last executing test programs: 2.778958209s ago: executing program 2 (id=15986): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 2.565310458s ago: executing program 2 (id=15989): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdba, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab0700040005"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.221370747s ago: executing program 0 (id=15996): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 1.944950637s ago: executing program 0 (id=15997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.944796267s ago: executing program 1 (id=15998): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) 1.944558276s ago: executing program 4 (id=16000): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f0000000380)={0x0, 0xee51828d43e8364b, 0x0, 0x0, 0x0, 0xffffffffffffff25}, 0x20) 1.860519086s ago: executing program 1 (id=16001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.860310486s ago: executing program 2 (id=16002): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb3b0000ce220000000004000000e3"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 1.813483256s ago: executing program 3 (id=16003): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) 1.810167016s ago: executing program 4 (id=16004): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='P'], 0x8) 1.578867445s ago: executing program 4 (id=16005): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="b564", 0x2}], 0x1}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="96f5", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/63, 0x3f}], 0x1}, 0x20) 1.563299655s ago: executing program 1 (id=16006): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.467803625s ago: executing program 0 (id=16007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'vxcan1\x00', @local}) 1.359554255s ago: executing program 1 (id=16008): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.085311064s ago: executing program 3 (id=16009): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 1.004833124s ago: executing program 0 (id=16010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 985.668363ms ago: executing program 3 (id=16011): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 944.443543ms ago: executing program 1 (id=16012): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdba, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab0700040005"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 814.832073ms ago: executing program 2 (id=16013): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 814.588733ms ago: executing program 3 (id=16014): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 757.916853ms ago: executing program 0 (id=16015): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='P'], 0x8) 610.676022ms ago: executing program 4 (id=16016): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 433.986642ms ago: executing program 2 (id=16017): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 433.811832ms ago: executing program 3 (id=16018): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 433.689662ms ago: executing program 4 (id=16019): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 432.984652ms ago: executing program 0 (id=16027): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdba, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab0700040005"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 432.593232ms ago: executing program 1 (id=16020): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) 323.191091ms ago: executing program 4 (id=16021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'vxcan1\x00', @local}) 88.32341ms ago: executing program 3 (id=16022): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 2 (id=16023): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): an invalid length. [ 411.749523][T18302] netlink: 'syz.0.6790': attribute type 29 has an invalid length. [ 411.783012][T18302] netlink: 'syz.0.6790': attribute type 29 has an invalid length. [ 411.829517][T18305] netlink: 'syz.0.6790': attribute type 29 has an invalid length. [ 412.227084][T18319] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6796'. [ 412.781289][T18336] netlink: 'syz.1.6806': attribute type 29 has an invalid length. [ 413.068270][T18350] validate_nla: 2 callbacks suppressed [ 413.068293][T18350] netlink: 'syz.0.6814': attribute type 17 has an invalid length. [ 413.152765][T18350] netlink: 'syz.0.6814': attribute type 16 has an invalid length. [ 413.193653][T18350] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6814'. [ 414.953942][T18411] netlink: 'syz.1.6843': attribute type 17 has an invalid length. [ 415.006588][T18411] netlink: 'syz.1.6843': attribute type 16 has an invalid length. [ 415.052646][T18411] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6843'. [ 416.067905][T18449] netlink: 'syz.3.6859': attribute type 17 has an invalid length. [ 416.092522][T18449] netlink: 'syz.3.6859': attribute type 16 has an invalid length. [ 416.102530][T18449] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6859'. [ 417.303768][T18487] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6879'. [ 418.326281][T18534] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6902'. [ 419.249964][T18560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6916'. [ 419.770172][T18587] sock: sock_set_timeout: `syz.4.6928' (pid 18587) tries to set negative timeout [ 420.257719][T18605] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6938'. [ 420.975550][T18619] netlink: 'syz.3.6945': attribute type 21 has an invalid length. [ 421.013320][T18619] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6945'. [ 421.053398][T18619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6945'. [ 421.246334][T18630] sock: sock_set_timeout: `syz.3.6948' (pid 18630) tries to set negative timeout [ 421.581667][T18651] netlink: 'syz.1.6959': attribute type 29 has an invalid length. [ 421.601192][T18650] netlink: 'syz.4.6958': attribute type 21 has an invalid length. [ 421.624850][T18651] netlink: 'syz.1.6959': attribute type 29 has an invalid length. [ 421.639528][T18654] netlink: 'syz.1.6959': attribute type 29 has an invalid length. [ 422.071414][T18676] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.6970'. [ 422.246547][T18685] netlink: 'syz.1.6975': attribute type 21 has an invalid length. [ 422.273110][T18687] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.6976'. [ 422.612434][T18705] netlink: 'syz.3.6984': attribute type 29 has an invalid length. [ 422.640197][T18705] netlink: 'syz.3.6984': attribute type 29 has an invalid length. [ 422.659828][T18705] netlink: 'syz.3.6984': attribute type 29 has an invalid length. [ 422.814927][T18715] netlink: 'syz.4.6987': attribute type 21 has an invalid length. [ 422.833040][T18715] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6987'. [ 422.853360][T18715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6987'. [ 423.120286][T18732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6997'. [ 423.233641][T18734] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.6998'. [ 424.200087][T18778] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.7020'. [ 425.079826][T18820] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.7036'. [ 428.048826][T18921] validate_nla: 5 callbacks suppressed [ 428.048846][T18921] netlink: 'syz.0.7088': attribute type 3 has an invalid length. [ 430.257306][T19001] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 430.745985][T19034] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7145'. [ 431.606240][T19079] netlink: 'syz.4.7167': attribute type 10 has an invalid length. [ 431.614363][T19079] netlink: 'syz.4.7167': attribute type 19 has an invalid length. [ 431.649889][T19079] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7167'. [ 431.723461][T19082] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 432.539396][T19120] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 433.379164][T19136] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7193'. [ 433.556165][T19145] netlink: 'syz.3.7198': attribute type 1 has an invalid length. [ 433.711177][T19153] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 434.469150][T19171] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7210'. [ 435.584367][T19184] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 435.610736][T19188] netlink: 'syz.1.7218': attribute type 10 has an invalid length. [ 435.619572][T19188] netlink: 'syz.1.7218': attribute type 19 has an invalid length. [ 435.628549][T19188] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7218'. [ 436.067851][T19210] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7225'. [ 436.240062][T19223] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7232'. [ 436.330872][T19225] netlink: 'syz.3.7233': attribute type 10 has an invalid length. [ 436.338937][T19225] netlink: 'syz.3.7233': attribute type 19 has an invalid length. [ 436.347546][T19225] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7233'. [ 436.567363][T19234] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.7237'. [ 437.850914][T19282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7263'. [ 439.196474][T19340] netlink: 'syz.3.7290': attribute type 2 has an invalid length. [ 439.698698][T19371] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7306'. [ 439.727494][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.733904][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.890295][T19382] netlink: 67 bytes leftover after parsing attributes in process `syz.2.7311'. [ 439.927952][T19382] IPv6: NLM_F_CREATE should be specified when creating new route [ 439.939725][T19387] syz.4.7314[19387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 439.941966][T19382] IPv6: Can't replace route, no match found [ 440.266073][T19403] netlink: 'syz.3.7320': attribute type 21 has an invalid length. [ 440.274392][T19403] netlink: 'syz.3.7320': attribute type 6 has an invalid length. [ 440.302991][T19403] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7320'. [ 440.338842][T19409] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7323'. [ 440.786465][T19435] netlink: 67 bytes leftover after parsing attributes in process `syz.0.7334'. [ 440.806995][T19435] IPv6: NLM_F_CREATE should be specified when creating new route [ 440.815827][T19435] IPv6: Can't replace route, no match found [ 441.309805][T19462] netlink: 'syz.4.7347': attribute type 21 has an invalid length. [ 441.334976][T19462] netlink: 'syz.4.7347': attribute type 6 has an invalid length. [ 441.363417][T19462] __nla_validate_parse: 1 callbacks suppressed [ 441.363442][T19462] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7347'. [ 441.662346][T19472] syz.1.7353[19472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.002188][T19480] netlink: 'syz.2.7357': attribute type 2 has an invalid length. [ 443.605779][T19494] netlink: 'syz.2.7362': attribute type 21 has an invalid length. [ 443.654761][T19494] netlink: 'syz.2.7362': attribute type 6 has an invalid length. [ 443.667298][T19494] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7362'. [ 447.475764][T19619] netlink: 'syz.3.7432': attribute type 21 has an invalid length. [ 448.483834][T19657] netlink: 'syz.1.7439': attribute type 21 has an invalid length. [ 460.489467][T19971] netlink: 'syz.3.7586': attribute type 3 has an invalid length. [ 460.536365][T19971] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7586'. [ 