last executing test programs: 4m24.889893549s ago: executing program 3 (id=15988): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) perf_event_open(&(0x7f0000000ac0)={0x0, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 4m24.671995373s ago: executing program 3 (id=15992): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 4m24.217586912s ago: executing program 3 (id=15995): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='%9\x00\x00 '], 0x33fe0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x83, &(0x7f0000000000), 0x8) 4m24.019362886s ago: executing program 3 (id=15998): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10a02, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100, 0x0, 0x0, 0x0, 0xab93}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 4m23.615279504s ago: executing program 3 (id=16010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7c1292442b01efe434b6ff54b9"], 0xfe3a) 4m23.155396902s ago: executing program 3 (id=16019): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1513, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'geneve1\x00', @random="a81d8614b995"}) 4m22.932189177s ago: executing program 32 (id=16019): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1513, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'geneve1\x00', @random="a81d8614b995"}) 1.322467875s ago: executing program 1 (id=21241): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.160505019s ago: executing program 1 (id=21246): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0xc0189436, &(0x7f0000000440)={'veth1_to_team\x00', @remote}) 1.121924639s ago: executing program 2 (id=21247): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.025496931s ago: executing program 4 (id=21249): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 948.099333ms ago: executing program 4 (id=21250): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xc, &(0x7f0000000100)=r1, 0x4) 938.348783ms ago: executing program 1 (id=21258): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 773.067776ms ago: executing program 4 (id=21253): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904022008f110000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24048890) 674.601298ms ago: executing program 0 (id=21254): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 674.473848ms ago: executing program 1 (id=21255): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x64}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110a400000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf2}, 0x48) 575.27002ms ago: executing program 4 (id=21256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x5, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 574.67131ms ago: executing program 0 (id=21257): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0, 0x700}, 0x20) 574.60356ms ago: executing program 2 (id=21259): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0xc0189436, &(0x7f0000000440)={'veth1_to_team\x00', @remote}) 496.649271ms ago: executing program 1 (id=21260): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x3c, 0x0, 0x0) 435.247702ms ago: executing program 0 (id=21261): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xc, &(0x7f0000000100)=r1, 0x4) 435.154652ms ago: executing program 4 (id=21262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000020000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030004008500000082000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10) 434.539652ms ago: executing program 2 (id=21263): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/45, 0x2e}, {&(0x7f0000000c40)=""/4093, 0xffd}], 0x2, 0x0, 0x4}, 0x40000022) 393.522733ms ago: executing program 1 (id=21264): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20) 310.914875ms ago: executing program 4 (id=21265): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 310.301425ms ago: executing program 0 (id=21266): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8933, &(0x7f0000000080)) 286.876955ms ago: executing program 2 (id=21267): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 151.449088ms ago: executing program 2 (id=21268): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 148.799488ms ago: executing program 0 (id=21276): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000003c0)={r1, r0, 0x0, r0}, 0x10) 100.521µs ago: executing program 0 (id=21269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x5, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=21270): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd}, 0x50) kernel console output (not intermixed with test programs): ay have been left with an inconsistent configuration, please check. [ 704.677100][ T2693] netlink: 'syz.3.14312': attribute type 1 has an invalid length. [ 707.478600][ T2857] netlink: 'syz.2.14375': attribute type 8 has an invalid length. [ 707.500367][ T2857] __nla_validate_parse: 8 callbacks suppressed [ 707.500385][ T2857] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.14375'. [ 707.587166][ T2859] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14377'. [ 707.961709][ T2887] netlink: 'syz.3.14387': attribute type 8 has an invalid length. [ 707.972383][ T2887] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.14387'. [ 708.679428][ T2921] netlink: 'syz.2.14405': attribute type 29 has an invalid length. [ 708.709680][ T2921] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14405'. [ 708.734892][ T2921] netlink: 'syz.2.14405': attribute type 29 has an invalid length. [ 708.750172][ T2921] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14405'. [ 708.807166][ T2928] netlink: 'syz.0.14409': attribute type 21 has an invalid length. [ 708.823013][ T2928] netlink: 156 bytes leftover after parsing attributes in process `syz.0.14409'. [ 709.071200][ T2939] netlink: 'syz.2.14413': attribute type 19 has an invalid length. [ 709.303880][ T2955] netlink: 'syz.3.14421': attribute type 12 has an invalid length. [ 709.315597][ T2955] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14421'. [ 709.652466][ T2970] netlink: 'syz.1.14427': attribute type 19 has an invalid length. [ 709.867369][ T2980] netlink: 'syz.0.14433': attribute type 2 has an invalid length. [ 709.894989][ T2980] netlink: 'syz.0.14433': attribute type 1 has an invalid length. [ 709.903318][ T2980] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14433'. [ 710.418003][ T3011] netlink: 'syz.1.14446': attribute type 2 has an invalid length. [ 710.426105][ T3011] netlink: 'syz.1.14446': attribute type 1 has an invalid length. [ 710.434335][ T3011] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14446'. [ 710.738690][ T3027] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14464'. [ 712.678134][ T3133] __nla_validate_parse: 11 callbacks suppressed [ 712.678154][ T3133] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14509'. [ 714.037937][ T3215] validate_nla: 8 callbacks suppressed [ 714.037955][ T3215] netlink: 'syz.1.14548': attribute type 3 has an invalid length. [ 714.057657][ T3215] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.14548'. [ 714.739995][ T3254] netlink: 'syz.2.14565': attribute type 3 has an invalid length. [ 714.758291][ T3254] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.14565'. [ 715.154009][ T3278] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.14579'. [ 715.179502][ T3278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14579'. [ 715.450043][ T3297] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14589'. [ 715.460395][ T3297] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 715.469605][ T3297] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 715.613852][ T3305] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.14593'. [ 715.644495][ T3305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14593'. [ 716.116467][ T3337] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.14607'. [ 716.126567][ T3337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14607'. [ 716.807761][ T3386] netlink: 'syz.1.14628': attribute type 11 has an invalid length. [ 717.635746][ T3432] netlink: 'syz.3.14651': attribute type 11 has an invalid length. [ 717.761638][ T3439] netlink: 'syz.1.14653': attribute type 1 has an invalid length. [ 717.770098][ T3439] __nla_validate_parse: 2 callbacks suppressed [ 717.770112][ T3439] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.14653'. [ 717.786568][ T3439] netlink: 1 bytes leftover after parsing attributes in process `syz.1.14653'. [ 717.989539][ T3451] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.14657'. [ 718.130021][ T3459] netlink: 'syz.0.14660': attribute type 11 has an invalid length. [ 718.145032][ T3459] netlink: 140 bytes leftover after parsing attributes in process `syz.0.14660'. [ 718.166582][ T3463] netlink: 'syz.2.14664': attribute type 10 has an invalid length. [ 718.273747][ T3465] netlink: 'syz.0.14674': attribute type 10 has an invalid length. [ 718.527823][ T3484] netlink: 'syz.0.14675': attribute type 10 has an invalid length. [ 718.568982][ T3484] team0: Device veth1_macvtap failed to register rx_handler [ 718.632609][ T3487] netlink: 'syz.2.14676': attribute type 21 has an invalid length. [ 718.650970][ T3487] netlink: 128 bytes leftover after parsing attributes in process `syz.2.14676'. [ 718.996683][ T3506] bridge0: port 3(gretap0) entered disabled state [ 719.003415][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.010892][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.053081][ T3508] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.14685'. [ 719.471229][ T3532] validate_nla: 3 callbacks suppressed [ 719.471250][ T3532] netlink: 'syz.3.14698': attribute type 10 has an invalid length. [ 719.504185][ T3532] bridge0: port 4(ip6gretap0) entered disabled state [ 719.511215][ T3532] bridge0: port 3(gretap0) entered disabled state [ 719.517909][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.525350][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.614605][ T3542] netlink: 'syz.2.14709': attribute type 10 has an invalid length. [ 719.657479][ T3542] team0: Device veth1_macvtap failed to register rx_handler [ 719.759357][ T3546] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.14704'. [ 719.779066][ T3546] openvswitch: netlink: Message has 20476 unknown bytes. [ 720.034571][ T3560] netlink: 'syz.3.14712': attribute type 21 has an invalid length. [ 720.056494][ T3560] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14712'. [ 720.070307][ T3560] netlink: 'syz.3.14712': attribute type 4 has an invalid length. [ 720.142036][ T3566] netlink: 'syz.1.14715': attribute type 10 has an invalid length. [ 720.178836][ T3566] veth1_macvtap: left promiscuous mode [ 720.194500][ T3566] veth1_macvtap: left allmulticast mode [ 720.223430][ T3566] veth1_macvtap: entered allmulticast mode [ 720.255771][ T3566] team0: Port device veth1_macvtap added [ 720.273972][ T3571] delete_channel: no stack [ 720.684813][ T3594] netlink: 'syz.3.14729': attribute type 49 has an invalid length. [ 720.816735][ T3602] netlink: 'syz.1.14740': attribute type 49 has an invalid length. [ 720.954508][ T3610] netlink: 'syz.0.14745': attribute type 49 has an invalid length. [ 721.149557][ T3621] delete_channel: no stack [ 721.259295][ T3630] netlink: 'syz.3.14744': attribute type 10 has an invalid length. [ 721.326106][ T3630] team0: Device veth1_macvtap failed to register rx_handler [ 721.648578][ T3648] delete_channel: no stack [ 721.665857][ T3651] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.14755'. [ 722.105730][ T3676] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.14770'. [ 723.282136][ T3716] netlink: 'syz.0.14796': attribute type 1 has an invalid length. [ 725.159178][ T3811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14833'. [ 725.471303][ T3825] validate_nla: 1 callbacks suppressed [ 725.471319][ T3825] netlink: 'syz.2.14838': attribute type 10 has an invalid length. [ 726.154708][ T3848] netlink: 10 bytes leftover after parsing attributes in process `syz.2.14851'. [ 726.292549][ T3856] netlink: 'syz.2.14855': attribute type 21 has an invalid length. [ 726.322863][ T3856] netlink: 'syz.2.14855': attribute type 4 has an invalid length. [ 726.332259][ T3856] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14855'. [ 726.530929][ T3868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14862'. [ 726.618405][ T3868] bridge_slave_0 (unregistering): left allmulticast mode [ 726.625710][ T3868] bridge_slave_0 (unregistering): left promiscuous mode [ 726.632955][ T3868] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.672071][ T3871] netlink: 'syz.1.14863': attribute type 10 has an invalid length. [ 727.203668][ T3897] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14876'. [ 727.309858][ T3897] bridge_slave_0 (unregistering): left allmulticast mode [ 727.317301][ T3897] bridge_slave_0 (unregistering): left promiscuous mode [ 727.325930][ T3897] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.656531][ T3979] netlink: 'syz.3.14917': attribute type 3 has an invalid length. [ 728.672523][ T3979] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.14917'. [ 728.682648][ T3981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14918'. [ 728.761375][ T3981] bridge_slave_0 (unregistering): left allmulticast mode [ 728.768833][ T3981] bridge_slave_0 (unregistering): left promiscuous mode [ 728.776613][ T3981] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.823505][ T3983] netlink: 'syz.2.14919': attribute type 21 has an invalid length. [ 728.848235][ T3983] netlink: 'syz.2.14919': attribute type 20 has an invalid length. [ 728.881597][ T3987] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 729.339169][ T4011] netlink: 'syz.0.14931': attribute type 3 has an invalid length. [ 729.382463][ T4011] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.14931'. [ 730.008517][ T4043] netlink: 'syz.1.14947': attribute type 3 has an invalid length. [ 730.022762][ T4043] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.14947'. [ 731.351046][ T4119] netlink: 'syz.3.14982': attribute type 2 has an invalid length. [ 731.359191][ T4119] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.14982'. [ 732.958550][ T4209] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.15024'. [ 733.158783][ T4221] netlink: 10 bytes leftover after parsing attributes in process `syz.1.15030'. [ 733.365269][ T4233] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.15036'. [ 733.498208][ T4241] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15040'. [ 733.521468][ T4241] hsr_slave_0: left promiscuous mode [ 733.537330][ T4241] hsr_slave_1: left promiscuous mode [ 733.571485][ T4245] netlink: 10 bytes leftover after parsing attributes in process `syz.3.15041'. [ 733.877708][ T4261] netlink: 'syz.1.15050': attribute type 2 has an invalid length. [ 733.927276][ T4263] netlink: 10 bytes leftover after parsing attributes in process `syz.2.15051'. [ 734.328538][ T4287] netlink: 'syz.3.15061': attribute type 10 has an invalid length. [ 734.348670][ T4287] netlink: 55 bytes leftover after parsing attributes in process `syz.3.15061'. [ 734.375452][ T4287] batman_adv: batadv0: Interface deactivated: vlan1 [ 734.614194][ T4287] vlan0 (unregistering): left promiscuous mode [ 734.648362][ T4287] team0: Port device vlan0 removed [ 734.700825][ T4287] batman_adv: batadv0: Removing interface: vlan1 [ 734.856575][ T4306] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.15072'. [ 734.910283][ T4306] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.15072'. [ 735.448864][ T4332] netlink: 'syz.1.15084': attribute type 1 has an invalid length. [ 736.099334][ T4361] netlink: 'syz.2.15098': attribute type 1 has an invalid length. [ 737.186758][ T4421] netlink: 'syz.0.15125': attribute type 1 has an invalid length. [ 737.196366][ T4421] __nla_validate_parse: 3 callbacks suppressed [ 737.196382][ T4421] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.15125'. [ 737.334393][ T4426] netlink: 'syz.0.15128': attribute type 10 has an invalid length. [ 737.342469][ T4426] netlink: 55 bytes leftover after parsing attributes in process `syz.0.15128'. [ 737.528501][ T4432] netlink: 196 bytes leftover after parsing attributes in process `syz.2.15132'. [ 738.516141][ T4475] netlink: 196 bytes leftover after parsing attributes in process `syz.1.15152'. [ 740.355512][ T4565] netlink: 'syz.3.15194': attribute type 29 