last executing test programs: 3.866836066s ago: executing program 1 (id=25219): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 3.691219379s ago: executing program 1 (id=25223): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001640)="bee00de5f9", 0x5}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000003500)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$kcm(r0, &(0x7f0000006cc0)={0x0, 0x0, 0x0}, 0x4000091) 3.443300566s ago: executing program 1 (id=25226): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b0d, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 3.345418604s ago: executing program 1 (id=25229): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.283994612s ago: executing program 1 (id=25247): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x88, 0x0, 0x0) 2.143913672s ago: executing program 4 (id=25252): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0)='o', &(0x7f0000000b40)=""/31}, 0x20) 1.565193325s ago: executing program 4 (id=25255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000037000b63d25a80649ceb96d50124fc60", 0x14}], 0x1}, 0x0) 1.285367695s ago: executing program 0 (id=25259): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) sendmsg$kcm(r1, &(0x7f0000000fc0)={&(0x7f00000008c0)=@hci={0x1f, 0x4, 0x2}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000940)="f4", 0x1}], 0x1}, 0x8041) 1.200089521s ago: executing program 4 (id=25261): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.08969863s ago: executing program 3 (id=25262): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000003"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 1.070009391s ago: executing program 0 (id=25263): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 973.611988ms ago: executing program 3 (id=25264): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2002, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 973.513878ms ago: executing program 4 (id=25265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000070000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 967.361838ms ago: executing program 1 (id=25274): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x88, 0x0, 0x0) 966.922989ms ago: executing program 2 (id=25275): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002009deb00000000000000000009"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1, 0x0, @void, @value}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 767.428073ms ago: executing program 4 (id=25266): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001cc0)=""/61, 0x3d}, {&(0x7f0000002d40)=""/4107, 0x100b}, {&(0x7f0000000540)=""/51, 0x33}], 0x3}, 0x0) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 765.678573ms ago: executing program 2 (id=25278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000280)={r0, &(0x7f00000014c0), 0x0}, 0x20) 703.325968ms ago: executing program 0 (id=25267): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f"], 0xfe33) 702.530918ms ago: executing program 3 (id=25268): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/798], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff96, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a80016000400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 541.13335ms ago: executing program 4 (id=25269): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0x1bac61) 540.44488ms ago: executing program 2 (id=25282): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x5, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r0}, 0x38) 499.853433ms ago: executing program 3 (id=25270): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) 480.105384ms ago: executing program 0 (id=25271): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 368.115252ms ago: executing program 2 (id=25272): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0x9, 0x4, 0x7, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) 334.459795ms ago: executing program 0 (id=25273): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 299.773127ms ago: executing program 3 (id=25276): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000002ec0)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x101, 0x4000}, 0x80, 0x0}, 0x2000c041) close(0x3) 164.092478ms ago: executing program 2 (id=25277): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0x5) 84.609434ms ago: executing program 0 (id=25279): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x9) 63.953885ms ago: executing program 2 (id=25280): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 3 (id=25281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000004c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) kernel console output (not intermixed with test programs): 16186 bytes leftover after parsing attributes in process `syz.2.16812'. [ 924.528181][ T6545] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16839'. [ 925.055188][ T6575] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.16854'. [ 925.475602][ T6596] validate_nla: 9 callbacks suppressed [ 925.475631][ T6596] netlink: 'syz.1.16864': attribute type 2 has an invalid length. [ 925.534712][ T6596] netlink: 'syz.1.16864': attribute type 1 has an invalid length. [ 926.236786][ T6629] netlink: 'syz.3.16880': attribute type 9 has an invalid length. [ 926.257109][ T6629] netlink: 399 bytes leftover after parsing attributes in process `syz.3.16880'. [ 926.796543][ T6654] netlink: 'syz.1.16893': attribute type 5 has an invalid length. [ 926.937452][ T6664] netlink: 'syz.2.16897': attribute type 2 has an invalid length. [ 926.950170][ T6664] netlink: 'syz.2.16897': attribute type 1 has an invalid length. [ 927.286273][ T6679] netlink: 65023 bytes leftover after parsing attributes in process `syz.4.16905'. [ 927.738763][ T6700] netlink: 'syz.0.16914': attribute type 2 has an invalid length. [ 927.774518][ T6700] netlink: 'syz.0.16914': attribute type 1 has an invalid length. [ 928.448915][ T6732] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.16931'. [ 929.225482][ T6765] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.16945'. [ 929.274987][ T6768] netlink: 'syz.0.16950': attribute type 9 has an invalid length. [ 929.313713][ T6768] netlink: 399 bytes leftover after parsing attributes in process `syz.0.16950'. [ 930.269446][ T6805] netlink: 'syz.0.16964': attribute type 21 has an invalid length. [ 930.316663][ T6805] netlink: 128 bytes leftover after parsing attributes in process `syz.0.16964'. [ 930.336266][ T6805] netlink: 3 bytes leftover after parsing attributes in process `syz.0.16964'. [ 931.220059][ T6846] validate_nla: 1 callbacks suppressed [ 931.220087][ T6846] netlink: 'syz.2.16983': attribute type 21 has an invalid length. [ 931.244246][ T6846] netlink: 128 bytes leftover after parsing attributes in process `syz.2.16983'. [ 931.257803][ T6846] netlink: 'syz.2.16983': attribute type 4 has an invalid length. [ 931.274024][ T6846] netlink: 3 bytes leftover after parsing attributes in process `syz.2.16983'. [ 931.656310][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.662729][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.173534][ T6891] netlink: 'syz.1.17002': attribute type 21 has an invalid length. [ 932.202788][ T6891] netlink: 128 bytes leftover after parsing attributes in process `syz.1.17002'. [ 932.263776][ T6891] netlink: 'syz.1.17002': attribute type 4 has an invalid length. [ 932.292910][ T6891] netlink: 3 bytes leftover after parsing attributes in process `syz.1.17002'. [ 934.047352][ T6972] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.17042'. [ 934.117485][ T6974] netlink: 'syz.1.17043': attribute type 1 has an invalid length. [ 934.135014][ T6974] netlink: 5 bytes leftover after parsing attributes in process `syz.1.17043'. [ 935.834676][ T7027] netlink: 'syz.0.17069': attribute type 21 has an invalid length. [ 935.842894][ T7027] netlink: 'syz.0.17069': attribute type 1 has an invalid length. [ 936.022711][ T7038] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.17086'. [ 936.963795][ T7082] netlink: 'syz.4.17093': attribute type 1 has an invalid length. [ 936.989168][ T7082] netlink: 5 bytes leftover after parsing attributes in process `syz.4.17093'. [ 937.330299][ T7090] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.17097'. [ 937.687081][ T7100] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.17112'. [ 938.534822][ T7122] netlink: 'syz.3.17109': attribute type 1 has an invalid length. [ 938.543468][ T7122] netlink: 5 bytes leftover after parsing attributes in process `syz.3.17109'. [ 938.863224][ T7135] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.17117'. [ 939.055224][ T7140] netlink: 'syz.4.17120': attribute type 21 has an invalid length. [ 939.063283][ T7140] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17120'. [ 939.950864][ T7181] netlink: 'syz.1.17136': attribute type 3 has an invalid length. [ 940.025803][ T7181] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.17136'. [ 940.081222][ T7183] netlink: 'syz.2.17137': attribute type 21 has an invalid length. [ 940.103298][ T7183] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17137'. [ 943.039881][ T7280] netlink: 'syz.0.17181': attribute type 3 has an invalid length. [ 943.048247][ T7280] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.17181'. [ 945.331965][ T7361] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.17219'. [ 947.242361][ T7420] netlink: 'syz.1.17245': attribute type 29 has an invalid length. [ 947.253050][ T7420] netlink: 'syz.1.17245': attribute type 29 has an invalid length. [ 947.272993][ T7420] netlink: 'syz.1.17245': attribute type 29 has an invalid length. [ 947.396478][ T7424] netlink: 'syz.2.17249': attribute type 12 has an invalid length. [ 947.412730][ T7424] netlink: 172 bytes leftover after parsing attributes in process `syz.2.17249'. [ 947.927588][ T7453] netlink: 'syz.2.17263': attribute type 29 has an invalid length. [ 947.942074][ T7453] netlink: 'syz.2.17263': attribute type 29 has an invalid length. [ 947.958962][ T7453] netlink: 'syz.2.17263': attribute type 29 has an invalid length. [ 949.401772][ T7477] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.17273'. [ 949.936754][ T7503] netlink: 'syz.3.17297': attribute type 29 has an invalid length. [ 949.997785][ T7503] netlink: 'syz.3.17297': attribute type 29 has an invalid length. [ 950.029913][ T7508] netlink: 'syz.3.17297': attribute type 29 has an invalid length. [ 951.088278][ T7518] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.17291'. [ 953.437505][ T7557] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.17305'. [ 953.448469][ T7558] netlink: 'syz.0.17306': attribute type 29 has an invalid length. [ 953.488665][ T7558] netlink: 'syz.0.17306': attribute type 29 has an invalid length. [ 953.521046][ T7559] netlink: 'syz.0.17306': attribute type 29 has an invalid length. [ 955.027759][ T7598] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.17327'. [ 968.428524][ T7917] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.17478'. [ 969.198496][ T7954] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.17496'. [ 970.347446][ T7985] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.17513'. [ 972.341409][ T8028] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.17531'. [ 972.409671][ T8028] tc_dump_action: action bad kind [ 974.818500][ T8102] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.17566'. [ 974.892752][ T8102] tc_dump_action: action bad kind [ 976.182006][ T8138] netlink: 6401 bytes leftover after parsing attributes in process `syz.3.17583'. [ 976.728642][ T8152] netlink: 168 bytes leftover after parsing attributes in process `syz.2.17590'. [ 985.315536][ T8487] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17734'. [ 987.196534][ T8564] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.17771'. [ 987.453547][ T8579] netlink: 'syz.0.17780': attribute type 12 has an invalid length. [ 987.462714][ T8579] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.17780'. [ 987.474337][ T8581] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.17779'. [ 989.000684][ T8644] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.17808'. [ 989.096734][ T8646] netlink: 76 bytes leftover after parsing attributes in process `syz.3.17812'. [ 990.188845][ T8675] netlink: 'syz.2.17825': attribute type 12 has an invalid length. [ 990.222019][ T8675] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.17825'. [ 990.521628][ T8681] netlink: 76 bytes leftover after parsing attributes in process `syz.2.17829'. [ 991.113839][ T8708] netlink: 'syz.1.17841': attribute type 11 has an invalid length. [ 991.132113][ T8708] netlink: 140 bytes leftover after parsing attributes in process `syz.1.17841'. [ 991.166127][ T8711] netlink: 76 bytes leftover after parsing attributes in process `syz.4.17843'. [ 991.232185][ T8714] netlink: 'syz.3.17844': attribute type 3 has an invalid length. [ 991.251999][ T8714] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17844'. [ 991.640479][ T8736] netlink: 'syz.4.17856': attribute type 11 has an invalid length. [ 991.664767][ T8736] netlink: 140 bytes leftover after parsing attributes in process `syz.4.17856'. [ 991.969009][ T8756] netlink: 'syz.3.17866': attribute type 3 has an invalid length. [ 992.309124][ T8772] netlink: 'syz.2.17873': attribute type 11 has an invalid length. [ 992.324690][ T8772] netlink: 140 bytes leftover after parsing attributes in process `syz.2.17873'. [ 992.485884][ T8777] netlink: 17861 bytes leftover after parsing attributes in process `syz.3.17876'. [ 992.668874][ T8786] netlink: 'syz.1.17880': attribute type 3 has an invalid length. [ 993.095999][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.102704][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.798019][ T8854] netlink: 17861 bytes leftover after parsing attributes in process `syz.2.17912'. [ 997.736452][ T9027] netlink: 166 bytes leftover after parsing attributes in process `syz.1.17998'. [ 998.613913][ T9071] netlink: 'syz.4.18016': attribute type 7 has an invalid length. [ 999.628472][ T9108] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.18036'. [ 1000.756595][ T9156] netlink: 'syz.3.18056': attribute type 7 has an invalid length. [ 1001.670480][ T9187] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.18071'. [ 1001.994539][ T9201] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.18074'. [ 1002.494922][ T9222] netlink: 763 bytes leftover after parsing attributes in process `syz.1.18088'. [ 1002.660727][ T9232] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.18091'. [ 1002.887328][ T9242] netlink: 56 bytes leftover after parsing attributes in process `syz.1.18094'. [ 1002.917115][ T9242] netlink: 56 bytes leftover after parsing attributes in process `syz.1.18094'. [ 1002.956240][ T9242] netlink: 56 bytes leftover after parsing attributes in process `syz.1.18094'. [ 1003.308544][ T9254] netlink: 192 bytes leftover after parsing attributes in process `syz.3.18101'. [ 1003.622810][ T9269] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.18107'. [ 1003.655634][ T9271] netlink: 763 bytes leftover after parsing attributes in process `syz.4.18118'. [ 1003.887180][ T9275] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.18120'. [ 1004.277479][ T9292] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18116'. [ 1004.717826][ T9304] netlink: 763 bytes leftover after parsing attributes in process `syz.2.18123'. [ 1004.737802][ T9308] netlink: 56 bytes leftover after parsing attributes in process `syz.4.18125'. [ 1005.135346][ T9324] netlink: 'syz.4.18132': attribute type 21 has an invalid length. [ 1005.179256][ T9324] netlink: 'syz.4.18132': attribute type 1 has an invalid length. [ 1006.720515][ T9380] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1006.761593][ T9380] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1007.532902][ T9410] netlink: 'syz.1.18169': attribute type 21 has an invalid length. [ 1007.570327][ T9410] netlink: 'syz.1.18169': attribute type 1 has an invalid length. [ 1007.953470][ T9426] __nla_validate_parse: 12 callbacks suppressed [ 1007.953492][ T9426] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.18186'. [ 1008.158675][ T9434] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.18181'. [ 1008.237546][ T9436] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18183'. [ 1008.598205][ T9453] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18200'. [ 1008.825372][ T9464] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.18195'. [ 1009.373216][ T9486] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18206'. [ 1009.588096][ T9497] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.18211'. [ 1009.827277][ T9505] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1009.874078][ T9505] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1011.597126][ T9565] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1011.656753][ T9565] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1015.501897][ T9670] netlink: 'syz.2.18294': attribute type 3 has an invalid length. [ 1016.934094][ T9722] netlink: 'syz.0.18320': attribute type 3 has an invalid length. [ 1017.640449][ T9754] netlink: 'syz.1.18335': attribute type 3 has an invalid length. [ 1017.901960][ T9762] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.18340'. [ 1018.984476][ T9803] netlink: 'syz.1.18358': attribute type 21 has an invalid length. [ 1018.992515][ T9803] netlink: 156 bytes leftover after parsing attributes in process `syz.1.18358'. [ 1019.244297][ T9814] netlink: 'syz.1.18363': attribute type 2 has an invalid length. [ 1019.283750][ T9814] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18363'. [ 1020.529215][ T9871] netlink: 'syz.0.18390': attribute type 21 has an invalid length. [ 1020.575487][ T9871] netlink: 156 bytes leftover after parsing attributes in process `syz.0.18390'. [ 1020.816151][ T9886] sock: sock_set_timeout: `syz.0.18396' (pid 9886) tries to set negative timeout [ 1021.217555][ T9905] netlink: 'syz.4.18407': attribute type 21 has an invalid length. [ 1021.233894][ T9905] netlink: 156 bytes leftover after parsing attributes in process `syz.4.18407'. [ 1021.397665][ T9915] sock: sock_set_timeout: `syz.2.18411' (pid 9915) tries to set negative timeout [ 1021.818839][ T9935] netlink: 144 bytes leftover after parsing attributes in process `syz.2.18420'. [ 1021.832564][ T9937] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18430'. [ 1021.844386][ T9937] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18430'. [ 1021.855755][ T9937] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18430'. [ 1021.968978][ T9943] netlink: 3 bytes leftover after parsing attributes in process `syz.3.18423'. [ 1022.086385][ T9950] sock: sock_set_timeout: `syz.4.18425' (pid 9950) tries to set negative timeout [ 1022.452102][ T9968] netlink: 'syz.0.18435': attribute type 29 has an invalid length. [ 1022.461323][ T9968] netlink: 'syz.0.18435': attribute type 29 has an invalid length. [ 1022.472762][ T9968] netlink: 'syz.0.18435': attribute type 29 has an invalid length. [ 1023.046679][ T9999] __nla_validate_parse: 4 callbacks suppressed [ 1023.046703][ T9999] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18451'. [ 1023.097798][ T9999] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18451'. [ 1023.120421][T10003] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18451'. [ 1023.966315][T10043] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18470'. [ 1023.978743][T10043] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18470'. [ 1023.991230][T10043] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18470'. [ 1024.805191][T10081] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.18489'. [ 1024.879253][T10084] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18492'. [ 1025.173822][T10103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18501'. [ 1025.190683][T10103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18501'. [ 1026.325051][T10155] netlink: 'syz.0.18528': attribute type 1 has an invalid length. [ 1027.421765][T10215] netlink: 'syz.1.18556': attribute type 1 has an invalid length. [ 1027.972414][T10240] netlink: 'syz.2.18569': attribute type 1 has an invalid length. [ 1028.460731][T10270] netlink: 'syz.4.18582': attribute type 9 has an invalid length. [ 1028.485550][T10270] __nla_validate_parse: 10 callbacks suppressed [ 1028.485572][T10270] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18582'. [ 1028.794291][T10288] netlink: 'syz.3.18592': attribute type 22 has an invalid length. [ 1028.830886][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18592'. [ 1029.168328][T10308] netlink: 'syz.1.18601': attribute type 9 has an invalid length. [ 1029.192306][T10308] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.18601'. [ 1029.434349][T10322] netlink: 'syz.2.18610': attribute type 22 has an invalid length. [ 1029.482636][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18610'. [ 1029.831752][T10342] netlink: 'syz.0.18619': attribute type 9 has an invalid length. [ 1029.842399][T10342] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.18619'. [ 1030.808441][T10358] netlink: 'syz.1.18625': attribute type 22 has an invalid length. [ 1030.820971][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18625'. [ 1031.439747][T10393] netlink: 'syz.2.18643': attribute type 1 has an invalid length. [ 1031.464816][T10393] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.18643'. [ 1032.959452][T10454] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.18682'. [ 1033.209546][T10460] ref_ctr_offset mismatch. inode: 0x4946 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 1034.062725][T10493] ref_ctr_offset mismatch. inode: 0x488b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 1034.718573][T10523] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18707'. [ 1034.885309][T10530] ref_ctr_offset mismatch. inode: 0x49f9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 1036.203034][T10560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18723'. [ 1036.800643][T10589] netlink: 'syz.1.18739': attribute type 21 has an invalid length. [ 1036.834314][T10589] netlink: 'syz.1.18739': attribute type 1 has an invalid length. [ 1036.975849][T10594] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18741'. [ 1037.536985][T10624] netlink: 'syz.4.18756': attribute type 21 has an invalid length. [ 1037.568524][T10624] netlink: 'syz.4.18756': attribute type 1 has an invalid length. [ 1038.362544][T10655] netlink: 'syz.2.18770': attribute type 21 has an invalid length. [ 1038.370993][T10655] netlink: 'syz.2.18770': attribute type 1 has an invalid length. [ 1039.047800][T10683] netlink: 'syz.0.18783': attribute type 21 has an invalid length. [ 1039.119406][T10683] netlink: 'syz.0.18783': attribute type 1 has an invalid length. [ 1039.643939][T10704] netlink: 'syz.4.18792': attribute type 3 has an invalid length. [ 1039.652016][T10704] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.18792'. [ 1039.955881][T10723] netlink: 'syz.2.18803': attribute type 3 has an invalid length. [ 1039.978500][T10723] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.18803'. [ 1042.095831][T10797] netlink: 'syz.4.18838': attribute type 3 has an invalid length. [ 1042.127706][T10797] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.18838'. [ 1043.137830][T10860] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1043.183802][T10860] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1044.429309][T10925] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.18895'. [ 1044.717593][T10937] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1044.756931][T10937] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1044.809297][T10940] netlink: 'syz.2.18902': attribute type 21 has an invalid length. [ 1044.835352][T10940] netlink: 'syz.2.18902': attribute type 6 has an invalid length. [ 1044.851902][T10940] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18902'. [ 1044.863176][T10946] netlink: 'syz.0.18904': attribute type 29 has an invalid length. [ 1044.866484][T10945] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.18907'. [ 1044.886541][T10946] netlink: 'syz.0.18904': attribute type 29 has an invalid length. [ 1045.102636][T10955] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.18910'. [ 1045.263320][T10965] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.18914'. [ 1046.125975][T10978] netlink: 'syz.3.18920': attribute type 21 has an invalid length. [ 1046.135625][T10978] netlink: 'syz.3.18920': attribute type 6 has an invalid length. [ 1046.143518][T10978] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18920'. [ 1046.365536][T10984] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.18921'. [ 1046.520148][T10989] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.18926'. [ 1046.828474][T11006] netlink: 'syz.3.18935': attribute type 1 has an invalid length. [ 1046.879554][T11010] netlink: 'syz.4.18937': attribute type 21 has an invalid length. [ 1046.901092][T11010] netlink: 'syz.4.18937': attribute type 6 has an invalid length. [ 1046.943984][T11010] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18937'. [ 1046.979785][T11014] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.18939'. [ 1047.641345][T11037] netlink: 'syz.4.18951': attribute type 29 has an invalid length. [ 1047.669107][T11037] netlink: 'syz.4.18951': attribute type 29 has an invalid length. [ 1047.737816][T11043] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.18953'. [ 1048.151721][T11059] netlink: 'syz.4.18960': attribute type 3 has an invalid length. [ 1048.171848][T11059] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.18960'. [ 1048.418115][T11069] netlink: 'syz.3.18965': attribute type 21 has an invalid length. [ 1050.467845][T11143] netlink: 'syz.4.18999': attribute type 21 has an invalid length. [ 1050.710838][T11153] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.19003'. [ 1051.222192][T11177] netlink: 'syz.0.19018': attribute type 21 has an invalid length. [ 1052.147048][T11218] netlink: 'syz.2.19039': attribute type 6 has an invalid length. [ 1052.165741][T11218] netlink: 168 bytes leftover after parsing attributes in process `syz.2.19039'. [ 1054.308583][T11312] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.19082'. [ 1054.536061][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.542587][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.663372][T11322] netlink: 'syz.1.19087': attribute type 29 has an invalid length. [ 1054.684090][T11322] netlink: 'syz.1.19087': attribute type 29 has an invalid length. [ 1054.723714][T11322] netlink: 'syz.1.19087': attribute type 29 has an invalid length. [ 1055.052097][T11336] netlink: 'syz.1.19092': attribute type 10 has an invalid length. [ 1055.083182][T11336] netlink: 'syz.1.19092': attribute type 10 has an invalid length. [ 1055.093326][T11336] netlink: 2 bytes leftover after parsing attributes in process `syz.1.19092'. [ 1055.115401][T11336] device team0 entered promiscuous mode [ 1055.122678][T11336] device team_slave_1 entered promiscuous mode [ 1055.134911][T11336] device netdevsim0 entered promiscuous mode [ 1055.141304][T11336] device geneve1 entered promiscuous mode [ 1055.166974][T11336] device wlan1 entered promiscuous mode [ 1055.189073][T11336] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.720340][T11370] netlink: 'syz.3.19111': attribute type 10 has an invalid length. [ 1055.747894][T11370] netlink: 'syz.3.19111': attribute type 10 has an invalid length. [ 1055.775252][T11370] netlink: 2 bytes leftover after parsing attributes in process `syz.3.19111'. [ 1055.795054][T11370] device team0 entered promiscuous mode [ 1055.814018][T11370] device team_slave_1 entered promiscuous mode [ 1055.824262][T11370] device geneve1 entered promiscuous mode [ 1055.830238][T11370] device dummy0 entered promiscuous mode [ 1055.844656][T11370] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.180612][T11394] netlink: 'syz.3.19124': attribute type 29 has an invalid length. [ 1056.199592][T11394] netlink: 'syz.3.19124': attribute type 29 has an invalid length. [ 1056.236765][T11399] netlink: 'syz.3.19124': attribute type 29 has an invalid length. [ 1056.497798][T11413] netlink: 156 bytes leftover after parsing attributes in process `syz.2.19132'. [ 1056.851226][T11434] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.19142'. [ 1057.483188][T11446] netlink: 156 bytes leftover after parsing attributes in process `syz.3.19149'. [ 1057.971200][T11457] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.19155'. [ 1058.827299][T11489] netlink: 2 bytes leftover after parsing attributes in process `syz.4.19170'. [ 1058.877102][T11489] device team0 entered promiscuous mode [ 1058.896470][T11489] device team_slave_1 entered promiscuous mode [ 1058.910345][T11489] device geneve1 entered promiscuous mode [ 1058.923669][T11489] device dummy0 entered promiscuous mode [ 1058.935210][T11489] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.817321][T11518] validate_nla: 4 callbacks suppressed [ 1059.817344][T11518] netlink: 'syz.2.19180': attribute type 17 has an invalid length. [ 1059.848187][T11518] netlink: 152 bytes leftover after parsing attributes in process `syz.2.19180'. [ 1059.875809][T11518] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1059.907902][T11518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1059.943659][T11522] netlink: 'syz.0.19182': attribute type 10 has an invalid length. [ 1059.971434][T11522] batman_adv: batadv0: Adding interface: team0 [ 1059.985034][T11522] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.042762][T11522] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1060.057752][T11525] netlink: 'syz.0.19182': attribute type 10 has an invalid length. [ 1060.066437][T11525] netlink: 2 bytes leftover after parsing attributes in process `syz.0.19182'. [ 1060.110705][T11525] device team0 entered promiscuous mode [ 1060.143665][T11525] device team_slave_1 entered promiscuous mode [ 1060.150192][T11525] device geneve1 entered promiscuous mode [ 1060.186636][T11525] device dummy0 entered promiscuous mode [ 1060.193026][T11525] device wlan1 entered promiscuous mode [ 1060.236179][T11525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.249303][T11525] batman_adv: batadv0: Interface activated: team0 [ 1060.269723][T11525] batman_adv: batadv0: Interface deactivated: team0 [ 1060.287522][T11525] batman_adv: batadv0: Removing interface: team0 [ 1061.155050][T11552] netlink: 'syz.0.19209': attribute type 25 has an invalid length. [ 1061.207453][T11552] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.19209'. [ 1063.090843][T11614] netlink: 'syz.2.19223': attribute type 10 has an invalid length. [ 1063.124812][T11614] netlink: 'syz.2.19223': attribute type 10 has an invalid length. [ 1063.148326][T11614] netlink: 2 bytes leftover after parsing attributes in process `syz.2.19223'. [ 1063.179450][T11614] device team0 entered promiscuous mode [ 1063.197809][T11614] device team_slave_1 entered promiscuous mode [ 1063.212352][T11614] device netdevsim0 entered promiscuous mode [ 1063.245254][T11614] device geneve1 entered promiscuous mode [ 1063.287962][T11614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.152670][T11675] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.19267'. [ 1065.442610][T11686] netlink: 'syz.3.19261': attribute type 10 has an invalid length. [ 1065.503852][T11686] device team0 left promiscuous mode [ 1065.523858][T11686] device team_slave_1 left promiscuous mode [ 1065.529998][T11686] device geneve1 left promiscuous mode [ 1065.566431][T11686] device dummy0 left promiscuous mode [ 1065.613778][T11687] netlink: 'syz.3.19261': attribute type 10 has an invalid length. [ 1065.633932][T11687] netlink: 2 bytes leftover after parsing attributes in process `syz.3.19261'. [ 1065.649073][T11687] device team0 entered promiscuous mode [ 1065.663377][T11687] device team_slave_1 entered promiscuous mode [ 1065.686153][T11687] device geneve1 entered promiscuous mode [ 1065.708432][T11687] device dummy0 entered promiscuous mode [ 1065.727120][T11687] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.310704][T11700] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.19271'. [ 1066.744934][T11720] netlink: 'syz.0.19279': attribute type 10 has an invalid length. [ 1067.212058][T11740] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.19286'. [ 1067.896556][T11766] netlink: 'syz.2.19301': attribute type 10 has an invalid length. [ 1067.905269][T11766] device team0 left promiscuous mode [ 1067.910778][T11766] device team_slave_1 left promiscuous mode [ 1067.917245][T11766] device netdevsim0 left promiscuous mode [ 1067.924271][T11766] device geneve1 left promiscuous mode [ 1067.977108][T11767] netlink: 'syz.2.19301': attribute type 10 has an invalid length. [ 1068.033861][T11767] netlink: 2 bytes leftover after parsing attributes in process `syz.2.19301'. [ 1068.043443][T11767] device team0 entered promiscuous mode [ 1068.089260][T11767] device team_slave_1 entered promiscuous mode [ 1068.115310][T11767] device netdevsim0 entered promiscuous mode [ 1068.130220][T11767] device geneve1 entered promiscuous mode [ 1068.149347][T11767] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.715388][T11797] netlink: 'syz.2.19318': attribute type 10 has an invalid length. [ 1068.745710][T11797] device team0 left promiscuous mode [ 1068.751772][T11797] device team_slave_1 left promiscuous mode [ 1068.778288][T11797] device netdevsim0 left promiscuous mode [ 1068.791936][T11797] device geneve1 left promiscuous mode [ 1068.826750][T11806] netlink: 'syz.2.19318': attribute