460.755937][T19985] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 460.824400][T19985] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 464.228609][T20102] netlink: 'syz.0.7650': attribute type 21 has an invalid length. [ 464.254969][T20102] netlink: 'syz.0.7650': attribute type 6 has an invalid length. [ 464.263204][T20102] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7650'. [ 465.915223][T20180] netlink: 'syz.2.7685': attribute type 21 has an invalid length. [ 465.923516][T20180] netlink: 'syz.2.7685': attribute type 6 has an invalid length. [ 465.931393][T20180] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7685'. [ 466.646183][T20182] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 466.670958][T20182] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 468.011285][T20228] netlink: 'syz.4.7711': attribute type 21 has an invalid length. [ 468.034793][T20228] netlink: 'syz.4.7711': attribute type 6 has an invalid length. [ 468.045782][T20228] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7711'. [ 468.274032][T20241] netlink: 'syz.0.7715': attribute type 22 has an invalid length. [ 468.294953][T20241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7715'. [ 468.401153][T20249] netlink: 'syz.4.7728': attribute type 25 has an invalid length. [ 468.434772][T20253] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7720'. [ 468.444897][T20249] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.7728'. [ 468.739331][T20267] netlink: 'syz.3.7726': attribute type 21 has an invalid length. [ 468.764810][T20267] netlink: 'syz.3.7726': attribute type 6 has an invalid length. [ 468.810008][T20267] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7726'. [ 469.189334][T20292] netlink: 'syz.1.7737': attribute type 25 has an invalid length. [ 469.214664][T20292] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.7737'. [ 469.828296][T20329] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7756'. [ 470.509106][T20362] netlink: 'syz.1.7771': attribute type 21 has an invalid length. [ 470.575401][T20362] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7771'. [ 470.948045][T20374] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.7777'. [ 471.053860][T20380] validate_nla: 1 callbacks suppressed [ 471.053881][T20380] netlink: 'syz.4.7782': attribute type 29 has an invalid length. [ 471.085175][T20380] netlink: 'syz.4.7782': attribute type 29 has an invalid length. [ 471.114005][T20382] netlink: 'syz.4.7782': attribute type 29 has an invalid length. [ 471.327221][T20394] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.7790'. [ 471.773238][T20420] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.7801'. [ 471.838916][T20426] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7805'. [ 472.113150][T20442] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.7820'. [ 472.503771][T20461] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.7818'. [ 472.562725][T20467] netlink: 'syz.1.7831': attribute type 29 has an invalid length. [ 472.591278][T20467] netlink: 'syz.1.7831': attribute type 29 has an invalid length. [ 472.622037][T20468] netlink: 'syz.1.7831': attribute type 29 has an invalid length. [ 472.753528][T20473] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.7835'. [ 472.910716][T20485] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7826'. [ 473.415028][T20508] netlink: 'syz.2.7839': attribute type 29 has an invalid length. [ 473.461359][T20508] netlink: 'syz.2.7839': attribute type 29 has an invalid length. [ 473.515928][T20511] netlink: 'syz.2.7839': attribute type 29 has an invalid length. [ 474.248761][T20550] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.7870'. [ 474.483499][T20560] netlink: 611 bytes leftover after parsing attributes in process `syz.1.7863'. [ 476.619961][T20662] __nla_validate_parse: 1 callbacks suppressed [ 476.619986][T20662] netlink: 611 bytes leftover after parsing attributes in process `syz.4.7912'. [ 477.390474][T20690] netlink: 611 bytes leftover after parsing attributes in process `syz.2.7927'. [ 478.418945][T20730] netlink: 'syz.1.7946': attribute type 3 has an invalid length. [ 479.712579][T20769] netlink: 'syz.3.7964': attribute type 2 has an invalid length. [ 479.744685][T20769] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.7964'. [ 482.397961][T20855] netlink: 'syz.0.8007': attribute type 2 has an invalid length. [ 482.424639][T20855] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.8007'. [ 482.555467][T20862] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8009'. [ 483.636324][T20904] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8025'. [ 484.077166][T20924] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8040'. [ 484.092744][T20923] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.8037'. [ 485.044758][T20967] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.8057'. [ 485.320035][T20979] netlink: 'syz.3.8064': attribute type 3 has an invalid length. [ 485.335458][T20982] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.8072'. [ 485.345149][T20979] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8064'. [ 485.994878][T21007] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.8076'. [ 486.096423][T21009] netlink: 'syz.4.8080': attribute type 3 has an invalid length. [ 486.120735][T21009] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.8080'. [ 487.748209][T21096] netlink: 'syz.3.8115': attribute type 3 has an invalid length. [ 487.756500][T21096] __nla_validate_parse: 2 callbacks suppressed [ 487.756518][T21096] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.8115'. [ 488.045147][T21102] netlink: 'syz.0.8119': attribute type 3 has an invalid length. [ 488.082067][T21102] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8119'. [ 488.542812][T21122] netlink: 'syz.2.8129': attribute type 3 has an invalid length. [ 488.552197][T21122] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.8129'. [ 491.972592][T21269] netlink: 'syz.4.8197': attribute type 4 has an invalid length. [ 491.996223][T21269] netlink: 'syz.4.8197': attribute type 1 has an invalid length. [ 492.008961][T21269] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.8197'. [ 492.239050][T21284] netlink: 763 bytes leftover after parsing attributes in process `syz.2.8205'. [ 492.271824][T21288] netlink: 'syz.0.8206': attribute type 40 has an invalid length. [ 492.296902][T21288] netlink: 'syz.0.8206': attribute type 40 has an invalid length. [ 493.107378][T21328] netlink: 'syz.0.8227': attribute type 4 has an invalid length. [ 493.123399][T21328] netlink: 'syz.0.8227': attribute type 1 has an invalid length. [ 493.154726][T21328] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.8227'. [ 493.572590][T21354] netlink: 'syz.2.8235': attribute type 40 has an invalid length. [ 493.653708][T21354] device team0 left promiscuous mode [ 493.675337][T21354] device team_slave_0 left promiscuous mode [ 493.722527][T21354] device team_slave_1 left promiscuous mode [ 493.752044][T21354] device geneve0 left promiscuous mode [ 493.794415][T21354] device syz_tun left promiscuous mode [ 493.839804][T21357] netlink: 'syz.2.8235': attribute type 40 has an invalid length. [ 494.534284][T21391] netlink: 'syz.1.8255': attribute type 40 has an invalid length. [ 494.588973][T21391] device team0 left promiscuous mode [ 494.594455][T21391] device team_slave_1 left promiscuous mode [ 494.605554][T21391] device geneve1 left promiscuous mode [ 494.615082][T21391] device wlan1 left promiscuous mode [ 494.657616][T21392] netlink: 'syz.1.8255': attribute type 40 has an invalid length. [ 496.328676][T21452] netlink: 'syz.0.8279': attribute type 11 has an invalid length. [ 496.370965][T21452] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8279'. [ 496.432490][T21448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.942672][T21483] netlink: 'syz.4.8301': attribute type 11 has an invalid length. [ 496.971624][T21483] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8301'. [ 496.990053][T21481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.327055][T21501] netlink: 131088 bytes leftover after parsing attributes in process `syz.1.8318'. [ 497.380452][T21501] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 497.405788][T21501] CPU: 0 PID: 21501 Comm: syz.1.8318 Not tainted 6.1.126-syzkaller #0 [ 497.414029][T21501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 497.424139][T21501] Call Trace: [ 497.427463][T21501] [ 497.430441][T21501] dump_stack_lvl+0x1e3/0x2cb [ 497.435190][T21501] ? nf_tcp_handle_invalid+0x642/0x642 [ 497.440711][T21501] ? panic+0x764/0x764 [ 497.444877][T21501] sysfs_warn_dup+0x8a/0xa0 [ 497.449428][T21501] sysfs_do_create_link_sd+0xbe/0x100 [ 497.454853][T21501] device_add+0x7d4/0xfd0 [ 497.459268][T21501] wiphy_register+0x1e44/0x2cc0 [ 497.464214][T21501] ? cfg80211_event_work+0x40/0x40 [ 497.469388][T21501] ? minstrel_ht_alloc+0x7cf/0x940 [ 497.474574][T21501] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 497.480726][T21501] ieee80211_register_hw+0x31bd/0x3f10 [ 497.486262][T21501] ? ieee80211_register_hw+0x1131/0x3f10 [ 497.491946][T21501] ? ieee80211_register_hw+0x1131/0x3f10 [ 497.497643][T21501] ? ieee80211_tasklet_handler+0x20/0x20 [ 497.503337][T21501] ? __debug_object_init+0xe9/0x450 [ 497.508617][T21501] ? memset+0x1f/0x40 [ 497.512654][T21501] ? __hrtimer_init+0x181/0x260 [ 497.517573][T21501] mac80211_hwsim_new_radio+0x22d9/0x4060 [ 497.523411][T21501] hwsim_new_radio_nl+0xc54/0x1190 [ 497.528601][T21501] ? hwsim_tx_info_frame_received_nl+0x10a0/0x10a0 [ 497.535186][T21501] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 497.541600][T21501] genl_rcv_msg+0xc1a/0xf70 [ 497.546177][T21501] ? genl_bind+0x400/0x400 [ 497.550690][T21501] ? read_lock_is_recursive+0x10/0x10 [ 497.556151][T21501] ? ref_tracker_free+0x638/0x7d0 [ 497.561235][T21501] ? hwsim_tx_info_frame_received_nl+0x10a0/0x10a0 [ 497.567806][T21501] ? refcount_inc+0x80/0x80 [ 497.572370][T21501] ? __kasan_kmalloc_large+0x92/0xd0 [ 497.577745][T21501] netlink_rcv_skb+0x1cd/0x410 [ 497.582579][T21501] ? genl_bind+0x400/0x400 [ 497.587060][T21501] ? netlink_ack+0x1290/0x1290 [ 497.591929][T21501] genl_rcv+0x24/0x40 [ 497.595962][T21501] netlink_unicast+0x7d8/0x970 [ 497.600813][T21501] ? netlink_detachskb+0x90/0x90 [ 497.605808][T21501] ? find_vmap_area+0xf3/0x100 [ 497.610675][T21501] ? __phys_addr_symbol+0x2b/0x70 [ 497.615756][T21501] ? __check_object_size+0x4dd/0xa30 [ 497.621097][T21501] ? bpf_lsm_netlink_send+0x5/0x10 [ 497.626278][T21501] netlink_sendmsg+0xa26/0xd60 [ 497.631145][T21501] ? netlink_getsockopt+0x580/0x580 [ 497.636419][T21501] ? aa_sock_msg_perm+0x91/0x150 [ 497.641420][T21501] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 497.646760][T21501] ? security_socket_sendmsg+0x7d/0xa0 [ 497.652273][T21501] ? netlink_getsockopt+0x580/0x580 [ 497.657538][T21501] ____sys_sendmsg+0x5a5/0x8f0 [ 497.662389][T21501] ? __sys_sendmsg_sock+0x30/0x30 [ 497.667538][T21501] __sys_sendmsg+0x2a9/0x390 [ 497.672197][T21501] ? ____sys_sendmsg+0x8f0/0x8f0 [ 497.677275][T21501] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 497.683384][T21501] ? syscall_enter_from_user_mode+0x2e/0x230 [ 497.689684][T21501] ? lockdep_hardirqs_on+0x94/0x130 [ 497.695044][T21501] ? syscall_enter_from_user_mode+0x2e/0x230 [ 497.701094][T21501] do_syscall_64+0x3b/0xb0 [ 497.705575][T21501] ? clear_bhb_loop+0x45/0xa0 [ 497.710310][T21501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.716276][T21501] RIP: 