has an invalid length. [ 740.363796][ T4565] netlink: 'syz.3.15194': attribute type 29 has an invalid length. [ 740.379415][ T4565] netlink: 'syz.3.15194': attribute type 29 has an invalid length. [ 740.495332][ T4571] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.15196'. [ 741.283642][ T4611] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.15218'. [ 741.293263][ T4611] tc_dump_action: action bad kind [ 741.549608][ T4623] netlink: 'syz.1.15224': attribute type 3 has an invalid length. [ 741.560004][ T4623] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.15224'. [ 742.427903][ T4665] netlink: 'syz.2.15252': attribute type 29 has an invalid length. [ 742.436279][ T4665] netlink: 'syz.2.15252': attribute type 29 has an invalid length. [ 742.448397][ T4665] netlink: 'syz.2.15252': attribute type 29 has an invalid length. [ 742.821269][ T4683] netlink: 52711 bytes leftover after parsing attributes in process `syz.2.15249'. [ 743.007096][ T4695] netlink: 'syz.0.15257': attribute type 29 has an invalid length. [ 743.016047][ T4695] netlink: 'syz.0.15257': attribute type 29 has an invalid length. [ 743.036139][ T4695] netlink: 'syz.0.15257': attribute type 29 has an invalid length. [ 743.449239][ T4712] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.15266'. [ 744.506866][ T4741] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.15281'. [ 744.538966][ T4742] netlink: 763 bytes leftover after parsing attributes in process `syz.0.15287'. [ 744.628651][ T4746] netlink: 'syz.2.15283': attribute type 3 has an invalid length. [ 744.674370][ T4746] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.15283'. [ 744.782642][ T4754] netlink: 'syz.1.15288': attribute type 2 has an invalid length. [ 744.791905][ T4754] netlink: 164 bytes leftover after parsing attributes in process `syz.1.15288'. [ 744.815779][ T4754] netlink: 'syz.1.15288': attribute type 2 has an invalid length. [ 744.834517][ T4754] netlink: 164 bytes leftover after parsing attributes in process `syz.1.15288'. [ 745.048864][ T4764] netlink: 763 bytes leftover after parsing attributes in process `syz.2.15293'. [ 745.275940][ T4772] netlink: 'syz.0.15297': attribute type 3 has an invalid length. [ 745.294625][ T4772] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.15297'. [ 745.660677][ T4789] netlink: 164 bytes leftover after parsing attributes in process `syz.3.15302'. [ 746.309737][ T4820] caif0: entered promiscuous mode [ 746.323903][ T4820] caif0: entered allmulticast mode [ 747.635052][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.641446][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.075358][ T4860] validate_nla: 5 callbacks suppressed [ 748.075377][ T4860] netlink: 'syz.3.15341': attribute type 1 has an invalid length. [ 748.116681][ T4860] __nla_validate_parse: 6 callbacks suppressed [ 748.116699][ T4860] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.15341'. [ 748.565917][ T4874] netlink: 'syz.0.15347': attribute type 7 has an invalid length. [ 748.710950][ T4882] netlink: 'syz.2.15353': attribute type 1 has an invalid length. [ 748.721397][ T4882] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.15353'. [ 749.332144][ T4905] netlink: 'syz.1.15363': attribute type 1 has an invalid length. [ 749.343587][ T4905] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.15363'. [ 749.952643][ T4919] netlink: 'syz.3.15370': attribute type 39 has an invalid length. [ 750.449091][ T4941] netlink: 'syz.2.15381': attribute type 39 has an invalid length. [ 750.581339][ T4946] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.15383'. [ 751.335341][ T4958] netlink: 'syz.3.15388': attribute type 21 has an invalid length. [ 751.645473][ T4967] netlink: 'syz.1.15392': attribute type 39 has an invalid length. [ 755.064789][ T5043] netlink: 'syz.1.15427': attribute type 1 has an invalid length. [ 755.072862][ T5043] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.15427'. [ 756.253011][ T5071] netlink: 'syz.0.15440': attribute type 1 has an invalid length. [ 756.261118][ T5071] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.15440'. [ 757.586079][ T5096] netlink: 'syz.3.15453': attribute type 1 has an invalid length. [ 757.593988][ T5096] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.15453'. [ 760.609041][ T5179] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.15484'. [ 760.711500][ T5185] netlink: 'syz.1.15489': attribute type 33 has an invalid length. [ 760.720995][ T5185] netlink: 164 bytes leftover after parsing attributes in process `syz.1.15489'. [ 760.795557][ T5189] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.15491'. [ 761.552342][ T5211] netlink: 'syz.2.15500': attribute type 33 has an invalid length. [ 761.599815][ T5211] netlink: 164 bytes leftover after parsing attributes in process `syz.2.15500'. [ 761.761394][ T5215] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.15502'. [ 762.289401][ T5240] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.15514'. [ 763.883254][ T5274] delete_channel: no stack [ 764.022373][ T5288] netlink: 'syz.2.15537': attribute type 3 has an invalid length. [ 764.041266][ T5288] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15537'. [ 764.233455][ T5296] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.15542'. [ 765.070158][ T5312] delete_channel: no stack [ 766.224585][ T5354] delete_channel: no stack [ 767.075940][ T5383] netlink: 'syz.2.15582': attribute type 4 has an invalid length. [ 767.087245][ T5383] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.15582'. [ 767.197876][ T5385] netlink: 'syz.3.15583': attribute type 21 has an invalid length. [ 767.521357][ T5396] netlink: 'syz.2.15587': attribute type 21 has an invalid length. [ 769.006844][ T5461] netlink: 'syz.2.15624': attribute type 21 has an invalid length. [ 770.010343][ T5495] netlink: 'syz.1.15633': attribute type 4 has an invalid length. [ 770.034059][ T5495] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.15633'. [ 772.146562][ T5565] netlink: 'syz.0.15659': attribute type 8 has an invalid length. [ 772.179505][ T5565] netlink: 'syz.0.15659': attribute type 1 has an invalid length. [ 772.194356][ T5565] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15659'. [ 773.960749][ T5666] netlink: 'syz.2.15707': attribute type 8 has an invalid length. [ 773.969408][ T5666] netlink: 'syz.2.15707': attribute type 1 has an invalid length. [ 773.982659][ T5666] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.15707'. [ 774.527128][ T5694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15721'. [ 774.543522][ T5694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15721'. [ 774.555485][ T5694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15721'. [ 774.604625][ T5696] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15718'. [ 774.613985][ T5696] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15718'. [ 774.665692][ T5692] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15718'. [ 775.060423][ T5722] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15735'. [ 775.070702][ T5722] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15735'. [ 776.697074][ T5799] netlink: 'syz.0.15765': attribute type 3 has an invalid length. [ 776.706704][ T5799] netlink: 'syz.0.15765': attribute type 1 has an invalid length. [ 777.211873][ T5860] netlink: 'syz.0.15780': attribute type 10 has an invalid length. [ 777.220519][ T5860] __nla_validate_parse: 5 callbacks suppressed [ 777.220534][ T5860] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15780'. [ 777.254628][ T5860] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 777.831017][ T5892] netlink: 'syz.3.15795': attribute type 3 has an invalid length. [ 777.848256][ T5892] netlink: 'syz.3.15795': attribute type 1 has an invalid length. [ 777.857082][ T5892] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.15795'. [ 778.419050][ T5913] netlink: 'syz.1.15807': attribute type 3 has an invalid length. [ 778.432037][ T5913] netlink: 'syz.1.15807': attribute type 1 has an invalid length. [ 778.450298][ T5913] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.15807'. [ 778.457408][ T5917] netlink: 'syz.2.15805': attribute type 10 has an invalid length. [ 778.469966][ T5917] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15805'. [ 778.483417][ T5917] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 778.588873][ T5922] netlink: 'syz.1.15818': attribute type 33 has an invalid length. [ 778.611406][ T5922] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15818'. [ 779.014667][ T5944] netlink: 'syz.1.15819': attribute type 10 has an invalid length. [ 779.024022][ T5944] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15819'. [ 779.046582][ T5944] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 779.328873][ T5955] netlink: 'syz.0.15824': attribute type 33 has an invalid length. [ 779.358879][ T5955] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15824'. [ 780.482520][ T6003] netlink: 'syz.3.15850': attribute type 21 has an invalid length. [ 781.212873][ T6036] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.15865'. [ 782.130804][ T6084] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.15888'. [ 782.365817][ T6100] validate_nla: 3 callbacks suppressed [ 782.365829][ T6100] netlink: 'syz.2.15904': attribute type 13 has an invalid length. [ 782.380283][ T6100] netlink: 164 bytes leftover after parsing attributes in process `syz.2.15904'. [ 782.648480][ T6112] netlink: 'syz.1.15901': attribute type 21 has an invalid length. [ 783.352911][ T6144] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.15918'. [ 783.525536][ T6154] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.15923'. [ 783.595451][ T6158] netlink: 'syz.3.15924': attribute type 9 has an invalid length. [ 783.614393][ T6158] netlink: 399 bytes leftover after parsing attributes in process `syz.3.15924'. [ 783.861374][ T6166] netlink: 'syz.3.15928': attribute type 13 has an invalid length. [ 783.884774][ T6166] netlink: 164 bytes leftover after parsing attributes in process `syz.3.15928'. [ 783.903241][ T6166] syz_tun: refused to change device tx_queue_len [ 784.002298][ T6170] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.15932'. [ 784.025503][ T6170] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 784.040827][ T6170] CPU: 0 PID: 6170 Comm: syz.3.15932 Not tainted syzkaller #0 [ 784.048386][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 784.058505][ T6170] Call Trace: [ 784.061843][ T6170] [ 784.064846][ T6170] dump_stack_lvl+0x16c/0x230 [ 784.069601][ T6170] ? show_regs_print_info+0x20/0x20 [ 784.074885][ T6170] ? load_image+0x3b0/0x3b0 [ 784.079490][ T6170] sysfs_warn_dup+0x8e/0xa0 [ 784.084066][ T6170] sysfs_do_create_link_sd+0xc0/0x110 [ 784.089523][ T6170] device_add_class_symlinks+0x1cf/0x240 [ 784.095281][ T6170] device_add+0x507/0xc20 [ 784.099699][ T6170] wiphy_register+0x1e74/0x2c00 [ 784.104627][ T6170] ? cfg80211_event_work+0x40/0x40 [ 784.109772][ T6170] ? minstrel_ht_alloc+0x88a/0x990 [ 784.114940][ T6170] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 784.121066][ T6170] ieee80211_register_hw+0x2dc2/0x3ac0 [ 784.126609][ T6170] ? ieee80211_tasklet_handler+0x20/0x20 [ 784.132271][ T6170] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 784.138207][ T6170] ? __debug_object_init+0xe8/0x430 [ 784.143449][ T6170] ? __asan_memset+0x22/0x40 [ 784.148064][ T6170] ? __hrtimer_init+0x186/0x270 [ 784.152941][ T6170] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 784.158722][ T6170] ? mac80211_hwsim_free+0x220/0x220 [ 784.164050][ T6170] ? rcu_is_watching+0x15/0xb0 [ 784.168841][ T6170] ? kstrndup+0xbd/0x140 [ 784.173121][ T6170] hwsim_new_radio_nl+0xd78/0x19d0 [ 784.178261][ T6170] ? __nla_validate+0x50/0x50 [ 784.183009][ T6170] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 784.189403][ T6170] ? __nla_parse+0x40/0x50 [ 784.193860][ T6170] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 784.200233][ T6170] genl_family_rcv_msg_doit+0x209/0x2f0 [ 784.205825][ T6170] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 784.211757][ T6170] ? bpf_lsm_capable+0x9/0x10 [ 784.216461][ T6170] ? security_capable+0x89/0xb0 [ 784.221343][ T6170] genl_rcv_msg+0x60b/0x790 [ 784.225901][ T6170] ? genl_bind+0x360/0x360 [ 784.230339][ T6170] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 784.236694][ T6170] ? perf_trace_lock+0x2ed/0x380 [ 784.241701][ T6170] netlink_rcv_skb+0x216/0x480 [ 784.246568][ T6170] ? genl_bind+0x360/0x360 [ 784.251018][ T6170] ? netlink_ack+0x1110/0x1110 [ 784.255835][ T6170] ? __lock_acquire+0x7c80/0x7c80 [ 784.260908][ T6170] ? down_read+0x1ac/0x2e0 [ 784.265380][ T6170] genl_rcv+0x28/0x40 [ 784.269402][ T6170] netlink_unicast+0x751/0x8d0 [ 784.274216][ T6170] netlink_sendmsg+0x8c1/0xbe0 [ 784.279037][ T6170] ? netlink_getsockopt+0x580/0x580 [ 784.284284][ T6170] ? aa_sock_msg_perm+0x94/0x150 [ 784.289286][ T6170] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 784.294621][ T6170] ? security_socket_sendmsg+0x80/0xa0 [ 784.300115][ T6170] ? netlink_getsockopt+0x580/0x580 [ 784.305343][ T6170] ____sys_sendmsg+0x5bf/0x950 [ 784.310173][ T6170] ? __asan_memset+0x22/0x40 [ 784.314788][ T6170] ? __sys_sendmsg_sock+0x30/0x30 [ 784.319837][ T6170] ? __import_iovec+0x5f2/0x860 [ 784.324732][ T6170] ? import_iovec+0x73/0xa0 [ 784.329269][ T6170] ___sys_sendmsg+0x220/0x290 [ 784.334015][ T6170] ? __sys_sendmsg+0x270/0x270 [ 784.338883][ T6170] __se_sys_sendmsg+0x1a5/0x270 [ 784.343766][ T6170] ? __x64_sys_sendmsg+0x80/0x80 [ 784.348784][ T6170] ? lockdep_hardirqs_on+0x98/0x150 [ 784.354036][ T6170] do_syscall_64+0x55/0xb0 [ 784.358485][ T6170] ? clear_bhb_loop+0x40/0x90 [ 784.363179][ T6170] ? clear_bhb_loop+0x40/0x90 [ 784.367893][ T6170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 784.373812][ T6170] RIP: 0033:0x7f8b7dd8ec29 [ 784.378251][ T6170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.397888][ T6170] RSP: 002b:00007f8b7ec3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.406331][ T6170] RAX: ffffffffffffffda RBX: 00007f8b7dfd5fa0 RCX: 00007f8b7dd8ec29 [ 784.414333][ T6170] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 784.422416][ T6170] RBP: 00007f8b7de11e41 R08: 0000000000000000 R09: 0000000000000000 [ 784.430408][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.438401][ T6170] R13: 00007f8b7dfd6038 R14: 00007f8b7dfd5fa0 R15: 00007ffc8ec1c3a8 [ 784.446422][ T6170] [ 784.799765][ T6191] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.15940'. [ 785.323878][ T6215] netlink: 'syz.1.15951': attribute type 4 has an invalid length. [ 785.351911][ T6215] netlink: 140 bytes leftover after parsing attributes in process `syz.1.15951'. [ 785.448822][ T6221] netlink: 'syz.2.15953': attribute type 9 has an invalid length. [ 785.467310][ T6221] netlink: 399 bytes leftover after parsing attributes in process `syz.2.15953'. [ 785.553891][ T6227] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15957'. [ 786.881231][ T6289] netlink: 'syz.0.15996': attribute type 4 has an invalid length. [ 786.930188][ T6293] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 786.938884][ T6293] CPU: 0 PID: 6293 Comm: syz.2.15990 Not tainted syzkaller #0 [ 786.946416][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 786.956542][ T6293] Call Trace: [ 786.959967][ T6293] [ 786.962948][ T6293] dump_stack_lvl+0x16c/0x230 [ 786.967709][ T6293] ? show_regs_print_info+0x20/0x20 [ 786.972972][ T6293] ? load_image+0x3b0/0x3b0 [ 786.977584][ T6293] sysfs_warn_dup+0x8e/0xa0 [ 786.982174][ T6293] sysfs_do_create_link_sd+0xc0/0x110 [ 786.987628][ T6293] device_add_class_symlinks+0x1cf/0x240 [ 786.993352][ T6293] device_add+0x507/0xc20 [ 786.997879][ T6293] wiphy_register+0x1e74/0x2c00 [ 787.002854][ T6293] ? cfg80211_event_work+0x40/0x40 [ 787.008042][ T6293] ? minstrel_ht_alloc+0x88a/0x990 [ 787.013239][ T6293] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 787.019403][ T6293] ieee80211_register_hw+0x2dc2/0x3ac0 [ 787.024986][ T6293] ? ieee80211_tasklet_handler+0x20/0x20 [ 787.030686][ T6293] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 787.036652][ T6293] ? __debug_object_init+0xe8/0x430 [ 787.041895][ T6293] ? __asan_memset+0x22/0x40 [ 787.046526][ T6293] ? __hrtimer_init+0x186/0x270 [ 787.051418][ T6293] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 787.057212][ T6293] ? mac80211_hwsim_free+0x220/0x220 [ 787.062527][ T6293] ? rcu_is_watching+0x15/0xb0 [ 787.067328][ T6293] ? kstrndup+0xbd/0x140 [ 787.071622][ T6293] hwsim_new_radio_nl+0xd78/0x19d0 [ 787.076769][ T6293] ? __nla_validate+0x50/0x50 [ 787.081508][ T6293] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 787.087887][ T6293] ? __nla_parse+0x40/0x50 [ 787.092350][ T6293] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 787.098727][ T6293] genl_family_rcv_msg_doit+0x209/0x2f0 [ 787.104329][ T6293] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 787.110277][ T6293] ? bpf_lsm_capable+0x9/0x10 [ 787.114997][ T6293] ? security_capable+0x89/0xb0 [ 787.119894][ T6293] genl_rcv_msg+0x60b/0x790 [ 787.124460][ T6293] ? genl_bind+0x360/0x360 [ 787.128934][ T6293] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 787.135327][ T6293] ? perf_trace_lock+0x2ed/0x380 [ 787.140356][ T6293] netlink_rcv_skb+0x216/0x480 [ 787.145165][ T6293] ? genl_bind+0x360/0x360 [ 787.149623][ T6293] ? netlink_ack+0x1110/0x1110 [ 787.154449][ T6293] ? __lock_acquire+0x7c80/0x7c80 [ 787.159516][ T6293] ? net_generic+0x1e/0x240 [ 787.164058][ T6293] ? down_read+0x1ac/0x2e0 [ 787.168517][ T6293] genl_rcv+0x28/0x40 [ 787.172531][ T6293] netlink_unicast+0x751/0x8d0 [ 787.177354][ T6293] netlink_sendmsg+0x8c1/0xbe0 [ 787.182166][ T6293] ? netlink_getsockopt+0x580/0x580 [ 787.187427][ T6293] ? aa_sock_msg_perm+0x94/0x150 [ 787.192400][ T6293] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 787.197710][ T6293] ? security_socket_sendmsg+0x80/0xa0 [ 787.203206][ T6293] ? netlink_getsockopt+0x580/0x580 [ 787.208442][ T6293] ____sys_sendmsg+0x5bf/0x950 [ 787.213254][ T6293] ? __asan_memset+0x22/0x40 [ 787.217884][ T6293] ? __sys_sendmsg_sock+0x30/0x30 [ 787.222946][ T6293] ? __import_iovec+0x5f2/0x860 [ 787.227864][ T6293] ? import_iovec+0x73/0xa0 [ 787.232415][ T6293] ___sys_sendmsg+0x220/0x290 [ 787.237141][ T6293] ? __sys_sendmsg+0x270/0x270 [ 787.242028][ T6293] __se_sys_sendmsg+0x1a5/0x270 [ 787.246923][ T6293] ? __x64_sys_sendmsg+0x80/0x80 [ 787.251924][ T6293] ? lockdep_hardirqs_on+0x98/0x150 [ 787.257164][ T6293] do_syscall_64+0x55/0xb0 [ 787.261606][ T6293] ? clear_bhb_loop+0x40/0x90 [ 787.266314][ T6293] ? clear_bhb_loop+0x40/0x90 [ 787.271017][ T6293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 787.276948][ T6293] RIP: 0033:0x7f8f4e38ec29 [ 787.281394][ T6293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.301040][ T6293] RSP: 002b:00007f8f4f2fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.309494][ T6293] RAX: ffffffffffffffda RBX: 00007f8f4e5d5fa0 RCX: 00007f8f4e38ec29 [ 787.317522][ T6293] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 787.325534][ T6293] RBP: 00007f8f4e411e41 R08: 0000000000000000 R09: 0000000000000000 [ 787.333534][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.341619][ T6293] R13: 00007f8f4e5d6038 R14: 00007f8f4e5d5fa0 R15: 00007ffdec22e488 [ 787.349649][ T6293] [ 787.498547][ T6302] __nla_validate_parse: 4 callbacks suppressed [ 787.498568][ T6302] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15994'. [ 788.221322][ T6332] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.16011'. [ 788.260770][ T6335] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16012'. [ 788.315403][ T6335] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16012'. [ 788.336904][ T6338] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16012'. [ 789.182085][ T6365] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.16033'. [ 789.253986][ T6368] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 789.272071][ T6368] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 789.283311][ T6368] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 789.295900][ T6368] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 789.304107][ T6368] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 789.314202][ T6368] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 789.535854][ T6377] netlink: 168 bytes leftover after parsing attributes in process `syz.0.16030'. [ 789.644136][ T6382] netlink: 'syz.1.16031': attribute type 29 has an invalid length. [ 789.695761][ T1000] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.818325][ T6382] netlink: 'syz.1.16031': attribute type 29 has an invalid length. [ 789.858932][ T1000] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.008401][ T1000] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.051481][ T6394] netlink: 'syz.2.16039': attribute type 21 has an invalid length. [ 790.071806][ T6366] chnl_net:caif_netlink_parms(): no params data found [ 790.100229][ T6400] netlink: 168 bytes leftover after parsing attributes in process `syz.1.16041'. [ 790.182350][ T1000] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): left promiscuous mode [ 790.214627][ T1000] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): left allmulticast mode [ 790.262061][ T1000] team0: Port device ÿÿÿÿÿÿ removed [ 790.270224][ T1000] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.409479][ T6411] netlink: 'syz.2.16045': attribute type 29 has an invalid length. [ 790.418126][ T6411] netlink: 'syz.2.16045': attribute type 29 has an invalid length. [ 790.436061][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.457024][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.471910][ T6366] bridge_slave_0: entered allmulticast mode [ 790.479719][ T6366] bridge_slave_0: entered promiscuous mode [ 790.488973][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.496204][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.503436][ T6366] bridge_slave_1: entered allmulticast mode [ 790.511726][ T6366] bridge_slave_1: entered promiscuous mode [ 790.604770][ T6366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.646179][ T6366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.794837][ T6366] team0: Port device team_slave_0 added [ 790.825814][ T6366] team0: Port device team_slave_1 added [ 790.910978][ T1000] ip6gretap0 (unregistering): left allmulticast mode [ 790.928593][ T1000] ip6gretap0 (unregistering): left promiscuous mode [ 790.940582][ T1000] bridge0: port 4(ip6gretap0) entered disabled state [ 791.012370][ T6422] netlink: 168 bytes leftover after parsing attributes in process `syz.2.16050'. [ 791.079954][ T6366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.106292][ T6366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.159378][ T6366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.295562][ T6366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.302861][ T6366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.360408][ T6366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.414584][ T6368] Bluetooth: hci0: command tx timeout [ 791.627205][ T6366] hsr_slave_0: entered promiscuous mode [ 791.665928][ T6366] hsr_slave_1: entered promiscuous mode [ 791.817542][ T1000] gretap0 (unregistering): left allmulticast mode [ 791.846564][ T1000] gretap0 (unregistering): left promiscuous mode [ 791.853147][ T1000] bridge0: port 3(gretap0) entered disabled state [ 791.950184][ T6462] netlink: 144 bytes leftover after parsing attributes in process `syz.1.16065'. [ 792.537548][ T6488] netlink: 'syz.0.16075': attribute type 9 has an invalid length. [ 792.567186][ T6488] netlink: 399 bytes leftover after parsing attributes in process `syz.0.16075'. [ 792.713817][ T6366] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 792.771363][ T6366] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 792.836886][ T6366] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 792.859331][ T6366] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 793.437324][ T6529] netlink: 'syz.2.16086': attribute type 9 has an invalid length. [ 793.471759][ T6529] netlink: 399 bytes leftover after parsing attributes in process `syz.2.16086'. [ 793.494681][ T6368] Bluetooth: hci0: command tx timeout [ 793.568559][ T1000] hsr_slave_0: left promiscuous mode [ 793.591318][ T1000] hsr_slave_1: left promiscuous mode [ 793.615227][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.633270][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.655350][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.662810][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.715818][ T1000] bridge_slave_1: left allmulticast mode [ 793.721542][ T1000] bridge_slave_1: left promiscuous mode [ 793.743913][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.767980][ T6537] netlink: 'syz.2.16090': attribute type 2 has an invalid length. [ 793.807265][ T6537] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16090'. [ 793.847105][ T1000] veth0_macvtap: left promiscuous mode [ 794.187382][ T1000] geneve1 (unregistering): left promiscuous mode [ 794.194106][ T1000] geneve1 (unregistering): left allmulticast mode [ 794.209874][ T1000] team0 (unregistering): Port device geneve1 removed [ 794.542472][ T6569] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16103'. [ 794.593618][ T6571] netlink: 'syz.1.16105': attribute type 153 has an invalid length. [ 794.602708][ T6571] netlink: 'syz.1.16105': attribute type 1 has an invalid length. [ 794.612839][ T6571] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.16105'. [ 794.639923][ T1000] team_slave_1 (unregistering): left promiscuous mode [ 794.647087][ T1000] team_slave_1 (unregistering): left allmulticast mode [ 794.655291][ T1000] team0 (unregistering): Port device team_slave_1 removed [ 794.698572][ T1000] C (unregistering): left promiscuous mode [ 794.707213][ T1000] C (unregistering): left allmulticast mode [ 794.715868][ T1000] team0 (unregistering): Port device C removed [ 794.758894][ T1000] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.768181][ T1000] bond_slave_1 (unregistering): left promiscuous mode [ 794.811955][ T1000] $Hÿ (unregistering): (slave 30): Releasing backup interface [ 794.820482][ T1000]  (unregistering): left promiscuous mode [ 794.966819][ T1000] $Hÿ (unregistering): (slave batadv0): Releasing backup interface [ 794.976165][ T1000] batadv0 (unregistering): left promiscuous mode [ 795.107506][ T1000] bridge0 (unregistering): left promiscuous mode [ 795.114083][ T1000] bridge0 (unregistering): left allmulticast mode [ 795.122077][ T1000] team0 (unregistering): Port device bridge0 removed [ 795.251001][ T1000] $Hÿ (unregistering): Released all slaves [ 795.405351][ T6366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.446940][ T6366] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.489436][T32491] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.496682][T32491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.537250][T32491] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.544518][T32491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.587852][ T6368] Bluetooth: hci0: command tx timeout [ 795.659405][ T6578] netlink: 'syz.1.16107': attribute type 2 has an invalid length. [ 795.708380][ T6578] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.16107'. [ 796.260962][ T6366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.057418][ T6366] veth0_vlan: entered promiscuous mode [ 797.077188][ T6366] veth1_vlan: entered promiscuous mode [ 797.174304][ T6366] veth0_macvtap: entered promiscuous mode [ 797.190886][ T6366] veth1_macvtap: entered promiscuous mode [ 797.243811][ T6366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.276949][ T6366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.301162][ T6366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.350353][ T6366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.364360][ T6366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.379894][ T6366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.412201][ T6366] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.435162][ T6366] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.444116][ T6366] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.467028][ T6366] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.606970][ T6652] netlink: 6 bytes leftover after parsing attributes in process `syz.0.16130'. [ 797.624460][ T6652] openvswitch: netlink: Flow key attr not present in new flow. [ 797.654504][ T6368] Bluetooth: hci0: command tx timeout [ 797.837736][ T6661] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.16132'. [ 797.939481][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.958052][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.044508][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.075558][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.772600][ T6690] netlink: 'syz.1.16141': attribute type 2 has an invalid length. [ 798.814699][ T6690] netlink: 'syz.1.16141': attribute type 1 has an invalid length. [ 801.779046][ T6822] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.16200'. [ 803.060836][ T6872] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.16210'. [ 805.060219][ T6934] netlink: 'syz.4.16228': attribute type 3 has an invalid length. [ 805.068782][ T6934] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.16228'. [ 805.556540][ T6957] netlink: 'syz.0.16239': attribute type 3 has an invalid length. [ 805.583814][ T6957] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.16239'. [ 806.299763][ T6992] netlink: 'syz.2.16251': attribute type 3 has an invalid length. [ 806.310134][ T6992] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.16251'. [ 806.921717][ T7021] netlink: 'syz.1.16269': attribute type 3 has an invalid length. [ 806.930325][ T7021] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.16269'. [ 808.184546][ T7071] netlink: 'syz.4.16292': attribute type 46 has an invalid length. [ 808.192544][ T7071] netlink: 55 bytes leftover after parsing attributes in process `syz.4.16292'. [ 808.514569][ T7083] netlink: 'syz.2.16305': attribute type 46 has an invalid length. [ 808.522563][ T7083] netlink: 55 bytes leftover after parsing attributes in process `syz.2.16305'. [ 808.860908][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.868297][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.955306][ T7100] netlink: 'syz.1.16313': attribute type 3 has an invalid length. [ 808.980733][ T7100] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16313'. [ 810.352839][ T7154] netlink: 'syz.0.16331': attribute type 3 has an invalid length. [ 810.362122][ T7154] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16331'. [ 810.589082][ T7167] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16335'. [ 811.058602][ T7188] netlink: 'syz.2.16343': attribute type 3 has an invalid length. [ 811.097284][ T7188] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16343'. [ 812.683382][ T7258] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16370'. [ 813.697792][ T7304] netlink: 'syz.0.16402': attribute type 1 has an invalid length. [ 813.710400][ T7304] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.16402'. [ 814.434169][ T7341] netlink: 'syz.2.16406': attribute type 1 has an invalid length. [ 814.442861][ T7341] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.16406'. [ 816.113335][ T7424] netlink: 'syz.4.16436': attribute type 33 has an invalid length. [ 816.126088][ T7424] netlink: 'syz.4.16436': attribute type 3 has an invalid length. [ 816.147642][ T7424] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.16436'. [ 816.763233][ T7451] netlink: 168 bytes leftover after parsing attributes in process `syz.0.16446'. [ 816.970118][ T7464] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.16451'. [ 817.024358][ T7464] openvswitch: netlink: Duplicate key (type 0). [ 817.213891][ T7477] netlink: 'syz.0.16456': attribute type 33 has an invalid length. [ 817.242455][ T7477] netlink: 'syz.0.16456': attribute type 3 has an invalid length. [ 817.263719][ T7477] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.16456'. [ 818.352045][ T7527] netlink: 'syz.1.16473': attribute type 1 has an invalid length. [ 818.372526][ T7527] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.16473'. [ 820.461969][ T7614] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16502'. [ 821.282328][ T7653] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16523'. [ 821.922792][ T7676] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16522'. [ 822.464875][ T7704] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16532'. [ 822.474035][ T7704] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16532'. [ 822.486996][ T7703] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16532'. [ 822.557119][ T7710] netlink: 