last executing test programs: 1m57.624061394s ago: executing program 4 (id=17388): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) 1m57.460663857s ago: executing program 4 (id=17394): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f00000000c0), 0x0}, 0x20) 1m57.389024679s ago: executing program 4 (id=17396): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 1m57.274949381s ago: executing program 4 (id=17402): r0 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b02", 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x0) 1m57.176376513s ago: executing program 4 (id=17405): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/288, 0x120}], 0x1, &(0x7f0000000480)=""/19, 0x13}, 0x40011013) 1m57.084822185s ago: executing program 4 (id=17408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000320e0000850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m56.951398307s ago: executing program 32 (id=17408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000320e0000850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.0988298s ago: executing program 1 (id=19874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x84}, {0x6}]}) 3.885393255s ago: executing program 1 (id=19891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000008c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, &(0x7f0000000500), 0x0}, 0x20) 3.717150697s ago: executing program 1 (id=19893): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "fe8041000000000092"}], 0x20}, 0x0) 2.806934375s ago: executing program 1 (id=19904): bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c00000000000000180000000000000000000000000000009500000000000000950000000000000079905023dc5a746f69aa41ab294fbd52e6874cefa2317023e7358c57fdce21bc454dcc43767c0e73743afbc75a67c277a3ee9c5858c6ec3f29546c671f4146c003ab83adf8a4b1f1a54f920c191359c1461c23f361546ef61f85d19644bbbc8ff232697bafc3d136461162afc3a963ceee3e436a051fe7dea792"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) 2.647858978s ago: executing program 1 (id=19905): syz_clone(0x4080b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.719537257s ago: executing program 3 (id=19918): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1.596771399s ago: executing program 3 (id=19919): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000040), 0x8) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000) 1.596089619s ago: executing program 1 (id=19929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x4, r0}, 0x38) 1.458654942s ago: executing program 3 (id=19922): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="a314472a3ebf07662bb26a717f3b", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.385044483s ago: executing program 5 (id=19924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$TUNSETVNETHDRSZ(r0, 0x800454e0, &(0x7f0000000480)=0x70dfd79b) 1.377902883s ago: executing program 3 (id=19925): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) gettid() 1.284480605s ago: executing program 3 (id=19927): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504000a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x2000) 1.236830776s ago: executing program 2 (id=19928): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x7) 1.199347917s ago: executing program 2 (id=19931): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd800000000000005d8ec6f10000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.132802658s ago: executing program 5 (id=19932): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r0, 0x0, 0xffffffffffffffff, 0x0) 1.116348068s ago: executing program 3 (id=19933): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 950.911662ms ago: executing program 2 (id=19936): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000001c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 946.127222ms ago: executing program 5 (id=19945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000180)) 664.260997ms ago: executing program 2 (id=19937): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 644.953878ms ago: executing program 0 (id=19938): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) gettid() 573.110509ms ago: executing program 0 (id=19939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, 0x0, 0x0) 506.711ms ago: executing program 5 (id=19940): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0xd, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r1}, 0xc) 466.431491ms ago: executing program 2 (id=19941): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 383.216513ms ago: executing program 5 (id=19942): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 292.953384ms ago: executing program 0 (id=19943): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x1c}], 0x1}, 0x0) 292.756294ms ago: executing program 2 (id=19944): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)="2461e554be6f3e7b0de82fe4f132c1", &(0x7f0000000500), 0x7, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) 183.691656ms ago: executing program 5 (id=19946): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000040), 0x8) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000) 183.100906ms ago: executing program 0 (id=19956): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 98.739448ms ago: executing program 0 (id=19947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=19948): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f00000039c0)=""/4069, 0xfe5}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000040)=""/56, 0x38}, {&(0x7f0000000880)=""/250, 0xfa}], 0x4}, 0x0) kernel console output (not intermixed with test programs): link: 'syz.3.12294': attribute type 19 has an invalid length. [ 464.583032][T29410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12294'. [ 464.737380][T29416] netlink: 'syz.0.12298': attribute type 7 has an invalid length. [ 464.789835][T29418] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12300'. [ 464.908789][T29426] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12312'. [ 465.820721][T29444] netlink: 'syz.1.12308': attribute type 1 has an invalid length. [ 465.849414][T29444] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.12308'. [ 465.928578][T29449] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.12309'. [ 466.106213][T29458] netlink: 100 bytes leftover after parsing attributes in process `syz.4.12316'. [ 466.118470][T29461] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12318'. [ 468.084073][T29561] validate_nla: 7 callbacks suppressed [ 468.084092][T29561] netlink: 'syz.2.12365': attribute type 3 has an invalid length. [ 469.270140][T29641] netlink: 'syz.1.12402': attribute type 10 has an invalid length. [ 469.324677][T29641] __nla_validate_parse: 9 callbacks suppressed [ 469.324696][T29641] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12402'. [ 469.497827][T29654] delete_channel: no stack [ 470.327691][T29693] netlink: 'syz.0.12425': attribute type 3 has an invalid length. [ 470.352265][T29693] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.12425'. [ 471.095182][T29738] netlink: 'syz.0.12447': attribute type 5 has an invalid length. [ 471.621463][T29766] netlink: 'syz.3.12456': attribute type 29 has an invalid length. [ 471.653987][T29766] netlink: 'syz.3.12456': attribute type 29 has an invalid length. [ 471.913512][T29785] netlink: 'syz.3.12470': attribute type 10 has an invalid length. [ 472.327902][T29820] netlink: 'syz.1.12485': attribute type 3 has an invalid length. [ 472.364520][T29820] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.12485'. [ 472.756085][T29859] netlink: 'syz.1.12505': attribute type 1 has an invalid length. [ 472.808772][T29859] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.12505'. [ 473.024970][T29879] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12523'. [ 473.697493][T29924] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12532'. [ 473.855073][T29937] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12546'. [ 474.027650][T29947] netlink: 'syz.0.12542': attribute type 10 has an invalid length. [ 474.353675][T29969] netlink: 10 bytes leftover after parsing attributes in process `syz.2.12551'. [ 474.549190][T29983] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12555'. [ 474.565454][T29986] netlink: 'syz.2.12558': attribute type 1 has an invalid length. [ 474.610214][T29986] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.12558'. [ 474.871669][T30001] netlink: 'syz.2.12565': attribute type 21 has an invalid length. [ 475.104664][T30012] netlink: 10 bytes leftover after parsing attributes in process `syz.0.12580'. [ 475.599513][T30049] netlink: 'syz.4.12587': attribute type 10 has an invalid length. [ 475.761045][T30053] netlink: 10 bytes leftover after parsing attributes in process `syz.1.12591'. [ 475.799528][T30057] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12593'. [ 475.968941][T30068] device lo entered promiscuous mode [ 475.981477][T30068] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 476.343166][T30092] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12610'. [ 476.388904][T30097] netlink: 'syz.2.12608': attribute type 10 has an invalid length. [ 476.484552][T30101] netlink: 'syz.0.12612': attribute type 10 has an invalid length. [ 476.493310][T30101] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12612'. [ 476.557023][T30101] device geneve0 entered promiscuous mode [ 476.585746][T30101] team0: Port device geneve0 added [ 477.083902][T30138] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.12629'. [ 477.263785][T30147] netlink: 184 bytes leftover after parsing attributes in process `syz.0.12643'. [ 477.406328][T30155] device lo entered promiscuous mode [ 477.424226][T30155] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 477.668907][T30180] netlink: 'syz.3.12644': attribute type 4 has an invalid length. [ 477.927036][T30200] netlink: 'syz.1.12650': attribute type 11 has an invalid length. [ 478.319373][T30231] netlink: 'syz.1.12664': attribute type 10 has an invalid length. [ 478.380264][T30231] device geneve0 entered promiscuous mode [ 478.415563][T30231] team0: Port device geneve0 added [ 478.438969][T30233] netlink: 'syz.2.12665': attribute type 11 has an invalid length. [ 479.068669][T30268] device geneve0 entered promiscuous mode [ 479.086599][T30268] team0: Port device geneve0 added [ 479.289730][T30276] validate_nla: 1 callbacks suppressed [ 479.289751][T30276] netlink: 'syz.3.12685': attribute type 8 has an invalid length. [ 479.354681][T30276] __nla_validate_parse: 5 callbacks suppressed [ 479.354699][T30276] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12685'. [ 479.381914][T30284] netlink: 'syz.1.12689': attribute type 2 has an invalid length. [ 479.402051][T30284] netlink: 'syz.1.12689': attribute type 8 has an invalid length. [ 479.410071][T30284] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12689'. [ 479.651002][T30306] netlink: 'syz.2.12697': attribute type 10 has an invalid length. [ 479.664637][T30306] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12697'. [ 479.769242][T30306] device geneve0 entered promiscuous mode [ 479.785475][T30306] team0: Port device geneve0 added [ 479.882946][T30318] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12706'. [ 480.123817][T30335] netlink: 6 bytes leftover after parsing attributes in process `syz.1.12715'. [ 480.154054][T30335] openvswitch: netlink: Flow actions attr not present in new flow. [ 480.380896][T30358] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.12722'. [ 480.609310][T30373] netlink: 6 bytes leftover after parsing attributes in process `syz.4.12730'. [ 480.639029][T30373] openvswitch: netlink: Flow actions attr not present in new flow. [ 481.357895][T30420] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12753'. [ 481.724765][T30444] netlink: 'syz.2.12773': attribute type 2 has an invalid length. [ 481.744035][T30444] netlink: 'syz.2.12773': attribute type 8 has an invalid length. [ 481.774599][T30444] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12773'. [ 482.114645][T30469] netlink: 'syz.3.12772': attribute type 10 has an invalid length. [ 482.144003][T30469] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12772'. [ 482.217729][T30469] team0: Port device geneve0 added [ 482.997865][T30524] netlink: 'syz.1.12808': attribute type 1 has an invalid length. [ 483.369000][T30550] netlink: 'syz.1.12823': attribute type 10 has an invalid length. [ 483.373548][T30551] netlink: 'syz.3.12812': attribute type 1 has an invalid length. [ 484.185224][T30603] device lo left promiscuous mode [ 484.200027][T30603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.383429][T30617] validate_nla: 2 callbacks suppressed [ 484.383447][T30617] netlink: 'syz.3.12846': attribute type 10 has an invalid length. [ 485.748297][T30655] netlink: 'syz.4.12866': attribute type 21 has an invalid length. [ 485.788072][T30655] IPv6: Can't replace route, no match found [ 485.794875][T30661] __nla_validate_parse: 4 callbacks suppressed [ 485.794892][T30661] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.12867'. [ 485.902375][T30669] netlink: 'syz.4.12871': attribute type 10 has an invalid length. [ 486.081996][T30680] netlink: 'syz.1.12876': attribute type 3 has an invalid length. [ 486.118249][T30680] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.12876'. [ 486.143385][T30677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.217069][T30686] netlink: 'syz.0.12879': attribute type 1 has an invalid length. [ 486.331822][T30695] netlink: 'syz.4.12883': attribute type 12 has an invalid length. [ 486.356977][T30695] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.12883'. [ 486.367366][T30697] netlink: 'syz.0.12882': attribute type 21 has an invalid length. [ 486.394060][T30697] IPv6: Can't replace route, no match found [ 486.479560][T30704] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.12885'. [ 486.550232][T30713] netlink: 'syz.4.12892': attribute type 5 has an invalid length. [ 486.598038][T30715] netlink: 'syz.1.12893': attribute type 12 has an invalid length. [ 486.634679][T30715] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12893'. [ 486.638734][T30719] netlink: 'syz.3.12895': attribute type 1 has an invalid length. [ 486.859706][T30728] IPv6: NLM_F_CREATE should be specified when creating new route [ 486.868213][T30728] IPv6: Can't replace route, no match found [ 487.114977][T30742] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.12907'. [ 487.175900][T30746] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.12919'. [ 487.608296][T30782] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12923'. [ 487.958294][T30812] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12937'. [ 489.482205][T30892] validate_nla: 10 callbacks suppressed [ 489.482224][T30892] netlink: 'syz.2.12972': attribute type 10 has an invalid length. [ 489.793337][T30913] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12986'. [ 489.803158][T30919] netlink: 'syz.1.12990': attribute type 22 has an invalid length. [ 490.341036][T30955] netlink: 'syz.1.13007': attribute type 10 has an invalid length. [ 490.371677][T30958] netlink: 'syz.3.13008': attribute type 5 has an invalid length. [ 490.789552][T30985] netlink: 'syz.4.13022': attribute type 5 has an invalid length. [ 491.006487][T31011] __nla_validate_parse: 2 callbacks suppressed [ 491.006508][T31011] netlink: 26 bytes leftover after parsing attributes in process `syz.2.13035'. [ 491.070417][T31015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13037'. [ 491.183813][T31026] netlink: 'syz.3.13040': attribute type 19 has an invalid length. [ 491.417782][T31042] netlink: 26 bytes leftover after parsing attributes in process `syz.1.13050'. [ 491.526800][T31050] netlink: 'syz.2.13054': attribute type 22 has an invalid length. [ 491.559068][T31050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13054'. [ 491.867364][T31076] netlink: 26 bytes leftover after parsing attributes in process `syz.0.13066'. [ 492.206434][T31096] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13075'. [ 492.414565][T31109] netlink: 'syz.3.13083': attribute type 3 has an invalid length. [ 492.422438][T31109] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.13083'. [ 492.432745][T31110] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13080'. [ 492.755998][T31141] netlink: 'syz.3.13096': attribute type 9 has an invalid length. [ 492.771793][T31141] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.13096'. [ 493.153815][T31166] netlink: 'syz.2.13109': attribute type 6 has an invalid length. [ 