_tx_info_frame_received_nl+0x1010/0x1010 [ 727.048805][T13927] netlink_rcv_skb+0x1e0/0x430 [ 727.053565][T13927] ? genl_bind+0x370/0x370 [ 727.057986][T13927] ? netlink_ack+0xb60/0xb60 [ 727.062580][T13927] ? __lock_acquire+0x7c60/0x7c60 [ 727.067609][T13927] ? preempt_count_add+0x8d/0x190 [ 727.073205][T13927] ? down_read+0x1aa/0x2e0 [ 727.077758][T13927] genl_rcv+0x24/0x40 [ 727.081748][T13927] netlink_unicast+0x77c/0x920 [ 727.086526][T13927] netlink_sendmsg+0x8ab/0xbc0 [ 727.091307][T13927] ? netlink_getsockopt+0x560/0x560 [ 727.096607][T13927] ? aa_sock_msg_perm+0x94/0x150 [ 727.101547][T13927] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 727.106829][T13927] ? security_socket_sendmsg+0x7c/0xa0 [ 727.112287][T13927] ? netlink_getsockopt+0x560/0x560 [ 727.117483][T13927] ____sys_sendmsg+0x5a2/0x8c0 [ 727.122255][T13927] ? memset+0x1e/0x40 [ 727.126228][T13927] ? __sys_sendmsg_sock+0x30/0x30 [ 727.131263][T13927] ? import_iovec+0x6f/0xa0 [ 727.135767][T13927] ___sys_sendmsg+0x1f0/0x260 [ 727.140456][T13927] ? __sys_sendmsg+0x250/0x250 [ 727.145234][T13927] ? trace_event_raw_event_lock+0x250/0x250 [ 727.151153][T13927] ? __fdget+0x18b/0x210 [ 727.155398][T13927] __se_sys_sendmsg+0x190/0x250 [ 727.160246][T13927] ? __x64_sys_sendmsg+0x80/0x80 [ 727.165175][T13927] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 727.171175][T13927] ? lockdep_hardirqs_on+0x94/0x140 [ 727.176374][T13927] do_syscall_64+0x4c/0xa0 [ 727.180779][T13927] ? clear_bhb_loop+0x30/0x80 [ 727.185444][T13927] ? clear_bhb_loop+0x30/0x80 [ 727.190118][T13927] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 727.196004][T13927] RIP: 0033:0x7faaf0e63929 [ 727.200412][T13927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.220010][T13927] RSP: 002b:00007faaeeccb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.228419][T13927] RAX: ffffffffffffffda RBX: 00007faaf108afa0 RCX: 00007faaf0e63929 [ 727.236386][T13927] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 727.244346][T13927] RBP: 00007faaf0ee5b39 R08: 0000000000000000 R09: 0000000000000000 [ 727.252311][T13927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.260269][T13927] R13: 0000000000000000 R14: 00007faaf108afa0 R15: 00007ffc73bf6938 [ 727.268258][T13927] [ 727.676918][T13958] __nla_validate_parse: 1 callbacks suppressed [ 727.676934][T13958] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.20341'. [ 727.982748][T13981] netlink: 'syz.4.20351': attribute type 1 has an invalid length. [ 728.162479][T13999] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.20358'. [ 728.273740][T14006] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.20363'. [ 728.641070][T14036] netlink: 'syz.3.20378': attribute type 2 has an invalid length. [ 728.655436][T14036] netlink: 'syz.3.20378': attribute type 4 has an invalid length. [ 728.663725][T14036] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20378'. [ 728.772345][T14048] netlink: 'syz.3.20384': attribute type 3 has an invalid length. [ 728.813565][T14048] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.20384'. [ 728.968214][T14060] netlink: 'syz.0.20390': attribute type 10 has an invalid length. [ 728.976155][T14060] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.20390'. [ 730.166103][T14126] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.20417'. [ 730.489476][T14126] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 730.512781][T14126] CPU: 1 PID: 14126 Comm: syz.4.20417 Not tainted 5.15.186-syzkaller #0 [ 730.521145][T14126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 730.531211][T14126] Call Trace: [ 730.534497][T14126] [ 730.537436][T14126] dump_stack_lvl+0x168/0x230 [ 730.542142][T14126] ? show_regs_print_info+0x20/0x20 [ 730.547360][T14126] ? load_image+0x3b0/0x3b0 [ 730.551907][T14126] sysfs_warn_dup+0x8a/0xa0 [ 730.556428][T14126] sysfs_do_create_link_sd+0xc0/0x110 [ 730.561818][T14126] device_add+0x7ed/0xfb0 [ 730.566185][T14126] wiphy_register+0x1d67/0x2b20 [ 730.571091][T14126] ? cfg80211_event_work+0x40/0x40 [ 730.576222][T14126] ? minstrel_ht_alloc+0x808/0x980 [ 730.581366][T14126] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 730.587465][T14126] ieee80211_register_hw+0x29b1/0x39d0 [ 730.592980][T14126] ? ieee80211_tasklet_handler+0x20/0x20 [ 730.598642][T14126] ? rcu_is_watching+0x11/0xa0 [ 730.603425][T14126] ? memset+0x1e/0x40 [ 730.607424][T14126] ? hrtimer_init+0x10c/0x220 [ 730.612124][T14126] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 730.617899][T14126] hwsim_new_radio_nl+0xa6f/0xc40 [ 730.622964][T14126] genl_rcv_msg+0xbc6/0xf40 [ 730.627517][T14126] ? genl_bind+0x370/0x370 [ 730.632004][T14126] ? verify_lock_unused+0x140/0x140 [ 730.637237][T14126] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 730.642456][T14126] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 