type 10 has an invalid length. [ 1068.847145][T11806] netlink: 2 bytes leftover after parsing attributes in process `syz.2.19318'. [ 1068.878859][T11806] device team0 entered promiscuous mode [ 1068.895368][T11806] device team_slave_1 entered promiscuous mode [ 1068.918428][T11806] device netdevsim0 entered promiscuous mode [ 1068.931594][T11806] device geneve1 entered promiscuous mode [ 1068.950120][T11806] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.018374][T12000] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1076.725912][T12025] netlink: 'syz.2.19421': attribute type 46 has an invalid length. [ 1078.661082][T12116] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.19467'. [ 1079.439755][T12148] netlink: 'syz.4.19484': attribute type 3 has an invalid length. [ 1079.464105][T12148] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.19484'. [ 1080.223688][T12156] netlink: 'syz.3.19486': attribute type 46 has an invalid length. [ 1081.564571][T12198] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.19506'. [ 1082.129282][T12217] netlink: 'syz.3.19514': attribute type 3 has an invalid length. [ 1082.143991][T12217] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.19514'. [ 1084.136314][T12288] netlink: 168 bytes leftover after parsing attributes in process `syz.2.19550'. [ 1084.473352][T12303] netlink: 'syz.0.19557': attribute type 10 has an invalid length. [ 1084.644069][T12304] netlink: 'syz.0.19557': attribute type 10 has an invalid length. [ 1084.668518][T12304] device netdevsim0 left promiscuous mode [ 1084.736715][T12304] team0: Port device netdevsim0 removed [ 1084.758875][T12304] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1086.249301][T12338] netlink: 168 bytes leftover after parsing attributes in process `syz.4.19575'. [ 1087.154945][T12368] netlink: 168 bytes leftover after parsing attributes in process `syz.3.19589'. [ 1089.126205][T12426] netlink: 'syz.1.19614': attribute type 10 has an invalid length. [ 1089.169564][T12426] netlink: 'syz.1.19614': attribute type 10 has an invalid length. [ 1089.184889][T12426] device netdevsim0 left promiscuous mode [ 1089.197372][T12426] team0: Port device netdevsim0 removed [ 1090.137208][T12460] netlink: 'syz.3.19632': attribute type 10 has an invalid length. [ 1090.204369][T12460] device netdevsim0 entered promiscuous mode [ 1090.244118][T12460] team0: Port device netdevsim0 added [ 1090.250810][T12461] netlink: 'syz.3.19632': attribute type 10 has an invalid length. [ 1090.280520][T12461] device netdevsim0 left promiscuous mode [ 1090.304705][T12461] team0: Port device netdevsim0 removed [ 1090.539690][T12481] netlink: 'syz.1.19641': attribute type 29 has an invalid length. [ 1090.555406][T12481] netlink: 'syz.1.19641': attribute type 29 has an invalid length. [ 1090.571846][T12481] netlink: 'syz.1.19641': attribute type 29 has an invalid length. [ 1091.247490][T12503] netlink: 'syz.4.19651': attribute type 10 has an invalid length. [ 1091.316861][T12505] netlink: 'syz.4.19651': attribute type 10 has an invalid length. [ 1091.363209][T12505] device netdevsim0 left promiscuous mode [ 1091.406314][T12505] team0: Port device netdevsim0 removed [ 1091.797338][T12520] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.19670'. [ 1092.197158][T12539] netlink: 'syz.2.19667': attribute type 10 has an invalid length. [ 1092.251909][T12540] netlink: 3748 bytes leftover after parsing attributes in process `syz.0.19678'. [ 1092.272411][T12542] device netdevsim0 left promiscuous mode [ 1092.324517][T12542] team0: Port device netdevsim0 removed [ 1093.260469][T12573] netlink: 3748 bytes leftover after parsing attributes in process `syz.2.19684'. [ 1093.930272][T12585] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.19690'. [ 1094.286804][T12598] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.19696'. [ 1094.418533][T12606] netlink: 3748 bytes leftover after parsing attributes in process `syz.1.19697'. [ 1094.577244][T12617] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.19704'. [ 1095.076650][T12633] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.19715'. [ 1095.892222][T12665] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.19729'. [ 1096.598202][T12679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19737'. [ 1099.355570][T12770] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19782'. [ 1099.417113][T12772] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.19784'. [ 1100.408985][T12789] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.19789'. [ 1100.458598][T12789] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.19789'. [ 1100.484214][T12788] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.19789'. [ 1100.769699][T12804] validate_nla: 4 callbacks suppressed [ 1100.769721][T12804] netlink: 'syz.4.19799': attribute type 3 has an invalid length. [ 1100.800349][T12804] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.19799'. [ 1101.951432][T12846] netlink: 'syz.2.19817': attribute type 3 has an invalid length. [ 1101.970920][T12846] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.19817'. [ 1102.300261][T12857] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.19824'. [ 1102.774062][T12867] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.19828'. [ 1102.823745][T12867] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.19828'. [ 1103.102989][T12875] netlink: 'syz.1.19832': attribute type 11 has an invalid length. [ 1103.297019][T12884] netlink: 'syz.0.19837': attribute type 3 has an invalid length. [ 1103.976480][T12917] netlink: 'syz.4.19851': attribute type 11 has an invalid length. [ 1109.437193][T13069] __nla_validate_parse: 2 callbacks suppressed [ 1109.437214][T13069] netlink: 60 bytes leftover after parsing attributes in process `syz.4.19925'. [ 1111.314772][T13108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19943'. [ 1112.335601][T13137] netlink: 64 bytes leftover after parsing attributes in process `syz.0.19956'. [ 1112.493222][T13144] netlink: 'syz.0.19962': attribute type 29 has an invalid length. [ 1112.523961][T13144] netlink: 'syz.0.19962': attribute type 29 has an invalid length. [ 1112.553224][T13144] netlink: 'syz.0.19962': attribute type 29 has an invalid length. [ 1113.218202][T13166] netlink: 64 bytes leftover after parsing attributes in process `syz.1.19972'. [ 1113.850664][T13178] netlink: 'syz.1.19978': attribute type 29 has an invalid length. [ 1113.885359][T13178] netlink: 'syz.1.19978': attribute type 29 has an invalid length. [ 1113.915593][T13185] netlink: 'syz.1.19978': attribute type 29 has an invalid length. [ 1114.986172][T13217] netlink: 'syz.3.19996': attribute type 29 has an invalid length. [ 1115.084294][T13217] netlink: 'syz.3.19996': attribute type 29 has an invalid length. [ 1115.176955][T13221] netlink: 'syz.3.19996': attribute type 29 has an invalid length. [ 1115.678555][T13243] netlink: 'syz.4.20017': attribute type 3 has an invalid length. [ 1115.720862][T13243] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.20017'. [ 1115.867823][T13250] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.20009'. [ 1115.976222][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.982961][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.143351][T13262] netlink: 64 bytes leftover after parsing attributes in process `syz.4.20015'. [ 1116.667124][T13281] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.20027'. [ 1116.798039][T13284] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.20028'. [ 1117.445212][T13313] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.20043'. [ 1117.944474][T13330] validate_nla: 7 callbacks suppressed [ 1117.944494][T13330] netlink: 'syz.4.20052': attribute type 1 has an invalid length. [ 1118.446282][T13344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20058'. [ 1118.819182][T13361] netlink: 'syz.3.20065': attribute type 10 has an invalid length. [ 1118.853880][T13361] netlink: 'syz.3.20065': attribute type 19 has an invalid length. [ 1118.873837][T13361] netlink: 156 bytes leftover after parsing attributes in process `syz.3.20065'. [ 1118.957617][T13365] netlink: 'syz.2.20067': attribute type 1 has an invalid length. [ 1119.911772][T13403] netlink: 'syz.4.20088': attribute type 29 has an invalid length. [ 1119.953899][T13403] netlink: 'syz.4.20088': attribute type 29 has an invalid length. [ 1119.993972][T13404] netlink: 'syz.4.20088': attribute type 29 has an invalid length. [ 1120.287034][T13412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20091'. [ 1120.478320][T13423] netlink: 'syz.1.20096': attribute type 1 has an invalid length. [ 1120.663837][T13434] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.20104'. [ 1120.678803][T13436] netlink: 'syz.2.20103': attribute type 29 has an invalid length. [ 1120.697502][T13436] netlink: 'syz.2.20103': attribute type 29 has an invalid length. [ 1121.276121][T13469] __nla_validate_parse: 1 callbacks suppressed [ 1121.276143][T13469] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.20119'. [ 1121.564628][T13481] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.20126'. [ 1121.601884][T13481] netlink: zone id is out of range [ 1121.926040][T13501] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.20135'. [ 1121.971882][T13507] netlink: 22 bytes leftover after parsing attributes in process `syz.3.20139'. [ 1122.002623][T13507] openvswitch: netlink: Flow key attr not present in new flow. [ 1122.162048][T13519] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.20145'. [ 1122.206967][T13519] netlink: zone id is out of range [ 1122.280725][T13524] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.20147'. [ 1123.479597][T13549] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.20160'. [ 1123.520777][T13549] netlink: zone id is out of range [ 1124.050278][T13582] validate_nla: 5 callbacks suppressed [ 1124.050301][T13582] netlink: 'syz.0.20176': attribute type 8 has an invalid length. [ 1124.073750][T13582] netlink: 399 bytes leftover after parsing attributes in process `syz.0.20176'. [ 1124.143010][T13586] netlink: 22 bytes leftover after parsing attributes in process `syz.1.20178'. [ 1124.173923][T13586] openvswitch: netlink: Flow key attr not present in new flow. [ 1124.890783][T13626] netlink: 22 bytes leftover after parsing attributes in process `syz.2.20194'. [ 1124.919241][T13626] openvswitch: netlink: Flow key attr not present in new flow. [ 1125.199758][T13642] netlink: 'syz.2.20203': attribute type 2 has an invalid length. [ 1125.833099][T13677] netlink: 'syz.0.20221': attribute type 2 has an invalid length. [ 1126.053857][T13686] netlink: 'syz.3.20236': attribute type 2 has an invalid length. [ 1126.378764][T13700] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.20233'. [ 1126.930405][T13725] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1126.950665][T13725] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1128.680210][T13785] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1128.690333][T13785] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1129.456596][T13799] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.20279'. [ 1133.933139][T13949] netlink: 'syz.4.20347': attribute type 29 has an invalid length. [ 1133.962055][T13949] netlink: 'syz.4.20347': attribute type 29 has an invalid length. [ 1133.988687][T13952] netlink: 'syz.4.20347': attribute type 29 has an invalid length. [ 1134.194195][T13958] netlink: 6 bytes leftover after parsing attributes in process `syz.3.20360'. [ 1134.205624][T13958] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 1137.131260][T14032] netlink: 6 bytes leftover after parsing attributes in process `syz.1.20380'. [ 1137.214455][T14032] IPv6: ADDRCONF(NETDEV_CHANGE): Q±6ã×\b‹¡Y­4: link becomes ready [ 1137.274270][T14032] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 1137.645296][T14056] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.20395'. [ 1138.150190][T14082] netlink: 'syz.4.20407': attribute type 21 has an invalid length. [ 1138.557450][T14094] netlink: 'syz.0.20414': attribute type 3 has an invalid length. [ 1138.735005][T14100] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.20415'. [ 1138.768082][T14100] openvswitch: netlink: Message has 41214 unknown bytes. [ 1139.170371][T14126] netlink: 6 bytes leftover after parsing attributes in process `syz.4.20427'. [ 1139.203896][T14126] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 1140.590948][T14173] netlink: 'syz.3.20449': attribute type 1 has an invalid length. [ 1140.607057][T14173] netlink: 'syz.3.20449': attribute type 1 has an invalid length. [ 1140.634248][T14173] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.20449'. [ 1140.721228][T14179] netlink: 'syz.0.20454': attribute type 21 has an invalid length. [ 1140.739643][T14181] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.20455'. [ 1140.778659][T14181] openvswitch: netlink: Message has 41214 unknown bytes. [ 1141.746021][T14220] netlink: 'syz.0.20469': attribute type 1 has an invalid length. [ 1141.795078][T14220] netlink: 'syz.0.20469': attribute type 1 has an invalid length. [ 1141.835085][T14220] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.20469'. [ 1142.509972][T14254] netlink: 'syz.4.20486': attribute type 21 has an invalid length. [ 1142.668180][T14259] netlink: 'syz.2.20490': attribute type 1 has an invalid length. [ 1142.727873][T14259] netlink: 'syz.2.20490': attribute type 1 has an invalid length. [ 1142.753666][T14259] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.20490'. [ 1143.280085][T14279] netlink: 'syz.2.20497': attribute type 2 has an invalid length. [ 1144.212189][T14319] netlink: 'syz.2.20516': attribute type 21 has an invalid length. [ 1145.465597][T14380] syz.0.20557[14380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1146.211727][T14417] validate_nla: 3 callbacks suppressed [ 1146.211744][T14417] netlink: 'syz.1.20562': attribute type 29 has an invalid length. [ 1146.313915][T14417] netlink: 'syz.1.20562': attribute type 29 has an invalid length. [ 1146.322600][T14419] netlink: 'syz.1.20562': attribute type 29 has an invalid length. [ 1146.366687][T14425] netlink: 'syz.3.20567': attribute type 46 has an invalid length. [ 1146.912861][T14450] netlink: 65043 bytes leftover after parsing attributes in process `syz.3.20578'. [ 1147.113435][T14460] netlink: 'syz.0.20580': attribute type 29 has an invalid length. [ 1147.136479][T14460] netlink: 'syz.0.20580': attribute type 29 has an invalid length. [ 1147.169132][T14460] netlink: 'syz.0.20580': attribute type 29 has an invalid length. [ 1147.733900][T14482] netlink: 'syz.4.20592': attribute type 10 has an invalid length. [ 1147.742870][T14482] device team0 left promiscuous mode [ 1147.753697][T14482] device team_slave_1 left promiscuous mode [ 1147.763911][T14482] device geneve1 left promiscuous mode [ 1147.785168][T14482] device dummy0 left promiscuous mode [ 1147.813432][T14486] netlink: 'syz.4.20592': attribute type 10 has an invalid length. [ 1148.302765][T14513] netlink: 'syz.2.20607': attribute type 29 has an invalid length. [ 1149.675755][T14570] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.20634'. [ 1150.346125][T14595] netlink: 168 bytes leftover after parsing attributes in process `syz.4.20647'. [ 1150.437845][T14597] netlink: 5 bytes leftover after parsing attributes in process `syz.3.20648'. [ 1151.415824][T14630] netlink: 168 bytes leftover after parsing attributes in process `syz.1.20662'. [ 1153.919001][T14729] validate_nla: 10 callbacks suppressed [ 1153.919027][T14729] netlink: 'syz.2.20709': attribute type 29 has an invalid length. [ 1153.981351][T14729] netlink: 'syz.2.20709': attribute type 29 has an invalid length. [ 1153.993955][T14731] netlink: 'syz.2.20709': attribute type 29 has an invalid length. [ 1155.389854][T14798] netlink: 'syz.2.20743': attribute type 1 has an invalid length. [ 1157.767664][T14892] netlink: 'syz.0.20785': attribute type 3 has an invalid length. [ 1157.778107][T14892] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.20785'. [ 1158.981114][T14917] netlink: 'syz.0.20796': attribute type 1 has an invalid length. [ 1159.055915][T14917] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.20796'. [ 1161.387164][T14940] netlink: 'syz.3.20815': attribute type 29 has an invalid length. [ 1161.423898][T14940] netlink: 'syz.3.20815': attribute type 29 has an invalid length. [ 1161.445121][T14940] netlink: 'syz.3.20815': attribute type 29 has an invalid length. [ 1161.980520][T14957] netlink: 'syz.3.20812': attribute type 2 has an invalid length. [ 1162.033201][T14957] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.20812'. [ 1162.508601][T14963] netlink: 'syz.4.20817': attribute type 11 has an invalid length. [ 1162.553652][T14963] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.20817'. [ 