493.948864][T31224] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.13144'. [ 494.114775][T31232] delete_channel: no stack [ 494.937273][T31308] validate_nla: 5 callbacks suppressed [ 494.937293][T31308] netlink: 'syz.2.13177': attribute type 12 has an invalid length. [ 495.005142][T31312] TCP: TCP_TX_DELAY enabled [ 495.134759][T31323] delete_channel: no stack [ 496.357329][T31409] netlink: 'syz.1.13226': attribute type 4 has an invalid length. [ 496.410532][T31409] __nla_validate_parse: 10 callbacks suppressed [ 496.410552][T31409] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13226'. [ 496.814634][T31426] netlink: 184 bytes leftover after parsing attributes in process `syz.3.13233'. [ 496.833133][T31427] netlink: 'syz.1.13234': attribute type 10 has an invalid length. [ 496.886071][T31427] device netdevsim0 entered promiscuous mode [ 496.915500][T31427] team0: Port device netdevsim0 added [ 497.091244][T31440] netlink: 'syz.1.13240': attribute type 27 has an invalid length. [ 497.119884][T31440] netlink: 'syz.1.13240': attribute type 4 has an invalid length. [ 497.148727][T31440] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13240'. [ 497.189747][T31442] netlink: 'syz.3.13242': attribute type 3 has an invalid length. [ 497.231704][T31442] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13242'. [ 497.282948][T31450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13245'. [ 497.323209][T31450] netlink: 'syz.1.13245': attribute type 3 has an invalid length. [ 497.616451][T31474] netlink: 'syz.0.13256': attribute type 27 has an invalid length. [ 497.645560][T31474] netlink: 'syz.0.13256': attribute type 4 has an invalid length. [ 497.675891][T31474] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13256'. [ 497.725418][T31484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13262'. [ 497.757390][T31484] netlink: 'syz.4.13262': attribute type 3 has an invalid length. [ 497.988266][T31507] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13274'. [ 498.080366][T31514] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13277'. [ 498.158877][T31520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13278'. [ 498.337808][T31534] openvswitch: netlink: Flow key attr not present in new flow. [ 498.478562][T31547] device netdevsim0 entered promiscuous mode [ 498.492089][T31547] team0: Port device netdevsim0 added [ 499.001459][T31587] device netdevsim0 entered promiscuous mode [ 499.015437][T31587] team0: Port device netdevsim0 added [ 499.457268][T31623] openvswitch: netlink: Flow key attr not present in new flow. [ 500.497156][T31737] validate_nla: 14 callbacks suppressed [ 500.497186][T31737] netlink: 'syz.0.13388': attribute type 3 has an invalid length. [ 500.957866][T31765] netlink: 'syz.1.13400': attribute type 3 has an invalid length. [ 501.401452][T31799] netlink: 'syz.4.13416': attribute type 1 has an invalid length. [ 501.517376][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.523729][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.535480][T31812] netlink: 'syz.2.13422': attribute type 3 has an invalid length. [ 501.557929][T31814] __nla_validate_parse: 14 callbacks suppressed [ 501.557948][T31814] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.13424'. [ 501.576918][T31812] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.13422'. [ 501.689567][T31827] netlink: 'syz.4.13431': attribute type 2 has an invalid length. [ 501.707874][T31827] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.13431'. [ 501.721306][T31831] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.13434'. [ 501.731135][T31832] netlink: 'syz.0.13433': attribute type 21 has an invalid length. [ 501.956688][T31855] netlink: 'syz.0.13443': attribute type 19 has an invalid length. [ 502.754047][T31867] netlink: 'syz.1.13453': attribute type 21 has an invalid length. [ 502.801723][T31871] netlink: 'syz.2.13454': attribute type 4 has an invalid length. [ 502.896587][T31884] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13460'. [ 502.914075][T31886] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.13461'. [ 502.931926][T31888] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.13471'. [ 503.032279][T31896] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13477'. [ 503.076664][T31902] netlink: 'syz.0.13467': attribute type 21 has an invalid length. [ 503.100122][T31902] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13467'. [ 503.135472][T31902] netlink: 3 bytes leftover after parsing attributes in process `syz.0.13467'. [ 505.063574][T32063] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 505.517631][T32110] validate_nla: 8 callbacks suppressed [ 505.517660][T32110] netlink: 'syz.3.13575': attribute type 3 has an invalid length. [ 505.719111][T32134] netlink: 'syz.1.13586': attribute type 10 has an invalid length. [ 505.817436][T32142] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 505.919955][T32152] netlink: 'syz.4.13595': attribute type 3 has an invalid length. [ 506.216337][T32175] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 506.574620][T32206] __nla_validate_parse: 13 callbacks suppressed [ 506.574643][T32206] netlink: 156 bytes leftover after parsing attributes in process `syz.4.13630'. [ 506.803910][T32231] netlink: 'syz.2.13631': attribute type 3 has an invalid length. [ 506.820453][T32231] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.13631'. [ 506.830301][T32234] netlink: 'syz.1.13633': attribute type 3 has an invalid length. [ 506.838685][T32234] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.13633'. [ 506.914115][T32242] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.13648'. [ 507.003203][T32252] netlink: 'syz.0.13654': attribute type 3 has an invalid length. [ 507.033773][T32252] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.13654'. [ 507.062144][T32258] netlink: 'syz.2.13656': attribute type 20 has an invalid length. [ 507.102471][T32262] netlink: 'syz.1.13645': attribute type 10 has an invalid length. [ 507.155037][T32266] netlink: 'syz.3.13649': attribute type 3 has an invalid length. [ 507.175292][T32266] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.13649'. [ 507.216185][T32272] netlink: 'syz.0.13663': attribute type 20 has an invalid length. [ 507.263515][T32276] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.13653'. [ 507.543938][T32305] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13672'. [ 507.759126][T32333] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13685'. [ 507.843495][T32340] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13698'. [ 511.287293][T32593] validate_nla: 8 callbacks suppressed [ 511.287311][T32593] netlink: 'syz.1.13810': attribute type 7 has an invalid length. [ 511.540202][T32602] netlink: 'syz.1.13815': attribute type 21 has an invalid length. [ 511.599599][T32602] __nla_validate_parse: 17 callbacks suppressed [ 511.599620][T32602] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13815'. [ 511.693106][T32607] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.13820'. [ 511.889161][T32611] netlink: 'syz.1.13823': attribute type 29 has an invalid length. [ 511.938648][T32611] netlink: 'syz.1.13823': attribute type 29 has an invalid length. [ 512.121317][T32619] netlink: 'syz.0.13826': attribute type 21 has an invalid length. [ 512.146994][T32619] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13826'. [ 512.668204][T32645] delete_channel: no stack [ 512.672852][T32645] delete_channel: no stack [ 512.858610][T32655] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.13844'. [ 513.277249][T32680] netlink: 'syz.4.13856': attribute type 3 has an invalid length. [ 513.334502][T32680] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.13856'. [ 513.376702][T32684] netlink: 'syz.2.13858': attribute type 21 has an invalid length. [ 513.413492][T32684] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13858'. [ 513.508725][T32699] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13866'. [ 513.877276][T32728] netlink: 'syz.0.13890': attribute type 21 has an invalid length. [ 514.134305][T32748] netlink: 'syz.4.13891': attribute type 3 has an invalid length. [ 514.142466][T32748] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.13891'. [ 514.266544][T32754] delete_channel: no stack [ 514.271099][T32754] delete_channel: no stack [ 514.310846][T32758] netlink: 'syz.3.13896': attribute type 21 has an invalid length. [ 514.479511][T32766] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13899'. [ 514.596297][ T306] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13904'. [ 514.699942][ T316] netlink: del zone limit has 4 unknown bytes [ 514.919162][ T338] erspan0: refused to change device tx_queue_len [ 514.949995][ T338] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 515.115881][ T356] netlink: del zone limit has 4 unknown bytes [ 515.370603][ T386] netlink: del zone limit has 4 unknown bytes [ 515.905509][ T439] erspan0: refused to change device tx_queue_len [ 515.911911][ T439] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 516.320234][ T481] erspan0: refused to change device tx_queue_len [ 516.329194][ T481] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 516.639153][ T514] __nla_validate_parse: 18 callbacks suppressed [ 516.639174][ T514] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14006'. [ 516.671258][ T516] delete_channel: no stack [ 516.826626][ T534] validate_nla: 5 callbacks suppressed [ 516.826642][ T534] netlink: 'syz.4.14015': attribute type 33 has an invalid length. [ 516.863422][ T534] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14015'. [ 517.061552][ T561] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14028'. [ 517.071536][ T561] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 517.258294][ T578] netlink: 'syz.1.14036': attribute type 33 has an invalid length. [ 517.287637][ T578] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14036'. [ 517.288675][ T583] netlink: 'syz.4.14038': attribute type 1 has an invalid length. [ 517.313064][ T585] netlink: 'syz.0.14039': attribute type 7 has an invalid length. [ 517.323049][ T583] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.14038'. [ 517.333061][ T585] netlink: 140 bytes leftover after parsing attributes in process `syz.0.14039'. [ 517.407161][ T590] netlink: 'syz.1.14042': attribute type 3 has an invalid length. [ 517.424195][ T590] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.14042'. [ 517.644049][ T614] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14065'. [ 517.661981][ T613] netlink: 'syz.3.14052': attribute type 33 has an invalid length. [ 517.714460][ T613] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14052'. [ 517.848610][ T628] sctp: [Deprecated]: syz.3.14060 (pid 628) Use of int in max_burst socket option deprecated. [ 517.848610][ T628] Use struct sctp_assoc_value instead [ 517.900256][ T632] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.14063'. [ 517.981666][ T639] netlink: 'syz.1.14076': attribute type 7 has an invalid length. [ 518.095714][ T644] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 518.163682][ T648] delete_channel: no stack [ 518.269893][ T657] syz.4.14075[657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.270001][ T657] syz.4.14075[657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.272045][ T656] netlink: 'syz.0.14074': attribute type 1 has an invalid length. [ 518.502152][ T677] netlink: 'syz.4.14081': attribute type 7 has an invalid length. [ 518.534447][ T676] netlink: 'syz.3.14083': attribute type 10 has an invalid length. [ 518.590004][ T676] team0 (unregistering): Port device team_slave_1 removed [ 518.624836][ T676] team0 (unregistering): Port device geneve0 removed [ 519.111549][ T720] syz.3.14107[720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 519.111654][ T720] syz.3.14107[720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 519.502360][ T756] sctp: [Deprecated]: syz.2.14122 (pid 756) Use of int in max_burst socket option deprecated. [ 519.502360][ T756] Use struct sctp_assoc_value instead [ 521.561848][ T897] netlink: zone id is out of range [ 521.575195][ T897] netlink: set zone limit has 8 unknown bytes [ 521.765733][ T920] __nla_validate_parse: 14 callbacks suppressed [ 521.765751][ T920] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.14200'. [ 521.857838][ T925] device team_slave_0 left promiscuous mode [ 521.917501][ T925] team0 (unregistering): Port device team_slave_0 removed [ 521.945046][ T925] device team_slave_1 left promiscuous mode [ 521.974351][ T925] team0 (unregistering): Port device team_slave_1 removed [ 522.000537][ T925] device bond0 left promiscuous mode [ 522.013466][ T925] device bond_slave_1 left promiscuous mode [ 522.042505][ T925] team0 (unregistering): Port device bond0 removed [ 522.055634][ T925] device geneve0 left promiscuous mode [ 522.078489][ T925] team0 (unregistering): Port device geneve0 removed [ 522.093936][ T925] device netdevsim0 left promiscuous mode [ 522.135041][ T925] team0 (unregistering): Port device netdevsim0 removed [ 522.176580][ T927] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14203'. [ 522.196774][ T941] validate_nla: 17 callbacks suppressed [ 522.196793][ T941] netlink: 'syz.1.14209': attribute type 21 has an invalid length. [ 522.233882][ T941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 522.241319][ T941] IPv6: NLM_F_CREATE should be set when creating new route [ 522.248643][ T941] IPv6: NLM_F_CREATE should be set when creating new route [ 522.493052][ T963] netlink: 'syz.1.14230': attribute type 10 has an invalid length. [ 522.522117][ T966] netlink: 'syz.4.14221': attribute type 4 has an invalid length. [ 522.570629][ T966] netlink: 206236 bytes leftover after parsing attributes in process `syz.4.14221'. [ 522.587376][ T963] device team_slave_0 left promiscuous mode [ 522.646069][ T963] team0 (unregistering): Port device team_slave_0 removed [ 522.661483][ T963] device team_slave_1 left promiscuous mode [ 522.694880][ T963] team0 (unregistering): Port device team_slave_1 removed [ 522.720122][ T963] device geneve0 left promiscuous mode [ 522.736562][ T963] team0 (unregistering): Port device geneve0 removed [ 522.751470][ T963] device netdevsim0 left promiscuous mode [ 522.785007][ T963] team0 (unregistering): Port device netdevsim0 removed [ 522.804507][ T980] netlink: zone id is out of range [ 522.821480][ T980] netlink: set zone limit has 8 unknown bytes [ 522.856197][ T970] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14222'. [ 522.875039][ T972] netlink: 'syz.2.14224': attribute type 14 has an invalid length. [ 522.904537][ T972] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14224'. [ 523.184304][ T996] netlink: 'syz.2.14236': attribute type 1 has an invalid length. [ 523.206835][ T996] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.14236'. [ 523.273270][ T1000] netlink: 'syz.3.14237': attribute type 4 has an invalid length. [ 523.363355][ T1000] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.14237'. [ 523.423867][ T1006] netlink: 'syz.4.14252': attribute type 21 has an invalid length. [ 523.459668][ T1008] netlink: zone id is out of range [ 523.471815][ T1006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 523.479149][ T1006] IPv6: NLM_F_CREATE should be set when creating new route [ 523.486552][ T1006] IPv6: NLM_F_CREATE should be set when creating new route [ 523.497579][ T1008] netlink: set zone limit has 8 unknown bytes [ 523.588115][ T1010] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14241'. [ 523.937882][ T1032] netlink: 'syz.4.14251': attribute type 1 has an invalid length. [ 523.974823][ T1032] netlink: 101600 bytes leftover after parsing attributes in process `syz.4.14251'. [ 524.047402][ T1042] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14257'. [ 524.496322][ T1072] netlink: 'syz.4.14268': attribute type 19 has an invalid length. [ 524.886893][ T1094] netlink: 'syz.4.14275': attribute type 16 has an invalid length. [ 525.318287][ T1126] device team_slave_1 left promiscuous mode [ 525.352814][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 525.380756][ T1126] device geneve1 left promiscuous mode [ 525.422526][ T1126] team0 (unregistering): Port device geneve1 removed [ 525.437105][ T1126] device geneve0 left promiscuous mode [ 525.443767][ T1126] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.453256][ T1126] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.462864][ T1126] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.475129][ T1126] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.513197][ T1126] team0 (unregistering): Port device geneve0 removed [ 525.528402][ T1126] device netdevsim0 left promiscuous mode [ 525.563064][ T1126] team0 (unregistering): Port device netdevsim0 removed [ 526.262224][ T1226] delete_channel: no stack [ 526.828155][ T1281] __nla_validate_parse: 17 callbacks suppressed [ 526.828175][ T1281] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.14359'. [ 526.988247][ T1292] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.14365'. [ 527.024696][ T1297] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14367'. [ 527.185764][ T1314] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.14375'. [ 527.346687][ T1326] validate_nla: 21 callbacks suppressed [ 527.346704][ T1326] netlink: 'syz.0.14381': attribute type 8 has an invalid length. [ 527.384458][ T1326] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.14381'. [ 527.666931][ T1359] netlink: 'syz.4.14397': attribute type 2 has an invalid length. [ 527.698232][ T1359] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.14397'. [ 527.770402][ T1368] netlink: 'syz.2.14400': attribute type 8 has an invalid length. [ 527.814461][ T1368] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.14400'. [ 527.820737][ T1370] netlink: 'syz.0.14404': attribute type 10 has an invalid length. [ 527.959027][ T1382] netlink: 'syz.4.14408': attribute type 11 has an invalid length. [ 527.975833][ T1386] netlink: 192440 bytes leftover after parsing attributes in process `syz.3.14411'. [ 527.990757][ T1386] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 528.014734][ T1382] netlink: 'syz.4.14408': attribute type 5 has an invalid length. [ 528.186974][ T1404] netlink: 'syz.1.14419': attribute type 21 has an invalid length. [ 528.213725][ T1404] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14419'. [ 528.572245][ T1449] netlink: 'syz.4.14438': attribute type 21 has an invalid length. [ 528.596218][ T1449] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14438'. [ 529.232921][ T1514] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 529.325921][ T1521] netlink: 'syz.0.14474': attribute type 3 has an invalid length. [ 530.462157][ T1575] netlink: 'syz.3.14497': attribute type 3 has an invalid length. [ 531.903240][ T1700] __nla_validate_parse: 15 callbacks suppressed [ 531.903260][ T1700] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14559'. [ 531.954170][ T1702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14560'. [ 532.040198][ T1706] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.14561'. [ 532.172420][ T1717] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.14578'. [ 532.346373][ T1728] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14572'. [ 532.382192][ T1732] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14574'. [ 532.413695][ T1732] validate_nla: 6 callbacks suppressed [ 532.413714][ T1732] netlink: 'syz.3.14574': attribute type 3 has an invalid length. [ 532.429547][ T1732] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14574'. [ 532.449543][ T1735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14575'. [ 532.521188][ T1744] netlink: 'syz.3.14581': attribute type 7 has an invalid length. [ 532.530006][ T1744] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.14581'. [ 532.617464][ T1756] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.14588'. [ 533.918072][ T1833] netlink: 'syz.1.14625': attribute type 1 has an invalid length. [ 534.274223][ T1864] netlink: 'syz.0.14651': attribute type 3 has an invalid length. [ 534.627473][ T1882] netlink: 'syz.0.14649': attribute type 2 has an invalid length. [ 534.652360][ T1882] netlink: 'syz.0.14649': attribute type 8 has an invalid length. [ 534.893871][ T1890] netlink: 'syz.2.14654': attribute type 3 has an invalid length. [ 535.231461][ T1907] delete_channel: no stack [ 535.323570][ T1915] delete_channel: no stack [ 535.334579][ T1922] netlink: 'syz.1.14671': attribute type 2 has an invalid length. [ 535.364323][ T1922] netlink: 'syz.1.14671': attribute type 8 has an invalid length. [ 535.648692][ T1945] netlink: 'syz.0.14683': attribute type 7 has an invalid length. [ 536.086350][ T1974] delete_channel: no stack [ 536.304049][ T1988] delete_channel: no stack [ 536.620203][ T2024] delete_channel: no stack [ 536.987800][ T2048] __nla_validate_parse: 17 callbacks suppressed [ 536.987819][ T2048] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14730'. [ 537.153737][ T2058] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14736'. [ 537.830623][ T2089] netlink: 180 bytes leftover after parsing attributes in process `syz.3.14751'. [ 538.222655][ T2124] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14769'. [ 538.423031][ T2146] netlink: 180 bytes leftover after parsing attributes in process `syz.2.14781'. [ 538.444809][ T2148] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14778'. [ 538.605722][ T2167] validate_nla: 7 callbacks suppressed [ 538.605741][ T2167] netlink: 'syz.4.14791': attribute type 9 has an invalid length. [ 538.640111][ T2167] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.14791'. [ 538.748513][ T2176] netlink: 180 bytes leftover after parsing attributes in process `syz.4.14794'. [ 539.043326][ T2212] netlink: 'syz.0.14813': attribute type 3 has an invalid length. [ 539.063480][ T2212] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.14813'. [ 539.103370][ T2220] netlink: 'syz.1.14814': attribute type 14 has an invalid length. [ 539.134636][ T2220] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14814'. [ 539.226932][ T2232] netlink: 'syz.1.14823': attribute type 3 has an invalid length. [ 539.267989][ T2238] netlink: 'syz.4.14826': attribute type 15 has an invalid length. [ 539.294713][ T2238] netlink: 'syz.4.14826': attribute type 5 has an invalid length. [ 539.394962][ T2248] netlink: 'syz.4.14831': attribute type 21 has an invalid length. [ 539.429193][ T2252] netlink: 'syz.3.14833': attribute type 14 has an invalid length. [ 539.504320][ T2256] netlink: 'syz.0.14845': attribute type 9 has an invalid length. [ 539.613988][ T2262] netlink: 'syz.2.14837': attribute type 21 has an invalid length. [ 542.418262][ T2433] __nla_validate_parse: 16 callbacks suppressed [ 542.418283][ T2433] netlink: 164 bytes leftover after parsing attributes in process `syz.4.14921'. [ 542.887453][ T2482] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.14944'. [ 543.159910][ T2506] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.14952'. [ 543.197773][ T2508] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14954'. [ 543.348057][ T2521] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.14957'. [ 543.785964][ T2561] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.14973'. [ 543.814039][ T2569] validate_nla: 16 callbacks suppressed [ 543.814059][ T2569] netlink: 'syz.4.14975': attribute type 1 has an invalid length. [ 543.890908][ T2577] netlink: 'syz.3.14980': attribute type 1 has an invalid length. [ 543.911096][ T2577] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.14980'. [ 544.122830][ T2607] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14993'. [ 544.134152][ T2609] netlink: 'syz.1.14995': attribute type 3 has an invalid length. [ 544.142630][ T2609] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.14995'. [ 544.155503][ T2613] netlink: 'syz.3.14994': attribute type 1 has an invalid length. [ 544.240960][ T2623] netlink: 'syz.2.15011': attribute type 3 has an invalid length. [ 544.266109][ T2627] netlink: 'syz.4.15002': attribute type 1 has an invalid length. [ 544.287929][ T2627] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.15002'. [ 544.377555][ T2638] netlink: 'syz.1.15017': attribute type 3 has an invalid length. [ 544.663917][ T2666] netlink: 'syz.3.15016': attribute type 3 has an invalid length. [ 544.759220][ T2676] netlink: 'syz.4.15022': attribute type 4 has an invalid length. [ 545.110344][ T2724] netlink: 'syz.0.15040': attribute type 4 has an invalid length. [ 547.478599][ T2901] sctp: [Deprecated]: syz.2.15115 (pid 2901) Use of int in max_burst socket option deprecated. [ 547.478599][ T2901] Use struct sctp_assoc_value instead [ 547.668827][ T2917] __nla_validate_parse: 18 callbacks suppressed [ 547.668846][ T2917] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15121'. [ 547.794032][ T2934] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15127'. [ 547.806905][ T2935] netlink: 144 bytes leftover after parsing attributes in process `syz.2.15126'. [ 548.042149][ T2959] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.15135'. [ 548.317624][ T2980] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.15143'. [ 548.490835][ T2991] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15147'. [ 548.580627][ T2995] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15150'. [ 548.891049][ T3020] validate_nla: 13 callbacks suppressed [ 548.891065][ T3020] netlink: 'syz.4.15163': attribute type 3 has an invalid length. [ 548.942812][ T3025] netlink: 'syz.0.15164': attribute type 21 has an invalid length. [ 548.960326][ T3025] netlink: 'syz.0.15164': attribute type 1 has an invalid length. [ 548.962444][ T3024] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.15165'. [ 548.984457][ T3025] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15164'. [ 548.995328][ T3020] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.15163'. [ 550.669713][ T3134] netlink: 'syz.2.15215': attribute type 21 has an invalid length. [ 550.746397][ T3134] netlink: 'syz.2.15215': attribute type 1 has an invalid length. [ 550.817671][ T3140] netlink: 'syz.4.15220': attribute type 11 has an invalid length. [ 552.657751][ T3253] netlink: 'syz.0.15272': attribute type 4 has an invalid length. [ 552.686986][ T3253] __nla_validate_parse: 3 callbacks suppressed [ 552.687003][ T3253] netlink: 105084 bytes leftover after parsing attributes in process `syz.0.15272'. [ 552.856295][ T3257] netlink: 'syz.2.15275': attribute type 10 has an invalid length. [ 553.187386][ T3286] netlink: 'syz.0.15284': attribute type 46 has an invalid length. [ 553.199426][ T3287] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.15285'. [ 553.220286][ T3286] netlink: 'syz.0.15284': attribute type 46 has an invalid length. [ 553.263135][ T3289] netlink: 10 bytes leftover after parsing attributes in process `syz.1.15286'. [ 553.414567][ T3293] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15287'. [ 553.483996][ T3301] netlink: 105084 bytes leftover after parsing attributes in process `syz.1.15293'. [ 553.675191][ T3313] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15299'. [ 554.149255][ T3335] validate_nla: 6 callbacks suppressed [ 554.149272][ T3335] netlink: 'syz.2.15310': attribute type 4 has an invalid length. [ 554.225212][ T3335] netlink: 105084 bytes leftover after parsing attributes in process `syz.2.15310'. [ 554.245494][ T3343] netlink: 10 bytes leftover after parsing attributes in process `syz.0.15315'. [ 554.282595][ T3345] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.15316'. [ 554.364337][ T3349] netlink: 'syz.0.15318': attribute type 3 has an invalid length. [ 554.400661][ T3349] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15318'. [ 554.482244][ T3355] netlink: 'syz.1.15331': attribute type 1 has an invalid length. [ 555.116464][ T3402] netlink: 'syz.2.15345': attribute type 46 has an invalid length. [ 555.226912][ T3413] netlink: 'syz.1.15349': attribute type 10 has an invalid length. [ 555.347878][ T3425] netlink: 'syz.4.15354': attribute type 3 has an invalid length. [ 555.448751][ T3431] netlink: 'syz.2.15358': attribute type 1 has an invalid length. [ 555.906150][ T3462] netlink: 'syz.0.15372': attribute type 1 has an invalid length. [ 556.249410][ T3487] netlink: 'syz.0.15382': attribute type 10 has an invalid length. [ 556.541841][ T3505] netlink: 'syz.0.15393': attribute type 3 has an invalid length. [ 557.053286][ T3559] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 557.617859][ T3604] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 557.905438][ T3630] __nla_validate_parse: 18 callbacks suppressed [ 557.905459][ T3630] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15448'. [ 557.921963][ T3633] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15449'. [ 557.952353][ T3633] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15449'. [ 558.166746][ T3648] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.15454'. [ 558.219421][ T3648] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 559.106464][ T3686] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.15474'. [ 559.754560][ T3712] validate_nla: 5 callbacks suppressed [ 559.754580][ T3712] netlink: 'syz.4.15485': attribute type 10 has an invalid length. [ 559.975451][ T3717] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.15488'. [ 560.615890][ T3755] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.15515'. [ 561.975311][ T3814] netlink: 'syz.0.15534': attribute type 2 has an invalid length. [ 561.996770][ T3814] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15534'. [ 562.196366][ T3822] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.15537'. [ 562.405040][ T3840] netlink: 'syz.3.15555': attribute type 10 has an invalid length. [ 562.948513][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.954883][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.485974][ T3887] netlink: 'syz.2.15561': attribute type 10 has an invalid length. [ 563.661860][ T3894] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.15567'. [ 563.882309][ T3905] netlink: 'syz.0.15573': attribute type 30 has an invalid length. [ 564.248040][ T3921] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.15579'. [ 564.395723][ T3930] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.15580'. [ 564.529462][ T3932] netlink: 'syz.1.15582': attribute type 2 has an invalid length. [ 564.564173][ T3932] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15582'. [ 565.045303][ T3948] netlink: 'syz.1.15591': attribute type 30 has an invalid length. [ 565.158367][ T3954] netlink: 212928 bytes leftover after parsing attributes in process `syz.2.15594'. [ 565.237492][ T3959] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.15596'. [ 565.746535][ T3988] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15607'. [ 566.058155][ T4006] netlink: 'syz.1.15614': attribute type 29 has an invalid length. [ 566.123787][ T4006] netlink: 'syz.1.15614': attribute type 29 has an invalid length. [ 566.187825][ T4010] netlink: 'syz.1.15614': attribute type 29 has an invalid length. [ 567.252374][ T4055] netlink: 'syz.0.15636': attribute type 29 has an invalid length. [ 567.334667][ T4055] netlink: 'syz.0.15636': attribute type 29 has an invalid length. [ 567.375971][ T4061] netlink: 'syz.0.15636': attribute type 29 has an invalid length. [ 567.445865][ T4065] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15643'. [ 567.516867][ T4068] netlink: 212928 bytes leftover after parsing attributes in process `syz.1.15651'. [ 568.722025][ T4121] netlink: 'syz.3.15666': attribute type 29 has an invalid length. [ 568.732944][ T4118] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15667'. [ 568.755839][ T4121] netlink: 'syz.3.15666': attribute type 29 has an invalid length. [ 568.769741][ T4121] netlink: 'syz.3.15666': attribute type 29 has an invalid length. [ 569.281386][ T4161] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15683'. [ 569.663671][ T4202] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.15695'. [ 570.090041][ T4273] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15701'. [ 570.326800][ T4283] netlink: 'syz.2.15709': attribute type 21 has an invalid length. [ 570.345650][ T4283] netlink: 'syz.2.15709': attribute type 1 has an invalid length. [ 570.462507][ T4294] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.15716'. [ 570.482653][ T4295] netlink: 'syz.4.15715': attribute type 10 has an invalid length. [ 570.502685][ T4295] netlink: 'syz.4.15715': attribute type 19 has an invalid length. [ 570.511602][ T4295] netlink: 156 bytes leftover after parsing attributes in process `syz.4.15715'. [ 570.956089][ T4334] netlink: 'syz.1.15735': attribute type 10 has an invalid length. [ 570.992889][ T4334] netlink: 'syz.1.15735': attribute type 19 has an invalid length. [ 571.045925][ T4334] netlink: 156 bytes leftover after parsing attributes in process `syz.1.15735'. [ 571.260136][ T4347] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.15741'. [ 572.005363][ T4366] netlink: 'syz.3.15750': attribute type 21 has an invalid length. [ 572.013511][ T4366] netlink: 