last executing test programs: 5.759478404s ago: executing program 2 (id=27185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0xb, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 5.623418075s ago: executing program 2 (id=27188): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2b6370752020d2"], 0xb) 5.540750321s ago: executing program 2 (id=27191): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB="44ebd606"], 0x31) 5.367455705s ago: executing program 2 (id=27193): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 5.231437946s ago: executing program 2 (id=27196): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x8}, 0x94) 4.69628751s ago: executing program 1 (id=27207): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000202000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 4.032733613s ago: executing program 1 (id=27219): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000a0000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.864335967s ago: executing program 1 (id=27211): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 3.851570228s ago: executing program 0 (id=27213): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB="44ebd606"], 0x31) 3.762399525s ago: executing program 1 (id=27215): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 3.757524226s ago: executing program 0 (id=27216): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)='#', 0x1}], 0x1}, 0x40488c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.678027462s ago: executing program 1 (id=27217): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.543360153s ago: executing program 1 (id=27222): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff4}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 3.299237782s ago: executing program 3 (id=27223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 3.172524653s ago: executing program 3 (id=27224): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='memory.stat\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b30, &(0x7f0000000000)={'wlan1\x00', @random="0011002000"}) 3.003559307s ago: executing program 2 (id=27225): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x23, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 3.003465876s ago: executing program 3 (id=27226): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 2.433493163s ago: executing program 3 (id=27227): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB="44ebd606"], 0x31) 2.432389553s ago: executing program 0 (id=27235): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x2b, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000680)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) 2.282256335s ago: executing program 0 (id=27228): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 2.174152764s ago: executing program 3 (id=27229): bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.050040874s ago: executing program 0 (id=27230): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000000061b9459b68100dbf05177b2490a5408bdf271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e2", 0x99}, {&(0x7f0000000b00)="6e9b55", 0x3}], 0x2, 0x0, 0x0, 0x84}, 0x20000000) close(r1) 1.610606519s ago: executing program 3 (id=27231): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000140)=0x3, 0x12) 0s ago: executing program 0 (id=27232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): 2] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.21405'. [ 1047.345904][T17652] netlink: 763 bytes leftover after parsing attributes in process `syz.0.21416'. [ 1047.434280][T17658] netlink: 'syz.2.21419': attribute type 1 has an invalid length. [ 1047.442312][T17658] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.21419'. [ 1048.477911][T17710] netlink: 'syz.2.21445': attribute type 29 has an invalid length. [ 1048.493562][T17710] netlink: 'syz.2.21445': attribute type 29 has an invalid length. [ 1048.514562][T17710] netlink: 'syz.2.21445': attribute type 29 has an invalid length. [ 1048.861475][T17730] __nla_validate_parse: 2 callbacks suppressed [ 1048.861497][T17730] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.21455'. [ 1049.169584][T17748] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.21465'. [ 1049.457163][T17761] netlink: 188 bytes leftover after parsing attributes in process `syz.0.21471'. [ 1050.327755][T17805] netlink: 'syz.1.21492': attribute type 2 has an invalid length. [ 1050.343330][T17805] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.21492'. [ 1050.470410][T17813] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.21497'. [ 1050.491714][T17813] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1050.560799][T17817] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.21498'. [ 1050.581036][T17817] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 1050.719082][T17827] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21499'. [ 1050.732267][T17827] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21499'. [ 1050.750639][T17822] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21499'. [ 1051.186807][T17854] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.21515'. [ 1052.148858][T17908] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1052.301422][T17916] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1052.535486][T17926] netlink: 'syz.3.21551': attribute type 3 has an invalid length. [ 1052.544354][T17926] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1053.686664][T17970] openvswitch: netlink: Tunnel attr 0 has unexpected len 338 expected 8 [ 1053.782868][T17971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1054.316170][T18002] __nla_validate_parse: 5 callbacks suppressed [ 1054.316191][T18002] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.21587'. [ 1054.354970][T18002] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1054.365555][T18002] CPU: 0 PID: 18002 Comm: syz.1.21587 Not tainted 6.6.102-syzkaller #0 [ 1054.374087][T18002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1054.384388][T18002] Call Trace: [ 1054.387818][T18002] [ 1054.390830][T18002] dump_stack_lvl+0x16c/0x230 [ 1054.395598][T18002] ? show_regs_print_info+0x20/0x20 [ 1054.401079][T18002] ? load_image+0x3b0/0x3b0 [ 1054.405884][T18002] sysfs_warn_dup+0x8e/0xa0 [ 1054.410685][T18002] sysfs_do_create_link_sd+0xc0/0x110 [ 1054.416344][T18002] device_add_class_symlinks+0x1cf/0x240 [ 1054.422285][T18002] device_add+0x507/0xc20 [ 1054.426853][T18002] wiphy_register+0x1e74/0x2c00 [ 1054.432016][T18002] ? cfg80211_event_work+0x40/0x40 [ 1054.437475][T18002] ? minstrel_ht_alloc+0x88a/0x990 [ 1054.442689][T18002] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1054.448968][T18002] ieee80211_register_hw+0x2dc2/0x3ac0 [ 1054.454586][T18002] ? ieee80211_tasklet_handler+0x20/0x20 [ 1054.460745][T18002] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1054.466740][T18002] ? __debug_object_init+0xe8/0x430 [ 1054.472296][T18002] ? __asan_memset+0x22/0x40 [ 1054.477071][T18002] ? __hrtimer_init+0x186/0x270 [ 1054.482307][T18002] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 1054.488407][T18002] ? mac80211_hwsim_free+0x220/0x220 [ 1054.493781][T18002] ? rcu_is_watching+0x15/0xb0 [ 1054.498630][T18002] ? kstrndup+0xbd/0x140 [ 1054.503083][T18002] hwsim_new_radio_nl+0xd78/0x19d0 [ 1054.508517][T18002] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1054.515155][T18002] ? __nla_parse+0x40/0x50 [ 1054.519843][T18002] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1054.526450][T18002] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1054.532356][T18002] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 1054.538582][T18002] ? bpf_lsm_capable+0x9/0x10 [ 1054.543795][T18002] ? security_capable+0x89/0xb0 [ 1054.549008][T18002] genl_rcv_msg+0x60b/0x790 [ 1054.553712][T18002] ? genl_bind+0x360/0x360 [ 1054.558211][T18002] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1054.564886][T18002] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 1054.571665][T18002] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 1054.578376][T18002] netlink_rcv_skb+0x216/0x480 [ 1054.583318][T18002] ? genl_bind+0x360/0x360 [ 1054.587921][T18002] ? netlink_ack+0x1110/0x1110 [ 1054.593049][T18002] ? __lock_acquire+0x7c80/0x7c80 [ 1054.598277][T18002] ? net_generic+0x1e/0x240 [ 1054.603147][T18002] ? down_read+0x1ac/0x2e0 [ 1054.607659][T18002] genl_rcv+0x28/0x40 [ 1054.611892][T18002] netlink_unicast+0x751/0x8d0 [ 1054.617078][T18002] netlink_sendmsg+0x8c1/0xbe0 [ 1054.622347][T18002] ? netlink_getsockopt+0x580/0x580 [ 1054.628073][T18002] ? aa_sock_msg_perm+0x94/0x150 [ 1054.633632][T18002] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1054.639090][T18002] ? security_socket_sendmsg+0x80/0xa0 [ 1054.644844][T18002] ? netlink_getsockopt+0x580/0x580 [ 1054.650255][T18002] ____sys_sendmsg+0x5bf/0x950 [ 1054.655257][T18002] ? __asan_memset+0x22/0x40 [ 1054.659969][T18002] ? __sys_sendmsg_sock+0x30/0x30 [ 1054.665171][T18002] ? __import_iovec+0x5f2/0x860 [ 1054.670254][T18002] ? import_iovec+0x73/0xa0 [ 1054.674859][T18002] ___sys_sendmsg+0x220/0x290 [ 1054.679722][T18002] ? __sys_sendmsg+0x270/0x270 [ 1054.684730][T18002] __se_sys_sendmsg+0x1a5/0x270 [ 1054.690062][T18002] ? __x64_sys_sendmsg+0x80/0x80 [ 1054.695322][T18002] ? lockdep_hardirqs_on+0x98/0x150 [ 1054.701211][T18002] do_syscall_64+0x55/0xb0 [ 1054.705908][T18002] ? clear_bhb_loop+0x40/0x90 [ 1054.710750][T18002] ? clear_bhb_loop+0x40/0x90 [ 1054.715607][T18002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.721589][T18002] RIP: 0033:0x7f01ea98ebe9 [ 1054.726339][T18002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.746389][T18002] RSP: 002b:00007f01eb731038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1054.754948][T18002] RAX: ffffffffffffffda RBX: 00007f01eabb5fa0 RCX: 00007f01ea98ebe9 [ 1054.763252][T18002] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1054.771367][T18002] RBP: 00007f01eaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1054.779468][T18002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.787643][T18002] R13: 00007f01eabb6038 R14: 00007f01eabb5fa0 R15: 00007ffd6ce69b88 [ 1054.795939][T18002] [ 1055.001879][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.009345][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.437359][T18025] netlink: 'syz.3.21597': attribute type 33 has an invalid length. [ 1055.452977][T18025] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.21597'. [ 1056.556480][T18061] netlink: 'syz.0.21613': attribute type 27 has an invalid length. [ 1056.593533][T18061] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.21613'. [ 1056.795119][T18073] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21619'. [ 1056.824440][T18073] netlink: 'syz.1.21619': attribute type 12 has an invalid length. [ 1056.852976][T18073] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21619'. [ 1057.610479][T18113] netlink: 'syz.2.21637': attribute type 29 has an invalid length. [ 1057.626662][T18113] netlink: 'syz.2.21637': attribute type 29 has an invalid length. [ 1057.648498][T18113] netlink: 'syz.2.21637': attribute type 29 has an invalid length. [ 1057.658327][T18115] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.21638'. [ 1057.663322][T18116] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21639'. [ 1057.678130][T18113] netlink: 'syz.2.21637': attribute type 29 has an invalid length. [ 1057.762962][T18116] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21639'. [ 1057.772672][T18112] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21639'. [ 1057.823407][T18119] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21639'. [ 1057.954167][T18127] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1058.417975][T18149] netlink: 'syz.0.21654': attribute type 3 has an invalid length. [ 1058.830608][T18170] tap0: tun_chr_ioctl cmd 1074025692 [ 1059.428320][T18206] netlink: 'syz.2.21682': attribute type 4 has an invalid length. [ 1059.436734][T18206] __nla_validate_parse: 8 callbacks suppressed [ 1059.436751][T18206] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.21682'. [ 1059.475411][T18207] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21680'. [ 1059.494065][T18207] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21680'. [ 1059.516853][T18203] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21680'. [ 1059.574049][T18203] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21680'. [ 1059.693983][T18217] netlink: 48 bytes leftover after parsing attributes in process `syz.1.21686'. [ 1059.763579][T18221] netlink: 'syz.3.21687': attribute type 1 has an invalid length. [ 1059.938224][T18233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21695'. [ 1059.948166][T18233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21695'. [ 1059.958591][T18233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21695'. [ 1059.977539][T18233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21695'. [ 1060.188415][T18247] netlink: 'syz.2.21701': attribute type 1 has an invalid length. [ 1060.289894][T18252] netlink: 'syz.1.21704': attribute type 28 has an invalid length. [ 1060.496572][T18266] syzkaller0: tun_chr_ioctl cmd 35092 [ 1060.742127][T18279] netlink: 'syz.3.21715': attribute type 1 has an invalid length. [ 1061.960592][T18351] tap0: tun_chr_ioctl cmd 1074025677 [ 1061.966535][T18351] tap0: linktype set to 774 [ 1062.189147][T18359] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1062.197655][T18359] syzkaller1: linktype set to 823 [ 1062.723009][T18393] tap0: tun_chr_ioctl cmd 2147767519 [ 1062.891947][T18403] validate_nla: 1 callbacks suppressed [ 1062.891965][T18403] netlink: 'syz.1.21773': attribute type 29 has an invalid length. [ 1062.923323][T18403] netlink: 'syz.1.21773': attribute type 29 has an invalid length. [ 1062.939049][T18403] netlink: 'syz.1.21773': attribute type 29 has an invalid length. [ 1063.030635][T18411] tap0: tun_chr_ioctl cmd 1074025677 [ 1063.037393][T18411] tap0: linktype set to 270 [ 1063.796541][T18449] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 1064.428834][T18485] netlink: 'syz.2.21812': attribute type 13 has an invalid length. [ 1064.583178][T18492] __nla_validate_parse: 19 callbacks suppressed [ 1064.583196][T18492] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21814'. [ 1064.618264][T18492] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21814'. [ 1064.630106][T18495] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21814'. [ 1064.640856][T18489] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21814'. [ 1065.156196][T18520] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.21827'. [ 1065.584692][T18544] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.21837'. [ 1065.594587][T18544] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.21837'. [ 1065.604633][T18543] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.21837'. [ 1065.616503][T18544] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.21837'. [ 1065.712478][T18549] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.21839'. [ 1066.025253][T18568] tap0: tun_chr_ioctl cmd 1074025677 [ 1066.031083][T18568] tap0: linktype set to 769 [ 1067.452074][T18635] netlink: 'syz.1.21880': attribute type 29 has an invalid length. [ 1067.460593][T18635] netlink: 'syz.1.21880': attribute type 29 has an invalid length. [ 1067.482657][T18635] netlink: 'syz.1.21880': attribute type 29 has an invalid length. [ 1067.628601][T18640] tun0: tun_chr_ioctl cmd 1074812117 [ 1068.364140][T18667] netlink: 'syz.3.21897': attribute type 1 has an invalid length. [ 1068.557847][T18673] netlink: 'syz.3.21900': attribute type 29 has an invalid length. [ 1068.584682][T18673] netlink: 'syz.3.21900': attribute type 29 has an invalid length. [ 1069.833201][T18732] __nla_validate_parse: 9 callbacks suppressed [ 1069.833221][T18732] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21926'. [ 1069.853033][T18732] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21926'. [ 1069.865513][T18730] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21926'. [ 1069.876325][T18732] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21926'. [ 1070.395224][T18756] netlink: 'syz.0.21938': attribute type 29 has an invalid length. [ 1070.413421][T18756] netlink: 'syz.0.21938': attribute type 29 has an invalid length. [ 1071.297793][T18798] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.21954'. [ 1071.446821][T18805] netlink: 'syz.3.21957': attribute type 10 has an invalid length. [ 1071.455868][T18805] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.21957'. [ 1071.698495][T18818] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21964'. [ 1071.708491][T18818] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21964'. [ 1071.720349][T18819] netlink: 