'syz.4.16539': attribute type 29 has an invalid length. [ 822.571495][ T7710] netlink: 'syz.4.16539': attribute type 29 has an invalid length. [ 822.588562][ T7710] netlink: 'syz.4.16539': attribute type 29 has an invalid length. [ 823.089541][ T7737] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16551'. [ 823.464977][ T7760] netlink: 'syz.2.16563': attribute type 29 has an invalid length. [ 823.495101][ T7760] netlink: 'syz.2.16563': attribute type 29 has an invalid length. [ 823.524709][ T7760] netlink: 'syz.2.16563': attribute type 29 has an invalid length. [ 823.689721][ T7771] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.16569'. [ 824.110449][ T7788] sock: sock_set_timeout: `syz.2.16575' (pid 7788) tries to set negative timeout [ 824.226515][ T7792] netlink: 'syz.0.16577': attribute type 29 has an invalid length. [ 824.244712][ T7792] netlink: 'syz.0.16577': attribute type 29 has an invalid length. [ 824.268310][ T7792] netlink: 'syz.0.16577': attribute type 29 has an invalid length. [ 824.346649][ T7799] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16580'. [ 824.364682][ T7799] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16580'. [ 824.705059][ T7816] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 825.101596][ T7839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 825.210850][ T7843] sctp: [Deprecated]: syz.4.16600 (pid 7843) Use of int in maxseg socket option. [ 825.210850][ T7843] Use struct sctp_assoc_value instead [ 825.632838][ T7865] __nla_validate_parse: 2 callbacks suppressed [ 825.632857][ T7865] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16613'. [ 825.667014][ T7865] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 826.110977][ T7887] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.16624'. [ 826.135232][ T7887] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 826.791330][ T7921] netlink: 'syz.1.16640': attribute type 21 has an invalid length. [ 827.847634][ T7941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.111082][ T7957] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.16656'. [ 828.458125][ T7973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.606698][ T7985] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.16669'. [ 828.728171][ T7991] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.16680'. [ 829.006148][ T8007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 831.280211][ T8133] netlink: 'syz.4.16738': attribute type 29 has an invalid length. [ 831.291377][ T8133] netlink: 'syz.4.16738': attribute type 29 has an invalid length. [ 831.306800][ T8133] netlink: 'syz.4.16738': attribute type 29 has an invalid length. [ 831.651406][ T8151] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16745'. [ 831.672757][ T8151] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16745'. [ 831.695355][ T8148] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16745'. [ 832.413586][ T8183] netlink: 'syz.1.16769': attribute type 29 has an invalid length. [ 832.423712][ T8183] netlink: 'syz.1.16769': attribute type 29 has an invalid length. [ 832.437334][ T8185] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16760'. [ 832.448186][ T8183] netlink: 'syz.1.16769': attribute type 29 has an invalid length. [ 832.456830][ T8185] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16760'. [ 832.484810][ T8180] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16760'. [ 832.792533][ T8199] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.16777'. [ 832.930449][ T8209] netlink: 'syz.2.16772': attribute type 29 has an invalid length. [ 832.969577][ T8209] netlink: 'syz.2.16772': attribute type 29 has an invalid length. [ 832.991293][ T8209] netlink: 'syz.2.16772': attribute type 29 has an invalid length. [ 833.355856][ T8232] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.16783'. [ 833.795513][ T8255] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.16797'. [ 834.173538][ T8276] netlink: 'syz.2.16804': attribute type 21 has an invalid length. [ 834.184528][ T8276] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16804'. [ 836.673105][ T8365] __nla_validate_parse: 4 callbacks suppressed [ 836.673142][ T8365] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.16849'. [ 837.538382][ T8405] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.16866'. [ 838.638341][ T8462] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.16893'. [ 839.402106][ T8496] sctp: [Deprecated]: syz.1.16919 (pid 8496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 839.402106][ T8496] Use struct sctp_sack_info instead [ 840.452943][ T8533] validate_nla: 1 callbacks suppressed [ 840.452963][ T8533] netlink: 'syz.1.16928': attribute type 3 has an invalid length. [ 840.490973][ T8533] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.16928'. [ 840.718493][ T8540] syz.0.16931[8540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 840.718713][ T8540] syz.0.16931[8540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 841.405146][ T8557] netlink: 'syz.4.16940': attribute type 3 has an invalid length. [ 841.444387][ T8557] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.16940'. [ 841.896696][ T8576] netlink: 'syz.4.16948': attribute type 30 has an invalid length. [ 842.063120][ T8586] netlink: 'syz.0.16952': attribute type 3 has an invalid length. [ 842.072475][ T8586] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.16952'. [ 842.082233][ T8585] netlink: 56537 bytes leftover after parsing attributes in process `syz.4.16954'. [ 842.521219][ T8605] netlink: 'syz.1.16962': attribute type 30 has an invalid length. [ 843.698184][ T8646] netlink: 'syz.4.16982': attribute type 4 has an invalid length. [ 843.723291][ T8646] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16982'. [ 844.375798][ T8683] netlink: 'syz.2.17001': attribute type 4 has an invalid length. [ 844.394494][ T8683] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17001'. [ 845.003825][ T8698] netlink: 'syz.1.17016': attribute type 40 has an invalid length. [ 845.224100][ T8706] netlink: 'syz.1.17012': attribute type 4 has an invalid length. [ 845.233103][ T8706] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17012'. [ 846.368963][ T8769] netlink: 'syz.4.17043': attribute type 40 has an invalid length. [ 846.999195][ T8798] netlink: 'syz.4.17058': attribute type 12 has an invalid length. [ 847.025431][ T8798] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17058'. [ 848.091722][ T8853] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17083'. [ 848.637868][ T8880] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17097'. [ 849.049410][ T8903] netlink: 'syz.2.17108': attribute type 12 has an invalid length. [ 849.071094][ T8903] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17108'. [ 849.856068][ T8926] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.17120'. [ 849.896359][ T8928] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.17121'. [ 850.339321][ T8950] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.17132'. [ 850.389764][ T8952] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.17133'. [ 851.340951][ T8981] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.17145'. [ 851.729451][ T8992] netlink: 'syz.4.17152': attribute type 29 has an invalid length. [ 851.756539][ T8992] netlink: 'syz.4.17152': attribute type 29 has an invalid length. [ 851.801592][ T8992] netlink: 'syz.4.17152': attribute type 29 has an invalid length. [ 851.922168][ T8998] netlink: 'syz.1.17157': attribute type 1 has an invalid length. [ 851.939778][ T8998] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.17157'. [ 852.217982][ T9013] netlink: 'syz.1.17163': attribute type 3 has an invalid length. [ 852.227508][ T9013] netlink: 'syz.1.17163': attribute type 1 has an invalid length. [ 852.239436][ T9013] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.17163'. [ 852.388815][ T9022] netlink: 'syz.4.17167': attribute type 3 has an invalid length. [ 852.692447][ T9039] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 852.940840][ T9050] netlink: 'syz.4.17182': attribute type 3 has an invalid length. [ 852.970934][ T9050] netlink: 'syz.4.17182': attribute type 1 has an invalid length. [ 853.140163][ T9062] netlink: 'syz.4.17187': attribute type 1 has an invalid length. [ 853.153619][ T9062] __nla_validate_parse: 3 callbacks suppressed [ 853.153636][ T9062] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.17187'. [ 853.405715][ T9073] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.17191'. [ 855.069843][ T9129] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.17221'. [ 855.087611][ T9129] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 855.097452][ T9129] openvswitch: netlink: Message has 1 unknown bytes. [ 855.486744][ T9141] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.17225'. [ 856.008853][ T9162] netlink: 399 bytes leftover after parsing attributes in process `syz.2.17237'. [ 856.368801][ T9183] netlink: 399 bytes leftover after parsing attributes in process `syz.1.17247'. [ 857.180543][ T9223] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.17265'. [ 857.671935][ T9249] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.17279'. [ 858.931684][ T9319] validate_nla: 6 callbacks suppressed [ 858.931705][ T9319] netlink: 'syz.1.17321': attribute type 2 has an invalid length. [ 858.963650][ T9319] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.17321'. [ 859.440760][ T9347] netlink: 'syz.2.17328': attribute type 2 has an invalid length. [ 859.449734][ T9347] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.17328'. [ 860.140019][ T9384] ref_ctr_offset mismatch. inode: 0x5542 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 860.574792][ T9399] delete_channel: no stack [ 861.078409][ T9424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 861.863498][ T9459] ref_ctr_offset mismatch. inode: 0x537d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 862.732955][ T9484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 863.737729][ T9541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17421'. [ 863.754474][ T9541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17421'. [ 863.779801][ T9541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17421'. [ 864.012166][ T9551] netlink: set zone limit has 8 unknown bytes [ 864.368168][ T9566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 864.760072][ T9583] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17443'. [ 864.779603][ T9583] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17443'. [ 864.818084][ T9583] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17443'. [ 865.002162][ T9595] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17448'. [ 865.277394][ T9602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 865.586733][ T9616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17457'. [ 865.596309][ T9616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17457'. [ 865.609241][ T9616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17457'. [ 865.649923][ T9619] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.17460'. [ 866.057394][ T9640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17471'. [ 866.066878][ T9640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17471'. [ 867.599927][ T9682] netlink: 'syz.4.17492': attribute type 21 has an invalid length. [ 869.166379][ T9767] delete_channel: no stack [ 869.630378][ T9794] delete_channel: no stack [ 870.092499][ T9820] delete_channel: no stack [ 870.300475][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.306967][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.371638][ T9836] __nla_validate_parse: 16 callbacks suppressed [ 870.371655][ T9836] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.17565'. [ 870.512324][ T9845] netlink: 'syz.1.17570': attribute type 10 has an invalid length. [ 871.649537][ T9910] netlink: 'syz.2.17601': attribute type 3 has an invalid length. [ 871.666646][ T9910] netlink: 152 bytes leftover after parsing attributes in process `syz.2.17601'. [ 871.677385][ T9910] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 872.109898][ T9932] netlink: 'syz.1.17612': attribute type 2 has an invalid length. [ 872.118032][ T9932] netlink: 'syz.1.17612': attribute type 8 has an invalid length. [ 872.129457][ T9932] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17612'. [ 872.196245][ T9936] netlink: 'syz.4.17613': attribute type 29 has an invalid length. [ 872.216083][ T9936] netlink: 'syz.4.17613': attribute type 29 has an invalid length. [ 872.246764][ T9936] netlink: 'syz.4.17613': attribute type 29 has an invalid length. [ 872.462782][ T9945] C: renamed from team_slave_0 (while UP) [ 872.472179][ T9945] netlink: 'syz.4.17619': attribute type 3 has an invalid length. [ 872.486807][ T9945] netlink: 152 bytes leftover after parsing attributes in process `syz.4.17619'. [ 872.497780][ T9946] netlink: 'syz.2.17621': attribute type 10 has an invalid length. [ 872.509031][ T9945] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 872.908086][ T9970] netlink: 'syz.2.17631': attribute type 2 has an invalid length. [ 872.934474][ T9970] netlink: 'syz.2.17631': attribute type 8 has an invalid length. [ 872.942357][ T9970] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17631'. [ 872.972251][ T9972] netlink: 'syz.1.17632': attribute type 10 has an invalid length. [ 873.044429][ T9976] netlink: 'syz.2.17634': attribute type 29 has an invalid length. [ 873.064899][ T9976] netlink: 'syz.2.17634': attribute type 29 has an invalid length. [ 873.081999][ T9976] netlink: 'syz.2.17634': attribute type 29 has an invalid length. [ 873.455971][T10000] netlink: 'syz.0.17645': attribute type 10 has an invalid length. [ 875.060220][T10052] netlink: 168 bytes leftover after parsing attributes in process `syz.4.17669'. [ 875.167846][T10061] netlink: 'syz.1.17671': attribute type 29 has an invalid length. [ 875.193914][T10061] netlink: 'syz.1.17671': attribute type 29 has an invalid length. [ 875.219209][T10061] netlink: 'syz.1.17671': attribute type 29 has an invalid length. [ 875.582066][T10083] netlink: 168 bytes leftover after parsing attributes in process `syz.0.17681'. [ 878.317195][T10142] validate_nla: 6 callbacks suppressed [ 878.317214][T10142] netlink: 'syz.1.17708': attribute type 29 has an invalid length. [ 878.332225][T10142] netlink: 'syz.1.17708': attribute type 29 has an invalid length. [ 878.346306][T10142] netlink: 'syz.1.17708': attribute type 29 has an invalid length. [ 878.397455][T10144] netlink: 763 bytes leftover after parsing attributes in process `syz.2.17711'. [ 879.239236][T10168] netlink: 'syz.0.17721': attribute type 29 has an invalid length. [ 879.261897][T10168] netlink: 'syz.0.17721': attribute type 29 has an invalid length. [ 879.272583][T10171] netlink: 763 bytes leftover after parsing attributes in process `syz.1.17722'. [ 879.285890][T10168] netlink: 'syz.0.17721': attribute type 29 has an invalid length. [ 879.518729][T10182] netlink: zone id is out of range [ 879.523936][T10182] netlink: set zone limit has 8 unknown bytes [ 881.021988][T10228] netlink: zone id is out of range [ 881.035806][T10228] netlink: set zone limit has 8 unknown bytes [ 881.685722][T10253] netlink: zone id is out of range [ 881.690932][T10253] netlink: set zone limit has 8 unknown bytes [ 881.793637][T10260] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.17766'. [ 881.803412][T10260] netlink: 18430 bytes leftover after parsing attributes in process `syz.0.17766'. [ 882.223912][T10278] netlink: 'syz.1.17775': attribute type 1 has an invalid length. [ 882.233878][T10278] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.17775'. [ 882.300876][T10282] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.17777'. [ 882.311487][T10282] netlink: 18430 bytes leftover after parsing attributes in process `syz.1.17777'. [ 883.062062][T10309] delete_channel: no stack [ 883.231742][T10322] netlink: 'syz.4.17795': attribute type 3 has an invalid length. [ 883.240025][T10322] netlink: 'syz.4.17795': attribute type 8 has an invalid length. [ 883.264652][T10322] netlink: 197324 bytes leftover after parsing attributes in process `syz.4.17795'. [ 883.509715][T10335] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17803'. [ 883.620885][T10336] delete_channel: no stack [ 883.703187][T10341] netlink: 'syz.1.17806': attribute type 21 has an invalid length. [ 