last executing test programs: 2.920784314s ago: executing program 3 (id=23549): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000007f180100002200000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000bf03000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_BTF_INFO(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) 2.51228784s ago: executing program 0 (id=23540): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847", 0x0, 0x71, 0x60000600, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.51190679s ago: executing program 3 (id=23543): socketpair(0x11, 0x3, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.093390687s ago: executing program 3 (id=23548): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xb, &(0x7f0000000280), 0xf) 1.897996113s ago: executing program 0 (id=23551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x25, 0x80, 0xc2, 0x25, 0x64}}) 1.609474909s ago: executing program 2 (id=23553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000456422d8b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000480), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.552347614s ago: executing program 0 (id=23556): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a"], 0xfe33) recvmsg(r0, &(0x7f0000000240)={0x0, 0x12, &(0x7f0000000400)=[{&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4086, 0xff6}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 1.461639442s ago: executing program 2 (id=23557): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x4000005) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg(r0, &(0x7f0000000540)={&(0x7f0000000340)=@nl, 0x80, 0x0}, 0x11081) 1.401022747s ago: executing program 0 (id=23559): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)='3', 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x40092cc) sendmsg$inet(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000012c0)="a4", 0xfffffdef}], 0x1}, 0x0) 1.02556198s ago: executing program 4 (id=23564): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x6, &(0x7f0000000c80)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x4}}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe3, &(0x7f0000000240)=""/227, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.0253021s ago: executing program 3 (id=23565): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) 961.077736ms ago: executing program 4 (id=23566): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) 910.16233ms ago: executing program 3 (id=23567): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x4e1d, @multicast2=0xe0000001}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="00446916ab", 0x5}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x0) 777.694822ms ago: executing program 3 (id=23569): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 777.429161ms ago: executing program 4 (id=23570): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000400000000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081", 0x7}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 749.287234ms ago: executing program 1 (id=23571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x66, 0x2, 0x8, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000340)="035af6", 0x20000000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x3bb, 0x5, 0x7f, 0x16, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/137, 0x2}, 0x20) 727.559406ms ago: executing program 4 (id=23572): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000000000000000007110350000000000950000070000000071a6a8cf894e189cd05deac28da285b787dded5975a88b0f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xee, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000000c0), 0x20000000}, 0x20) 649.606683ms ago: executing program 1 (id=23573): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)='x', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x1d, &(0x7f0000000200), 0x8) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 640.747224ms ago: executing program 4 (id=23574): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) 623.400905ms ago: executing program 1 (id=23575): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f00000000c0), 0x0}, 0x20) 521.544214ms ago: executing program 1 (id=23576): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000c40)=""/4096, 0x0, 0xffffffffffffff3b, 0x1, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d131c2e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084275ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc5484ea9f56f030b636626aa035ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 521.407054ms ago: executing program 2 (id=23577): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3650a001a02060000001fffffff300017d34460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 448.203851ms ago: executing program 2 (id=23578): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f00000004c0), &(0x7f0000000840)}, 0x20) 423.287893ms ago: executing program 0 (id=23579): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847", 0x0, 0x71, 0x60000600, 0x0, 0x0, 0x0, 0x0}, 0x50) 373.656987ms ago: executing program 1 (id=23580): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10874}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{0x0, 0xffffffc8}], 0x1, &(0x7f0000000880)}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001080)='>', 0x1}], 0x1}, 0x0) 218.104701ms ago: executing program 2 (id=23581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 88.608062ms ago: executing program 1 (id=23582): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000000a40)=@framed={{}, [@map_fd, @kfunc, @snprintf, @ldst={0x3, 0x1, 0x0, 0x4, 0x5, 0x1}, @generic, @snprintf, @snprintf]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'veth1_virt_wifi\x00', @random='\x00\x00\x00 \x00'}) 43.980746ms ago: executing program 0 (id=23583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000002c0)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 724.12µs ago: executing program 2 (id=23584): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 4 (id=23585): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x17, 0x0, 0x0, 0x0, 0xe62, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000ac0)=[{0x2, 0x2, 0x6, 0xb}, {0x3, 0x3, 0x4, 0x4}, {0x2, 0x3, 0xe, 0x1}, {0x1, 0x3, 0xf, 0x6}, {0x4, 0x4, 0xb, 0x8}], 0x10, 0xd, @void, @value}, 0x90) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00), 0x1, 0x0, 0x3f}, 0x12160) kernel console output (not intermixed with test programs): ing attributes in process `syz.2.16044'. [ 739.860715][ T4304] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.16057'. [ 740.482429][ T4347] netlink: 'syz.0.16076': attribute type 3 has an invalid length. [ 740.498209][ T4347] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.16076'. [ 741.690053][ T4421] netlink: 'syz.4.16113': attribute type 3 has an invalid length. [ 741.937726][ T4437] netlink: 'syz.1.16118': attribute type 29 has an invalid length. [ 741.982089][ T4437] netlink: 'syz.1.16118': attribute type 29 has an invalid length. [ 742.013796][ T4437] netlink: 'syz.1.16118': attribute type 29 has an invalid length. [ 742.334600][ T4456] netlink: 'syz.2.16128': attribute type 9 has an invalid length. [ 742.355186][ T4456] netlink: 131264 bytes leftover after parsing attributes in process `syz.2.16128'. [ 743.192288][ T4501] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.16150'. [ 743.532602][ T4525] netlink: 'syz.1.16161': attribute type 12 has an invalid length. [ 743.575340][ T4525] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16161'. [ 743.604184][ T4523] netlink: 'syz.2.16160': attribute type 10 has an invalid length. [ 743.814199][ T4523] device batadv_slave_0 entered promiscuous mode [ 743.842476][ T4523] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 743.867176][ T4533] netlink: 763 bytes leftover after parsing attributes in process `syz.1.16176'. [ 745.215260][ T4612] netlink: 399 bytes leftover after parsing attributes in process `syz.0.16203'. [ 745.234787][ T4612] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 745.244986][ T4611] netlink: 121244 bytes leftover after parsing attributes in process `syz.2.16201'. [ 745.283601][ T4612] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 745.306430][ T4611] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 745.415004][ T4622] netlink: 'syz.4.16209': attribute type 29 has an invalid length. [ 745.423293][ T4622] netlink: 'syz.4.16209': attribute type 29 has an invalid length. [ 745.509165][ T4629] netlink: 'syz.4.16209': attribute type 29 has an invalid length. [ 745.810315][ T4649] netlink: 611 bytes leftover after parsing attributes in process `syz.2.16220'. [ 746.257534][ T4680] netlink: 168 bytes leftover after parsing attributes in process `syz.4.16238'. [ 746.361987][ T4689] netlink: 'syz.3.16243': attribute type 29 has an invalid length. [ 746.396872][ T4689] netlink: 'syz.3.16243': attribute type 29 has an invalid length. [ 746.426445][ T4696] netlink: 'syz.3.16243': attribute type 29 has an invalid length. [ 746.455301][ T4697] netlink: 'syz.4.16244': attribute type 2 has an invalid length. [ 747.066693][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.073102][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.801442][ T4728] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.16257'. [ 747.843076][ T4733] netlink: 196 bytes leftover after parsing attributes in process `syz.3.16260'. [ 747.969978][ T4740] netlink: 'syz.4.16261': attribute type 1 has an invalid length. [ 748.002094][ T4740] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.16261'. [ 748.235883][ T4750] netlink: 'syz.3.16268': attribute type 2 has an invalid length. [ 749.163432][ T4804] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.16297'. [ 749.485446][ T4826] netlink: 'syz.2.16307': attribute type 10 has an invalid length. [ 749.494143][ T4826] netlink: 'syz.2.16307': attribute type 19 has an invalid length. [ 749.511268][ T4826] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16307'. [ 749.531062][ T4830] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.16308'. [ 750.082130][ T4863] netlink: 'syz.0.16323': attribute type 3 has an invalid length. [ 750.093617][ T4863] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.16323'. [ 751.569417][ T4911] netlink: 'syz.1.16342': attribute type 3 has an invalid length. [ 751.579335][ T4911] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.16342'. [ 752.637192][ T4928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.797939][ T4946] netlink: 'syz.4.16361': attribute type 3 has an invalid length. [ 753.832380][ T4946] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.16361'. [ 754.025401][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 754.054696][ T4959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 754.228292][ T4976] netlink: 'syz.1.16376': attribute type 8 has an invalid length. [ 754.236690][ T4976] netlink: 'syz.1.16376': attribute type 4 has an invalid length. [ 754.245240][ T4976] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.16376'. [ 754.397599][ T4982] netlink: 'syz.1.16380': attribute type 3 has an invalid length. [ 754.420003][ T4982] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.16380'. [ 754.431221][ T4984] netlink: 'syz.3.16381': attribute type 10 has an invalid length. [ 754.448415][ T4984] netlink: 2 bytes leftover after parsing attributes in process `syz.3.16381'. [ 754.462273][ T4984] device team0 entered promiscuous mode [ 754.475355][ T4984] device team_slave_1 entered promiscuous mode [ 754.481773][ T4984] device vlan0 entered promiscuous mode [ 754.494127][ T4984] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.511501][ T4984] bridge0: port 6(team0) entered blocking state [ 754.518894][ T4984] bridge0: port 6(team0) entered disabled state [ 754.629148][ T4995] netlink: 'syz.1.16396': attribute type 10 has an invalid length. [ 754.653898][ T4995] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16396'. [ 754.758794][ T5004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 754.869853][ T5011] netlink: 'syz.2.16393': attribute type 8 has an invalid length. [ 754.889701][ T5011] netlink: 'syz.2.16393': attribute type 4 has an invalid length. [ 754.897813][ T5011] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.16393'. [ 755.123682][ T5024] netlink: 'syz.4.16403': attribute type 10 has an invalid length. [ 755.153840][ T5024] netlink: 2 bytes leftover after parsing attributes in process `syz.4.16403'. [ 755.384587][ T5039] netlink: 'syz.0.16419': attribute type 10 has an invalid length. [ 755.393456][ T5039] netlink: 2 bytes leftover after parsing attributes in process `syz.0.16419'. [ 758.503970][ T5112] team0: Device hsr_slave_0 failed to register rx_handler [ 760.539267][ T5153] validate_nla: 1 callbacks suppressed [ 760.539287][ T5153] netlink: 'syz.4.16462': attribute type 10 has an invalid length. [ 760.572076][ T5153] team0: Device hsr_slave_0 failed to register rx_handler [ 761.725634][ T5187] netlink: 'syz.2.16475': attribute type 3 has an invalid length. [ 761.754014][ T5193] netlink: 'syz.1.16479': attribute type 10 has an invalid length. [ 761.768970][ T5193] team0: Device hsr_slave_0 failed to register rx_handler [ 761.773669][ T5187] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.16475'. [ 762.317127][ T5231] netlink: 'syz.0.16500': attribute type 3 has an invalid length. [ 762.363956][ T5231] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.16500'. [ 768.510073][ T5264] netlink: 'syz.1.16514': attribute type 3 has an invalid length. [ 768.527946][ T5264] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.16514'. [ 770.697716][ T5406] netlink: 3748 bytes leftover after parsing attributes in process `syz.1.16582'. [ 771.857673][ T5448] netlink: 3748 bytes leftover after parsing attributes in process `syz.3.16601'. [ 780.268521][ T5689] netlink: 166 bytes leftover after parsing attributes in process `syz.4.16721'. [ 782.623399][ T5796] netlink: 48569 bytes leftover after parsing attributes in process `syz.4.16774'. [ 782.731590][ T5803] netlink: 'syz.1.16778': attribute type 29 has an invalid length. [ 782.760611][ T5803] netlink: 'syz.1.16778': attribute type 29 has an invalid length. [ 782.782468][ T5805] netlink: 'syz.1.16778': attribute type 29 has an invalid length. [ 782.975465][ T5815] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.16783'. [ 784.166830][ T5858] netlink: 'syz.0.16803': attribute type 29 has an invalid length. [ 784.208880][ T5858] netlink: 'syz.0.16803': attribute type 29 has an invalid length. [ 784.267498][ T5863] netlink: 'syz.0.16803': attribute type 29 has an invalid length. [ 784.580372][ T5878] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.16811'. [ 784.598036][ T5877] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.16812'. [ 784.784333][ T5889] netlink: 'syz.1.16818': attribute type 29 has an invalid length. [ 784.804062][ T5889] netlink: 'syz.1.16818': attribute type 29 has an invalid length. [ 784.860756][ T5889] netlink: 'syz.1.16818': attribute type 29 has an invalid length. [ 785.188950][ T5904] netlink: 'syz.4.16825': attribute type 2 has an invalid length. [ 785.214292][ T5904] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.16825'. [ 785.214899][ T5907] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16826'. [ 786.705598][ T5985] device wlan1 entered promiscuous mode [ 786.712874][ T5985] team0: Port device wlan1 added [ 788.173696][ T6068] validate_nla: 1 callbacks suppressed [ 788.173715][ T6068] netlink: 'syz.1.16902': attribute type 21 has an invalid length. [ 789.032690][ T6103] netlink: 'syz.3.16920': attribute type 29 has an invalid length. [ 789.067541][ T6103] netlink: 'syz.3.16920': attribute type 29 has an invalid length. [ 789.101411][ T6103] netlink: 'syz.3.16920': attribute type 29 has an invalid length. [ 789.292259][ T6109] netlink: 'syz.3.16924': attribute type 29 has an invalid length. [ 789.327476][ T6109] netlink: 'syz.3.16924': attribute type 29 has an invalid length. [ 789.354343][ T6113] netlink: 'syz.3.16924': attribute type 29 has an invalid length. [ 791.298953][ T6210] netlink: 'syz.1.16972': attribute type 10 has an invalid length. [ 791.336459][ T6210] device wlan1 entered promiscuous mode [ 791.342635][ T6210] team0: Port device wlan1 added [ 792.372396][ T6286] netlink: 68 bytes leftover after parsing attributes in process `syz.0.17019'. [ 792.865679][ T6317] netlink: 'syz.2.17021': attribute type 2 has an invalid length. [ 792.911915][ T6317] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.17021'. [ 792.922943][ T6319] netlink: 68 bytes leftover after parsing attributes in process `syz.4.17025'. [ 792.944945][ T6321] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.17035'. [ 793.247579][ T6341] netlink: 'syz.3.17034': attribute