'syz.1.21963': attribute type 21 has an invalid length. [ 1071.729862][T18818] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21964'. [ 1071.740246][T18818] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21964'. [ 1072.140117][T18838] tap0: tun_chr_ioctl cmd 2147767506 [ 1074.470146][T18911] tap0: tun_chr_ioctl cmd 1074025684 [ 1074.486955][T18916] netlink: 'syz.1.22008': attribute type 2 has an invalid length. [ 1074.497205][T18916] netlink: 'syz.1.22008': attribute type 8 has an invalid length. [ 1074.914354][T18935] netlink: 'syz.1.22016': attribute type 49 has an invalid length. [ 1074.936676][T18935] netlink: 'syz.1.22016': attribute type 49 has an invalid length. [ 1075.795983][T18966] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1076.234086][T18983] __nla_validate_parse: 9 callbacks suppressed [ 1076.234106][T18983] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.22039'. [ 1077.181791][T18991] netlink: 'syz.3.22044': attribute type 1 has an invalid length. [ 1077.200599][T18991] netlink: 'syz.3.22044': attribute type 2 has an invalid length. [ 1077.222927][T18991] netlink: 12374 bytes leftover after parsing attributes in process `syz.3.22044'. [ 1077.245942][T18994] tap0: tun_chr_ioctl cmd 1074025677 [ 1077.257960][T18994] tap0: linktype set to 805 [ 1077.272279][T18998] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22047'. [ 1077.291798][T18998] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22047'. [ 1077.312403][T18998] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22047'. [ 1077.325218][T18998] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22047'. [ 1077.579085][T19015] netlink: 176 bytes leftover after parsing attributes in process `syz.3.22054'. [ 1077.751342][T19023] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.22057'. [ 1077.797701][T19023] netlink: del zone limit has 8 unknown bytes [ 1078.557162][T19070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22081'. [ 1078.570486][T19070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.578027][T19070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.729477][T19076] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.22084'. [ 1078.967260][T19092] netlink: 'syz.0.22092': attribute type 27 has an invalid length. [ 1079.057747][T19096] netlink: 'syz.0.22094': attribute type 29 has an invalid length. [ 1079.068537][T19096] netlink: 'syz.0.22094': attribute type 29 has an invalid length. [ 1079.088500][T19096] netlink: 'syz.0.22094': attribute type 29 has an invalid length. [ 1080.402709][T19172] validate_nla: 1 callbacks suppressed [ 1080.402729][T19172] netlink: 'syz.1.22128': attribute type 10 has an invalid length. [ 1081.349156][T19217] netlink: 'syz.3.22149': attribute type 46 has an invalid length. [ 1081.373084][T19217] __nla_validate_parse: 6 callbacks suppressed [ 1081.373104][T19217] netlink: 212868 bytes leftover after parsing attributes in process `syz.3.22149'. [ 1081.470695][T19223] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.22152'. [ 1081.748680][T19239] netlink: 'syz.3.22160': attribute type 2 has an invalid length. [ 1081.757639][T19239] netlink: 164 bytes leftover after parsing attributes in process `syz.3.22160'. [ 1081.840306][T19243] netlink: 'syz.2.22164': attribute type 2 has an invalid length. [ 1081.851526][T19243] netlink: 116 bytes leftover after parsing attributes in process `syz.2.22164'. [ 1081.863848][T19243] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1081.962461][T19249] netlink: 'syz.2.22165': attribute type 9 has an invalid length. [ 1081.974536][T19249] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.22165'. [ 1082.648265][T19274] syz.0.22176[19274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1082.648411][T19274] syz.0.22176[19274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1083.382219][T19291] netlink: 180 bytes leftover after parsing attributes in process `syz.3.22182'. [ 1083.406681][T19293] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22184'. [ 1083.423325][T19293] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22184'. [ 1083.447893][T19293] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22184'. [ 1083.484914][T19293] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22184'. [ 1083.520550][T19297] netlink: 'syz.0.22186': attribute type 29 has an invalid length. [ 1083.533516][T19297] netlink: 'syz.0.22186': attribute type 29 has an invalid length. [ 1083.814412][T19312] tap0: tun_chr_ioctl cmd 1074025677 [ 1083.819976][T19312] tap0: linktype set to 825 [ 1084.286226][T19334] netlink: 'syz.2.22203': attribute type 10 has an invalid length. [ 1085.910598][T19387] tc_dump_action: action bad kind [ 1086.695237][T19422] netlink: 'syz.2.22241': attribute type 3 has an invalid length. [ 1086.715624][T19422] __nla_validate_parse: 3 callbacks suppressed [ 1086.715643][T19422] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.22241'. [ 1086.849815][T19432] netlink: 'syz.2.22245': attribute type 29 has an invalid length. [ 1086.870804][T19432] netlink: 'syz.2.22245': attribute type 29 has an invalid length. [ 1086.880778][T19432] netlink: 'syz.2.22245': attribute type 29 has an invalid length. [ 1086.889792][T19432] netlink: 'syz.2.22245': attribute type 29 has an invalid length. [ 1087.040620][T19440] netlink: 'syz.3.22250': attribute type 1 has an invalid length. [ 1088.417322][T19499] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.22279'. [ 1088.427531][T19499] netlink: zone id is out of range [ 1088.434017][T19499] netlink: get zone limit has 8 unknown bytes [ 1088.672419][T19512] netlink: 188 bytes leftover after parsing attributes in process `syz.1.22285'. [ 1088.725858][T19516] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 1089.080506][T19536] netlink: 'syz.3.22295': attribute type 29 has an invalid length. [ 1089.103317][T19536] netlink: 'syz.3.22295': attribute type 29 has an invalid length. [ 1089.114149][T19536] netlink: 'syz.3.22295': attribute type 29 has an invalid length. [ 1089.123144][T19536] netlink: 'syz.3.22295': attribute type 29 has an invalid length. [ 1090.628498][T19574] netlink: 132 bytes leftover after parsing attributes in process `syz.1.22312'. [ 1091.386258][T19606] netlink: 168 bytes leftover after parsing attributes in process `syz.0.22328'. [ 1094.616604][T19735] validate_nla: 2 callbacks suppressed [ 1094.616625][T19735] netlink: 'syz.2.22389': attribute type 12 has an invalid length. [ 1094.652960][T19735] netlink: 172 bytes leftover after parsing attributes in process `syz.2.22389'. [ 1095.137108][T19754] netlink: 'syz.1.22397': attribute type 3 has an invalid length. [ 1095.153235][T19754] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.22397'. [ 1096.085220][T19799] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.22418'. [ 1096.470513][T19822] netlink: 763 bytes leftover after parsing attributes in process `syz.1.22429'. [ 1096.589085][T19826] netlink: 'syz.3.22431': attribute type 1 has an invalid length. [ 1096.623023][T19826] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.22431'. [ 1096.775310][T19836] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.22436'. [ 1097.463549][T19861] netlink: 196 bytes leftover after parsing attributes in process `syz.2.22451'. [ 1098.011639][T19883] netlink: 'syz.3.22459': attribute type 29 has an invalid length. [ 1098.020606][T19883] netlink: 'syz.3.22459': attribute type 29 has an invalid length. [ 1098.039036][T19883] netlink: 'syz.3.22459': attribute type 29 has an invalid length. [ 1098.366856][T19899] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.22468'. [ 1098.600099][T19913] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.22476'. [ 1098.871888][T19930] netlink: 188 bytes leftover after parsing attributes in process `syz.3.22481'. [ 1099.792166][T19976] netlink: 'syz.0.22505': attribute type 2 has an invalid length. [ 1099.813172][T19976] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22505'. [ 1099.927434][T19982] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.22508'. [ 1099.957785][T19982] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1100.009611][T19984] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.22510'. [ 1100.029210][T19984] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 1100.345048][T20004] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22516'. [ 1100.358144][T20004] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22516'. [ 1100.369051][T19998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22516'. [ 1100.686854][T20023] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.22529'. [ 1101.604865][T20072] netlink: 49920 bytes leftover after parsing attributes in process `syz.3.22552'. [ 1101.690340][T20075] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1101.826105][T20083] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.22558'. [ 1101.838357][T20083] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1102.005526][T20093] netlink: 'syz.2.22561': attribute type 3 has an invalid length. [ 1102.014570][T20093] netlink: 152 bytes leftover after parsing attributes in process `syz.2.22561'. [ 1102.044315][T20093] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1103.190826][T20137] openvswitch: netlink: Tunnel attr 0 has unexpected len 338 expected 8 [ 1103.459962][T20145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.973162][T20168] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1103.984718][T20168] CPU: 1 PID: 20168 Comm: syz.2.22600 Not tainted 6.6.102-syzkaller #0 [ 1103.993425][T20168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1104.003828][T20168] Call Trace: [ 1104.007178][T20168] [ 1104.010274][T20168] dump_stack_lvl+0x16c/0x230 [ 1104.015997][T20168] ? show_regs_print_info+0x20/0x20 [ 1104.021373][T20168] ? load_image+0x3b0/0x3b0 [ 1104.026107][T20168] sysfs_warn_dup+0x8e/0xa0 [ 1104.030702][T20168] sysfs_do_create_link_sd+0xc0/0x110 [ 1104.036158][T20168] device_add_class_symlinks+0x1cf/0x240 [ 1104.041965][T20168] device_add+0x507/0xc20 [ 1104.046715][T20168] wiphy_register+0x1e74/0x2c00 [ 1104.052353][T20168] ? cfg80211_event_work+0x40/0x40 [ 1104.057624][T20168] ? minstrel_ht_alloc+0x88a/0x990 [ 1104.062894][T20168] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1104.069251][T20168] ieee80211_register_hw+0x2dc2/0x3ac0 [ 1104.074999][T20168] ? ieee80211_tasklet_handler+0x20/0x20 [ 1104.081273][T20168] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1104.087233][T20168] ? __debug_object_init+0xe8/0x430 [ 1104.092871][T20168] ? __asan_memset+0x22/0x40 [ 1104.097622][T20168] ? __hrtimer_init+0x186/0x270 [ 1104.102625][T20168] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 1104.108615][T20168] ? mac80211_hwsim_free+0x220/0x220 [ 1104.114210][T20168] ? rcu_is_watching+0x15/0xb0 [ 1104.119158][T20168] ? kstrndup+0xbd/0x140 [ 1104.123556][T20168] hwsim_new_radio_nl+0xd78/0x19d0 [ 1104.128744][T20168] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1104.135153][T20168] ? __nla_parse+0x40/0x50 [ 1104.139978][T20168] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1104.146451][T20168] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1104.152156][T20168] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 1104.158290][T20168] ? bpf_lsm_capable+0x9/0x10 [ 1104.163185][T20168] ? security_capable+0x89/0xb0 [ 1104.168183][T20168] genl_rcv_msg+0x60b/0x790 [ 1104.173154][T20168] ? genl_bind+0x360/0x360 [ 1104.177958][T20168] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1104.184798][T20168] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 1104.191457][T20168] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 1104.198283][T20168] netlink_rcv_skb+0x216/0x480 [ 1104.203408][T20168] ? genl_bind+0x360/0x360 [ 1104.208390][T20168] ? netlink_ack+0x1110/0x1110 [ 1104.213431][T20168] ? __lock_acquire+0x7c80/0x7c80 [ 1104.218933][T20168] ? net_generic+0x1e/0x240 [ 1104.224090][T20168] ? down_read+0x1ac/0x2e0 [ 1104.228848][T20168] genl_rcv+0x28/0x40 [ 1104.232979][T20168] netlink_unicast+0x751/0x8d0 [ 1104.237975][T20168] netlink_sendmsg+0x8c1/0xbe0 [ 1104.242838][T20168] ? netlink_getsockopt+0x580/0x580 [ 1104.248093][T20168] ? aa_sock_msg_perm+0x94/0x150 [ 1104.253338][T20168] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1104.258763][T20168] ? security_socket_sendmsg+0x80/0xa0 [ 1104.264623][T20168] ? netlink_getsockopt+0x580/0x580 [ 1104.270030][T20168] ____sys_sendmsg+0x5bf/0x950 [ 1104.274946][T20168] ? __asan_memset+0x22/0x40 [ 1104.279756][T20168] ? __sys_sendmsg_sock+0x30/0x30 [ 1104.284818][T20168] ? __import_iovec+0x5f2/0x860 [ 1104.289810][T20168] ? import_iovec+0x73/0xa0 [ 1104.294747][T20168] ___sys_sendmsg+0x220/0x290 [ 1104.299658][T20168] ? __sys_sendmsg+0x270/0x270 [ 1104.304826][T20168] __se_sys_sendmsg+0x1a5/0x270 [ 1104.309741][T20168] ? __x64_sys_sendmsg+0x80/0x80 [ 1104.315051][T20168] ? lockdep_hardirqs_on+0x98/0x150 [ 1104.320389][T20168] do_syscall_64+0x55/0xb0 [ 1104.325010][T20168] ? clear_bhb_loop+0x40/0x90 [ 1104.329803][T20168] ? clear_bhb_loop+0x40/0x90 [ 1104.334632][T20168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1104.340850][T20168] RIP: 0033:0x7f935fb8ebe9 [ 1104.345568][T20168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1104.365664][T20168] RSP: 002b:00007f9360927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1104.374915][T20168] RAX: ffffffffffffffda RBX: 00007f935fdb5fa0 RCX: 00007f935fb8ebe9 [ 1104.383182][T20168] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1104.391531][T20168] RBP: 00007f935fc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1104.399629][T20168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1104.408150][T20168] R13: 00007f935fdb6038 R14: 00007f935fdb5fa0 R15: 00007fff882ae0e8 [ 1104.416789][T20168] [ 1105.046124][T20187] netlink: 'syz.0.22608': attribute type 33 has an invalid length. [ 1105.063378][T20187] __nla_validate_parse: 3 callbacks suppressed [ 1105.063397][T20187] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22608'. [ 1106.768670][T20240] netlink: 'syz.3.22631': attribute type 27 has an invalid length. [ 1106.786676][T20240] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.22631'. [ 1106.906442][T20242] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22634'. [ 1106.955180][T20242] netlink: 'syz.2.22634': attribute type 12 has an invalid length. [ 1106.973050][T20242] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22634'. [ 1107.706343][T20280] netlink: 'syz.0.22650': attribute type 29 has an invalid length. [ 1107.723393][T20280] netlink: 'syz.0.22650': attribute type 29 has an invalid length. [ 1107.731130][T20282] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.22651'. [ 1107.746088][T20280] netlink: 'syz.0.22650': attribute type 29 has an invalid length. [ 1107.756360][T20280] netlink: 'syz.0.22650': attribute type 29 has an invalid length. [ 1108.031614][T20294] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.22656'. [ 1108.046989][T20294] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1108.204734][T20303] netlink: 'syz.1.22668': attribute type 3 has an invalid length. [ 1108.215865][T20303] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.22668'. [ 1108.227184][T20305] netlink: 830 bytes leftover after parsing attributes in process `syz.3.22661'. [ 1108.557012][T20321] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.22667'. [ 1108.590303][T20321] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.22667'. [ 1108.909583][T20337] tap0: tun_chr_ioctl cmd 1074025692 [ 1109.575552][T20372] netlink: 'syz.3.22692': attribute type 4 has an invalid length. [ 1109.982468][T20391] netlink: 'syz.0.22702': attribute type 1 has an invalid length. [ 1110.080661][T20397] __nla_validate_parse: 9 callbacks suppressed [ 1110.080680][T20397] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22706'. [ 1110.096566][T20397] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22706'. [ 1110.109565][T20397] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22706'. [ 1110.120942][T20397] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22706'. [ 1110.444402][T20414] netlink: 'syz.2.22715': attribute type 28 has an invalid length. [ 1110.467448][T20416] netlink: 'syz.1.22714': attribute type 1 has an invalid length. [ 1110.482451][T20416] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.22714'. [ 1110.596002][T20424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22718'. [ 1110.615851][T20424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22718'. [ 1110.643463][T20421] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22718'. [ 1110.675913][T20424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22718'. [ 1110.766744][T20433] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.22723'. [ 