1162.654187][T14961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1163.846569][T15008] netlink: 'syz.4.20838': attribute type 2 has an invalid length. [ 1163.865214][T15008] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.20838'. [ 1163.938715][T15014] netlink: 'syz.2.20840': attribute type 29 has an invalid length. [ 1163.958437][T15014] netlink: 'syz.2.20840': attribute type 29 has an invalid length. [ 1163.990573][T15017] netlink: 'syz.2.20840': attribute type 29 has an invalid length. [ 1165.753031][T15081] netlink: 'syz.0.20872': attribute type 11 has an invalid length. [ 1165.772874][T15081] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.20872'. [ 1165.806101][T15080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1167.962665][T15156] netlink: 'syz.3.20904': attribute type 2 has an invalid length. [ 1167.981993][T15156] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.20904'. [ 1168.458624][T15183] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.20919'. [ 1168.750629][T15196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20926'. [ 1173.840974][T15316] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.20994'. [ 1174.593393][T15344] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.20998'. [ 1175.613272][T15386] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.21017'. [ 1175.653769][T15386] openvswitch: netlink: Key type 386 is out of range max 32 [ 1176.357181][T15406] netlink: 611 bytes leftover after parsing attributes in process `syz.1.21029'. [ 1176.797519][T15433] netlink: 'syz.4.21039': attribute type 27 has an invalid length. [ 1176.818278][T15433] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.21039'. [ 1177.523264][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.529877][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.544819][T15464] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.21054'. [ 1177.554572][T15464] openvswitch: netlink: Key type 386 is out of range max 32 [ 1180.930253][T15628] netlink: 'syz.2.21131': attribute type 27 has an invalid length. [ 1180.944117][T15628] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.21131'. [ 1184.232686][T15814] netlink: 'syz.0.21220': attribute type 21 has an invalid length. [ 1184.255140][T15814] netlink: 'syz.0.21220': attribute type 6 has an invalid length. [ 1184.273381][T15814] netlink: 132 bytes leftover after parsing attributes in process `syz.0.21220'. [ 1184.531325][T15829] netlink: 2530 bytes leftover after parsing attributes in process `syz.1.21229'. [ 1184.609287][T15837] netlink: 'syz.4.21233': attribute type 29 has an invalid length. [ 1184.634044][T15837] netlink: 'syz.4.21233': attribute type 29 has an invalid length. [ 1184.652613][T15837] netlink: 'syz.4.21233': attribute type 29 has an invalid length. [ 1184.976799][T15856] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.21243'. [ 1185.548696][T15886] netlink: 2530 bytes leftover after parsing attributes in process `syz.4.21257'. [ 1185.703400][T15899] netlink: 'syz.4.21262': attribute type 21 has an invalid length. [ 1185.715061][T15899] netlink: 'syz.4.21262': attribute type 6 has an invalid length. [ 1185.734560][T15899] netlink: 132 bytes leftover after parsing attributes in process `syz.4.21262'. [ 1186.096915][T15920] netlink: 2530 bytes leftover after parsing attributes in process `syz.3.21274'. [ 1186.270024][T15927] netlink: 'syz.3.21279': attribute type 21 has an invalid length. [ 1186.289179][T15927] netlink: 'syz.3.21279': attribute type 6 has an invalid length. [ 1186.308684][T15927] netlink: 132 bytes leftover after parsing attributes in process `syz.3.21279'. [ 1186.870110][T15955] netlink: 'syz.0.21303': attribute type 3 has an invalid length. [ 1186.893100][T15955] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.21303'. [ 1186.915912][T15959] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21292'. [ 1187.170563][T15969] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.21297'. [ 1187.296287][T15973] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.21310'. [ 1187.933184][T16000] netlink: 132 bytes leftover after parsing attributes in process `syz.2.21309'. [ 1188.156694][T16008] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.21317'. [ 1189.378063][T16069] validate_nla: 8 callbacks suppressed [ 1189.378087][T16069] netlink: 'syz.1.21354': attribute type 29 has an invalid length. [ 1189.433146][T16069] netlink: 'syz.1.21354': attribute type 29 has an invalid length. [ 1189.470416][T16074] netlink: 'syz.1.21354': attribute type 29 has an invalid length. [ 1189.713556][T16088] netlink: 'syz.3.21364': attribute type 29 has an invalid length. [ 1189.752477][T16088] netlink: 'syz.3.21364': attribute type 29 has an invalid length. [ 1189.794644][T16091] netlink: 'syz.3.21364': attribute type 29 has an invalid length. [ 1191.067448][T16125] netlink: 'syz.0.21370': attribute type 7 has an invalid length. [ 1192.397714][T16188] netlink: 'syz.2.21401': attribute type 7 has an invalid length. [ 1192.988502][T16222] netlink: 'syz.4.21419': attribute type 7 has an invalid length. [ 1194.606399][T16319] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.21466'. [ 1195.747613][T16384] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.21497'. [ 1195.806710][T16384] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1195.974061][T16396] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.21504'. [ 1196.613951][T16427] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.21518'. [ 1197.569784][T16473] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.21541'. [ 1197.608188][T16473] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1197.634459][T16473] CPU: 1 PID: 16473 Comm: syz.3.21541 Not tainted 6.1.128-syzkaller #0 [ 1197.643056][T16473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1197.653173][T16473] Call Trace: [ 1197.656538][T16473] [ 1197.659509][T16473] dump_stack_lvl+0x1e3/0x2cb [ 1197.664517][T16473] ? nf_tcp_handle_invalid+0x642/0x642 [ 1197.670211][T16473] ? panic+0x764/0x764 [ 1197.674368][T16473] sysfs_warn_dup+0x8a/0xa0 [ 1197.678934][T16473] sysfs_do_create_link_sd+0xbe/0x100 [ 1197.684553][T16473] device_add+0x7d4/0xfd0 [ 1197.688989][T16473] wiphy_register+0x1e44/0x2cc0 [ 1197.693958][T16473] ? cfg80211_event_work+0x40/0x40 [ 1197.699314][T16473] ? minstrel_ht_alloc+0x7cf/0x940 [ 1197.704704][T16473] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 1197.710864][T16473] ieee80211_register_hw+0x31bd/0x3f10 [ 1197.716424][T16473] ? ieee80211_register_hw+0x11b1/0x3f10 [ 1197.722117][T16473] ? ieee80211_register_hw+0x10b1/0x3f10 [ 1197.727833][T16473] ? ieee80211_tasklet_handler+0x20/0x20 [ 1197.733690][T16473] ? __debug_object_init+0xe9/0x450 [ 1197.738975][T16473] ? memset+0x1f/0x40 [ 1197.743427][T16473] ? __hrtimer_init+0x181/0x260 [ 1197.748707][T16473] mac80211_hwsim_new_radio+0x22d9/0x4060 [ 1197.754567][T16473] hwsim_new_radio_nl+0xc54/0x1190 [ 1197.759900][T16473] ? hwsim_tx_info_frame_received_nl+0x10a0/0x10a0 [ 1197.766600][T16473] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 1197.772999][T16473] genl_rcv_msg+0xc1a/0xf70 [ 1197.777820][T16473] ? genl_bind+0x400/0x400 [ 1197.782287][T16473] ? read_lock_is_recursive+0x10/0x10 [ 1197.787747][T16473] ? hwsim_tx_info_frame_received_nl+0x10a0/0x10a0 [ 1197.794326][T16473] netlink_rcv_skb+0x1cd/0x410 [ 1197.799684][T16473] ? genl_bind+0x400/0x400 [ 1197.804410][T16473] ? netlink_ack+0x1290/0x1290 [ 1197.809270][T16473] genl_rcv+0x24/0x40 [ 1197.813680][T16473] netlink_unicast+0x7d8/0x970 [ 1197.818525][T16473] ? netlink_detachskb+0x90/0x90 [ 1197.823627][T16473] ? find_vmap_area+0xf3/0x100 [ 1197.828666][T16473] ? __phys_addr_symbol+0x2b/0x70 [ 1197.834094][T16473] ? __check_object_size+0x4dd/0xa30 [ 1197.839498][T16473] ? bpf_lsm_netlink_send+0x5/0x10 [ 1197.844644][T16473] netlink_sendmsg+0xa26/0xd60 [ 1197.849467][T16473] ? netlink_getsockopt+0x580/0x580 [ 1197.854698][T16473] ? aa_sock_msg_perm+0x91/0x150 [ 1197.860132][T16473] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1197.866165][T16473] ? security_socket_sendmsg+0x7d/0xa0 [ 1197.872404][T16473] ? netlink_getsockopt+0x580/0x580 [ 1197.877857][T16473] ____sys_sendmsg+0x5a5/0x8f0 [ 1197.882780][T16473] ? __sys_sendmsg_sock+0x30/0x30 [ 1197.888295][T16473] __sys_sendmsg+0x2a9/0x390 [ 1197.892921][T16473] ? ____sys_sendmsg+0x8f0/0x8f0 [ 1197.897945][T16473] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1197.904242][T16473] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1197.910258][T16473] ? lockdep_hardirqs_on+0x94/0x130 [ 1197.915568][T16473] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1197.921857][T16473] do_syscall_64+0x3b/0xb0 [ 1197.926304][T16473] ? clear_bhb_loop+0x45/0xa0 [ 1197.931708][T16473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1197.937728][T16473] RIP: 0033:0x7fcbff18cde9 [ 1197.942247][T16473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1197.962378][T16473] RSP: 002b:00007fcc0004d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1197.971026][T16473] RAX: ffffffffffffffda RBX: 00007fcbff3a5fa0 RCX: 00007fcbff18cde9 [ 1197.979302][T16473] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1197.987566][T16473] RBP: 00007fcbff20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.995837][T16473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.003832][T16473] R13: 0000000000000000 R14: 00007fcbff3a5fa0 R15: 00007ffcbe701f88 [ 1198.011941][T16473] [ 1198.210760][T16491] netlink: 'syz.0.21550': attribute type 29 has an invalid length. [ 1198.244511][T16491] netlink: 'syz.0.21550': attribute type 29 has an invalid length. [ 1198.246296][T16494] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.21552'. [ 1198.290973][T16491] netlink: 'syz.0.21550': attribute type 29 has an invalid length. [ 1198.967705][T16526] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.21565'. [ 1198.994784][T16530] netlink: 'syz.3.21566': attribute type 29 has an invalid length. [ 1199.005713][T16530] netlink: 'syz.3.21566': attribute type 29 has an invalid length. [ 1199.018969][T16530] netlink: 'syz.3.21566': attribute type 29 has an invalid length. [ 1199.030281][T16526] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1199.546867][T16557] netlink: 'syz.3.21592': attribute type 3 has an invalid length. [ 1199.565293][T16557] netlink: 132 bytes leftover after parsing attributes in process `syz.3.21592'. [ 1199.588459][T16561] netlink: 'syz.2.21583': attribute type 29 has an invalid length. [ 1199.600881][T16561] netlink: 'syz.2.21583': attribute type 29 has an invalid length. [ 1199.624072][T16561] netlink: 'syz.2.21583': attribute type 29 has an invalid length. [ 1199.739701][T16567] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.21585'. [ 1199.785653][T16567] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1199.806101][T16567] CPU: 1 PID: 16567 Comm: syz.0.21585 Not tainted 6.1.128-syzkaller #0 [ 1199.814435][T16567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1199.824720][T16567] Call Trace: [ 1199.828028][T16567] [ 1199.830986][T16567] dump_stack_lvl+0x1e3/0x2cb [ 1199.835692][T16567] ? nf_tcp_handle_invalid+0x642/0x642 [ 1199.841174][T16567] ? panic+0x764/0x764 [ 1199.845387][T16567] sysfs_warn_dup+0x8a/0xa0 [ 1199.849947][T16567] sysfs_do_create_link_sd+0xbe/0x100 [ 1199.855373][T16567] device_add+0x7d4/0xfd0 [ 1199.859847][T16567] wiphy_register+0x1e44/0x2cc0 [ 1199.864957][T16567] ? cfg80211_event_work+0x40/0x40 [ 1199.870272][T16567] ? minstrel_ht_alloc+0x7cf/0x940 [ 1199.875804][T16567] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 1199.882205][T16567] ieee80211_register_hw+0x31bd/0x3f10 [ 1199.887833][T16567] ? ieee80211_register_hw+0x11b1/0x3f10 [ 1199.893608][T16567] ? ieee80211_register_hw+0x10b1/0x3f10 [ 1199.899559][T16567] ? ieee80211_tasklet_handler+0x20/0x20 [ 1199.905248][T16567] ? __debug_object_init+0xe9/0x450 [ 1199.910600][T16567] ? memset+0x1f/0x40 [ 1199.914808][T16567] ? __hrtimer_init+0x181/0x260 [ 1199.919807][T16567] mac80211_hwsim_new_radio+0x22d9/0x4060 [ 1199.925613][T16567] hwsim_new_radio_nl+0xc54/0x1190 [ 1199.930782][T16567] ? hwsim_tx_info_frame_received_nl+0x10a0/0x10a0 [ 1199.937443][T16567] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 1199.943921][T16567] genl_rcv_msg+0xc1a/0xf70 [ 1199.948494][T16567] ? genl_bind+0x400/0x400 [ 1199.953198][T16567] ? read_lock_is_recursive+0x10/0x10 [ 1199.958839][T16567] ? ref_tracker_free+0x638/0x7d0 [ 1199.964380][T16567] ? hwsim_tx_info_frame_received_nl+0x10a0/0x10a0 [ 1199.971401][T16567] ? refcount_inc+0x80/0x80 [ 1199.976059][T16567] ? __kasan_kmalloc_large+0x92/0xd0 [ 1199.981513][T16567] netlink_rcv_skb+0x1cd/0x410 [ 1199.986390][T16567] ? genl_bind+0x400/0x400 [ 1199.990893][T16567] ? netlink_ack+0x1290/0x1290 [ 1199.995785][T16567] genl_rcv+0x24/0x40 [ 1199.999913][T16567] netlink_unicast+0x7d8/0x970 [ 1200.005801][T16567] ? netlink_detachskb+0x90/0x90 [ 1200.010872][T16567] ? find_vmap_area+0xf3/0x100 [ 1200.015995][T16567] ? __phys_addr_symbol+0x2b/0x70 [ 1200.021165][T16567] ? __check_object_size+0x4dd/0xa30 [ 1200.026761][T16567] ? bpf_lsm_netlink_send+0x5/0x10 [ 1200.031942][T16567] netlink_sendmsg+0xa26/0xd60 [ 1200.036808][T16567] ? netlink_getsockopt+0x580/0x580 [ 1200.042143][T16567] ? aa_sock_msg_perm+0x91/0x150 [ 1200.047166][T16567] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1200.052480][T16567] ? security_socket_sendmsg+0x7d/0xa0 [ 1200.058523][T16567] ? netlink_getsockopt+0x580/0x580 [ 1200.063965][T16567] ____sys_sendmsg+0x5a5/0x8f0 [ 1200.069404][T16567] ? __sys_sendmsg_sock+0x30/0x30 [ 1200.074508][T16567] __sys_sendmsg+0x2a9/0x390 [ 1200.079183][T16567] ? ____sys_sendmsg+0x8f0/0x8f0 [ 1200.084851][T16567] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1200.090889][T16567] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1200.096908][T16567] ? lockdep_hardirqs_on+0x94/0x130 [ 1200.102239][T16567] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1200.108277][T16567] do_syscall_64+0x3b/0xb0 [ 1200.112714][T16567] ? clear_bhb_loop+0x45/0xa0 [ 1200.117673][T16567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1200.123774][T16567] RIP: 0033:0x7fd8a1d8cde9 [ 1200.128212][T16567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1200.148295][T16567] RSP: 002b:00007fd8a2c84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1200.156917][T16567] RAX: ffffffffffffffda RBX: 00007fd8a1fa5fa0 RCX: 00007fd8a1d8cde9 [ 1200.164921][T16567] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1200.172939][T16567] RBP: 00007fd8a1e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1200.181042][T16567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1200.189033][T16567] R13: 0000000000000000 R14: 00007fd8a1fa5fa0 R15: 00007ffd6a6b6e18 [ 1200.197052][T16567] [ 1200.220442][T16571] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21598'. [ 1200.786997][T16600] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.21603'. [ 1200.894386][T16604] netlink: 132 bytes leftover after parsing attributes in process `syz.4.21605'. [ 1201.367981][T16631] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.21618'. [ 1201.410731][T16636] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.21620'. [ 1201.461403][T16638] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.21621'. [ 1202.067024][T16670] netlink: 128 bytes leftover after parsing attributes in process `syz.0.21648'. [ 1202.089679][T16673] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.21638'. [ 1202.105057][T16670] netlink: 3 bytes leftover after parsing attributes in process `syz.0.21648'. [ 1203.466044][T16709] validate_nla: 10 callbacks suppressed [ 1203.466066][T16709] netlink: 'syz.2.21655': attribute type 21 has an invalid length. [ 1203.483438][T16705] netlink: 'syz.1.21654': attribute type 2 has an invalid length. [ 1203.491870][T16709] netlink: 'syz.2.21655': attribute type 4 has an invalid length. [ 1203.513244][T16709] netlink: 'syz.2.21655': attribute type 3 has an invalid length. [ 1204.304484][T16750] netlink: 'syz.0.21677': attribute type 21 has an invalid length. [ 1204.993965][T16785] netlink: 'syz.2.21695': attribute type 21 has an invalid length. [ 1205.023860][T16785] __nla_validate_parse: 9 callbacks suppressed [ 1205.023883][T16785] netlink: 132 bytes leftover after parsing attributes in process `syz.2.21695'. [ 1205.053637][T16785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21695'. [ 1205.469929][T16805] netlink: 'syz.4.21704': attribute type 13 has an invalid length. [ 1205.485691][T16805] netlink: 152 bytes leftover after parsing attributes in process `syz.4.21704'. [ 1205.657098][T16805] erspan0: refused to change device tx_queue_len [ 1205.664495][T16805] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1206.555877][T16843] netlink: 'syz.3.21722': attribute type 29 has an invalid