type 29 has an invalid length. [ 793.289304][ T6341] netlink: 'syz.3.17034': attribute type 29 has an invalid length. [ 793.306062][ T6341] netlink: 'syz.3.17034': attribute type 29 has an invalid length. [ 793.406887][ T6347] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.17038'. [ 793.715463][ T6369] netlink: 'syz.2.17048': attribute type 29 has an invalid length. [ 793.727682][ T6369] netlink: 'syz.2.17048': attribute type 29 has an invalid length. [ 793.753771][ T6372] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.17049'. [ 793.767409][ T6369] netlink: 'syz.2.17048': attribute type 29 has an invalid length. [ 793.922619][ T6382] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.17056'. [ 794.359730][ T6417] netlink: 'syz.4.17072': attribute type 29 has an invalid length. [ 794.378720][ T6417] netlink: 'syz.4.17072': attribute type 29 has an invalid length. [ 794.400344][ T6417] netlink: 'syz.4.17072': attribute type 29 has an invalid length. [ 795.185245][ T6456] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.17091'. [ 795.853083][ T6499] netlink: 'syz.0.17112': attribute type 29 has an invalid length. [ 799.651303][ T6707] netlink: 763 bytes leftover after parsing attributes in process `syz.1.17211'. [ 800.322470][ T6736] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.17224'. [ 800.837469][ T6758] validate_nla: 2 callbacks suppressed [ 800.837491][ T6758] netlink: 'syz.4.17233': attribute type 10 has an invalid length. [ 800.882588][ T6758] netlink: 'syz.4.17233': attribute type 19 has an invalid length. [ 800.891660][ T6758] netlink: 156 bytes leftover after parsing attributes in process `syz.4.17233'. [ 801.027302][ T6767] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.17240'. [ 802.475992][ T6831] netlink: 'syz.2.17282': attribute type 1 has an invalid length. [ 802.503681][ T6831] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.17282'. [ 802.527643][ T6835] netlink: 'syz.1.17272': attribute type 2 has an invalid length. [ 803.225309][ T6854] netlink: 196 bytes leftover after parsing attributes in process `syz.0.17283'. [ 803.408559][ T6867] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.17289'. [ 803.534151][ T6872] netlink: 'syz.2.17293': attribute type 2 has an invalid length. [ 803.818506][ T6890] netlink: 168 bytes leftover after parsing attributes in process `syz.0.17311'. [ 804.457841][ T6908] netlink: 'syz.1.17306': attribute type 29 has an invalid length. [ 804.493944][ T6908] netlink: 'syz.1.17306': attribute type 29 has an invalid length. [ 804.513758][ T6908] netlink: 'syz.1.17306': attribute type 29 has an invalid length. [ 804.968247][ T6931] netlink: 168 bytes leftover after parsing attributes in process `syz.1.17314'. [ 805.581730][ T6961] netlink: 611 bytes leftover after parsing attributes in process `syz.4.17333'. [ 806.008182][ T6985] netlink: 'syz.0.17345': attribute type 29 has an invalid length. [ 806.026529][ T6985] netlink: 'syz.0.17345': attribute type 29 has an invalid length. [ 806.074714][ T6991] netlink: 'syz.0.17345': attribute type 29 has an invalid length. [ 806.409285][ T7007] netlink: 399 bytes leftover after parsing attributes in process `syz.1.17353'. [ 806.424383][ T7007] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 806.432734][ T7007] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 806.556724][ T7014] netlink: 121244 bytes leftover after parsing attributes in process `syz.4.17360'. [ 806.593681][ T7014] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 807.262895][ T7055] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.17380'. [ 807.930484][ T7079] netlink: 'syz.0.17392': attribute type 9 has an invalid length. [ 807.949238][ T7079] netlink: 131264 bytes leftover after parsing attributes in process `syz.0.17392'. [ 808.463821][ T7102] netlink: 'syz.3.17402': attribute type 3 has an invalid length. [ 808.505988][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.512429][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.389760][ T7153] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.17427'. [ 809.638332][ T7168] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.17435'. [ 810.081004][ T7196] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.17449'. [ 810.104349][ T7202] netlink: 'syz.4.17452': attribute type 3 has an invalid length. [ 810.136305][ T7202] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.17452'. [ 810.279562][ T7208] netlink: 'syz.4.17455': attribute type 21 has an invalid length. [ 810.404727][ T7215] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.17457'. [ 810.480480][ T7222] netlink: 'syz.4.17461': attribute type 29 has an invalid length. [ 810.490453][ T7222] netlink: 'syz.4.17461': attribute type 29 has an invalid length. [ 810.531540][ T7222] netlink: 'syz.4.17461': attribute type 29 has an invalid length. [ 810.962744][ T7251] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.17474'. [ 814.859583][ T7312] netlink: 'syz.2.17504': attribute type 1 has an invalid length. [ 814.888013][ T7312] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.17504'. [ 815.203226][ T7330] netlink: 830 bytes leftover after parsing attributes in process `syz.2.17514'. [ 815.245911][ T7332] netlink: 'syz.3.17515': attribute type 3 has an invalid length. [ 815.283685][ T7332] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.17515'. [ 815.344718][ T7338] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.17529'. [ 815.403043][ T7342] netlink: 56 bytes leftover after parsing attributes in process `syz.0.17519'. [ 815.429161][ T7342] netlink: 56 bytes leftover after parsing attributes in process `syz.0.17519'. [ 815.453069][ T7342] netlink: 56 bytes leftover after parsing attributes in process `syz.0.17519'. [ 817.101245][ T7406] netlink: 10 bytes leftover after parsing attributes in process `syz.4.17550'. [ 817.199401][ T7412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17552'. [ 817.218381][ T7415] netlink: 'syz.1.17554': attribute type 21 has an invalid length. [ 817.227635][ T7415] netlink: 'syz.1.17554': attribute type 1 has an invalid length. [ 817.457590][ T7428] netlink: 'syz.2.17562': attribute type 7 has an invalid length. [ 818.089590][ T7468] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.17592'. [ 818.642248][ T7504] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 818.648818][ T7504] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 819.063661][ T7534] netlink: 152 bytes leftover after parsing attributes in process `syz.0.17612'. [ 819.353214][ T7550] Dead loop on virtual device ip6_vti0, fix it urgently! [ 820.257537][ T7591] netlink: 'syz.2.17652': attribute type 29 has an invalid length. [ 820.274081][ T7591] netlink: 'syz.2.17652': attribute type 29 has an invalid length. [ 820.286263][ T7591] netlink: 'syz.2.17652': attribute type 29 has an invalid length. [ 820.864248][ T7633] __nla_validate_parse: 1 callbacks suppressed [ 820.864267][ T7633] netlink: 3 bytes leftover after parsing attributes in process `syz.1.17660'. [ 821.109452][ T7644] netlink: 168 bytes leftover after parsing attributes in process `syz.1.17664'. [ 822.080064][ T7706] Dead loop on virtual device ip6_vti0, fix it urgently! [ 823.311788][ T7749] netlink: 'syz.1.17716': attribute type 21 has an invalid length. [ 823.352382][ T7749] IPv6: NLM_F_CREATE should be specified when creating new route [ 823.392965][ T7749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 823.400328][ T7749] IPv6: NLM_F_CREATE should be set when creating new route [ 823.407745][ T7749] IPv6: NLM_F_CREATE should be set when creating new route [ 823.415085][ T7749] IPv6: NLM_F_CREATE should be set when creating new route [ 823.477773][ T7763] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.17724'. [ 823.936937][ T7783] netlink: 'syz.3.17731': attribute type 2 has an invalid length. [ 824.239983][ T7799] netlink: 188 bytes leftover after parsing attributes in process `syz.3.17742'. [ 824.476026][ T7814] netlink: 'syz.3.17749': attribute type 11 has an invalid length. [ 824.512648][ T7814] netlink: 140 bytes leftover after parsing attributes in process `syz.3.17749'. [ 824.665776][ T7827] sctp: [Deprecated]: syz.3.17755 (pid 7827) Use of int in maxseg socket option. [ 824.665776][ T7827] Use struct sctp_assoc_value instead [ 824.786444][ T7832] netlink: 'syz.3.17757': attribute type 21 has an invalid length. [ 824.816619][ T7832] netlink: 156 bytes leftover after parsing attributes in process `syz.3.17757'. [ 825.081961][ T7847] netlink: 'syz.4.17760': attribute type 7 has an invalid length. [ 825.790244][ T7880] netlink: 'syz.0.17774': attribute type 21 has an invalid length. [ 825.827082][ T7880] netlink: 156 bytes leftover after parsing attributes in process `syz.0.17774'. [ 826.093990][ T7891] netlink: 'syz.2.17779': attribute type 3 has an invalid length. [ 826.113536][ T7891] netlink: 'syz.2.17779': attribute type 1 has an invalid length. [ 826.198463][ T7897] netlink: 'syz.0.17781': attribute type 29 has an invalid length. [ 827.006228][ T7897] netlink: 'syz.0.17781': attribute type 29 has an invalid length. [ 827.833931][ T7939] netlink: 'syz.1.17801': attribute type 21 has an invalid length. [ 827.835548][ T7937] netlink: 'syz.2.17802': attribute type 29 has an invalid length. [ 827.852933][ T7938] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17803'. [ 827.862461][ T7939] netlink: 156 bytes leftover after parsing attributes in process `syz.1.17801'. [ 827.872918][ T7938] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17803'. [ 827.885436][ T7937] netlink: 'syz.2.17802': attribute type 29 has an invalid length. [ 827.896205][ T7941] netlink: 'syz.2.17802': attribute type 29 has an invalid length. [ 827.914424][ T7938] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17803'. [ 828.001318][ T7946] netlink: 'syz.1.17818': attribute type 21 has an invalid length. [ 828.019913][ T7946] netlink: 156 bytes leftover after parsing attributes in process `syz.1.17818'. [ 828.775265][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17828'. [ 830.718411][ T8079] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.17879'. [ 830.728978][ T8079] openvswitch: netlink: Message has 4 unknown bytes. [ 831.068275][ T8102] validate_nla: 4 callbacks suppressed [ 831.068294][ T8102] netlink: 'syz.4.17880': attribute type 3 has an invalid length. [ 831.081869][ T8102] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.17880'. [ 831.190542][ T8110] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.17884'. [ 831.765906][ T8129] netlink: 144 bytes leftover after parsing attributes in process `syz.0.17905'. [ 831.885360][ T8141] netlink: 'syz.1.17895': attribute type 3 has an invalid length. [ 838.915979][ T8356] __nla_validate_parse: 2 callbacks suppressed [ 838.916000][ T8356] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.18000'. [ 845.035497][ T8450] netlink: 'syz.2.18045': attribute type 29 has an invalid length. [ 845.062913][ T8450] netlink: 'syz.2.18045': attribute type 29 has an invalid length. [ 845.124077][ T8453] netlink: 'syz.2.18045': attribute type 29 has an invalid length. [ 845.400963][ T8460] netlink: 'syz.4.18063': attribute type 29 has an invalid length. [ 845.435246][ T8460] netlink: 'syz.4.18063': attribute type 29 has an invalid length. [ 845.482294][ T8460] netlink: 'syz.4.18063': attribute type 29 has an invalid length. [ 846.871067][ T8506] netlink: 'syz.3.18069': attribute type 29 has an invalid length. [ 846.896973][ T8506] netlink: 'syz.3.18069': attribute type 29 has an invalid length. [ 846.935499][ T8507] netlink: 'syz.3.18069': attribute type 29 has an invalid length. [ 850.397761][ T8541] netlink: 'syz.3.18101': attribute type 9 has an invalid length. [ 850.406780][ T8541] netlink: 131264 bytes leftover after parsing attributes in process `syz.3.18101'. [ 852.728456][ T8575] netlink: 'syz.2.18104': attribute type 29 has an invalid length. [ 852.737692][ T8575] netlink: 'syz.2.18104': attribute type 29 has an invalid length. [ 852.749048][ T8575] netlink: 'syz.2.18104': attribute type 29 has an invalid length. [ 852.844844][ T8580] netlink: 'syz.3.18119': attribute type 10 has an invalid length. [ 852.915228][ T8580] device batadv_slave_0 entered promiscuous mode [ 852.929287][ T8580] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 853.065195][ T8593] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.18110'. [ 853.097385][ T8591] netlink: 'syz.1.18123': attribute type 9 has an invalid length. [ 853.112928][ T8591] netlink: 131264 bytes leftover after parsing attributes in process `syz.1.18123'. [ 853.574550][ T8604] netlink: 'syz.0.18131': attribute type 2 has an invalid length. [ 853.582426][ T8604] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.18131'. [ 854.083685][ T8610] netlink: 'syz.0.18133': attribute type 9 has an invalid length. [ 854.096248][ T8616] netlink: 'syz.3.18120': attribute type 29 has an invalid length. [ 854.113640][ T8610] netlink: 131264 bytes leftover after parsing attributes in process `syz.0.18133'. [ 854.224287][ T8616] netlink: 'syz.3.18120': attribute type 29 has an invalid length. [ 854.988386][ T8625] netlink: 131264 bytes leftover after parsing attributes in process `syz.3.18140'. [ 855.589378][ T8624] device batadv_slave_0 entered promiscuous mode [ 855.624228][ T8624] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 856.261792][ T8643] validate_nla: 3 callbacks suppressed [ 856.261814][ T8643] netlink: 'syz.4.18139': attribute type 29 has an invalid length. [ 856.304052][ T8643] netlink: 'syz.4.18139': attribute type 29 has an invalid length. [ 856.337641][ T8646] netlink: 'syz.4.18139': attribute type 29 has an invalid length. [ 857.021237][ T8654] netlink: 'syz.3.18145': attribute type 9 has an invalid length. [ 857.033227][ T8654] netlink: 131264 bytes leftover after parsing attributes in process `syz.3.18145'. [ 859.211856][ T8687] netlink: 'syz.4.18159': attribute type 9 has an invalid length. [ 859.276096][ T8687] netlink: 131264 bytes leftover after parsing attributes in process `syz.4.18159'. [ 859.888403][ T8699] netlink: 'syz.4.18175': attribute type 9 has an invalid length. [ 859.906506][ T8699] netlink: 131264 bytes leftover after parsing attributes in process `syz.4.18175'. [ 861.135671][ T8712] netlink: 'syz.2.18180': attribute type 9 has an invalid length. [ 861.171210][ T8712] netlink: 131264 bytes leftover after parsing attributes in process `syz.2.18180'. [ 862.082302][ T8722] netlink: 'syz.4.18186': attribute type 9 has an invalid length. [ 862.100675][ T8722] netlink: 131264 bytes leftover after parsing attributes in process `syz.4.18186'. [ 867.783004][ T8795] netlink: 'syz.0.18212': attribute type 1 has an invalid length. [ 867.806664][ T8795] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.18212'. [ 869.945875][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.952220][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.225499][ T8892] netlink: 'syz.3.18265': attribute type 1 has an invalid length. [ 872.242447][ T8892] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.18265'. [ 872.387296][ T8901] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.18254'. [ 872.724778][ T8919] netlink: 'syz.4.18269': attribute type 1 has an invalid length. [ 872.738156][ T8919] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.18269'. [ 872.867163][ T8934] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.18274'. [ 873.474043][ T8966] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.18290'. [ 874.676875][ T9005] netlink: 'syz.2.18307': attribute type 29 has an invalid length. [ 874.687314][ T9005] netlink: 'syz.2.18307': attribute type 29 has an invalid length. [ 874.699507][ T9005] netlink: 'syz.2.18307': attribute type 29 has an invalid length. [ 875.283076][ T9035] netlink: 'syz.1.18322': attribute type 1 has an invalid length. [ 875.307304][ T9035] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.18322'. [ 879.669908][ T9093] netlink: 64 bytes leftover after parsing attributes in process `syz.0.18348'. [ 879.826181][ T9103] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.18353'. [ 881.908849][ T9208] netlink: 64 bytes leftover after parsing attributes in process `syz.2.18403'. [ 882.416104][ T9245] netlink: 64 bytes leftover after parsing attributes in process `syz.1.18420'. [ 883.471377][ T9273] netlink: 'syz.0.18438': attribute type 21 has an invalid length. [ 883.483604][ T9273] netlink: 128 bytes leftover after parsing attributes in process `syz.0.18438'. [ 883.512487][ T9273] netlink: 'syz.0.18438': attribute type 4 has an invalid length. [ 883.528868][ T9273] netlink: 'syz.0.18438': attribute type 3 has an invalid length. [ 883.547199][ T9273] netlink: 3 bytes leftover after parsing attributes in process `syz.0.18438'. [ 883.577213][ T9279] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.18441'. [ 