1110.830388][T20435] syzkaller0: tun_chr_ioctl cmd 35092 [ 1110.840236][T20437] netlink: 'syz.2.22726': attribute type 1 has an invalid length. [ 1112.519319][T20504] netlink: 'syz.2.22752': attribute type 4 has an invalid length. [ 1112.804350][T20520] tap0: tun_chr_ioctl cmd 1074025677 [ 1112.810088][T20520] tap0: linktype set to 774 [ 1113.014704][T20530] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1113.021508][T20530] syzkaller1: linktype set to 823 [ 1113.638564][T20562] tap0: tun_chr_ioctl cmd 2147767519 [ 1113.753987][T20574] netlink: 'syz.3.22788': attribute type 29 has an invalid length. [ 1113.762773][T20574] netlink: 'syz.3.22788': attribute type 29 has an invalid length. [ 1113.789849][T20574] netlink: 'syz.3.22788': attribute type 29 has an invalid length. [ 1113.973486][T20584] tap0: tun_chr_ioctl cmd 1074025677 [ 1113.979066][T20584] tap0: linktype set to 270 [ 1114.491985][T20614] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 1115.190069][T20640] netlink: 'syz.1.22819': attribute type 12 has an invalid length. [ 1115.208278][T20640] __nla_validate_parse: 7 callbacks suppressed [ 1115.208297][T20640] netlink: 172 bytes leftover after parsing attributes in process `syz.1.22819'. [ 1115.477625][T20656] netlink: 'syz.0.22827': attribute type 3 has an invalid length. [ 1115.496679][T20656] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.22827'. [ 1115.954287][T20676] netlink: 'syz.0.22838': attribute type 13 has an invalid length. [ 1115.962591][T20676] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.22838'. [ 1116.083555][T20681] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22840'. [ 1116.103004][T20681] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22840'. [ 1116.113461][T20678] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22840'. [ 1116.125957][T20681] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22840'. [ 1116.438017][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.445268][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.763950][T20707] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.22850'. [ 1116.773902][T20707] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.22850'. [ 1116.785048][T20704] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.22850'. [ 1116.797410][T20709] netlink: 'syz.0.22852': attribute type 12 has an invalid length. [ 1117.483357][T20737] tap0: tun_chr_ioctl cmd 1074025677 [ 1117.489931][T20737] tap0: linktype set to 769 [ 1118.461045][T20789] netlink: 'syz.0.22892': attribute type 29 has an invalid length. [ 1118.493206][T20789] netlink: 'syz.0.22892': attribute type 29 has an invalid length. [ 1118.533093][T20789] netlink: 'syz.0.22892': attribute type 29 has an invalid length. [ 1118.727572][T20796] tun0: tun_chr_ioctl cmd 1074812117 [ 1119.556683][T20827] netlink: 'syz.2.22908': attribute type 1 has an invalid length. [ 1119.635574][T20829] netlink: 'syz.0.22912': attribute type 29 has an invalid length. [ 1119.644489][T20829] netlink: 'syz.0.22912': attribute type 29 has an invalid length. [ 1120.949386][T20875] netlink: 'syz.3.22928': attribute type 3 has an invalid length. [ 1120.958034][T20875] __nla_validate_parse: 7 callbacks suppressed [ 1120.958050][T20875] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.22928'. [ 1122.341671][T20914] netlink: 'syz.1.22949': attribute type 29 has an invalid length. [ 1122.362171][T20914] netlink: 'syz.1.22949': attribute type 29 has an invalid length. [ 1123.040244][T20945] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.22963'. [ 1123.198966][T20953] netlink: 'syz.1.22968': attribute type 10 has an invalid length. [ 1123.207566][T20953] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.22968'. [ 1123.391268][T20962] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22973'. [ 1123.401610][T20962] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22973'. [ 1123.435120][T20964] netlink: 'syz.3.22974': attribute type 21 has an invalid length. [ 1123.452279][T20962] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22973'. [ 1123.470195][T20962] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22973'. [ 1123.864918][T20985] tap0: tun_chr_ioctl cmd 2147767506 [ 1125.078006][T21025] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23000'. [ 1125.103051][T21025] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23000'. [ 1125.114550][T21021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23000'. [ 1126.475011][T21064] netlink: 'syz.3.23027': attribute type 49 has an invalid length. [ 1126.495793][T21064] netlink: 'syz.3.23027': attribute type 49 has an invalid length. [ 1126.533860][T21068] netlink: 'syz.0.23020': attribute type 2 has an invalid length. [ 1126.542137][T21068] netlink: 'syz.0.23020': attribute type 8 has an invalid length. [ 1126.563194][T21068] __nla_validate_parse: 1 callbacks suppressed [ 1126.563219][T21068] netlink: 132 bytes leftover after parsing attributes in process `syz.0.23020'. [ 1126.938924][T21090] tap0: tun_chr_ioctl cmd 1074025684 [ 1128.204024][T21126] netlink: 'syz.0.23056': attribute type 1 has an invalid length. [ 1128.212400][T21126] netlink: 'syz.0.23056': attribute type 2 has an invalid length. [ 1128.239533][T21126] netlink: 12374 bytes leftover after parsing attributes in process `syz.0.23056'. [ 1128.356181][T21133] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.23051'. [ 1129.443750][T21145] tap0: tun_chr_ioctl cmd 1074025677 [ 1129.449629][T21145] tap0: linktype set to 805 [ 1129.608611][T21157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23064'. [ 1129.619152][T21157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23064'. [ 1129.677341][T21157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23064'. [ 1129.703266][T21161] netlink: 176 bytes leftover after parsing attributes in process `syz.1.23066'. [ 1129.714793][T21157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23064'. [ 1130.073724][T21178] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.23072'. [ 1130.108570][T21178] netlink: del zone limit has 8 unknown bytes [ 1130.804821][T21217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23092'. [ 1130.832934][T21217] bridge_slave_0: entered allmulticast mode [ 1131.115105][T21234] netlink: 'syz.1.23102': attribute type 27 has an invalid length. [ 1134.391323][T21364] netlink: 'syz.2.23161': attribute type 46 has an invalid length. [ 1134.415275][T21364] __nla_validate_parse: 3 callbacks suppressed [ 1134.415296][T21364] netlink: 212868 bytes leftover after parsing attributes in process `syz.2.23161'. [ 1134.516319][T21368] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.23164'. [ 1134.720432][T21380] netlink: 'syz.0.23170': attribute type 2 has an invalid length. [ 1134.730502][T21380] netlink: 164 bytes leftover after parsing attributes in process `syz.0.23170'. [ 1134.808617][T21384] netlink: 'syz.0.23173': attribute type 2 has an invalid length. [ 1134.833024][T21384] netlink: 116 bytes leftover after parsing attributes in process `syz.0.23173'. [ 1134.853123][T21384] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1135.095825][T21397] netlink: 'syz.0.23175': attribute type 9 has an invalid length. [ 1135.106505][T21397] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.23175'. [ 1135.739194][T21416] syz.2.23188[21416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1135.739335][T21416] syz.2.23188[21416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1135.929586][T21428] netlink: 180 bytes leftover after parsing attributes in process `syz.0.23193'. [ 1136.085381][T21434] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23198'. [ 1136.101348][T21436] netlink: 'syz.2.23197': attribute type 29 has an invalid length. [ 1136.110288][T21436] netlink: 'syz.2.23197': attribute type 29 has an invalid length. [ 1136.130842][T21434] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23198'. [ 1136.156446][T21438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23198'. [ 1136.203008][T21434] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23198'. [ 1137.003499][T21456] tap0: tun_chr_ioctl cmd 1074025677 [ 1137.009166][T21456] tap0: linktype set to 825 [ 1137.334614][T21476] netlink: 'syz.0.23216': attribute type 10 has an invalid length. [ 1138.575779][T21520] tc_dump_action: action bad kind [ 1139.893644][T21556] netlink: 'syz.1.23253': attribute type 3 has an invalid length. [ 1139.912173][T21556] __nla_validate_parse: 3 callbacks suppressed [ 1139.912193][T21556] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.23253'. [ 1140.301936][T21573] netlink: 'syz.0.23261': attribute type 1 has an invalid length. [ 1142.046595][T21637] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.23290'. [ 1142.060742][T21637] netlink: zone id is out of range [ 1142.077519][T21637] netlink: get zone limit has 8 unknown bytes [ 1142.248288][T21647] netlink: 188 bytes leftover after parsing attributes in process `syz.2.23296'. [ 1142.424064][T21654] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 1142.764558][T21675] netlink: 'syz.2.23309': attribute type 29 has an invalid length. [ 1142.789023][T21675] netlink: 'syz.2.23309': attribute type 29 has an invalid length. [ 1142.810136][T21675] netlink: 'syz.2.23309': attribute type 29 has an invalid length. [ 1142.823501][T21675] netlink: 'syz.2.23309': attribute type 29 has an invalid length. [ 1142.909232][T21681] netlink: 'syz.0.23311': attribute type 21 has an invalid length. [ 1143.618257][T21710] netlink: 'syz.2.23323': attribute type 2 has an invalid length. [ 1143.650551][T21710] netlink: 132 bytes leftover after parsing attributes in process `syz.2.23323'. [ 1145.095116][T21749] netlink: 168 bytes leftover after parsing attributes in process `syz.1.23341'. [ 1145.668588][T21775] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.23354'. [ 1146.306577][T21806] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.23363'. [ 1146.974787][T21841] netlink: 763 bytes leftover after parsing attributes in process `syz.3.23381'. [ 1147.110776][T21846] netlink: 763 bytes leftover after parsing attributes in process `syz.2.23395'. [ 1147.241850][T21852] netlink: 'syz.1.23387': attribute type 1 has an invalid length. [ 1147.252189][T21852] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.23387'. [ 1147.787905][T21881] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.23400'. [ 1147.919221][T21883] netlink: 'syz.0.23403': attribute type 1 has an invalid length. [ 1147.928129][T21883] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.23403'. [ 1147.960798][T21885] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.23414'. [ 1149.685718][T21949] netlink: 196 bytes leftover after parsing attributes in process `syz.1.23436'. [ 1150.399372][T21956] netlink: 196 bytes leftover after parsing attributes in process `syz.3.23448'. [ 1150.591631][T21967] netlink: 'syz.1.23453': attribute type 29 has an invalid length. [ 1150.607073][T21967] netlink: 'syz.1.23453': attribute type 29 has an invalid length. [ 1150.646666][T21967] netlink: 'syz.1.23453': attribute type 29 has an invalid length. [ 1151.114402][T21991] netlink: 'syz.0.23457': attribute type 29 has an invalid length. [ 1151.154868][T21991] netlink: 'syz.0.23457': attribute type 29 has an invalid length. [ 1151.166023][T21996] netlink: 'syz.0.23457': attribute type 29 has an invalid length. [ 1151.451190][T22008] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.23466'. [ 1151.979836][T22039] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.23477'. [ 1152.220571][T22050] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.23487'. [ 1152.518640][T22068] netlink: 188 bytes leftover after parsing attributes in process `syz.1.23494'. [ 1152.741462][T22076] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.23500'. [ 1153.171407][T22102] netlink: 188 bytes leftover after parsing attributes in process `syz.2.23506'. [ 1154.381985][T22160] netlink: 'syz.3.23540': attribute type 2 has an invalid length. [ 1154.405022][T22160] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.23540'. [ 1154.951181][T22182] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.23548'. [ 1154.983716][T22182] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1155.141359][T22187] netlink: 'syz.2.23552': attribute type 2 has an invalid length. [ 1155.150341][T22187] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.23552'. [ 1155.168939][T22190] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1155.193217][T22191] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 1155.506005][T22209] __nla_validate_parse: 2 callbacks suppressed [ 1155.506023][T22209] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23564'. [ 1155.533005][T22209] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23564'. [ 1155.542668][T22204] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23564'. [ 1155.645488][T22212] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.23567'. [ 1155.657250][T22212] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 1155.683167][T22216] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23575'. [ 1155.692659][T22216] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23575'. [ 1155.702402][T22213] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23575'. [ 1156.534243][T22256] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.23586'. [ 1156.979835][T22283] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.23599'. [ 1158.305619][T22350] netlink: 49920 bytes leftover after parsing attributes in process `syz.0.23632'. [ 1158.920139][T22379] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1159.137154][T22388] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1159.349399][T22402] netlink: 'syz.0.23656': attribute type 3 has an invalid length. [ 1159.358592][T22402] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1159.510771][T22408] netlink: 'syz.1.23669': attribute type 3 has an invalid length. [ 1159.530440][T22408] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1159.566121][T22412] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1159.598409][T22410] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1161.300638][T22459] __nla_validate_parse: 6 callbacks suppressed [ 1161.300657][T22459] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.23687'. [ 1161.366188][T22463] net_ratelimit: 1 callbacks suppressed [ 1161.366208][T22463] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1162.177269][T22489] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.23702'. [ 1162.192061][T22488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1162.205185][T22489] openvswitch: netlink: Tunnel attr 0 has unexpected len 338 expected 8 [ 1162.947340][T22505] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.23715'. [ 1162.988193][T22505] openvswitch: netlink: Tunnel attr 0 has unexpected len 338 expected 8 [ 1163.411782][T22516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1164.760675][T22554] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.23731'. [ 1164.803548][T22554] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1164.843414][T22554] CPU: 0 PID: 22554 Comm: syz.3.23731 Not tainted 6.6.102-syzkaller #0 [ 1164.851952][T22554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1164.862445][T22554] Call Trace: [ 1164.866064][T22554] [ 1164.869238][T22554] dump_stack_lvl+0x16c/0x230 [ 1164.874276][T22554] ? show_regs_print_info+0x20/0x20 [ 1164.879554][T22554] ? load_image+0x3b0/0x3b0 [ 1164.884190][T22554] sysfs_warn_dup+0x8e/0xa0 [ 1164.889055][T22554] sysfs_do_create_link_sd+0xc0/0x110 [ 1164.894872][T22554] device_add_class_symlinks+0x1cf/0x240 [ 1164.900878][T22554] device_add+0x507/0xc20 [ 1164.905470][T22554] wiphy_register+0x1e74/0x2c00 [ 1164.910931][T22554] ? cfg80211_event_work+0x40/0x40 [ 1164.916220][T22554] ? minstrel_ht_alloc+0x88a/0x990 [ 1164.921421][T22554] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1164.927985][T22554] ieee80211_register_hw+0x2dc2/0x3ac0 [ 1164.933759][T22554] ? ieee80211_tasklet_handler+0x20/0x20 [ 1164.939652][T22554] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1164.945642][T22554] ? __debug_object_init+0xe8/0x430 [ 1164.950978][T22554] ? __asan_memset+0x22/0x40 [ 1164.955722][T22554] ? __hrtimer_init+0x186/0x270 [ 1164.960885][T22554] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 1164.966704][T22554] ? mac80211_hwsim_free+0x220/0x220 [ 1164.972584][T22554] ? rcu_is_watching+0x15/0xb0 [ 1164.977573][T22554] ? kstrndup+0xbd/0x140 [ 1164.982141][T22554] hwsim_new_radio_nl+0xd78/0x19d0 [ 1164.987450][T22554] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1164.994203][T22554] ? __nla_parse+0x40/0x50 [ 