0033:0x7f5631d85d29 [ 497.720750][T21501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.740498][T21501] RSP: 002b:00007f5632cac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.748979][T21501] RAX: ffffffffffffffda RBX: 00007f5631f75fa0 RCX: 00007f5631d85d29 [ 497.757015][T21501] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 497.765062][T21501] RBP: 00007f5631e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 497.773608][T21501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.781638][T21501] R13: 0000000000000000 R14: 00007f5631f75fa0 R15: 00007ffe7d1704d8 [ 497.789711][T21501] [ 497.823060][T21517] netlink: 'syz.3.8315': attribute type 11 has an invalid length. [ 497.855022][T21517] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8315'. [ 497.878206][T21516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.658657][T21561] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.8334'. [ 498.670238][T21561] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 498.681139][T21561] CPU: 1 PID: 21561 Comm: syz.0.8334 Not tainted 6.1.126-syzkaller #0 [ 498.681336][T21562] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.8336'. [ 498.689343][T21561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 498.689364][T21561] Call Trace: [ 498.689375][T21561] [ 498.689387][T21561] dump_stack_lvl+0x1e3/0x2cb [ 498.689439][T21561] ? nf_tcp_handle_invalid+0x642/0x642 [ 498.689479][T21561] ? panic+0x764/0x764 [ 498.689537][T21561] sysfs_warn_dup+0x8a/0xa0 [ 498.733706][T21561] sysfs_do_create_link_sd+0xbe/0x100 [ 498.739200][T21561] device_add+0x7d4/0xfd0 [ 498.743577][T21561] wiphy_register+0x1e44/0x2cc0 [ 498.748474][T21561] ? cfg80211_event_work+0x40/0x40 [ 498.753608][T21561] ? minstrel_ht_alloc+0x7cf/0x940 [ 498.758755][T21561] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 498.764866][T21561] ieee80211_register_hw+0x31bd/0x3f10 [ 498.770376][T21561] ? ieee80211_register_hw+0x1131/0x3f10 [ 498.776025][T21561] ? ieee80211_register_hw+0x1131/0x3f10 [ 498.781692][T21561] ? ieee80211_tasklet_handler+0x20/0x20 [ 498.787351][T21561] ? __debug_object_init+0xe9/0x450 [ 498.792703][T21561] ? memset+0x1f/0x40 [ 498.796732][T21561] ? __hrtimer_init+0x181/0x260 [ 498.801706][T21561] mac80211_hwsim_new_radio+0x22d9/0x4060 [ 498.807489][T21561] hwsim_new_radio_nl+0xc54/0x1190 [ 498.812646][T21561] ? hwsim_tx_info_frame_received_nl+0x10a0/0x10a0 [ 498.819198][T21561] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 498.825564][T21561] genl_rcv_msg+0xc1a/0xf70 [ 498.830109][T21561] ? genl_bind+0x400/0x400 [ 498.834581][T21561] ? read_lock_is_recursive+0x10/0x10 [ 498.839998][T21561] ? ref_tracker_free+0x638/0x7d0 [ 498.845046][T21561] ? hwsim_tx_info_frame_received_nl+0x10a0/0x10a0 [ 498.851577][T21561] ? refcount_inc+0x80/0x80 [ 498.856093][T21561] ? __kasan_kmalloc_large+0x92/0xd0 [ 498.861414][T21561] netlink_rcv_skb+0x1cd/0x410 [ 498.866211][T21561] ? genl_bind+0x400/0x400 [ 498.870645][T21561] ? netlink_ack+0x1290/0x1290 [ 498.875462][T21561] genl_rcv+0x24/0x40 [ 498.879460][T21561] netlink_unicast+0x7d8/0x970 [ 498.884264][T21561] ? netlink_detachskb+0x90/0x90 [ 498.889223][T21561] ? find_vmap_area+0xf3/0x100 [ 498.894021][T21561] ? __phys_addr_symbol+0x2b/0x70 [ 498.899071][T21561] ? __check_object_size+0x4dd/0xa30 [ 498.904376][T21561] ? bpf_lsm_netlink_send+0x5/0x10 [ 498.909521][T21561] netlink_sendmsg+0xa26/0xd60 [ 498.914336][T21561] ? netlink_getsockopt+0x580/0x580 [ 498.920033][T21561] ? aa_sock_msg_perm+0x91/0x150 [ 498.925006][T21561] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 498.930314][T21561] ? security_socket_sendmsg+0x7d/0xa0 [ 498.935793][T21561] ? netlink_getsockopt+0x580/0x580 [ 498.941020][T21561] ____sys_sendmsg+0x5a5/0x8f0 [ 498.945827][T21561] ? __sys_sendmsg_sock+0x30/0x30 [ 498.950903][T21561] __sys_sendmsg+0x2a9/0x390 [ 498.955527][T21561] ? ____sys_sendmsg+0x8f0/0x8f0 [ 498.960544][T21561] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 498.966573][T21561] ? syscall_enter_from_user_mode+0x2e/0x230 [ 498.972572][T21561] ? lockdep_hardirqs_on+0x94/0x130 [ 498.977791][T21561] ? syscall_enter_from_user_mode+0x2e/0x230 [ 498.983797][T21561] do_syscall_64+0x3b/0xb0 [ 498.988240][T21561] ? clear_bhb_loop+0x45/0xa0 [ 498.992943][T21561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.998872][T21561] RIP: 0033:0x7f9a13385d29 [ 499.003303][T21561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.022929][T21561] RSP: 002b:00007f9a14100038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.031369][T21561] RAX: ffffffffffffffda RBX: 00007f9a13575fa0 RCX: 00007f9a13385d29 [ 499.039357][T21561] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 499.047346][T21561] RBP: 00007f9a13401b08 R08: 0000000000000000 R09: 0000000000000000 [ 499.055329][T21561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.063313][T21561] R13: 0000000000000000 R14: 00007f9a13575fa0 R15: 00007fff54fc53b8 [ 499.071330][T21561] [ 499.076830][T21562] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.8336'. [ 499.106643][T21558] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.8336'. [ 499.448480][T21573] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.8342'. [ 499.478529][T21577] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.8344'. [ 499.648821][T21581] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.8348'. [ 500.140286][T21610] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.8357'. [ 500.175783][T21614] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.8360'. [ 500.910633][T21644] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.8376'. [ 501.169029][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.175508][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.569543][T21677] validate_nla: 3 callbacks suppressed [ 501.569566][T21677] netlink: 'syz.4.8393': attribute type 29 has an invalid length. [ 501.608011][T21677] netlink: 'syz.4.8393': attribute type 29 has an invalid length. [ 501.645270][T21681] netlink: 'syz.4.8393': attribute type 29 has an invalid length. [ 502.727762][T21729] netlink: 'syz.3.8416': attribute type 29 has an invalid length. [ 502.892993][T21729] netlink: 'syz.3.8416': attribute type 29 has an invalid length. [ 502.912973][T21730] netlink: 'syz.3.8416': attribute type 29 has an invalid length. [ 503.497733][T21760] netlink: 'syz.2.8429': attribute type 29 has an invalid length. [ 503.525449][T21760] netlink: 'syz.2.8429': attribute type 29 has an invalid length. [ 503.551307][T21768] netlink: 'syz.0.8430': attribute type 29 has an invalid length. [ 503.559936][T21769] netlink: 'syz.2.8429': attribute type 29 has an invalid length. [ 504.162851][T21793] __nla_validate_parse: 11 callbacks suppressed [ 504.162871][T21793] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.8447'. [ 505.473529][T21843] netlink: 22 bytes leftover after parsing attributes in process `syz.3.8481'. [ 505.529306][T21843] openvswitch: netlink: Flow key attr not present in new flow. [ 506.576546][T21886] validate_nla: 10 callbacks suppressed [ 506.576571][T21886] netlink: 'syz.1.8491': attribute type 46 has an invalid length. [ 507.001047][T21894] netlink: 'syz.1.8494': attribute type 3 has an invalid length. [ 507.039672][T21894] netlink: 'syz.1.8494': attribute type 8 has an invalid length. [ 507.067453][T21894] netlink: 197344 bytes leftover after parsing attributes in process `syz.1.8494'. [ 507.788674][T21917] netlink: 'syz.3.8505': attribute type 46 has an invalid length. [ 508.712298][T21962] netlink: 'syz.0.8527': attribute type 3 has an invalid length. [ 508.721013][T21962] netlink: 'syz.0.8527': attribute type 8 has an invalid length. [ 508.730224][T21962] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.8527'. [ 508.890805][T21968] netlink: 'syz.1.8530': attribute type 9 has an invalid length. [ 508.903829][T21968] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.8530'. [ 509.342254][T21986] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.8538'. [ 510.318201][T22014] netlink: 'syz.3.8551': attribute type 9 has an invalid length. [ 510.339794][T22014] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.8551'. [ 510.944790][T22037] netlink: 'syz.3.8563': attribute type 15 has an invalid length. [ 510.957563][T22037] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.8563'. [ 511.393327][T22061] netlink: 'syz.0.8575': attribute type 15 has an invalid length. [ 511.419086][T22061] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.8575'. [ 511.968534][T22092] netlink: 'syz.3.8590': attribute type 13 has an invalid length. [ 511.994872][T22092] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8590'. [ 512.016824][T22092] erspan0: refused to change device tx_queue_len [ 512.024303][T22092] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 512.077024][T22094] netlink: 'syz.1.8591': attribute type 15 has an invalid length. [ 512.085098][T22094] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.8591'. [ 512.220708][T22100] netlink: 'syz.1.8602': attribute type 9 has an invalid length. [ 512.236771][T22100] netlink: 399 bytes leftover after parsing attributes in process `syz.1.8602'. [ 512.972777][T22139] netlink: 'syz.3.8610': attribute type 3 has an invalid length. [ 513.014649][T22139] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8610'. [ 513.356995][T22157] netlink: 'syz.3.8631': attribute type 9 has an invalid length. [ 513.378324][T22157] netlink: 399 bytes leftover after parsing attributes in process `syz.3.8631'. [ 513.381889][T22159] netlink: 'syz.0.8622': attribute type 13 has an invalid length. [ 513.424191][T22159] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8622'. [ 513.466311][T22159] erspan0: refused to change device tx_queue_len [ 513.473210][T22159] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 514.202992][T22202] netlink: 'syz.1.8643': attribute type 13 has an invalid length. [ 514.242250][T22202] erspan0: refused to change device tx_queue_len [ 514.256416][T22202] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 514.655211][T22228] netlink: 'syz.0.8654': attribute type 3 has an invalid length. [ 514.673749][T22228] __nla_validate_parse: 1 callbacks suppressed [ 514.673770][T22228] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8654'. [ 514.830650][T22239] netlink: 'syz.2.8669': attribute type 3 has an invalid length. [ 514.854701][T22239] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8669'. [ 521.984930][T22483] netlink: 'syz.0.8773': attribute type 10 has an invalid length. [ 522.034659][T22483] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8773'. [ 522.043845][T22483] device team0 entered promiscuous mode [ 522.141410][T22483] device team_slave_1 entered promiscuous mode [ 522.161073][T22483] device geneve1 entered promiscuous mode [ 522.189104][T22483] device geneve0 entered promiscuous mode [ 522.217146][T22483] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.235182][T22483] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 525.278740][T22595] netlink: 'syz.1.8828': attribute type 10 has an invalid length. [ 525.295191][T22595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8828'. [ 525.313637][T22595] device team0 entered promiscuous mode [ 525.325553][T22595] device team_slave_1 entered promiscuous mode [ 525.332282][T22595] device geneve1 entered promiscuous mode [ 525.338940][T22595] device wlan1 entered promiscuous mode [ 