730.648203][T14126] ? perf_trace_lock+0x2ec/0x370 [ 730.653166][T14126] ? hwsim_tx_info_frame_received_nl+0x1010/0x1010 [ 730.659716][T14126] netlink_rcv_skb+0x1e0/0x430 [ 730.664493][T14126] ? genl_bind+0x370/0x370 [ 730.668931][T14126] ? netlink_ack+0xb60/0xb60 [ 730.673539][T14126] ? __lock_acquire+0x7c60/0x7c60 [ 730.678604][T14126] ? preempt_count_add+0x8d/0x190 [ 730.683647][T14126] ? down_read+0x1aa/0x2e0 [ 730.688078][T14126] genl_rcv+0x24/0x40 [ 730.692074][T14126] netlink_unicast+0x77c/0x920 [ 730.696869][T14126] netlink_sendmsg+0x8ab/0xbc0 [ 730.701661][T14126] ? netlink_getsockopt+0x560/0x560 [ 730.706880][T14126] ? aa_sock_msg_perm+0x94/0x150 [ 730.711838][T14126] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 730.717133][T14126] ? security_socket_sendmsg+0x7c/0xa0 [ 730.722601][T14126] ? netlink_getsockopt+0x560/0x560 [ 730.727815][T14126] ____sys_sendmsg+0x5a2/0x8c0 [ 730.732609][T14126] ? memset+0x1e/0x40 [ 730.736598][T14126] ? __sys_sendmsg_sock+0x30/0x30 [ 730.741657][T14126] ? import_iovec+0x6f/0xa0 [ 730.746179][T14126] ___sys_sendmsg+0x1f0/0x260 [ 730.750896][T14126] ? __sys_sendmsg+0x250/0x250 [ 730.755698][T14126] ? trace_event_raw_event_lock+0x250/0x250 [ 730.761647][T14126] ? __fdget+0x18b/0x210 [ 730.765909][T14126] __se_sys_sendmsg+0x190/0x250 [ 730.770785][T14126] ? __x64_sys_sendmsg+0x80/0x80 [ 730.775732][T14126] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 730.781754][T14126] ? lockdep_hardirqs_on+0x94/0x140 [ 730.786975][T14126] do_syscall_64+0x4c/0xa0 [ 730.791400][T14126] ? clear_bhb_loop+0x30/0x80 [ 730.796086][T14126] ? clear_bhb_loop+0x30/0x80 [ 730.800780][T14126] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 730.806679][T14126] RIP: 0033:0x7faf3a6b3929 [ 730.811103][T14126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.830722][T14126] RSP: 002b:00007faf3851b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 730.839152][T14126] RAX: ffffffffffffffda RBX: 00007faf3a8dafa0 RCX: 00007faf3a6b3929 [ 730.847134][T14126] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 730.855112][T14126] RBP: 00007faf3a735b39 R08: 0000000000000000 R09: 0000000000000000 [ 730.863093][T14126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.871074][T14126] R13: 0000000000000000 R14: 00007faf3a8dafa0 R15: 00007ffcbf0bd058 [ 730.879091][T14126] [ 731.117800][T14145] netlink: 'syz.1.20426': attribute type 1 has an invalid length. [ 732.002389][T14175] netlink: 'syz.1.20441': attribute type 3 has an invalid length. [ 732.036942][T14175] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.20441'. [ 732.061198][T14180] netlink: 'syz.2.20438': attribute type 10 has an invalid length. [ 732.069773][T14180] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.20438'. [ 732.080239][T14181] netlink: 'syz.0.20442': attribute type 1 has an invalid length. [ 733.249888][T14216] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.20459'. [ 733.265708][T14219] netlink: 'syz.2.20457': attribute type 3 has an invalid length. [ 733.309403][T14216] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 733.309547][T14219] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.20457'. [ 733.329133][T14216] CPU: 1 PID: 14216 Comm: syz.0.20459 Not tainted 5.15.186-syzkaller #0 [ 733.337508][T14216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 733.347571][T14216] Call Trace: [ 733.350862][T14216] [ 733.353801][T14216] dump_stack_lvl+0x168/0x230 [ 733.358505][T14216] ? show_regs_print_info+0x20/0x20 [ 733.363719][T14216] ? load_image+0x3b0/0x3b0 [ 733.368265][T14216] sysfs_warn_dup+0x8a/0xa0 [ 733.372791][T14216] sysfs_do_create_link_sd+0xc0/0x110 [ 733.378198][T14216] device_add+0x7ed/0xfb0 [ 733.382570][T14216] wiphy_register+0x1d67/0x2b20 [ 733.387476][T14216] ? cfg80211_event_work+0x40/0x40 [ 733.392958][T14216] ? minstrel_ht_alloc+0x808/0x980 [ 733.398104][T14216] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 733.404207][T14216] ieee80211_register_hw+0x29b1/0x39d0 [ 733.409729][T14216] ? ieee80211_tasklet_handler+0x20/0x20 [ 733.415394][T14216] ? rcu_is_watching+0x11/0xa0 [ 733.420177][T14216] ? memset+0x1e/0x40 [ 733.424175][T14216] ? hrtimer_init+0x10c/0x220 [ 733.428879][T14216] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 733.434651][T14216] hwsim_new_radio_nl+0xa6f/0xc40 [ 733.439726][T14216] genl_rcv_msg+0xbc6/0xf40 [ 733.444274][T14216] ? genl_bind+0x370/0x370 [ 733.448743][T14216] ? verify_lock_unused+0x140/0x140 [ 733.453960][T14216] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 733.459179][T14216] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 733.464932][T14216] ? perf_trace_lock+0x2ec/0x370 [ 733.469892][T14216] ? hwsim_tx_info_frame_received_nl+0x1010/0x1010 [ 733.476448][T14216] netlink_rcv_skb+0x1e0/0x430 [ 