883.817113][T10345] netlink: 'syz.0.17808': attribute type 6 has an invalid length. [ 883.834651][T10345] netlink: 'syz.0.17808': attribute type 1 has an invalid length. [ 883.849657][T10345] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.17808'. [ 884.014048][T10355] netlink: 'syz.2.17813': attribute type 1 has an invalid length. [ 884.024017][T10355] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.17813'. [ 884.131825][T10361] delete_channel: no stack [ 884.392600][T10377] netlink: 'syz.2.17823': attribute type 3 has an invalid length. [ 884.400711][T10377] netlink: 'syz.2.17823': attribute type 8 has an invalid length. [ 884.409751][T10377] netlink: 197324 bytes leftover after parsing attributes in process `syz.2.17823'. [ 884.470668][T10380] netlink: 'syz.0.17825': attribute type 1 has an invalid length. [ 884.725546][T10382] netlink: 'syz.1.17834': attribute type 6 has an invalid length. [ 884.733589][T10382] netlink: 'syz.1.17834': attribute type 1 has an invalid length. [ 885.225714][T10413] netlink: 'syz.4.17840': attribute type 6 has an invalid length. [ 887.151914][T10518] __nla_validate_parse: 5 callbacks suppressed [ 887.151931][T10518] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.17892'. [ 887.713418][T10543] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.17903'. [ 890.419521][T10672] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.17962'. [ 890.910904][T10698] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.17977'. [ 891.085380][T10707] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.17989'. [ 891.397399][T10718] validate_nla: 6 callbacks suppressed [ 891.397418][T10718] netlink: 'syz.1.17993': attribute type 21 has an invalid length. [ 891.412985][T10718] netlink: 176 bytes leftover after parsing attributes in process `syz.1.17993'. [ 892.423221][T10750] netlink: 'syz.0.18010': attribute type 21 has an invalid length. [ 892.429428][T10751] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18002'. [ 892.451712][T10750] netlink: 176 bytes leftover after parsing attributes in process `syz.0.18010'. [ 893.016101][T10773] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.18014'. [ 893.099384][T10779] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.18016'. [ 893.826509][T10811] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.18033'. [ 894.440037][T10837] netlink: 'syz.0.18044': attribute type 41 has an invalid length. [ 894.449017][T10837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18044'. [ 894.571672][T10843] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.18045'. [ 894.971733][T10865] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.18058'. [ 896.229512][T10921] netlink: 'syz.4.18088': attribute type 41 has an invalid length. [ 896.238148][T10921] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18088'. [ 896.692995][T10942] netlink: 'syz.1.18099': attribute type 2 has an invalid length. [ 896.929460][T10955] C: renamed from team_slave_0 [ 896.951757][T10955] netlink: 'syz.1.18104': attribute type 1 has an invalid length. [ 896.984379][T10955] netlink: 152 bytes leftover after parsing attributes in process `syz.1.18104'. [ 897.439683][T10976] netlink: 'syz.0.18114': attribute type 2 has an invalid length. [ 897.590577][T10980] netlink: 'syz.2.18118': attribute type 16 has an invalid length. [ 897.599219][T10980] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18118'. [ 897.635145][T10986] netlink: 'syz.0.18119': attribute type 1 has an invalid length. [ 897.651228][T10986] netlink: 152 bytes leftover after parsing attributes in process `syz.0.18119'. [ 898.045155][T11002] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.18128'. [ 898.144495][T11006] netlink: 'syz.1.18130': attribute type 16 has an invalid length. [ 898.152863][T11006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18130'. [ 899.185483][T11042] netlink: 'syz.0.18144': attribute type 10 has an invalid length. [ 899.199912][T11042] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18144'. [ 899.220861][T11042] netlink: 'syz.0.18144': attribute type 10 has an invalid length. [ 899.232586][T11042] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18144'. [ 899.667173][T11053] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.18152'. [ 899.723615][T11057] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18154'. [ 899.949704][T11063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18157'. [ 899.968671][T11063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18157'. [ 901.158979][T11096] netlink: 'syz.0.18172': attribute type 1 has an invalid length. [ 902.055265][T11115] netlink: 'syz.4.18179': attribute type 10 has an invalid length. [ 902.093902][T11115] netlink: 'syz.4.18179': attribute type 10 has an invalid length. [ 902.140989][T11109] netlink: 'syz.4.18179': attribute type 10 has an invalid length. [ 902.376265][T11122] netlink: 'syz.4.18183': attribute type 1 has an invalid length. [ 903.270535][T11145] netlink: 'syz.1.18195': attribute type 1 has an invalid length. [ 904.108754][T11170] __nla_validate_parse: 4 callbacks suppressed [ 904.108772][T11170] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.18207'. [ 905.136816][T11204] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.18221'. [ 906.225016][T11231] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.18235'. [ 906.342408][T11235] netlink: 'syz.0.18237': attribute type 11 has an invalid length. [ 906.387785][T11235] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.18237'. [ 906.641378][T11247] netlink: 'syz.4.18245': attribute type 9 has an invalid length. [ 906.664390][T11247] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18245'. [ 907.057913][T11266] netlink: 'syz.1.18253': attribute type 11 has an invalid length. [ 907.115183][T11266] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.18253'. [ 907.240596][T11271] netlink: 'syz.1.18255': attribute type 9 has an invalid length. [ 907.251784][T11271] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.18255'. [ 907.779980][T11295] netlink: 'syz.4.18264': attribute type 11 has an invalid length. [ 907.798363][T11295] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.18264'. [ 907.970428][T11303] netlink: 'syz.0.18268': attribute type 9 has an invalid length. [ 907.978854][T11303] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.18268'. [ 908.431501][T11324] netlink: 'syz.0.18287': attribute type 10 has an invalid length. [ 908.450311][T11324] team0: Cannot enslave team device to itself [ 908.600138][T11330] netlink: 6 bytes leftover after parsing attributes in process `syz.4.18281'. [ 908.620017][T11330] openvswitch: netlink: Flow actions attr not present in new flow. [ 909.248471][T11361] netlink: 'syz.1.18296': attribute type 9 has an invalid length. [ 909.256570][T11361] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.18296'. [ 909.341280][T11362] netlink: 'syz.1.18296': attribute type 9 has an invalid length. [ 909.351923][T11362] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.18296'. [ 909.705749][T11375] netlink: 'syz.1.18302': attribute type 10 has an invalid length. [ 909.730460][T11375] team0: left allmulticast mode [ 909.749323][T11375] team_slave_1: left allmulticast mode [ 909.766927][T11375] bridge0: left allmulticast mode [ 909.774160][T11375] netdevsim netdevsim1 ÿÿÿÿÿÿ: left allmulticast mode [ 909.794338][T11375] geneve1: left allmulticast mode [ 909.801271][T11375] veth1_macvtap: left allmulticast mode [ 909.811472][T11375] team0: Cannot enslave team device to itself [ 909.940638][T11386] netlink: 6 bytes leftover after parsing attributes in process `syz.0.18307'. [ 909.984859][T11386] openvswitch: netlink: Flow actions attr not present in new flow. [ 910.520352][T11416] netlink: 'syz.0.18331': attribute type 9 has an invalid length. [ 910.521664][T11418] netlink: 6 bytes leftover after parsing attributes in process `syz.2.18322'. [ 910.540950][T11418] openvswitch: netlink: Flow actions attr not present in new flow. [ 910.559997][T11416] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.18331'. [ 910.655016][T11420] netlink: 'syz.0.18331': attribute type 9 has an invalid length. [ 910.669637][T11420] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.18331'. [ 911.204326][T11445] netlink: 'syz.4.18336': attribute type 10 has an invalid length. [ 911.263097][T11445] team0: Cannot enslave team device to itself [ 911.409523][T11449] netlink: 'syz.0.18339': attribute type 3 has an invalid length. [ 911.434400][T11449] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.18339'. [ 912.028534][T11475] batman_adv: batadv0: Removing interface: team0 [ 912.053576][T11475] team0: Cannot enslave team device to itself [ 912.421218][T11497] validate_nla: 1 callbacks suppressed [ 912.421235][T11497] netlink: 'syz.4.18371': attribute type 21 has an invalid length. [ 912.573370][T11506] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.18367'. [ 912.595263][T11508] netlink: 'syz.2.18368': attribute type 10 has an invalid length. [ 912.615601][T11508] team0: Cannot enslave team device to itself [ 913.026466][T11524] netlink: 'syz.1.18376': attribute type 21 has an invalid length. [ 913.169923][T11532] netlink: 2 bytes leftover after parsing attributes in process `syz.2.18380'. [ 913.181042][T11532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.192143][T11532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.334362][ T5803] Bluetooth: hci0: command 0x0406 tx timeout [ 913.442902][T11544] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.18386'. [ 914.428376][T11555] netlink: 'syz.2.18391': attribute type 21 has an invalid length. [ 914.669707][T11566] netlink: 'syz.4.18397': attribute type 9 has an invalid length. [ 914.678033][T11566] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.18397'. [ 914.745644][T11571] netlink: 'syz.4.18397': attribute type 9 has an invalid length. [ 914.753631][T11571] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.18397'. [ 915.968317][T11621] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.18423'. [ 915.980849][T11621] openvswitch: netlink: Key type 4112 is out of range max 32 [ 916.169536][T11628] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.18434'. [ 916.194677][T11628] openvswitch: netlink: Key type 4112 is out of range max 32 [ 916.870539][T11663] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.18442'. [ 916.894904][T11663] openvswitch: netlink: Key type 4112 is out of range max 32 [ 917.061440][T11671] syz.4.18447[11671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 917.061631][T11671] syz.4.18447[11671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 917.698531][T11708] syz.0.18464[11708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 917.711252][T11708] syz.0.18464[11708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 918.511006][T11729] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.18474'. [ 918.980188][T11750] syz.1.18482[11750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 918.980380][T11750] syz.1.18482[11750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 919.610401][T11771] syz.2.18496[11771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 919.631232][T11771] syz.2.18496[11771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 920.174716][T11796] netlink: 'syz.1.18508': attribute type 29 has an invalid length. [ 920.203357][T11796] netlink: 'syz.1.18508': attribute type 29 has an invalid length. [ 920.220838][T11796] netlink: 'syz.1.18508': attribute type 29 has an invalid length. [ 920.233127][T11800] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.18509'. [ 920.609705][T11820] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.18517'. [ 920.628874][T11820] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.18517'. [ 920.639985][T11814] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.18517'. [ 921.097040][T11846] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.18531'. [ 921.120788][T11846] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.18531'. [ 921.136632][T11845] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.18531'. [ 922.377300][T11867] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.18540'. [ 922.648055][T11878] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.18543'. [ 922.666526][T11878] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.18543'. [ 923.505059][T11923] netlink: 'syz.4.18565': attribute type 21 has an invalid length. [ 923.517156][T11923] netlink: 'syz.4.18565': attribute type 1 has an invalid length. [ 925.739278][T12044] netlink: 'syz.2.18623': attribute type 17 has an invalid length. [ 925.753635][T12044] netlink: 'syz.2.18623': attribute type 16 has an invalid length. [ 925.775279][T12044] __nla_validate_parse: 2 callbacks suppressed [ 925.775298][T12044] netlink: 152 bytes leftover after parsing attributes in process `syz.2.18623'. [ 927.192211][T12118] netlink: 'syz.1.18659': attribute type 1 has an invalid length. [ 927.203250][T12118] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.18659'. [ 927.305846][T12122] sctp: [Deprecated]: syz.2.18664 (pid 12122) Use of struct sctp_assoc_value in delayed_ack socket option. [ 927.305846][T12122] Use struct sctp_sack_info instead [ 927.480350][T12135] netlink: 'syz.0.18667': attribute type 10 has an invalid length. [ 927.490328][T12135] netlink: 152 bytes leftover after parsing attributes in process `syz.0.18667'. [ 927.998642][T12159] sctp: [Deprecated]: syz.4.18675 (pid 12159) Use of struct sctp_assoc_value in delayed_ack socket option. [ 927.998642][T12159] Use struct sctp_sack_info instead [ 928.601972][T12185] sctp: [Deprecated]: syz.1.18691 (pid 12185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 928.601972][T12185] Use struct sctp_sack_info instead [ 929.272110][T12217] netlink: 'syz.4.18705': attribute type 29 has an invalid length. [ 929.301492][T12217] netlink: 'syz.4.18705': attribute type 29 has an invalid length. [ 929.313483][T12219] netlink: 'syz.0.18706': attribute type 2 has an invalid length. [ 929.341786][T12219] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.18706'. [ 929.931384][T12250] netlink: 'syz.2.18720': attribute type 2 has an invalid length. [ 929.939433][T12250] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.18720'. [ 930.599505][T12281] netlink: 'syz.4.18738': attribute type 10 has an invalid length. [ 930.623185][T12281] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.18738'. [ 931.233887][T12318] netlink: 'syz.0.18753': attribute type 10 has an invalid length. [ 931.242666][T12318] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.18753'. [ 931.593083][T12332] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.18761'. [ 931.606737][T12332] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 931.617324][T12332] CPU: 1 PID: 12332 Comm: syz.1.18761 Not tainted syzkaller #0 [ 931.624933][T12332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 931.635058][T12332] Call Trace: [ 931.638384][T12332] [ 931.641358][T12332] dump_stack_lvl+0x16c/0x230 [ 931.646088][T12332] ? show_regs_print_info+0x20/0x20 [ 931.651329][T12332] ? load_image+0x3b0/0x3b0 [ 931.655884][T12332] sysfs_warn_dup+0x8e/0xa0 [ 931.660461][T12332] sysfs_do_create_link_sd+0xc0/0x110 [ 931.665895][T12332] device_add_class_symlinks+0x1cf/0x240 [ 931.671567][T12332] device_add+0x507/0xc20 [ 931.675953][T12332] wiphy_register+0x1e74/0x2c00 [ 931.680903][T12332] ? cfg80211_event_work+0x40/0x40 [ 931.686058][T12332] ? minstrel_ht_alloc+0x88a/0x990 [ 931.691254][T12332] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 931.697380][T12332] ieee80211_register_hw+0x2dc2/0x3ac0 [ 931.702909][T12332] ? ieee80211_tasklet_handler+0x20/0x20 [ 931.708570][T12332] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 931.714489][T12332] ? __debug_object_init+0xe8/0x430 [ 931.719718][T12332] ? __asan_memset+0x22/0x40 [ 931.724350][T12332] ? __hrtimer_init+0x186/0x270 [ 931.729262][T12332] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 931.735062][T12332] ? mac80211_hwsim_free+0x220/0x220 [ 931.740374][T12332] ? rcu_is_watching+0x15/0xb0 [ 931.745172][T12332] ? kstrndup+0xbd/0x140 [ 931.749465][T12332] hwsim_new_radio_nl+0xd78/0x19d0 [ 931.754634][T12332] ? __nla_validate+0x50/0x50 [ 931.759382][T12332] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 931.765777][T12332] ? __nla_parse+0x40/0x50 [ 931.770268][T12332] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 