884.196523][ T9315] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.18456'. [ 885.134307][ T9373] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.18482'. [ 885.157192][ T9374] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.18483'. [ 886.451108][ T9445] netlink: 'syz.4.18529': attribute type 21 has an invalid length. [ 886.459870][ T9445] netlink: 128 bytes leftover after parsing attributes in process `syz.4.18529'. [ 886.469266][ T9445] netlink: 'syz.4.18529': attribute type 4 has an invalid length. [ 886.477444][ T9445] netlink: 'syz.4.18529': attribute type 3 has an invalid length. [ 886.505303][ T9445] netlink: 3 bytes leftover after parsing attributes in process `syz.4.18529'. [ 886.753165][ T9462] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.18527'. [ 886.894432][ T9473] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.18531'. [ 888.249050][ T9509] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.18551'. [ 888.732827][ T9546] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.18565'. [ 888.796109][ T9549] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.18572'. [ 889.032351][ T9567] netlink: 'syz.3.18579': attribute type 2 has an invalid length. [ 889.046715][ T9567] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18579'. [ 890.194346][ T9642] netlink: 'syz.1.18617': attribute type 2 has an invalid length. [ 890.202223][ T9642] __nla_validate_parse: 2 callbacks suppressed [ 890.202238][ T9642] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18617'. [ 890.352623][ T9656] netlink: 'syz.2.18634': attribute type 2 has an invalid length. [ 890.363910][ T9656] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18634'. [ 890.381181][ T9659] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.18622'. [ 890.659186][ T9677] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.18632'. [ 890.992651][ T9695] netlink: 'syz.0.18642': attribute type 11 has an invalid length. [ 891.002076][ T9695] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.18642'. [ 891.807641][ T9727] netlink: 'syz.3.18656': attribute type 2 has an invalid length. [ 891.834904][ T9727] netlink: 'syz.3.18656': attribute type 1 has an invalid length. [ 891.848502][ T9727] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.18656'. [ 892.053407][ T9741] netlink: 134728 bytes leftover after parsing attributes in process `syz.4.18664'. [ 892.079774][ T9741] netlink: 52 bytes leftover after parsing attributes in process `syz.4.18664'. [ 892.091372][ T9744] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.18666'. [ 892.585590][ T9781] netlink: 'syz.2.18685': attribute type 11 has an invalid length. [ 892.610501][ T9781] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.18685'. [ 893.047217][ T9811] netlink: 'syz.1.18701': attribute type 11 has an invalid length. [ 893.091830][ T9816] netlink: 'syz.2.18712': attribute type 21 has an invalid length. [ 893.766895][ T9862] netlink: 'syz.1.18724': attribute type 2 has an invalid length. [ 893.791051][ T9862] netlink: 'syz.1.18724': attribute type 1 has an invalid length. [ 894.238088][ T9891] netlink: 'syz.0.18747': attribute type 21 has an invalid length. [ 894.708544][ T9925] netlink: 'syz.1.18753': attribute type 21 has an invalid length. [ 895.635593][ T9972] netlink: 'syz.0.18772': attribute type 3 has an invalid length. [ 895.671760][ T9972] __nla_validate_parse: 12 callbacks suppressed [ 895.671777][ T9972] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.18772'. [ 896.904005][T10054] netlink: 'syz.2.18807': attribute type 3 has an invalid length. [ 896.915031][T10054] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.18807'. [ 897.112727][T10069] netlink: 'syz.1.18819': attribute type 21 has an invalid length. [ 897.151081][T10069] netlink: 156 bytes leftover after parsing attributes in process `syz.1.18819'. [ 897.421290][T10088] netlink: 'syz.3.18829': attribute type 3 has an invalid length. [ 897.429381][T10088] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.18829'. [ 899.099053][T10185] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.18876'. [ 899.129992][T10185] netlink: 18430 bytes leftover after parsing attributes in process `syz.2.18876'. [ 899.316986][T10200] netlink: 'syz.1.18882': attribute type 15 has an invalid length. [ 899.357774][T10200] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.18882'. [ 900.374416][T10219] netlink: 'syz.1.18888': attribute type 21 has an invalid length. [ 900.382485][T10223] netlink: 'syz.2.18894': attribute type 3 has an invalid length. [ 901.955961][T10301] netlink: 'syz.1.18931': attribute type 3 has an invalid length. [ 902.020598][T10305] netlink: 'syz.2.18933': attribute type 21 has an invalid length. [ 902.617546][T10334] netlink: 'syz.3.18946': attribute type 21 has an invalid length. [ 902.665247][T10336] netlink: 'syz.0.18947': attribute type 15 has an invalid length. [ 902.683913][T10336] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.18947'. [ 902.719779][T10340] netlink: 'syz.4.18948': attribute type 3 has an invalid length. [ 903.186853][T10363] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.18958'. [ 903.208084][T10365] netlink: 'syz.4.18962': attribute type 15 has an invalid length. [ 903.246016][T10365] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.18962'. [ 903.277707][T10363] netlink: 18430 bytes leftover after parsing attributes in process `syz.1.18958'. [ 906.047447][T10462] netlink: 80236 bytes leftover after parsing attributes in process `syz.0.19009'. [ 908.834444][T10597] netlink: 'syz.4.19076': attribute type 12 has an invalid length. [ 908.846319][T10597] netlink: 172 bytes leftover after parsing attributes in process `syz.4.19076'. [ 908.921812][T10601] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.19078'. [ 910.351985][T10674] netlink: 'syz.1.19112': attribute type 12 has an invalid length. [ 910.385840][T10674] netlink: 172 bytes leftover after parsing attributes in process `syz.1.19112'. [ 910.630088][T10682] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.19116'. [ 912.203315][T10761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 913.401937][T10817] Dead loop on virtual device ip6_vti0, fix it urgently! [ 913.584460][T10825] netlink: 'syz.3.19186': attribute type 12 has an invalid length. [ 913.592392][T10825] netlink: 172 bytes leftover after parsing attributes in process `syz.3.19186'. [ 916.918482][T10950] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.19246'. [ 917.160578][T10956] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.19249'. [ 917.280333][T10960] Dead loop on virtual device ip6_vti0, fix it urgently! [ 917.567516][T10982] netlink: 'syz.4.19263': attribute type 29 has an invalid length. [ 917.588904][T10982] netlink: 'syz.4.19263': attribute type 29 has an invalid length. [ 917.600504][T10982] netlink: 'syz.4.19263': attribute type 29 has an invalid length. [ 917.726557][T10992] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.19268'. [ 917.978586][T11012] netlink: 'syz.2.19278': attribute type 29 has an invalid length. [ 917.987457][T11012] netlink: 'syz.2.19278': attribute type 29 has an invalid length. [ 918.036802][T11012] netlink: 'syz.2.19278': attribute type 29 has an invalid length. [ 918.215146][T11026] netlink: 2530 bytes leftover after parsing attributes in process `syz.3.19284'. [ 918.407803][T11041] netlink: 2530 bytes leftover after parsing attributes in process `syz.0.19303'. [ 918.553324][T11053] netlink: 'syz.0.19294': attribute type 29 has an invalid length. [ 918.567713][T11053] netlink: 'syz.0.19294': attribute type 29 has an invalid length. [ 918.581753][T11053] netlink: 'syz.0.19294': attribute type 29 has an invalid length. [ 919.118339][T11077] netlink: 2530 bytes leftover after parsing attributes in process `syz.1.19308'. [ 920.206932][T11132] netlink: 'syz.1.19336': attribute type 1 has an invalid length. [ 922.576520][T11252] netlink: 60 bytes leftover after parsing attributes in process `syz.4.19391'. [ 922.885321][T11277] netlink: 76 bytes leftover after parsing attributes in process `syz.3.19402'. [ 923.120055][T11293] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19408'. [ 923.419446][T11314] netlink: 76 bytes leftover after parsing attributes in process `syz.0.19416'. [ 923.517358][T11320] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19422'. [ 924.094648][T11350] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.19436'. [ 924.503881][T11367] validate_nla: 1 callbacks suppressed [ 924.503899][T11367] netlink: 'syz.1.19445': attribute type 29 has an invalid length. [ 924.518384][T11367] netlink: 'syz.1.19445': attribute type 29 has an invalid length. [ 924.531014][T11367] netlink: 'syz.1.19445': attribute type 29 has an invalid length. [ 924.939716][T11398] netlink: 'syz.4.19457': attribute type 8 has an invalid length. [ 924.949340][T11398] netlink: 'syz.4.19457': attribute type 7 has an invalid length. [ 925.069401][T11404] netlink: 152 bytes leftover after parsing attributes in process `syz.1.19459'. [ 925.078884][T11398] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.19457'. [ 925.931314][T11437] netlink: 'syz.1.19470': attribute type 8 has an invalid length. [ 925.959889][T11437] netlink: 'syz.1.19470': attribute type 7 has an invalid length. [ 925.975037][T11437] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.19470'. [ 926.081402][T11446] netlink: 'syz.4.19477': attribute type 29 has an invalid length. [ 926.112385][T11446] netlink: 'syz.4.19477': attribute type 29 has an invalid length. [ 926.137780][T11452] netlink: 'syz.4.19477': attribute type 29 has an invalid length. [ 926.394203][T11469] netlink: 152 bytes leftover after parsing attributes in process `syz.0.19488'. [ 928.335805][T11553] __nla_validate_parse: 4 callbacks suppressed [ 928.335825][T11553] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.19524'. [ 928.974505][T11583] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.19540'. [ 929.865918][T11630] validate_nla: 4 callbacks suppressed [ 929.865938][T11630] netlink: 'syz.4.19566': attribute type 3 has an invalid length. [ 929.953600][T11630] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.19566'. [ 931.275642][T11697] netlink: 'syz.0.19595': attribute type 3 has an invalid length. [ 931.294173][T11697] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.19595'. [ 931.385571][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.392039][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.648538][T11724] netlink: 'syz.1.19606': attribute type 1 has an invalid length. [ 931.659745][T11724] netlink: 5 bytes leftover after parsing attributes in process `syz.1.19606'. [ 931.844732][T11737] netlink: 'syz.3.19612': attribute type 3 has an invalid length. [ 931.863828][T11737] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.19612'. [ 932.183943][T11762] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.19623'. [ 933.058768][T11807] netlink: 'syz.4.19642': attribute type 29 has an invalid length. [ 933.074019][T11807] netlink: 'syz.4.19642': attribute type 29 has an invalid length. [ 933.094595][T11803] netlink: 'syz.4.19642': attribute type 29 has an invalid length. [ 933.562693][T11828] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.19652'. [ 934.147795][T11847] netlink: 'syz.2.19661': attribute type 1 has an invalid length. [ 934.178829][T11847] netlink: 5 bytes leftover after parsing attributes in process `syz.2.19661'. [ 934.527718][T11864] netlink: 160 bytes leftover after parsing attributes in process `syz.4.19671'. [ 934.655880][T11873] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.19675'. [ 935.495806][T11912] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.19694'. [ 935.811815][T11923] netlink: 'syz.2.19699': attribute type 33 has an invalid length. [ 935.843655][T11923] netlink: 152 bytes leftover after parsing attributes in process `syz.2.19699'. [ 935.875514][T11931] netlink: 160 bytes leftover after parsing attributes in process `syz.0.19702'. [ 937.039988][T11970] netlink: 'syz.1.19731': attribute type 33 has an invalid length. [ 937.059925][T11970] netlink: 152 bytes leftover after parsing attributes in process `syz.1.19731'. [ 937.182157][T11977] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.19723'. [ 938.084090][T12002] netlink: 'syz.0.19736': attribute type 33 has an invalid length. [ 938.092506][T12002] netlink: 152 bytes leftover after parsing attributes in process `syz.0.19736'. [ 938.625884][T12025] __nla_validate_parse: 1 callbacks suppressed [ 938.625908][T12025] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.19746'. [ 938.776759][T12031] netlink: 'syz.4.19749': attribute type 33 has an invalid length. [ 938.795030][T12031] netlink: 152 bytes leftover after parsing attributes in process `syz.4.19749'. [ 940.002000][T12068] netlink: 'syz.3.19765': attribute type 33 has an invalid length. [ 940.050055][T12068] netlink: 152 bytes leftover after parsing attributes in process `syz.3.19765'. [ 940.350898][T12085] netlink: 'syz.4.19775': attribute type 10 has an invalid length. [ 940.368345][T12085] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19775'. [ 940.407739][T12085] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 941.127349][T12119] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19791'. [ 942.156870][T12158] netlink: 'syz.4.19808': attribute type 29 has an invalid length. [ 942.165727][T12158] netlink: 'syz.4.19808': attribute type 29 has an invalid length. [ 942.176601][T12158] netlink: 'syz.4.19808': attribute type 29 has an invalid length. [ 942.688649][T12188] netlink: 399 bytes leftover after parsing attributes in process `syz.2.19822'. [ 942.789244][T12188] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 942.801263][T12188] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 943.926064][T12229] netlink: 'syz.2.19843': attribute type 21 has an invalid length. [ 943.948214][T12229] netlink: 164 bytes leftover after parsing attributes in process `syz.2.19843'. [ 944.446721][T12255] netlink: 'syz.1.19855': attribute type 29 has an invalid length. [ 944.475476][T12255] netlink: 'syz.1.19855': attribute type 29 has an invalid length. [ 944.511723][T12255] netlink: 'syz.1.19855': attribute type 29 has an invalid length. [ 944.647597][T12266] netlink: 13824 bytes leftover after parsing attributes in process `syz.0.19860'. [ 944.726937][T12269] netlink: 'syz.0.19862': attribute type 1 has an invalid length. [ 944.745206][T12269] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.19862'. [ 945.989634][T12334] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.19892'. [ 946.016888][T12331] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.19892'. [ 947.507328][T12414] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.19931'. [ 948.691243][T12464] netlink: 'syz.0.19954': attribute type 29 has an invalid length. [ 948.723910][T12464] netlink: 'syz.0.19954': attribute type 29 has an invalid length. [ 948.782486][T12466] netlink: 'syz.2.19956': attribute type 29 has an invalid length. [ 948.790950][T12466] netlink: 'syz.2.19956': attribute type 29 has an invalid length. [ 949.107793][T12495] netlink: 160 bytes leftover after parsing attributes in process `syz.1.19970'. [ 949.120541][T12494] netlink: 'syz.3.19969': attribute type 1 has an invalid length. [ 949.143766][T12494] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.19969'. [ 949.466613][T12519] netlink: 'syz.0.19981': attribute type 1 has an invalid length. [ 949.826021][T12537] tap0: tun_chr_ioctl cmd 1074025677 [ 949.831514][T12537] tap0: linktype set to 774 [ 949.914976][T12542] netlink: 'syz.1.19991': attribute type 33 has an invalid length. [ 949.933233][T12542] netlink: 'syz.1.19991': attribute type 10 has an invalid length. [ 949.952503][T12542] netlink: 108 bytes leftover after parsing attributes in process `syz.1.19991'. [ 949.972041][T12542] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 950.068032][T12548] netlink: 68 bytes leftover after parsing attributes in process `syz.2.19993'. [ 950.592314][T12577] tap0: tun_chr_ioctl cmd 1074025677 [ 950.625289][T12577] tap0: linktype set to 1 [ 950.662840][T12583] rose0: tun_chr_ioctl cmd 1074025677 [ 950.676619][T12583] rose0: linktype set to 821 [ 950.891412][T12594] tap0: tun_chr_ioctl cmd 2147767507 [ 951.262193][T12620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20028'. [ 951.526667][T12630] netlink: 44 bytes leftover after parsing attributes in process `syz.1.20033'. [ 951.537612][T12630] netlink: 'syz.1.20033': attribute type 8 has an invalid length. [ 951.666587][T12633] netlink: 'syz.1.20034': attribute type 1 has an invalid length. [ 951.674744][T12633] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.20034'. [ 954.666676][T12651] netlink: 'syz.0.20041': attribute type 10 has an invalid