733.481237][T14216] ? genl_bind+0x370/0x370 [ 733.485679][T14216] ? netlink_ack+0xb60/0xb60 [ 733.490290][T14216] ? __lock_acquire+0x7c60/0x7c60 [ 733.495348][T14216] ? preempt_count_add+0x8d/0x190 [ 733.500388][T14216] ? down_read+0x1aa/0x2e0 [ 733.504828][T14216] genl_rcv+0x24/0x40 [ 733.508823][T14216] netlink_unicast+0x77c/0x920 [ 733.513624][T14216] netlink_sendmsg+0x8ab/0xbc0 [ 733.518426][T14216] ? netlink_getsockopt+0x560/0x560 [ 733.523646][T14216] ? aa_sock_msg_perm+0x94/0x150 [ 733.528611][T14216] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 733.533912][T14216] ? security_socket_sendmsg+0x7c/0xa0 [ 733.539386][T14216] ? netlink_getsockopt+0x560/0x560 [ 733.544602][T14216] ____sys_sendmsg+0x5a2/0x8c0 [ 733.549398][T14216] ? memset+0x1e/0x40 [ 733.553391][T14216] ? __sys_sendmsg_sock+0x30/0x30 [ 733.558417][T14216] ? import_iovec+0x6f/0xa0 [ 733.562913][T14216] ___sys_sendmsg+0x1f0/0x260 [ 733.567589][T14216] ? __sys_sendmsg+0x250/0x250 [ 733.572359][T14216] ? trace_event_raw_event_lock+0x250/0x250 [ 733.578261][T14216] ? __fdget+0x18b/0x210 [ 733.582496][T14216] __se_sys_sendmsg+0x190/0x250 [ 733.587347][T14216] ? __x64_sys_sendmsg+0x80/0x80 [ 733.592293][T14216] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 733.598275][T14216] ? lockdep_hardirqs_on+0x94/0x140 [ 733.603473][T14216] do_syscall_64+0x4c/0xa0 [ 733.607874][T14216] ? clear_bhb_loop+0x30/0x80 [ 733.612538][T14216] ? clear_bhb_loop+0x30/0x80 [ 733.617211][T14216] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 733.623108][T14216] RIP: 0033:0x7fd3e80a8929 [ 733.627510][T14216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.647101][T14216] RSP: 002b:00007fd3e5f10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.655520][T14216] RAX: ffffffffffffffda RBX: 00007fd3e82cffa0 RCX: 00007fd3e80a8929 [ 733.663486][T14216] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 733.671805][T14216] RBP: 00007fd3e812ab39 R08: 0000000000000000 R09: 0000000000000000 [ 733.679762][T14216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.687718][T14216] R13: 0000000000000000 R14: 00007fd3e82cffa0 R15: 00007ffde1f525b8 [ 733.695712][T14216] [ 733.944838][T14252] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.20486'. [ 734.018746][T14252] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 734.043047][T14252] CPU: 1 PID: 14252 Comm: syz.1.20486 Not tainted 5.15.186-syzkaller #0 [ 734.051399][T14252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 734.061516][T14252] Call Trace: [ 734.064807][T14252] [ 734.067755][T14252] dump_stack_lvl+0x168/0x230 [ 734.072458][T14252] ? show_regs_print_info+0x20/0x20 [ 734.077678][T14252] ? load_image+0x3b0/0x3b0 [ 734.082223][T14252] sysfs_warn_dup+0x8a/0xa0 [ 734.086749][T14252] sysfs_do_create_link_sd+0xc0/0x110 [ 734.092140][T14252] device_add+0x7ed/0xfb0 [ 734.096512][T14252] wiphy_register+0x1d67/0x2b20 [ 734.101422][T14252] ? cfg80211_event_work+0x40/0x40 [ 734.106555][T14252] ? minstrel_ht_alloc+0x808/0x980 [ 734.111699][T14252] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 734.117925][T14252] ieee80211_register_hw+0x29b1/0x39d0 [ 734.123441][T14252] ? ieee80211_tasklet_handler+0x20/0x20 [ 734.129132][T14252] ? rcu_is_watching+0x11/0xa0 [ 734.133912][T14252] ? memset+0x1e/0x40 [ 734.137909][T14252] ? hrtimer_init+0x10c/0x220 [ 734.142615][T14252] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 734.148381][T14252] hwsim_new_radio_nl+0xa6f/0xc40 [ 734.153451][T14252] genl_rcv_msg+0xbc6/0xf40 [ 734.157998][T14252] ? genl_bind+0x370/0x370 [ 734.162456][T14252] ? verify_lock_unused+0x140/0x140 [ 734.167674][T14252] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 734.172894][T14252] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 734.178646][T14252] ? perf_trace_lock+0x2ec/0x370 [ 734.183610][T14252] ? hwsim_tx_info_frame_received_nl+0x1010/0x1010 [ 734.190165][T14252] netlink_rcv_skb+0x1e0/0x430 [ 734.194948][T14252] ? genl_bind+0x370/0x370 [ 734.199389][T14252] ? netlink_ack+0xb60/0xb60 [ 734.204002][T14252] ? __lock_acquire+0x7c60/0x7c60 [ 734.209054][T14252] ? preempt_count_add+0x8d/0x190 [ 734.214120][T14252] ? down_read+0x1aa/0x2e0 [ 734.218562][T14252] genl_rcv+0x24/0x40 [ 734.222561][T14252] netlink_unicast+0x77c/0x920 [ 734.227352][T14252] netlink_sendmsg+0x8ab/0xbc0 [ 734.232132][T14252] ? netlink_getsockopt+0x560/0x560 [ 734.237332][T14252] ? aa_sock_msg_perm+0x94/0x150 [ 734.242273][T14252] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 734.247563][T14252] ? security_socket_sendmsg+0x7c/0xa0 [ 734.253015][T14252] ? netlink_getsockopt+0x560/0x560 [ 734.258208][T14252] ____sys_sendmsg+0x5a2/0x8c0 [ 734.262979][T14252] ? memset+0x1e/0x40 [ 734.266955][T14252] ? __sys_sendmsg_sock+0x30/0x30 [ 734.271992][T14252] ? import_iovec+0x6f/0xa0 [ 734.276497][T14252] ___sys_sendmsg+0x1f0/0x260 [ 734.281188][T14252] ? __sys_sendmsg+0x250/0x250 [ 734.285966][T14252] ? trace_event_raw_event_lock+0x250/0x250 [ 734.291887][T14252] ? __fdget+0x18b/0x210 [ 734.296131][T14252] __se_sys_sendmsg+0x190/0x250 [ 734.300989][T14252] ? __x64_sys_sendmsg+0x80/0x80 [ 734.305921][T14252] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 734.311916][T14252] ? lockdep_hardirqs_on+0x94/0x140 [ 734.317115][T14252] do_syscall_64+0x4c/0xa0 [ 734.321529][T14252] ? clear_bhb_loop+0x30/0x80 [ 734.326195][T14252] ? clear_bhb_loop+0x30/0x80 [ 734.330871][T14252] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 734.336760][T14252] RIP: 0033:0x7f45357a9929 [ 734.341170][T14252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.360763][T14252] RSP: 002b:00007f4533611038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.369180][T14252] RAX: ffffffffffffffda RBX: 00007f45359d0fa0 RCX: 00007f45357a9929 [ 734.377145][T14252] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 734.385111][T14252] RBP: 00007f453582bb39 R08: 0000000000000000 R09: 0000000000000000 [ 734.393073][T14252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.401036][T14252] R13: 0000000000000000 R14: 00007f45359d0fa0 R15: 00007ffc1e5583d8 [ 734.409021][T14252] [ 735.665720][T14316] netlink: 'syz.1.20504': attribute type 10 has an invalid length. [ 735.686448][T14316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20504'. [ 735.726189][T14316] device lo left promiscuous mode [ 735.751297][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 735.795116][T14316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 736.049051][T14345] netlink: 'syz.1.20528': attribute type 10 has an invalid length. [ 737.145222][T14366] netlink: 'syz.3.20539': attribute type 27 has an invalid length. [ 738.167661][T14421] netlink: 'syz.0.20554': attribute type 10 has an invalid length. [ 738.187794][T14421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.20554'. [ 738.229368][T14421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 738.524076][T14436] netlink: 'syz.2.20563': attribute type 3 has an invalid length. [ 738.532417][T14436] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.20563'. [ 738.616949][T14443] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20566'. [ 738.923430][T14466] netlink: 'syz.4.20576': attribute type 10 has an invalid length. [ 738.932197][T14466] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20576'. [ 738.944590][T14466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 739.095866][T14479] netlink: 'syz.2.20593': attribute type 10 has an invalid length. [ 739.104115][T14479] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20593'. [ 739.114342][T14479] device lo left promiscuous mode [ 739.119953][T14479] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 739.140682][T14479] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 739.156237][T14479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 739.211278][T14483] netlink: 'syz.4.20584': attribute type 10 has an invalid length. [ 739.670067][T14508] netlink: 'syz.1.20599': attribute type 27 has an invalid length. [ 739.741560][T14512] netlink: 'syz.3.20598': attribute type 10 has an invalid length. [ 739.775297][T14512] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20598'. [ 739.826278][T14512] A link change request failed with some changes committed already. Interface Y4`Ҙ may have been left with an inconsistent configuration, please check. [ 740.114882][T14524] netlink: 'syz.1.20605': attribute type 3 has an invalid length. [ 740.150687][T14529] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20607'. [ 740.187271][T14524] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.20605'. [ 740.367022][T14540] netlink: 'syz.0.20612': attribute type 27 has an invalid length. [ 740.536269][T14550] netlink: 'syz.3.20618': attribute type 10 has an invalid length. [ 740.547195][T14550] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20618'. [ 740.564652][T14550] A link change request failed with some changes committed already. Interface Y4`Ҙ may have been left with an inconsistent configuration, please check. [ 740.662387][T14557] netlink: 60 bytes leftover after parsing attributes in process `syz.2.20620'. [ 740.783811][T14573] netlink: 'syz.4.20629': attribute type 27 has an invalid length. [ 740.873427][T14577] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.20642'. [ 741.105593][T14587] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 741.132661][T14587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.406931][T14702] __nla_validate_parse: 7 callbacks suppressed [ 744.406964][T14702] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.20692'. [ 744.507165][T14711] netlink: 132 bytes leftover after parsing attributes in process `syz.1.20696'. [ 744.942418][T14744] netlink: 132 bytes leftover after parsing attributes in process `syz.4.20713'. [ 745.356627][T14755] validate_nla: 4 callbacks suppressed [ 745.356643][T14755] netlink: 'syz.0.20728': attribute type 2 has an invalid length. [ 745.371184][T14755] netlink: 'syz.0.20728': attribute type 1 has an invalid length. [ 745.424238][T14757] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.20718'. [ 746.650709][T14803] netlink: 'syz.2.20740': attribute type 41 has an invalid length. [ 746.753992][T14806] netlink: 'syz.3.20742': attribute type 9 has an invalid length. [ 746.761959][T14806] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.20742'. [ 746.831049][T14806] netlink: 'syz.3.20742': attribute type 9 has an invalid length. [ 746.850278][T14806] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.20742'. [ 747.049326][T14825] netlink: 'syz.3.20754': attribute type 2 has an invalid length. [ 747.081807][T14825] netlink: 'syz.3.20754': attribute type 1 has an invalid length. [ 747.146708][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.153111][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.866140][T14865] netlink: 'syz.2.20770': attribute type 2 has an invalid length. [ 747.897705][T14865] netlink: 'syz.2.20770': attribute type 1 has an invalid length. [ 748.255248][T14893] netlink: 'syz.2.20784': attribute type 17 has an invalid length. [ 748.856790][T14921] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.20798'. [ 748.957222][T14922] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.20798'. [ 749.172488][T14928] netlink: 2 bytes leftover after parsing attributes in process `syz.0.20801'. [ 749.198405][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.216415][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.244114][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.267291][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.285925][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.335383][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.345830][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.361660][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.372080][T14928] device batadv_slave_1 entered promiscuous mode [ 749.529179][T14959] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.20817'. [ 750.366766][T14962] validate_nla: 5 callbacks suppressed [ 750.366781][T14962] netlink: 'syz.4.20820': attribute type 9 has an invalid length. [ 750.395770][T14965] netlink: 2 bytes leftover after parsing attributes in process `syz.3.20828'. [ 750.396920][T14962] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.20820'. [ 750.409815][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.432484][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.442492][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.454483][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.465906][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.476571][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.486999][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.504131][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.520344][T14965] device batadv_slave_1 entered promiscuous mode [ 750.582610][T14972] netlink: 'syz.2.20822': attribute type 19 has an invalid length. [ 750.606563][T14970] netlink: 'syz.4.20820': attribute type 9 has an invalid length. [ 750.615457][T14970] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.20820'. [ 751.055192][T15005] netlink: 2 bytes leftover after parsing attributes in process `syz.2.20837'. [ 751.065798][T15005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.076933][T15005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.089445][T15005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.100382][T15005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.110231][T15005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.137963][T15005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.150437][T15005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.161000][T15005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.185472][T15005] device batadv_slave_1 entered promiscuous mode [ 751.279718][T15020] netlink: 'syz.1.20842': attribute type 9 has an invalid length. [ 751.317561][T15020] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.20842'. [ 751.379066][T15024] netlink: 'syz.1.20842': attribute type 9 has an invalid length. [ 751.397872][T15024] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.20842'. [ 751.552194][T15038] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.20854'. [ 751.597033][T15042] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20855'. [ 751.625506][T15042] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20855'. [ 