1164.998854][T22554] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1165.005252][T22554] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1165.011244][T22554] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 1165.017484][T22554] ? bpf_lsm_capable+0x9/0x10 [ 1165.022482][T22554] ? security_capable+0x89/0xb0 [ 1165.027708][T22554] genl_rcv_msg+0x60b/0x790 [ 1165.032409][T22554] ? genl_bind+0x360/0x360 [ 1165.037052][T22554] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1165.043732][T22554] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 1165.050451][T22554] ? ref_tracker_free+0x634/0x7d0 [ 1165.055626][T22554] netlink_rcv_skb+0x216/0x480 [ 1165.060517][T22554] ? genl_bind+0x360/0x360 [ 1165.065279][T22554] ? netlink_ack+0x1110/0x1110 [ 1165.070282][T22554] ? __lock_acquire+0x7c80/0x7c80 [ 1165.075451][T22554] ? down_read+0x1ac/0x2e0 [ 1165.080004][T22554] genl_rcv+0x28/0x40 [ 1165.084490][T22554] netlink_unicast+0x751/0x8d0 [ 1165.089429][T22554] netlink_sendmsg+0x8c1/0xbe0 [ 1165.094325][T22554] ? netlink_getsockopt+0x580/0x580 [ 1165.099713][T22554] ? aa_sock_msg_perm+0x94/0x150 [ 1165.104968][T22554] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1165.110382][T22554] ? security_socket_sendmsg+0x80/0xa0 [ 1165.115891][T22554] ? netlink_getsockopt+0x580/0x580 [ 1165.121400][T22554] ____sys_sendmsg+0x5bf/0x950 [ 1165.126556][T22554] ? __asan_memset+0x22/0x40 [ 1165.131542][T22554] ? __sys_sendmsg_sock+0x30/0x30 [ 1165.136789][T22554] ? __import_iovec+0x5f2/0x860 [ 1165.141883][T22554] ? import_iovec+0x73/0xa0 [ 1165.146448][T22554] ___sys_sendmsg+0x220/0x290 [ 1165.151302][T22554] ? __sys_sendmsg+0x270/0x270 [ 1165.156898][T22554] __se_sys_sendmsg+0x1a5/0x270 [ 1165.162081][T22554] ? __x64_sys_sendmsg+0x80/0x80 [ 1165.167219][T22554] ? lockdep_hardirqs_on+0x98/0x150 [ 1165.172662][T22554] do_syscall_64+0x55/0xb0 [ 1165.177209][T22554] ? clear_bhb_loop+0x40/0x90 [ 1165.182015][T22554] ? clear_bhb_loop+0x40/0x90 [ 1165.186900][T22554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1165.192917][T22554] RIP: 0033:0x7f14b798ebe9 [ 1165.197551][T22554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1165.217804][T22554] RSP: 002b:00007f14b8854038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1165.226698][T22554] RAX: ffffffffffffffda RBX: 00007f14b7bb5fa0 RCX: 00007f14b798ebe9 [ 1165.234806][T22554] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1165.242982][T22554] RBP: 00007f14b7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1165.251077][T22554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1165.259294][T22554] R13: 00007f14b7bb6038 R14: 00007f14b7bb5fa0 R15: 00007ffe5c1e7dc8 [ 1165.267774][T22554] [ 1166.955375][T22586] netlink: 'syz.1.23741': attribute type 33 has an invalid length. [ 1166.995173][T22586] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.23741'. [ 1167.826146][T22595] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.23746'. [ 1167.864894][T22595] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1167.881901][T22595] CPU: 0 PID: 22595 Comm: syz.0.23746 Not tainted 6.6.102-syzkaller #0 [ 1167.890599][T22595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1167.901421][T22595] Call Trace: [ 1167.904988][T22595] [ 1167.908192][T22595] dump_stack_lvl+0x16c/0x230 [ 1167.913307][T22595] ? show_regs_print_info+0x20/0x20 [ 1167.918811][T22595] ? load_image+0x3b0/0x3b0 [ 1167.923456][T22595] sysfs_warn_dup+0x8e/0xa0 [ 1167.928231][T22595] sysfs_do_create_link_sd+0xc0/0x110 [ 1167.933661][T22595] device_add_class_symlinks+0x1cf/0x240 [ 1167.939362][T22595] device_add+0x507/0xc20 [ 1167.944120][T22595] wiphy_register+0x1e74/0x2c00 [ 1167.949285][T22595] ? cfg80211_event_work+0x40/0x40 [ 1167.954438][T22595] ? minstrel_ht_alloc+0x88a/0x990 [ 1167.959803][T22595] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1167.966127][T22595] ieee80211_register_hw+0x2dc2/0x3ac0 [ 1167.972109][T22595] ? ieee80211_tasklet_handler+0x20/0x20 [ 1167.977891][T22595] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1167.984139][T22595] ? __debug_object_init+0xe8/0x430 [ 1167.989401][T22595] ? __asan_memset+0x22/0x40 [ 1167.994169][T22595] ? __hrtimer_init+0x186/0x270 [ 1167.999284][T22595] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 1168.005370][T22595] ? mac80211_hwsim_free+0x220/0x220 [ 1168.010719][T22595] ? rcu_is_watching+0x15/0xb0 [ 1168.015725][T22595] ? kstrndup+0xbd/0x140 [ 1168.020283][T22595] hwsim_new_radio_nl+0xd78/0x19d0 [ 1168.025962][T22595] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1168.032551][T22595] ? __nla_parse+0x40/0x50 [ 1168.037208][T22595] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1168.043973][T22595] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1168.049846][T22595] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 1168.056038][T22595] ? bpf_lsm_capable+0x9/0x10 [ 1168.060953][T22595] ? security_capable+0x89/0xb0 [ 1168.066048][T22595] genl_rcv_msg+0x60b/0x790 [ 1168.071057][T22595] ? genl_bind+0x360/0x360 [ 1168.075630][T22595] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1168.082007][T22595] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 1168.088728][T22595] ? ref_tracker_free+0x634/0x7d0 [ 1168.094104][T22595] netlink_rcv_skb+0x216/0x480 [ 1168.099317][T22595] ? genl_bind+0x360/0x360 [ 1168.103814][T22595] ? netlink_ack+0x1110/0x1110 [ 1168.108932][T22595] ? __lock_acquire+0x7c80/0x7c80 [ 1168.114558][T22595] ? down_read+0x1ac/0x2e0 [ 1168.119129][T22595] genl_rcv+0x28/0x40 [ 1168.123360][T22595] netlink_unicast+0x751/0x8d0 [ 1168.128284][T22595] netlink_sendmsg+0x8c1/0xbe0 [ 1168.133244][T22595] ? netlink_getsockopt+0x580/0x580 [ 1168.138872][T22595] ? aa_sock_msg_perm+0x94/0x150 [ 1168.144080][T22595] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1168.149684][T22595] ? security_socket_sendmsg+0x80/0xa0 [ 1168.155278][T22595] ? netlink_getsockopt+0x580/0x580 [ 1168.160629][T22595] ____sys_sendmsg+0x5bf/0x950 [ 1168.165673][T22595] ? __asan_memset+0x22/0x40 [ 1168.170341][T22595] ? __sys_sendmsg_sock+0x30/0x30 [ 1168.175674][T22595] ? __import_iovec+0x5f2/0x860 [ 1168.180601][T22595] ? import_iovec+0x73/0xa0 [ 1168.185399][T22595] ___sys_sendmsg+0x220/0x290 [ 1168.190440][T22595] ? __sys_sendmsg+0x270/0x270 [ 1168.195808][T22595] __se_sys_sendmsg+0x1a5/0x270 [ 1168.200762][T22595] ? __x64_sys_sendmsg+0x80/0x80 [ 1168.206212][T22595] ? lockdep_hardirqs_on+0x98/0x150 [ 1168.211619][T22595] do_syscall_64+0x55/0xb0 [ 1168.216451][T22595] ? clear_bhb_loop+0x40/0x90 [ 1168.221524][T22595] ? clear_bhb_loop+0x40/0x90 [ 1168.226423][T22595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1168.232574][T22595] RIP: 0033:0x7f959598ebe9 [ 1168.237124][T22595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.257613][T22595] RSP: 002b:00007f9596769038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1168.266576][T22595] RAX: ffffffffffffffda RBX: 00007f9595bb5fa0 RCX: 00007f959598ebe9 [ 1168.275133][T22595] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1168.283666][T22595] RBP: 00007f9595a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1168.292286][T22595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.300976][T22595] R13: 00007f9595bb6038 R14: 00007f9595bb5fa0 R15: 00007ffe36893098 [ 1168.309421][T22595] [ 1169.586488][T22618] netlink: 'syz.2.23759': attribute type 33 has an invalid length. [ 1169.594702][T22618] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.23759'. [ 1172.726054][T22709] netlink: 'syz.1.23795': attribute type 27 has an invalid length. [ 1172.743757][T22709] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.23795'. [ 1173.719451][T22720] netlink: 'syz.2.23810': attribute type 27 has an invalid length. [ 1173.748312][T22720] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.23810'. [ 1173.868100][T22725] netlink: 132 bytes leftover after parsing attributes in process `syz.3.23800'. [ 1173.880599][T22725] netlink: 'syz.3.23800': attribute type 12 has an invalid length. [ 1173.903062][T22725] netlink: 132 bytes leftover after parsing attributes in process `syz.3.23800'. [ 1174.416480][T22753] netlink: 132 bytes leftover after parsing attributes in process `syz.0.23817'. [ 1174.431702][T22753] netlink: 'syz.0.23817': attribute type 12 has an invalid length. [ 1174.446380][T22753] netlink: 132 bytes leftover after parsing attributes in process `syz.0.23817'. [ 1176.380485][T22805] netlink: 'syz.1.23840': attribute type 29 has an invalid length. [ 1176.405719][T22807] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.23841'. [ 1176.447081][T22805] netlink: 'syz.1.23840': attribute type 29 has an invalid length. [ 1176.473938][T22809] netlink: 'syz.1.23840': attribute type 29 has an invalid length. [ 1176.513812][T22805] netlink: 'syz.1.23840': attribute type 29 has an invalid length. [ 1176.865906][T22830] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.23850'. [ 1176.878047][T22830] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1177.817830][T22842] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.23852'. [ 1177.824696][T22839] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.23860'. [ 1177.838418][T22839] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1177.883455][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.890577][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.996718][T22846] netlink: 'syz.3.23854': attribute type 29 has an invalid length. [ 1178.016122][T22846] netlink: 'syz.3.23854': attribute type 29 has an invalid length. [ 1178.044417][T22846] netlink: 'syz.3.23854': attribute type 29 has an invalid length. [ 1178.058708][T22846] netlink: 'syz.3.23854': attribute type 29 has an invalid length. [ 1178.675546][T22872] netlink: 830 bytes leftover after parsing attributes in process `syz.0.23863'. [ 1178.685055][T22874] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.23865'. [ 1178.854349][T22878] netlink: 'syz.0.23868': attribute type 29 has an invalid length. [ 1178.872502][T22878] netlink: 'syz.0.23868': attribute type 29 has an invalid length. [ 1178.895677][T22878] netlink: 'syz.0.23868': attribute type 29 has an invalid length. [ 1178.937156][T22878] netlink: 'syz.0.23868': attribute type 29 has an invalid length. [ 1179.242015][T22893] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.23882'. [ 1179.263074][T22893] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.23882'. [ 1179.284619][T22888] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.23882'. [ 1179.311285][T22893] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.23882'. [ 1179.438907][T22900] netlink: 830 bytes leftover after parsing attributes in process `syz.2.23877'. [ 1179.979480][T22905] netlink: 830 bytes leftover after parsing attributes in process `syz.0.23888'. [ 1180.162666][T22914] netlink: 'syz.3.23883': attribute type 3 has an invalid length. [ 1181.506365][T22952] netlink: 'syz.2.23898': attribute type 3 has an invalid length. [ 1182.234973][T22976] tap0: tun_chr_ioctl cmd 1074025692 [ 1183.109550][T23019] __nla_validate_parse: 11 callbacks suppressed [ 1183.109572][T23019] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23933'. [ 1183.126244][T23019] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23933'. [ 1183.137438][T23019] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23933'. [ 1183.147906][T23019] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23933'. [ 1183.575045][T23034] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.23939'. [ 1183.826887][T23041] netlink: 830 bytes leftover after parsing attributes in process `syz.3.23942'. [ 1183.837254][T23041] : entered promiscuous mode [ 1183.843575][T23041] bond_slave_1: entered promiscuous mode [ 1183.849717][T23041] netdevsim netdevsim3 ÿÿÿÿÿÿ: entered promiscuous mode [ 1184.249918][T23051] validate_nla: 1 callbacks suppressed [ 1184.249944][T23051] netlink: 'syz.2.23947': attribute type 29 has an invalid length. [ 1184.277248][T23051] netlink: 'syz.2.23947': attribute type 29 has an invalid length. [ 1184.304923][T23051] netlink: 'syz.2.23947': attribute type 29 has an invalid length. [ 1184.324353][T23051] netlink: 'syz.2.23947': attribute type 29 has an invalid length. [ 1184.791547][T23083] netlink: 'syz.2.23962': attribute type 2 has an invalid length. [ 1184.810812][T23083] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.23962'. [ 1184.965584][T23087] netlink: 'syz.2.23964': attribute type 1 has an invalid length. [ 1185.422443][T23103] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.23972'. [ 1185.581045][T23110] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.23976'. [ 1185.595617][T23111] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.23975'. [ 1185.608485][T23110] openvswitch: netlink: Flow key attribute not present in set flow. [ 1185.624298][T23111] netlink: del zone limit has 8 unknown bytes [ 1185.835576][T23121] netlink: 'syz.3.23980': attribute type 10 has an invalid length. [ 1186.120629][T23138] tap0: tun_chr_ioctl cmd 1074025677 [ 1186.126678][T23138] tap0: linktype set to 6 [ 1186.133862][T23139] netlink: zone id is out of range [ 1186.165240][T23139] netlink: del zone limit has 4 unknown bytes [ 1187.365401][T23206] netlink: 'syz.1.24018': attribute type 16 has an invalid length. [ 1188.507823][T23238] netlink: 'syz.0.24031': attribute type 3 has an invalid length. [ 1188.517923][T23238] __nla_validate_parse: 3 callbacks suppressed [ 1188.517947][T23238] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.24031'. [ 1189.300318][T23266] netlink: 'syz.1.24044': attribute type 3 has an invalid length. [ 1189.309317][T23266] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.24044'. [ 1189.540477][T23280] netlink: 'syz.1.24059': attribute type 3 has an invalid length. [ 1189.550002][T23280] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.24059'. [ 1189.572515][T23281] netlink: 'syz.0.24049': attribute type 16 has an invalid length. [ 1189.605797][T23281] netlink: 48 bytes leftover after parsing attributes in process `syz.0.24049'. [ 1190.197059][T23312] netlink: 'syz.3.24066': attribute type 3 has an invalid length. [ 1190.221046][T23314] netlink: 'syz.2.24067': attribute type 16 has an invalid length. [ 1190.235216][T23314] netlink: 48 bytes leftover after parsing attributes in process `syz.2.24067'. [ 1190.238129][T23312] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.24066'. [ 1190.962819][T23352] netlink: 'syz.0.24082': attribute type 3 has an invalid length. [ 1190.972370][T23352] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.24082'. [ 1191.923900][T23369] netlink: 'syz.0.24096': attribute type 3 has an invalid length. [ 1191.950877][T23369] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.24096'. [ 1192.195038][T23383] netlink: 'syz.0.24102': attribute type 3 has an invalid length. [ 1192.219537][T23383] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.24102'. [ 1192.387666][T23396] netlink: 'syz.0.24108': attribute type 3 has an invalid length. [ 1192.402962][T23396] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.24108'. [ 1192.736935][T23412] netlink: zone id is out of range [ 1192.755337][T23412] netlink: del zone limit has 4 unknown bytes [ 1193.080065][T23433] tap0: tun_chr_ioctl cmd 1074025677 [ 1193.093873][T23433] tap0: linktype set to 6 [ 1193.247151][T23441] openvswitch: netlink: Flow key attribute not present in set flow. [ 1193.323513][T23445] netlink: 'syz.2.24122': attribute type 10 has an invalid length. [ 1193.531696][T23452] __nla_validate_parse: 3 callbacks suppressed [ 1193.531718][T23452] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.24125'. [ 1193.574067][T23452] netlink: del zone limit has 8 unknown bytes [ 1194.054842][T23471] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.24132'. [ 1194.091342][T23473] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.24133'. [ 1194.110908][T23473] openvswitch: netlink: Flow key attribute not present in set flow. [ 1194.413419][T23491] netlink: 'syz.1.24145': attribute type 1 has an invalid length. [ 1194.571486][T23499] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.24147'. [ 1194.618223][T23502] netlink: 'syz.3.24150': attribute type 2 has an invalid length. [ 1194.629958][T23502] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.24150'. [ 1195.527823][T23548] netlink: 'syz.3.24173': attribute type 29 has an invalid length. [ 1195.539248][T23548] netlink: 'syz.3.24173': attribute type 29 has an invalid length. [ 1195.554038][T23548] netlink: 'syz.3.24173': attribute type 29 has an invalid length. [ 1195.564421][T23548] netlink: 'syz.3.24173': attribute type 29 has an invalid length. [ 1196.048800][T23576] netlink: 'syz.1.24186': attribute type 29 has an invalid length. [ 1196.057841][T23576] netlink: 'syz.1.24186': attribute type 29 has an invalid length. [ 1196.082613][T23576] netlink: 'syz.1.24186': attribute