length. [ 1206.582961][T16843] netlink: 'syz.3.21722': attribute type 29 has an invalid length. [ 1206.608021][T16848] netlink: 'syz.3.21722': attribute type 29 has an invalid length. [ 1209.466005][T16986] netlink: 'syz.3.21780': attribute type 10 has an invalid length. [ 1210.295802][T17026] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1211.407385][T17068] netlink: 'syz.2.21817': attribute type 6 has an invalid length. [ 1211.575246][T17080] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21820'. [ 1211.600467][T17080] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21820'. [ 1211.628943][T17074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21820'. [ 1212.080751][T17102] netlink: 'syz.4.21834': attribute type 6 has an invalid length. [ 1212.290369][T17113] netlink: 'syz.2.21838': attribute type 21 has an invalid length. [ 1212.527322][T17126] netlink: 'syz.4.21844': attribute type 3 has an invalid length. [ 1212.547154][T17126] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.21844'. [ 1212.858049][T17139] netlink: 'syz.1.21847': attribute type 6 has an invalid length. [ 1213.056469][T17148] netlink: 'syz.4.21853': attribute type 21 has an invalid length. [ 1213.369372][T17161] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21858'. [ 1213.391580][T17161] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21858'. [ 1213.417280][T17157] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21858'. [ 1213.445804][T17165] netlink: 'syz.2.21859': attribute type 3 has an invalid length. [ 1213.457896][T17165] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.21859'. [ 1213.550253][T17169] netlink: 'syz.3.21862': attribute type 6 has an invalid length. [ 1213.768754][T17182] netlink: 'syz.3.21866': attribute type 21 has an invalid length. [ 1214.258366][T17201] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.21875'. [ 1215.025583][T17238] validate_nla: 1 callbacks suppressed [ 1215.025606][T17238] netlink: 'syz.3.21892': attribute type 3 has an invalid length. [ 1215.073637][T17238] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.21892'. [ 1215.836626][T17277] netlink: 'syz.1.21907': attribute type 3 has an invalid length. [ 1217.349364][T17345] __nla_validate_parse: 1 callbacks suppressed [ 1217.349382][T17345] netlink: 60 bytes leftover after parsing attributes in process `syz.4.21941'. [ 1217.367007][T17345] netlink: 60 bytes leftover after parsing attributes in process `syz.4.21941'. [ 1217.377878][T17340] netlink: 60 bytes leftover after parsing attributes in process `syz.4.21941'. [ 1218.882599][T17423] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21979'. [ 1218.911514][T17423] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21979'. [ 1218.965105][T17418] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21979'. [ 1219.366149][T17449] netlink: 'syz.1.21994': attribute type 3 has an invalid length. [ 1219.403858][T17449] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21994'. [ 1219.705640][T17464] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21999'. [ 1219.724760][T17464] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21999'. [ 1219.760333][T17462] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21999'. [ 1220.792589][T17496] netlink: 'syz.2.22016': attribute type 21 has an invalid length. [ 1220.868272][T17500] netlink: 'syz.4.22019': attribute type 3 has an invalid length. [ 1220.903602][T17500] netlink: 'syz.4.22019': attribute type 1 has an invalid length. [ 1220.968778][T17506] netlink: 'syz.2.22022': attribute type 29 has an invalid length. [ 1220.985524][T17506] netlink: 'syz.2.22022': attribute type 29 has an invalid length. [ 1221.028200][T17506] netlink: 'syz.2.22022': attribute type 29 has an invalid length. [ 1221.309241][T17525] netlink: 'syz.1.22033': attribute type 21 has an invalid length. [ 1221.561280][T17538] netlink: 'syz.3.22040': attribute type 29 has an invalid length. [ 1221.584938][T17538] netlink: 'syz.3.22040': attribute type 29 has an invalid length. [ 1221.615451][T17543] netlink: 'syz.3.22040': attribute type 29 has an invalid length. [ 1226.697713][T17786] netlink: 'syz.1.22158': attribute type 29 has an invalid length. [ 1226.724612][T17786] netlink: 'syz.1.22158': attribute type 29 has an invalid length. [ 1226.753884][T17789] netlink: 'syz.1.22158': attribute type 29 has an invalid length. [ 1228.422532][T17873] sock: sock_set_timeout: `syz.4.22201' (pid 17873) tries to set negative timeout [ 1231.741311][T18030] __nla_validate_parse: 4 callbacks suppressed [ 1231.741331][T18030] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.22276'. [ 1232.115557][T18046] netlink: 'syz.1.22283': attribute type 33 has an invalid length. [ 1232.139099][T18046] netlink: 164 bytes leftover after parsing attributes in process `syz.1.22283'. [ 1233.016492][T18086] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22301'. [ 1234.027808][T18121] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22316'. [ 1234.072110][T18123] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22317'. [ 1234.672031][T18153] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22329'. [ 1238.136429][T18288] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22393'. [ 1238.146498][T18288] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22393'. [ 1238.166083][T18288] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22393'. [ 1238.966319][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.972730][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.177332][T18305] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.22408'. [ 1239.499217][T18321] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.22409'. [ 1240.041705][T18340] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.22417'. [ 1240.960005][T18356] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.22424'. [ 1241.124235][T18367] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.22440'. [ 1241.375994][T18371] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.22431'. [ 1241.499841][T18378] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22433'. [ 1243.223388][T18415] __nla_validate_parse: 2 callbacks suppressed [ 1243.223411][T18415] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22450'. [ 1243.246768][T18415] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22450'. [ 1243.268233][T18415] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22450'. [ 1243.518509][T18432] netlink: 'syz.0.22455': attribute type 21 has an invalid length. [ 1243.854774][T18447] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22468'. [ 1243.903876][T18447] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22468'. [ 1243.925918][T18454] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22468'. [ 1244.730001][T18491] netlink: 'syz.3.22486': attribute type 17 has an invalid length. [ 1244.746711][T18491] netlink: 'syz.3.22486': attribute type 16 has an invalid length. [ 1244.766647][T18491] netlink: 152 bytes leftover after parsing attributes in process `syz.3.22486'. [ 1245.540565][T18532] netlink: 10 bytes leftover after parsing attributes in process `syz.4.22505'. [ 1245.801018][T18546] netlink: 10 bytes leftover after parsing attributes in process `syz.0.22521'. [ 1246.866496][T18573] netlink: 'syz.0.22532': attribute type 9 has an invalid length. [ 1246.883847][T18573] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.22532'. [ 1247.176669][T18591] netlink: 'syz.2.22533': attribute type 29 has an invalid length. [ 1247.291077][T18591] netlink: 'syz.2.22533': attribute type 29 has an invalid length. [ 1247.317241][T18595] netlink: 'syz.2.22533': attribute type 29 has an invalid length. [ 1247.596594][T18608] netlink: 'syz.4.22540': attribute type 10 has an invalid length. [ 1247.922621][T18625] netlink: 'syz.3.22549': attribute type 29 has an invalid length. [ 1247.943888][T18625] netlink: 'syz.3.22549': attribute type 29 has an invalid length. [ 1248.512103][T18646] __nla_validate_parse: 1 callbacks suppressed [ 1248.512124][T18646] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.22558'. [ 1248.897781][T18656] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22563'. [ 1249.173585][T18663] validate_nla: 5 callbacks suppressed [ 1249.173606][T18663] netlink: 'syz.1.22565': attribute type 29 has an invalid length. [ 1249.218718][T18663] netlink: 'syz.1.22565': attribute type 29 has an invalid length. [ 1249.254195][T18664] netlink: 'syz.1.22565': attribute type 29 has an invalid length. [ 1250.294215][T18711] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22598'. [ 1250.513912][T18721] netlink: 'syz.3.22593': attribute type 10 has an invalid length. [ 1250.990270][T18746] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22602'. [ 1251.881442][T18769] netlink: 'syz.3.22616': attribute type 3 has an invalid length. [ 1251.929743][T18769] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.22616'. [ 1252.694571][T18798] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.22633'. [ 1252.773702][T18798] netlink: zone id is out of range [ 1252.840797][T18798] netlink: del zone limit has 4 unknown bytes [ 1253.669545][T18815] netlink: 'syz.2.22637': attribute type 4 has an invalid length. [ 1253.703593][T18815] netlink: 'syz.2.22637': attribute type 1 has an invalid length. [ 1253.711483][T18815] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.22637'. [ 1253.912462][T18819] netlink: 'syz.4.22639': attribute type 29 has an invalid length. [ 1254.011573][T18819] netlink: 'syz.4.22639': attribute type 29 has an invalid length. [ 1254.042543][T18826] netlink: 'syz.4.22639': attribute type 29 has an invalid length. [ 1254.798234][T18846] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.22654'. [ 1254.908483][T18854] netlink: 'syz.2.22657': attribute type 3 has an invalid length. [ 1254.932423][T18854] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.22657'. [ 1255.480782][T18875] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.22667'. [ 1255.531070][T18875] netlink: zone id is out of range [ 1255.595640][T18875] netlink: del zone limit has 4 unknown bytes [ 1255.652802][T18881] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.22670'. [ 1256.506475][T18910] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.22684'. [ 1256.527038][T18910] netlink: zone id is out of range [ 1256.564081][T18910] netlink: del zone limit has 4 unknown bytes [ 1257.166923][T18941] netlink: 'syz.2.22696': attribute type 21 has an invalid length. [ 1257.238994][T18945] netlink: 'syz.1.22700': attribute type 29 has an invalid length. [ 1257.272350][T18945] netlink: 'syz.1.22700': attribute type 29 has an invalid length. [ 1257.289023][T18945] netlink: 'syz.1.22700': attribute type 29 has an invalid length. [ 1257.399698][T18952] netlink: 'syz.2.22714': attribute type 29 has an invalid length. [ 1257.409418][T18952] netlink: 'syz.2.22714': attribute type 29 has an invalid length. [ 1257.439193][T18952] netlink: 'syz.2.22714': attribute type 29 has an invalid length. [ 1257.496764][T18954] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.22702'. [ 1257.529914][T18954] netlink: zone id is out of range [ 1257.552509][T18954] netlink: del zone limit has 4 unknown bytes [ 1257.846558][T18974] netlink: 763 bytes leftover after parsing attributes in process `syz.2.22711'. [ 1257.967969][T18976] netlink: 'syz.0.22716': attribute type 29 has an invalid length. [ 1257.994011][T18976] netlink: 'syz.0.22716': attribute type 29 has an invalid length. [ 1258.758297][T19003] netlink: 763 bytes leftover after parsing attributes in process `syz.0.22727'. [ 1259.916294][T19044] validate_nla: 1 callbacks suppressed [ 1259.916317][T19044] netlink: 'syz.3.22746': attribute type 29 has an invalid length. [ 1259.969601][T19044] netlink: 'syz.3.22746': attribute type 29 has an invalid length. [ 1260.035524][T19046] netlink: 'syz.3.22746': attribute type 29 has an invalid length. [ 1264.209186][T19172] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22806'. [ 1264.644222][T19186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22811'. [ 1266.362529][T19239] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.22836'. [ 1266.395582][T19241] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22847'. [ 1267.330958][T19268] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.22852'. [ 1267.585377][T19272] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22853'. [ 1268.428369][T19285] netlink: 'syz.1.22859': attribute type 10 has an invalid length. [ 1268.457455][T19285] netlink: 'syz.1.22859': attribute type 10 has an invalid length. [ 1268.509268][T19288] netlink: 'syz.1.22859': attribute type 10 has an invalid length. [ 1269.641457][T19313] netlink: 10 bytes leftover after parsing attributes in process `syz.1.22872'. [ 1270.667336][T19331] netlink: 'syz.2.22881': attribute type 10 has an invalid length. [ 1270.711614][T19331] netlink: 'syz.2.22881': attribute type 10 has an invalid length. [ 1270.739097][T19337] netlink: 'syz.2.22881': attribute type 10 has an invalid length. [ 1276.786688][T19573] tap0: tun_chr_ioctl cmd 1074025677 [ 1276.792222][T19573] tap0: linktype set to 774 [ 1277.066847][T19590] netlink: 'syz.3.23011': attribute type 10 has an invalid length. [ 1277.085666][T19590] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.23011'. [ 1277.294216][T19603] netlink: 'syz.1.23018': attribute type 10 has an invalid length. [ 1277.310359][T19603] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.23018'. [ 1277.881848][T19634] netlink: 'syz.4.23023': attribute type 10 has an invalid length. [ 1277.913646][T19634] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.23023'. [ 1278.378559][T19647] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23030'. [ 1278.419937][T19647] netlink: 'syz.4.23030': attribute type 1 has an invalid length. [ 1278.453362][T19647] netlink: 1 bytes leftover after parsing attributes in process `syz.4.23030'. [ 1280.163832][T19687] tap0: tun_chr_ioctl cmd 1074025677 [ 1280.180486][T19687] tap0: linktype set to 821 [ 1280.450730][T19699] tap0: tun_chr_ioctl cmd 1074025677 [ 1280.469261][T19699] tap0: linktype set to 774 [ 1280.621962][T19706] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23055'. [ 1280.644579][T19706] netlink: 'syz.2.23055': attribute type 1 has an invalid length. [ 1280.652491][T19706] netlink: 1 bytes leftover after parsing attributes in process `syz.2.23055'. [ 1280.946133][T19722] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.23063'. [ 1281.269169][T19739] netlink: 40 bytes leftover after parsing attributes in process `syz.1.23072'. [ 1281.284218][T19739] netlink: 'syz.1.23072': attribute type 1 has an invalid length. [ 1281.301625][T19739] netlink: 1 bytes leftover after parsing attributes in process `syz.1.23072'. [ 1283.458384][T19786] __nla_validate_parse: 4 callbacks suppressed [ 1283.458415][T19786] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.23091'. [ 1283.647263][T19788] tap0: tun_chr_ioctl cmd 1074025677 [ 1283.653177][T19788] tap0: linktype set to 821 [ 1283.938482][T19804] tap0: tun_chr_ioctl cmd 1074025677 [ 1283.945555][T19804] tap0: linktype set to 821 [ 1285.157051][T19829] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.23108'. [ 1291.297952][T20029] netlink: 132 bytes leftover after parsing attributes in process `syz.0.23198'. [ 1291.466112][T20034] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.23210'. [ 1291.494753][T20034] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.23210'. [ 1291.516301][T20034] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.23210'. [ 1294.008328][T20124] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.23251'. [ 1294.031164][T20124] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.23251'. [ 1294.067281][T20124] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.23251'. [ 1294.217204][T20132] netlink: 132 bytes leftover after parsing attributes in process `syz.1.23242'. [ 1294.944289][T20161] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.23256'. [ 1294.985555][T20161] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.23256'. [ 1296.671430][T20230] tap0: tun_chr_ioctl cmd 1074025677 [ 1296.685294][T20230] tap0: linktype set to 773 [ 1297.422472][T20240] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1299.137287][T20292] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1299.399942][T20304] netlink: 'syz.3.23324': attribute type 2 has an invalid length. [ 1299.418232][T20304] __nla_validate_parse: 2 callbacks suppressed [ 1299.418255][T20304] netlink: 164 bytes leftover after parsing attributes in process `syz.3.23324'. [ 1300.102593][T20319] tap0: tun_chr_ioctl cmd 1074025677 [ 1300.110737][T20319] tap0: linktype set to 773 [ 1300.295918][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.302460][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.471774][T20337] netlink: 