525.349784][T22595] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.360435][T22595] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 526.806002][T22642] netlink: 'syz.2.8849': attribute type 29 has an invalid length. [ 526.820194][T22642] netlink: 'syz.2.8849': attribute type 29 has an invalid length. [ 526.840275][T22642] netlink: 'syz.2.8849': attribute type 29 has an invalid length. [ 527.511391][T22657] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8857'. [ 528.332771][T22688] netlink: 'syz.1.8865': attribute type 29 has an invalid length. [ 528.362607][T22688] netlink: 'syz.1.8865': attribute type 29 has an invalid length. [ 528.425550][T22691] netlink: 'syz.1.8865': attribute type 29 has an invalid length. [ 528.506767][T22693] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8870'. [ 528.748224][T22699] netlink: 'syz.4.8875': attribute type 10 has an invalid length. [ 528.774722][T22699] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8875'. [ 528.804405][T22699] device team0 entered promiscuous mode [ 528.824735][T22699] device team_slave_0 entered promiscuous mode [ 528.835892][T22699] device team_slave_1 entered promiscuous mode [ 528.864891][T22699] device syz_tun entered promiscuous mode [ 528.876633][T22699] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.902545][T22699] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 529.507572][T22720] netlink: 'syz.0.8885': attribute type 29 has an invalid length. [ 529.554961][T22720] netlink: 'syz.0.8885': attribute type 29 has an invalid length. [ 529.571351][T22723] netlink: 'syz.0.8885': attribute type 29 has an invalid length. [ 529.668707][T22728] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.8887'. [ 530.196603][T22738] netlink: 'syz.3.8894': attribute type 10 has an invalid length. [ 530.244718][T22738] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8894'. [ 530.295553][T22738] device team0 entered promiscuous mode [ 530.318172][T22738] device team_slave_0 entered promiscuous mode [ 530.318268][T22740] netlink: 'syz.1.8904': attribute type 3 has an invalid length. [ 530.343852][T22738] device team_slave_1 entered promiscuous mode [ 530.374348][T22738] device geneve0 entered promiscuous mode [ 530.393503][T22738] device wlan1 entered promiscuous mode [ 530.410995][T22740] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8904'. [ 530.431953][T22738] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.453208][T22738] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 531.413639][T22761] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8905'. [ 532.865256][T22804] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8926'. [ 534.168669][T22840] netlink: 'syz.4.8951': attribute type 3 has an invalid length. [ 534.185051][T22840] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8951'. [ 536.266623][T22872] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8955'. [ 536.491511][T22876] netlink: 'syz.3.8957': attribute type 3 has an invalid length. [ 536.584654][T22876] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8957'. [ 538.931044][T22919] netlink: 'syz.0.8988': attribute type 29 has an invalid length. [ 538.941126][T22919] netlink: 'syz.0.8988': attribute type 29 has an invalid length. [ 538.952576][T22919] netlink: 'syz.0.8988': attribute type 29 has an invalid length. [ 539.986974][T22929] netlink: 65023 bytes leftover after parsing attributes in process `syz.3.8979'. [ 541.431518][T22952] netlink: 'syz.0.8993': attribute type 8 has an invalid length. [ 541.444762][T22952] netlink: 'syz.0.8993': attribute type 1 has an invalid length. [ 541.462824][T22952] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.8993'. [ 542.559033][T22987] netlink: 65023 bytes leftover after parsing attributes in process `syz.4.9011'. [ 542.638748][T22991] netlink: 'syz.3.9013': attribute type 8 has an invalid length. [ 542.656979][T22991] netlink: 'syz.3.9013': attribute type 1 has an invalid length. [ 542.684881][T22991] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.9013'. [ 543.267043][T23017] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.9026'. [ 543.286223][T23017] openvswitch: netlink: Key type 386 is out of range max 32 [ 543.800531][T23045] netlink: 'syz.4.9039': attribute type 29 has an invalid length. [ 543.829431][T23045] netlink: 'syz.4.9039': attribute type 29 has an invalid length. [ 543.852129][T23045] netlink: 'syz.4.9039': attribute type 29 has an invalid length. [ 544.441398][T23079] netlink: 'syz.1.9055': attribute type 29 has an invalid length. [ 544.455363][T23079] netlink: 'syz.1.9055': attribute type 29 has an invalid length. [ 544.480132][T23079] netlink: 'syz.1.9055': attribute type 29 has an invalid length. [ 546.205157][T23166] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.9094'. [ 546.225000][T23166] openvswitch: netlink: Key type 386 is out of range max 32 [ 547.439564][T23240] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.9129'. [ 547.811696][T23259] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9137'. [ 547.856808][T23259] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9137'. [ 547.870769][T23259] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9137'. [ 549.116022][T23305] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.9160'. [ 549.410324][T23323] validate_nla: 3 callbacks suppressed [ 549.410348][T23323] netlink: 'syz.2.9168': attribute type 17 has an invalid length. [ 549.424570][T23323] netlink: 'syz.2.9168': attribute type 16 has an invalid length. [ 549.432440][T23323] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9168'. [ 549.652533][T23331] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9172'. [ 549.664677][T23331] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9172'. [ 549.682909][T23331] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9172'. [ 550.467402][T23355] netlink: 'syz.0.9180': attribute type 17 has an invalid length. [ 550.504907][T23355] netlink: 'syz.0.9180': attribute type 16 has an invalid length. [ 551.308723][T23392] netlink: 'syz.3.9198': attribute type 17 has an invalid length. [ 551.325697][T23392] netlink: 'syz.3.9198': attribute type 16 has an invalid length. [ 551.340557][T23392] __nla_validate_parse: 2 callbacks suppressed [ 551.340579][T23392] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9198'. [ 551.370173][T23397] netlink: 166 bytes leftover after parsing attributes in process `syz.2.9202'. [ 551.782954][T23420] netlink: 'syz.4.9213': attribute type 33 has an invalid length. [ 551.795758][T23420] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9213'. [ 552.052985][T23435] netlink: 166 bytes leftover after parsing attributes in process `syz.3.9217'. [ 553.509333][T23498] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.9249'. [ 553.576828][T23504] netlink: 2530 bytes leftover after parsing attributes in process `syz.4.9253'. [ 554.650631][T23558] netlink: 'syz.0.9281': attribute type 10 has an invalid length. [ 555.043139][T23581] netlink: 'syz.1.9290': attribute type 46 has an invalid length. [ 555.254832][T23593] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.9305'. [ 555.599016][T23614] netlink: 2530 bytes leftover after parsing attributes in process `syz.0.9304'. [ 556.698790][T23642] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.9314'. [ 556.965660][T23654] netlink: 2530 bytes leftover after parsing attributes in process `syz.3.9318'. [ 557.038088][T23656] netlink: 'syz.2.9322': attribute type 2 has an invalid length. [ 557.055318][T23656] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9322'. [ 557.470750][T23672] netlink: 'syz.2.9343': attribute type 10 has an invalid length. [ 557.665391][T23684] netlink: 'syz.0.9338': attribute type 46 has an invalid length. [ 558.652275][T23723] netlink: 'syz.4.9356': attribute type 46 has an invalid length. [ 559.085407][T23747] netlink: 'syz.2.9369': attribute type 7 has an invalid length. [ 559.276271][T23757] netlink: 'syz.2.9372': attribute type 46 has an invalid length. [ 559.530717][T23767] netlink: 'syz.3.9377': attribute type 21 has an invalid length. [ 559.539012][T23767] netlink: 176 bytes leftover after parsing attributes in process `syz.3.9377'. [ 559.573202][T23773] netlink: 'syz.1.9380': attribute type 2 has an invalid length. [ 559.589378][T23773] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9380'. [ 561.042751][T23842] netlink: 'syz.4.9414': attribute type 21 has an invalid length. [ 561.052536][T23842] netlink: 176 bytes leftover after parsing attributes in process `syz.4.9414'. [ 561.235743][T23848] netlink: 'syz.1.9425': attribute type 7 has an invalid length. [ 561.530043][T23867] netlink: 'syz.1.9424': attribute type 29 has an invalid length. [ 561.542794][T23867] netlink: 'syz.1.9424': attribute type 29 has an invalid length. [ 561.562471][T23867] netlink: 'syz.1.9424': attribute type 29 has an invalid length. [ 561.732455][T23882] netlink: 'syz.2.9429': attribute type 21 has an invalid length. [ 561.740652][T23882] netlink: 176 bytes leftover after parsing attributes in process `syz.2.9429'. [ 561.916019][T23888] netlink: 'syz.0.9432': attribute type 39 has an invalid length. [ 562.385960][T23912] netlink: 'syz.1.9446': attribute type 21 has an invalid length. [ 562.393960][T23912] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9446'. [ 562.588814][T23922] netlink: 'syz.0.9452': attribute type 29 has an invalid length. [ 562.610455][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.617002][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.626583][T23922] netlink: 'syz.0.9452': attribute type 29 has an invalid length. [ 564.596478][T24011] netlink: 3748 bytes leftover after parsing attributes in process `syz.1.9503'. [ 565.410184][T24041] netlink: 3748 bytes leftover after parsing attributes in process `syz.4.9508'. [ 565.906650][T24062] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9517'. [ 566.013314][T24070] netlink: 3748 bytes leftover after parsing attributes in process `syz.3.9523'. [ 566.686612][T24090] syz.0.9532 (24090) used obsolete PPPIOCDETACH ioctl [ 566.797719][T24096] validate_nla: 5 callbacks suppressed [ 566.797741][T24096] netlink: 'syz.2.9535': attribute type 3 has an invalid length. [ 566.835462][T24096] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9535'. [ 569.093238][T24185] netlink: 'syz.3.9575': attribute type 29 has an invalid length. [ 569.113475][T24185] netlink: 'syz.3.9575': attribute type 29 has an invalid length. [ 569.126113][T24185] netlink: 'syz.3.9575': attribute type 29 has an invalid length. [ 569.263867][T24193] netlink: 'syz.3.9580': attribute type 3 has an invalid length. [ 569.282247][T24193] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9580'. [ 569.430501][T24199] netlink: 'syz.4.9584': attribute type 29 has an invalid length. [ 569.449900][T24199] netlink: 'syz.4.9584': attribute type 29 has an invalid length. [ 569.476040][T24199] netlink: 'syz.4.9584': attribute type 29 has an invalid length. [ 569.810911][T24215] netlink: 'syz.0.9591': attribute type 29 has an invalid length. [ 569.834132][T24215] netlink: 'syz.0.9591': attribute type 29 has an invalid length. [ 570.923981][T24264] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.9613'. [ 571.755328][T24295] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.9630'. [ 571.820952][T24299] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.9631'. [ 572.833153][T24334] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.9647'. [ 573.594818][T24359] validate_nla: 10 