752.587869][T15060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.627283][T15060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.667316][T15060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.707277][T15060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.727190][T15060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.758330][T15060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.789329][T15060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.811349][T15060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.827638][T15060] device batadv_slave_1 entered promiscuous mode [ 753.010388][T15072] sock: sock_set_timeout: `syz.4.20879' (pid 15072) tries to set negative timeout [ 753.120423][T15078] netlink: 'syz.3.20866': attribute type 17 has an invalid length. [ 753.495742][T15088] netlink: 'syz.0.20867': attribute type 9 has an invalid length. [ 753.591168][T15093] netlink: 'syz.0.20867': attribute type 9 has an invalid length. [ 753.933989][T15107] netlink: 'syz.0.20884': attribute type 21 has an invalid length. [ 754.374677][T15130] netlink: 'syz.4.20894': attribute type 9 has an invalid length. [ 754.928615][T15168] __nla_validate_parse: 10 callbacks suppressed [ 754.928629][T15168] netlink: 156 bytes leftover after parsing attributes in process `syz.0.20909'. [ 754.930539][T15170] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.20912'. [ 755.020818][T15172] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.20912'. [ 755.064280][T15174] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.20913'. [ 755.190978][T15180] sock: sock_set_timeout: `syz.2.20916' (pid 15180) tries to set negative timeout [ 755.753691][T15205] netlink: 156 bytes leftover after parsing attributes in process `syz.1.20924'. [ 755.948748][T15219] validate_nla: 5 callbacks suppressed [ 755.948764][T15219] netlink: 'syz.0.20930': attribute type 10 has an invalid length. [ 755.970103][T15215] netlink: 'syz.4.20932': attribute type 3 has an invalid length. [ 755.988263][T15219] netlink: 'syz.0.20930': attribute type 19 has an invalid length. [ 755.996180][T15219] netlink: 156 bytes leftover after parsing attributes in process `syz.0.20930'. [ 756.007375][T15215] netlink: 'syz.4.20932': attribute type 1 has an invalid length. [ 756.035612][T15215] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.20932'. [ 756.256153][T15238] netlink: 'syz.2.20943': attribute type 46 has an invalid length. [ 756.341770][T15244] netlink: 'syz.0.20956': attribute type 9 has an invalid length. [ 756.372697][T15246] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.20946'. [ 756.382141][T15244] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.20956'. [ 756.443008][T15247] netlink: 'syz.0.20956': attribute type 9 has an invalid length. [ 756.493072][T15247] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.20956'. [ 756.993590][T15270] netlink: 'syz.0.20954': attribute type 17 has an invalid length. [ 757.279305][T15278] netlink: 'syz.0.20970': attribute type 17 has an invalid length. [ 758.019208][T15306] netlink: 'syz.1.20975': attribute type 17 has an invalid length. [ 760.386142][T15436] __nla_validate_parse: 6 callbacks suppressed [ 760.386159][T15436] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.21034'. [ 760.957485][T15481] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.21055'. [ 761.246807][T15490] validate_nla: 4 callbacks suppressed [ 761.246821][T15490] netlink: 'syz.2.21060': attribute type 7 has an invalid length. [ 761.760605][T15526] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.21073'. [ 762.522192][T15552] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.21087'. [ 763.193815][T15592] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.21106'. [ 763.231683][T15596] netlink: 'syz.3.21107': attribute type 7 has an invalid length. [ 763.336744][T15606] [ 763.339106][T15606] ====================================================== [ 763.346093][T15606] WARNING: possible circular locking dependency detected [ 763.353086][T15606] 5.15.186-syzkaller #0 Not tainted [ 763.358248][T15606] ------------------------------------------------------ [ 763.365232][T15606] syz.4.21114/15606 is trying to acquire lock: [ 763.371352][T15606] ffff8880235335b8 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 763.380185][T15606] [ 763.380185][T15606] but task is already holding lock: [ 763.387517][T15606] ffff8880b913a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 763.396953][T15606] [ 763.396953][T15606] which lock already depends on the new lock. [ 763.396953][T15606] [ 763.407321][T15606] [ 763.407321][T15606] the existing dependency chain (in reverse order) is: [ 763.416300][T15606] [ 763.416300][T15606] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 763.423559][T15606] _raw_spin_lock_nested+0x2e/0x40 [ 