'syz.3.15750': attribute type 1 has an invalid length. [ 572.331754][ T4385] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.15754'. [ 572.530998][ T4400] netlink: 'syz.2.15766': attribute type 17 has an invalid length. [ 572.676741][ T4407] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.15769'. [ 574.276269][ T4464] netlink: 'syz.3.15798': attribute type 17 has an invalid length. [ 574.923909][ T4496] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.15813'. [ 575.303980][ T4517] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.15824'. [ 575.673486][ T4536] validate_nla: 2 callbacks suppressed [ 575.673505][ T4536] netlink: 'syz.4.15832': attribute type 1 has an invalid length. [ 575.715763][ T4536] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.15832'. [ 576.928275][ T4612] netlink: 'syz.1.15870': attribute type 3 has an invalid length. [ 576.966448][ T4612] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15870'. [ 578.099963][ T4646] netlink: 'syz.0.15880': attribute type 17 has an invalid length. [ 578.256240][ T4659] netlink: 56 bytes leftover after parsing attributes in process `syz.1.15893'. [ 578.296918][ T4659] netlink: 56 bytes leftover after parsing attributes in process `syz.1.15893'. [ 578.355097][ T4665] netlink: 56 bytes leftover after parsing attributes in process `syz.1.15893'. [ 578.464240][ T4672] netlink: 'syz.3.15898': attribute type 3 has an invalid length. [ 578.503334][ T4672] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.15898'. [ 578.649982][ T4680] netlink: 'syz.2.15903': attribute type 15 has an invalid length. [ 578.665169][ T4680] netlink: 176 bytes leftover after parsing attributes in process `syz.2.15903'. [ 579.686945][ T4727] netlink: 56 bytes leftover after parsing attributes in process `syz.0.15924'. [ 579.850408][ T4738] netlink: 'syz.1.15927': attribute type 17 has an invalid length. [ 580.238527][ T4756] __nla_validate_parse: 2 callbacks suppressed [ 580.238550][ T4756] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15939'. [ 580.316483][ T4756] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15939'. [ 580.354946][ T4757] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15939'. [ 580.841621][ T4775] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.15959'. [ 581.276016][ T4810] netlink: 'syz.0.15966': attribute type 17 has an invalid length. [ 581.383097][ T4816] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.15967'. [ 581.652444][ T4828] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15974'. [ 581.661870][ T4828] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15974'. [ 581.673985][ T4828] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15974'. [ 581.807052][ T4833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 582.041302][ T4848] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.15984'. [ 582.138869][ T4856] netlink: 'syz.4.15989': attribute type 3 has an invalid length. [ 582.157621][ T4856] netlink: 'syz.4.15989': attribute type 8 has an invalid length. [ 582.173313][ T4856] netlink: 197324 bytes leftover after parsing attributes in process `syz.4.15989'. [ 582.282336][ T4864] netlink: 'syz.4.15994': attribute type 17 has an invalid length. [ 582.485820][ T4886] netlink: 'syz.1.16013': attribute type 21 has an invalid length. [ 583.231127][ T4920] netlink: 'syz.4.16018': attribute type 21 has an invalid length. [ 583.300499][ T4923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 583.790418][ T4968] netlink: 'syz.3.16041': attribute type 3 has an invalid length. [ 583.809725][ T4968] netlink: 'syz.3.16041': attribute type 8 has an invalid length. [ 583.930798][ T4974] netlink: 'syz.1.16045': attribute type 17 has an invalid length. [ 584.819045][ T5007] netlink: 'syz.2.16062': attribute type 17 has an invalid length. [ 585.272177][ T5049] __nla_validate_parse: 5 callbacks suppressed [ 585.272197][ T5049] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16080'. [ 585.296679][ T5050] netlink: 166 bytes leftover after parsing attributes in process `syz.3.16081'. [ 585.623663][ T5073] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.16092'. [ 586.251539][ T5118] netlink: 176 bytes leftover after parsing attributes in process `syz.4.16112'. [ 586.576284][ T5139] validate_nla: 8 callbacks suppressed [ 586.576303][ T5139] netlink: 'syz.2.16121': attribute type 3 has an invalid length. [ 586.590573][ T5139] netlink: 152988 bytes leftover after parsing attributes in process `syz.2.16121'. [ 587.477292][ T5159] netlink: 'syz.4.16128': attribute type 29 has an invalid length. [ 587.500162][ T5163] netlink: 'syz.0.16131': attribute type 21 has an invalid length. [ 587.518543][ T5163] netlink: 176 bytes leftover after parsing attributes in process `syz.0.16131'. [ 587.531423][ T5159] netlink: 'syz.4.16128': attribute type 29 has an invalid length. [ 587.574973][ T5164] netlink: 'syz.4.16128': attribute type 29 has an invalid length. [ 588.093829][ T5185] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.16143'. [ 588.214205][ T5190] netlink: 'syz.3.16144': attribute type 21 has an invalid length. [ 588.232082][ T5190] netlink: 176 bytes leftover after parsing attributes in process `syz.3.16144'. [ 588.332194][ T5194] netlink: 'syz.1.16146': attribute type 29 has an invalid length. [ 588.355592][ T5194] netlink: 'syz.1.16146': attribute type 29 has an invalid length. [ 588.391104][ T5194] netlink: 'syz.1.16146': attribute type 29 has an invalid length. [ 588.518520][ T5206] netlink: 'syz.1.16160': attribute type 3 has an invalid length. [ 588.594586][ T5206] netlink: 152988 bytes leftover after parsing attributes in process `syz.1.16160'. [ 589.020670][ T5239] netlink: 152988 bytes leftover after parsing attributes in process `syz.4.16165'. [ 591.085077][ T5301] __nla_validate_parse: 1 callbacks suppressed [ 591.085098][ T5301] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.16196'. [ 591.680138][ T5310] validate_nla: 3 callbacks suppressed [ 591.680157][ T5310] netlink: 'syz.1.16199': attribute type 3 has an invalid length. [ 591.719718][ T5310] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.16199'. [ 592.107009][ T5327] netlink: 'syz.0.16208': attribute type 3 has an invalid length. [ 592.162813][ T5327] netlink: 1034 bytes leftover after parsing attributes in process `syz.0.16208'. [ 592.516119][ T5354] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 592.555818][ T5352] netlink: 'syz.4.16217': attribute type 3 has an invalid length. [ 592.572849][ T5352] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.16217'. [ 593.003446][ T5394] netlink: 'syz.3.16238': attribute type 3 has an invalid length. [ 593.029899][ T5394] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.16238'. [ 594.226204][ T5442] netlink: 'syz.3.16260': attribute type 2 has an invalid length. [ 594.248635][ T5442] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.16260'. [ 595.651972][ T5483] netlink: 'syz.2.16279': attribute type 2 has an invalid length. [ 595.672716][ T5483] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.16279'. [ 595.793629][ T5496] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16287'. [ 600.114735][ T5595] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.16333'. [ 600.343612][ T5613] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.16342'. [ 600.613389][ T5619] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.16344'. [ 602.564665][ T5648] netlink: 'syz.4.16360': attribute type 3 has an invalid length. [ 602.579118][ T5648] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16360'. [ 602.751234][ T5663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.920284][ T5679] netlink: 'syz.1.16375': attribute type 3 has an invalid length. [ 603.943228][ T5679] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.16375'. [ 604.091148][ T5686] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.16378'. [ 604.400065][ T5715] netlink: 'syz.1.16395': attribute type 21 has an invalid length. [ 604.412002][ T5715] netlink: 128 bytes leftover after parsing attributes in process `syz.1.16395'. [ 604.426476][ T5715] netlink: 'syz.1.16395': attribute type 4 has an invalid length. [ 604.444836][ T5715] netlink: 'syz.1.16395': attribute type 5 has an invalid length. [ 604.463161][ T5715] netlink: 3 bytes leftover after parsing attributes in process `syz.1.16395'. [ 604.617465][ T5734] netlink: 'syz.3.16412': attribute type 9 has an invalid length. [ 604.631449][ T5734] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.16412'. [ 604.681103][ T5734] netlink: 'syz.3.16412': attribute type 9 has an invalid length. [ 604.689252][ T5734] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.16412'. [ 605.059722][ T5743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.255658][ T5759] netlink: 'syz.3.16413': attribute type 3 has an invalid length. [ 605.263592][ T5759] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16413'. [ 605.945443][ T5808] netlink: 'syz.0.16435': attribute type 3 has an invalid length. [ 605.966335][ T5808] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16435'. [ 606.098673][ T5813] netlink: 'syz.2.16442': attribute type 4 has an invalid length. [ 606.109502][ T5813] netlink: 152988 bytes leftover after parsing attributes in process `syz.2.16442'. [ 606.242013][ T5824] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.16445'. [ 606.278903][ T5826] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.16446'. [ 606.332851][ T5831] netlink: 128 bytes leftover after parsing attributes in process `syz.4.16449'. [ 606.356540][ T5831] netlink: 3 bytes leftover after parsing attributes in process `syz.4.16449'. [ 606.906446][ T5870] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.16466'. [ 606.919946][ T5873] netlink: 128 bytes leftover after parsing attributes in process `syz.0.16468'. [ 606.929355][ T5873] netlink: 3 bytes leftover after parsing attributes in process `syz.0.16468'. [ 607.760152][ T5880] validate_nla: 10 callbacks suppressed [ 607.760171][ T5880] netlink: 'syz.0.16472': attribute type 9 has an invalid length. [ 607.901630][ T5887] netlink: 'syz.0.16472': attribute type 9 has an invalid length. [ 608.311437][ T5904] netlink: 'syz.4.16481': attribute type 3 has an invalid length. [ 608.472338][ T5912] netlink: 'syz.4.16485': attribute type 3 has an invalid length. [ 608.900526][ T5938] netlink: 'syz.4.16496': attribute type 9 has an invalid length. [ 609.042655][ T5941] netlink: 'syz.4.16496': attribute type 9 has an invalid length. [ 609.358603][ T5955] netlink: 'syz.0.16503': attribute type 3 has an invalid length. [ 609.758881][ T5979] netlink: 'syz.1.16515': attribute type 9 has an invalid length. [ 609.936508][ T5980] netlink: 'syz.1.16515': attribute type 9 has an invalid length. [ 610.619313][ T6015] netlink: 'syz.2.16534': attribute type 9 has an invalid length. [ 610.653380][ T6015] __nla_validate_parse: 9 callbacks suppressed [ 610.653400][ T6015] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.16534'. [ 610.793120][ T6018] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.16534'. [ 611.769338][ T6053] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.16553'. [ 611.891492][ T6054] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.16553'. [ 612.317695][ T6082] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.16567'. [ 613.275802][ T6103] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.16576'. [ 613.309326][ T6103] openvswitch: netlink: Tunnel attr 14896 out of range max 16 [ 614.122717][ T6128] validate_nla: 6 callbacks suppressed [ 614.122758][ T6128] netlink: 'syz.3.16589': attribute type 10 has an invalid length. [ 614.150102][ T6128] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.16589'. [ 614.721048][ T6136] netlink: 'syz.2.16592': attribute type 1 has an invalid length. [ 614.745652][ T6137] netlink: 'syz.4.16600': attribute type 2 has an invalid length. [ 614.780896][ T6137] netlink: 'syz.4.16600': attribute type 3 has an invalid length. [ 614.819112][ T6137] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16600'. [ 614.834887][ T6144] netlink: 'syz.0.16595': attribute type 3 has an invalid length. [ 614.876088][ T6144] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.16595'. [ 614.933691][ T6149] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.16599'. [ 614.982295][ T6149] openvswitch: netlink: Tunnel attr 14896 out of range max 16 [ 615.103889][ T6165] netlink: 'syz.0.16605': attribute type 10 has an invalid length. [ 615.126173][ T6169] netlink: 'syz.3.16608': attribute type 1 has an invalid length. [ 615.192882][ T6171] netlink: 'syz.4.16609': attribute type 11 has an invalid length. [ 615.282585][ T6179] netlink: 'syz.0.16614': attribute type 3 has an invalid length. [ 615.400547][ T6189] openvswitch: netlink: Tunnel attr 14896 out of range max 16 [ 615.496753][ T6200] netlink: 'syz.4.16622': attribute type 10 has an invalid length. [ 615.685767][ T6215] __nla_validate_parse: 4 callbacks suppressed [ 615.685804][ T6215] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.16630'. [ 615.862116][ T6230] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.16648'. [ 615.912475][ T6235] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.16639'. [ 617.024257][ T6263] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.16654'. [ 617.149663][ T6267] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.16665'. [ 617.159049][ T6269] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.16657'. [ 617.296874][ T6283] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.16674'. [ 617.330719][ T6287] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16663'. [ 618.500276][ T6319] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16680'. [ 618.830093][ T6336] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.16690'. [ 620.990661][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16757'. [ 621.225642][ T6500] validate_nla: 16 callbacks suppressed [ 621.225660][ T6500] netlink: 'syz.0.16771': attribute type 29 has an invalid length. [ 621.251765][ T6500] netlink: 'syz.0.16771': attribute type 29 has an invalid length. [ 621.277710][ T6505] netlink: 'syz.0.16771': attribute type 29 has an invalid length. [ 621.489112][ T6523] netlink: 76 bytes leftover after parsing attributes in process `syz.2.16783'. [ 621.638065][ T6537] netlink: 'syz.2.16788': attribute type 29 has an invalid length. [ 621.665380][ T6537] netlink: 'syz.2.16788': attribute type 29 has an invalid length. [ 621.688102][ T6542] netlink: 'syz.2.16788': attribute type 29 has an invalid length. [ 621.969623][ T6567] netlink: 76 bytes leftover after parsing attributes in process `syz.3.16801'. [ 622.051210][ T6572] netlink: 'syz.1.16804': attribute type 29 has an invalid length. [ 622.101541][ T6572] netlink: 'syz.1.16804': attribute type 29 has an invalid length. [ 622.145767][ T6573] netlink: 'syz.1.16804': attribute type 29 has an invalid length. [ 622.448671][ T6599] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.16815'. [ 622.916095][ T6605] netlink: 76 bytes leftover after parsing attributes in process `syz.4.16816'. [ 623.012984][ T6615] netlink: 'syz.3.16822': attribute type 29 has an invalid length. [ 623.355277][ T6646] netlink: 76 bytes leftover after parsing attributes in process `syz.1.16836'. [ 623.710647][ T6681] netlink: 76 bytes leftover after parsing attributes in process `syz.0.16853'. [ 624.195808][ T6715] netlink: 'syz.1.16881': attribute type 11 has an invalid length. [ 624.208275][ T6715] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.16881'. [ 624.388412][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.395019][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.412694][ T6727] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.16877'. [ 626.204021][ T6827] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.16925'. [ 627.074606][ T6875] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16950'. [ 627.237266][ T6885] validate_nla: 6 callbacks suppressed [ 627.237287][ T6885] netlink: 'syz.2.16953': attribute type 3 has an invalid length. [ 627.256373][ T6885] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16953'. [ 627.567891][ T6909] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16965'. [ 627.725763][ T6921] netlink: 'syz.1.16970': attribute type 29 has an invalid length. [ 627.748055][ T6921] netlink: 'syz.1.16970': attribute type 29 has an invalid length. [ 627.766754][ T6921] netlink: 'syz.1.16970': attribute type 29 has an invalid length. [ 627.838002][ T6932] netlink: 'syz.4.16972': attribute type 3 has an invalid length. [ 627.854957][ T6932] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16972'. [ 627.982764][ T6943] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16981'. [ 628.045617][ T6942] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.16990'. [ 628.124996][ T6955] netlink: 'syz.2.16986': attribute type 29 has an invalid length. [ 628.135060][ T6955] netlink: 'syz.2.16986': attribute type 29 has an invalid length. [ 628.156360][ T6955] netlink: 'syz.2.16986': attribute type 29 has an invalid length. [ 628.836376][ T7005] netlink: 'syz.3.17021': attribute type 1 has an invalid length. [ 628.893560][ T7005] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.17021'. [ 629.050145][ T7022] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.17030'. [ 630.219568][ T7052] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17035'. [ 630.561005][ T7072] netlink: 'syz.1.17045': attribute type 10 has an invalid length. [ 631.318884][ T7135] __nla_validate_parse: 4 callbacks suppressed [ 631.318904][ T7135] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.17074'. [ 631.355933][ T7137] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.17073'. [ 631.463956][ T7145] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.17089'. [ 631.684608][ T7154] netlink: 168 bytes leftover after parsing attributes in process `syz.0.17083'. [ 633.149217][ T7194] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17100'. [ 633.543192][ T7215] validate_nla: 4 callbacks suppressed [ 633.543208][ T7215] netlink: 'syz.3.17122': attribute type 7 has an invalid length. [ 634.661594][ T7238] netlink: 'syz.0.17120': attribute type 27 has an invalid length. [ 634.693154][ T7238] netlink: 'syz.0.17120': attribute type 4 has an invalid length. [ 634.733329][ T7238] netlink: 152 bytes leftover after parsing attributes in process `syz.0.17120'. [ 634.956580][ T7255] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.17129'. [ 636.641145][ T7293] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.17146'. [ 636.702211][ T7299] netlink: 'syz.3.17148': attribute type 27 has an invalid length. [ 636.710007][ T7300] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.17147'. [ 636.712029][ T7299] netlink: 'syz.3.17148': attribute type 4 has an invalid length. [ 636.729324][ T7299] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17148'. [ 636.740869][ T7298] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.17158'. [ 637.090447][ T7326] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.17162'. [ 637.108010][ T7329] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.17163'. [ 637.155520][ T7332] netlink: 'syz.4.17164': attribute type 27 has an invalid length. [ 637.194434][ T7332] netlink: 'syz.4.17164': attribute type 4 has an invalid length. [ 637.202447][ T7332] netlink: 152 bytes leftover after parsing attributes in process `syz.4.17164'. [ 638.156781][ T7363] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.17180'. [ 639.359318][ T7455] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.17233'. [ 642.936252][ T7577] netlink: 'syz.2.17276': attribute type 17 has an invalid length. [ 642.953357][ T7577] netlink: 'syz.2.17276': attribute type 16 has an invalid length. [ 642.969458][ T7577] netlink: 152 bytes leftover after parsing attributes in process `syz.2.17276'. [ 642.982003][ T7579] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17277'. [ 642.995328][ T7579] netlink: 'syz.0.17277': attribute type 4 has an invalid length. [ 643.013532][ T7579] netlink: 1 bytes leftover after parsing attributes in process `syz.0.17277'. [ 643.195839][ T7598] C: renamed from team_slave_0 [ 643.226894][ T7598] netlink: 'syz.1.17298': attribute type 3 has an invalid length. [ 643.258251][ T7598] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17298'. [ 643.598542][ T7620] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 643.842183][ T7633] netlink: 'syz.1.17305': attribute type 29 has an invalid length. [ 643.938726][ T7639] netlink: 'syz.4.17308': attribute type 2 has an invalid length. [ 643.964525][ T7639] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.17308'. [ 644.613333][ T7683] netlink: 'syz.1.17327': attribute type 2 has an invalid length. [ 644.625947][ T7683] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.17327'. [ 645.126214][ T7698] netlink: 'syz.1.17333': attribute type 17 has an invalid length. [ 645.148391][ T7698] netlink: 'syz.1.17333': attribute type 16 has an invalid length. [ 645.166859][ T7698] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17333'. [ 645.210323][ T7704] C: renamed from team_slave_0 [ 645.271595][ T7704] netlink: 'syz.4.17336': attribute type 3 has an invalid length. [ 645.286547][ T7704] netlink: 152 bytes leftover after parsing attributes in process `syz.4.17336'. [ 645.461052][ T7718] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.17342'. [ 645.647973][ T7732] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 645.736865][ T7734] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17351'. [ 645.936731][ T7750] C: renamed from team_slave_0 [ 646.270868][ T7777] device lo left promiscuous mode [ 646.284742][ T7777] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 646.332982][ T7777] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 646.363671][ T7777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 646.457752][ T7786] C: renamed from team_slave_0 [ 647.556163][ T7860] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 647.571787][ T7860] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 647.835208][ T7865] chnl_net:caif_netlink_parms(): no params data found [ 647.879630][ T7865] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.886844][ T7865] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.895079][ T7865] device bridge_slave_0 entered promiscuous mode [ 647.906320][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.913501][ T7865] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.922480][ T7865] device bridge_slave_1 entered promiscuous mode [ 647.952971][ T7865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.967888][ T7865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.006140][ T7865] team0: Port device team_slave_0 added [ 648.014294][ T7865] team0: Port device team_slave_1 added [ 648.040168][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.048390][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.074835][ T7865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.087507][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.094684][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.120718][ T7865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.163007][ T7865] device hsr_slave_0 entered promiscuous mode [ 648.170154][ T7865] device hsr_slave_1 entered promiscuous mode [ 648.298137][ T7865] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 648.314633][ T7865] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 648.327727][ T7865] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 648.339097][ T7865] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 648.428804][ T7865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.449151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 648.457446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 648.470893][ T7865] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.482005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 648.492273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 648.501816][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.508957][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.518596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 648.532244][T15078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 648.541488][T15078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 648.550637][T15078] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.557787][T15078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.574504][T15078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 648.583892][T15078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 648.609467][T15078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 648.620992][T15078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 648.631462][T15078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 648.642181][T15078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 648.652611][T15078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 648.664286][T15078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 648.673041][T15078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 648.683513][T15078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 648.695185][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 648.706435][T15078] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 648.837188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 648.845532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 648.859350][ T7865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.039408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 649.048916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 649.072421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 649.082106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 649.095480][ T7865] device veth0_vlan entered promiscuous mode [ 649.105145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 649.113854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 649.129477][ T7865] device veth1_vlan entered promiscuous mode [ 649.158203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 649.167756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 649.177126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 649.186291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 649.198367][ T7865] device veth0_macvtap entered promiscuous mode [ 649.210325][ T7865] device veth1_macvtap entered promiscuous mode [ 649.226781][ T7865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.235928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 649.245061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 649.253250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 649.262470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 649.278511][ T7865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.286774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 649.295553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 649.317474][T15068] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.338353][ T7865] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.348657][ T7865] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.357900][ T7865] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.368241][ T7865] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.396970][T15068] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.459197][T15068] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.474046][ T1503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.483634][ T1503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.496497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 649.516285][T15068] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.531407][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.540585][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.550562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 649.744465][ T6986] Bluetooth: hci3: command 0x0409 tx timeout [ 650.731898][ T7929] validate_nla: 10 callbacks suppressed [ 650.731920][ T7929] netlink: 'syz.2.17431': attribute type 3 has an invalid length. [ 650.767833][ T7929] __nla_validate_parse: 8 callbacks suppressed [ 650.767849][ T7929] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.17431'. [ 651.315888][ T7957] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.17436'. [ 651.339731][ T7957] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 651.360536][ T7957] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 651.486483][ T7971] netlink: 'syz.3.17444': attribute type 29 has an invalid length. [ 651.542708][ T7971] netlink: 'syz.3.17444': attribute type 29 has an invalid length. [ 651.555982][ T7978] netlink: 'syz.3.17444': attribute type 29 has an invalid length. [ 651.824586][ T7365] Bluetooth: hci3: command 0x041b tx timeout [ 651.872844][ T8003] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17456'. [ 652.343471][ T8001] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.17457'. [ 652.374649][ T8001] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 652.434443][ T8001] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 652.566955][ T7992] netlink: 'syz.5.17452': attribute type 10 has an invalid length. [ 652.602303][ T7992] netlink: 40 bytes leftover after parsing attributes in process `syz.5.17452'. [ 652.637842][ T7992] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 652.655333][ T7992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 652.679169][ T8003] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17456'. [ 652.909154][ T8027] netlink: 'syz.3.17466': attribute type 2 has an invalid length. [ 652.918349][ T8027] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.17466'. [ 653.229324][ T8050] netlink: 'syz.1.17474': attribute type 29 has an invalid length. [ 653.904559][ T6986] Bluetooth: hci3: command 0x040f tx timeout [ 653.936528][ T8050] netlink: 'syz.1.17474': attribute type 29 has an invalid length. [ 653.955936][ T8053] netlink: 'syz.1.17474': attribute type 29 has an invalid length. [ 654.417219][ T8100] netlink: 'syz.5.17492': attribute type 29 has an invalid length. [ 654.762491][ T8117] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.17495'. [ 654.821993][ T8117] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 654.889772][ T8117] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 655.039270][T15068] device hsr_slave_1 left promiscuous mode [ 655.063093][ T8134] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.17502'. [ 655.075463][T15068] device veth1_vlan left promiscuous mode [ 655.081861][T15068] device veth0_vlan left promiscuous mode [ 655.100134][ T8136] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.17517'. [ 655.499032][T15068] device geneve1 left promiscuous mode [ 655.509998][T15068] team0 (unregistering): Port device geneve1 removed [ 655.521969][T15068] device geneve0 left promiscuous mode [ 655.529209][T15068] team0 (unregistering): Port device geneve0 removed [ 655.591381][T15068] device team_slave_1 left promiscuous mode [ 655.602028][T15068] team0 (unregistering): Port device team_slave_1 removed [ 655.812618][ T8167] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.17515'. [ 655.856609][ T8167] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 655.867680][ T8167] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 655.880002][ T8171] validate_nla: 3 callbacks suppressed [ 655.880019][ T8171] netlink: 'syz.2.17520': attribute type 2 has an invalid length. [ 655.916101][ T8171] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.17520'. [ 655.984749][ T7365] Bluetooth: hci3: command 0x0419 tx timeout [ 656.106454][ T8184] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 657.022944][ T8211] netlink: 'syz.2.17532': attribute type 1 has an invalid length. [ 657.063210][ T8211] netlink: 'syz.2.17532': attribute type 3 has an invalid length. [ 657.092153][ T8211] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17532'. [ 657.415452][ T8239] netlink: 'syz.3.17551': attribute type 27 has an invalid length. [ 657.464564][ T8239] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17551'. [ 657.473775][ T8239] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 657.838381][ T8268] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17553'. [ 658.853859][ T8314] netlink: 'syz.2.17568': attribute type 27 has an invalid length. [ 658.882214][ T8318] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.17567'. [ 658.891734][ T8314] netlink: 152 bytes leftover after parsing attributes in process `syz.2.17568'. [ 658.891768][ T8314] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 659.176973][ T8330] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.17575'. [ 659.234710][ T8330] netlink: del zone limit has 8 unknown bytes [ 659.802419][ T8366] netlink: 399 bytes leftover after parsing attributes in process `syz.3.17591'. [ 661.014906][ T8438] netlink: 'syz.1.17612': attribute type 1 has an invalid length. [ 661.023103][ T8438] netlink: 'syz.1.17612': attribute type 3 has an invalid length. [ 661.105728][ T8438] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17612'. [ 661.687880][ T8445] netlink: 60 bytes leftover after parsing attributes in process `syz.5.17613'. [ 661.730116][ T8452] netlink: 399 bytes leftover after parsing attributes in process `syz.0.17616'. [ 661.744191][ T8445] netlink: 60 bytes leftover after parsing attributes in process `syz.5.17613'. [ 661.773534][ T8453] netlink: 60 bytes leftover after parsing attributes in process `syz.5.17613'. [ 662.463451][ T8491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17631'. [ 662.475785][ T8491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17631'. [ 662.520841][ T8495] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17631'. [ 662.590833][ T8497] netlink: 399 bytes leftover after parsing attributes in process `syz.5.17635'. [ 663.170212][ T8540] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17652'. [ 664.699084][ T8602] netlink: 'syz.5.17682': attribute type 17 has an invalid length. [ 664.715566][ T8602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 665.440566][ T8620] tc_dump_action: action bad kind [ 666.119936][ T8661] sock: sock_set_timeout: `syz.5.17705' (pid 8661) tries to set negative timeout [ 666.755862][ T8698] sock: sock_set_timeout: `syz.1.17721' (pid 8698) tries to set negative timeout [ 667.048649][ T8720] netlink: 'syz.2.17733': attribute type 8 has an invalid length. [ 667.078687][ T8720] __nla_validate_parse: 8 callbacks suppressed [ 667.078707][ T8720] netlink: 197324 bytes leftover after parsing attributes in process `syz.2.17733'. [ 667.258695][ T8732] netlink: 'syz.3.17749': attribute type 8 has an invalid length. [ 667.277025][ T8732] netlink: 197324 bytes leftover after parsing attributes in process `syz.3.17749'. [ 667.432473][ T8747] sock: sock_set_timeout: `syz.2.17741' (pid 8747) tries to set negative timeout [ 667.690040][ T8757] netlink: 'syz.5.17746': attribute type 25 has an invalid length. [ 667.708460][ T8757] netlink: 2418 bytes leftover after parsing attributes in process `syz.5.17746'. [ 667.921778][ T8767] netlink: 'syz.1.17753': attribute type 8 has an invalid length. [ 667.987294][ T8767] netlink: 197324 bytes leftover after parsing attributes in process `syz.1.17753'. [ 668.162090][ T8778] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.17757'. [ 668.217040][ T8778] netlink: 'syz.2.17757': attribute type 2 has an invalid length. [ 668.839066][ T8824] netlink: 'syz.0.17785': attribute type 25 has an invalid length. [ 668.847506][ T8824] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.17785'. [ 669.485942][ T8855] netlink: 'syz.1.17788': attribute type 25 has an invalid length. [ 669.520201][ T8855] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.17788'. [ 670.168470][ T8883] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.17800'. [ 670.201736][ T8883] netlink: 'syz.0.17800': attribute type 2 has an invalid length. [ 670.618160][ T8904] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.17816'. [ 671.796954][ T8959] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.17826'. [ 672.114164][ T8975] __nla_validate_parse: 1 callbacks suppressed [ 672.114183][ T8975] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17835'. [ 674.940518][ T9130] netlink: 'syz.1.17893': attribute type 1 has an invalid length. [ 674.990031][ T9130] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.17893'. [ 675.947751][ T9179] netlink: 'syz.3.17910': attribute type 6 has an invalid length. [ 675.982121][ T9179] netlink: 168 bytes leftover after parsing attributes in process `syz.3.17910'. [ 676.603596][ T9212] netlink: 'syz.0.17921': attribute type 1 has an invalid length. [ 676.656496][ T9212] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.17921'. [ 676.838576][ T9233] netlink: set zone limit has 8 unknown bytes [ 679.977642][ T9438] netlink: 'syz.3.18005': attribute type 21 has an invalid length. [ 680.013815][ T9438] netlink: 'syz.3.18005': attribute type 6 has an invalid length. [ 680.023965][ T9438] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18005'. [ 680.158035][ T9453] netlink: 'syz.3.18013': attribute type 1 has an invalid length. [ 680.168041][ T9453] netlink: 5 bytes leftover after parsing attributes in process `syz.3.18013'. [ 680.444802][ T9477] netlink: 'syz.1.18026': attribute type 21 has an invalid length. [ 680.453468][ T9477] netlink: 'syz.1.18026': attribute type 6 has an invalid length. [ 680.462966][ T9477] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18026'. [ 680.874766][ T9504] netlink: 'syz.0.18040': attribute type 21 has an invalid length. [ 680.904783][ T9504] netlink: 'syz.0.18040': attribute type 6 has an invalid length. [ 680.913042][ T9504] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18040'. [ 681.947738][ T9557] netlink: 'syz.2.18059': attribute type 21 has an invalid length. [ 681.982449][ T9557] netlink: 'syz.2.18059': attribute type 6 has an invalid length. [ 682.007436][ T9557] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18059'. [ 682.206497][ T9569] netlink: 'syz.0.18068': attribute type 1 has an invalid length. [ 682.258548][ T9569] netlink: 5 bytes leftover after parsing attributes in process `syz.0.18068'. [ 682.805603][ T9597] netlink: 5 bytes leftover after parsing attributes in process `syz.2.18090'. [ 682.827378][ T9600] netlink: 132 bytes leftover after parsing attributes in process `syz.5.18081'. [ 683.568792][ T9634] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18098'. [ 683.973214][ T9641] delete_channel: no stack [ 684.257601][ T9655] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.18109'. [ 685.018348][ T9678] validate_nla: 7 callbacks suppressed [ 685.018394][ T9678] netlink: 'syz.2.18118': attribute type 21 has an invalid length. [ 685.175406][ T9678] netlink: 'syz.2.18118': attribute type 6 has an invalid length. [ 685.216174][ T9678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18118'. [ 685.383345][ T9686] netlink: 'syz.5.18123': attribute type 1 has an invalid length. [ 685.415652][ T9686] netlink: 5 bytes leftover after parsing attributes in process `syz.5.18123'. [ 685.733134][ T9702] netlink: 'syz.0.18129': attribute type 1 has an invalid length. [ 685.813677][ T9702] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.18129'. [ 685.837425][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.843825][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.907735][ T9711] netlink: 'syz.3.18136': attribute type 21 has an invalid length. [ 686.076003][ T9717] netlink: 'syz.2.18135': attribute type 21 has an invalid length. [ 686.427663][ T9724] netlink: 'syz.1.18140': attribute type 21 has an invalid length. [ 686.892332][ T9740] netlink: 'syz.5.18147': attribute type 21 has an invalid length. [ 686.924709][ T9740] netlink: 'syz.5.18147': attribute type 6 has an invalid length. [ 687.005582][ T9740] netlink: 132 bytes leftover after parsing attributes in process `syz.5.18147'. [ 687.086213][ T9742] netlink: 'syz.0.18158': attribute type 21 has an invalid length. [ 687.142488][ T9746] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.18149'. [ 687.711219][ T9770] netlink: 132 bytes leftover after parsing attributes in process `syz.5.18163'. [ 688.671552][ T9802] netlink: 132 bytes leftover after parsing attributes in process `syz.5.18178'. [ 689.553057][ T9830] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.18192'. [ 690.041547][ T9848] validate_nla: 8 callbacks suppressed [ 690.041567][ T9848] netlink: 'syz.5.18210': attribute type 4 has an invalid length. [ 690.071503][ T9848] netlink: 'syz.5.18210': attribute type 1 has an invalid length. [ 690.091348][ T9848] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.18210'. [ 691.200329][ T9902] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.18226'. [ 691.420422][ T9918] netlink: 'syz.2.18234': attribute type 2 has an invalid length. [ 691.458942][ T9918] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.18234'. [ 691.600492][ T9936] netlink: 'syz.2.18245': attribute type 4 has an invalid length. [ 691.614001][ T9936] netlink: 'syz.2.18245': attribute type 1 has an invalid length. [ 691.624475][ T9936] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.18245'. [ 692.062204][ T9948] netlink: 'syz.2.18250': attribute type 21 has an invalid length. [ 692.075665][ T9948] netlink: 'syz.2.18250': attribute type 6 has an invalid length. [ 692.096546][ T9948] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18250'. [ 692.356886][ T9964] netlink: 'syz.2.18266': attribute type 11 has an invalid length. [ 692.367526][ T9964] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18266'. [ 692.381388][ T9965] netlink: 'syz.0.18254': attribute type 2 has an invalid length. [ 692.390379][ T9965] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.18254'. [ 692.747863][ T9971] netlink: 'syz.1.18256': attribute type 4 has an invalid length. [ 692.774442][ T9971] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.18256'. [ 692.831199][ T9979] netlink: 132 bytes leftover after parsing attributes in process `syz.5.18263'. [ 692.883392][ T9982] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.18265'. [ 692.935493][ T9987] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18279'. [ 695.215548][T10162] validate_nla: 12 callbacks suppressed [ 695.215568][T10162] netlink: 'syz.5.18351': attribute type 29 has an invalid length. [ 695.238211][T10162] netlink: 'syz.5.18351': attribute type 29 has an invalid length. [ 695.250937][T10162] netlink: 'syz.5.18351': attribute type 29 has an invalid length. [ 695.295640][T10165] netlink: 'syz.1.18349': attribute type 1 has an invalid length. [ 695.322738][T10165] netlink: 'syz.1.18349': attribute type 1 has an invalid length. [ 695.836974][T10190] netlink: 'syz.2.18363': attribute type 29 has an invalid length. [ 695.847061][T10190] netlink: 'syz.2.18363': attribute type 29 has an invalid length. [ 695.904683][T10190] netlink: 'syz.2.18363': attribute type 29 has an invalid length. [ 695.982970][T10202] netlink: 'syz.1.18380': attribute type 29 has an invalid length. [ 696.014762][T10202] netlink: 'syz.1.18380': attribute type 29 has an invalid length. [ 697.118910][T10246] __nla_validate_parse: 7 callbacks suppressed [ 697.118931][T10246] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.18391'. [ 697.164533][T10248] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18392'. [ 697.186124][T10248] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18392'. [ 697.213022][T10248] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18392'. [ 698.315123][T10341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18435'. [ 698.335777][T10341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18435'. [ 698.358387][T10341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18435'. [ 698.643767][T10364] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.18448'. [ 698.727793][T10372] netlink: 60 bytes leftover after parsing attributes in process `syz.5.18450'. [ 698.775682][T10372] netlink: 60 bytes leftover after parsing attributes in process `syz.5.18450'. [ 700.300731][T10471] validate_nla: 5 callbacks suppressed [ 700.300749][T10471] netlink: 'syz.5.18500': attribute type 1 has an invalid length. [ 701.177017][T10504] netlink: 'syz.3.18514': attribute type 3 has an invalid length. [ 702.276176][T10524] __nla_validate_parse: 5 callbacks suppressed [ 702.276197][T10524] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.18526'. [ 702.279409][T10528] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.18528'. [ 702.788354][T10560] netlink: 'syz.2.18542': attribute type 3 has an invalid length. [ 702.843146][T10560] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.18542'. [ 703.244794][T10570] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18549'. [ 703.468749][T10586] netlink: 'syz.1.18557': attribute type 27 has an invalid length. [ 703.477195][T10586] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.18557'. [ 703.997218][T10610] netlink: 'syz.2.18577': attribute type 17 has an invalid length. [ 704.021132][T10610] netlink: 148 bytes leftover after parsing attributes in process `syz.2.18577'. [ 704.139424][T10619] netlink: 'syz.3.18582': attribute type 17 has an invalid length. [ 704.213556][T10619] netlink: 148 bytes leftover after parsing attributes in process `syz.3.18582'. [ 704.280062][T10621] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18570'. [ 704.750397][T10642] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.18583'. [ 704.952170][T10658] netlink: 'syz.2.18588': attribute type 3 has an invalid length. [ 704.994954][T10662] netlink: 'syz.0.18590': attribute type 17 has an invalid length. [ 705.009953][T10658] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.18588'. [ 705.565521][T10702] netlink: 'syz.5.18608': attribute type 17 has an invalid length. [ 705.672700][T10712] netlink: 'syz.0.18615': attribute type 10 has an invalid length. [ 706.108821][T10741] netlink: 'syz.0.18634': attribute type 3 has an invalid length. [ 706.136713][T10747] netlink: 'syz.1.18628': attribute type 17 has an invalid length. [ 706.397467][T10765] netlink: 'syz.1.18643': attribute type 12 has an invalid length. [ 706.448033][T10770] netlink: 'syz.2.18644': attribute type 29 has an invalid length. [ 706.504646][T10770] netlink: 'syz.2.18644': attribute type 29 has an invalid length. [ 706.520575][T10777] netlink: 'syz.1.18648': attribute type 3 has an invalid length. [ 706.540236][T10776] netlink: 'syz.2.18644': attribute type 29 has an invalid length. [ 706.719046][T10791] netlink: 'syz.3.18665': attribute type 3 has an invalid length. [ 707.833091][T10829] __nla_validate_parse: 10 callbacks suppressed [ 707.833113][T10829] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.18673'. [ 708.784605][T10896] netlink: 55 bytes leftover after parsing attributes in process `syz.5.18704'. [ 709.147052][T10926] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18718'. [ 710.211169][T10949] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.18729'. [ 711.337738][T10981] validate_nla: 10 callbacks suppressed [ 711.337758][T10981] netlink: 'syz.2.18746': attribute type 12 has an invalid length. [ 711.357689][T10981] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.18746'. [ 711.630040][T11004] netlink: 'syz.1.18755': attribute type 3 has an invalid length. [ 711.696939][T11004] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18755'. [ 711.729695][T11008] netlink: 2 bytes leftover after parsing attributes in process `syz.5.18759'. [ 711.766036][T11008] device batadv_slave_1 entered promiscuous mode [ 712.621341][T11016] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.18763'. [ 715.034557][T11162] netlink: 2 bytes leftover after parsing attributes in process `syz.0.18831'. [ 715.067083][T11162] device batadv_slave_1 entered promiscuous mode [ 715.140553][T11166] netlink: 'syz.5.18834': attribute type 29 has an invalid length. [ 715.172559][T11166] netlink: 'syz.5.18834': attribute type 29 has an invalid length. [ 715.200357][T11169] netlink: 'syz.5.18834': attribute type 29 has an invalid length. [ 715.841255][T11199] netlink: 2 bytes leftover after parsing attributes in process `syz.2.18847'. [ 715.920016][T11199] device batadv_slave_1 entered promiscuous mode [ 717.127856][T11233] netlink: 'syz.0.18874': attribute type 29 has an invalid length. [ 717.167240][T11233] netlink: 'syz.0.18874': attribute type 29 has an invalid length. [ 717.186168][T11236] netlink: 'syz.0.18874': attribute type 29 has an invalid length. [ 717.228622][T11235] netlink: 2 bytes leftover after parsing attributes in process `syz.1.18864'. [ 717.248511][T11235] device batadv_slave_1 entered promiscuous mode [ 718.584117][T11271] netlink: 'syz.2.18881': attribute type 29 has an invalid length. [ 718.689926][T11271] netlink: 'syz.2.18881': attribute type 29 has an invalid length. [ 718.710446][T11276] netlink: 'syz.2.18881': attribute type 29 has an invalid length. [ 718.941558][T11284] netlink: 'syz.3.18889': attribute type 10 has an invalid length. [ 719.285970][T11293] netlink: 'syz.5.18893': attribute type 10 has an invalid length. [ 720.407248][T11318] netlink: 'syz.1.18903': attribute type 10 has an invalid length. [ 720.473292][T11324] netlink: 'syz.0.18906': attribute type 2 has an invalid length. [ 720.493172][T11324] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.18906'. [ 720.546527][T11328] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.18910'. [ 720.605321][T11332] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.18912'. [ 721.741950][T11375] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.18927'. [ 