'syz.0.23338': attribute type 13 has an invalid length. [ 1300.480211][T20337] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.23338'. [ 1304.886857][T20508] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.23417'. [ 1306.076595][T20544] netlink: 'syz.3.23443': attribute type 27 has an invalid length. [ 1306.085110][T20544] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.23443'. [ 1306.455463][T20552] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.23437'. [ 1306.475347][T20552] netlink: zone id is out of range [ 1306.660579][T20562] netlink: 'syz.3.23440': attribute type 4 has an invalid length. [ 1306.683569][T20562] netlink: 152 bytes leftover after parsing attributes in process `syz.3.23440'. [ 1306.714290][T20562] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1306.862489][T20573] netlink: 'syz.1.23446': attribute type 27 has an invalid length. [ 1306.894747][T20573] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.23446'. [ 1307.003815][T20581] ip6erspan0: tun_chr_ioctl cmd 2148553947 [ 1307.817852][T20600] netlink: 'syz.1.23459': attribute type 29 has an invalid length. [ 1307.836458][T20600] netlink: 'syz.1.23459': attribute type 29 has an invalid length. [ 1307.857904][T20600] netlink: 'syz.1.23459': attribute type 29 has an invalid length. [ 1307.877680][T20600] netlink: 'syz.1.23459': attribute type 29 has an invalid length. [ 1311.555277][T20708] netlink: 'syz.3.23504': attribute type 29 has an invalid length. [ 1311.566580][T20708] netlink: 'syz.3.23504': attribute type 29 has an invalid length. [ 1311.578789][T20708] netlink: 'syz.3.23504': attribute type 29 has an invalid length. [ 1311.590731][T20708] netlink: 'syz.3.23504': attribute type 29 has an invalid length. [ 1311.710352][T20711] ip6erspan0: tun_chr_ioctl cmd 2148553947 [ 1313.086472][T20746] ip6erspan0: tun_chr_ioctl cmd 2148553947 [ 1314.790824][T20793] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.23538'. [ 1314.816234][T20793] netlink: zone id is out of range [ 1315.976793][T20828] netlink: 'syz.2.23550': attribute type 33 has an invalid length. [ 1315.995339][T20828] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23550'. [ 1320.272685][T20956] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.23611'. [ 1320.292492][T20956] netlink: zone id is out of range [ 1320.368861][T20960] netlink: 'syz.1.23615': attribute type 16 has an invalid length. [ 1320.413593][T20960] netlink: 48 bytes leftover after parsing attributes in process `syz.1.23615'. [ 1321.277119][T20997] netlink: 'syz.2.23633': attribute type 46 has an invalid length. [ 1321.315914][T20997] netlink: 44 bytes leftover after parsing attributes in process `syz.2.23633'. [ 1322.282533][T21027] netlink: 'syz.4.23647': attribute type 16 has an invalid length. [ 1322.311726][T21027] netlink: 48 bytes leftover after parsing attributes in process `syz.4.23647'. [ 1322.482389][T21033] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.23649'. [ 1322.508797][T21033] netlink: zone id is out of range [ 1322.731305][T21049] netlink: 'syz.0.23669': attribute type 46 has an invalid length. [ 1322.746511][T21049] netlink: 44 bytes leftover after parsing attributes in process `syz.0.23669'. [ 1323.050316][T21064] netlink: 'syz.3.23664': attribute type 16 has an invalid length. [ 1323.063227][T21064] netlink: 48 bytes leftover after parsing attributes in process `syz.3.23664'. [ 1323.359940][T21080] netlink: 'syz.4.23672': attribute type 46 has an invalid length. [ 1323.380291][T21080] netlink: 44 bytes leftover after parsing attributes in process `syz.4.23672'. [ 1323.409117][T21076] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.23670'. [ 1323.426467][T21076] netlink: zone id is out of range [ 1327.575337][T21243] netlink: 'syz.1.23743': attribute type 17 has an invalid length. [ 1327.711853][T21240] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.23755'. [ 1327.725270][T21240] netlink: zone id is out of range [ 1331.381889][T21349] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.23792'. [ 1332.568681][T21383] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.23804'. [ 1333.352722][T21422] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.23822'. [ 1335.338227][T21502] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23856'. [ 1335.363110][T21502] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23856'. [ 1335.374978][T21499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23856'. [ 1335.452148][T21502] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23856'. [ 1335.626569][T21513] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.23863'. [ 1336.409777][T21539] netlink: 'syz.1.23872': attribute type 3 has an invalid length. [ 1336.438612][T21539] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.23872'. [ 1336.633972][T21547] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.23877'. [ 1337.649762][T21585] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.23894'. [ 1338.262776][T21602] netlink: 'syz.4.23899': attribute type 3 has an invalid length. [ 1338.272620][T21602] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.23899'. [ 1338.571114][T21620] netlink: 188 bytes leftover after parsing attributes in process `syz.3.23910'. [ 1338.706141][T21622] netlink: 'syz.4.23913': attribute type 10 has an invalid length. [ 1338.803234][T21630] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.23915'. [ 1338.959821][T21636] netlink: 'syz.0.23918': attribute type 3 has an invalid length. [ 1338.983580][T21636] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.23918'. [ 1339.486781][T21663] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.23931'. [ 1340.091128][T21693] netlink: 188 bytes leftover after parsing attributes in process `syz.2.23945'. [ 1340.281890][T21700] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.23947'. [ 1340.686808][T21726] netlink: 188 bytes leftover after parsing attributes in process `syz.0.23961'. [ 1340.925950][T21737] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.23965'. [ 1341.397493][T21761] IPv6: Can't replace route, no match found [ 1341.588913][T21769] netlink: 188 bytes leftover after parsing attributes in process `syz.1.23990'. [ 1342.403923][T21806] netlink: 188 bytes leftover after parsing attributes in process `syz.4.23996'. [ 1343.746071][T21858] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.24020'. [ 1344.187137][T21868] IPv6: Can't replace route, no match found [ 1344.336838][T21873] netlink: 'syz.4.24025': attribute type 29 has an invalid length. [ 1344.361279][T21873] netlink: 44 bytes leftover after parsing attributes in process `syz.4.24025'. [ 1344.382357][T21873] netlink: 'syz.4.24025': attribute type 29 has an invalid length. [ 1344.393673][T21873] netlink: 44 bytes leftover after parsing attributes in process `syz.4.24025'. [ 1344.746849][T21882] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24030'. [ 1345.184438][T21898] netlink: 144 bytes leftover after parsing attributes in process `syz.2.24039'. [ 1345.742126][T21922] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.24051'. [ 1345.893247][T21927] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24063'. [ 1346.678001][T21965] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24068'. [ 1346.751016][T21967] netlink: 144 bytes leftover after parsing attributes in process `syz.1.24069'. [ 1346.925489][T21975] netlink: 'syz.1.24073': attribute type 29 has an invalid length. [ 1346.936202][T21975] netlink: 44 bytes leftover after parsing attributes in process `syz.1.24073'. [ 1346.949387][T21975] netlink: 'syz.1.24073': attribute type 29 has an invalid length. [ 1347.731048][T22014] tap0: tun_chr_ioctl cmd 35590 [ 1349.118714][T22075] __nla_validate_parse: 3 callbacks suppressed [ 1349.118737][T22075] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.24117'. [ 1350.518575][T22132] netlink: 148 bytes leftover after parsing attributes in process `syz.1.24144'. [ 1350.810410][T22146] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.24149'. [ 1351.747644][T22195] netlink: 148 bytes leftover after parsing attributes in process `syz.2.24173'. [ 1352.273603][T22227] netlink: 148 bytes leftover after parsing attributes in process `syz.0.24187'. [ 1354.370852][ T4398] cgroup: fork rejected by pids controller in /syz3 [ 1355.019018][T22350] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1355.032366][T22350] syzkaller0: linktype set to 270 [ 1355.210869][T22358] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1355.223904][T22358] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1355.232187][T22358] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1355.242270][T22358] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1355.250965][T22358] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1355.259490][T22358] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1355.749133][T22357] chnl_net:caif_netlink_parms(): no params data found [ 1356.010564][T22357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.051551][T22357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.068881][T22357] device bridge_slave_0 entered promiscuous mode [ 1356.079425][T22357] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.087475][T22357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.096096][T22357] device bridge_slave_1 entered promiscuous mode [ 1356.153126][T22357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.186303][T22357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1356.266960][T22357] team0: Port device team_slave_0 added [ 1356.306034][T22357] team0: Port device team_slave_1 added [ 1356.353835][T22357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1356.371462][T22357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1356.420029][T22357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1356.444593][T22357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1356.451588][T22357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1356.511528][T22357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1356.610840][T22357] device hsr_slave_0 entered promiscuous mode [ 1356.623943][T22357] device hsr_slave_1 entered promiscuous mode [ 1356.774885][ T4393] cgroup: fork rejected by pids controller in /syz2 [ 1356.881417][T30499] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.971724][T30499] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.069876][T30499] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.148081][T30499] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.283292][T22435] tun0: tun_chr_ioctl cmd 1074025681 [ 1357.295080][T22439] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.24282'. [ 1357.334820][ T4322] Bluetooth: hci4: command 0x0409 tx timeout [ 1357.467779][T30499] device 0 left promiscuous mode [ 1357.959203][T22358] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1357.970792][T22358] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1357.982041][T22358] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1357.991423][T22358] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1357.999240][T22358] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1358.007295][T22358] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1358.616553][T22357] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1358.683046][T22357] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1358.707972][T22460] chnl_net:caif_netlink_parms(): no params data found [ 1358.740015][T22357] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1358.767858][T22357] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1358.841529][T22460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.849049][T22460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.858527][T22460] device bridge_slave_0 entered promiscuous mode [ 1358.867440][T22460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.874695][T22460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.882789][T22460] device bridge_slave_1 entered promiscuous mode [ 1358.938458][T22460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.958175][T22460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1359.051230][T22357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1359.071240][T22460] team0: Port device team_slave_0 added [ 1359.115110][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1359.124926][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1359.134630][T22460] team0: Port device team_slave_1 added [ 1359.145021][T22357] 8021q: adding VLAN 0 to HW filter on device team0 [ 1359.211039][T22460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1359.218133][T22460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1359.244804][T22460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1359.264427][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1359.278125][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1359.287048][T30490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.294228][T30490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1359.307514][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1359.324873][T22460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1359.331866][T22460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1359.365648][T22460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.381196][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1359.391079][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1359.403598][T30488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.410870][T30488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1359.413739][ T4322] Bluetooth: hci4: command 0x041b tx timeout [ 1359.507253][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1359.553731][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1359.563035][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1359.577071][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1359.586519][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1359.596258][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1359.606035][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1359.614887][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1359.623343][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1359.635599][T22460] device hsr_slave_0 entered promiscuous mode [ 1359.642842][T22460] device hsr_slave_1 entered promiscuous mode [ 1359.649753][T22460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1359.658089][T22460] Cannot create hsr debugfs directory [ 1359.669278][T22357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1359.680719][T22357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1359.708354][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1359.718097][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1359.975491][T30499] device geneve1 left promiscuous mode [ 1359.983582][T30499] team0 (unregistering): Port device geneve1 removed [ 1360.058241][ T4322] Bluetooth: hci2: command 0x0409 tx timeout [ 1360.171076][T30499] device team_slave_1 left promiscuous mode [ 1360.179944][T30499] team0 (unregistering): Port device team_slave_1 removed [ 1360.447228][T30499] device dummy0 left promiscuous mode [ 1360.453736][T30499] team0 (unregistering): Port device dummy0 removed [ 1360.630617][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1360.642893][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1360.665527][T22357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1360.701025][T22460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.729641][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1360.739797][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1360.769239][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1360.777932][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1360.788013][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1360.796986][T30490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1360.821883][T22460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.838917][T22357] device veth0_vlan entered promiscuous mode [ 1360.858998][T22357] device veth1_vlan entered promiscuous mode [ 1360.891307][T22460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.914323][T30461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1360.922911][T30461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1360.932780][T30461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1360.942565][T30461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1360.952580][T22357] device veth0_macvtap entered promiscuous mode [ 1360.965993][T22357] device veth1_macvtap entered promiscuous mode [ 