type 29 has an invalid length. [ 1196.092918][T23576] netlink: 'syz.1.24186': attribute type 29 has an invalid length. [ 1196.148037][T23578] netlink: 830 bytes leftover after parsing attributes in process `syz.2.24187'. [ 1196.163057][T23581] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.24190'. [ 1196.827142][T23601] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.24206'. [ 1197.285899][T23626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24211'. [ 1197.300407][T23626] netlink: 152 bytes leftover after parsing attributes in process `syz.2.24211'. [ 1198.652050][T23695] __nla_validate_parse: 3 callbacks suppressed [ 1198.652070][T23695] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24252'. [ 1199.426864][T23726] validate_nla: 1 callbacks suppressed [ 1199.426882][T23726] netlink: 'syz.3.24255': attribute type 2 has an invalid length. [ 1199.468371][T23726] netlink: 132 bytes leftover after parsing attributes in process `syz.3.24255'. [ 1199.891669][T23736] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.24261'. [ 1199.947272][T23739] netlink: 830 bytes leftover after parsing attributes in process `syz.1.24263'. [ 1201.625219][T23770] netlink: 'syz.1.24276': attribute type 29 has an invalid length. [ 1201.634856][T23770] netlink: 'syz.1.24276': attribute type 29 has an invalid length. [ 1201.655665][T23770] netlink: 'syz.1.24276': attribute type 29 has an invalid length. [ 1201.673943][T23770] netlink: 'syz.1.24276': attribute type 29 has an invalid length. [ 1202.576556][T23801] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.24293'. [ 1202.587790][T23801] netlink: zone id is out of range [ 1202.594517][T23801] netlink: get zone limit has 8 unknown bytes [ 1203.079127][T23824] netlink: 'syz.0.24311': attribute type 3 has an invalid length. [ 1203.088467][T23824] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.24311'. [ 1203.285546][T23836] netlink: 'syz.1.24305': attribute type 1 has an invalid length. [ 1204.595752][T23882] netlink: 61959 bytes leftover after parsing attributes in process `syz.1.24333'. [ 1204.606369][T23882] tc_dump_action: action bad kind [ 1206.356170][T23938] netlink: 'syz.3.24358': attribute type 10 has an invalid length. [ 1206.364593][T23938] netlink: 152 bytes leftover after parsing attributes in process `syz.3.24358'. [ 1206.413426][T23941] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.24356'. [ 1206.513849][T23948] netlink: 'syz.3.24367': attribute type 29 has an invalid length. [ 1206.532970][T23948] netlink: 'syz.3.24367': attribute type 29 has an invalid length. [ 1206.819271][T23959] netlink: 180 bytes leftover after parsing attributes in process `syz.2.24374'. [ 1207.078193][T23974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24373'. [ 1207.088906][T23974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24373'. [ 1207.105156][T23974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24373'. [ 1207.115922][T23974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24373'. [ 1207.357738][T23986] syz.1.24379[23986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1207.357890][T23986] syz.1.24379[23986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1207.487196][T23993] tap0: tun_chr_ioctl cmd 1074025677 [ 1207.508122][T23993] tap0: linktype set to 825 [ 1208.021384][T24016] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.24393'. [ 1208.767734][T24031] tap0: tun_chr_ioctl cmd 1074025677 [ 1208.776156][T24031] tap0: linktype set to 825 [ 1209.409874][T24049] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.24410'. [ 1209.593440][T24062] netlink: 'syz.0.24416': attribute type 46 has an invalid length. [ 1212.093712][T24197] netlink: 'syz.2.24476': attribute type 27 has an invalid length. [ 1212.103848][T24197] __nla_validate_parse: 1 callbacks suppressed [ 1212.103866][T24197] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.24476'. [ 1212.315460][T24207] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.24482'. [ 1212.418834][T24213] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.24483'. [ 1212.592111][T24222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24488'. [ 1212.607861][T24222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.615229][T24222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.524282][T24273] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.24521'. [ 1213.830902][T24294] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.24519'. [ 1213.858676][T24294] netlink: del zone limit has 8 unknown bytes [ 1215.118289][T24322] netlink: 'syz.0.24535': attribute type 49 has an invalid length. [ 1215.129080][T24322] netlink: 'syz.0.24535': attribute type 49 has an invalid length. [ 1215.584859][T24340] netlink: 'syz.3.24542': attribute type 2 has an invalid length. [ 1215.603597][T24340] netlink: 'syz.3.24542': attribute type 8 has an invalid length. [ 1215.611900][T24340] netlink: 132 bytes leftover after parsing attributes in process `syz.3.24542'. [ 1216.812393][T24371] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.24565'. [ 1216.954866][T24375] tap0: tun_chr_ioctl cmd 2147767506 [ 1217.575422][T24406] netlink: 'syz.2.24573': attribute type 29 has an invalid length. [ 1217.595856][T24406] netlink: 'syz.2.24573': attribute type 29 has an invalid length. [ 1218.233807][T24435] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.24588'. [ 1218.347392][T24442] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.24590'. [ 1218.395146][T24441] netlink: 'syz.2.24589': attribute type 29 has an invalid length. [ 1218.410046][T24441] netlink: 'syz.2.24589': attribute type 29 has an invalid length. [ 1218.476091][T24449] netlink: 'syz.0.24592': attribute type 1 has an invalid length. [ 1218.487679][T24445] tun0: tun_chr_ioctl cmd 1074812117 [ 1218.504108][T24449] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.24592'. [ 1219.605765][T24504] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24619'. [ 1220.293970][T24540] netlink: 'syz.3.24632': attribute type 13 has an invalid length. [ 1220.302486][T24540] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.24632'. [ 1220.338836][T24541] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24630'. [ 1220.356272][T24541] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24630'. [ 1220.379175][T24538] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24630'. [ 1220.415921][T24541] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24630'. [ 1220.788965][T24556] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.24641'. [ 1220.799600][T24556] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 1221.017192][T24567] tap0: tun_chr_ioctl cmd 1074025677 [ 1221.022975][T24567] tap0: linktype set to 270 [ 1221.140450][T24573] netlink: 'syz.0.24650': attribute type 29 has an invalid length. [ 1221.154296][T24573] netlink: 'syz.0.24650': attribute type 29 has an invalid length. [ 1221.183003][T24573] netlink: 'syz.0.24650': attribute type 29 has an invalid length. [ 1221.615394][T24597] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1221.621695][T24597] syzkaller1: linktype set to 823 [ 1221.681775][T24604] tap0: tun_chr_ioctl cmd 1074025677 [ 1221.687807][T24604] tap0: linktype set to 774 [ 1222.451995][T24649] netlink: 'syz.1.24684': attribute type 1 has an invalid length. [ 1222.648821][T24660] netlink: 'syz.0.24690': attribute type 28 has an invalid length. [ 1223.086114][T24682] netlink: 'syz.1.24703': attribute type 4 has an invalid length. [ 1223.250951][T24692] netlink: 'syz.0.24707': attribute type 1 has an invalid length. [ 1223.271273][T24692] __nla_validate_parse: 11 callbacks suppressed [ 1223.271294][T24692] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.24707'. [ 1223.382740][T24697] syzkaller0: tun_chr_ioctl cmd 35092 [ 1223.557593][T24708] netlink: 'syz.1.24715': attribute type 1 has an invalid length. [ 1223.666612][T24715] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24719'. [ 1223.692976][T24715] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24719'. [ 1223.709859][T24711] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24719'. [ 1223.734233][T24718] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24719'. [ 1223.753287][T24720] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.24721'. [ 1224.273187][T24745] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24729'. [ 1224.283561][T24745] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24729'. [ 1224.294276][T24740] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24729'. [ 1224.306496][T24745] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24729'. [ 1224.396454][T24752] netlink: 'syz.0.24731': attribute type 4 has an invalid length. [ 1226.448779][T24827] tap0: tun_chr_ioctl cmd 2147767519 [ 1227.193947][T24865] tap0: tun_chr_ioctl cmd 1074025677 [ 1227.203103][T24865] tap0: linktype set to 774 [ 1228.015377][T24874] netlink: 'syz.2.24784': attribute type 29 has an invalid length. [ 1228.043280][T24874] netlink: 'syz.2.24784': attribute type 29 has an invalid length. [ 1228.062942][T24874] netlink: 'syz.2.24784': attribute type 29 has an invalid length. [ 1228.354561][T24885] tap0: tun_chr_ioctl cmd 1074025677 [ 1228.366369][T24885] tap0: linktype set to 270 [ 1228.528913][T24891] __nla_validate_parse: 25 callbacks suppressed [ 1228.528933][T24891] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.24793'. [ 1228.560444][T24891] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.24793'. [ 1228.587225][T24897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24797'. [ 1228.623032][T24890] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.24793'. [ 1228.644451][T24898] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.24793'. [ 1228.750831][T24904] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24799'. [ 1228.777068][T24904] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24799'. [ 1228.799156][T24903] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24799'. [ 1228.823227][T24904] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24799'. [ 1229.029241][T24914] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24812'. [ 1229.051443][T24912] tap0: tun_chr_ioctl cmd 1074025677 [ 1229.098050][T24912] tap0: linktype set to 769 [ 1231.129704][T24972] tun0: tun_chr_ioctl cmd 1074812117 [ 1233.139908][T25007] tun0: tun_chr_ioctl cmd 1074812117 [ 1233.484853][T25014] netlink: 'syz.1.24849': attribute type 29 has an invalid length. [ 1233.540248][T25014] netlink: 'syz.1.24849': attribute type 29 has an invalid length. [ 1233.647169][T25025] __nla_validate_parse: 8 callbacks suppressed [ 1233.647188][T25025] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24855'. [ 1233.670074][T25025] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24855'. [ 1233.705429][T25025] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24855'. [ 1233.716825][T25025] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24855'. [ 1233.912041][T25039] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24861'. [ 1233.925386][T25039] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24861'. [ 1233.935391][T25033] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24861'. [ 1233.945227][T25039] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24861'. [ 1234.507748][T25047] netlink: 'syz.1.24867': attribute type 29 has an invalid length. [ 1234.534115][T25047] netlink: 'syz.1.24867': attribute type 29 has an invalid length. [ 1239.093468][T25148] tap0: tun_chr_ioctl cmd 1074025677 [ 1239.113215][T25148] tap0: linktype set to 805 [ 1239.136575][T25150] netlink: 176 bytes leftover after parsing attributes in process `syz.2.24909'. [ 1239.317286][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.324670][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.759095][T25187] netlink: 'syz.1.24927': attribute type 9 has an invalid length. [ 1241.772991][T25187] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.24927'. [ 1242.590281][T25196] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 1244.950663][T25234] netlink: 'syz.2.24945': attribute type 21 has an invalid length. [ 1246.935235][T25277] netlink: 'syz.1.24964': attribute type 10 has an invalid length. [ 1246.945853][T25277] netlink: 3819 bytes leftover after parsing attributes in process `syz.1.24964'. [ 1248.343209][T25305] tap0: tun_chr_ioctl cmd 1074025677 [ 1248.353669][T25305] tap0: linktype set to 6 [ 1250.829229][T25365] netlink: 'syz.3.25001': attribute type 1 has an invalid length. [ 1250.839093][T25365] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.25001'. [ 1251.000696][T25370] netlink: 183676 bytes leftover after parsing attributes in process `syz.3.25002'. [ 1251.025491][T25370] netlink: zone id is out of range [ 1251.043164][T25370] netlink: del zone limit has 4 unknown bytes [ 1251.957904][T25402] netlink: 183676 bytes leftover after parsing attributes in process `syz.1.25014'. [ 1251.988701][T25402] netlink: zone id is out of range [ 1252.004519][T25402] netlink: del zone limit has 4 unknown bytes [ 1253.445542][T25449] netlink: 'syz.2.25038': attribute type 1 has an invalid length. [ 1253.473096][T25449] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.25038'. [ 1254.131519][T25484] netlink: 183676 bytes leftover after parsing attributes in process `syz.3.25060'. [ 1254.151946][T25484] netlink: zone id is out of range [ 1254.161682][T25484] netlink: del zone limit has 4 unknown bytes [ 1254.820733][T25512] netlink: 183676 bytes leftover after parsing attributes in process `syz.3.25066'. [ 1254.849853][T25512] netlink: zone id is out of range [ 1254.873041][T25512] netlink: del zone limit has 4 unknown bytes [ 1255.795973][T25550] netlink: 183676 bytes leftover after parsing attributes in process `syz.1.25082'. [ 1255.811731][T25550] netlink: zone id is out of range [ 1255.822691][T25550] netlink: del zone limit has 4 unknown bytes [ 1256.770950][T25595] netlink: 'syz.2.25101': attribute type 3 has an invalid length. [ 1256.779486][T25595] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.25101'. [ 1259.030912][T25683] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.25145'. [ 1259.046107][T25681] netlink: 'syz.0.25138': attribute type 3 has an invalid length. [ 1259.054966][T25681] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.25138'. [ 1259.062966][T25683] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.25145'. [ 1259.084304][T25679] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.25145'. [ 1259.096016][T25685] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.25145'. [ 1259.243583][T25692] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25140'. [ 1259.254708][T25692] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25140'. [ 1259.265515][T25689] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25140'. [ 1259.291784][T25689] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25140'. [ 1259.982230][T25720] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.25161'. [ 1260.304436][T25737] sctp: [Deprecated]: syz.1.25162 (pid 25737) Use of int in maxseg socket option. [ 1260.304436][T25737] Use struct sctp_assoc_value instead [ 1260.419352][T25740] netlink: 'syz.1.25163': attribute type 3 has an invalid length. [ 1261.355838][T25765] netlink: 'syz.3.25173': attribute type 3 has an invalid length. [ 1265.759860][T25898] __nla_validate_parse: 13 callbacks suppressed [ 1265.759882][T25898] netlink: 164 bytes leftover after parsing attributes in process `syz.2.25233'. [ 1266.595634][T25918] tap0: tun_chr_ioctl cmd 1074025677 [ 1266.617174][T25918] tap0: linktype set to 804 [ 1267.518960][T25950] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.25264'. [ 1268.275876][T25971] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.25263'. [ 1268.962714][T25993] ip6_vti0: mtu greater than device maximum [ 1269.226413][T26001] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.25280'. [ 1269.732664][T26016] netlink: 164 bytes leftover after parsing attributes in process `syz.3.25286'. [ 1271.036257][T26044] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.25298'. [ 1271.141307][T26047] tap0: tun_chr_ioctl cmd 1074025677 [ 1271.156674][T26047] tap0: linktype set to 804 [ 1271.218455][T26052] netlink: 'syz.0.25302': attribute type 10 has an invalid length. [ 1271.227542][T26052] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25302'. [ 1271.237461][T26052] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 1271.302045][T26054] netlink: 'syz.1.25303': attribute type 13 has an invalid length. [ 1271.313073][T26054] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.25303'. [ 1271.662263][T26071] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.25310'. [ 1271.695626][T26074] netlink: 'syz.3.25321': attribute type 10 has an invalid length. [ 