722.162120][T11389] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18934'. [ 722.217725][T11389] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18934'. [ 722.269815][T11390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18934'. [ 722.964223][T11404] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.18946'. [ 723.089671][T11414] validate_nla: 3 callbacks suppressed [ 723.089691][T11414] netlink: 'syz.3.18950': attribute type 1 has an invalid length. [ 723.135038][T11414] netlink: 199572 bytes leftover after parsing attributes in process `syz.3.18950'. [ 723.221557][T11426] netlink: 'syz.2.18954': attribute type 4 has an invalid length. [ 723.236114][T11426] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.18954'. [ 724.191879][T11453] netlink: 'syz.2.18968': attribute type 1 has an invalid length. [ 724.297650][T11458] netlink: 'syz.1.18980': attribute type 1 has an invalid length. [ 725.721324][T11509] __nla_validate_parse: 3 callbacks suppressed [ 725.721341][T11509] netlink: 60 bytes leftover after parsing attributes in process `syz.5.19004'. [ 725.794496][T11509] netlink: 60 bytes leftover after parsing attributes in process `syz.5.19004'. [ 725.833960][T11516] netlink: 60 bytes leftover after parsing attributes in process `syz.5.19004'. [ 726.684714][T11527] netlink: 14560 bytes leftover after parsing attributes in process `syz.5.19001'. [ 727.086528][T11567] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.19020'. [ 727.636095][T11618] netlink: 140 bytes leftover after parsing attributes in process `syz.2.19043'. [ 728.557560][T11692] netlink: 140 bytes leftover after parsing attributes in process `syz.1.19090'. [ 729.339195][T11725] netlink: 140 bytes leftover after parsing attributes in process `syz.5.19096'. [ 729.566525][T11739] ref_ctr_offset mismatch. inode: 0x4af3 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 729.670680][T11749] netlink: 'syz.2.19106': attribute type 21 has an invalid length. [ 729.710289][T11751] netlink: 'syz.3.19107': attribute type 27 has an invalid length. [ 730.341042][T11776] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.19121'. [ 730.490275][T11780] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.19132'. [ 730.779587][T11798] netlink: 'syz.2.19129': attribute type 27 has an invalid length. [ 730.878853][T11808] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.19134'. [ 730.929313][T11812] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.19137'. [ 730.966962][T11808] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 731.014110][T11808] CPU: 0 PID: 11808 Comm: syz.2.19134 Not tainted syzkaller #0 [ 731.021734][T11808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 731.031865][T11808] Call Trace: [ 731.035188][T11808] [ 731.038162][T11808] dump_stack_lvl+0x168/0x230 [ 731.042914][T11808] ? show_regs_print_info+0x20/0x20 [ 731.048223][T11808] ? load_image+0x3b0/0x3b0 [ 731.052907][T11808] sysfs_warn_dup+0x8a/0xa0 [ 731.057480][T11808] sysfs_do_create_link_sd+0xc0/0x110 [ 731.063011][T11808] device_add+0x7ed/0xfb0 [ 731.067508][T11808] wiphy_register+0x1d67/0x2b20 [ 731.072460][T11808] ? cfg80211_event_work+0x40/0x40 [ 731.077637][T11808] ? minstrel_ht_alloc+0x808/0x980 [ 731.082828][T11808] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 731.088988][T11808] ieee80211_register_hw+0x29b1/0x39d0 [ 731.094546][T11808] ? ieee80211_tasklet_handler+0x20/0x20 [ 731.100689][T11808] ? rcu_is_watching+0x11/0xa0 [ 731.105515][T11808] ? memset+0x1e/0x40 [ 731.109555][T11808] ? hrtimer_init+0x10c/0x220 [ 731.114294][T11808] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 731.120113][T11808] hwsim_new_radio_nl+0xa6f/0xc40 [ 731.125225][T11808] genl_rcv_msg+0xbc6/0xf40 [ 731.129811][T11808] ? genl_bind+0x370/0x370 [ 731.134303][T11808] ? verify_lock_unused+0x140/0x140 [ 731.139549][T11808] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 731.144810][T11808] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 731.150599][T11808] ? perf_trace_lock+0x2ec/0x370 [ 731.155769][T11808] ? hwsim_tx_info_frame_received_nl+0x1010/0x1010 [ 731.162363][T11808] netlink_rcv_skb+0x1e0/0x430 [ 731.167185][T11808] ? genl_bind+0x370/0x370 [ 731.171657][T11808] ? netlink_ack+0xb60/0xb60 [ 731.176312][T11808] ? __lock_acquire+0x7c60/0x7c60 [ 731.181402][T11808] ? preempt_count_add+0x8d/0x190 [ 731.186584][T11808] ? down_read+0x1aa/0x2e0 [ 731.191079][T11808] genl_rcv+0x24/0x40 [ 731.195135][T11808] netlink_unicast+0x774/0x920 [ 731.199994][T11808] netlink_sendmsg+0x8ab/0xbc0 [ 731.204842][T11808] ? netlink_getsockopt+0x560/0x560 [ 731.210108][T11808] ? aa_sock_msg_perm+0x94/0x150 [ 731.215208][T11808] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 731.220547][T11808] ? security_socket_sendmsg+0x7c/0xa0 [ 731.226132][T11808] ? netlink_getsockopt+0x560/0x560 [ 731.231388][T11808] ____sys_sendmsg+0x5a2/0x8c0 [ 731.236228][T11808] ? memset+0x1e/0x40 [ 731.240274][T11808] ? __sys_sendmsg_sock+0x30/0x30 [ 731.245381][T11808] ? import_iovec+0x6f/0xa0 [ 731.249958][T11808] ___sys_sendmsg+0x1f0/0x260 [ 731.254721][T11808] ? __sys_sendmsg+0x250/0x250 [ 731.259578][T11808] ? trace_event_raw_event_lock+0x250/0x250 [ 731.265591][T11808] ? __fdget+0x18b/0x210 [ 731.269910][T11808] __se_sys_sendmsg+0x190/0x250 [ 731.274913][T11808] ? __x64_sys_sendmsg+0x80/0x80 [ 731.279897][T11808] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 731.285986][T11808] ? lockdep_hardirqs_on+0x94/0x140 [ 731.291255][T11808] do_syscall_64+0x4c/0xa0 [ 731.295717][T11808] ? clear_bhb_loop+0x30/0x80 [ 731.300439][T11808] ? clear_bhb_loop+0x30/0x80 [ 731.305198][T11808] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 731.311150][T11808] RIP: 0033:0x7f37cc571ec9 [ 731.315620][T11808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.335597][T11808] RSP: 002b:00007f37ca7d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.344079][T11808] RAX: ffffffffffffffda RBX: 00007f37cc7c8fa0 RCX: 00007f37cc571ec9 [ 731.352104][T11808] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 731.360125][T11808] RBP: 00007f37cc5f4f91 R08: 0000000000000000 R09: 0000000000000000 [ 731.368174][T11808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.376191][T11808] R13: 00007f37cc7c9038 R14: 00007f37cc7c8fa0 R15: 00007fff824d0418 [ 731.384347][T11808] [ 731.390927][T11820] ref_ctr_offset mismatch. inode: 0x4ac0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 731.700780][T11831] netlink: 'syz.5.19146': attribute type 27 has an invalid length. [ 731.731524][T11837] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.19150'. [ 731.999163][T11850] netlink: 'syz.3.19156': attribute type 2 has an invalid length. [ 732.218026][T11860] netlink: 'syz.3.19161': attribute type 1 has an invalid length. [ 732.254179][T11860] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.19161'. [ 732.293830][T11862] netlink: 'syz.0.19162': attribute type 11 has an invalid length. [ 732.547758][T11869] netlink: 'syz.1.19163': attribute type 27 has an invalid length. [ 732.953075][T11876] netlink: 'syz.2.19168': attribute type 153 has an invalid length. [ 732.991323][T11876] netlink: 69544 bytes leftover after parsing attributes in process `syz.2.19168'. [ 733.034197][T11884] netlink: 'syz.0.19171': attribute type 2 has an invalid length. [ 733.202213][T11892] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.19174'. [ 733.238149][T11892] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 733.304579][T11892] openvswitch: netlink: Message has 1 unknown bytes. [ 733.686156][T11915] ref_ctr_offset mismatch. inode: 0x75e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 733.732029][T11914] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.19187'. [ 734.062848][T11930] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.19194'. [ 734.076230][T11930] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 734.090467][T11930] openvswitch: netlink: Message has 1 unknown bytes. [ 734.542254][T11946] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.19202'. [ 734.667917][T11959] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.19206'. [ 734.694374][T11959] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 734.702770][T11959] openvswitch: netlink: Message has 1 unknown bytes. [ 735.447024][T11985] validate_nla: 8 callbacks suppressed [ 735.447076][T11985] netlink: 'syz.2.19220': attribute type 2 has an invalid length. [ 735.562517][T11995] netlink: 'syz.2.19224': attribute type 29 has an invalid length. [ 735.573039][T11995] netlink: 'syz.2.19224': attribute type 29 has an invalid length. [ 735.585250][T11995] netlink: 'syz.2.19224': attribute type 29 has an invalid length. [ 735.619293][T11999] netlink: 'syz.5.19225': attribute type 3 has an invalid length. [ 735.674683][T11999] netlink: 'syz.5.19225': attribute type 1 has an invalid length. [ 735.995646][T12029] netlink: 'syz.1.19241': attribute type 29 has an invalid length. [ 736.036940][T12029] netlink: 'syz.1.19241': attribute type 29 has an invalid length. [ 736.049176][T12037] netlink: 'syz.1.19241': attribute type 29 has an invalid length. [ 736.061466][T12033] __nla_validate_parse: 1 callbacks suppressed [ 736.061486][T12033] netlink: 64 bytes leftover after parsing attributes in process `syz.3.19244'. [ 736.453676][T12068] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.19258'. [ 736.477577][T12070] netlink: 'syz.5.19257': attribute type 29 has an invalid length. [ 736.489763][T12068] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 737.045633][T12100] netlink: 64 bytes leftover after parsing attributes in process `syz.0.19284'. [ 737.437123][T12130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19282'. [ 737.454114][T12130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19282'. [ 737.482972][T12122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19282'. [ 737.951350][T12169] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.19306'. [ 738.109073][T12178] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.19311'. [ 738.686483][T12216] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19329'. [ 738.715961][T12216] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 738.731821][T12216] CPU: 1 PID: 12216 Comm: syz.1.19329 Not tainted syzkaller #0 [ 738.739442][T12216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 738.749541][T12216] Call Trace: [ 738.752868][T12216] [ 738.755951][T12216] dump_stack_lvl+0x168/0x230 [ 738.760691][T12216] ? show_regs_print_info+0x20/0x20 [ 738.765945][T12216] ? load_image+0x3b0/0x3b0 [ 738.770528][T12216] sysfs_warn_dup+0x8a/0xa0 [ 738.775087][T12216] sysfs_do_create_link_sd+0xc0/0x110 [ 738.780526][T12216] device_add+0x7ed/0xfb0 [ 738.784934][T12216] wiphy_register+0x1d67/0x2b20 [ 738.789880][T12216] ? cfg80211_event_work+0x40/0x40 [ 738.795041][T12216] ? minstrel_ht_alloc+0x808/0x980 [ 738.800213][T12216] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 738.806539][T12216] ieee80211_register_hw+0x29b1/0x39d0 [ 738.812187][T12216] ? ieee80211_tasklet_handler+0x20/0x20 [ 738.817883][T12216] ? rcu_is_watching+0x11/0xa0 [ 738.822697][T12216] ? memset+0x1e/0x40 [ 738.826824][T12216] ? hrtimer_init+0x10c/0x220 [ 738.831776][T12216] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 738.837594][T12216] hwsim_new_radio_nl+0xa6f/0xc40 [ 738.842695][T12216] genl_rcv_msg+0xbc6/0xf40 [ 738.847263][T12216] ? genl_bind+0x370/0x370 [ 738.851745][T12216] ? verify_lock_unused+0x140/0x140 [ 738.856984][T12216] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 738.862222][T12216] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 738.867999][T12216] ? perf_trace_lock+0x2ec/0x370 [ 738.873131][T12216] ? hwsim_tx_info_frame_received_nl+0x1010/0x1010 [ 738.879720][T12216] netlink_rcv_skb+0x1e0/0x430 [ 738.884540][T12216] ? genl_bind+0x370/0x370 [ 738.888998][T12216] ? netlink_ack+0xb60/0xb60 [ 738.893816][T12216] ? __lock_acquire+0x7c60/0x7c60 [ 738.898899][T12216] ? preempt_count_add+0x8d/0x190 [ 738.903960][T12216] ? down_read+0x1aa/0x2e0 [ 738.908424][T12216] genl_rcv+0x24/0x40 [ 738.912443][T12216] netlink_unicast+0x774/0x920 [ 738.917354][T12216] netlink_sendmsg+0x8ab/0xbc0 [ 738.922179][T12216] ? netlink_getsockopt+0x560/0x560 [ 738.927415][T12216] ? aa_sock_msg_perm+0x94/0x150 [ 738.932389][T12216] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 738.937704][T12216] ? security_socket_sendmsg+0x7c/0xa0 [ 738.943196][T12216] ? netlink_getsockopt+0x560/0x560 [ 738.948430][T12216] ____sys_sendmsg+0x5a2/0x8c0 [ 738.953246][T12216] ? memset+0x1e/0x40 [ 738.957265][T12216] ? __sys_sendmsg_sock+0x30/0x30 [ 738.962345][T12216] ? import_iovec+0x6f/0xa0 [ 738.966909][T12216] ___sys_sendmsg+0x1f0/0x260 [ 738.971658][T12216] ? __sys_sendmsg+0x250/0x250 [ 738.976492][T12216] ? trace_event_raw_event_lock+0x250/0x250 [ 738.982481][T12216] ? __fdget+0x18b/0x210 [ 738.986843][T12216] __se_sys_sendmsg+0x190/0x250 [ 738.991754][T12216] ? __x64_sys_sendmsg+0x80/0x80 [ 738.996730][T12216] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 739.002872][T12216] ? lockdep_hardirqs_on+0x94/0x140 [ 739.008121][T12216] do_syscall_64+0x4c/0xa0 [ 739.012569][T12216] ? clear_bhb_loop+0x30/0x80 [ 739.017401][T12216] ? clear_bhb_loop+0x30/0x80 [ 739.022121][T12216] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 739.028043][T12216] RIP: 0033:0x7f491d5d7ec9 [ 739.032508][T12216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.052374][T12216] RSP: 002b:00007f491b83f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 739.060828][T12216] RAX: ffffffffffffffda RBX: 00007f491d82efa0 RCX: 00007f491d5d7ec9 [ 739.068919][T12216] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 739.076918][T12216] RBP: 00007f491d65af91 R08: 0000000000000000 R09: 0000000000000000 [ 739.084920][T12216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.093007][T12216] R13: 00007f491d82f038 R14: 00007f491d82efa0 R15: 00007ffed68662d8 [ 739.101225][T12216] [ 739.627091][T12236] netlink: 128 bytes leftover after parsing attributes in process `syz.5.19340'. [ 739.752695][T12246] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 740.818380][T12280] validate_nla: 17 callbacks suppressed [ 740.818401][T12280] netlink: 'syz.1.19362': attribute type 29 has an invalid length. [ 740.906645][T12280] netlink: 'syz.1.19362': attribute type 29 has an invalid length. [ 740.998772][T12283] netlink: 'syz.1.19362': attribute type 29 has an invalid length. [ 741.284016][T12297] __nla_validate_parse: 2 callbacks suppressed [ 741.284033][T12297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19365'. [ 741.318403][T12297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19365'. [ 741.339724][T12291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19365'. [ 741.642386][T12319] netlink: 'syz.0.19376': attribute type 29 has an invalid length. [ 741.657893][T12319] netlink: 'syz.0.19376': attribute type 29 has an invalid length. [ 741.668897][T12319] netlink: 'syz.0.19376': attribute type 29 has an invalid length. [ 742.499965][T12331] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.19394'. [ 742.687057][T12340] netlink: 'syz.1.19387': attribute type 7 has an invalid length. [ 742.761930][T12350] netlink: 'syz.3.19391': attribute type 29 has an invalid length. [ 742.775725][T12351] netlink: 'syz.2.19392': attribute type 41 has an invalid length. [ 742.784852][T12351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19392'. [ 742.798154][T12351] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 742.820760][T12350] netlink: 'syz.3.19391': attribute type 29 has an invalid length. [ 743.073959][T12367] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.19400'. [ 743.195724][T12379] netlink: 156 bytes leftover after parsing attributes in process `syz.3.19407'. [ 743.817413][T12401] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.19415'. [ 744.634637][T12458] netlink: 156 bytes leftover after parsing attributes in process `syz.1.19438'. [ 745.231158][T12492] netlink: 156 bytes leftover after parsing attributes in process `syz.5.19455'. [ 745.258238][T12488] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 745.767421][T12522] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 745.920052][T12529] validate_nla: 14 callbacks suppressed [ 745.920071][T12529] netlink: 'syz.2.19477': attribute type 29 has an invalid length. [ 745.955800][T12529] netlink: 'syz.2.19477': attribute type 29 has an invalid length. [ 746.004898][T12536] netlink: 'syz.2.19477': attribute type 29 has an invalid length. [ 746.205971][T12546] netlink: 'syz.2.19484': attribute type 9 has an invalid length. [ 746.435944][T12555] __nla_validate_parse: 4 callbacks