931.776708][T12332] genl_family_rcv_msg_doit+0x209/0x2f0 [ 931.782350][T12332] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 931.788317][T12332] ? bpf_lsm_capable+0x9/0x10 [ 931.793037][T12332] ? security_capable+0x89/0xb0 [ 931.797948][T12332] genl_rcv_msg+0x60b/0x790 [ 931.802513][T12332] ? genl_bind+0x360/0x360 [ 931.806977][T12332] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 931.813354][T12332] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 931.819976][T12332] ? perf_trace_lock+0xf7/0x380 [ 931.824969][T12332] netlink_rcv_skb+0x216/0x480 [ 931.829768][T12332] ? genl_bind+0x360/0x360 [ 931.834234][T12332] ? netlink_ack+0x1110/0x1110 [ 931.839068][T12332] ? __lock_acquire+0x7c80/0x7c80 [ 931.844138][T12332] ? down_read+0x1ac/0x2e0 [ 931.848600][T12332] genl_rcv+0x28/0x40 [ 931.852615][T12332] netlink_unicast+0x751/0x8d0 [ 931.857452][T12332] netlink_sendmsg+0x8c1/0xbe0 [ 931.862267][T12332] ? netlink_getsockopt+0x580/0x580 [ 931.867500][T12332] ? aa_sock_msg_perm+0x94/0x150 [ 931.872468][T12332] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 931.877782][T12332] ? security_socket_sendmsg+0x80/0xa0 [ 931.883267][T12332] ? netlink_getsockopt+0x580/0x580 [ 931.888500][T12332] ____sys_sendmsg+0x5bf/0x950 [ 931.893318][T12332] ? __asan_memset+0x22/0x40 [ 931.897947][T12332] ? __sys_sendmsg_sock+0x30/0x30 [ 931.903003][T12332] ? __import_iovec+0x5f2/0x860 [ 931.907918][T12332] ? import_iovec+0x73/0xa0 [ 931.912463][T12332] ___sys_sendmsg+0x220/0x290 [ 931.917185][T12332] ? __sys_sendmsg+0x270/0x270 [ 931.922083][T12332] __se_sys_sendmsg+0x1a5/0x270 [ 931.926979][T12332] ? __x64_sys_sendmsg+0x80/0x80 [ 931.932099][T12332] ? lockdep_hardirqs_on+0x98/0x150 [ 931.937353][T12332] do_syscall_64+0x55/0xb0 [ 931.941803][T12332] ? clear_bhb_loop+0x40/0x90 [ 931.946516][T12332] ? clear_bhb_loop+0x40/0x90 [ 931.951229][T12332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 931.957182][T12332] RIP: 0033:0x7fc88158ec29 [ 931.961662][T12332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 931.981332][T12332] RSP: 002b:00007fc882367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 931.989789][T12332] RAX: ffffffffffffffda RBX: 00007fc8817d5fa0 RCX: 00007fc88158ec29 [ 931.997792][T12332] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 932.005799][T12332] RBP: 00007fc881611e41 R08: 0000000000000000 R09: 0000000000000000 [ 932.013852][T12332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 932.021853][T12332] R13: 00007fc8817d6038 R14: 00007fc8817d5fa0 R15: 00007ffd2f2b0608 [ 932.029889][T12332] [ 932.038886][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.045353][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.190702][T12338] netlink: 'syz.2.18764': attribute type 10 has an invalid length. [ 932.201855][T12338] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.18764'. [ 932.341948][T12346] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18766'. [ 932.383763][T12349] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.18767'. [ 932.415563][T12349] netlink: 'syz.2.18767': attribute type 2 has an invalid length. [ 932.699379][T12368] netlink: 'syz.4.18779': attribute type 9 has an invalid length. [ 932.707547][T12368] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18779'. [ 933.221672][T12396] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.18792'. [ 933.236890][T12396] netlink: 'syz.4.18792': attribute type 2 has an invalid length. [ 933.441093][T12408] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.18798'. [ 933.457377][T12408] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 933.466018][T12408] CPU: 1 PID: 12408 Comm: syz.2.18798 Not tainted syzkaller #0 [ 933.473626][T12408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 933.483743][T12408] Call Trace: [ 933.487073][T12408] [ 933.490028][T12408] dump_stack_lvl+0x16c/0x230 [ 933.494776][T12408] ? show_regs_print_info+0x20/0x20 [ 933.500005][T12408] ? load_image+0x3b0/0x3b0 [ 933.504558][T12408] sysfs_warn_dup+0x8e/0xa0 [ 933.509100][T12408] sysfs_do_create_link_sd+0xc0/0x110 [ 933.514511][T12408] device_add_class_symlinks+0x1cf/0x240 [ 933.520186][T12408] device_add+0x507/0xc20 [ 933.524566][T12408] wiphy_register+0x1e74/0x2c00 [ 933.529501][T12408] ? cfg80211_event_work+0x40/0x40 [ 933.534649][T12408] ? minstrel_ht_alloc+0x88a/0x990 [ 933.539809][T12408] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 933.545917][T12408] ieee80211_register_hw+0x2dc2/0x3ac0 [ 933.551447][T12408] ? ieee80211_tasklet_handler+0x20/0x20 [ 933.557107][T12408] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 933.563031][T12408] ? __debug_object_init+0xe8/0x430 [ 933.568271][T12408] ? __asan_memset+0x22/0x40 [ 933.572896][T12408] ? __hrtimer_init+0x186/0x270 [ 933.577895][T12408] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 933.583687][T12408] ? mac80211_hwsim_free+0x220/0x220 [ 933.589008][T12408] ? rcu_is_watching+0x15/0xb0 [ 933.593802][T12408] ? kstrndup+0xbd/0x140 [ 933.598093][T12408] hwsim_new_radio_nl+0xd78/0x19d0 [ 933.603236][T12408] ? __nla_validate+0x50/0x50 [ 933.607968][T12408] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 933.614347][T12408] ? __nla_parse+0x40/0x50 [ 933.618802][T12408] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 933.625177][T12408] genl_family_rcv_msg_doit+0x209/0x2f0 [ 933.630773][T12408] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 933.636725][T12408] ? bpf_lsm_capable+0x9/0x10 [ 933.641443][T12408] ? security_capable+0x89/0xb0 [ 933.646339][T12408] genl_rcv_msg+0x60b/0x790 [ 933.650889][T12408] ? genl_bind+0x360/0x360 [ 933.655347][T12408] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 933.661708][T12408] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 933.668344][T12408] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 933.674983][T12408] netlink_rcv_skb+0x216/0x480 [ 933.679784][T12408] ? genl_bind+0x360/0x360 [ 933.684235][T12408] ? netlink_ack+0x1110/0x1110 [ 933.689056][T12408] ? __lock_acquire+0x7c80/0x7c80 [ 933.694123][T12408] ? net_generic+0x1e/0x240 [ 933.698668][T12408] ? down_read+0x1ac/0x2e0 [ 933.703130][T12408] genl_rcv+0x28/0x40 [ 933.707148][T12408] netlink_unicast+0x751/0x8d0 [ 933.711968][T12408] netlink_sendmsg+0x8c1/0xbe0 [ 933.716784][T12408] ? netlink_getsockopt+0x580/0x580 [ 933.722014][T12408] ? aa_sock_msg_perm+0x94/0x150 [ 933.726984][T12408] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 933.732299][T12408] ? security_socket_sendmsg+0x80/0xa0 [ 933.737789][T12408] ? netlink_getsockopt+0x580/0x580 [ 933.743018][T12408] ____sys_sendmsg+0x5bf/0x950 [ 933.747829][T12408] ? __asan_memset+0x22/0x40 [ 933.752454][T12408] ? __sys_sendmsg_sock+0x30/0x30 [ 933.757510][T12408] ? __import_iovec+0x5f2/0x860 [ 933.762440][T12408] ? import_iovec+0x73/0xa0 [ 933.766985][T12408] ___sys_sendmsg+0x220/0x290 [ 933.771706][T12408] ? __sys_sendmsg+0x270/0x270 [ 933.776594][T12408] __se_sys_sendmsg+0x1a5/0x270 [ 933.781495][T12408] ? __x64_sys_sendmsg+0x80/0x80 [ 933.786492][T12408] ? lockdep_hardirqs_on+0x98/0x150 [ 933.791778][T12408] do_syscall_64+0x55/0xb0 [ 933.796221][T12408] ? clear_bhb_loop+0x40/0x90 [ 933.800920][T12408] ? clear_bhb_loop+0x40/0x90 [ 933.805627][T12408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 933.811578][T12408] RIP: 0033:0x7f8f4e38ec29 [ 933.816022][T12408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 933.835656][T12408] RSP: 002b:00007f8f4f2fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 933.844110][T12408] RAX: ffffffffffffffda RBX: 00007f8f4e5d5fa0 RCX: 00007f8f4e38ec29 [ 933.852111][T12408] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 933.860111][T12408] RBP: 00007f8f4e411e41 R08: 0000000000000000 R09: 0000000000000000 [ 933.868127][T12408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.876123][T12408] R13: 00007f8f4e5d6038 R14: 00007f8f4e5d5fa0 R15: 00007ffdec22e488 [ 933.884150][T12408] [ 934.692277][T12450] netlink: 'syz.1.18818': attribute type 21 has an invalid length. [ 935.065758][T12468] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.18827'. [ 935.079368][T12468] netlink: 8454 bytes leftover after parsing attributes in process `syz.4.18827'. [ 935.289797][T12478] netlink: 'syz.2.18831': attribute type 9 has an invalid length. [ 935.406368][T12485] netlink: 'syz.1.18834': attribute type 33 has an invalid length. [ 936.007351][T12517] netlink: 'syz.2.18850': attribute type 33 has an invalid length. [ 936.198140][T12527] netlink: 'syz.1.18856': attribute type 9 has an invalid length. [ 936.445625][T12541] __nla_validate_parse: 5 callbacks suppressed [ 936.445661][T12541] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.18862'. [ 936.555970][T12545] netlink: 'syz.0.18864': attribute type 33 has an invalid length. [ 936.575948][T12545] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.18864'. [ 936.861107][T12561] netlink: 188 bytes leftover after parsing attributes in process `syz.2.18870'. [ 937.123085][T12574] netlink: 'syz.2.18878': attribute type 8 has an invalid length. [ 937.138536][T12574] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.18878'. [ 937.382498][T12589] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18892'. [ 937.404506][T12588] netlink: 188 bytes leftover after parsing attributes in process `syz.4.18884'. [ 937.414577][T12589] netlink: get zone limit has 4 unknown bytes [ 938.074412][T12618] netlink: 'syz.0.18899': attribute type 10 has an invalid length. [ 938.082913][T12618] netlink: 152 bytes leftover after parsing attributes in process `syz.0.18899'. [ 938.234136][T12628] netlink: 'syz.0.18904': attribute type 8 has an invalid length. [ 938.259268][T12628] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.18904'. [ 939.100642][T12673] netlink: 'syz.4.18926': attribute type 2 has an invalid length. [ 939.104791][T12671] netlink: 'syz.2.18924': attribute type 10 has an invalid length. [ 939.108794][T12673] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.18926'. [ 939.120759][T12671] netlink: 152 bytes leftover after parsing attributes in process `syz.2.18924'. [ 939.750091][T12701] netlink: 'syz.1.18938': attribute type 2 has an invalid length. [ 942.777502][T12840] __nla_validate_parse: 2 callbacks suppressed [ 942.777518][T12840] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19011'. [ 942.948461][T12846] netlink: 14566 bytes leftover after parsing attributes in process `syz.2.19007'. [ 943.362784][T12869] sock: sock_set_timeout: `syz.2.19019' (pid 12869) tries to set negative timeout [ 943.682581][T12886] netlink: 14566 bytes leftover after parsing attributes in process `syz.1.19034'. [ 943.954704][T12897] sock: sock_set_timeout: `syz.0.19031' (pid 12897) tries to set negative timeout [ 944.167065][T12910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19045'. [ 944.456673][T12922] sock: sock_set_timeout: `syz.1.19046' (pid 12922) tries to set negative timeout [ 944.981853][T12949] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19058'. [ 949.986398][T13148] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.19162'. [ 951.219413][T13185] netlink: 'syz.1.19178': attribute type 10 has an invalid length. [ 951.249951][T13188] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.19171'. [ 951.269876][T13188] openvswitch: netlink: Tunnel attr 0 has unexpected len 338 expected 8 [ 952.022693][T13212] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.19183'. [ 952.054397][T13212] openvswitch: netlink: Tunnel attr 0 has unexpected len 338 expected 8 [ 952.493978][T13227] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.19187'. [ 952.543957][T13232] netlink: 'syz.1.19189': attribute type 9 has an invalid length. [ 952.573204][T13232] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.19189'. [ 952.797404][T13243] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.19193'. [ 954.223777][T13283] netlink: 'syz.2.19214': attribute type 5 has an invalid length. [ 954.786458][T13311] netlink: 'syz.0.19227': attribute type 21 has an invalid length. [ 955.227874][T13341] netlink: 'syz.1.19241': attribute type 21 has an invalid length. [ 955.418820][T13351] netlink: 'syz.0.19246': attribute type 5 has an invalid length. [ 956.031089][T13382] netlink: 'syz.0.19261': attribute type 1 has an invalid length. [ 956.039181][T13382] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.19261'. [ 956.282132][T13393] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.19276'. [ 956.676418][T13415] netlink: 'syz.1.19274': attribute type 1 has an invalid length. [ 956.695152][T13415] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.19274'. [ 956.752394][T13419] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.19278'. [ 957.207415][T13442] netlink: 'syz.4.19290': attribute type 4 has an invalid length. [ 957.254870][T13442] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.19290'. [ 957.355660][T13451] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.19294'. [ 957.467619][T13455] netlink: 'syz.0.19305': attribute type 12 has an invalid length. [ 957.487875][T13455] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19305'. [ 957.844096][T13474] netlink: 'syz.2.19306': attribute type 4 has an invalid length. [ 957.879980][T13474] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.19306'. [ 957.893595][T13476] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.19307'. [ 958.358125][T13501] netlink: 'syz.2.19319': attribute type 12 has an invalid length. [ 958.394386][T13501] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19319'. [ 958.917285][T13531] openvswitch: netlink: Flow key attribute not present in set flow. [ 959.583809][T13561] openvswitch: netlink: Flow key attribute not present in set flow. [ 959.745707][T13569] netlink: 'syz.4.19348': attribute type 25 has an invalid length. [ 960.014446][T13582] netlink: 'syz.2.19355': attribute type 10 has an invalid length. [ 960.159568][T13589] netlink: 'syz.0.19367': attribute type 10 has an invalid length. [ 960.179662][T13593] netlink: 'syz.1.19361': attribute type 25 has an invalid length. [ 960.608674][T13613] netlink: 'syz.4.19371': attribute type 10 has an invalid length. [ 961.421388][T13653] __nla_validate_parse: 9 callbacks suppressed [ 961.421407][T13653] netlink: 14 bytes leftover after parsing attributes in process `syz.1.19391'. [ 961.613333][T13660] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.19394'. [ 961.928801][T13677] validate_nla: 1 callbacks suppressed [ 961.928818][T13677] netlink: 'syz.2.19400': attribute type 25 has an invalid length. [ 961.943262][T13677] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.19400'. [ 962.086878][T13680] netlink: 14 bytes leftover after parsing attributes in process `syz.0.19401'. [ 963.174698][T13709] netlink: 14 bytes leftover after parsing attributes in process `syz.2.19415'. [ 963.451542][T13726] netlink: 'syz.2.19424': attribute type 5 has an invalid length. [ 963.461989][T13726] netlink: 'syz.2.19424': attribute type 1 has an invalid length. [ 963.476941][T13726] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.19424'. [ 963.633692][T13735] netlink: 763 bytes leftover after parsing attributes in process `syz.2.19426'. [ 964.829742][T13765] netlink: 763 bytes leftover after parsing attributes in process `syz.1.19439'. [ 965.413348][T13796] netlink: 'syz.0.19454': attribute type 5 has an invalid length. [ 965.421470][T13796] netlink: 'syz.0.19454': attribute type 1 has an invalid length. [ 965.432525][T13796] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.19454'. [ 965.491234][T13798] netlink: 763 bytes leftover after parsing attributes in process `syz.4.19455'. [ 967.058960][T13849] netlink: 64 bytes leftover after parsing attributes in process `syz.2.19482'. [ 967.428912][T13871] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19493'. [ 969.384294][T13957] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19534'. [ 969.845480][T13979] netlink: 64 bytes leftover after parsing attributes in process `syz.0.19543'. [ 970.987883][T14042] netlink: 'syz.2.19577': attribute type 9 has an invalid length. [ 970.995970][T14042] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.19577'. [ 971.240767][T14055] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.19585'. [ 971.539253][T14070] netlink: 'syz.4.19590': attribute type 9 has an invalid length. [ 971.591917][T14070] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.19590'. [ 