1271.704496][T26074] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25321'. [ 1271.724292][T26074] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 1272.205095][T26099] netlink: 'syz.2.25325': attribute type 10 has an invalid length. [ 1272.221720][T26099] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25325'. [ 1272.232156][T26099] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 1272.668943][T26117] netlink: 'syz.0.25332': attribute type 13 has an invalid length. [ 1272.679517][T26117] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.25332'. [ 1272.741451][T26119] tun0: tun_chr_ioctl cmd 2147767511 [ 1273.436307][T26154] tun1: tun_chr_ioctl cmd 2147767511 [ 1274.023517][T26181] tun1: tun_chr_ioctl cmd 2147767511 [ 1274.174942][T26192] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.25367'. [ 1275.353653][T26216] netlink: 'syz.2.25378': attribute type 13 has an invalid length. [ 1275.372968][T26216] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.25378'. [ 1276.232016][T26266] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 1276.241591][T26266] pim6reg0: persist enabled [ 1276.268107][T26270] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.25405'. [ 1276.748215][T26294] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 1276.754968][T26294] pim6reg0: persist enabled [ 1277.263210][T26321] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 1277.269719][T26321] pim6reg0: persist enabled [ 1277.313111][T26327] ref_ctr_offset mismatch. inode: 0x7b51 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 1277.493912][T26333] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.25436'. [ 1277.514134][T26333] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1277.805686][T26349] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.25444'. [ 1278.362053][T26382] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.25460'. [ 1278.377831][T26382] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1278.670903][T26396] netlink: 'syz.0.25465': attribute type 3 has an invalid length. [ 1278.691591][T26396] netlink: 144 bytes leftover after parsing attributes in process `syz.0.25465'. [ 1278.705783][T26396] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1278.723465][T26398] ref_ctr_offset mismatch. inode: 0x7d63 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 1278.830088][T26404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25471'. [ 1278.839832][T26404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25471'. [ 1278.937873][T26406] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.25472'. [ 1278.951767][T26406] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1279.014787][T26409] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.25473'. [ 1279.275605][T26424] ref_ctr_offset mismatch. inode: 0x7d76 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 1279.476424][T26436] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.25487'. [ 1279.975827][T26461] netlink: 'syz.2.25496': attribute type 3 has an invalid length. [ 1279.984388][T26461] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1280.587672][T26494] tap0: tun_chr_ioctl cmd 1074025680 [ 1281.720294][T26558] €Â0: renamed from pim6reg1 [ 1281.867542][T26568] tap0: tun_chr_ioctl cmd 1074025680 [ 1282.289558][T26585] __nla_validate_parse: 2 callbacks suppressed [ 1282.289576][T26585] netlink: 188 bytes leftover after parsing attributes in process `syz.2.25553'. [ 1282.956486][T26624] €Â0: renamed from pim6reg1 [ 1283.100869][T26629] netlink: 'syz.2.25573': attribute type 11 has an invalid length. [ 1283.488882][T26646] netlink: 'syz.3.25578': attribute type 8 has an invalid length. [ 1283.507727][T26646] netlink: 'syz.3.25578': attribute type 6 has an invalid length. [ 1283.519408][T26646] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.25578'. [ 1283.690457][T26652] tap0: tun_chr_ioctl cmd 1074025680 [ 1283.793201][T26656] €Â0: renamed from pim6reg1 [ 1285.041446][T26688] tap0: tun_chr_ioctl cmd 1074025680 [ 1285.121473][T26694] macvtap0: refused to change device tx_queue_len [ 1286.406018][T26755] macvtap0: refused to change device tx_queue_len [ 1288.473227][T26859] syzkaller0: tun_chr_ioctl cmd 35111 [ 1288.778577][T26864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1290.467039][T26939] netlink: 'syz.0.25723': attribute type 21 has an invalid length. [ 1290.479602][T26939] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.25723'. [ 1290.971352][T26955] netlink: 'syz.0.25721': attribute type 4 has an invalid length. [ 1290.994682][T26955] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.25721'. [ 1291.357833][T26977] tun1: tun_chr_ioctl cmd 1074025677 [ 1291.373140][T26977] tun1: linktype set to 776 [ 1291.494652][T26983] netlink: 'syz.3.25738': attribute type 4 has an invalid length. [ 1291.513561][T26983] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.25738'. [ 1291.659854][T26993] netlink: 'syz.3.25742': attribute type 21 has an invalid length. [ 1291.682859][T26993] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.25742'. [ 1291.808025][T26999] netlink: 'syz.1.25753': attribute type 21 has an invalid length. [ 1291.822889][T26999] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.25753'. [ 1291.839319][T27003] netlink: 'syz.2.25746': attribute type 10 has an invalid length. [ 1291.851802][T27003] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.25746'. [ 1292.017373][T27011] netlink: 'syz.1.25750': attribute type 4 has an invalid length. [ 1292.025924][T27011] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.25750'. [ 1292.262096][T27018] tun1: tun_chr_ioctl cmd 1074025677 [ 1292.269681][T27018] tun1: linktype set to 776 [ 1292.573060][T27033] netlink: 60 bytes leftover after parsing attributes in process `syz.0.25759'. [ 1293.374184][T27069] netlink: 'syz.0.25775': attribute type 10 has an invalid length. [ 1293.397821][T27069] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.25775'. [ 1293.409352][T27070] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25776'. [ 1296.137691][T27174] netlink: 'syz.1.25820': attribute type 21 has an invalid length. [ 1296.157450][T27178] netlink: 'syz.3.25824': attribute type 2 has an invalid length. [ 1296.165848][T27178] __nla_validate_parse: 3 callbacks suppressed [ 1296.165863][T27178] netlink: 132 bytes leftover after parsing attributes in process `syz.3.25824'. [ 1296.334248][T27184] netlink: 40 bytes leftover after parsing attributes in process `syz.1.25827'. [ 1297.809576][T27250] netlink: 'syz.2.25853': attribute type 21 has an invalid length. [ 1298.144510][T27272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25865'. [ 1298.406862][T27288] netlink: 'syz.3.25869': attribute type 21 has an invalid length. [ 1298.910956][T27310] delete_channel: no stack [ 1299.133869][T27319] netlink: 'syz.0.25882': attribute type 21 has an invalid length. [ 1300.771204][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.795825][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.237167][T27383] netlink: 60 bytes leftover after parsing attributes in process `syz.1.25912'. [ 1301.261107][T27383] netlink: 60 bytes leftover after parsing attributes in process `syz.1.25912'. [ 1301.274430][T27380] netlink: 60 bytes leftover after parsing attributes in process `syz.1.25912'. [ 1301.285783][T27383] netlink: 60 bytes leftover after parsing attributes in process `syz.1.25912'. [ 1301.458252][T27390] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25923'. [ 1301.478781][T27390] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25923'. [ 1301.521175][T27387] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25923'. [ 1301.544084][T27390] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25923'. [ 1301.660340][T27397] netlink: 'syz.1.25918': attribute type 1 has an invalid length. [ 1301.668717][T27397] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.25918'. [ 1302.641849][T27422] netlink: 'syz.1.25930': attribute type 3 has an invalid length. [ 1302.673883][T27422] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.25930'. [ 1303.394433][T27452] tap0: tun_chr_ioctl cmd 1074025681 [ 1303.676454][T27456] netlink: 'syz.0.25945': attribute type 1 has an invalid length. [ 1303.816301][T27463] netlink: 'syz.2.25957': attribute type 10 has an invalid length. [ 1304.035381][T27472] delete_channel: no stack [ 1304.282012][T27489] syzkaller0: tun_chr_ioctl cmd 35108 [ 1304.544523][T27495] netlink: 'syz.3.25965': attribute type 2 has an invalid length. [ 1305.502450][T27527] netlink: 'syz.2.25978': attribute type 3 has an invalid length. [ 1306.225806][T27551] tap0: tun_chr_ioctl cmd 1074025681 [ 1306.495586][T27563] netlink: 'syz.0.25991': attribute type 3 has an invalid length. [ 1306.523445][T27563] __nla_validate_parse: 4 callbacks suppressed [ 1306.523485][T27563] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.25991'. [ 1306.858863][T27573] netlink: 'syz.0.25998': attribute type 2 has an invalid length. [ 1306.873406][T27573] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.25998'. [ 1306.932472][T27575] syzkaller0: tun_chr_ioctl cmd 35108 [ 1306.988594][T27577] tap0: tun_chr_ioctl cmd 1074025681 [ 1307.429439][T27592] netlink: 'syz.3.26008': attribute type 3 has an invalid length. [ 1307.454100][T27592] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.26008'. [ 1307.579022][T27599] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.26010'. [ 1307.609732][T27599] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.26010'. [ 1307.641547][T27595] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.26010'. [ 1307.673886][T27600] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.26010'. [ 1307.771314][T27604] netlink: 'syz.1.26011': attribute type 2 has an invalid length. [ 1307.790487][T27604] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.26011'. [ 1307.792688][T27606] syzkaller0: tun_chr_ioctl cmd 35108 [ 1308.056290][T27612] tap0: tun_chr_ioctl cmd 1074025681 [ 1308.992334][T27657] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.26036'. [ 1310.611300][T27717] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.26061'. [ 1311.609585][T27752] netlink: 'syz.3.26086': attribute type 1 has an invalid length. [ 1311.633600][T27752] __nla_validate_parse: 5 callbacks suppressed [ 1311.633621][T27752] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.26086'. [ 1311.652949][T27753] netlink: 'syz.0.26085': attribute type 3 has an invalid length. [ 1311.662957][T27753] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.26085'. [ 1311.775468][T27759] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.26089'. [ 1311.933189][T27767] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.26094'. [ 1312.041968][T27773] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.26096'. [ 1312.711810][T27799] netlink: 'syz.3.26101': attribute type 3 has an invalid length. [ 1312.723057][T27799] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.26101'. [ 1313.205663][T27812] ip6erspan0: tun_chr_ioctl cmd 1074025672 [ 1313.213439][T27812] ip6erspan0: ignored: set checksum enabled [ 1313.449052][T27823] netlink: 'syz.3.26113': attribute type 17 has an invalid length. [ 1313.460013][T27823] netlink: 'syz.3.26113': attribute type 41 has an invalid length. [ 1313.469221][T27827] syz.0.26114[27827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1313.469485][T27827] syz.0.26114[27827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1313.481816][T27823] netlink: 152 bytes leftover after parsing attributes in process `syz.3.26113'. [ 1313.556917][T27829] netlink: 'syz.1.26115': attribute type 3 has an invalid length. [ 1313.592997][T27829] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.26115'. [ 1314.138502][T27844] netlink: 'syz.3.26122': attribute type 29 has an invalid length. [ 1314.158418][T27844] netlink: 'syz.3.26122': attribute type 29 has an invalid length. [ 1314.581488][T27866] ip6erspan0: tun_chr_ioctl cmd 1074025672 [ 1314.602958][T27866] ip6erspan0: ignored: set checksum enabled [ 1314.650566][T27871] netlink: 'syz.2.26133': attribute type 17 has an invalid length. [ 1314.667991][T27871] netlink: 'syz.2.26133': attribute type 41 has an invalid length. [ 1314.681041][T27871] netlink: 152 bytes leftover after parsing attributes in process `syz.2.26133'. [ 1315.125200][T27880] syz.1.26135[27880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1315.125464][T27880] syz.1.26135[27880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1315.126431][T27879] netlink: 148 bytes leftover after parsing attributes in process `syz.0.26143'. [ 1315.372988][T27890] netlink: 'syz.3.26140': attribute type 6 has an invalid length. [ 1315.603553][T27902] syz.2.26148[27902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1315.603854][T27902] syz.2.26148[27902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1316.263401][T27931] syz.3.26161[27931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1316.271522][T27933] netlink: 'syz.1.26163': attribute type 17 has an invalid length. [ 1316.322298][T27931] syz.3.26161[27931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1316.654687][T27949] __nla_validate_parse: 3 callbacks suppressed [ 1316.654704][T27949] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.26169'. [ 1316.773618][T27951] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.793187][T27951] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.812960][T27951] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.832991][T27951] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.065804][T27960] netlink: 132 bytes leftover after parsing attributes in process `syz.2.26175'. [ 1318.501462][T28024] netlink: 132 bytes leftover after parsing attributes in process `syz.3.26201'. [ 1318.667710][T28030] validate_nla: 3 callbacks suppressed [ 1318.667729][T28030] netlink: 'syz.2.26202': attribute type 2 has an invalid length. [ 1318.682585][T28030] netlink: 132 bytes leftover after parsing attributes in process `syz.2.26202'. [ 1319.332984][T28058] netlink: 'syz.3.26219': attribute type 2 has an invalid length. [ 1319.346417][T28058] netlink: 132 bytes leftover after parsing attributes in process `syz.3.26219'. [ 1319.826356][T28082] netlink: 'syz.3.26229': attribute type 10 has an invalid length. [ 1319.891887][T28082] geneve1: entered promiscuous mode [ 1319.904868][T28082] geneve1: entered allmulticast mode [ 1319.911566][T28082] team0: Port device geneve1 added [ 1320.488442][T28107] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.26245'. [ 1320.500712][T28107] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.26245'. [ 1320.521770][T28101] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.26245'. [ 1320.533929][T28108] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.26245'. [ 1320.785574][T28120] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.26244'. [ 1321.763694][T28174] __nla_validate_parse: 9 callbacks suppressed [ 1321.763716][T28174] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.26269'. [ 1322.227517][T28195] netlink: 60 bytes leftover after parsing attributes in process `syz.3.26280'. [ 1322.238634][T28195] netlink: 60 bytes leftover after parsing attributes in process `syz.3.26280'. [ 1322.249223][T28191] netlink: 60 bytes leftover after parsing attributes in process `syz.3.26280'. [ 1322.259436][T28195] netlink: 60 bytes leftover after parsing attributes in process `syz.3.26280'. [ 1323.029212][T28227] netlink: 2 bytes leftover after parsing attributes in process `syz.3.26297'. [ 1323.557426][T28255] netlink: 'syz.1.26310': attribute type 29 has an invalid length. [ 1323.567326][T28255] netlink: 'syz.1.26310': attribute type 29 has an invalid length. [ 1323.578342][T28255] netlink: 'syz.1.26310': attribute type 29 has an invalid length. [ 1323.589118][T28255] netlink: 'syz.1.26310': attribute type 29 has an invalid length. [ 1324.451047][T28293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.26328'. [ 1324.495241][T28293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.26328'. [ 1324.566122][T28298] netlink: 60 bytes leftover after parsing attributes in process `syz.2.26328'. [ 1324.611253][T28293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.26328'. [ 1325.270826][T28324] netlink: zone id is out of range [ 1325.293176][T28324] netlink: zone id is out of range [ 1325.298926][T28324] netlink: zone id is out of range [ 1325.315494][T28324] netlink: zone id is out of range [ 1325.333711][T28324] netlink: zone id is out of range [ 1325.343421][T28324] netlink: zone id is out of range [ 1325.356337][T28324] netlink: zone id is out of range [ 1325.367013][T28324] netlink: zone id is out of range [ 1325.382590][T28324] netlink: zone id is out of range [ 1325.400089][T28324] netlink: zone