suppressed [ 746.435984][T12555] netlink: 156 bytes leftover after parsing attributes in process `syz.0.19488'. [ 746.662755][T12567] netlink: 'syz.3.19495': attribute type 3 has an invalid length. [ 746.712915][T12567] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19495'. [ 747.006550][T12585] netlink: 156 bytes leftover after parsing attributes in process `syz.2.19503'. [ 747.277175][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.283707][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.310603][T12601] netlink: 'syz.2.19512': attribute type 3 has an invalid length. [ 747.351227][T12601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19512'. [ 747.508445][T12607] netlink: 132 bytes leftover after parsing attributes in process `syz.5.19515'. [ 747.946136][T12623] netlink: 'syz.5.19522': attribute type 9 has an invalid length. [ 747.971747][T12623] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.19522'. [ 748.417884][T12661] netlink: 'syz.0.19540': attribute type 9 has an invalid length. [ 748.446220][T12661] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.19540'. [ 748.923389][T12684] can: request_module (can-proto-0) failed. [ 749.078718][T12708] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19560'. [ 749.548930][T12746] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19580'. [ 750.081506][T12794] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19601'. [ 750.154464][T12793] can: request_module (can-proto-0) failed. [ 750.327252][T12809] netlink: 'syz.5.19608': attribute type 41 has an invalid length. [ 750.366826][T12809] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 750.456822][T12810] can: request_module (can-proto-0) failed. [ 751.507533][T12894] __nla_validate_parse: 4 callbacks suppressed [ 751.507657][T12894] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.19651'. [ 751.722693][T12909] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.19657'. [ 751.753184][T12904] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.19657'. [ 751.903754][T12921] netlink: 156 bytes leftover after parsing attributes in process `syz.2.19665'. [ 751.950258][T12924] netlink: 'syz.1.19666': attribute type 41 has an invalid length. [ 751.960255][T12924] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19666'. [ 751.975619][T12924] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 752.003160][T15065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 752.738320][T12983] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.19691'. [ 752.922743][T12998] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.19698'. [ 752.973433][T12992] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.19698'. [ 753.009738][T12999] netlink: 156 bytes leftover after parsing attributes in process `syz.1.19700'. [ 753.135976][T13006] netlink: 168 bytes leftover after parsing attributes in process `syz.1.19703'. [ 753.177222][T13007] netlink: 'syz.5.19702': attribute type 41 has an invalid length. [ 753.225325][T13007] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 753.311586][T13017] netlink: 'syz.1.19717': attribute type 3 has an invalid length. [ 754.597518][T13092] netlink: 'syz.5.19744': attribute type 3 has an invalid length. [ 755.188739][T13120] netlink: 'syz.3.19757': attribute type 3 has an invalid length. [ 756.447356][T13194] netlink: 'syz.2.19792': attribute type 27 has an invalid length. [ 756.567454][T13202] __nla_validate_parse: 8 callbacks suppressed [ 756.567486][T13202] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.19797'. [ 757.025774][T13229] netlink: 'syz.0.19806': attribute type 3 has an invalid length. [ 757.050293][T13229] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.19806'. [ 759.345492][T13322] netlink: 'syz.2.19850': attribute type 3 has an invalid length. [ 759.380573][T13322] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.19850'. [ 760.220523][T13365] netlink: 'syz.1.19869': attribute type 3 has an invalid length. [ 760.243400][T13365] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.19869'. [ 761.190204][T13412] netlink: 'syz.5.19892': attribute type 9 has an invalid length. [ 761.327381][T13420] netlink: 'syz.5.19896': attribute type 10 has an invalid length. [ 761.345884][T13420] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.354012][T13420] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.384013][T13420] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.391253][T13420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.398822][T13420] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.405957][T13420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.419101][T13420] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 762.910682][T13468] netlink: 'syz.2.19917': attribute type 9 has an invalid length. [ 763.198494][T13495] netlink: 'syz.3.19927': attribute type 10 has an invalid length. [ 763.224532][T13495] netlink: 'syz.3.19927': attribute type 10 has an invalid length. [ 763.233576][T13495] netlink: 'syz.3.19927': attribute type 10 has an invalid length. [ 763.709661][T13515] netlink: 'syz.0.19935': attribute type 9 has an invalid length. [ 764.603896][T13475] ODEBUG: Out of memory. ODEBUG disabled [ 764.605084][T13475] [ 764.605092][T13475] ====================================================== [ 764.605099][T13475] WARNING: possible circular locking dependency detected [ 764.605119][T13475] syzkaller #0 Not tainted [ 764.605128][T13475] ------------------------------------------------------ [ 764.605134][T13475] syz.1.19929/13475 is trying to acquire lock: [ 764.605145][T13475] ffffffff8c1110c0 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 764.605197][T13475] [ 764.605197][T13475] but task is already holding lock: [ 764.605202][T13475] ffff8880792ba238 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc7/0xc50 [ 764.605244][T13475] [ 764.605244][T13475] which lock already depends on the new lock. [ 764.605244][T13475] [ 764.605250][T13475] [ 764.605250][T13475] the existing dependency chain (in reverse order) is: [ 764.605255][T13475] [ 764.605255][T13475] -> #5 (&trie->lock){....}-{2:2}: [ 764.605278][T13475] _raw_spin_lock_irqsave+0xa4/0xf0 [ 764.605297][T13475] trie_delete_elem+0x90/0x710 [ 764.605315][T13475] 0xffffffffa004a2c5 [ 764.605327][T13475] bpf_trace_run2+0x15b/0x2d0 [ 764.605343][T13475] trace_tlb_flush+0xe6/0x110 [ 764.605360][T13475] switch_mm_irqs_off+0x6e3/0x9a0 [ 764.605377][T13475] __schedule+0x1024/0x4390 [ 764.605395][T13475] schedule+0x11b/0x1e0 [ 764.605431][T13475] schedule_timeout+0x15c/0x280 [ 764.605452][T13475] rcu_exp_sel_wait_wake+0x7a4/0x1b00 [ 764.605471][T13475] process_one_work+0x863/0x1000 [ 764.605490][T13475] worker_thread+0xaa8/0x12a0 [ 764.605508][T13475] kthread+0x436/0x520 [ 764.605523][T13475] ret_from_fork+0x1f/0x30 [ 764.605543][T13475] [ 764.605543][T13475] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 764.605565][T13475] _raw_spin_lock_nested+0x2e/0x40 [ 764.605583][T13475] raw_spin_rq_lock_nested+0x26/0x140 [ 764.605603][T13475] task_fork_fair+0x5c/0x350 [ 764.605618][T13475] sched_cgroup_fork+0x2c6/0x320 [ 764.605638][T13475] copy_process+0x22d1/0x3e00 [ 764.605663][T13475] kernel_clone+0x219/0x930 [ 764.605680][T13475] kernel_thread+0xc8/0x120 [ 764.605696][T13475] rest_init+0x21/0x330 [ 764.605714][T13475] start_kernel+0x486/0x530 [ 764.605731][T13475] secondary_startup_64_no_verify+0xb1/0xbb [ 764.605749][T13475] [ 764.605749][T13475] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 764.605772][T13475] _raw_spin_lock_irqsave+0xa4/0xf0 [ 764.605788][T13475] try_to_wake_up+0x5c/0x1050 [ 764.605807][T13475] __wake_up_common+0x2a4/0x4e0 [ 764.605835][T13475] __wake_up+0x108/0x180 [ 764.605852][T13475] tty_port_default_wakeup+0xa5/0xf0 [ 764.605872][T13475] serial8250_tx_chars+0x629/0x830 [ 764.605892][T13475] serial8250_handle_irq+0x519/0x610 [ 764.605912][T13475] serial8250_default_handle_irq+0xb4/0x1a0 [ 764.605933][T13475] serial8250_interrupt+0x9b/0x1c0 [ 764.605952][T13475] __handle_irq_event_percpu+0x291/0x9b0 [ 764.605971][T13475] handle_irq_event+0xa5/0x220 [ 764.605989][T13475] handle_edge_irq+0x243/0xb20 [ 764.606008][T13475] __common_interrupt+0xd7/0x1e0 [ 764.606026][T13475] common_interrupt+0xb0/0xd0 [ 764.606043][T13475] asm_common_interrupt+0x22/0x40 [ 764.606061][T13475] lock_acquire+0x1f2/0x3f0 [ 764.606081][T13475] _raw_spin_lock+0x2a/0x40 [ 764.606096][T13475] validate_mm+0x309/0x950 [ 764.606114][T13475] mmap_region+0xd89/0x1660 [ 764.606137][T13475] do_mmap+0x81f/0xea0 [ 764.606153][T13475] vm_mmap_pgoff+0x1b2/0x2b0 [ 764.606175][T13475] ksys_mmap_pgoff+0x542/0x780 [ 764.606193][T13475] do_syscall_64+0x4c/0xa0 [ 764.606209][T13475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 764.606228][T13475] [ 764.606228][T13475] -> #2 (&tty->write_wait){-...}-{2:2}: [ 764.606251][T13475] _raw_spin_lock_irqsave+0xa4/0xf0 [ 764.606268][T13475] __wake_up+0xed/0x180 [ 764.606286][T13475] tty_port_default_wakeup+0xa5/0xf0 [ 764.606305][T13475] serial8250_tx_chars+0x629/0x830 [ 764.606324][T13475] serial8250_handle_irq+0x519/0x610 [ 764.606344][T13475] serial8250_default_handle_irq+0xb4/0x1a0 [ 764.606365][T13475] serial8250_interrupt+0x9b/0x1c0 [ 764.606383][T13475] __handle_irq_event_percpu+0x291/0x9b0 [ 764.606402][T13475] handle_irq_event+0xa5/0x220 [ 764.606420][T13475] handle_edge_irq+0x243/0xb20 [ 764.606439][T13475] __common_interrupt+0xd7/0x1e0 [ 764.606456][T13475] common_interrupt+0xb0/0xd0 [ 764.606473][T13475] asm_common_interrupt+0x22/0x40 [ 764.606490][T13475] default_idle+0xb/0x10 [ 764.606510][T13475] default_idle_call+0x81/0xc0 [ 764.606529][T13475] do_idle+0x21b/0x5b0 [ 764.606545][T13475] cpu_startup_entry+0x14/0x20 [ 764.606563][T13475] start_kernel+0x486/0x530 [ 764.606577][T13475] secondary_startup_64_no_verify+0xb1/0xbb [ 764.606593][T13475] [ 764.606593][T13475] -> #1 (&port_lock_key){-...}-{2:2}: [ 764.606612][T13475] _raw_spin_lock_irqsave+0xa4/0xf0 [ 764.606626][T13475] serial8250_console_write+0x170/0xf80 [ 764.606644][T13475] console_unlock+0xc86/0x1200 [ 764.606659][T13475] vprintk_emit+0xc0/0x150 [ 764.606680][T13475] _printk+0xcc/0x110 [ 764.606699][T13475] register_console+0x682/0x960 [ 764.606716][T13475] univ8250_console_init+0x41/0x50 [ 764.606735][T13475] console_init+0x177/0x5d0 [ 764.606755][T13475] start_kernel+0x2f9/0x530 [ 764.606771][T13475] secondary_startup_64_no_verify+0xb1/0xbb [ 764.606792][T13475] [ 764.606792][T13475] -> #0 (console_owner){-...}-{0:0}: [ 764.606823][T13475] __lock_acquire+0x2c33/0x7c60 [ 764.606843][T13475] lock_acquire+0x197/0x3f0 [ 764.606862][T13475] console_lock_spinning_enable+0x51/0x60 [ 764.606879][T13475] console_unlock+0x9f8/0x1200 [ 764.606895][T13475] vprintk_emit+0xc0/0x150 [ 764.606914][T13475] _printk+0xcc/0x110 [ 764.606932][T13475] debug_objects_oom+0x89/0x2f0 [ 764.606952][T13475] debug_object_activate+0x409/0x480 [ 764.606973][T13475] kvfree_call_rcu+0xb5/0x7c0 [ 764.606990][T13475] trie_update_elem+0x86e/0xc50 [ 764.607008][T13475] bpf_map_update_value+0x57d/0x650 [ 764.607027][T13475] generic_map_update_batch+0x525/0x7c0 [ 764.607045][T13475] bpf_map_do_batch+0x466/0x600 [ 764.607064][T13475] __sys_bpf+0x601/0x670 [ 764.607081][T13475] __x64_sys_bpf+0x78/0x90 [ 764.607099][T13475] do_syscall_64+0x4c/0xa0 [ 764.607114][T13475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 764.607133][T13475] [ 764.607133][T13475] other info that might help us debug this: [ 764.607133][T13475] [ 764.607139][T13475] Chain exists of: [ 764.607139][T13475] console_owner --> &rq->__lock --> &trie->lock [ 764.607139][T13475] [ 764.607165][T13475] Possible unsafe locking scenario: [ 764.607165][T13475] [ 764.607170][T13475] CPU0 CPU1 [ 764.607174][T13475] ---- ---- [ 764.607178][T13475] lock(&trie->lock); [ 764.607189][T13475] lock(&rq->__lock); [ 764.607201][T13475] lock(&trie->lock); [ 764.607212][T13475] lock(console_owner); [ 764.607223][T13475] [ 764.607223][T13475] *** DEADLOCK *** [ 764.607223][T13475] [ 764.607227][T13475] 3 locks held by syz.1.19929/13475: [ 764.607237][T13475] #0: ffffffff8c11c660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 764.607282][T13475] #1: ffff8880792ba238 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc7/0xc50 [ 764.607326][T13475] #2: ffffffff8c1111a0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 764.607371][T13475] [ 764.607371][T13475] stack backtrace: [ 764.607377][T13475] CPU: 1 PID: 13475 Comm: syz.1.19929 Not tainted syzkaller #0 [ 764.607395][T13475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 764.607407][T13475] Call Trace: [ 764.607413][T13475] [ 764.607420][T13475] dump_stack_lvl+0x168/0x230 [ 764.607443][T13475] ? load_image+0x3b0/0x3b0 [ 764.607464][T13475] ? show_regs_print_info+0x20/0x20 [ 764.607490][T13475] ? print_circular_bug+0x12b/0x1a0 [ 764.607510][T13475] check_noncircular+0x274/0x310 [ 764.607530][T13475] ? add_chain_block+0x940/0x940 [ 764.607546][T13475] ? lockdep_lock+0xdc/0x1e0 [ 764.607568][T13475] ? lockdep_unlock+0x134/0x2d0 [ 764.607589][T13475] ? lockdep_lock+0x1e0/0x1e0 [ 764.607610][T13475] ? mark_lock+0x94/0x320 [ 764.607632][T13475] __lock_acquire+0x2c33/0x7c60 [ 764.607654][T13475] ? put_dec_trunc8+0x1fd/0x340 [ 764.607689][T13475] ? verify_lock_unused+0x140/0x140 [ 764.607719][T13475] ? sprintf+0xd6/0x120 [ 764.607742][T13475] lock_acquire+0x197/0x3f0 [ 764.607763][T13475] ? console_lock_spinning_enable+0x2c/0x60 [ 764.607783][T13475] ? prb_read_valid+0x60/0x60 [ 764.607804][T13475] ? read_lock_is_recursive+0x10/0x10 [ 764.607833][T13475] ? do_raw_spin_lock+0x11d/0x280 [ 764.607853][T13475] ? __rwlock_init+0x140/0x140 [ 764.607872][T13475] ? do_raw_spin_unlock+0x11d/0x230 [ 764.607892][T13475] console_lock_spinning_enable+0x51/0x60 [ 764.607910][T13475] ? console_lock_spinning_enable+0x2c/0x60 [ 764.607928][T13475] console_unlock+0x9f8/0x1200 [ 764.607950][T13475] ? console_trylock_spinning+0x350/0x350 [ 764.607975][T13475] ? __down_trylock_console_sem+0x184/0x1e0 [ 764.607993][T13475] ? vprintk_emit+0xa7/0x150 [ 764.608015][T13475] ? printk_parse_prefix+0x330/0x330 [ 764.608036][T13475] ? vprintk_emit+0xa7/0x150 [ 764.608057][T13475] ? console_trylock+0x70/0x70 [ 764.608082][T13475] ? vprintk_emit+0x150/0x150 [ 764.608104][T13475] ? 0xffffffffa002a000 [ 764.608120][T13475] ? __kernel_text_address+0x9a/0x100 [ 764.608142][T13475] ? unwind_get_return_address+0x49/0x80 [ 764.608167][T13475] vprintk_emit+0xc0/0x150 [ 764.608190][T13475] _printk+0xcc/0x110 [ 764.608213][T13475] ? load_image+0x3b0/0x3b0 [ 764.608235][T13475] ? __lock_acquire+0x7c60/0x7c60 [ 764.608256][T13475] ? do_raw_spin_lock+0x11d/0x280 [ 764.608277][T13475] debug_objects_oom+0x89/0x2f0 [ 764.608297][T13475] ? do_raw_spin_unlock+0x11d/0x230 [ 764.608318][T13475] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 764.608336][T13475] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 764.608363][T13475] debug_object_activate+0x409/0x480 [ 764.608389][T13475] kvfree_call_rcu+0xb5/0x7c0 [ 764.608410][T13475] ? call_rcu+0x930/0x930 [ 764.608434][T13475] trie_update_elem+0x86e/0xc50 [ 764.608463][T13475] bpf_map_update_value+0x57d/0x650 [ 764.608486][T13475] generic_map_update_batch+0x525/0x7c0 [ 764.608514][T13475] ? rcu_read_unlock+0x90/0x90 [ 764.608536][T13475] ? __fdget+0x18b/0x210 [ 764.608554][T13475] ? rcu_read_unlock+0x90/0x90 [ 764.608572][T13475] bpf_map_do_batch+0x466/0x600 [ 764.608595][T13475] __sys_bpf+0x601/0x670 [ 764.608616][T13475] ? bpf_link_show_fdinfo+0x340/0x340 [ 764.608642][T13475] ? vtime_user_exit+0x2dc/0x400 [ 764.608666][T13475] __x64_sys_bpf+0x78/0x90 [ 764.608686][T13475] do_syscall_64+0x4c/0xa0 [ 764.608704][T13475] ? clear_bhb_loop+0x30/0x80 [ 764.608722][T13475] ? clear_bhb_loop+0x30/0x80 [ 764.608741][T13475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 764.608761][T13475] RIP: 0033:0x7f491d5d7ec9 [ 764.608778][T13475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.608795][T13475] RSP: 002b:00007f491b83f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 764.608825][T13475] RAX: ffffffffffffffda RBX: 00007f491d82efa0 RCX: 00007f491d5d7ec9 [ 764.608839][T13475] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000001a [ 764.608852][T13475] RBP: 00007f491d65af91 R08: 0000000000000000 R09: 0000000000000000 [ 764.608865][T13475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.608876][T13475] R13: 00007f491d82f038 R14: 00007f491d82efa0 R15: 00007ffed68662d8 [ 764.608898][T13475] [ 765.790922][T13546] netlink: 'syz.3.19949': attribute type 9 has an invalid length. [ 769.824416][T30194] Bluetooth: hci3: command 0x0406 tx timeout