callbacks suppressed [ 573.594843][T24359] netlink: 'syz.4.9659': attribute type 21 has an invalid length. [ 573.609389][T24359] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9659'. [ 574.230522][T24388] netlink: 'syz.2.9674': attribute type 21 has an invalid length. [ 574.247778][T24388] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9674'. [ 577.880384][T24492] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.9725'. [ 577.921759][T24492] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.9725'. [ 578.570807][T24523] netlink: 'syz.0.9738': attribute type 1 has an invalid length. [ 578.581896][T24523] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.9738'. [ 579.946976][T24576] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.9762'. [ 579.959633][T24576] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.9762'. [ 581.152199][T24605] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.9777'. [ 581.167636][T24605] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.9777'. [ 581.483307][T24622] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9784'. [ 584.070562][T24725] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9834'. [ 585.976003][T24761] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9850'. [ 587.601074][T24825] netlink: 'syz.2.9883': attribute type 2 has an invalid length. [ 587.623974][T24825] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.9883'. [ 588.510175][T24860] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9902'. [ 588.931597][T24878] netlink: 'syz.2.9920': attribute type 12 has an invalid length. [ 588.939814][T24878] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9920'. [ 591.027855][T24960] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.9949'. [ 591.485975][T24971] netlink: 'syz.3.9954': attribute type 2 has an invalid length. [ 591.510585][T24971] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.9954'. [ 591.882584][T24979] netlink: 'syz.4.9958': attribute type 12 has an invalid length. [ 591.922401][T24979] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9958'. [ 592.622054][T25008] netlink: 'syz.3.9971': attribute type 12 has an invalid length. [ 592.630169][T25008] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9971'. [ 593.752061][T25061] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.9996'. [ 595.059925][T25127] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.10030'. [ 595.668106][T25155] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.10045'. [ 596.337921][T25185] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.10070'. [ 596.937259][T25217] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.10076'. [ 597.300126][T25240] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.10087'. [ 597.426527][T25244] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.10100'. [ 597.998249][T25278] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.10106'. [ 598.831130][T25327] netlink: 'syz.4.10127': attribute type 29 has an invalid length. [ 598.839586][T25327] netlink: 'syz.4.10127': attribute type 29 has an invalid length. [ 598.862250][T25327] netlink: 'syz.4.10127': attribute type 29 has an invalid length. [ 599.315130][T25343] netlink: 184 bytes leftover after parsing attributes in process `syz.1.10138'. [ 599.744627][T25367] netlink: 'syz.2.10159': attribute type 29 has an invalid length. [ 599.753397][T25367] netlink: 'syz.2.10159': attribute type 29 has an invalid length. [ 599.766168][T25367] netlink: 'syz.2.10159': attribute type 29 has an invalid length. [ 600.654288][T25405] netlink: 'syz.1.10169': attribute type 29 has an invalid length. [ 600.662761][T25405] netlink: 'syz.1.10169': attribute type 29 has an invalid length. [ 600.677254][T25405] netlink: 'syz.1.10169': attribute type 29 has an invalid length. [ 601.497373][T25446] netlink: 'syz.1.10187': attribute type 29 has an invalid length. [ 604.226769][T25553] validate_nla: 2 callbacks suppressed [ 604.226790][T25553] netlink: 'syz.1.10251': attribute type 3 has an invalid length. [ 604.274597][T25553] netlink: 'syz.1.10251': attribute type 1 has an invalid length. [ 607.835891][T25685] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.10312'. [ 608.925171][T25720] netlink: 'syz.2.10317': attribute type 21 has an invalid length. [ 609.806735][T25743] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.10330'. [ 610.379583][T25771] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.10346'. [ 611.299243][T25788] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.10351'. [ 611.834134][T25801] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10369'. [ 612.025094][T25809] netlink: 'syz.2.10361': attribute type 2 has an invalid length. [ 612.164762][T25817] netlink: 'syz.0.10367': attribute type 1 has an invalid length. [ 612.174645][T25817] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.10367'. [ 612.806723][T25838] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10377'. [ 612.956523][T25848] netlink: 'syz.1.10381': attribute type 1 has an invalid length. [ 612.984655][T25848] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.10381'. [ 613.704717][T25874] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10391'. [ 613.838533][T25879] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.10396'. [ 613.854918][T25879] netlink: zone id is out of range [ 613.860111][T25879] netlink: zone id is out of range [ 614.221582][T25905] netlink: 'syz.0.10418': attribute type 25 has an invalid length. [ 614.239611][T25905] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.10418'. [ 614.607368][T25924] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.10414'. [ 614.644160][T25924] netlink: zone id is out of range [ 614.659050][T25924] netlink: zone id is out of range [ 615.569380][T25972] netlink: 'syz.1.10438': attribute type 25 has an invalid length. [ 615.586877][T25972] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.10438'. [ 617.136639][T26043] netlink: 'syz.2.10472': attribute type 3 has an invalid length. [ 617.168013][T26043] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10472'. [ 617.277779][T26049] netlink: 'syz.3.10476': attribute type 29 has an invalid length. [ 617.313033][T26049] netlink: 'syz.3.10476': attribute type 29 has an invalid length. [ 617.340286][T26052] netlink: 'syz.3.10476': attribute type 29 has an invalid length. [ 617.536870][T26063] netlink: 'syz.0.10490': attribute type 3 has an invalid length. [ 617.558677][T26063] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10490'. [ 618.116161][T26092] netlink: 'syz.3.10497': attribute type 3 has an invalid length. [ 618.124648][T26092] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10497'. [ 618.139684][T26095] netlink: 'syz.4.10498': attribute type 3 has an invalid length. [ 618.164215][T26095] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10498'. [ 618.705610][T26125] netlink: 'syz.1.10512': attribute type 3 has an invalid length. [ 618.713577][T26125] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10512'. [ 618.784643][T26128] netlink: 'syz.2.10513': attribute type 29 has an invalid length. [ 618.811115][T26128] netlink: 'syz.2.10513': attribute type 29 has an invalid length. [ 618.875330][T26130] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10514'. [ 619.438930][T26165] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.10532'. [ 619.459813][T26165] tc_dump_action: action bad kind [ 619.485790][T26169] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10533'. [ 620.739277][T26246] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10569'. [ 621.081355][T26272] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.10584'. [ 621.177019][T26275] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10586'. [ 621.596004][T26298] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.10596'. [ 624.024800][T26436] validate_nla: 5 callbacks suppressed [ 624.024820][T26436] netlink: 'syz.3.10662': attribute type 2 has an invalid length. [ 624.046849][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.053246][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.069516][T26436] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.10662'. [ 624.262191][T26450] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10666'. [ 624.279024][T26450] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10666'. [ 624.307825][T26446] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10666'. [ 624.718194][T26475] netlink: 'syz.0.10681': attribute type 2 has an invalid length. [ 624.738774][T26475] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.10681'. [ 624.873274][T26488] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10686'. [ 624.894616][T26488] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10686'. [ 624.914163][T26482] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10686'. [ 625.337152][T26512] netlink: 'syz.1.10699': attribute type 2 has an invalid length. [ 625.384567][T26512] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.10699'. [ 625.826467][T26531] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10705'. [ 626.892773][T26584] netlink: 'syz.1.10733': attribute type 12 has an invalid length. [ 627.389462][T26607] netlink: 'syz.3.10744': attribute type 29 has an invalid length. [ 627.408706][T26607] netlink: 'syz.3.10744': attribute type 29 has an invalid length. [ 627.437777][T26607] netlink: 'syz.3.10744': attribute type 29 has an invalid length. [ 627.986554][T26640] netlink: 'syz.1.10760': attribute type 29 has an invalid length. [ 628.005033][T26640] netlink: 'syz.1.10760': attribute type 29 has an invalid length. [ 628.040011][T26640] netlink: 'syz.1.10760': attribute type 29 has an invalid length. [ 630.209362][T26724] __nla_validate_parse: 3 callbacks suppressed [ 630.209380][T26724] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.10802'. [ 630.897785][T26757] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.10819'. [ 632.989009][T26829] validate_nla: 3 callbacks suppressed [ 632.989032][T26829] netlink: 'syz.3.10852': attribute type 29 has an invalid length. [ 633.019396][T26829] netlink: 'syz.3.10852': attribute type 29 has an invalid length. [ 633.040383][T26832] netlink: 'syz.3.10852': attribute type 29 has an invalid length. [ 634.582322][T26888] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.10880'. [ 634.865668][T26901] netlink: 'syz.0.10886': attribute type 29 has an invalid length. [ 634.894327][T26901] netlink: 'syz.0.10886': attribute type 29 has an invalid length. [ 634.926098][T26902] netlink: 'syz.0.10886': attribute type 29 has an invalid length. [ 636.517335][T26984] netlink: 'syz.1.10924': attribute type 3 has an invalid length. [ 636.570752][T26984] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.10924'. [ 636.781642][T27002] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.10934'. [ 641.343163][T27152] netlink: 'syz.0.11004': attribute type 3 has an invalid length. [ 641.535516][T27164] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11011'. [ 641.538752][T27165] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.11010'. [ 643.108293][T27195] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.11024'. [ 643.143388][T27199] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11025'. [ 644.049947][T27231] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11041'. [ 644.304721][T27245] netlink: 'syz.3.11048': attribute type 10 has an invalid length. [ 644.344817][T27245] device team0 left promiscuous