1360.989842][T22460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.012166][T22357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1361.022389][T21605] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1361.031974][T21605] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1361.040916][T21605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1361.050271][T21605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1361.061257][T22357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1361.072685][T22357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.085451][T22357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1361.098247][T21605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1361.107522][T21605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1361.118767][T22357] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.129398][T22357] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.138227][T22357] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.147676][T22357] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.161865][T30499] device 0 left promiscuous mode [ 1361.340719][T30461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1361.343316][T22460] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1361.356110][T30461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1361.383187][T30461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1361.391404][T22460] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1361.402065][T22460] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1361.413140][T22460] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1361.413377][T30488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1361.430879][T30488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1361.459018][T30461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1361.494174][ T4322] Bluetooth: hci4: command 0x040f tx timeout [ 1361.579075][T22460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.599431][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1361.609865][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1361.627182][T22460] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.663221][T22510] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.24294'. [ 1361.736205][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.742615][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.902059][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1361.920310][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1361.957998][T30488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.965273][T30488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.989571][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1362.021717][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1362.040367][T30488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.047626][T30488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1362.072252][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1362.103331][T22525] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.24297'. [ 1362.134139][ T4322] Bluetooth: hci2: command 0x041b tx timeout [ 1362.144519][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1362.157084][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1362.200473][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1362.251608][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1362.354811][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1362.366693][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1362.395791][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1362.428787][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1362.451070][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1362.480381][T22460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1362.527493][T22460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1362.628229][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1362.658864][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1362.694715][T22532] Â: renamed from pim6reg1 [ 1362.988315][T22550] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.24310'. [ 1363.368753][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1363.380581][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1363.439271][T22565] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.24315'. [ 1363.444425][T22460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1363.574070][ T4322] Bluetooth: hci4: command 0x0419 tx timeout [ 1363.873030][T30499] device geneve1 left promiscuous mode [ 1363.883042][T30499] team0 (unregistering): Port device geneve1 removed [ 1364.190708][T30499] device team_slave_1 left promiscuous mode [ 1364.209431][T30499] team0 (unregistering): Port device team_slave_1 removed [ 1364.223714][ T4322] Bluetooth: hci2: command 0x040f tx timeout [ 1364.401634][T22586] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.24323'. [ 1364.985191][T30461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1365.000735][T30461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1365.027297][T30461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1365.039483][T30461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1365.085425][T30461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1365.102167][T30461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1365.115031][T22460] device veth0_vlan entered promiscuous mode [ 1365.152776][T22460] device veth1_vlan entered promiscuous mode [ 1365.218448][T30476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1365.227688][T30476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1365.239589][T30476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1365.266206][T30476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1365.285741][T22460] device veth0_macvtap entered promiscuous mode [ 1365.320226][T22460] device veth1_macvtap entered promiscuous mode [ 1365.376246][T22460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.397350][T22460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.440711][T22460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1365.453764][T30476] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1365.464484][T30476] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1365.491898][T30476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1365.512322][T30476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1365.535205][T22460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.558345][T22460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.583619][T22460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.613649][T22460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.648732][T22460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1365.677985][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1365.694383][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1365.730471][T22460] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.750469][T22460] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.771735][T22460] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.784147][T22460] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.997970][T30476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.019343][T30476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.070943][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1366.090298][T22621] Â: renamed from pim6reg1 [ 1366.126130][T30476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.142320][T30476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.161185][T30488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1366.294408][ T4322] Bluetooth: hci2: command 0x0419 tx timeout [ 1366.641411][T22644] netlink: 'syz.0.24346': attribute type 2 has an invalid length. [ 1366.657336][T22644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24346'. [ 1367.608432][T22678] netlink: 'syz.1.24360': attribute type 21 has an invalid length. [ 1367.622184][T22678] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.24360'. [ 1367.851282][T22690] netlink: 156 bytes leftover after parsing attributes in process `syz.0.24366'. [ 1368.162583][T22702] netlink: 156 bytes leftover after parsing attributes in process `syz.1.24378'. [ 1368.719634][T22725] tap0: tun_chr_ioctl cmd 1074025677 [ 1368.740574][T22725] tap0: linktype set to 768 [ 1368.861982][T22736] netlink: 'syz.4.24384': attribute type 2 has an invalid length. [ 1368.887662][T22736] netlink: 132 bytes leftover after parsing attributes in process `syz.4.24384'. [ 1369.037264][T22743] netlink: 156 bytes leftover after parsing attributes in process `syz.4.24389'. [ 1369.179980][T22750] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.24401'. [ 1369.702096][T22773] netlink: 'syz.2.24410': attribute type 21 has an invalid length. [ 1369.731667][T22773] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.24410'. [ 1369.813715][T22775] tap0: tun_chr_ioctl cmd 1074025677 [ 1369.833666][T22775] tap0: linktype set to 768 [ 1370.471247][T22806] netlink: 'syz.0.24415': attribute type 21 has an invalid length. [ 1370.537122][T22806] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.24415'. [ 1370.774777][T22821] tap0: tun_chr_ioctl cmd 1074025677 [ 1370.780506][T22821] tap0: linktype set to 768 [ 1371.190707][T22837] syz.4.24427[22837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1371.190861][T22837] syz.4.24427[22837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1372.899488][T22904] netlink: 'syz.0.24466': attribute type 3 has an invalid length. [ 1372.953803][T22904] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.24466'. [ 1374.347248][T22952] netlink: 'syz.3.24478': attribute type 3 has an invalid length. [ 1374.374218][T22952] netlink: 9814 bytes leftover after parsing attributes in process `syz.3.24478'. [ 1374.555171][T22958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24481'. [ 1374.590477][T22958] netlink: 'syz.2.24481': attribute type 3 has an invalid length. [ 1374.621798][T22958] netlink: 1 bytes leftover after parsing attributes in process `syz.2.24481'. [ 1375.241247][T22996] netlink: 40 bytes leftover after parsing attributes in process `syz.3.24500'. [ 1375.251922][T22996] netlink: 'syz.3.24500': attribute type 3 has an invalid length. [ 1375.293378][T22996] netlink: 1 bytes leftover after parsing attributes in process `syz.3.24500'. [ 1375.888115][T23028] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24517'. [ 1375.930953][T23028] netlink: 'syz.4.24517': attribute type 3 has an invalid length. [ 1375.958912][T23028] netlink: 1 bytes leftover after parsing attributes in process `syz.4.24517'. [ 1376.140372][T23039] tap0: tun_chr_ioctl cmd 2147767519 [ 1376.760306][T23072] netlink: 'syz.3.24537': attribute type 33 has an invalid length. [ 1376.778982][T23072] netlink: 152 bytes leftover after parsing attributes in process `syz.3.24537'. [ 1376.805674][T23072] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1377.413377][T23108] netlink: 'syz.2.24554': attribute type 21 has an invalid length. [ 1377.430653][T23110] netlink: 'syz.0.24555': attribute type 29 has an invalid length. [ 1377.433611][T23108] netlink: 152 bytes leftover after parsing attributes in process `syz.2.24554'. [ 1377.467683][T23110] netlink: 'syz.0.24555': attribute type 29 has an invalid length. [ 1378.237908][T23136] tap0: tun_chr_ioctl cmd 2147767519 [ 1379.061726][T23167] netlink: 'syz.3.24582': attribute type 21 has an invalid length. [ 1379.102958][T23167] netlink: 152 bytes leftover after parsing attributes in process `syz.3.24582'. [ 1379.310500][T23175] tun0: tun_chr_ioctl cmd 1074025672 [ 1379.341356][T23175] tun0: ignored: set checksum enabled [ 1380.803929][T23217] tap0: tun_chr_ioctl cmd 2147767517 [ 1381.763561][T23255] tap0: tun_chr_ioctl cmd 2147767517 [ 1381.945112][T23257] netlink: 'syz.0.24622': attribute type 21 has an invalid length. [ 1381.960649][T23257] netlink: 'syz.0.24622': attribute type 1 has an invalid length. [ 1382.004960][T23257] netlink: 16050 bytes leftover after parsing attributes in process `syz.0.24622'. [ 1382.227050][T23263] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24626'. [ 1382.257635][T23263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24626'. [ 1382.291066][T23263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24626'. [ 1382.343974][T23263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24626'. [ 1383.535091][T23305] netlink: 'syz.1.24644': attribute type 21 has an invalid length. [ 1383.543075][T23305] netlink: 'syz.1.24644': attribute type 1 has an invalid length. [ 1383.602109][T23305] netlink: 16050 bytes leftover after parsing attributes in process `syz.1.24644'. [ 1383.647968][T23313] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.24649'. [ 1384.389667][T23347] netpci0: tun_chr_ioctl cmd 1074025694 [ 1385.546697][T23397] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.24689'. [ 1386.417734][T23412] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1386.445549][T23412] syzkaller0: linktype set to 512 [ 1386.676963][T23422] netpci0: tun_chr_ioctl cmd 1074025694 [ 1386.872961][T23430] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.24705'. [ 1387.253864][T23452] netpci0: tun_chr_ioctl cmd 1074025694 [ 1388.114504][T23492] netpci0: tun_chr_ioctl cmd 1074025694 [ 1389.261098][T23536] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1389.289594][T23536] syzkaller0: linktype set to 512 [ 1391.110464][T23600] netlink: 'syz.0.24784': attribute type 21 has an invalid length. [ 1391.690436][T23607] netlink: 'syz.3.24788': attribute type 10 has an invalid length. [ 1391.705274][T23607] netlink: 152 bytes leftover after parsing attributes in process `syz.3.24788'. [ 1391.719800][T23607] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1391.811751][T23612] netlink: 'syz.2.24794': attribute type 33 has an invalid length. [ 1391.821396][T23612] netlink: 'syz.2.24794': attribute type 10 has an invalid length. [ 1391.829494][T23612] netlink: 108 bytes leftover after parsing attributes in process `syz.2.24794'. [ 1391.855310][T23612] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1391.880379][T23615] delete_channel: no stack [ 1391.898786][T23615] delete_channel: no stack [ 1392.300177][T23635] netlink: 'syz.4.24803': attribute type 27 has an invalid length. [ 1392.323798][T23635] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.24803'. [ 1392.407619][T23638] netlink: 'syz.3.24805': attribute type 10 has an invalid length. [ 1392.426957][T23638] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.24805'. [ 1392.861816][T23661] netlink: 'syz.0.24815': attribute type 46 has an invalid length. [ 1392.878564][T23661] netlink: 212868 bytes leftover after parsing attributes in process `syz.0.24815'. [ 1393.010178][T23669] netlink: 'syz.1.24819': attribute type 27 has an invalid length. [ 1393.022068][T23669] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.24819'. [ 1393.046935][T23671] netlink: 'syz.0.24820': attribute type 10 has an invalid length. [ 1393.078422][T23671] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.24820'. [ 1393.876740][T23704] netlink: 'syz.4.24834': attribute type 46 has an invalid length. [ 1393.913686][T23704] netlink: 212868 bytes leftover after parsing attributes in process `syz.4.24834'. [ 1393.926977][T23706] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.24836'. [ 1393.962195][T23708] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.24837'. [ 1394.124485][T23716] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1395.561316][T23772] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1397.692672][T23846] __nla_validate_parse: 5 callbacks suppressed [ 1397.692694][T23846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24901'. [ 1397.727460][T23846] netlink: 152 bytes leftover after parsing attributes in process `syz.2.24901'. [ 1398.392682][T23879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24917'. [ 1398.420570][T23879] netlink: 152 bytes leftover after parsing attributes in process `syz.0.24917'. [ 1401.302032][T23971] netlink: 40 bytes leftover after parsing attributes in process `syz.1.24960'. [ 1401.326888][T23971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24960'. [ 1402.382200][T24003] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24977'. [ 1402.394989][T24003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24977'. [ 1402.951909][T24029] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24989'. [ 1402.972934][T24029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24989'. [ 1402.996080][T24031] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 1403.379489][T24047] validate_nla: 6 callbacks suppressed [ 1403.379510][T24047] netlink: 'syz.2.24997': attribute type 29 has an invalid length. [ 1403.433819][T24047] netlink: 'syz.2.24997': attribute type 29 has an invalid length. [ 1403.463192][T24049] netlink: 'syz.2.24997': attribute type 29 has an invalid length. [ 1403.482193][T24047] netlink: 'syz.2.24997': attribute