length. [ 954.706526][T12650] netlink: 'syz.4.20040': attribute type 29 has an invalid length. [ 954.743903][T12650] netlink: 'syz.4.20040': attribute type 29 has an invalid length. [ 955.129566][T12685] netlink: 'syz.2.20058': attribute type 3 has an invalid length. [ 955.153595][T12685] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.20058'. [ 955.683792][T12726] netlink: 156 bytes leftover after parsing attributes in process `syz.3.20077'. [ 956.191512][T12757] netlink: 'syz.2.20091': attribute type 13 has an invalid length. [ 956.200988][T12757] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.20091'. [ 956.253612][T12761] netlink: 'syz.0.20094': attribute type 5 has an invalid length. [ 956.378929][T12769] netlink: 56 bytes leftover after parsing attributes in process `syz.2.20097'. [ 957.347309][T12829] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.20126'. [ 957.357456][T12828] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.20126'. [ 957.795735][T12837] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.20130'. [ 957.987500][T12849] netlink: 'syz.0.20136': attribute type 39 has an invalid length. [ 958.485585][T12881] tap0: tun_chr_ioctl cmd 1074025677 [ 958.491117][T12881] tap0: linktype set to 776 [ 959.792091][T12944] netlink: 'syz.0.20177': attribute type 33 has an invalid length. [ 959.812513][T12944] netlink: 152 bytes leftover after parsing attributes in process `syz.0.20177'. [ 960.035149][T12959] netlink: 'syz.2.20187': attribute type 8 has an invalid length. [ 960.043099][T12959] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.20187'. [ 960.105842][T12962] netlink: 80236 bytes leftover after parsing attributes in process `syz.1.20190'. [ 960.576257][T12995] delete_channel: no stack [ 960.599928][T12995] delete_channel: no stack [ 961.006491][T13011] netlink: 'syz.4.20210': attribute type 10 has an invalid length. [ 961.010474][T13014] netlink: 128384 bytes leftover after parsing attributes in process `syz.2.20212'. [ 961.049551][T13014] netlink: 62994 bytes leftover after parsing attributes in process `syz.2.20212'. [ 961.182404][T13023] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20217'. [ 962.260194][T13082] netlink: 'syz.4.20244': attribute type 3 has an invalid length. [ 962.283298][T13082] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.20244'. [ 962.598538][T13107] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 962.648262][T13107] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 962.900864][T13126] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20264'. [ 962.913512][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20264'. [ 963.372706][T13158] tap0: tun_chr_ioctl cmd 1074025673 [ 963.847033][T13178] tap0: tun_chr_ioctl cmd 1074025681 [ 964.760920][T13203] netlink: 'syz.0.20299': attribute type 12 has an invalid length. [ 964.774604][T13203] netlink: 'syz.0.20299': attribute type 9 has an invalid length. [ 966.923859][T13292] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.20340'. [ 967.650987][T13326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20354'. [ 967.678353][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20354'. [ 967.700829][T13330] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 968.567085][T13356] Â: renamed from pim6reg1 [ 968.828361][T13375] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20377'. [ 969.067395][T13392] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.20384'. [ 969.261596][T13402] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20389'. [ 969.277908][T13402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20389'. [ 969.297485][T13402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20389'. [ 969.319236][T13402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20389'. [ 969.847343][T13431] netlink: 'syz.3.20404': attribute type 27 has an invalid length. [ 969.870297][T13431] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.20404'. [ 970.134147][T13459] tap0: tun_chr_ioctl cmd 1074025677 [ 970.139864][T13459] tap0: linktype set to 512 [ 970.159134][T13461] netlink: 'syz.1.20417': attribute type 21 has an invalid length. [ 970.167252][T13461] netlink: 'syz.1.20417': attribute type 1 has an invalid length. [ 970.499661][T13485] device veth0_vlan left promiscuous mode [ 970.506572][T13485] device veth0_vlan entered promiscuous mode [ 970.780011][T13497] netlink: 'syz.0.20435': attribute type 29 has an invalid length. [ 971.676321][T13506] netpci0: tun_chr_ioctl cmd 1074025676 [ 971.713573][T13506] netpci0: owner set to 0 [ 972.037289][T13533] netlink: 'syz.0.20451': attribute type 16 has an invalid length. [ 972.055892][T13533] __nla_validate_parse: 2 callbacks suppressed [ 972.055909][T13533] netlink: 152 bytes leftover after parsing attributes in process `syz.0.20451'. [ 976.821892][T13639] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.20501'. [ 977.051895][T13656] netlink: 'syz.2.20509': attribute type 5 has an invalid length. [ 977.080490][T13656] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.20509'. [ 977.138754][ T3769] cgroup: fork rejected by pids controller in /syz4 [ 977.232165][T13669] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 977.238910][T13669] dvmrp1: linktype set to 769 [ 977.429349][T25344] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.687167][T25344] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.786635][T25344] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.947031][T25344] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.009023][T13707] netlink: 134728 bytes leftover after parsing attributes in process `syz.3.20534'. [ 978.043744][T13707] netlink: 52 bytes leftover after parsing attributes in process `syz.3.20534'. [ 978.204345][ T3777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 978.233619][ T3777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 978.241916][ T3777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 978.250481][ T3777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 978.258218][ T3777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 978.267527][ T3777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 978.287086][T13721] syz.3.20539[13721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 978.287236][T13721] syz.3.20539[13721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 978.578905][T13743] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.20546'. [ 979.507533][T13714] chnl_net:caif_netlink_parms(): no params data found [ 979.768618][T13714] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.780661][T13714] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.801901][T13714] device bridge_slave_0 entered promiscuous mode [ 979.861189][T13714] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.875437][T13714] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.893099][T13714] device bridge_slave_1 entered promiscuous mode [ 979.979139][T13801] netlink: 'syz.3.20562': attribute type 40 has an invalid length. [ 980.031238][T13801] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20562'. [ 980.044097][T13801] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 980.068335][T13714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.108288][T13714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.232168][T13714] team0: Port device team_slave_0 added [ 980.259930][T13714] team0: Port device team_slave_1 added [ 980.343682][ T48] Bluetooth: hci3: command tx timeout [ 980.368289][T13714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.387585][T13714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.484836][T13714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.506193][T13823] netlink: 'syz.3.20572': attribute type 10 has an invalid length. [ 980.527896][T13823] device netdevsim0 entered promiscuous mode [ 980.537554][T13823] team0: Port device netdevsim0 added [ 980.544741][T13825] netlink: 'syz.3.20572': attribute type 10 has an invalid length. [ 980.552891][T13825] device netdevsim0 left promiscuous mode [ 980.584834][T13825] team0: Port device netdevsim0 removed [ 980.607503][T13825] device netdevsim0 entered promiscuous mode [ 980.615673][T13825] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 980.636816][T13714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.657565][T13714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.720601][T13714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.764306][T13835] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20575'. [ 980.793878][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20575'. [ 980.814141][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20575'. [ 980.825880][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20575'. [ 980.945572][T25344] device wlan1 left promiscuous mode [ 980.962562][T25344] team0: Port device wlan1 removed [ 981.030958][T13847] pim6reg0: tun_chr_ioctl cmd 35108 [ 981.100352][T13714] device hsr_slave_0 entered promiscuous mode [ 981.144032][T13714] device hsr_slave_1 entered promiscuous mode [ 981.225637][T13853] netlink: 'syz.3.20584': attribute type 1 has an invalid length. [ 981.248449][T13853] netlink: 44 bytes leftover after parsing attributes in process `syz.3.20584'. [ 981.376228][T25344] device hsr_slave_0 left promiscuous mode [ 981.395279][T25344] device hsr_slave_1 left promiscuous mode [ 981.455928][T25344] device veth1_vlan left promiscuous mode [ 982.078007][T25344] device team_slave_1 left promiscuous mode [ 982.085640][T25344] team0 (unregistering): Port device team_slave_1 removed [ 982.164817][T25344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.427990][ T48] Bluetooth: hci3: command tx timeout [ 982.547078][T25344] bond0 (unregistering): Released all slaves [ 982.586401][T13870] netlink: 'syz.3.20590': attribute type 4 has an invalid length. [ 982.605375][T13888] netlink: 'syz.0.20596': attribute type 39 has an invalid length. [ 982.632921][T13888] netlink: 'syz.0.20596': attribute type 4 has an invalid length. [ 982.654556][T13888] netlink: 152 bytes leftover after parsing attributes in process `syz.0.20596'. [ 982.693207][T13888] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 982.860979][T13902] netlink: 'syz.1.20600': attribute type 10 has an invalid length. [ 982.877878][T13902] netlink: 3867 bytes leftover after parsing attributes in process `syz.1.20600'. [ 984.330850][T13714] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 984.351073][T13714] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 984.371842][T13714] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 984.393906][T13972] netlink: 'syz.1.20627': attribute type 29 has an invalid length. [ 984.420411][T13714] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 984.456053][T13972] netlink: 'syz.1.20627': attribute type 29 has an invalid length. [ 984.503791][ T3777] Bluetooth: hci3: command tx timeout [ 984.794206][T13714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 984.826035][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 984.841947][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 984.869458][T13714] 8021q: adding VLAN 0 to HW filter on device team0 [ 984.916723][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 984.949443][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 984.982361][T25352] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.989602][T25352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.998213][T14004] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.20639'. [ 985.010706][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 985.037608][T13893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 985.050945][T13893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 985.072549][T13893] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.079772][T13893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.116457][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 985.157918][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 985.182472][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 985.218636][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 985.242422][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 985.266541][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 985.287820][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 985.316565][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 985.331785][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 985.361829][T13714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 985.403184][T13714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 985.432399][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 985.446494][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 985.988884][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 985.997331][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 986.030495][T13714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.584825][ T3777] Bluetooth: hci3: command tx timeout [ 986.798860][T14069] netlink: 'syz.2.20655': attribute type 12 has an invalid length. [ 986.819249][T14069] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.20655'. [ 986.868140][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 986.896970][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 986.951019][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 986.975610][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 986.995058][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 987.006040][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 987.019259][T13714] device veth0_vlan entered promiscuous mode [ 987.031856][T14073] netlink: 'syz.2.20656': attribute type 21 has an invalid length. [ 987.058231][T14073] netlink: 'syz.2.20656': attribute type 2 has an invalid length. [ 987.077819][T14073] netlink: 15970 bytes leftover after parsing attributes in process `syz.2.20656'. [ 987.123801][T13714] device veth1_vlan entered promiscuous mode [ 987.189928][T13893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 987.205500][T13893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 987.234891][T13893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 987.266977][T13893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 987.329150][T13714] device veth0_macvtap entered promiscuous mode [ 987.349727][T14084] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.20660'. [ 987.377325][T13714] device veth1_macvtap entered promiscuous mode [ 987.438623][T13714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.454214][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 987.472610][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 987.485459][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 987.512252][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 987.528225][T13714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.547498][T14094] netlink: 'syz.2.20665': attribute type 16 has an invalid length. [ 987.557423][T14094] netlink: 48 bytes leftover after parsing attributes in process `syz.2.20665'. [ 987.576089][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 987.592909][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 987.622114][T13714] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.656440][T13714] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.699310][T13714] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.767986][T13714] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.798791][T14099] IPv6: Can't replace route, no match found [ 988.045053][T25352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.062145][T25352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.090577][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 988.158952][T25352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.179321][T25352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.215472][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 988.297455][T14123] netlink: 'syz.3.20675': attribute type 3 has an invalid length. [ 988.322787][T14123] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.20675'. [ 988.414251][T14134] netlink: 'syz.4.20677': attribute type 10 has an invalid length. [ 988.480048][T14134] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 988.895215][T14155] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.20685'. [ 989.269334][T14180] netlink: 'syz.2.20693': attribute type 29 has an invalid length. [ 989.287914][T14180] netlink: 'syz.2.20693': attribute type 29 has an invalid length. [ 989.501425][T14188] netlink: 830 bytes leftover after parsing attributes in process `syz.2.20698'. [ 989.556371][T14194] netlink: 'syz.3.20699': attribute type 33 has an invalid length. [ 989.583680][T14194] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20699'. [ 989.599054][T14199] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.20702'. [ 