mode [ 644.365245][T27245] device team_slave_0 left promiscuous mode [ 644.371482][T27245] device team_slave_1 left promiscuous mode [ 644.392452][T27245] device geneve0 left promiscuous mode [ 644.406952][T27245] device wlan1 left promiscuous mode [ 644.430068][T27249] netlink: 'syz.3.11048': attribute type 10 has an invalid length. [ 644.459185][T27249] netlink: 2 bytes leftover after parsing attributes in process `syz.3.11048'. [ 644.478844][T27249] device team0 entered promiscuous mode [ 644.494941][T27249] device team_slave_0 entered promiscuous mode [ 644.519688][T27249] device team_slave_1 entered promiscuous mode [ 644.535264][T27249] device geneve0 entered promiscuous mode [ 644.553943][T27249] device wlan1 entered promiscuous mode [ 644.568654][T27249] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.076615][T27281] netlink: 'syz.3.11065': attribute type 21 has an invalid length. [ 645.345164][T27291] netlink: 'syz.4.11069': attribute type 21 has an invalid length. [ 645.373705][T27291] netlink: 'syz.4.11069': attribute type 1 has an invalid length. [ 645.989743][T27327] netlink: 'syz.1.11089': attribute type 21 has an invalid length. [ 646.026326][T27327] netlink: 'syz.1.11089': attribute type 1 has an invalid length. [ 646.544433][T27351] netlink: 'syz.1.11098': attribute type 10 has an invalid length. [ 646.622084][T27351] device team0 left promiscuous mode [ 646.637797][T27351] device team_slave_1 left promiscuous mode [ 646.644008][T27351] device geneve1 left promiscuous mode [ 646.691017][T27351] device wlan1 left promiscuous mode [ 646.719158][T27353] netlink: 'syz.1.11098': attribute type 10 has an invalid length. [ 646.754552][T27353] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11098'. [ 646.779252][T27360] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.11104'. [ 646.784911][T27353] device team0 entered promiscuous mode [ 646.815182][T27353] device team_slave_1 entered promiscuous mode [ 646.834806][T27353] device geneve1 entered promiscuous mode [ 646.840862][T27353] device wlan1 entered promiscuous mode [ 646.854955][T27353] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.876940][T27363] netlink: 'syz.3.11103': attribute type 21 has an invalid length. [ 646.895000][T27363] netlink: 'syz.3.11103': attribute type 1 has an invalid length. [ 647.987836][T27393] netlink: 'syz.0.11121': attribute type 21 has an invalid length. [ 648.014911][T27397] netlink: 'syz.4.11120': attribute type 10 has an invalid length. [ 648.042018][T27397] device team0 left promiscuous mode [ 648.068339][T27397] device team_slave_0 left promiscuous mode [ 648.081087][T27397] device team_slave_1 left promiscuous mode [ 648.099874][T27397] device syz_tun left promiscuous mode [ 648.135822][T27399] netlink: 'syz.4.11120': attribute type 10 has an invalid length. [ 648.143807][T27399] netlink: 2 bytes leftover after parsing attributes in process `syz.4.11120'. [ 648.194768][T27399] device team0 entered promiscuous mode [ 648.200611][T27399] device team_slave_0 entered promiscuous mode [ 648.217301][T27399] device team_slave_1 entered promiscuous mode [ 648.236363][T27399] device syz_tun entered promiscuous mode [ 648.259073][T27399] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.711191][T27419] netlink: 192 bytes leftover after parsing attributes in process `syz.3.11131'. [ 649.377004][T27435] netlink: 'syz.1.11136': attribute type 21 has an invalid length. [ 649.832898][T27451] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.11144'. [ 650.431391][T27472] netlink: 'syz.4.11152': attribute type 21 has an invalid length. [ 651.406425][T27496] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.11168'. [ 653.286850][T27553] netlink: 'syz.1.11195': attribute type 2 has an invalid length. [ 653.304005][T27553] netlink: 'syz.1.11195': attribute type 1 has an invalid length. [ 653.568505][T27570] netlink: 'syz.2.11203': attribute type 10 has an invalid length. [ 653.587588][T27570] device netdevsim0 left promiscuous mode [ 653.635204][T27570] team0: Port device netdevsim0 added [ 653.646358][T27571] netlink: 6401 bytes leftover after parsing attributes in process `syz.3.11204'. [ 653.666195][T27576] netlink: 'syz.2.11203': attribute type 10 has an invalid length. [ 653.748444][T27576] team0: Port device netdevsim0 removed [ 653.757593][T27576] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 654.389510][T27620] netlink: 'syz.4.11225': attribute type 10 has an invalid length. [ 654.436181][T27620] device netdevsim0 left promiscuous mode [ 654.490949][T27620] device netdevsim0 entered promiscuous mode [ 654.502038][T27628] netlink: 'syz.0.11231': attribute type 3 has an invalid length. [ 654.511378][T27620] team0: Port device netdevsim0 added [ 654.518449][T27628] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11231'. [ 654.529711][T27625] netlink: 'syz.4.11225': attribute type 10 has an invalid length. [ 654.578991][T27625] device netdevsim0 left promiscuous mode [ 654.625349][T27625] team0: Port device netdevsim0 removed [ 654.648980][T27625] device netdevsim0 entered promiscuous mode [ 654.661827][T27625] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 655.294731][T27667] netlink: 'syz.1.11250': attribute type 10 has an invalid length. [ 655.313378][T27667] device netdevsim0 left promiscuous mode [ 655.348350][T27667] device netdevsim0 entered promiscuous mode [ 655.357212][T27667] team0: Port device netdevsim0 added [ 655.370087][T27678] netlink: 'syz.1.11250': attribute type 10 has an invalid length. [ 655.398740][T27678] device netdevsim0 left promiscuous mode [ 655.441653][T27678] team0: Port device netdevsim0 removed [ 655.463147][T27678] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 656.015219][T27707] netlink: 'syz.3.11267': attribute type 2 has an invalid length. [ 656.056848][T27711] netlink: 6401 bytes leftover after parsing attributes in process `syz.4.11269'. [ 656.837884][T27730] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11278'. [ 657.558140][T27762] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11295'. [ 658.077620][T27786] device netdevsim0 entered promiscuous mode [ 658.084326][T27786] team0: Port device netdevsim0 added [ 658.119116][T27786] device netdevsim0 left promiscuous mode [ 658.192225][T27786] team0: Port device netdevsim0 removed [ 658.210157][T27786] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 658.489984][T27802] validate_nla: 7 callbacks suppressed [ 658.490008][T27802] netlink: 'syz.4.11315': attribute type 29 has an invalid length. [ 658.515264][T27802] netlink: 'syz.4.11315': attribute type 29 has an invalid length. [ 658.535549][T27802] netlink: 'syz.4.11315': attribute type 29 has an invalid length. [ 660.699163][T27832] netlink: 'syz.3.11324': attribute type 10 has an invalid length. [ 660.715396][T27832] device netdevsim0 left promiscuous mode [ 660.767148][T27832] device netdevsim0 entered promiscuous mode [ 660.795942][T27832] team0: Port device netdevsim0 added [ 660.805610][T27835] netlink: 'syz.3.11324': attribute type 10 has an invalid length. [ 660.830037][T27835] device netdevsim0 left promiscuous mode [ 660.884879][T27835] team0: Port device netdevsim0 removed [ 660.911224][T27835] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 660.928197][T27841] netlink: 'syz.1.11332': attribute type 21 has an invalid length. [ 660.937120][T27841] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11332'. [ 661.162456][T27857] netlink: 'syz.0.11341': attribute type 1 has an invalid length. [ 661.454786][T27869] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.11349'. [ 661.686689][T27883] netlink: 'syz.1.11355': attribute type 1 has an invalid length. [ 661.905725][T27896] netlink: 'syz.1.11360': attribute type 29 has an invalid length. [ 661.925201][T27896] netlink: 'syz.1.11360': attribute type 29 has an invalid length. [ 661.966138][T27901] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.11362'. [ 662.201366][T27914] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.11379'. [ 662.887307][T27952] bond0: (slave netdevsim0): Releasing backup interface [ 662.909586][T27952] team0: Port device netdevsim0 added [ 662.965868][T27955] team0: Port device netdevsim0 removed [ 662.989504][T27955] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 664.326328][T28022] validate_nla: 6 callbacks suppressed [ 664.326351][T28022] netlink: 'syz.3.11417': attribute type 29 has an invalid length. [ 664.341126][T28022] netlink: 'syz.3.11417': attribute type 29 has an invalid length. [ 664.353665][T28022] netlink: 'syz.3.11417': attribute type 29 has an invalid length. [ 664.574806][T28032] netlink: 'syz.4.11422': attribute type 17 has an invalid length. [ 664.604726][T28032] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11422'. [ 664.624346][T28032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 664.711383][T28040] netlink: 'syz.1.11426': attribute type 10 has an invalid length. [ 664.756252][T28040] bond0: (slave netdevsim0): Releasing backup interface [ 664.801272][T28040] device netdevsim0 entered promiscuous mode [ 664.809870][T28040] team0: Port device netdevsim0 added [ 664.816562][T28044] netlink: 'syz.1.11426': attribute type 10 has an invalid length. [ 664.825236][T28044] device netdevsim0 left promiscuous mode [ 664.864818][T28044] team0: Port device netdevsim0 removed [ 664.875365][T28044] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 665.117564][T28054] netlink: 'syz.0.11433': attribute type 29 has an invalid length. [ 665.137122][T28054] netlink: 'syz.0.11433': attribute type 29 has an invalid length. [ 665.154311][T28054] netlink: 'syz.0.11433': attribute type 29 has an invalid length. [ 665.375001][T28065] netlink: 'syz.1.11438': attribute type 10 has an invalid length. [ 665.556253][T28069] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11440'. [ 665.576897][T28069] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 665.615840][T28069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.288790][T28270] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11533'. [ 671.528054][T28299] validate_nla: 7 callbacks suppressed [ 671.528082][T28299] netlink: 'syz.1.11558': attribute type 29 has an invalid length. [ 671.553125][T28299] netlink: 'syz.1.11558': attribute type 29 has an invalid length. [ 671.571276][T28299] netlink: 'syz.1.11558': attribute type 29 has an invalid length. [ 672.583549][T28337] netlink: 'syz.0.11567': attribute type 3 has an invalid length. [ 672.598208][T28337] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11567'. [ 672.711918][T28346] netlink: 'syz.4.11572': attribute type 1 has an invalid length. [ 672.827656][T28353] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11575'. [ 673.297856][T28377] netlink: 'syz.3.11584': attribute type 3 has an invalid length. [ 673.317919][T28379] netlink: 'syz.4.11587': attribute type 3 has an invalid length. [ 673.324689][T28377] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11584'. [ 673.344697][T28379] netlink: 'syz.4.11587': attribute type 1 has an invalid length. [ 673.368667][T28379] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.11587'. [ 673.799501][T28399] netlink: 'syz.4.11597': attribute type 29 has an invalid length. [ 674.251281][T28399] netlink: 'syz.4.11597': attribute type 29 has an invalid length. [ 674.440701][T28408] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.11601'. [ 674.599516][T28414] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.11605'. [ 