type 29 has an invalid length. [ 1403.781861][T24066] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 1404.688588][T24100] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 1404.868262][T24104] netlink: 48 bytes leftover after parsing attributes in process `syz.4.25020'. [ 1405.241906][T24118] netlink: 'syz.3.25029': attribute type 29 has an invalid length. [ 1405.255886][T24118] netlink: 'syz.3.25029': attribute type 29 has an invalid length. [ 1405.276278][T24118] netlink: 'syz.3.25029': attribute type 29 has an invalid length. [ 1405.328384][T24125] netlink: 'syz.3.25029': attribute type 29 has an invalid length. [ 1405.691507][T24138] netlink: 'syz.4.25035': attribute type 3 has an invalid length. [ 1405.709159][T24138] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.25035'. [ 1406.208915][T24155] netlink: 'syz.1.25044': attribute type 29 has an invalid length. [ 1406.850090][T24184] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.25058'. [ 1407.344693][T24207] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.25065'. [ 1407.374443][T24209] tun0: tun_chr_ioctl cmd 2147767507 [ 1407.529986][T24217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25071'. [ 1408.111597][T24247] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.25086'. [ 1409.159809][T24274] validate_nla: 6 callbacks suppressed [ 1409.159827][T24274] netlink: 'syz.2.25099': attribute type 3 has an invalid length. [ 1409.194953][T24276] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.25100'. [ 1409.205481][T24274] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.25099'. [ 1411.154166][T24339] netlink: 'syz.0.25130': attribute type 49 has an invalid length. [ 1411.185370][T24339] netlink: 'syz.0.25130': attribute type 49 has an invalid length. [ 1411.925227][T24367] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.25143'. [ 1411.963091][T24367] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1412.319320][T24390] delete_channel: no stack [ 1412.711726][T24404] netlink: 'syz.4.25159': attribute type 29 has an invalid length. [ 1412.727529][T24404] netlink: 'syz.4.25159': attribute type 29 has an invalid length. [ 1412.742588][T24404] netlink: 'syz.4.25159': attribute type 29 has an invalid length. [ 1412.755449][T24404] netlink: 'syz.4.25159': attribute type 29 has an invalid length. [ 1413.290431][T24424] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.25169'. [ 1413.493071][T24435] netlink: 60 bytes leftover after parsing attributes in process `syz.4.25173'. [ 1413.513259][T24435] netlink: 60 bytes leftover after parsing attributes in process `syz.4.25173'. [ 1413.533945][T24431] netlink: 60 bytes leftover after parsing attributes in process `syz.4.25173'. [ 1413.555856][T24436] netlink: 60 bytes leftover after parsing attributes in process `syz.4.25173'. [ 1413.875277][T24456] netlink: 14513 bytes leftover after parsing attributes in process `syz.4.25184'. [ 1415.098486][T24499] syz.2.25202[24499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1415.098725][T24499] syz.2.25202[24499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1415.496049][T24519] tap0: tun_chr_ioctl cmd 1074025677 [ 1415.522787][T24519] tap0: linktype set to 0 [ 1415.757670][T24535] netlink: 4031 bytes leftover after parsing attributes in process `syz.4.25217'. [ 1416.013965][T24544] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1416.020001][T24544] syzkaller0: linktype set to 779 [ 1416.332699][T24557] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.25225'. [ 1416.356167][T24557] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.25225'. [ 1416.396216][T24552] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.25225'. [ 1418.462549][T24626] __nla_validate_parse: 1 callbacks suppressed [ 1418.462568][T24626] netlink: 132 bytes leftover after parsing attributes in process `syz.3.25260'. [ 1418.967015][T24647] netlink: 'syz.4.25266': attribute type 29 has an invalid length. [ 1418.986886][T24647] netlink: 'syz.4.25266': attribute type 29 has an invalid length. [ 1419.007678][T24647] netlink: 'syz.4.25266': attribute type 29 has an invalid length. [ 1419.017546][T24647] netlink: 'syz.4.25266': attribute type 29 has an invalid length. [ 1419.050942][T24651] netlink: 152 bytes leftover after parsing attributes in process `syz.3.25268'. [ 1419.738187][T24673] ================================================================== [ 1419.746319][T24673] BUG: KASAN: use-after-free in cpu_map_enqueue+0xb6/0x370 [ 1419.753645][T24673] Read of size 8 at addr ffff8880547e0a08 by task syz.2.25280/24673 [ 1419.762264][T24673] [ 1419.764698][T24673] CPU: 1 PID: 24673 Comm: syz.2.25280 Not tainted 6.1.128-syzkaller #0 [ 1419.773155][T24673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1419.783284][T24673] Call Trace: [ 1419.786595][T24673] [ 1419.789554][T24673] dump_stack_lvl+0x1e3/0x2cb [ 1419.794271][T24673] ? nf_tcp_handle_invalid+0x642/0x642 [ 1419.799761][T24673] ? panic+0x764/0x764 [ 1419.803862][T24673] ? _printk+0xd1/0x111 [ 1419.808051][T24673] ? __virt_addr_valid+0x17f/0x530 [ 1419.813191][T24673] ? __virt_addr_valid+0x17f/0x530 [ 1419.818335][T24673] print_report+0x15f/0x4f0 [ 1419.822869][T24673] ? __virt_addr_valid+0x17f/0x530 [ 1419.828019][T24673] ? __virt_addr_valid+0x17f/0x530 [ 1419.833166][T24673] ? __virt_addr_valid+0x45b/0x530 [ 1419.838312][T24673] ? __phys_addr+0xb6/0x170 [ 1419.842848][T24673] ? cpu_map_enqueue+0xb6/0x370 [ 1419.847907][T24673] kasan_report+0x136/0x160 [ 1419.852495][T24673] ? cpu_map_enqueue+0xb6/0x370 [ 1419.857388][T24673] cpu_map_enqueue+0xb6/0x370 [ 1419.862273][T24673] xdp_do_redirect_frame+0x2f0/0x660 [ 1419.867601][T24673] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 1419.873018][T24673] ? __mutex_unlock_slowpath+0x218/0x750 [ 1419.878897][T24673] ? 0xffffffffa00038c0 [ 1419.883187][T24673] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 1419.888947][T24673] ? xdp_convert_md_to_buff+0x330/0x330 [ 1419.894529][T24673] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 1419.900572][T24673] ? 0xffffffffa00038c0 [ 1419.904812][T24673] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1419.911093][T24673] ? __might_fault+0xbd/0x110 [ 1419.915803][T24673] ? _copy_from_user+0x109/0x170 [ 1419.920782][T24673] ? bpf_test_init+0x15a/0x180 [ 1419.925579][T24673] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1419.931072][T24673] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 1419.936493][T24673] ? dev_put+0x80/0x80 [ 1419.940600][T24673] ? dev_put+0x80/0x80 [ 1419.944708][T24673] bpf_prog_test_run+0x32f/0x3a0 [ 1419.949692][T24673] __sys_bpf+0x3eb/0x6c0 [ 1419.953969][T24673] ? bpf_link_show_fdinfo+0x300/0x300 [ 1419.959496][T24673] ? ct_irq_exit_irqson+0x13c/0x1b0 [ 1419.962872][T24676] netlink: 'syz.0.25283': attribute type 13 has an invalid length. [ 1419.964720][T24673] ? syscall_enter_from_user_mode+0x37/0x230 [ 1419.964755][T24673] __x64_sys_bpf+0x78/0x90 [ 1419.964788][T24673] do_syscall_64+0x3b/0xb0 [ 1419.964807][T24673] ? clear_bhb_loop+0x45/0xa0 [ 1419.975960][T24676] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.25283'. [ 1419.979263][T24673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1420.008444][T24673] RIP: 0033:0x7f2c8298cde9 [ 1420.012896][T24673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1420.033159][T24673] RSP: 002b:00007f2c827ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1420.041894][T24673] RAX: ffffffffffffffda RBX: 00007f2c82ba5fa0 RCX: 00007f2c8298cde9 [ 1420.049907][T24673] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 1420.058000][T24673] RBP: 00007f2c82a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1420.066075][T24673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1420.074101][T24673] R13: 0000000000000000 R14: 00007f2c82ba5fa0 R15: 00007fff2e0c5a78 [ 1420.082459][T24673] [ 1420.085501][T24673] [ 1420.087840][T24673] Allocated by task 24237: [ 1420.092351][T24673] kasan_set_track+0x4b/0x70 [ 1420.096957][T24673] __kasan_kmalloc+0x97/0xb0 [ 1420.102459][T24673] __kmalloc_node+0xb3/0x230 [ 1420.107125][T24673] bpf_map_kmalloc_node+0xce/0x1c0 [ 1420.112263][T24673] cpu_map_update_elem+0x277/0xf60 [ 1420.117390][T24673] map_update_elem+0x503/0x680 [ 1420.122271][T24673] __sys_bpf+0x337/0x6c0 [ 1420.126540][T24673] __x64_sys_bpf+0x78/0x90 [ 1420.130975][T24673] do_syscall_64+0x3b/0xb0 [ 1420.135483][T24673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1420.141592][T24673] [ 1420.143918][T24673] Freed by task 24239: [ 1420.148101][T24673] kasan_set_track+0x4b/0x70 [ 1420.152738][T24673] kasan_save_free_info+0x27/0x40 [ 1420.157814][T24673] ____kasan_slab_free+0xd6/0x120 [ 1420.162847][T24673] __kmem_cache_free+0x25c/0x3c0 [ 1420.167795][T24673] put_cpu_map_entry+0x6eb/0x760 [ 1420.172743][T24673] cpu_map_kthread_run+0x2887/0x2940 [ 1420.178045][T24673] kthread+0x28d/0x320 [ 1420.182112][T24673] ret_from_fork+0x1f/0x30 [ 1420.186537][T24673] [ 1420.188867][T24673] Last potentially related work creation: [ 1420.194588][T24673] kasan_save_stack+0x3b/0x60 [ 1420.199412][T24673] __kasan_record_aux_stack+0xb0/0xc0 [ 1420.204811][T24673] insert_work+0x54/0x3d0 [ 1420.209150][T24673] __queue_work+0xb4b/0xf90 [ 1420.213663][T24673] queue_work_on+0x14b/0x250 [ 1420.218263][T24673] cpu_map_free+0xd7/0x1b0 [ 1420.222683][T24673] process_one_work+0x8a9/0x11d0 [ 1420.227625][T24673] worker_thread+0xa47/0x1200 [ 1420.232527][T24673] kthread+0x28d/0x320 [ 1420.236611][T24673] ret_from_fork+0x1f/0x30 [ 1420.241041][T24673] [ 1420.243399][T24673] Second to last potentially related work creation: [ 1420.250007][T24673] kasan_save_stack+0x3b/0x60 [ 1420.254689][T24673] __kasan_record_aux_stack+0xb0/0xc0 [ 1420.260152][T24673] call_rcu+0x163/0xa10 [ 1420.264396][T24673] __cpu_map_entry_replace+0x74/0x170 [ 1420.269773][T24673] cpu_map_free+0xd7/0x1b0 [ 1420.274191][T24673] process_one_work+0x8a9/0x11d0 [ 1420.279142][T24673] worker_thread+0xa47/0x1200 [ 1420.283822][T24673] kthread+0x28d/0x320 [ 1420.287915][T24673] ret_from_fork+0x1f/0x30 [ 1420.292335][T24673] [ 1420.294654][T24673] The buggy address belongs to the object at ffff8880547e0a00 [ 1420.294654][T24673] which belongs to the cache kmalloc-cg-256 of size 256 [ 1420.308967][T24673] The buggy address is located 8 bytes inside of [ 1420.308967][T24673] 256-byte region [ffff8880547e0a00, ffff8880547e0b00) [ 1420.322080][T24673] [ 1420.324489][T24673] The buggy address belongs to the physical page: [ 1420.330925][T24673] page:ffffea000151f800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880547e0600 pfn:0x547e0 [ 1420.342381][T24673] head:ffffea000151f800 order:1 compound_mapcount:0 compound_pincount:0 [ 1420.350705][T24673] memcg:ffff88802b2a5001 [ 1420.354937][T24673] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1420.362941][T24673] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017c42c80 [ 1420.371529][T24673] raw: ffff8880547e0600 000000008010000c 00000001ffffffff ffff88802b2a5001 [ 1420.380632][T24673] page dumped because: kasan: bad access detected [ 1420.387159][T24673] page_owner tracks the page as allocated [ 1420.392888][T24673] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 18695, tgid 18691 (syz.4.22580), ts 1249911851621, free_ts 1249832874233 [ 1420.416114][T24673] post_alloc_hook+0x18d/0x1b0 [ 1420.420887][T24673] get_page_from_freelist+0x3731/0x38d0 [ 1420.426450][T24673] __alloc_pages+0x28d/0x770 [ 1420.431039][T24673] alloc_slab_page+0x6a/0x150 [ 1420.435725][T24673] new_slab+0x84/0x2d0 [ 1420.439802][T24673] ___slab_alloc+0xc20/0x1270 [ 1420.444487][T24673] __kmem_cache_alloc_node+0x19f/0x260 [ 1420.449951][T24673] __kmalloc+0xa1/0x230 [ 1420.454108][T24673] __register_sysctl_table+0xdc/0x11e0 [ 1420.459569][T24673] ipv4_frags_init_net+0x211/0x300 [ 1420.465153][T24673] ops_init+0x35d/0x610 [ 1420.469318][T24673] setup_net+0x4f9/0xc70 [ 1420.473569][T24673] copy_net_ns+0x352/0x590 [ 1420.477993][T24673] create_new_namespaces+0x425/0x7a0 [ 1420.483290][T24673] copy_namespaces+0x397/0x3f0 [ 1420.488057][T24673] copy_process+0x1ab8/0x4060 [ 1420.492741][T24673] page last free stack trace: [ 1420.497439][T24673] free_unref_page_prepare+0x12a6/0x15b0 [ 1420.503097][T24673] free_unref_page+0x33/0x3e0 [ 1420.507788][T24673] qlist_free_all+0x76/0xe0 [ 1420.512297][T24673] kasan_quarantine_reduce+0x156/0x170 [ 1420.517885][T24673] __kasan_slab_alloc+0x1f/0x70 [ 1420.522777][T24673] slab_post_alloc_hook+0x52/0x3a0 [ 1420.527999][T24673] kmem_cache_alloc+0x10c/0x2d0 [ 1420.532893][T24673] ptlock_alloc+0x1c/0x60 [ 1420.537324][T24673] pte_alloc_one+0xd1/0x360 [ 1420.541834][T24673] handle_mm_fault+0x3318/0x5340 [ 1420.546806][T24673] exc_page_fault+0x26f/0x620 [ 1420.551500][T24673] asm_exc_page_fault+0x22/0x30 [ 1420.556384][T24673] [ 1420.558706][T24673] Memory state around the buggy address: [ 1420.564334][T24673] ffff8880547e0900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1420.573612][T24673] ffff8880547e0980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1420.581710][T24673] >ffff8880547e0a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1420.589791][T24673] ^ [ 1420.594206][T24673] ffff8880547e0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1420.602702][T24673] ffff8880547e0b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1420.611197][T24673] ================================================================== [ 1420.619412][T24673] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1420.626633][T24673] CPU: 1 PID: 24673 Comm: syz.2.25280 Not tainted 6.1.128-syzkaller #0 [ 1420.634917][T24673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1420.645001][T24673] Call Trace: [ 1420.648285][T24673] [ 1420.651214][T24673] dump_stack_lvl+0x1e3/0x2cb [ 1420.655906][T24673] ? nf_tcp_handle_invalid+0x642/0x642 [ 1420.661455][T24673] ? panic+0x764/0x764 [ 1420.665638][T24673] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1420.671800][T24673] ? vscnprintf+0x59/0x80 [ 1420.676179][T24673] panic+0x318/0x764 [ 1420.680084][T24673] ? check_panic_on_warn+0x1d/0xa0 [ 1420.685300][T24673] ? memcpy_page_flushcache+0xfc/0xfc [ 1420.690678][T24673] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 1420.696611][T24673] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1420.702515][T24673] ? _raw_spin_unlock+0x40/0x40 [ 1420.707373][T24673] ? print_report+0x4a3/0x4f0 [ 1420.712105][T24673] check_panic_on_warn+0x7e/0xa0 [ 1420.717402][T24673] ? cpu_map_enqueue+0xb6/0x370 [ 1420.722264][T24673] end_report+0x66/0x110 [ 1420.726532][T24673] kasan_report+0x143/0x160 [ 1420.731055][T24673] ? cpu_map_enqueue+0xb6/0x370 [ 1420.737932][T24673] cpu_map_enqueue+0xb6/0x370 [ 1420.742635][T24673] xdp_do_redirect_frame+0x2f0/0x660 [ 1420.748552][T24673] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 1420.753937][T24673] ? __mutex_unlock_slowpath+0x218/0x750 [ 1420.759589][T24673] ? 0xffffffffa00038c0 [ 1420.763764][T24673] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 1420.769321][T24673] ? xdp_convert_md_to_buff+0x330/0x330 [ 1420.775220][T24673] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 1420.781121][T24673] ? 0xffffffffa00038c0 [ 1420.785291][T24673] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1420.791545][T24673] ? __might_fault+0xbd/0x110 [ 1420.796254][T24673] ? _copy_from_user+0x109/0x170 [ 1420.801383][T24673] ? bpf_test_init+0x15a/0x180 [ 1420.806155][T24673] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1420.811663][T24673] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 1420.817208][T24673] ? dev_put+0x80/0x80 [ 1420.821288][T24673] ? dev_put+0x80/0x80 [ 1420.825366][T24673] bpf_prog_test_run+0x32f/0x3a0 [ 1420.830309][T24673] __sys_bpf+0x3eb/0x6c0 [ 1420.834565][T24673] ? bpf_link_show_fdinfo+0x300/0x300 [ 1420.839959][T24673] ? ct_irq_exit_irqson+0x13c/0x1b0 [ 1420.845170][T24673] ? syscall_enter_from_user_mode+0x37/0x230 [ 1420.851198][T24673] __x64_sys_bpf+0x78/0x90 [ 1420.856148][T24673] do_syscall_64+0x3b/0xb0 [ 1420.860568][T24673] ? clear_bhb_loop+0x45/0xa0 [ 1420.865249][T24673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1420.871156][T24673] RIP: 0033:0x7f2c8298cde9 [ 1420.875573][T24673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1420.895271][T24673] RSP: 002b:00007f2c827ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1420.903689][T24673] RAX: ffffffffffffffda RBX: 00007f2c82ba5fa0 RCX: 00007f2c8298cde9 [ 1420.911664][T24673] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 1420.919666][T24673] RBP: 00007f2c82a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1420.927649][T24673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1420.935628][T24673] R13: 0000000000000000 R14: 00007f2c82ba5fa0 R15: 00007fff2e0c5a78 [ 1420.943784][T24673] [ 1420.947106][T24673] Kernel Offset: disabled [ 1420.951464][T24673] Rebooting in 86400 seconds..