990.589335][T14262] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20727'. [ 990.633762][T14262] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20727'. [ 990.649367][T14268] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20727'. [ 990.661303][T14262] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20727'. [ 992.176225][T14355] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.20761'. [ 992.825489][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.831864][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.478640][T14395] netlink: 'syz.2.20790': attribute type 10 has an invalid length. [ 993.493560][T14395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20790'. [ 993.513589][T14395] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 993.932254][T14416] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.20789'. [ 994.613276][T14450] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20806'. [ 994.813265][T14464] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.20810'. [ 995.811423][T14510] netlink: 399 bytes leftover after parsing attributes in process `syz.0.20838'. [ 995.826732][T14510] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 995.843544][T14510] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 996.675139][T14554] netlink: 'syz.3.20857': attribute type 21 has an invalid length. [ 996.692977][T14554] netlink: 164 bytes leftover after parsing attributes in process `syz.3.20857'. [ 997.258835][T14579] netlink: 'syz.3.20872': attribute type 29 has an invalid length. [ 997.297681][T14579] netlink: 'syz.3.20872': attribute type 29 has an invalid length. [ 997.331055][T14585] netlink: 'syz.3.20872': attribute type 29 has an invalid length. [ 997.364877][T14587] netlink: 13824 bytes leftover after parsing attributes in process `syz.4.20873'. [ 997.458075][T14591] netlink: 'syz.3.20875': attribute type 1 has an invalid length. [ 997.486768][T14591] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.20875'. [ 998.999602][T14666] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.20909'. [ 999.045124][T14661] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.20909'. [ 1000.373328][T14741] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.20948'. [ 1001.742125][T14800] netlink: 160 bytes leftover after parsing attributes in process `syz.3.20985'. [ 1001.762775][T14795] netlink: 'syz.4.20972': attribute type 29 has an invalid length. [ 1001.782649][T14796] netlink: 'syz.1.20973': attribute type 29 has an invalid length. [ 1001.794251][T14796] netlink: 'syz.1.20973': attribute type 29 has an invalid length. [ 1001.811808][T14795] netlink: 'syz.4.20972': attribute type 29 has an invalid length. [ 1002.152477][T14824] netlink: 'syz.0.20987': attribute type 1 has an invalid length. [ 1002.170982][T14824] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.20987'. [ 1002.376307][T14843] netlink: 'syz.1.20997': attribute type 1 has an invalid length. [ 1002.725142][T14862] netlink: 'syz.2.21006': attribute type 33 has an invalid length. [ 1002.735768][T14862] netlink: 'syz.2.21006': attribute type 10 has an invalid length. [ 1002.744191][T14862] netlink: 108 bytes leftover after parsing attributes in process `syz.2.21006'. [ 1002.759009][T14862] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1002.791114][T14865] tap0: tun_chr_ioctl cmd 1074025677 [ 1002.813730][T14865] tap0: linktype set to 774 [ 1002.883108][T14875] netlink: 68 bytes leftover after parsing attributes in process `syz.4.21009'. [ 1003.451871][T14908] tap0: tun_chr_ioctl cmd 1074025677 [ 1003.473755][T14908] tap0: linktype set to 1 [ 1003.537829][T14912] rose0: tun_chr_ioctl cmd 1074025677 [ 1003.560645][T14912] rose0: linktype set to 821 [ 1003.702718][T14920] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21041'. [ 1003.928469][T14931] tap0: tun_chr_ioctl cmd 2147767507 [ 1004.269050][T14949] netlink: 44 bytes leftover after parsing attributes in process `syz.4.21045'. [ 1004.304298][T14949] netlink: 'syz.4.21045': attribute type 8 has an invalid length. [ 1004.408538][T14957] netlink: 'syz.4.21047': attribute type 1 has an invalid length. [ 1004.418309][T14957] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.21047'. [ 1004.763405][T14973] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1007.580845][T14974] netlink: 'syz.4.21055': attribute type 10 has an invalid length. [ 1007.606417][T14974] bond0: (slave bond_slave_0): Releasing backup interface [ 1008.205455][T15013] netlink: 'syz.0.21074': attribute type 3 has an invalid length. [ 1008.238494][T15013] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.21074'. [ 1008.668549][T15049] netlink: 156 bytes leftover after parsing attributes in process `syz.1.21091'. [ 1009.239945][T15086] netlink: 'syz.2.21109': attribute type 5 has an invalid length. [ 1009.257162][T15087] netlink: 'syz.3.21108': attribute type 13 has an invalid length. [ 1009.272135][T15087] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.21108'. [ 1009.442117][T15097] netlink: 56 bytes leftover after parsing attributes in process `syz.4.21115'. [ 1010.058624][T15134] netlink: 'syz.3.21132': attribute type 10 has an invalid length. [ 1010.066940][T15134] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21132'. [ 1010.503706][T15163] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.21145'. [ 1010.536205][T15160] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.21145'. [ 1010.656567][T15171] netlink: 'syz.4.21151': attribute type 39 has an invalid length. [ 1011.337394][T15204] tap0: tun_chr_ioctl cmd 1074025677 [ 1011.349963][T15204] tap0: linktype set to 776 [ 1012.247458][T15267] netlink: 'syz.2.21195': attribute type 33 has an invalid length. [ 1012.286079][T15267] netlink: 152 bytes leftover after parsing attributes in process `syz.2.21195'. [ 1012.801578][T15284] netlink: 'syz.4.21205': attribute type 8 has an invalid length. [ 1012.811351][T15284] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.21205'. [ 1012.897421][T15290] netlink: 80236 bytes leftover after parsing attributes in process `syz.2.21206'. [ 1013.315953][T15313] delete_channel: no stack [ 1013.333040][T15313] delete_channel: no stack [ 1013.367308][T15318] netlink: 'syz.1.21219': attribute type 10 has an invalid length. [ 1013.382852][T15318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21219'. [ 1013.425013][T15318] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1013.564177][T15328] netlink: 'syz.3.21227': attribute type 10 has an invalid length. [ 1013.572456][T15328] device bridge_slave_0 left promiscuous mode [ 1013.579077][T15328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.981004][T15335] netlink: 128384 bytes leftover after parsing attributes in process `syz.3.21229'. [ 1014.013674][T15335] netlink: 62994 bytes leftover after parsing attributes in process `syz.3.21229'. [ 1014.615528][T15370] netlink: 'syz.0.21242': attribute type 10 has an invalid length. [ 1014.678582][T15370] __nla_validate_parse: 1 callbacks suppressed [ 1014.678604][T15370] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21242'. [ 1014.869626][T15385] netlink: 'syz.0.21262': attribute type 10 has an invalid length. [ 1014.903662][T15385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21262'. [ 1015.438071][T15418] netlink: 'syz.3.21267': attribute type 3 has an invalid length. [ 1015.460296][T15418] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.21267'. [ 1015.872290][T15446] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21278'. [ 1015.901886][T15446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21278'. [ 1016.296364][T15469] tap0: tun_chr_ioctl cmd 1074025673 [ 1016.317513][T15473] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1016.328923][T15473] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1016.584321][T15488] tap0: tun_chr_ioctl cmd 1074025681 [ 1020.124508][T15619] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.21361'. [ 1020.427439][T15631] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21367'. [ 1020.454290][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21367'. [ 1021.686243][T15668] Â: renamed from pim6reg1 [ 1022.052109][T15684] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21403'. [ 1022.071185][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21403'. [ 1022.082040][T15685] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21392'. [ 1022.094436][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21403'. [ 1022.104689][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21403'. [ 1022.367807][T15703] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.21400'. [ 1023.064470][T15750] netlink: 'syz.0.21422': attribute type 27 has an invalid length. [ 1023.075330][T15750] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.21422'. [ 1023.269714][T15763] tap0: tun_chr_ioctl cmd 1074025677 [ 1023.275392][T15763] tap0: linktype set to 512 [ 1023.721618][T15788] device veth0_vlan left promiscuous mode [ 1023.732527][T15788] device veth0_vlan entered promiscuous mode [ 1023.742661][T15790] netlink: 'syz.0.21443': attribute type 21 has an invalid length. [ 1023.755101][T15790] netlink: 'syz.0.21443': attribute type 1 has an invalid length. [ 1023.772872][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1025.133583][T15820] netpci0: tun_chr_ioctl cmd 1074025676 [ 1025.139312][T15820] netpci0: owner set to 0 [ 1025.317811][T15834] netlink: 'syz.1.21466': attribute type 16 has an invalid length. [ 1025.363810][T15834] __nla_validate_parse: 1 callbacks suppressed [ 1025.363832][T15834] netlink: 152 bytes leftover after parsing attributes in process `syz.1.21466'. [ 1025.423957][T15834] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1027.158719][T15923] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.21518'. [ 1027.435731][T15938] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21511'. [ 1028.083136][ T3765] cgroup: fork rejected by pids controller in /syz2 [ 1028.166897][T15957] netlink: 'syz.1.21525': attribute type 5 has an invalid length. [ 1028.217703][T15957] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.21525'. [ 1028.415361][T15967] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1030.636928][T25352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.734949][T15978] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1030.740612][T15978] dvmrp1: linktype set to 769 [ 1031.358044][ T3777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1031.367160][ T3777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1031.424755][ T3777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1031.429279][T25352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.446385][ T3777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1031.454409][ T3777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1031.462030][ T3777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1031.474428][T16006] netlink: 134728 bytes leftover after parsing attributes in process `syz.1.21549'. [ 1031.485864][T16006] netlink: 52 bytes leftover after parsing attributes in process `syz.1.21549'. [ 1031.589543][T25352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.767076][T16021] syz.4.21553[16021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1031.767253][T16021] syz.4.21553[16021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1032.407659][T25352] bond0: (slave netdevsim0): Releasing backup interface [ 1032.433189][T25352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.446155][T16030] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.21557'. [ 1032.773090][T16001] chnl_net:caif_netlink_parms(): no params data found [ 1033.240415][T16001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.248553][T16001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.257877][T16001] device bridge_slave_0 entered promiscuous mode [ 1033.266421][T16059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21566'. [ 1033.276709][T16001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.286688][T16001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.322500][T16001] device bridge_slave_1 entered promiscuous mode [ 1033.450787][T16001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.512696][T16001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.543732][ T3777] Bluetooth: hci2: command tx timeout [ 1033.689571][T16001] team0: Port device team_slave_0 added [ 1033.759080][T16001] team0: Port device team_slave_1 added [ 1033.868430][T16089] netlink: 'syz.4.21577': attribute type 40 has an invalid length. [ 1033.883251][T16089] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21577'. [ 1033.894303][T16089] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1033.951219][T16001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1033.958507][T16001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.020598][T16001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.096937][T16001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.109420][T16001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.205750][T16001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.417026][T16001] device hsr_slave_0 entered promiscuous mode [ 1034.440564][T16001] device hsr_slave_1 entered promiscuous mode [ 1034.454502][T16001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1034.471921][T16001] Cannot create hsr debugfs directory [ 1034.601970][T16114] netlink: 'syz.0.21587': attribute type 10 has an invalid length. [ 1034.611562][T16114] device netdevsim0 left promiscuous mode [ 1034.643032][T16114] device netdevsim0 entered promiscuous mode [ 1034.682488][T16114] team0: Port device netdevsim0 added [ 1034.745246][T16119] netlink: 'syz.0.21587': attribute type 10 has an invalid length. [ 1034.778545][T16119] device netdevsim0 left promiscuous mode [ 1034.845304][T16119] team0: Port device netdevsim0 removed [ 1034.874100][T16119] device netdevsim0 entered promiscuous mode [ 1034.880760][T16119] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1035.018560][T16130] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21591'. [ 1035.293681][T16149] pim6reg0: tun_chr_ioctl cmd 35108 [ 1035.372555][T25352] device hsr_slave_0 left promiscuous mode [ 1035.406574][T25352] device hsr_slave_1 left promiscuous mode [ 1035.461009][T25352] device veth0_vlan left promiscuous mode [ 1035.623709][ T3777] Bluetooth: hci2: command tx timeout [ 1035.758990][T25352] device vlan0 left promiscuous mode [ 1035.768372][T25352] team0 (unregistering): Port device vlan0 removed [ 1035.955923][T25352] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1035.995240][T25352] device team_slave_1 left promiscuous mode [ 1036.002243][T25352] team0 (unregistering): Port device team_slave_1 removed [ 1036.073192][T25352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1036.230906][T25352] device dummy0 left promiscuous mode [ 1036.237537][T25352] team0 (unregistering): Port device dummy0 removed [ 1036.464757][T25352] bond0 (unregistering): Released all slaves [ 1036.494102][T16156] netlink: 'syz.0.21600': attribute type 1 has an invalid length. [ 1036.502068][T16156] netlink: 44 bytes leftover after parsing attributes in process `syz.0.21600'. [ 1036.511858][T16165] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21604'. [ 1036.522448][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21604'. [ 1036.544136][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21604'. [ 1036.564896][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21604'. [ 1036.597528][T16171] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21608'. [ 1036.818053][T16185] netlink: 'syz.4.21616': attribute type 10 has an invalid length. [ 1036.856186][T16185] netlink: 3867 bytes leftover after parsing attributes in process `syz.4.21616'. [ 1037.461099][T16001] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1037.486144][T16001] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1037.521741][T16001] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1037.558682][T16001] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1037.640250][T16227] netlink: 'syz.3.21631': attribute type 29 has an invalid length. [ 1037.665027][T16227] netlink: 'syz.3.21631': attribute type 29 has an invalid length. [ 1037.715295][ T3777] Bluetooth: hci2: command tx timeout [ 1037.826862][T16001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.882639][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1037.897874][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1037.940667][T16001] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.976455][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1038.014400][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1038.040398][T25338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.047576][T25338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.087144][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1038.106896][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1038.148711][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1038.179701][T25338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.186394][T16250] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.21641'. [ 