675.591357][T28443] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11617'. [ 675.686764][T28451] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.11619'. [ 676.210550][T28471] netlink: 10 bytes leftover after parsing attributes in process `syz.3.11633'. [ 676.337393][T28475] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.11645'. [ 676.664983][T28490] validate_nla: 11 callbacks suppressed [ 676.665015][T28490] netlink: 'syz.3.11640': attribute type 29 has an invalid length. [ 676.718207][T28490] netlink: 'syz.3.11640': attribute type 29 has an invalid length. [ 676.735742][T28493] netlink: 'syz.3.11640': attribute type 29 has an invalid length. [ 677.363954][T28527] netlink: 'syz.2.11658': attribute type 29 has an invalid length. [ 677.372311][T28527] netlink: 'syz.2.11658': attribute type 29 has an invalid length. [ 677.384234][T28527] netlink: 'syz.2.11658': attribute type 29 has an invalid length. [ 678.648542][T28562] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11674'. [ 679.075416][T28588] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.11688'. [ 679.145561][T28592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11690'. [ 679.532728][T28616] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11702'. [ 679.568267][T28618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11703'. [ 679.691055][T28624] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 679.712889][T28624] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 680.617493][T28675] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.11730'. [ 680.635543][T28676] netlink: 'syz.1.11731': attribute type 9 has an invalid length. [ 680.664395][T28676] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.11731'. [ 681.170111][T28709] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11745'. [ 681.752418][T28740] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11759'. [ 682.772365][T28753] netlink: 'syz.4.11767': attribute type 9 has an invalid length. [ 682.797779][T28753] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.11767'. [ 683.433930][T28792] netlink: 'syz.1.11785': attribute type 10 has an invalid length. [ 683.463803][T28792] device team0 left promiscuous mode [ 683.474784][T28792] device team_slave_1 left promiscuous mode [ 683.496948][T28792] device geneve1 left promiscuous mode [ 683.503052][T28792] device wlan1 left promiscuous mode [ 683.563713][T28792] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.578588][T28792] bond0: (slave team0): Enslaving as an active interface with an up link [ 684.735196][T28860] ref_ctr_offset mismatch. inode: 0x2deb offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 684.913793][T28874] netlink: 'syz.0.11826': attribute type 10 has an invalid length. [ 684.931639][T28874] device team0 left promiscuous mode [ 684.952131][T28874] device team_slave_1 left promiscuous mode [ 684.965414][T28874] device geneve1 left promiscuous mode [ 684.976438][T28874] device geneve0 left promiscuous mode [ 685.017408][T28874] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.054203][T28874] bond0: (slave team0): Enslaving as an active interface with an up link [ 685.316002][T28894] netlink: 'syz.3.11836': attribute type 3 has an invalid length. [ 685.334201][T28894] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11836'. [ 685.486813][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.493297][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.547293][T28904] ref_ctr_offset mismatch. inode: 0x2f1b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 686.631327][T28960] netlink: 'syz.0.11867': attribute type 3 has an invalid length. [ 686.640933][T28960] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11867'. [ 687.020807][T28980] netlink: 'syz.1.11887': attribute type 21 has an invalid length. [ 687.598211][T29010] netlink: 'syz.2.11893': attribute type 21 has an invalid length. [ 687.809656][T29023] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.11897'. [ 687.830017][T29023] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.11897'. [ 687.850991][T29019] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.11897'. [ 687.870508][T29026] netlink: 'syz.0.11909': attribute type 11 has an invalid length. [ 687.899135][T29026] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11909'. [ 688.523578][T29061] netlink: 'syz.2.11916': attribute type 11 has an invalid length. [ 688.554620][T29061] netlink: 140 bytes leftover after parsing attributes in process `syz.2.11916'. [ 689.113257][T29095] netlink: 'syz.3.11933': attribute type 11 has an invalid length. [ 689.188178][T29095] netlink: 140 bytes leftover after parsing attributes in process `syz.3.11933'. [ 694.455042][T29388] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12075'. [ 694.659500][T29398] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12080'. [ 694.681454][T29398] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12080'. [ 694.701772][T29401] netlink: 'syz.4.12084': attribute type 3 has an invalid length. [ 694.710017][T29398] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12080'. [ 694.719925][T29401] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12084'. [ 694.989671][T29421] netlink: 'syz.3.12092': attribute type 21 has an invalid length. [ 694.997995][T29421] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12092'. [ 695.027993][T29421] netlink: 'syz.3.12092': attribute type 4 has an invalid length. [ 695.038186][T29421] netlink: 'syz.3.12092': attribute type 3 has an invalid length. [ 695.047472][T29421] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12092'. [ 695.191655][T29431] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12096'. [ 695.213115][T29431] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12096'. [ 695.243168][T29431] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12096'. [ 695.633335][T29454] netlink: 'syz.0.12107': attribute type 21 has an invalid length. [ 695.649301][T29454] netlink: 'syz.0.12107': attribute type 4 has an invalid length. [ 695.657972][T29454] netlink: 'syz.0.12107': attribute type 3 has an invalid length. [ 695.908733][T29467] netlink: 'syz.3.12114': attribute type 3 has an invalid length. [ 696.043527][T29476] netlink: 'syz.2.12119': attribute type 3 has an invalid length. [ 696.124955][T29483] netlink: 'syz.4.12121': attribute type 21 has an invalid length. [ 699.767329][T29675] validate_nla: 6 callbacks suppressed [ 699.767351][T29675] netlink: 'syz.0.12215': attribute type 27 has an invalid length. [ 699.806359][T29675] __nla_validate_parse: 18 callbacks suppressed [ 699.806379][T29675] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.12215'. [ 700.008056][T29683] netlink: 763 bytes leftover after parsing attributes in process `syz.2.12219'. [ 700.183187][T29695] netlink: 168 bytes leftover after parsing attributes in process `syz.1.12224'. [ 700.415753][T29709] netlink: 'syz.0.12229': attribute type 3 has an invalid length. [ 700.434615][T29709] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.12229'. [ 700.833576][T29731] netlink: 'syz.3.12240': attribute type 33 has an invalid length. [ 700.874833][T29731] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12240'. [ 701.258411][T29754] netlink: 168 bytes leftover after parsing attributes in process `syz.2.12252'. [ 702.057714][T29788] netlink: 'syz.3.12264': attribute type 3 has an invalid length. [ 702.104658][T29788] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.12264'. [ 703.313249][T29850] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.12296'. [ 703.367692][T29854] netlink: 'syz.2.12300': attribute type 6 has an invalid length. [ 703.876862][T29886] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.12314'. [ 703.963306][T29888] netlink: 'syz.4.12317': attribute type 21 has an invalid length. [ 703.983134][T29888] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12317'. [ 703.996530][T29888] netlink: 'syz.4.12317': attribute type 4 has an invalid length. [ 705.981820][T29958] netlink: 'syz.0.12350': attribute type 6 has an invalid length. [ 706.415509][T29978] netlink: 'syz.3.12360': attribute type 21 has an invalid length. [ 706.433802][T29978] __nla_validate_parse: 1 callbacks suppressed [ 706.433824][T29978] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12360'. [ 706.464686][T29978] netlink: 'syz.3.12360': attribute type 4 has an invalid length. [ 706.480075][T29978] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12360'. [ 707.207055][T30018] netlink: 'syz.0.12380': attribute type 3 has an invalid length. [ 707.233474][T30018] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.12380'. [ 707.252333][T30022] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.12381'. [ 707.782095][T30051] netlink: 'syz.4.12396': attribute type 3 has an invalid length. [ 707.801981][T30051] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.12396'. [ 708.299510][T30084] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.12419'. [ 708.516975][T30092] netlink: 'syz.3.12413': attribute type 3 has an invalid length. [ 708.533845][T30092] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.12413'. [ 708.599366][T30093] netlink: 'syz.0.12411': attribute type 21 has an invalid length. [ 708.664631][T30093] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12411'. [ 709.403158][T30121] netlink: 'syz.2.12429': attribute type 21 has an invalid length. [ 709.454597][T30121] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.12429'. [ 709.504117][T30126] netlink: 'syz.4.12431': attribute type 21 has an invalid length. [ 709.526366][T30126] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12431'. [ 709.972819][T30150] netlink: 'syz.4.12443': attribute type 21 has an invalid length. [ 714.847343][T30321] __nla_validate_parse: 2 callbacks suppressed [ 714.847364][T30321] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.12528'. [ 715.056841][T30326] validate_nla: 1 callbacks suppressed [ 715.056862][T30326] netlink: 'syz.3.12530': attribute type 3 has an invalid length. [ 715.143960][T30326] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.12530'. [ 715.473158][T30338] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12533'. [ 715.486606][T30338] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12533'. [ 715.505072][T30333] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12533'. [ 716.125489][T30372] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12550'. [ 716.147128][T30372] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12550'. [ 716.201115][T30367] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12550'. [ 716.820060][T30404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12565'. [ 716.850612][T30404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12565'. [ 717.913934][T30438] netlink: 'syz.1.12581': attribute type 3 has an invalid length. [ 719.483709][T30509] netlink: 'syz.4.12616': attribute type 29 has an invalid length. [ 719.512724][T30509] netlink: 'syz.4.12616': attribute type 29 has an invalid length. [ 719.545066][T30512] netlink: 'syz.4.12616': attribute type 29 has an invalid length. [ 720.782894][T30557] netlink: 'syz.3.12639': attribute type 29 has an invalid length. [ 720.833429][T30557] netlink: 'syz.3.12639': attribute type 29 has an invalid length. [ 720.883855][T30558] netlink: 'syz.3.12639': attribute type 29 has an invalid length. [ 723.012145][T30613] __nla_validate_parse: 2 callbacks suppressed [ 723.012169][T30613] netlink: 