id is out of range [ 1325.580160][T28338] netlink: 'syz.0.26354': attribute type 29 has an invalid length. [ 1325.624061][T28338] netlink: 'syz.0.26354': attribute type 29 has an invalid length. [ 1325.644454][T28340] netlink: 'syz.0.26354': attribute type 29 has an invalid length. [ 1325.683735][T28338] netlink: 'syz.0.26354': attribute type 29 has an invalid length. [ 1325.830668][T28346] netlink: 'syz.1.26349': attribute type 29 has an invalid length. [ 1325.863003][T28346] netlink: 'syz.1.26349': attribute type 29 has an invalid length. [ 1325.873389][T28346] netlink: 'syz.1.26349': attribute type 29 has an invalid length. [ 1325.896895][T28346] netlink: 'syz.1.26349': attribute type 29 has an invalid length. [ 1326.917115][T28394] __nla_validate_parse: 11 callbacks suppressed [ 1326.917136][T28394] netlink: 60 bytes leftover after parsing attributes in process `syz.3.26372'. [ 1326.935865][T28394] netlink: 60 bytes leftover after parsing attributes in process `syz.3.26372'. [ 1326.948747][T28394] netlink: 60 bytes leftover after parsing attributes in process `syz.3.26372'. [ 1326.960704][T28394] netlink: 60 bytes leftover after parsing attributes in process `syz.3.26372'. [ 1326.992096][T28396] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26371'. [ 1327.020626][T28396] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26371'. [ 1327.063151][T28396] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26371'. [ 1327.077312][T28396] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26371'. [ 1327.587150][T28412] tun1: tun_chr_ioctl cmd 1074025681 [ 1327.773701][T28414] netlink: 'syz.3.26380': attribute type 10 has an invalid length. [ 1327.798922][T28414] bridge0: port 3(team0) entered disabled state [ 1327.818348][T28414] team0: left allmulticast mode [ 1327.833868][T28414] A6±ÿ: left allmulticast mode [ 1327.839173][T28414] veth1_macvtap: left allmulticast mode [ 1327.852949][T28414] geneve1: left allmulticast mode [ 1327.858681][T28414] team0: left promiscuous mode [ 1327.870855][T28414] A6±ÿ: left promiscuous mode [ 1327.907058][T28414] veth1_macvtap: left promiscuous mode [ 1327.913510][T28414] geneve1: left promiscuous mode [ 1327.921083][T28414] bridge0: port 3(team0) entered disabled state [ 1327.979725][T28420] netlink: 60 bytes leftover after parsing attributes in process `syz.0.26382'. [ 1328.003307][T28420] netlink: 60 bytes leftover after parsing attributes in process `syz.0.26382'. [ 1330.045585][T28482] netlink: 'syz.1.26410': attribute type 10 has an invalid length. [ 1330.070475][T28482] team0: left promiscuous mode [ 1330.079117][T28482] team_slave_1: left promiscuous mode [ 1330.093300][T28482] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 1330.110843][T28482] veth0_to_bond: left promiscuous mode [ 1330.120399][T28482] veth1_macvtap: left promiscuous mode [ 1330.133187][T28482] team0: left allmulticast mode [ 1330.138248][T28482] team_slave_1: left allmulticast mode [ 1330.144977][T28482] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 1330.152133][T28482] veth0_to_bond: left allmulticast mode [ 1330.162905][T28482] veth1_macvtap: left allmulticast mode [ 1331.194026][T28524] netlink: 'syz.2.26425': attribute type 10 has an invalid length. [ 1332.134540][T28556] __nla_validate_parse: 17 callbacks suppressed [ 1332.134561][T28556] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.26438'. [ 1332.295730][T28560] netlink: 'syz.3.26442': attribute type 29 has an invalid length. [ 1332.353724][T28560] netlink: 'syz.3.26442': attribute type 29 has an invalid length. [ 1332.420479][T28560] netlink: 'syz.3.26442': attribute type 29 has an invalid length. [ 1332.462903][T28564] netlink: 'syz.3.26442': attribute type 29 has an invalid length. [ 1332.774647][T28575] netlink: 72 bytes leftover after parsing attributes in process `syz.0.26449'. [ 1332.953121][T28578] netlink: 'syz.0.26450': attribute type 10 has an invalid length. [ 1333.016987][T28578] team0: left promiscuous mode [ 1333.022400][T28578] team_slave_1: left promiscuous mode [ 1333.053101][T28578] syz_tun: left promiscuous mode [ 1333.058383][T28578] geneve1: left promiscuous mode [ 1333.092495][T28578] veth1_macvtap: left promiscuous mode [ 1333.113047][T28578] team0: left allmulticast mode [ 1333.118372][T28578] team_slave_1: left allmulticast mode [ 1333.132863][T28578] syz_tun: left allmulticast mode [ 1333.143004][T28578] geneve1: left allmulticast mode [ 1333.148489][T28578] veth1_macvtap: left allmulticast mode [ 1333.569240][T28598] netlink: 72 bytes leftover after parsing attributes in process `syz.2.26459'. [ 1334.039913][T28614] netlink: 'syz.2.26469': attribute type 25 has an invalid length. [ 1334.063090][T28614] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.26469'. [ 1334.284981][T28626] netlink: 72 bytes leftover after parsing attributes in process `syz.1.26472'. [ 1334.659035][T28639] netlink: 'syz.0.26481': attribute type 25 has an invalid length. [ 1334.672961][T28639] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.26481'. [ 1334.796064][T28644] netlink: 'syz.2.26492': attribute type 29 has an invalid length. [ 1334.877282][T28644] netlink: 'syz.2.26492': attribute type 29 has an invalid length. [ 1336.495609][T28704] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.26520'. [ 1336.537553][T28706] validate_nla: 2 callbacks suppressed [ 1336.537589][T28706] netlink: 'syz.3.26511': attribute type 27 has an invalid length. [ 1336.572954][T28706] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.26511'. [ 1337.069664][T28729] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.26524'. [ 1337.299622][T28737] netlink: 'syz.1.26527': attribute type 27 has an invalid length. [ 1337.315235][T28737] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.26527'. [ 1337.392225][T28741] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1337.635051][T28749] netlink: 'syz.2.26534': attribute type 10 has an invalid length. [ 1337.663235][T28749] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.26534'. [ 1337.780616][T28756] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.26537'. [ 1337.994513][T28772] netlink: 'syz.3.26545': attribute type 33 has an invalid length. [ 1338.019427][T28772] netlink: 152 bytes leftover after parsing attributes in process `syz.3.26545'. [ 1338.220243][T28782] netlink: 'syz.3.26549': attribute type 10 has an invalid length. [ 1338.231636][T28782] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.26549'. [ 1338.325735][T28786] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.26551'. [ 1339.324888][T28827] netlink: 'syz.1.26568': attribute type 33 has an invalid length. [ 1339.334424][T28827] netlink: 152 bytes leftover after parsing attributes in process `syz.1.26568'. [ 1339.989377][T28851] netlink: 'syz.1.26581': attribute type 29 has an invalid length. [ 1339.998903][T28851] netlink: 44 bytes leftover after parsing attributes in process `syz.1.26581'. [ 1340.010543][T28851] netlink: 'syz.1.26581': attribute type 29 has an invalid length. [ 1340.020265][T28851] netlink: 44 bytes leftover after parsing attributes in process `syz.1.26581'. [ 1340.647619][T28879] netlink: 'syz.0.26593': attribute type 29 has an invalid length. [ 1340.685314][T28879] netlink: 44 bytes leftover after parsing attributes in process `syz.0.26593'. [ 1340.698476][T28879] netlink: 'syz.0.26593': attribute type 29 has an invalid length. [ 1342.323551][T28961] __nla_validate_parse: 4 callbacks suppressed [ 1342.323570][T28961] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.26632'. [ 1342.527650][T28974] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.26636'. [ 1343.375619][T29018] validate_nla: 1 callbacks suppressed [ 1343.375639][T29018] netlink: 'syz.1.26658': attribute type 10 has an invalid length. [ 1343.451753][T29024] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.26669'. [ 1343.513021][T29026] netlink: 'syz.2.26661': attribute type 29 has an invalid length. [ 1343.545727][T29026] netlink: 44 bytes leftover after parsing attributes in process `syz.2.26661'. [ 1343.572345][T29026] netlink: 'syz.2.26661': attribute type 29 has an invalid length. [ 1343.582008][T29026] netlink: 44 bytes leftover after parsing attributes in process `syz.2.26661'. [ 1343.912566][T29048] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.26673'. [ 1343.946783][T29051] netlink: 'syz.3.26672': attribute type 10 has an invalid length. [ 1343.986879][T29051] veth0_vlan: entered allmulticast mode [ 1344.124774][T29051] veth0_vlan: left promiscuous mode [ 1344.131756][T29051] veth0_vlan: entered promiscuous mode [ 1344.146143][T29051] team0: Device veth0_vlan failed to register rx_handler [ 1344.324282][T29064] netlink: 'syz.3.26676': attribute type 29 has an invalid length. [ 1344.342895][T29064] netlink: 44 bytes leftover after parsing attributes in process `syz.3.26676'. [ 1344.363179][T29064] netlink: 'syz.3.26676': attribute type 29 has an invalid length. [ 1344.371258][T29064] netlink: 44 bytes leftover after parsing attributes in process `syz.3.26676'. [ 1344.795108][T29083] netlink: 'syz.2.26688': attribute type 10 has an invalid length. [ 1344.812187][T29083] veth0_vlan: entered allmulticast mode [ 1344.887083][T29083] veth0_vlan: left promiscuous mode [ 1344.894732][T29083] veth0_vlan: entered promiscuous mode [ 1344.904899][T29083] team0: Device veth0_vlan failed to register rx_handler [ 1345.043431][T29091] netlink: 160 bytes leftover after parsing attributes in process `syz.1.26700'. [ 1345.604924][T29118] netlink: 14478 bytes leftover after parsing attributes in process `syz.2.26706'. [ 1346.605277][T29161] tap0: tun_chr_ioctl cmd 1074025677 [ 1346.612573][T29161] tap0: linktype set to 778 [ 1346.797517][T29169] tap0: tun_chr_ioctl cmd 1074025677 [ 1346.803647][T29169] tap0: linktype set to 778 [ 1346.935249][T29174] netlink: 'syz.2.26732': attribute type 8 has an invalid length. [ 1346.944342][T29174] net_ratelimit: 442 callbacks suppressed [ 1346.944358][T29174] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1347.444688][T29201] netlink: 'syz.0.26743': attribute type 10 has an invalid length. [ 1347.474117][T29201] veth0_vlan: entered allmulticast mode [ 1347.524038][T29201] veth0_vlan: left promiscuous mode [ 1347.545828][T29201] veth0_vlan: entered promiscuous mode [ 1347.562682][T29201] team0: Device veth0_vlan failed to register rx_handler [ 1348.144390][T29233] netlink: 'syz.0.26760': attribute type 8 has an invalid length. [ 1348.168381][T29233] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1348.607637][T29257] netlink: 'syz.1.26772': attribute type 8 has an invalid length. [ 1348.623844][T29257] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1350.611993][T29344] __nla_validate_parse: 7 callbacks suppressed [ 1350.612026][T29344] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.26812'. [ 1351.348459][T29383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1351.356208][T29383] IPv6: NLM_F_CREATE should be set when creating new route [ 1351.363813][T29383] IPv6: NLM_F_CREATE should be set when creating new route [ 1351.371353][T29383] IPv6: NLM_F_CREATE should be set when creating new route [ 1352.796580][T29426] netlink: 'syz.2.26851': attribute type 1 has an invalid length. [ 1352.824076][T29426] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.26851'. [ 1354.462372][T29463] netlink: 'syz.0.26866': attribute type 1 has an invalid length. [ 1354.482615][T29463] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.26866'. [ 1355.287294][T29490] netlink: 'syz.3.26881': attribute type 1 has an invalid length. [ 1355.295948][T29490] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.26881'. [ 1355.529472][T29503] netlink: 44 bytes leftover after parsing attributes in process `syz.1.26886'. [ 1355.549730][T29503] netlink: 44 bytes leftover after parsing attributes in process `syz.1.26886'. [ 1355.583124][T29500] netlink: 44 bytes leftover after parsing attributes in process `syz.1.26886'. [ 1355.603199][T29508] netlink: 44 bytes leftover after parsing attributes in process `syz.1.26886'. [ 1355.903613][T29521] netlink: 10 bytes leftover after parsing attributes in process `syz.1.26894'. [ 1356.755854][T29539] netlink: 60 bytes leftover after parsing attributes in process `syz.0.26910'. [ 1356.775024][T29539] netlink: 60 bytes leftover after parsing attributes in process `syz.0.26910'. [ 1356.805178][T29539] netlink: 60 bytes leftover after parsing attributes in process `syz.0.26910'. [ 1356.824036][T29539] netlink: 60 bytes leftover after parsing attributes in process `syz.0.26910'. [ 1360.303477][T29606] tap0: tun_chr_ioctl cmd 1074025677 [ 1360.309205][T29606] tap0: linktype set to 3 [ 1360.760565][T29624] netlink: 'syz.2.26943': attribute type 2 has an invalid length. [ 1360.775919][T29624] netlink: 116 bytes leftover after parsing attributes in process `syz.2.26943'. [ 1360.795492][T29624] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1361.071389][T29640] tap0: tun_chr_ioctl cmd 1074025677 [ 1361.079535][T29640] tap0: linktype set to 3 [ 1361.711870][T29664] netlink: 'syz.0.26958': attribute type 2 has an invalid length. [ 1361.727469][T29664] netlink: 116 bytes leftover after parsing attributes in process `syz.0.26958'. [ 1361.749137][T29664] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1361.957101][T29671] tap0: tun_chr_ioctl cmd 1074025677 [ 1361.963207][T29671] tap0: linktype set to 3 [ 1362.283869][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.300940][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.202067][T29680] pimreg: tun_chr_ioctl cmd 1074025677 [ 1363.215853][T29680] pimreg: linktype set to 780 [ 1363.512405][T29696] netlink: 'syz.1.26974': attribute type 2 has an invalid length. [ 1363.531212][T29696] netlink: 116 bytes leftover after parsing attributes in process `syz.1.26974'. [ 1363.541376][T29696] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1364.167182][T29721] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.26985'. [ 1364.197326][T29723] netlink: 'syz.1.26987': attribute type 3 has an invalid length. [ 1364.206358][T29723] netlink: 152 bytes leftover after parsing attributes in process `syz.1.26987'. [ 1364.327957][T29727] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.26997'. [ 1365.048057][T29758] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.27000'. [ 1366.140116][T29763] netlink: 'syz.3.27003': attribute type 3 has an invalid length. [ 1366.161068][T29763] netlink: 152 bytes leftover after parsing attributes in process `syz.3.27003'. [ 1366.454680][T29781] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.27011'. [ 1366.466442][T29781] openvswitch: netlink: Duplicate key (type 0). [ 1366.712262][T29793] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27020'. [ 1366.732988][T29793] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27020'. [ 1366.744145][T29793] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27020'. [ 1366.765772][T29793] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27020'. [ 1367.098650][T29810] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.27028'. [ 1367.120449][T29810] openvswitch: netlink: Duplicate key (type 0). [ 1367.363401][T29823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27033'. [ 1367.392344][T29823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27033'. [ 1367.414666][T29826] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27033'. [ 1367.426627][T29823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27033'. [ 1367.688851][T29839] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.27041'. [ 1367.707224][T29839] openvswitch: netlink: Duplicate key (type 0). [ 1367.905847][T29852] netlink: 60 bytes leftover after parsing attributes in process `syz.3.27047'. [ 1368.873931][T29905] netlink: 'syz.0.27080': attribute type 15 has an invalid length. [ 1369.070180][T29919] netlink: 'syz.2.27079': attribute type 3 has an invalid length. [ 1369.079261][T29919] netlink: 'syz.2.27079': attribute type 1 has an invalid length. [ 1369.430478][T29939] netlink: 'syz.2.27090': attribute type 1 has an invalid length. [ 1369.564778][T29947] netlink: 'syz.2.27093': attribute type 29 has an invalid length. [ 1369.593272][T29947] netlink: 'syz.2.27093': attribute type 29 has an invalid length. [ 1369.605811][T29949] netlink: 'syz.0.27103': attribute type 3 has an invalid length. [ 1369.624001][T29949] netlink: 'syz.0.27103': attribute type 1 has an invalid length. [ 1369.658593][T29952] netlink: 'syz.2.27093': attribute type 29 has an invalid length. [ 1371.555161][T30061] validate_nla: 3 callbacks suppressed [ 1371.555182][T30061] netlink: 'syz.3.27150': attribute type 6 has an invalid length. [ 1372.189070][T30097] sock: sock_set_timeout: `syz.1.27168' (pid 30097) tries