971.835114][T14079] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.19596'. [ 972.288924][T14100] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.19608'. [ 972.326956][T14102] netlink: 'syz.0.19605': attribute type 9 has an invalid length. [ 972.355907][T14102] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.19605'. [ 972.466420][T14110] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.19619'. [ 972.480613][T14110] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 973.192969][T14133] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.19618'. [ 973.432639][T14144] netlink: 'syz.1.19630': attribute type 17 has an invalid length. [ 973.454320][T14144] netlink: 148 bytes leftover after parsing attributes in process `syz.1.19630'. [ 973.663555][T14160] netlink: 'syz.2.19636': attribute type 7 has an invalid length. [ 973.997472][T14173] syz.4.19641[14173] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 973.997623][T14173] syz.4.19641[14173] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 974.601696][T14192] syz.2.19650 (14192) used obsolete PPPIOCDETACH ioctl [ 974.810879][T14198] netlink: 'syz.2.19653': attribute type 2 has an invalid length. [ 974.829532][T14198] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19653'. [ 974.863303][T14200] syz.1.19654[14200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 974.863448][T14200] syz.1.19654[14200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 975.440128][T14230] syz.2.19669[14230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 975.466779][T14230] syz.2.19669[14230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 977.038006][T14299] netlink: 'syz.4.19704': attribute type 4 has an invalid length. [ 977.063250][T14299] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.19704'. [ 978.355229][T14366] netlink: 'syz.0.19736': attribute type 4 has an invalid length. [ 978.363240][T14366] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.19736'. [ 978.919353][T14394] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.19748'. [ 979.429815][T14420] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.19763'. [ 979.842473][T14441] netlink: 'syz.2.19775': attribute type 4 has an invalid length. [ 979.850590][T14441] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.19775'. [ 979.928720][T14445] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.19776'. [ 981.019092][T14499] netlink: 'syz.2.19803': attribute type 12 has an invalid length. [ 981.027510][T14499] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19803'. [ 984.008127][T14639] netlink: 'syz.4.19870': attribute type 1 has an invalid length. [ 984.476699][T14662] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.19889'. [ 984.931008][T14690] netlink: 'syz.2.19895': attribute type 1 has an invalid length. [ 985.468374][T14717] netlink: 'syz.1.19905': attribute type 1 has an invalid length. [ 985.507143][T14720] netlink: 'syz.2.19909': attribute type 9 has an invalid length. [ 985.524364][T14720] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.19909'. [ 985.565304][T14722] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.19911'. [ 986.905542][T14791] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19941'. [ 987.213219][T14810] netlink: 192440 bytes leftover after parsing attributes in process `syz.1.19952'. [ 987.235367][T14810] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 987.360920][T14816] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19955'. [ 987.686648][T14836] netlink: 192440 bytes leftover after parsing attributes in process `syz.2.19965'. [ 987.704791][T14836] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 988.117385][T14857] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.19974'. [ 988.136644][T14854] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.19974'. [ 988.593973][T14887] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19989'. [ 988.890674][T14901] netlink: 'syz.0.19995': attribute type 41 has an invalid length. [ 989.270288][T14924] netlink: 'syz.4.20006': attribute type 3 has an invalid length. [ 989.666032][T14945] __nla_validate_parse: 3 callbacks suppressed [ 989.666049][T14945] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.20013'. [ 989.685550][T14942] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.20013'. [ 989.831045][T14953] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20020'. [ 989.845225][T14952] netlink: 'syz.2.20021': attribute type 41 has an invalid length. [ 990.236614][T14973] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.20028'. [ 990.254742][T14971] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.20028'. [ 990.303395][T14977] netlink: 'syz.1.20030': attribute type 41 has an invalid length. [ 990.702068][T15001] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.20043'. [ 990.723845][T14998] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.20043'. [ 991.301191][T15035] netlink: 'syz.0.20059': attribute type 2 has an invalid length. [ 991.314968][T15035] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.20059'. [ 991.695296][T15057] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.20070'. [ 991.718549][T15056] netlink: 'syz.1.20078': attribute type 2 has an invalid length. [ 991.744429][T15056] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.20078'. [ 992.628038][T15108] netlink: 'syz.4.20095': attribute type 2 has an invalid length. [ 993.178979][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.185447][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.748641][T15163] netlink: 'syz.0.20122': attribute type 21 has an invalid length. [ 994.313053][T15193] netlink: 'syz.4.20134': attribute type 21 has an invalid length. [ 994.380565][T15195] netlink: 'syz.1.20135': attribute type 1 has an invalid length. [ 994.449671][T15199] netlink: 'syz.4.20137': attribute type 3 has an invalid length. [ 994.466555][T15199] netlink: 'syz.4.20137': attribute type 1 has an invalid length. [ 994.551621][T15203] netlink: 'syz.1.20149': attribute type 3 has an invalid length. [ 994.563274][T15203] netlink: 'syz.1.20149': attribute type 1 has an invalid length. [ 995.156373][T15233] netlink: 'syz.0.20152': attribute type 3 has an invalid length. [ 995.164544][T15233] netlink: 'syz.0.20152': attribute type 1 has an invalid length. [ 995.479754][T15249] netlink: 'syz.2.20161': attribute type 29 has an invalid length. [ 995.490774][T15249] netlink: 'syz.2.20161': attribute type 29 has an invalid length. [ 997.082404][T15336] __nla_validate_parse: 7 callbacks suppressed [ 997.082422][T15336] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.20203'. [ 997.129810][T15336] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.20203'. [ 998.765737][T15424] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.20246'. [ 999.703227][T15474] delete_channel: no stack [ 1000.283416][T15504] delete_channel: no stack [ 1000.646093][T15521] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.20292'. [ 1000.814682][T15524] delete_channel: no stack [ 1001.257406][T15549] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.20301'. [ 1002.018107][T15572] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.20314'. [ 1002.431347][T15588] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.20322'. [ 1002.450029][T15588] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1002.979989][T15611] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.20341'. [ 1003.072180][T15615] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.20333'. [ 1003.092012][T15615] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1005.845038][T15722] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.20384'. [ 1006.159438][T15737] validate_nla: 9 callbacks suppressed [ 1006.159457][T15737] netlink: 'syz.1.20392': attribute type 10 has an invalid length. [ 1006.204406][T15737] netlink: 'syz.1.20392': attribute type 10 has an invalid length. [ 1006.235132][T15737] team0: Port device ÿÿÿÿÿÿ removed [ 1006.889208][T15763] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.20404'. [ 1007.415723][T15791] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.20417'. [ 1008.013651][T15811] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.20435'. [ 1008.659947][T15842] netlink: 'syz.4.20443': attribute type 10 has an invalid length. [ 1008.687689][T15842] team0: Port device netdevsim0 added [ 1008.706349][T15842] netlink: 'syz.4.20443': attribute type 10 has an invalid length. [ 1008.745799][T15842] team0: Port device netdevsim0 removed [ 1008.756211][T15842] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1009.216733][T15869] netlink: 'syz.0.20456': attribute type 10 has an invalid length. [ 1009.244489][T15869] netlink: 'syz.0.20456': attribute type 10 has an invalid length. [ 1009.271053][T15869] team0: Port device ÿÿÿÿÿÿ removed [ 1009.964787][T15911] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.20477'. [ 1010.486203][T15937] netlink: 164 bytes leftover after parsing attributes in process `syz.2.20490'. [ 1010.567535][T15941] netlink: 'syz.0.20492': attribute type 21 has an invalid length. [ 1010.977511][T15961] netlink: 164 bytes leftover after parsing attributes in process `syz.4.20502'. [ 1012.171972][T16006] netlink: 'syz.2.20523': attribute type 21 has an invalid length. [ 1012.180595][T16006] netlink: 'syz.2.20523': attribute type 1 has an invalid length. [ 1012.189164][T16006] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.20523'. [ 1012.219805][T16008] netlink: 'syz.4.20525': attribute type 2 has an invalid length. [ 1012.244610][T16008] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.20525'. [ 1012.567849][T16029] netlink: 'syz.4.20535': attribute type 21 has an invalid length. [ 1012.577815][T16029] netlink: 'syz.4.20535': attribute type 1 has an invalid length. [ 1012.589310][T16029] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.20535'. [ 1012.755516][T16037] netlink: 'syz.2.20539': attribute type 2 has an invalid length. [ 1012.763417][T16037] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.20539'. [ 1013.021747][T16054] netlink: 'syz.1.20547': attribute type 21 has an invalid length. [ 1013.077399][T16054] netlink: 'syz.1.20547': attribute type 1 has an invalid length. [ 1013.097874][T16054] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.20547'. [ 1015.388535][T16164] netlink: 'syz.0.20599': attribute type 6 has an invalid length. [ 1015.417428][T16164] netlink: 'syz.0.20599': attribute type 3 has an invalid length. [ 1015.425507][T16164] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.20599'. [ 1017.056290][T16232] netlink: 172 bytes leftover after parsing attributes in process `syz.2.20632'. [ 1017.721834][T16265] validate_nla: 1 callbacks suppressed [ 1017.721852][T16265] netlink: 'syz.4.20646': attribute type 12 has an invalid length. [ 1017.745738][T16265] netlink: 172 bytes leftover after parsing attributes in process `syz.4.20646'. [ 1018.118126][T16280] netlink: 'syz.0.20661': attribute type 10 has an invalid length. [ 1018.130904][T16280] netlink: 'syz.0.20661': attribute type 10 has an invalid length. [ 1018.154744][T16280] netlink: 2 bytes leftover after parsing attributes in process `syz.0.20661'. [ 1018.164565][T16280] team0: entered promiscuous mode [ 1018.174284][T16280] C: entered promiscuous mode [ 1018.184928][T16280] team_slave_1: entered promiscuous mode [ 1018.202125][T16280] geneve1: entered promiscuous mode [ 1018.214519][T16280] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.026356][T16292] netlink: 'syz.0.20657': attribute type 17 has an invalid length. [ 1019.454065][T16314] netlink: 'syz.2.20668': attribute type 3 has an invalid length. [ 1019.469671][T16314] netlink: 'syz.2.20668': attribute type 1 has an invalid length. [ 1019.485799][T16314] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.20668'. [ 1020.386037][T16350] netlink: 'syz.4.20685': attribute type 3 has an invalid length. [ 1020.406552][T16350] netlink: 'syz.4.20685': attribute type 1 has an invalid length. [ 1020.419064][T16350] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.20685'. [ 1020.781190][T16359] netlink: 'syz.0.20697': attribute type 3 has an invalid length. [ 1020.799442][T16359] netlink: 'syz.0.20697': attribute type 1 has an invalid length. [ 1020.816383][T16359] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.20697'. [ 1021.762551][T16391] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.20702'. [ 1023.141295][T16435] validate_nla: 2 callbacks suppressed [ 1023.141314][T16435] netlink: 'syz.0.20721': attribute type 17 has an invalid length. [ 1023.157439][T16435] netlink: 152 bytes leftover after parsing attributes in process `syz.0.20721'. [ 1023.193410][T16435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1026.447777][T16579] netlink: 'syz.1.20784': attribute type 29 has an invalid length. [ 1026.480520][T16579] netlink: 'syz.1.20784': attribute type 29 has an invalid length. [ 1026.498007][T16579] netlink: 'syz.1.20784': attribute type 29 has an invalid length. [ 1027.539918][T16601] netlink: 'syz.4.20808': attribute type 21 has an invalid length. [ 1027.550490][T16601] netlink: 'syz.4.20808': attribute type 1 has an invalid length. [ 1028.023547][T16627] netlink: 'syz.0.20809': attribute type 30 has an invalid length. [ 1028.476196][T16648] netlink: 'syz.0.20819': attribute type 8 has an invalid length. [ 1029.824484][T16705] netlink: 830 bytes leftover after parsing attributes in process `syz.2.20845'. [ 1030.350323][T16724] netlink: 830 bytes leftover after parsing attributes in process `syz.4.20857'. [ 1030.926171][T16749] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.20867'. [ 1031.248441][T16757] netlink: 'syz.2.20873': attribute type 3 has an invalid length. [ 1031.274813][T16757] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.20873'. [ 1031.292660][T16759] netlink: 830 bytes leftover after parsing attributes in process `syz.0.20870'. [ 1031.880817][T16776] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1032.210355][T16792] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1032.964933][T16820] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1035.127715][T16881] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.20930'. [ 1036.995806][T16917] netlink: 209588 bytes leftover after parsing attributes in process `syz.4.20948'. [ 1037.036239][T16920] netlink: 'syz.2.20949': attribute type 1 has an invalid length. [ 1037.397258][T16929] netlink: 'syz.1.20953': attribute type 27 has an invalid length. [ 1037.422429][T16931] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.20954'. [ 1037.452268][T16929] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.20953'. [ 1037.633720][T16937] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.20957'. [ 1037.741308][T16942] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20959'. [ 1037.764310][T16942] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20959'. [ 1037.788078][T16941] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20959'. [ 1038.445082][T16965] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.20969'. [ 1038.760618][T16974] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.20972'. [ 1040.225757][T17035] __nla_validate_parse: 4 callbacks suppressed [ 1040.225775][T17035] netlink: 68 bytes leftover after parsing attributes in process `syz.2.21004'. [ 1040.747662][T17053] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.21012'. [ 1040.757511][T17053] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1040.784332][T17053] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1040.901617][T17057] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.21014'. [ 1040.934357][T17057] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1040.942707][T17057] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1041.785022][T17105] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.21036'. [ 1042.015836][T17119] netlink: 'syz.1.21044': attribute type 3 has an invalid length. [ 1042.024558][T17119] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.21044'. [ 1042.080537][T17121] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.21045'. [ 1042.103904][T17121] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1042.125501][T17121] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1042.289261][T17132] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.21050'. [ 1042.710433][T17154] netlink: 'syz.4.21061': attribute type 29 has an