763.429175][T15606] raw_spin_rq_lock_nested+0x26/0x140 [ 763.435049][T15606] task_fork_fair+0x5c/0x350 [ 763.440132][T15606] sched_cgroup_fork+0x2c6/0x320 [ 763.445559][T15606] copy_process+0x22d1/0x3e00 [ 763.450725][T15606] kernel_clone+0x219/0x930 [ 763.455720][T15606] kernel_thread+0xc8/0x120 [ 763.460720][T15606] rest_init+0x21/0x330 [ 763.465371][T15606] start_kernel+0x486/0x530 [ 763.470366][T15606] secondary_startup_64_no_verify+0xb1/0xbb [ 763.476753][T15606] [ 763.476753][T15606] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 763.484015][T15606] _raw_spin_lock_irqsave+0xa4/0xf0 [ 763.489707][T15606] try_to_wake_up+0x5c/0x1050 [ 763.494875][T15606] __wake_up_common+0x2a4/0x4e0 [ 763.500217][T15606] __wake_up+0x108/0x180 [ 763.504955][T15606] tty_port_default_wakeup+0xa5/0xf0 [ 763.510732][T15606] serial8250_tx_chars+0x629/0x830 [ 763.516355][T15606] serial8250_handle_irq+0x519/0x610 [ 763.522140][T15606] serial8250_default_handle_irq+0xb4/0x1a0 [ 763.528526][T15606] serial8250_interrupt+0x9b/0x1c0 [ 763.534125][T15606] __handle_irq_event_percpu+0x291/0x9b0 [ 763.540270][T15606] handle_irq_event+0xa5/0x220 [ 763.545522][T15606] handle_edge_irq+0x243/0xb20 [ 763.550776][T15606] __common_interrupt+0xd7/0x1e0 [ 763.556206][T15606] common_interrupt+0xb0/0xd0 [ 763.561383][T15606] asm_common_interrupt+0x22/0x40 [ 763.566898][T15606] syscall_enter_from_user_mode+0x2a/0x70 [ 763.573110][T15606] do_syscall_64+0x24/0xa0 [ 763.578015][T15606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 763.584398][T15606] [ 763.584398][T15606] -> #3 (&tty->write_wait){-.-.}-{2:2}: [ 763.592093][T15606] _raw_spin_lock_irqsave+0xa4/0xf0 [ 763.597782][T15606] __wake_up+0xed/0x180 [ 763.602429][T15606] tty_port_default_wakeup+0xa5/0xf0 [ 763.608203][T15606] serial8250_tx_chars+0x629/0x830 [ 763.613805][T15606] serial8250_handle_irq+0x519/0x610 [ 763.619580][T15606] serial8250_default_handle_irq+0xb4/0x1a0 [ 763.625963][T15606] serial8250_interrupt+0x9b/0x1c0 [ 763.631563][T15606] __handle_irq_event_percpu+0x291/0x9b0 [ 763.637683][T15606] handle_irq_event+0xa5/0x220 [ 763.642936][T15606] handle_edge_irq+0x243/0xb20 [ 763.648191][T15606] __common_interrupt+0xd7/0x1e0 [ 763.653617][T15606] common_interrupt+0xb0/0xd0 [ 763.658784][T15606] asm_common_interrupt+0x22/0x40 [ 763.664295][T15606] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 763.670505][T15606] uart_write+0x62f/0x880 [ 763.675325][T15606] n_tty_write+0xd21/0x1210 [ 763.680316][T15606] file_tty_write+0x557/0x910 [ 763.685480][T15606] vfs_write+0x712/0xd00 [ 763.690216][T15606] ksys_write+0x14d/0x250 [ 763.695030][T15606] do_syscall_64+0x4c/0xa0 [ 763.699934][T15606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 763.707184][T15606] [ 763.707184][T15606] -> #2 (&port_lock_key){-.-.}-{2:2}: [ 763.714702][T15606] _raw_spin_lock_irqsave+0xa4/0xf0 [ 763.720387][T15606] serial8250_console_write+0x170/0xf80 [ 763.726425][T15606] console_unlock+0xc86/0x1200 [ 763.731678][T15606] vprintk_emit+0xc0/0x150 [ 763.736582][T15606] _printk+0xcc/0x110 [ 763.741052][T15606] register_console+0x682/0x960 [ 763.746392][T15606] univ8250_console_init+0x41/0x50 [ 763.751994][T15606] console_init+0x177/0x5d0 [ 763.756990][T15606] start_kernel+0x2f9/0x530 [ 763.761992][T15606] secondary_startup_64_no_verify+0xb1/0xbb [ 763.768374][T15606] [ 763.768374][T15606] -> #1 (console_owner){-...}-{0:0}: [ 763.775805][T15606] console_lock_spinning_enable+0x51/0x60 [ 763.782010][T15606] console_unlock+0x9f8/0x1200 [ 763.787261][T15606] vprintk_emit+0xc0/0x150 [ 763.792165][T15606] _printk+0xcc/0x110 [ 763.796633][T15606] debug_objects_oom+0x89/0x2f0 [ 763.801970][T15606] debug_object_activate+0x409/0x480 [ 763.807743][T15606] kvfree_call_rcu+0xb5/0x7c0 [ 763.812909][T15606] trie_update_elem+0x86e/0xc50 [ 763.818247][T15606] bpf_map_update_value+0x591/0x670 [ 763.823935][T15606] generic_map_update_batch+0x525/0x7c0 [ 763.829972][T15606] bpf_map_do_batch+0x466/0x600 [ 763.835309][T15606] __sys_bpf+0x601/0x670 [ 763.840042][T15606] __x64_sys_bpf+0x78/0x90 [ 763.844947][T15606] do_syscall_64+0x4c/0xa0 [ 763.849855][T15606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 763.856236][T15606] [ 763.856236][T15606] -> #0 (&trie->lock){....