to set negative timeout [ 1372.473286][T30115] pim6reg1: tun_chr_ioctl cmd 1074025676 [ 1372.479012][T30115] pim6reg1: owner set to 0 [ 1372.861823][T30135] __nla_validate_parse: 12 callbacks suppressed [ 1372.861845][T30135] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.27187'. [ 1373.253731][ T5792] cgroup: fork rejected by pids controller in /syz2 [ 1373.373767][T30156] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.27198'. [ 1373.521540][ T5792] team0: Port device syz_tun removed [ 1374.494187][T30185] netlink: 152 bytes leftover after parsing attributes in process `syz.0.27218'. [ 1374.526742][T30189] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.27209'. [ 1374.846853][ T5793] cgroup: fork rejected by pids controller in /syz1 [ 1375.033644][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.202153][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.298657][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.425975][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.643938][T30219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1375.653915][T30219] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1375.668411][T30219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1375.686858][T30219] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1375.695514][T30219] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1375.704850][T30219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1376.520044][ T5787] cgroup: fork rejected by pids controller in /syz0 [ 1376.826873][ T5787] team0: Port device syz_tun removed [ 1376.886047][T30217] chnl_net:caif_netlink_parms(): no params data found [ 1377.020232][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1377.031896][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1377.049886][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1377.059888][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1377.070587][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1377.085029][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1377.105335][T30217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.116402][T30217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.124302][T30217] bridge_slave_0: entered allmulticast mode [ 1377.132067][T30217] bridge_slave_0: entered promiscuous mode [ 1377.190034][T30217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.199553][T30217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.209969][T30217] bridge_slave_1: entered allmulticast mode [ 1377.219203][T30217] bridge_slave_1: entered promiscuous mode [ 1377.312019][T30217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1377.364822][T30217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1377.457638][T30217] team0: Port device team_slave_0 added [ 1377.512254][T30217] team0: Port device team_slave_1 added [ 1377.736325][T30217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1377.753010][T30217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1377.782868][T30217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1377.794139][T30219] Bluetooth: hci2: command tx timeout [ 1377.810881][T30217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1377.827109][T30217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1377.854537][T30217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1378.099820][T30254] chnl_net:caif_netlink_parms(): no params data found [ 1378.140394][T30217] hsr_slave_0: entered promiscuous mode [ 1378.148862][T30217] hsr_slave_1: entered promiscuous mode [ 1378.156000][T30217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1378.166225][T30217] Cannot create hsr debugfs directory [ 1378.447211][T30254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.454819][T30254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.462340][T30254] bridge_slave_0: entered allmulticast mode [ 1378.471386][T30254] bridge_slave_0: entered promiscuous mode [ 1378.566807][T30254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.574597][T30254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.583009][T30254] bridge_slave_1: entered allmulticast mode [ 1378.591103][T30254] bridge_slave_1: entered promiscuous mode [ 1378.756022][T30254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.816173][T30254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1378.950895][T30254] team0: Port device team_slave_0 added [ 1379.055849][ T59] [ 1379.058332][ T59] ====================================================== [ 1379.065637][ T59] WARNING: possible circular locking dependency detected [ 1379.073308][ T59] 6.6.102-syzkaller #0 Not tainted [ 1379.078635][ T59] ------------------------------------------------------ [ 1379.086220][ T59] kworker/u4:4/59 is trying to acquire lock: [ 1379.092606][ T59] ffff88802d240d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 1379.102866][ T59] [ 1379.102866][ T59] but task is already holding lock: [ 1379.110619][ T59] ffff88807dbc8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 1379.121784][ T59] [ 1379.121784][ T59] which lock already depends on the new lock. [ 1379.121784][ T59] [ 1379.133374][ T59] [ 1379.133374][ T59] the existing dependency chain (in reverse order) is: [ 1379.142772][ T59] [ 1379.142772][ T59] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 1379.151160][ T59] __mutex_lock+0x129/0xcc0 [ 1379.156504][ T59] ieee80211_open+0x144/0x200 [ 1379.161754][ T59] __dev_open+0x2bc/0x430 [ 1379.164307][T30219] Bluetooth: hci0: command tx timeout [ 1379.167124][ T59] dev_open+0xab/0x170 [ 1379.177679][ T59] team_add_slave+0xae7/0x2660 [ 1379.183505][ T59] do_setlink+0xe14/0x3fb0 [ 1379.188596][ T59] rtnl_newlink+0x175b/0x2020 [ 1379.194305][ T59] rtnetlink_rcv_msg+0x7c7/0xf10 [ 1379.200091][ T59] netlink_rcv_skb+0x216/0x480 [ 1379.205605][ T59] netlink_unicast+0x751/0x8d0 [ 1379.211122][ T59] netlink_sendmsg+0x8c1/0xbe0 [ 1379.216646][ T59] ____sys_sendmsg+0x5bf/0x950 [ 1379.222275][ T59] ___sys_sendmsg+0x220/0x290 [ 1379.227831][ T59] __se_sys_sendmsg+0x1a5/0x270 [ 1379.233440][ T59] do_syscall_64+0x55/0xb0 [ 1379.238811][ T59] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1379.245459][ T59] [ 1379.245459][ T59] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 1379.253957][ T59] __lock_acquire+0x2ddb/0x7c80 [ 1379.259377][ T59] lock_acquire+0x197/0x410 [ 1379.264732][ T59] __mutex_lock+0x129/0xcc0 [ 1379.270100][ T59] team_del_slave+0x32/0x1c0 [ 1379.275440][ T59] team_device_event+0x28d/0xa20 [ 1379.281616][ T59] notifier_call_chain+0x197/0x390 [ 1379.288134][ T59] unregister_netdevice_many_notify+0xf36/0x1810 [ 1379.295832][ T59] unregister_netdevice_queue+0x324/0x360 [ 1379.302935][ T59] _cfg80211_unregister_wdev+0x16b/0x580 [ 1379.309387][ T59] ieee80211_remove_interfaces+0x496/0x680 [ 1379.309815][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1379.316296][ T59] ieee80211_unregister_hw+0x5d/0x2a0 [ 1379.316335][ T59] mac80211_hwsim_del_radio+0x274/0x450 [ 1379.316354][ T59] hwsim_exit_net+0x585/0x640 [ 1379.316375][ T59] cleanup_net+0x6f4/0xb90 [ 1379.316395][ T59] process_scheduled_works+0xa45/0x15b0 [ 1379.316418][ T59] worker_thread+0xa55/0xfc0 [ 1379.316436][ T59] kthread+0x2fa/0x390 [ 1379.316451][ T59] ret_from_fork+0x48/0x80 [ 1379.316472][ T59] ret_from_fork_asm+0x11/0x20 [ 1379.316497][ T59] [ 1379.316497][ T59] other info that might help us debug this: [ 1379.316497][ T59] [ 1379.316504][ T59] Possible unsafe locking scenario: [ 1379.316504][ T59] [ 1379.316508][ T59] CPU0 CPU1 [ 1379.316514][ T59] ---- ---- [ 1379.316519][ T59] lock(&rdev->wiphy.mtx); [ 1379.316535][ T59] lock(team->team_lock_key#2); [ 1379.316555][ T59] lock(&rdev->wiphy.mtx); [ 1379.316569][ T59] lock(team->team_lock_key#2 [ 1379.326762][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1379.331182][ T59] ); [ 1379.331193][ T59] [ 1379.331193][ T59] *** DEADLOCK *** [ 1379.331193][ T59] [ 1379.338082][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1379.342902][ T59] 5 locks held by kworker/u4:4/59: [ 1379.342916][ T59] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0} [ 1379.349371][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1379.354643][ T59] , at: process_scheduled_works+0x957/0x15b0 [ 1379.354679][ T59] #1: ffffc900015a7d00 (net_cleanup_work [ 1379.361308][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1379.364667][ T59] ){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1379.364709][ T59] #2: ffffffff8dfaec50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 1379.364762][ T59] #3: ffffffff8dfbba48 ( [ 1379.370859][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1379.375879][ T59] rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 1379.375929][ T59] #4: ffff88807dbc8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 1379.547475][ T59] [ 1379.547475][ T59] stack backtrace: [ 1379.553939][ T59] CPU: 1 PID: 59 Comm: kworker/u4:4 Not tainted 6.6.102-syzkaller #0 [ 1379.562799][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1379.573257][ T59] Workqueue: netns cleanup_net [ 1379.579037][ T59] Call Trace: [ 1379.582457][ T59] [ 1379.585760][ T59] dump_stack_lvl+0x16c/0x230 [ 1379.590949][ T59] ? load_image+0x3b0/0x3b0 [ 1379.595590][ T59] ? show_regs_print_info+0x20/0x20 [ 1379.601271][ T59] ? print_circular_bug+0x12b/0x1a0 [ 1379.607660][ T59] check_noncircular+0x2bd/0x3c0 [ 1379.613293][ T59] ? print_deadlock_bug+0x5d0/0x5d0 [ 1379.618725][ T59] ? lockdep_lock+0xe0/0x220 [ 1379.623561][ T59] ? __lock_acquire+0x1334/0x7c80 [ 1379.628867][ T59] ? _find_first_zero_bit+0xd3/0x100 [ 1379.634212][ T59] __lock_acquire+0x2ddb/0x7c80 [ 1379.639645][ T59] ? verify_lock_unused+0x140/0x140 [ 1379.645097][ T59] ? verify_lock_unused+0x140/0x140 [ 1379.650845][ T59] lock_acquire+0x197/0x410 [ 1379.655547][ T59] ? team_del_slave+0x32/0x1c0 [ 1379.660464][ T59] ? __might_sleep+0xe0/0xe0 [ 1379.665575][ T59] ? read_lock_is_recursive+0x20/0x20 [ 1379.671340][ T59] __mutex_lock+0x129/0xcc0 [ 1379.675953][ T59] ? team_del_slave+0x32/0x1c0 [ 1379.681087][ T59] ? __lock_acquire+0x7c80/0x7c80 [ 1379.686770][ T59] ? rcu_is_watching+0x15/0xb0 [ 1379.691905][ T59] ? trace_contention_end+0x39/0xe0 [ 1379.697799][ T59] ? __mutex_lock+0x304/0xcc0 [ 1379.702617][ T59] ? team_del_slave+0x32/0x1c0 [ 1379.708047][ T59] ? mutex_lock_nested+0x20/0x20 [ 1379.713547][ T59] ? bond_netdev_event+0xe1/0xef0 [ 1379.718992][ T59] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1379.724946][ T59] ? bond_ipsec_offload_ok+0x410/0x410 [ 1379.730983][ T59] team_del_slave+0x32/0x1c0 [ 1379.736047][ T59] team_device_event+0x28d/0xa20 [ 1379.741092][ T59] notifier_call_chain+0x197/0x390 [ 1379.746894][ T59] unregister_netdevice_many_notify+0xf36/0x1810 [ 1379.753441][ T59] ? lock_chain_count+0x20/0x20 [ 1379.758603][ T59] ? unregister_netdevice_many+0x20/0x20 [ 1379.765243][ T59] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1379.771311][ T59] ? __lock_acquire+0x7c80/0x7c80 [ 1379.776828][ T59] unregister_netdevice_queue+0x324/0x360 [ 1379.782680][ T59] ? list_netdevice+0x730/0x730 [ 1379.787856][ T59] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1379.793871][ T59] _cfg80211_unregister_wdev+0x16b/0x580 [ 1379.800071][ T59] ieee80211_remove_interfaces+0x496/0x680 [ 1379.806178][ T59] ? ieee80211_do_stop+0x1db0/0x1db0 [ 1379.812025][ T59] ? rcu_is_watching+0x15/0xb0 [ 1379.817167][ T59] ieee80211_unregister_hw+0x5d/0x2a0 [ 1379.822571][ T59] mac80211_hwsim_del_radio+0x274/0x450 [ 1379.828154][ T59] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 1379.834259][ T59] hwsim_exit_net+0x585/0x640 [ 1379.839166][ T59] ? hwsim_init_net+0x90/0x90 [ 1379.844076][ T59] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1379.850420][ T59] cleanup_net+0x6f4/0xb90 [ 1379.855114][ T59] ? ops_free_list+0x3b0/0x3b0 [ 1379.861372][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 1379.867031][ T59] ? process_scheduled_works+0x957/0x15b0 [ 1379.873044][ T59] ? process_scheduled_works+0x957/0x15b0 [ 1379.879131][ T59] process_scheduled_works+0xa45/0x15b0 [ 1379.885570][ T59] ? assign_work+0x400/0x400 [ 1379.891204][ T59] ? assign_work+0x39e/0x400 [ 1379.896528][ T59] worker_thread+0xa55/0xfc0 [ 1379.901433][ T59] ? _raw_spin_unlock_irqrestore+0xae/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1379.907480][ T59] ? _raw_spin_unlock+0x40/0x40 [ 1379.912879][ T59] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1379.918915][ T59] kthread+0x2fa/0x390 [ 1379.923133][ T59] ? pr_cont_work+0x560/0x560 [ 1379.927855][ T59] ? kthread_blkcg+0xd0/0xd0 [ 1379.933107][ T59] ret_from_fork+0x48/0x80 [ 1379.937711][ T59] ? kthread_blkcg+0xd0/0xd0 [ 1379.942343][ T59] ret_from_fork_asm+0x11/0x20 [ 1379.947239][ T59] [ 1379.951293][ T5789] Bluetooth: hci2: command tx timeout [ 1380.081268][ T59] team0: Port device wlan1 removed [ 1380.128283][T30254] team0: Port device team_slave_1 added [ 1381.704288][ T59] veth0_macvtap: left promiscuous mode [ 1381.888915][ T59] team0 (unregistering): Port device veth1_macvtap removed [ 1381.940222][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1382.121053][ T59] team0 (unregistering): Port device veth0_to_bond removed [ 1383.934258][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.998550][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.058694][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.105734][ T59] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface [ 1384.116977][ T59] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.597641][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.631352][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.711518][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.827656][ T59] .`: (slave netdevsim0): Releasing backup interface [ 1384.836254][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.535640][ T59] hsr_slave_0: left promiscuous mode [ 1387.543269][ T59] hsr_slave_1: left promiscuous mode [ 1387.552034][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1387.561078][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1387.569768][ T59] bridge_slave_1: left allmulticast mode [ 1387.577704][ T59] bridge_slave_1: left promiscuous mode [ 1387.584753][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.594274][ T59] bridge_slave_0: left allmulticast mode [ 1387.601125][ T59] bridge_slave_0: left promiscuous mode [ 1387.607297][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.617374][ T59] bridge_slave_1: left allmulticast mode [ 1387.623986][ T59] bridge_slave_1: left promiscuous mode [ 1387.629973][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.639953][ T59] bridge_slave_0: left allmulticast mode [ 1387.645952][ T59] bridge_slave_0: left promiscuous mode [ 1387.651812][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.671140][ T59] bridge_slave_1: left allmulticast mode [ 1387.677365][ T59] bridge_slave_1: left promiscuous mode [ 1387.683491][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.694457][ T59] bridge_slave_0: left promiscuous mode [ 1387.700365][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.714962][ T59] hsr_slave_0: left promiscuous mode [ 1387.734268][ T59] hsr_slave_0: left promiscuous mode [ 1387.740648][ T59] bridge_slave_1: left allmulticast mode [ 1387.747898][ T59] bridge_slave_1: left promiscuous mode [ 1387.755456][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.766204][ T59] bridge_slave_0: left promiscuous mode [ 1387.772270][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.788502][ T59] veth0_macvtap: left promiscuous mode [ 1387.796028][ T59] veth1_vlan: left promiscuous mode [ 1387.802402][ T59] veth0_macvtap: left promiscuous mode [ 1387.811321][ T59] veth1_vlan: left promiscuous mode [ 1387.819150][ T59] veth1_vlan: left promiscuous mode [ 1388.090758][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1388.128579][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1388.169917][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.199773][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1388.282334][ T59] bond0 (unregistering): Released all slaves [ 1388.359046][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1388.371693][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1388.385760][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.400681][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1388.471778][ T59] bond0 (unregistering): Released all slaves [ 1388.785877][ T59] team0 (unregistering): Port device geneve1 removed [ 1388.829099][ T59] team0 (unregistering): Port device veth1_macvtap removed [ 1388.955718][ T59] team0 (unregistering): Port device 0A6±ÿ removed [ 1389.022535][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1389.037927][ T59] bond0 (unregistering): (slave 30): Releasing backup interface