1038.186885][T25338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.234959][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1038.280586][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1038.334026][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1038.357257][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1038.368394][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1038.388552][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1038.442411][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1038.462941][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1038.484660][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1038.509054][T16001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1038.527320][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1038.545656][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1038.555539][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1038.996513][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1039.013603][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1039.054475][T16001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.131940][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1039.149114][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1039.218151][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1039.236934][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1039.280201][T16001] device veth0_vlan entered promiscuous mode [ 1039.290135][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1039.314975][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1039.347859][T16001] device veth1_vlan entered promiscuous mode [ 1039.454815][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1039.471575][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1039.507689][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1039.534579][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1039.559697][T16001] device veth0_macvtap entered promiscuous mode [ 1039.595224][T16001] device veth1_macvtap entered promiscuous mode [ 1039.657242][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1039.680722][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1039.724135][T16001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.743659][T16001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.775036][T16001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.793449][ T3777] Bluetooth: hci2: command tx timeout [ 1039.805923][T16001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.851052][T16001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.878751][T16001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.899013][T16308] netlink: 'syz.4.21656': attribute type 12 has an invalid length. [ 1039.923504][T16308] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.21656'. [ 1039.961679][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1039.978069][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1039.999270][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1040.019140][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1040.047243][T16001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.058842][T16001] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.070359][T16001] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.082401][T16001] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.254390][T16318] netlink: 'syz.0.21660': attribute type 21 has an invalid length. [ 1040.262434][T16318] netlink: 'syz.0.21660': attribute type 2 has an invalid length. [ 1040.316552][T16318] netlink: 15970 bytes leftover after parsing attributes in process `syz.0.21660'. [ 1040.497682][T25338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.513715][T25338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.568102][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1040.588487][T25352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.616018][T25352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.661712][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1040.897116][T16347] netlink: 'syz.0.21668': attribute type 16 has an invalid length. [ 1040.989594][T16350] netlink: 'syz.1.21680': attribute type 10 has an invalid length. [ 1041.094258][T16350] device wlan1 left promiscuous mode [ 1041.102226][T16350] team0: Port device wlan1 removed [ 1041.128272][T16350] wlan1: mtu less than device minimum [ 1041.149338][T16350] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 1041.583075][T16377] netlink: 'syz.1.21678': attribute type 3 has an invalid length. [ 1041.624435][T16377] __nla_validate_parse: 2 callbacks suppressed [ 1041.624453][T16377] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.21678'. [ 1042.047570][T16406] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.21689'. [ 1042.253771][T16418] netlink: 'syz.4.21694': attribute type 49 has an invalid length. [ 1042.715021][T16442] netlink: 'syz.1.21705': attribute type 33 has an invalid length. [ 1042.722991][T16442] netlink: 152 bytes leftover after parsing attributes in process `syz.1.21705'. [ 1042.804784][T16444] netlink: 830 bytes leftover after parsing attributes in process `syz.3.21703'. [ 1043.096406][T16466] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.21712'. [ 1043.302234][T16475] netlink: 'syz.3.21717': attribute type 9 has an invalid length. [ 1043.353846][T16475] netlink: 131264 bytes leftover after parsing attributes in process `syz.3.21717'. [ 1043.475048][T16484] netlink: 'syz.1.21720': attribute type 21 has an invalid length. [ 1044.604820][T16537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21747'. [ 1044.625630][T16537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21747'. [ 1044.640703][T16537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21747'. [ 1044.656426][T16537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21747'. [ 1045.225329][T16570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.232491][T16570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.467603][T16584] validate_nla: 2 callbacks suppressed [ 1045.467625][T16584] netlink: 'syz.4.21770': attribute type 21 has an invalid length. [ 1045.484340][T16584] netlink: 'syz.4.21770': attribute type 22 has an invalid length. [ 1045.492409][T16584] netlink: 'syz.4.21770': attribute type 4 has an invalid length. [ 1046.080188][T16616] netlink: 'syz.0.21795': attribute type 21 has an invalid length. [ 1046.121466][T16616] netlink: 'syz.0.21795': attribute type 22 has an invalid length. [ 1046.136753][T16616] netlink: 'syz.0.21795': attribute type 4 has an invalid length. [ 1046.552258][T16633] device bond_slave_1 entered promiscuous mode [ 1046.558548][T16633] device wlan1 entered promiscuous mode [ 1046.731048][T16648] netlink: 'syz.0.21802': attribute type 33 has an invalid length. [ 1046.753554][T16648] __nla_validate_parse: 10 callbacks suppressed [ 1046.753573][T16648] netlink: 152 bytes leftover after parsing attributes in process `syz.0.21802'. [ 1046.818136][T16652] netlink: 'syz.2.21804': attribute type 49 has an invalid length. [ 1046.887831][T16656] netlink: 'syz.3.21815': attribute type 16 has an invalid length. [ 1046.918913][T16656] netlink: 48 bytes leftover after parsing attributes in process `syz.3.21815'. [ 1047.966258][T16701] netlink: 'syz.4.21826': attribute type 33 has an invalid length. [ 1047.993649][T16701] netlink: 152 bytes leftover after parsing attributes in process `syz.4.21826'. [ 1048.008968][T16706] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.21827'. [ 1048.015266][T16702] netlink: 830 bytes leftover after parsing attributes in process `syz.0.21822'. [ 1049.088327][T16765] team0: Port device netdevsim0 added [ 1049.175779][T16766] team0: Port device netdevsim0 removed [ 1049.195077][T16766] device netdevsim0 entered promiscuous mode [ 1049.202619][T16766] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1049.390888][T16781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21861'. [ 1049.424539][T16781] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1049.895692][T16807] syz.2.21887[16807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1049.895893][T16807] syz.2.21887[16807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1050.197833][T16820] bond0: (slave netdevsim0): Releasing backup interface [ 1050.278678][T16820] device netdevsim0 entered promiscuous mode [ 1050.290485][T16820] team0: Port device netdevsim0 added [ 1050.294158][T16825] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.21881'. [ 1050.312302][T16821] device netdevsim0 left promiscuous mode [ 1050.386913][T16821] team0: Port device netdevsim0 removed [ 1050.424351][T16821] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1050.442816][T16823] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21879'. [ 1050.469617][T16823] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1051.296241][ T3771] cgroup: fork rejected by pids controller in /syz3 [ 1051.447807][T16884] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.21908'. [ 1051.483623][T16884] netlink: 52 bytes leftover after parsing attributes in process `syz.0.21908'. [ 1051.750488][T25352] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.857684][T25352] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.991232][T25352] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.233129][ T3777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1052.241823][ T3777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1052.252605][ T3777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1052.262609][ T3777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1052.271514][ T3777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1052.279326][ T3777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1052.832925][T16906] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1052.843576][T16906] dvmrp1: linktype set to 769 [ 1052.934635][T25352] bond0: (slave netdevsim0): Releasing backup interface [ 1052.944794][T25352] device netdevsim0 left promiscuous mode [ 1052.954852][T25352] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.005346][T16912] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.21922'. [ 1053.133473][T16920] validate_nla: 8 callbacks suppressed [ 1053.133494][T16920] netlink: 'syz.4.21928': attribute type 5 has an invalid length. [ 1053.178158][T16920] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.21928'. [ 1053.257527][T16926] netlink: 134728 bytes leftover after parsing attributes in process `syz.2.21931'. [ 1053.305096][T16926] netlink: 52 bytes leftover after parsing attributes in process `syz.2.21931'. [ 1053.781860][T16907] chnl_net:caif_netlink_parms(): no params data found [ 1054.270649][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.277118][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.343628][ T48] Bluetooth: hci4: command tx timeout [ 1055.032558][T16907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.041425][T16907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.057982][T16907] device bridge_slave_0 entered promiscuous mode [ 1055.115894][T16907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.123049][T16907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.132775][T16907] device bridge_slave_1 entered promiscuous mode [ 1055.211605][T16907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.236654][T16907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.312104][T16983] netlink: 'syz.2.21949': attribute type 10 has an invalid length. [ 1055.367414][T16983] team0: Port device netdevsim0 added [ 1055.416674][T16988] netlink: 'syz.2.21949': attribute type 10 has an invalid length. [ 1055.474104][T16988] team0: Port device netdevsim0 removed [ 1055.496363][T16988] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1055.565459][T16907] team0: Port device team_slave_0 added [ 1055.580133][T16907] team0: Port device team_slave_1 added [ 1055.701102][T16907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.719195][T16907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.791959][T16907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.847784][T16907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.860900][T16907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.888548][T16907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.001291][T16907] device hsr_slave_0 entered promiscuous mode [ 1056.008655][T16907] device hsr_slave_1 entered promiscuous mode [ 1056.017888][T16907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1056.025940][T16907] Cannot create hsr debugfs directory [ 1056.424939][ T3777] Bluetooth: hci4: command tx timeout [ 1056.518859][T25352] device hsr_slave_0 left promiscuous mode [ 1056.529420][T25352] device hsr_slave_1 left promiscuous mode [ 1056.540720][T25352] bridge0: port 6(team0) entered disabled state [ 1056.549270][T25352] device bond0 left promiscuous mode [ 1056.558674][T25352] device bond_slave_1 left promiscuous mode [ 1056.565740][T25352] device batadv_slave_0 left promiscuous mode [ 1056.572369][T25352] bridge0: port 5(bond0) entered disabled state [ 1056.580421][T25352] device dummy0 left promiscuous mode [ 1056.586396][T25352] bridge0: port 4(dummy0) entered disabled state [ 1056.594215][T25352] device macvlan1 left promiscuous mode [ 1056.599977][T25352] bridge0: port 3(macvlan1) entered disabled state [ 1056.607839][T25352] device bridge_slave_1 left promiscuous mode [ 1056.614110][T25352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.628783][T25352] device veth0_vlan left promiscuous mode [ 1056.767777][T25352] device vlan0 left promiscuous mode [ 1056.777596][T25352] team0 (unregistering): Port device vlan0 removed [ 1056.952224][T25352] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1056.994816][T25352] device team_slave_1 left promiscuous mode [ 1057.001686][T25352] team0 (unregistering): Port device team_slave_1 removed [ 1057.068399][T25352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1057.431808][T25352] bond0 (unregistering): Released all slaves [ 1057.815122][T16907] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1057.826030][T16907] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1057.844332][T16907] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1057.866717][T16907] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1058.005333][T16907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.020459][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1058.035711][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1058.064531][T16907] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.075716][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1058.085319][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1058.096844][T25344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.104028][T25344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.129972][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1058.138594][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1058.148074][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1058.159555][T25344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.166985][T25344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.177119][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1058.194624][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1058.221588][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1058.242243][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1058.251190][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1058.262013][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1058.271007][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1058.279768][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1058.288869][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1058.301294][T16907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1058.315601][T16907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1058.328875][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1058.337957][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1058.503716][ T3777] Bluetooth: hci4: command tx timeout [ 1058.579839][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1058.590384][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1058.615755][T16907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.643083][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1058.652802][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1058.687220][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1058.698411][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1058.713271][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1058.727205][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1058.746478][T16907] device