}-{2:2}: [ 763.863496][T15606] __lock_acquire+0x2c33/0x7c60 [ 763.868834][T15606] lock_acquire+0x197/0x3f0 [ 763.873825][T15606] _raw_spin_lock_irqsave+0xa4/0xf0 [ 763.879513][T15606] trie_delete_elem+0x90/0x710 [ 763.884765][T15606] bpf_prog_9f018b4b6d9fb277+0x42/0x33c [ 763.890802][T15606] bpf_trace_run2+0x15b/0x2d0 [ 763.895967][T15606] trace_tlb_flush+0xe6/0x110 [ 763.901133][T15606] switch_mm_irqs_off+0x6e3/0x9a0 [ 763.906645][T15606] __schedule+0x1021/0x43b0 [ 763.911634][T15606] schedule+0x11b/0x1e0 [ 763.916277][T15606] futex_wait_queue_me+0x22d/0x440 [ 763.921876][T15606] futex_wait+0x202/0x5c0 [ 763.926697][T15606] do_futex+0xd1c/0x1240 [ 763.931428][T15606] __se_sys_futex+0x3a3/0x430 [ 763.936594][T15606] do_syscall_64+0x4c/0xa0 [ 763.941498][T15606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 763.947879][T15606] [ 763.947879][T15606] other info that might help us debug this: [ 763.947879][T15606] [ 763.958071][T15606] Chain exists of: [ 763.958071][T15606] &trie->lock --> &p->pi_lock --> &rq->__lock [ 763.958071][T15606] [ 763.970020][T15606] Possible unsafe locking scenario: [ 763.970020][T15606] [ 763.977436][T15606] CPU0 CPU1 [ 763.982767][T15606] ---- ---- [ 763.988101][T15606] lock(&rq->__lock); [ 763.992138][T15606] lock(&p->pi_lock); [ 763.998692][T15606] lock(&rq->__lock); [ 764.005244][T15606] lock(&trie->lock); [ 764.009277][T15606] [ 764.009277][T15606] *** DEADLOCK *** [ 764.009277][T15606] [ 764.017396][T15606] 2 locks held by syz.4.21114/15606: [ 764.022645][T15606] #0: ffff8880b913a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 764.032536][T15606] #1: ffffffff8c11bfa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 764.041799][T15606] [ 764.041799][T15606] stack backtrace: [ 764.047654][T15606] CPU: 1 PID: 15606 Comm: syz.4.21114 Not tainted 5.15.186-syzkaller #0 [ 764.055946][T15606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 764.065976][T15606] Call Trace: [ 764.069236][T15606] [ 764.072144][T15606] dump_stack_lvl+0x168/0x230 [ 764.076800][T15606] ? load_image+0x3b0/0x3b0 [ 764.081272][T15606] ? show_regs_print_info+0x20/0x20 [ 764.086443][T15606] ? print_circular_bug+0x12b/0x1a0 [ 764.091614][T15606] check_noncircular+0x274/0x310 [ 764.096519][T15606] ? add_chain_block+0x940/0x940 [ 764.101430][T15606] ? lockdep_lock+0xdc/0x1e0 [ 764.105993][T15606] ? add_chain_block+0x940/0x940 [ 764.110900][T15606] ? mark_lock+0x94/0x320 [ 764.115202][T15606] __lock_acquire+0x2c33/0x7c60 [ 764.120031][T15606] ? __lock_acquire+0x12d9/0x7c60 [ 764.125024][T15606] ? verify_lock_unused+0x140/0x140 [ 764.130202][T15606] lock_acquire+0x197/0x3f0 [ 764.134678][T15606] ? trie_delete_elem+0x90/0x710 [ 764.139586][T15606] ? read_lock_is_recursive+0x10/0x10 [ 764.144930][T15606] _raw_spin_lock_irqsave+0xa4/0xf0 [ 764.150099][T15606] ? trie_delete_elem+0x90/0x710 [ 764.155003][T15606] ? _raw_spin_lock+0x40/0x40 [ 764.159649][T15606] trie_delete_elem+0x90/0x710 [ 764.164381][T15606] ? __lock_acquire+0x7c60/0x7c60 [ 764.169375][T15606] bpf_prog_9f018b4b6d9fb277+0x42/0x33c [ 764.174888][T15606] bpf_trace_run2+0x15b/0x2d0 [ 764.179535][T15606] ? __update_load_avg_se+0x6e9/0xb90 [ 764.184876][T15606] ? bpf_trace_run1+0x2d0/0x2d0 [ 764.189694][T15606] ? __perf_event_task_sched_out+0xa6a/0xdb0 [ 764.195646][T15606] trace_tlb_flush+0xe6/0x110 [ 764.200296][T15606] switch_mm_irqs_off+0x6e3/0x9a0 [ 764.205288][T15606] ? switch_mm+0x120/0x120 [ 764.209669][T15606] ? psi_task_switch+0x4d6/0x810 [ 764.214576][T15606] __schedule+0x1021/0x43b0 [ 764.219050][T15606] ? cpufreq_update_util+0x91/0x230 [ 764.224218][T15606] ? futex_wait_queue_me+0x178/0x440 [ 764.229472][T15606] ? release_firmware_map_entry+0x190/0x190 [ 764.235331][T15606] ? __lock_acquire+0x7c60/0x7c60 [ 764.240324][T15606] ? plist_add+0x3d4/0x480 [ 764.244711][T15606] schedule+0x11b/0x1e0 [ 764.248837][T15606] futex_wait_queue_me+0x22d/0x440 [ 764.253920][T15606] futex_wait+0x202/0x5c0 [ 764.258220][T15606] ? do_futex+0x1240/0x1240 [ 764.262695][T15606] ? futex_wake+0x49f/0x530 [ 764.267171][T15606] ? bpf_raw_tracepoint_open+0x6e3/0x780 [ 764.272777][T15606] do_futex+0xd1c/0x1240 [ 764.276992][T15606] ? futex_exit_release+0x1c0/0x1c0 [ 764.282156][T15606] ? __context_tracking_exit+0x4c/0x80 [ 764.287583][T15606] ? __lock_acquire+0x7c60/0x7c60 [ 764.292577][T15606] __se_sys_futex+0x3a3/0x430 [ 764.297223][T15606] ? __x64_sys_futex+0xf0/0xf0 [ 764.301956][T15606] ? vtime_user_exit+0x2dc/0x400 [ 764.306866][T15606] ? __x64_sys_futex+0x1d/0xf0 [ 764.311598][T15606] do_syscall_64+0x4c/0xa0 [ 764.315981][T15606] ? clear_bhb_loop+0x30/0x80 [ 764.320627][T15606] ? clear_bhb_loop+0x30/0x80 [ 764.325285][T15606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 764.331146][T15606] RIP: 0033:0x7faf3a6b3929 [ 764.335530][T15606] Code: Unable to access opcode bytes at RIP 0x7faf3a6b38ff. [ 764.342861][T15606] RSP: 002b:00007faf3851b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 764.351244][T15606] RAX: ffffffffffffffda RBX: 00007faf3a8dafa8 RCX: 00007faf3a6b3929 [ 764.359183][T15606] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faf3a8dafa8 [ 764.367125][T15606] RBP: 00007faf3a8dafa0 R08: 0000000000000000 R09: 0000000000000000 [ 764.375066][T15606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf3a8dafac [ 764.383007][T15606] R13: 0000000000000000 R14: 00007ffcbf0bcf70 R15: 00007ffcbf0bd058 [ 764.390951][T15606]