invalid length. [ 1042.719008][T17154] netlink: 'syz.4.21061': attribute type 29 has an invalid length. [ 1042.745550][T17154] netlink: 'syz.4.21061': attribute type 29 has an invalid length. [ 1042.881996][T17163] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1043.409231][T17191] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1043.480678][T17198] netlink: 60 bytes leftover after parsing attributes in process `syz.4.21080'. [ 1043.616136][T17204] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 1044.018635][T17228] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21092'. [ 1044.058097][T17230] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 1044.225285][T17236] netlink: 192 bytes leftover after parsing attributes in process `syz.4.21100'. [ 1044.708701][T17264] netlink: 'syz.2.21113': attribute type 9 has an invalid length. [ 1044.838791][T17269] netlink: 'syz.2.21113': attribute type 9 has an invalid length. [ 1046.275674][T17347] __nla_validate_parse: 4 callbacks suppressed [ 1046.275691][T17347] netlink: 763 bytes leftover after parsing attributes in process `syz.4.21149'. [ 1046.589179][T17361] netlink: 'syz.1.21156': attribute type 9 has an invalid length. [ 1046.625503][T17361] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.21156'. [ 1046.748755][T17368] netlink: 'syz.1.21156': attribute type 9 has an invalid length. [ 1046.779950][T17368] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.21156'. [ 1047.498402][T17393] netlink: 763 bytes leftover after parsing attributes in process `syz.0.21169'. [ 1047.670766][T17401] netlink: 'syz.0.21176': attribute type 3 has an invalid length. [ 1047.689314][T17401] netlink: 'syz.0.21176': attribute type 238 has an invalid length. [ 1048.195041][T17428] netlink: 'syz.4.21188': attribute type 9 has an invalid length. [ 1048.203020][T17428] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.21188'. [ 1048.287767][T17428] netlink: 'syz.4.21188': attribute type 9 has an invalid length. [ 1048.296160][T17428] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.21188'. [ 1048.310631][T17430] netlink: 'syz.2.21190': attribute type 3 has an invalid length. [ 1048.321647][T17430] netlink: 'syz.2.21190': attribute type 238 has an invalid length. [ 1049.136473][T17472] netlink: 196 bytes leftover after parsing attributes in process `syz.2.21211'. [ 1049.796252][T17506] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.21228'. [ 1049.879819][T17512] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.21231'. [ 1050.413153][T17534] netlink: 'syz.1.21241': attribute type 3 has an invalid length. [ 1050.423612][T17534] netlink: 152 bytes leftover after parsing attributes in process `syz.1.21241'. [ 1050.931386][T17558] netlink: 'syz.4.21253': attribute type 2 has an invalid length. [ 1050.941698][T17558] netlink: 'syz.4.21253': attribute type 8 has an invalid length. [ 1051.040695][T17561] netlink: 'syz.0.21254': attribute type 3 has an invalid length. [ 1051.451372][T17585] __nla_validate_parse: 2 callbacks suppressed [ 1051.451391][T17585] netlink: 192 bytes leftover after parsing attributes in process `syz.2.21267'. [ 1051.550539][T17587] netlink: 'syz.2.21268': attribute type 3 has an invalid length. [ 1051.561372][T17587] netlink: 152 bytes leftover after parsing attributes in process `syz.2.21268'. [ 1052.548781][T32485] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.670494][T32485] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.800913][T32485] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.903023][T32485] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.483872][T32485] gretap0 (unregistering): left allmulticast mode [ 1053.490477][T32485] gretap0 (unregistering): left promiscuous mode [ 1053.498608][T32485] bridge0: port 3(gretap0) entered disabled state [ 1054.213694][T32485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.222392][T32485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.232224][T32485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.241171][T32485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.251134][T32485] batman_adv: batadv0: Interface deactivated: vlan1 [ 1054.259308][T32485] batman_adv: batadv0: Removing interface: vlan1 [ 1054.269798][T32485] bridge_slave_1: left allmulticast mode [ 1054.277041][T32485] bridge_slave_1: left promiscuous mode [ 1054.282838][T32485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.309160][T32485] veth0_vlan: left promiscuous mode [ 1054.539569][T32485] team0 (unregistering): Port device geneve1 removed [ 1054.627111][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.633570][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.951547][T32485] team0 (unregistering): Port device team_slave_1 removed [ 1054.992834][T32485] team0 (unregistering): Port device C removed [ 1055.305813][T32485] team0 (unregistering): Port device bridge0 removed [ 1055.821320][T32485] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.942878][T32485] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.016632][T32485] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.108340][T32485] bond0: (slave netdevsim0): Releasing backup interface [ 1056.120753][T32485] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.319496][T32485] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.420049][T32485] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.519334][T32485] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.615445][T32485] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.807743][T32485] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.896386][T32485] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.971204][T32485] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.051769][T32485] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.480665][T32485] ip6gretap0 (unregistering): left allmulticast mode [ 1057.488735][T32485] ip6gretap0 (unregistering): left promiscuous mode [ 1057.495922][T32485] bridge0: port 5(ip6gretap0) entered disabled state [ 1058.256679][T32485] gretap0 (unregistering): left allmulticast mode [ 1058.263181][T32485] gretap0 (unregistering): left promiscuous mode [ 1058.271264][T32485] bridge0: port 4(gretap0) entered disabled state [ 1059.595372][T32485] [ 1059.597759][T32485] ====================================================== [ 1059.604810][T32485] WARNING: possible circular locking dependency detected [ 1059.611859][T32485] syzkaller #0 Not tainted [ 1059.616297][T32485] ------------------------------------------------------ [ 1059.623334][T32485] kworker/u4:1/32485 is trying to acquire lock: [ 1059.629597][T32485] ffff88802f44cd00 (team->team_lock_key#3){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 1059.639223][T32485] [ 1059.639223][T32485] but task is already holding lock: [ 1059.646614][T32485] ffff88801bbc0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 1059.657018][T32485] [ 1059.657018][T32485] which lock already depends on the new lock. [ 1059.657018][T32485] [ 1059.667442][T32485] [ 1059.667442][T32485] the existing dependency chain (in reverse order) is: [ 1059.676477][T32485] [ 1059.676477][T32485] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 1059.684251][T32485] __mutex_lock+0x129/0xcc0 [ 1059.689313][T32485] ieee80211_open+0x144/0x200 [ 1059.694545][T32485] __dev_open+0x2bc/0x430 [ 1059.699437][T32485] dev_open+0xab/0x170 [ 1059.704078][T32485] team_add_slave+0xae7/0x2660 [ 1059.709392][T32485] do_setlink+0xe14/0x3fb0 [ 1059.714369][T32485] rtnl_newlink+0x175b/0x2020 [ 1059.719603][T32485] rtnetlink_rcv_msg+0x7c7/0xf10 [ 1059.725152][T32485] netlink_rcv_skb+0x216/0x480 [ 1059.730470][T32485] netlink_unicast+0x751/0x8d0 [ 1059.735788][T32485] netlink_sendmsg+0x8c1/0xbe0 [ 1059.741103][T32485] ____sys_sendmsg+0x5bf/0x950 [ 1059.746419][T32485] ___sys_sendmsg+0x220/0x290 [ 1059.751650][T32485] __se_sys_sendmsg+0x1a5/0x270 [ 1059.757056][T32485] do_syscall_64+0x55/0xb0 [ 1059.762025][T32485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1059.768479][T32485] [ 1059.768479][T32485] -> #0 (team->team_lock_key#3){+.+.}-{3:3}: [ 1059.776687][T32485] __lock_acquire+0x2ddb/0x7c80 [ 1059.782108][T32485] lock_acquire+0x197/0x410 [ 1059.787164][T32485] __mutex_lock+0x129/0xcc0 [ 1059.792227][T32485] team_del_slave+0x32/0x1c0 [ 1059.797373][T32485] team_device_event+0x28d/0xa20 [ 1059.802863][T32485] notifier_call_chain+0x197/0x390 [ 1059.808531][T32485] unregister_netdevice_many_notify+0xf36/0x1810 [ 1059.815421][T32485] unregister_netdevice_queue+0x324/0x360 [ 1059.821698][T32485] _cfg80211_unregister_wdev+0x16b/0x580 [ 1059.827930][T32485] ieee80211_remove_interfaces+0x496/0x680 [ 1059.834299][T32485] ieee80211_unregister_hw+0x5d/0x2a0 [ 1059.840232][T32485] mac80211_hwsim_del_radio+0x274/0x450 [ 1059.846333][T32485] hwsim_exit_net+0x585/0x640 [ 1059.851575][T32485] cleanup_net+0x6f4/0xb90 [ 1059.856546][T32485] process_scheduled_works+0xa45/0x15b0 [ 1059.862645][T32485] worker_thread+0xa55/0xfc0 [ 1059.867795][T32485] kthread+0x2fa/0x390 [ 1059.872411][T32485] ret_from_fork+0x48/0x80 [ 1059.877379][T32485] ret_from_fork_asm+0x11/0x20 [ 1059.882701][T32485] [ 1059.882701][T32485] other info that might help us debug this: [ 1059.882701][T32485] [ 1059.892947][T32485] Possible unsafe locking scenario: [ 1059.892947][T32485] [ 1059.900413][T32485] CPU0 CPU1 [ 1059.905803][T32485] ---- ---- [ 1059.911183][T32485] lock(&rdev->wiphy.mtx); [ 1059.915702][T32485] lock(team->team_lock_key#3); [ 1059.923177][T32485] lock(&rdev->wiphy.mtx); [ 1059.930208][T32485] lock(team->team_lock_key#3); [ 1059.935154][T32485] [ 1059.935154][T32485] *** DEADLOCK *** [ 1059.935154][T32485] [ 1059.943313][T32485] 5 locks held by kworker/u4:1/32485: [ 1059.948682][T32485] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1059.959561][T32485] #1: ffffc90003357d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1059.970102][T32485] #2: ffffffff8dfafad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 1059.979593][T32485] #3: ffffffff8dfbc908 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 1059.989453][T32485] #4: ffff88801bbc0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 1060.000247][T32485] [ 1060.000247][T32485] stack backtrace: [ 1060.006174][T32485] CPU: 1 PID: 32485 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1060.013961][T32485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1060.024028][T32485] Workqueue: netns cleanup_net [ 1060.028805][T32485] Call Trace: [ 1060.032087][T32485] [ 1060.035033][T32485] dump_stack_lvl+0x16c/0x230 [ 1060.039722][T32485] ? load_image+0x3b0/0x3b0 [ 1060.044269][T32485] ? show_regs_print_info+0x20/0x20 [ 1060.049476][T32485] ? print_circular_bug+0x12b/0x1a0 [ 1060.054686][T32485] check_noncircular+0x2bd/0x3c0 [ 1060.059647][T32485] ? print_deadlock_bug+0x5d0/0x5d0 [ 1060.064853][T32485] ? lockdep_lock+0xe0/0x220 [ 1060.069453][T32485] ? __lock_acquire+0x1334/0x7c80 [ 1060.074484][T32485] ? _find_first_zero_bit+0xd3/0x100 [ 1060.079778][T32485] __lock_acquire+0x2ddb/0x7c80 [ 1060.084645][T32485] ? verify_lock_unused+0x140/0x140 [ 1060.089852][T32485] ? verify_lock_unused+0x140/0x140 [ 1060.095061][T32485] lock_acquire+0x197/0x410 [ 1060.099567][T32485] ? team_del_slave+0x32/0x1c0 [ 1060.104341][T32485] ? __might_sleep+0xe0/0xe0 [ 1060.108948][T32485] ? read_lock_is_recursive+0x20/0x20 [ 1060.114326][T32485] __mutex_lock+0x129/0xcc0 [ 1060.118834][T32485] ? team_del_slave+0x32/0x1c0 [ 1060.123597][T32485] ? __lock_acquire+0x7c80/0x7c80 [ 1060.128634][T32485] ? rcu_is_watching+0x15/0xb0 [ 1060.133407][T32485] ? trace_contention_end+0x39/0xe0 [ 1060.138615][T32485] ? __mutex_lock+0x304/0xcc0 [ 1060.143303][T32485] ? team_del_slave+0x32/0x1c0 [ 1060.148075][T32485] ? mutex_lock_nested+0x20/0x20 [ 1060.153023][T32485] ? bond_netdev_event+0xe1/0xef0 [ 1060.158065][T32485] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1060.163708][T32485] ? bond_ipsec_offload_ok+0x410/0x410 [ 1060.169186][T32485] team_del_slave+0x32/0x1c0 [ 1060.173776][T32485] team_device_event+0x28d/0xa20 [ 1060.178733][T32485] notifier_call_chain+0x197/0x390 [ 1060.183862][T32485] unregister_netdevice_many_notify+0xf36/0x1810 [ 1060.190231][T32485] ? lock_chain_count+0x20/0x20 [ 1060.195105][T32485] ? unregister_netdevice_many+0x20/0x20 [ 1060.200763][T32485] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1060.206498][T32485] ? __lock_acquire+0x7c80/0x7c80 [ 1060.211529][T32485] unregister_netdevice_queue+0x324/0x360 [ 1060.217263][T32485] ? list_netdevice+0x730/0x730 [ 1060.222150][T32485] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1060.227920][T32485] _cfg80211_unregister_wdev+0x16b/0x580 [ 1060.233921][T32485] ieee80211_remove_interfaces+0x496/0x680 [ 1060.239758][T32485] ? ieee80211_do_stop+0x1db0/0x1db0 [ 1060.245053][T32485] ? rcu_is_watching+0x15/0xb0 [ 1060.249912][T32485] ieee80211_unregister_hw+0x5d/0x2a0 [ 1060.255298][T32485] mac80211_hwsim_del_radio+0x274/0x450 [ 1060.260850][T32485] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 1060.266402][T32485] hwsim_exit_net+0x585/0x640 [ 1060.271104][T32485] ? hwsim_init_net+0x90/0x90 [ 1060.275786][T32485] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1060.281604][T32485] cleanup_net+0x6f4/0xb90 [ 1060.286042][T32485] ? ops_free_list+0x3b0/0x3b0 [ 1060.290904][T32485] ? _raw_spin_unlock_irq+0x23/0x50 [ 1060.296115][T32485] ? process_scheduled_works+0x957/0x15b0 [ 1060.301902][T32485] ? process_scheduled_works+0x957/0x15b0 [ 1060.307641][T32485] process_scheduled_works+0xa45/0x15b0 [ 1060.313205][T32485] ? assign_work+0x400/0x400 [ 1060.317809][T32485] ? assign_work+0x39e/0x400 [ 1060.322422][T32485] worker_thread+0xa55/0xfc0 [ 1060.327047][T32485] kthread+0x2fa/0x390 [ 1060.331122][T32485] ? pr_cont_work+0x560/0x560 [ 1060.335802][T32485] ? kthread_blkcg+0xd0/0xd0 [ 1060.340391][T32485] ret_from_fork+0x48/0x80 [ 1060.344814][T32485] ? kthread_blkcg+0xd0/0xd0 [ 1060.349406][T32485] ret_from_fork_asm+0x11/0x20 [ 1060.354194][T32485] [ 1060.365245][T32485] team0: Port device wlan1 removed [ 1060.485077][T32485] hsr_slave_0: left promiscuous mode [ 1060.491036][T32485] hsr_slave_1: left promiscuous mode [ 1060.497321][T32485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.505213][T32485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.513101][T32485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.525738][T32485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.533558][T32485] bridge_slave_1: left allmulticast mode [ 1060.539736][T32485] bridge_slave_1: left promiscuous mode [ 1060.546111][T32485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.555158][T32485] bridge_slave_0: left allmulticast mode [ 1060.560837][T32485] bridge_slave_0: left promiscuous mode [ 1060.567223][T32485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.583600][T32485] hsr_slave_0: left promiscuous mode [ 1060.590106][T32485] hsr_slave_1: left promiscuous mode [ 1060.600920][T32485] hsr_slave_0: left promiscuous mode [ 1060.607559][T32485] hsr_slave_1: left promiscuous mode [ 1060.613788][T32485] bridge0: port 3(dummy0) entered disabled state [ 1060.627833][T32485] bridge_slave_1: left allmulticast mode [ 1060.633515][T32485] bridge_slave_1: left promiscuous mode [ 1060.639557][T32485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.655763][T32485] veth1_macvtap: left promiscuous mode [ 1060.661325][T32485] veth0_macvtap: left promiscuous mode [ 1060.667691][T32485] veth1_vlan: left promiscuous mode [ 1060.673020][T32485] veth0_vlan: left promiscuous mode [ 1060.681256][T32485] veth1_vlan: left promiscuous mode [ 1060.689483][T32485] veth0_vlan: left promiscuous mode [ 1060.993294][T32485] team0 (unregistering): Port device team_slave_1 removed [ 1061.020436][T32485] team0 (unregistering): Port device C removed [ 1061.049727][T32485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.065545][T32485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.246512][T32485] bond0 (unregistering): Released all slaves [ 1061.475612][T32485] geneve1 (unregistering): left promiscuous mode [ 1061.482610][T32485] team0 (unregistering): Port device geneve1 removed [ 1061.624001][T32485] team_slave_1 (unregistering): left promiscuous mode [ 1061.631448][T32485] team0 (unregistering): Port device team_slave_1 removed [ 1061.657140][T32485] C (unregistering): left promiscuous mode [ 1061.663654][T32485] team0 (unregistering): Port device C removed