veth0_vlan entered promiscuous mode [ 1058.782390][T16907] device veth1_vlan entered promiscuous mode [ 1058.826054][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1058.838454][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1058.862243][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1058.873112][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1058.885137][T16907] device veth0_macvtap entered promiscuous mode [ 1058.910321][T16907] device veth1_macvtap entered promiscuous mode [ 1058.935164][T16907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.948600][T16907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.960091][T16907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.971053][T16907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.988539][T16907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.998707][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1059.007562][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1059.016214][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1059.028745][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1059.039462][T16907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.050552][T16907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.065009][T16907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.078113][T16907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.091043][T16907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.101288][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1059.110687][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1059.129315][T16907] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.141349][T16907] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.151141][T16907] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.159949][T16907] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.262943][T25330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.285219][T25330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.317585][T25344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1059.333949][T25344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.343769][T25344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.353730][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1060.084585][T17096] netlink: 'syz.1.21978': attribute type 27 has an invalid length. [ 1060.108070][T17096] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.21978'. [ 1060.150165][T17102] netlink: 'syz.2.21968': attribute type 21 has an invalid length. [ 1060.193459][T17102] netlink: 'syz.2.21968': attribute type 1 has an invalid length. [ 1060.232056][T17102] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.21968'. [ 1060.584344][ T3777] Bluetooth: hci4: command tx timeout [ 1061.411233][T17159] device veth0_vlan left promiscuous mode [ 1061.431107][T17159] device veth0_vlan entered promiscuous mode [ 1061.471642][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1061.503714][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1061.544988][T25352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1061.968945][T17197] netlink: 'syz.2.22005': attribute type 29 has an invalid length. [ 1061.983033][T17197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22005'. [ 1062.124797][T17206] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.22022'. [ 1062.189396][T17211] tap0: tun_chr_ioctl cmd 1074025677 [ 1062.195808][T17211] tap0: linktype set to 512 [ 1062.764278][T17241] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22024'. [ 1062.783589][T17241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22024'. [ 1062.802989][T17241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22024'. [ 1062.832508][T17241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22024'. [ 1062.913504][T17249] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22029'. [ 1064.285603][T17283] Â: renamed from pim6reg1 [ 1064.997272][T17313] netlink: 40 bytes leftover after parsing attributes in process `syz.3.22058'. [ 1065.947354][T17344] __nla_validate_parse: 1 callbacks suppressed [ 1065.947372][T17344] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.22074'. [ 1066.178574][T17350] Â: renamed from pim6reg1 [ 1067.351101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1067.970012][T17424] netlink: 'syz.4.22113': attribute type 12 has an invalid length. [ 1067.978622][T17424] netlink: 'syz.4.22113': attribute type 9 has an invalid length. [ 1068.644457][T17462] netlink: 'syz.3.22127': attribute type 12 has an invalid length. [ 1068.666914][T17462] netlink: 'syz.3.22127': attribute type 9 has an invalid length. [ 1069.740024][T17488] tap0: tun_chr_ioctl cmd 1074025681 [ 1070.861753][T17511] netlink: 40 bytes leftover after parsing attributes in process `syz.4.22148'. [ 1070.897717][T17511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22148'. [ 1071.828262][T17558] IPv6: NLM_F_CREATE should be specified when creating new route [ 1071.859818][T17558] netlink: 1 bytes leftover after parsing attributes in process `syz.3.22176'. [ 1071.916964][T17563] netlink: 'syz.0.22188': attribute type 10 has an invalid length. [ 1071.937690][T17563] device bridge_slave_0 left promiscuous mode [ 1071.960003][T17563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.114343][T17574] netlink: 'syz.1.22193': attribute type 10 has an invalid length. [ 1072.221057][T17578] netlink: 128384 bytes leftover after parsing attributes in process `syz.0.22184'. [ 1072.238919][T17578] netlink: 62994 bytes leftover after parsing attributes in process `syz.0.22184'. [ 1072.355648][T17588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22189'. [ 1072.418480][T17595] delete_channel: no stack [ 1072.423042][T17595] delete_channel: no stack [ 1072.993839][T17624] netlink: 'syz.2.22202': attribute type 10 has an invalid length. [ 1073.020490][T17624] device bridge_slave_0 left promiscuous mode [ 1073.043266][T17624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.043192][T17659] netlink: 'syz.2.22222': attribute type 39 has an invalid length. [ 1074.497144][T17682] netlink: 56 bytes leftover after parsing attributes in process `syz.1.22232'. [ 1074.520943][T17684] netlink: 156 bytes leftover after parsing attributes in process `syz.2.22242'. [ 1075.012497][T17709] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1075.056381][T17716] netlink: 'syz.1.22256': attribute type 10 has an invalid length. [ 1075.269000][T17728] netlink: 'syz.4.22252': attribute type 3 has an invalid length. [ 1075.287813][T17728] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.22252'. [ 1075.537473][T17740] netlink: 44 bytes leftover after parsing attributes in process `syz.0.22260'. [ 1075.598083][T17740] netlink: 'syz.0.22260': attribute type 8 has an invalid length. [ 1075.850454][T17751] tap0: tun_chr_ioctl cmd 2147767507 [ 1076.228423][T17760] rose0: tun_chr_ioctl cmd 1074025677 [ 1076.256869][T17760] rose0: linktype set to 821 [ 1076.469467][T17774] netlink: 'syz.2.22287': attribute type 1 has an invalid length. [ 1076.493576][T17774] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.22287'. [ 1076.899293][T17800] netlink: 160 bytes leftover after parsing attributes in process `syz.4.22289'. [ 1077.868817][T17843] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.22307'. [ 1078.632192][T17884] netlink: 'syz.4.22340': attribute type 21 has an invalid length. [ 1078.660911][T17884] netlink: 164 bytes leftover after parsing attributes in process `syz.4.22340'. [ 1078.820191][T17897] netlink: 'syz.2.22334': attribute type 29 has an invalid length. [ 1078.835810][T17897] netlink: 'syz.2.22334': attribute type 29 has an invalid length. [ 1078.852408][T17897] netlink: 'syz.2.22334': attribute type 29 has an invalid length. [ 1079.266034][T17927] netlink: 399 bytes leftover after parsing attributes in process `syz.4.22349'. [ 1079.313520][T17927] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 1079.342099][T17927] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1079.527315][T17943] netlink: 'syz.0.22368': attribute type 10 has an invalid length. [ 1079.541562][T17943] netlink: 3867 bytes leftover after parsing attributes in process `syz.0.22368'. [ 1080.243759][T17980] pim6reg0: tun_chr_ioctl cmd 35108 [ 1080.388902][T17992] netlink: 'syz.1.22384': attribute type 12 has an invalid length. [ 1080.398893][T17992] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.22384'. [ 1080.703595][T18014] netlink: 'syz.2.22394': attribute type 10 has an invalid length. [ 1081.106239][T18014] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1082.226206][T18086] netlink: 'syz.2.22432': attribute type 1 has an invalid length. [ 1082.234269][T18086] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.22432'. [ 1084.838464][T18172] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.22470'. [ 1084.855366][T18169] netlink: 'syz.4.22469': attribute type 29 has an invalid length. [ 1084.865405][T18170] netlink: 'syz.3.22468': attribute type 29 has an invalid length. [ 1084.868592][T18169] netlink: 'syz.4.22469': attribute type 29 has an invalid length. [ 1084.881906][T18170] netlink: 'syz.3.22468': attribute type 29 has an invalid length. [ 1086.117061][T18199] tap0: tun_chr_ioctl cmd 1074025677 [ 1086.131307][T18199] tap0: linktype set to 774 [ 1086.136310][T18204] netlink: 'syz.3.22485': attribute type 33 has an invalid length. [ 1086.163550][T18204] netlink: 'syz.3.22485': attribute type 10 has an invalid length. [ 1086.171505][T18204] netlink: 108 bytes leftover after parsing attributes in process `syz.3.22485'. [ 1086.238065][T18204] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1086.312956][T18214] netlink: 68 bytes leftover after parsing attributes in process `syz.0.22487'. [ 1087.017206][T18246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.22501'. [ 1087.275439][T18261] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22505'. [ 1087.693208][T18280] netlink: 40 bytes leftover after parsing attributes in process `syz.0.22519'. [ 1088.168690][T18303] netlink: 'syz.1.22541': attribute type 3 has an invalid length. [ 1088.176993][T18303] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.22541'. [ 1088.845663][T18329] netlink: 'syz.3.22540': attribute type 10 has an invalid length. [ 1088.864324][T18329] bond0: (slave bond_slave_0): Releasing backup interface [ 1089.556031][T18357] netlink: 'syz.4.22556': attribute type 13 has an invalid length. [ 1089.589398][T18357] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.22556'. [ 1089.767870][T18362] netlink: 156 bytes leftover after parsing attributes in process `syz.0.22557'. [ 1090.008177][T18373] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1090.066783][T18375] netlink: 'syz.2.22560': attribute type 10 has an invalid length. [ 1090.123133][T18375] bond0: (slave bond_slave_0): Releasing backup interface [ 1090.387500][T18390] netlink: 156 bytes leftover after parsing attributes in process `syz.4.22571'. [ 1091.355376][T18424] netlink: 156 bytes leftover after parsing attributes in process `syz.3.22587'. [ 1091.582575][T18431] tap0: tun_chr_ioctl cmd 1074025677 [ 1091.609363][T18431] tap0: linktype set to 776 [ 1092.304651][T18461] netlink: 'syz.3.22604': attribute type 39 has an invalid length. [ 1094.242157][T18531] netlink: 'syz.3.22636': attribute type 33 has an invalid length. [ 1094.250748][T18531] netlink: 152 bytes leftover after parsing attributes in process `syz.3.22636'. [ 1094.486321][T18542] netlink: 'syz.0.22641': attribute type 8 has an invalid length. [ 1094.525074][T18542] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.22641'. [ 1095.246603][T18565] netlink: 'syz.0.22663': attribute type 3 has an invalid length. [ 1095.256796][T18568] netlink: 'syz.1.22651': attribute type 33 has an invalid length. [ 1095.281379][T18568] netlink: 152 bytes leftover after parsing attributes in process `syz.1.22651'. [ 1095.288220][T18565] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.22663'. [ 1096.224073][T18602] netlink: 'syz.2.22670': attribute type 3 has an invalid length. [ 1096.252423][T18602] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.22670'. [ 1097.931698][T18636] tap0: tun_chr_ioctl cmd 1074025673 [ 1098.589598][T18665] netlink: 'syz.4.22693': attribute type 10 has an invalid length. [ 1098.600938][T18665] device bridge_slave_0 left promiscuous mode [ 1098.622425][T18665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.750271][T18673] netlink: 'syz.4.22711': attribute type 10 has an invalid length. [ 1100.342944][T18702] Â: renamed from pim6reg1 [ 1102.424000][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 1102.441174][T18730] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1102.451338][T18730] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1103.363887][T18749] netpci0: tun_chr_ioctl cmd 1074025676 [ 1103.370182][T18749] netpci0: owner set to 0 [ 1103.389544][T18751] netlink: 'syz.2.22729': attribute type 16 has an invalid length. [ 1103.398525][T18751] netlink: 152 bytes leftover after parsing attributes in process `syz.2.22729'. [ 1109.196358][T18828] netlink: 40 bytes leftover after parsing attributes in process `syz.0.22757'. [ 1109.242381][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22757'. [ 1109.262815][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22757'. [ 1109.302861][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22757'. [ 1110.395236][T18850] netlink: 'syz.4.22768': attribute type 1 has an invalid length. [ 1110.403116][T18850] netlink: 44 bytes leftover after parsing attributes in process `syz.4.22768'. [ 1112.705436][T18893] netlink: 'syz.4.22786': attribute type 21 has an invalid length. [ 1112.728428][T18893] netlink: 'syz.4.22786': attribute type 2 has an invalid length. [ 1112.750058][T18893] netlink: 15970 bytes leftover after parsing attributes in process `syz.4.22786'. [ 1112.901999][T18901] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.22788'. [ 1113.099160][T18909] netlink: 'syz.4.22793': attribute type 10 has an invalid length. [ 1113.872905][T18909] bond0: (slave netdevsim0): Releasing backup interface [ 1113.881721][T18909] device netdevsim0 left promiscuous mode [ 1113.896111][T18909] team0: Port device netdevsim0 added [ 1113.909188][T18910] netlink: 'syz.4.22793': attribute type 10 has an invalid length. [ 1113.936994][T18910] team0: Port device netdevsim0 removed [ 1113.968351][T18910] device netdevsim0 entered promiscuous mode [ 1113.975330][T18910] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1114.110996][T18922] netlink: 'syz.2.22809': attribute type 10 has an invalid length. [ 1114.164299][T18922] bond0: (slave netdevsim0): Releasing backup interface [ 1114.208588][T18922] team0: Port device netdevsim0 added [ 1114.270216][T18925] netlink: 'syz.2.22809': attribute type 10 has an invalid length. [ 1114.347570][T18925] team0: Port device netdevsim0 removed [ 1114.398497][T18925] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1115.713739][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.720076][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.025465][T18948] netlink: 'syz.0.22818': attribute type 49 has an invalid length. [ 1117.103495][T18967] netlink: 'syz.4.22826': attribute type 9 has an invalid length. [ 1117.117990][T18967] netlink: 131264 bytes leftover after parsing attributes in process `syz.4.22826'. [ 1120.485520][T19026] syz.2.22840 (19026) used obsolete PPPIOCDETACH ioctl [ 1123.824221][T19088] netlink: 'syz.4.22868': attribute type 10 has an invalid length. [ 1123.875813][T19088] bond0: (slave netdevsim0): Releasing backup interface [ 1123.906947][T19088] device netdevsim0 left promiscuous mode [ 1123.930815][T19088] team0: Port device netdevsim0 added [ 1123.947659][T19095] netlink: 'syz.4.22868': attribute type 10 has an invalid length. [ 1124.009984][T19095] team0: Port device netdevsim0 removed [ 1124.031147][T19095] device netdevsim0 entered promiscuous mode [ 1124.054089][T19095] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1127.090704][T19187] netlink: 'syz.0.22905': attribute type 9 has an invalid length. [ 1127.162580][T19187] netlink: 131264 bytes leftover after parsing attributes in process `syz.0.22905'. [ 1131.507061][T19317] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.22961'. [ 1132.572763][T19346] netlink: 'syz.2.22975': attribute type 9 has an invalid length. [ 1132.592541][T19346] netlink: 131264 bytes leftover after parsing attributes in process `syz.2.22975'. [ 1132.911176][T19360] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.22977'. [ 1135.240258][T19443] netlink: 'syz.1.23016': attribute type 1 has an invalid length. [ 1135.253498][T19443] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.23016'. [ 1135.380084][T19445] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23017'. [ 1136.211762][T19482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.23034'. [ 1137.264166][T19517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23049'. [ 1138.000521][T19549] netlink: 'syz.1.23064': attribute type 9 has an invalid length. [ 1138.022809][T19549] netlink: 131264 bytes leftover after parsing attributes in process `syz.1.23064'. [ 1141.397624][T19675] netlink: 'syz.2.23122': attribute type 29 has an invalid length. [ 1141.448632][T19675] netlink: 'syz.2.23122': attribute type 29 has an invalid length. [ 1141.491552][T19676] netlink: 'syz.2.23122': attribute type 29 has an invalid length. [ 1141.518747][T19675] netlink: 'syz.2.23122': attribute type 29 has an invalid length. [ 1143.708016][T19739] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1144.769508][T19764] netlink: 'syz.1.23162': attribute type 29 has an invalid length. [ 1144.781313][T19764] netlink: 'syz.1.23162': attribute type 29 has an invalid length. [ 1144.796885][T19764] netlink: 'syz.1.23162': attribute type 29 has an invalid length. [ 1144.815878][T19764] netlink: 'syz.1.23162': attribute type 29 has an invalid length. [ 1145.245249][T19779] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1145.423362][T19789] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.23174'. [ 1145.668125][T19804] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.23181'. [ 1146.097465][T19827] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.23190'. [ 1146.165193][T19831] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.23195'. [ 1146.399716][T19841] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.23208'. [ 1146.426195][T19845] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.23199'. [ 1146.615100][T19849] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1147.296547][T19870] tun1: tun_chr_ioctl cmd 1074812118 [ 1147.351322][T19874] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.23213'. [ 1148.180106][T19907] tun1: tun_chr_ioctl cmd 1074812118 [ 1148.980187][T19941] tun0: tun_chr_ioctl cmd 1074812118 [ 1149.833703][T19982] tun1: tun_chr_ioctl cmd 1074812118 [ 1153.626888][ T3777] Bluetooth: hci2: command 0x0406 tx timeout [ 1156.316055][T20192] tap0: tun_chr_ioctl cmd 2148553947 [ 1156.628428][T20202] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.23368'. [ 1156.712825][T20208] netlink: 'syz.2.23371': attribute type 29 has an invalid length. [ 1156.737332][T20208] netlink: 'syz.2.23371': attribute type 29 has an invalid length. [ 1156.773821][T20209] netlink: 'syz.2.23371': attribute type 29 has an invalid length. [ 1156.823546][T20208] netlink: 'syz.2.23371': attribute type 29 has an invalid length. [ 1158.609454][T20264] tap0: tun_chr_ioctl cmd 2148553947 [ 1159.399952][T20299] tap0: tun_chr_ioctl cmd 2148553947 [ 1159.444057][T20301] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.23415'. [ 1160.522967][T20355] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.23441'. [ 1161.120143][T20379] netlink: 'syz.1.23453': attribute type 49 has an invalid length. [ 1161.170418][T20379] netlink: 'syz.1.23453': attribute type 49 has an invalid length. [ 1162.820965][T20449] netlink: 'syz.3.23487': attribute type 49 has an invalid length. [ 1162.885057][T20449] netlink: 'syz.3.23487': attribute type 49 has an invalid length. [ 1163.286481][T20464] netlink: 830 bytes leftover after parsing attributes in process `syz.4.23494'. [ 1163.557750][T20477] netlink: 'syz.4.23502': attribute type 49 has an invalid length. [ 1163.595785][T20477] netlink: 'syz.4.23502': attribute type 49 has an invalid length. [ 1164.856883][T20526] tap0: tun_chr_ioctl cmd 1074025677 [ 1164.862420][T20526] tap0: linktype set to 6 [ 1167.509270][T20622] netlink: 184 bytes leftover after parsing attributes in process `syz.4.23570'. [ 1168.300006][T20653] ================================================================== [ 1168.308131][T20653] BUG: KASAN: use-after-free in cpu_map_enqueue+0xb6/0x370 [ 1168.315387][T20653] Read of size 8 at addr ffff8880737dae08 by task syz.2.23584/20653 [ 1168.323396][T20653] [ 1168.325752][T20653] CPU: 1 PID: 20653 Comm: syz.2.23584 Not tainted 6.1.109-syzkaller #0 [ 1168.334027][T20653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1168.344111][T20653] Call Trace: [ 1168.347416][T20653] [ 1168.350367][T20653] dump_stack_lvl+0x1e3/0x2cb [ 1168.355092][T20653] ? nf_tcp_handle_invalid+0x642/0x642 [ 1168.360577][T20653] ? panic+0x764/0x764 [ 1168.364660][T20653] ? _printk+0xd1/0x111 [ 1168.368828][T20653] ? __virt_addr_valid+0x17f/0x530 [ 1168.373959][T20653] ? __virt_addr_valid+0x17f/0x530 [ 1168.379086][T20653] print_report+0x15f/0x4f0 [ 1168.383600][T20653] ? __virt_addr_valid+0x17f/0x530 [ 1168.388747][T20653] ? __virt_addr_valid+0x17f/0x530 [ 1168.393877][T20653] ? __virt_addr_valid+0x45b/0x530 [ 1168.399000][T20653] ? __phys_addr+0xb6/0x170 [ 1168.403531][T20653] ? cpu_map_enqueue+0xb6/0x370 [ 1168.408400][T20653] kasan_report+0x136/0x160 [ 1168.412917][T20653] ? cpu_map_enqueue+0xb6/0x370 [ 1168.417789][T20653] cpu_map_enqueue+0xb6/0x370 [ 1168.422478][T20653] xdp_do_redirect_frame+0x2f0/0x660 [ 1168.427788][T20653] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 1168.433171][T20653] ? __mutex_unlock_slowpath+0x218/0x750 [ 1168.438820][T20653] ? 0xffffffffa0003b40 [ 1168.443003][T20653] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 1168.448560][T20653] ? xdp_convert_md_to_buff+0x330/0x330 [ 1168.454113][T20653] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 1168.460041][T20653] ? 0xffffffffa0003b40 [ 1168.464209][T20653] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1168.470486][T20653] ? __might_fault+0xbd/0x110 [ 1168.475184][T20653] ? _copy_from_user+0x109/0x170 [ 1168.480158][T20653] ? bpf_test_init+0x15a/0x180 [ 1168.484944][T20653] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1168.490464][T20653] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 1168.495861][T20653] ? dev_put+0x80/0x80 [ 1168.499944][T20653] ? dev_put+0x80/0x80 [ 1168.504019][T20653] bpf_prog_test_run+0x32f/0x3a0 [ 1168.508972][T20653] __sys_bpf+0x3eb/0x6c0 [ 1168.513226][T20653] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1168.518615][T20653] ? print_irqtrace_events+0x210/0x210 [ 1168.524124][T20653] ? print_irqtrace_events+0x210/0x210 [ 1168.529596][T20653] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1168.535582][T20653] ? lockdep_hardirqs_on+0x94/0x130 [ 1168.540789][T20653] __x64_sys_bpf+0x78/0x90 [ 1168.545220][T20653] do_syscall_64+0x3b/0xb0 [ 1168.549646][T20653] ? clear_bhb_loop+0x45/0xa0 [ 1168.554332][T20653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1168.560246][T20653] RIP: 0033:0x7ff453d7def9 [ 1168.564663][T20653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.584279][T20653] RSP: 002b:00007ff453bff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1168.592696][T20653] RAX: ffffffffffffffda RBX: 00007ff453f35f80 RCX: 00007ff453d7def9 [ 1168.600670][T20653] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 1168.608651][T20653] RBP: 00007ff453df09f6 R08: 0000000000000000 R09: 0000000000000000 [ 1168.616626][T20653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.624617][T20653] R13: 0000000000000000 R14: 00007ff453f35f80 R15: 00007fff6479e1b8 [ 1168.632598][T20653] [ 1168.635614][T20653] [ 1168.637931][T20653] Allocated by task 20428: [ 1168.642336][T20653] kasan_set_track+0x4b/0x70 [ 1168.647112][T20653] __kasan_kmalloc+0x97/0xb0 [ 1168.651789][T20653] __kmalloc_node+0xb3/0x230 [ 1168.656385][T20653] bpf_map_kmalloc_node+0xce/0x1c0 [ 1168.661514][T20653] cpu_map_update_elem+0x277/0xf60 [ 1168.666629][T20653] map_update_elem+0x503/0x680 [ 1168.671401][T20653] __sys_bpf+0x337/0x6c0 [ 1168.675647][T20653] __x64_sys_bpf+0x78/0x90 [ 1168.680067][T20653] do_syscall_64+0x3b/0xb0 [ 1168.684491][T20653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1168.690389][T20653] [ 1168.692705][T20653] Freed by task 20431: [ 1168.696767][T20653] kasan_set_track+0x4b/0x70 [ 1168.701369][T20653] kasan_save_free_info+0x27/0x40 [ 1168.706395][T20653] ____kasan_slab_free+0xd6/0x120 [ 1168.711416][T20653] __kmem_cache_free+0x25c/0x3c0 [ 1168.716353][T20653] put_cpu_map_entry+0x6eb/0x760 [ 1168.721306][T20653] cpu_map_kthread_run+0x2887/0x2940 [ 1168.726613][T20653] kthread+0x28d/0x320 [ 1168.730702][T20653] ret_from_fork+0x1f/0x30 [ 1168.735163][T20653] [ 1168.737484][T20653] Last potentially related work creation: [ 1168.743191][T20653] kasan_save_stack+0x3b/0x60 [ 1168.747877][T20653] __kasan_record_aux_stack+0xb0/0xc0 [ 1168.753258][T20653] insert_work+0x54/0x3d0 [ 1168.757591][T20653] __queue_work+0xb4b/0xf90 [ 1168.762094][T20653] queue_work_on+0x14b/0x250 [ 1168.766680][T20653] cpu_map_free+0xd7/0x1b0 [ 1168.771096][T20653] process_one_work+0x8a9/0x11d0 [ 1168.776035][T20653] worker_thread+0xa47/0x1200 [ 1168.780711][T20653] kthread+0x28d/0x320 [ 1168.784862][T20653] ret_from_fork+0x1f/0x30 [ 1168.789287][T20653] [ 1168.791606][T20653] Second to last potentially related work creation: [ 1168.798272][T20653] kasan_save_stack+0x3b/0x60 [ 1168.802960][T20653] __kasan_record_aux_stack+0xb0/0xc0 [ 1168.808333][T20653] call_rcu+0x163/0xa10 [ 1168.812488][T20653] __cpu_map_entry_replace+0x74/0x170 [ 1168.817869][T20653] cpu_map_free+0xd7/0x1b0 [ 1168.822284][T20653] process_one_work+0x8a9/0x11d0 [ 1168.827223][T20653] worker_thread+0xa47/0x1200 [ 1168.831910][T20653] kthread+0x28d/0x320 [ 1168.836006][T20653] ret_from_fork+0x1f/0x30 [ 1168.840429][T20653] [ 1168.842748][T20653] The buggy address belongs to the object at ffff8880737dae00 [ 1168.842748][T20653] which belongs to the cache kmalloc-cg-256 of size 256 [ 1168.857152][T20653] The buggy address is located 8 bytes inside of [ 1168.857152][T20653] 256-byte region [ffff8880737dae00, ffff8880737daf00) [ 1168.870251][T20653] [ 1168.872573][T20653] The buggy address belongs to the physical page: [ 1168.878991][T20653] page:ffffea0001cdf680 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880737daa00 pfn:0x737da [ 1168.890445][T20653] head:ffffea0001cdf680 order:1 compound_mapcount:0 compound_pincount:0 [ 1168.898788][T20653] memcg:ffff88805cf57301 [ 1168.903027][T20653] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1168.911027][T20653] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017c42c80 [ 1168.919615][T20653] raw: ffff8880737daa00 000000008010000f 00000001ffffffff ffff88805cf57301 [ 1168.928192][T20653] page dumped because: kasan: bad access detected [ 1168.934604][T20653] page_owner tracks the page as allocated [ 1168.940313][T20653] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3764, tgid 3764 (syz-executor), ts 70420628183, free_ts 70341922285 [ 1168.963065][T20653] post_alloc_hook+0x18d/0x1b0 [ 1168.967837][T20653] get_page_from_freelist+0x322e/0x33b0 [ 1168.973384][T20653] __alloc_pages+0x28d/0x770 [ 1168.977975][T20653] alloc_slab_page+0x6a/0x150 [ 1168.982655][T20653] new_slab+0x84/0x2d0 [ 1168.986730][T20653] ___slab_alloc+0xc20/0x1270 [ 1168.991409][T20653] __kmem_cache_alloc_node+0x19f/0x260 [ 1168.996893][T20653] __kmalloc+0xa1/0x230 [ 1169.001061][T20653] fib_default_rule_add+0x4a/0x3a0 [ 1169.006192][T20653] fib6_rules_net_init+0x6a/0x100 [ 1169.011248][T20653] ops_init+0x35d/0x610 [ 1169.015421][T20653] setup_net+0x4b5/0xb90 [ 1169.019677][T20653] copy_net_ns+0x392/0x5d0 [ 1169.024108][T20653] create_new_namespaces+0x425/0x7a0 [ 1169.029404][T20653] unshare_nsproxy_namespaces+0x11e/0x170 [ 1169.035131][T20653] ksys_unshare+0x580/0xb20 [ 1169.039636][T20653] page last free stack trace: [ 1169.044301][T20653] free_unref_page_prepare+0xf63/0x1120 [ 1169.049846][T20653] free_unref_page+0x33/0x3e0 [ 1169.054539][T20653] qlist_free_all+0x76/0xe0 [ 1169.059043][T20653] kasan_quarantine_reduce+0x156/0x170 [ 1169.064506][T20653] __kasan_slab_alloc+0x1f/0x70 [ 1169.069353][T20653] slab_post_alloc_hook+0x52/0x3a0 [ 1169.074466][T20653] __kmem_cache_alloc_node+0x137/0x260 [ 1169.079945][T20653] __kmalloc+0xa1/0x230 [ 1169.084098][T20653] tomoyo_realpath_from_path+0xcb/0x5d0 [ 1169.089646][T20653] tomoyo_path_perm+0x29f/0x710 [ 1169.094498][T20653] security_inode_getattr+0xcf/0x120 [ 1169.099785][T20653] vfs_getattr+0x26/0x360 [ 1169.104125][T20653] vfs_statx+0x194/0x4b0 [ 1169.108374][T20653] __x64_sys_newfstatat+0x151/0x1e0 [ 1169.113589][T20653] do_syscall_64+0x3b/0xb0 [ 1169.118023][T20653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1169.123922][T20653] [ 1169.126238][T20653] Memory state around the buggy address: [ 1169.131862][T20653] ffff8880737dad00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1169.139923][T20653] ffff8880737dad80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1169.147980][T20653] >ffff8880737dae00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1169.156052][T20653] ^ [ 1169.160375][T20653] ffff8880737dae80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1169.168443][T20653] ffff8880737daf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1169.176526][T20653] ================================================================== [ 1169.184728][T20653] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1169.191945][T20653] CPU: 1 PID: 20653 Comm: syz.2.23584 Not tainted 6.1.109-syzkaller #0 [ 1169.200214][T20653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1169.210380][T20653] Call Trace: [ 1169.213679][T20653] [ 1169.216718][T20653] dump_stack_lvl+0x1e3/0x2cb [ 1169.221426][T20653] ? nf_tcp_handle_invalid+0x642/0x642 [ 1169.226904][T20653] ? panic+0x764/0x764 [ 1169.230981][T20653] ? rcu_is_watching+0x11/0xb0 [ 1169.235835][T20653] ? vscnprintf+0x59/0x80 [ 1169.240398][T20653] panic+0x318/0x764 [ 1169.244304][T20653] ? check_panic_on_warn+0x1d/0xa0 [ 1169.249434][T20653] ? memcpy_page_flushcache+0xfc/0xfc [ 1169.254811][T20653] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 1169.260714][T20653] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1169.266617][T20653] ? _raw_spin_unlock+0x40/0x40 [ 1169.271481][T20653] ? print_report+0x4a3/0x4f0 [ 1169.276161][T20653] check_panic_on_warn+0x7e/0xa0 [ 1169.281112][T20653] ? cpu_map_enqueue+0xb6/0x370 [ 1169.285968][T20653] end_report+0x66/0x110 [ 1169.290211][T20653] kasan_report+0x143/0x160 [ 1169.294724][T20653] ? cpu_map_enqueue+0xb6/0x370 [ 1169.299585][T20653] cpu_map_enqueue+0xb6/0x370 [ 1169.304267][T20653] xdp_do_redirect_frame+0x2f0/0x660 [ 1169.309650][T20653] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 1169.315033][T20653] ? __mutex_unlock_slowpath+0x218/0x750 [ 1169.320677][T20653] ? 0xffffffffa0003b40 [ 1169.324835][T20653] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 1169.330382][T20653] ? xdp_convert_md_to_buff+0x330/0x330 [ 1169.335933][T20653] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 1169.341827][T20653] ? 0xffffffffa0003b40 [ 1169.345995][T20653] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1169.352249][T20653] ? __might_fault+0xbd/0x110 [ 1169.356939][T20653] ? _copy_from_user+0x109/0x170 [ 1169.361880][T20653] ? bpf_test_init+0x15a/0x180 [ 1169.366646][T20653] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1169.372107][T20653] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 1169.377493][T20653] ? dev_put+0x80/0x80 [ 1169.381570][T20653] ? dev_put+0x80/0x80 [ 1169.385647][T20653] bpf_prog_test_run+0x32f/0x3a0 [ 1169.390595][T20653] __sys_bpf+0x3eb/0x6c0 [ 1169.394847][T20653] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1169.400235][T20653] ? print_irqtrace_events+0x210/0x210 [ 1169.405705][T20653] ? print_irqtrace_events+0x210/0x210 [ 1169.411174][T20653] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1169.417159][T20653] ? lockdep_hardirqs_on+0x94/0x130 [ 1169.422361][T20653] __x64_sys_bpf+0x78/0x90 [ 1169.426826][T20653] do_syscall_64+0x3b/0xb0 [ 1169.431273][T20653] ? clear_bhb_loop+0x45/0xa0 [ 1169.435987][T20653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1169.441899][T20653] RIP: 0033:0x7ff453d7def9 [ 1169.446411][T20653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1169.466062][T20653] RSP: 002b:00007ff453bff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1169.474485][T20653] RAX: ffffffffffffffda RBX: 00007ff453f35f80 RCX: 00007ff453d7def9 [ 1169.482458][T20653] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 1169.490442][T20653] RBP: 00007ff453df09f6 R08: 0000000000000000 R09: 0000000000000000 [ 1169.498421][T20653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1169.506392][T20653] R13: 0000000000000000 R14: 00007ff453f35f80 R15: 00007fff6479e1b8 [ 1169.514467][T20653] [ 1169.517795][T20653] Kernel Offset: disabled [ 1169.522137][T20653] Rebooting in 86400 seconds..