10 bytes leftover after parsing attributes in process `syz.4.12664'. [ 723.322755][T30631] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.12675'. [ 723.611786][T30646] netlink: 10 bytes leftover after parsing attributes in process `syz.2.12683'. [ 724.515892][T30682] netlink: 10 bytes leftover after parsing attributes in process `syz.0.12698'. [ 725.479177][T30716] netlink: 17861 bytes leftover after parsing attributes in process `syz.0.12716'. [ 725.556607][T30718] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.12718'. [ 726.819137][T30786] netlink: 'syz.3.12751': attribute type 4 has an invalid length. [ 726.845258][T30786] netlink: 'syz.3.12751': attribute type 8 has an invalid length. [ 726.853250][T30786] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.12751'. [ 726.937656][T30794] netlink: 'syz.4.12755': attribute type 10 has an invalid length. [ 727.155221][T30800] netlink: 'syz.4.12760': attribute type 29 has an invalid length. [ 727.163514][T30800] netlink: 'syz.4.12760': attribute type 29 has an invalid length. [ 727.216483][T30805] netlink: 'syz.4.12760': attribute type 29 has an invalid length. [ 728.380101][T30826] netlink: 'syz.1.12770': attribute type 4 has an invalid length. [ 728.394106][T30826] netlink: 'syz.1.12770': attribute type 8 has an invalid length. [ 728.414582][T30826] netlink: 197344 bytes leftover after parsing attributes in process `syz.1.12770'. [ 728.587984][T30832] netlink: 'syz.2.12771': attribute type 10 has an invalid length. [ 729.160769][T30852] netlink: 4019 bytes leftover after parsing attributes in process `syz.1.12782'. [ 729.502687][T30861] netlink: 'syz.2.12785': attribute type 4 has an invalid length. [ 729.531968][T30861] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.12785'. [ 729.921445][T30879] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.12804'. [ 735.395544][T31045] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.12873'. [ 736.409848][T31078] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.12885'. [ 737.540829][T31118] validate_nla: 8 callbacks suppressed [ 737.540855][T31118] netlink: 'syz.1.12903': attribute type 33 has an invalid length. [ 737.604676][T31118] netlink: 'syz.1.12903': attribute type 10 has an invalid length. [ 737.641843][T31118] netlink: 108 bytes leftover after parsing attributes in process `syz.1.12903'. [ 737.664613][T31118] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 737.754533][T31122] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.12916'. [ 737.803135][T31121] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.12905'. [ 738.167343][T31145] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.12915'. [ 738.348706][T31153] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.12920'. [ 739.271891][T31179] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.12942'. [ 739.768104][T31201] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12939'. [ 739.808419][T31201] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12939'. [ 740.390820][T31234] netlink: 'syz.0.12957': attribute type 33 has an invalid length. [ 740.421144][T31234] netlink: 'syz.0.12957': attribute type 10 has an invalid length. [ 740.453223][T31234] __nla_validate_parse: 3 callbacks suppressed [ 740.453245][T31234] netlink: 108 bytes leftover after parsing attributes in process `syz.0.12957'. [ 740.486155][T31234] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 743.538513][T31334] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.12999'. [ 745.218303][T31398] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13033'. [ 745.817533][T31419] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.13041'. [ 746.927264][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.933791][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.046705][T31450] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.13057'. [ 747.130131][T31454] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13060'. [ 747.788654][T31480] netlink: 'syz.4.13074': attribute type 10 has an invalid length. [ 748.637378][T31480] device syz_tun left promiscuous mode [ 748.647326][T31480] team0: Port device syz_tun removed [ 748.661007][T31480] device syz_tun entered promiscuous mode [ 748.668164][T31480] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 748.679257][T31485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13076'. [ 748.698791][T31489] tun0: tun_chr_ioctl cmd 1074025680 [ 749.209906][T31518] netlink: 'syz.0.13091': attribute type 9 has an invalid length. [ 749.233099][T31518] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.13091'. [ 749.325202][T31526] netlink: 'syz.2.13095': attribute type 2 has an invalid length. [ 749.353966][T31526] netlink: 164 bytes leftover after parsing attributes in process `syz.2.13095'. [ 750.064760][T31558] netlink: 'syz.3.13111': attribute type 9 has an invalid length. [ 750.088290][T31558] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.13111'. [ 750.222781][T31564] netlink: 'syz.4.13112': attribute type 2 has an invalid length. [ 750.242349][T31564] netlink: 164 bytes leftover after parsing attributes in process `syz.4.13112'. [ 751.216895][T31596] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 751.239324][T31596] syzkaller0: linktype set to 1 [ 752.258322][T31645] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 752.300605][T31645] syzkaller0: linktype set to 1 [ 753.562347][T31687] tun0: tun_chr_ioctl cmd 1074025672 [ 753.600802][T31687] tun0: ignored: set checksum enabled [ 754.349826][T31729] tun0: tun_chr_ioctl cmd 1074025672 [ 754.364873][T31729] tun0: ignored: set checksum enabled [ 755.144953][T31769] tun0: tun_chr_ioctl cmd 1074025672 [ 755.150460][T31769] tun0: ignored: set checksum enabled [ 755.723928][T31788] netlink: 'syz.1.13227': attribute type 29 has an invalid length. [ 755.742734][T31788] netlink: 'syz.1.13227': attribute type 29 has an invalid length. [ 755.794949][T31791] netlink: 'syz.1.13227': attribute type 29 has an invalid length. [ 755.825431][T31788] netlink: 'syz.1.13227': attribute type 29 has an invalid length. [ 756.011062][T31805] netlink: 'syz.1.13226': attribute type 39 has an invalid length. [ 757.372659][T31833] netlink: 'syz.4.13237': attribute type 29 has an invalid length. [ 757.381465][T31833] netlink: 'syz.4.13237': attribute type 29 has an invalid length. [ 757.415032][T31833] netlink: 'syz.4.13237': attribute type 29 has an invalid length. [ 757.445669][T31833] netlink: 'syz.4.13237': attribute type 29 has an invalid length. [ 757.506509][T31837] netlink: 'syz.3.13240': attribute type 39 has an invalid length. [ 757.639187][T31848] netlink: 14374 bytes leftover after parsing attributes in process `syz.1.13245'. [ 757.954206][T31864] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.13253'. [ 758.492275][T31892] netlink: 14374 bytes leftover after parsing attributes in process `syz.3.13263'. [ 758.731523][T31906] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.13271'. [ 759.168711][T31924] netlink: 14374 bytes leftover after parsing attributes in process `syz.2.13281'. [ 759.587516][T31947] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.13288'. [ 759.921121][T31960] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.13297'. [ 760.549111][T31984] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.13305'. [ 760.960086][T32004] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13317'. [ 760.984916][T32004] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13317'. [ 761.729644][T32035] validate_nla: 18 callbacks suppressed [ 761.729665][T32035] netlink: 'syz.1.13332': attribute type 27 has an invalid length. [ 762.083458][T32044] netlink: 'syz.1.13344': attribute type 27 has an invalid length. [ 762.767064][T32075] netlink: 'syz.4.13352': attribute type 27 has an invalid length. [ 762.793740][T32075] __nla_validate_parse: 5 callbacks suppressed [ 762.825168][T32075] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.13352'. [ 764.149955][T32124] netlink: 'syz.0.13371': attribute type 27 has an invalid length. [ 764.180126][T32124] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.13371'. [ 765.006454][T32154] netlink: 148 bytes leftover after parsing attributes in process `syz.3.13388'. [ 765.896609][T32196] netlink: 148 bytes leftover after parsing attributes in process `syz.4.13408'. [ 766.412931][T32215] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.13416'. [ 767.527568][T32255] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 767.533856][T32255] pim6reg0: linktype set to 768 [ 767.760213][T32261] IPv6: Can't replace route, no match found [ 767.910696][T32268] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.13440'. [ 768.265673][T32283] tap0: tun_chr_ioctl cmd 2147767520 [ 769.273578][T32323] tap0: tun_chr_ioctl cmd 2147767520 [ 769.292756][T32324] Â: renamed from pim6reg1 [ 769.561533][T32334] tap0: tun_chr_ioctl cmd 2147767520 [ 769.755110][T32342] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13472'. [ 769.801010][T32342] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13472'. [ 769.836212][T32341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13472'. [ 769.894584][T32343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13472'. [ 770.560406][T32372] netlink: 156 bytes leftover after parsing attributes in process `syz.3.13488'. [ 771.436720][T32404] IPv6: Can't replace route, no match found [ 772.568737][T32426] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 772.585126][T32426] syzkaller0: linktype set to 512 [ 772.884354][T32434] IPv6: Can't replace route, no match found [ 774.445419][T32458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 775.419584][T32488] netlink: 14566 bytes leftover after parsing attributes in process `syz.4.13544'. [ 776.554294][T32537] netlink: 14566 bytes leftover after parsing attributes in process `syz.3.13567'. [ 777.468367][T32566] netlink: 14566 bytes leftover after parsing attributes in process `syz.0.13580'. [ 778.867241][T32621] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13604'. [ 778.884345][T32621] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13604'. [ 778.904929][T32618] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13604'. [ 778.926872][T32622] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13604'. [ 780.785552][T32672] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 783.209702][T32727] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 783.454490][T32745] syz.4.13657[32745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 783.454641][T32745] syz.4.13657[32745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 786.438664][ T380] netlink: 'syz.4.13706': attribute type 21 has an invalid length. [ 787.898034][ T437] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13728'. [ 787.915992][ T437] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13728'. [ 787.926300][ T436] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13728'. [ 787.937887][ T437] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13728'. [ 789.176426][ T486] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13762'. [ 789.205646][ T486] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13762'. [ 789.234139][ T481] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13762'. [ 789.333145][ T489] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13762'. [ 789.997299][ T518] syz.4.13768[518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 789.997461][ T518] syz.4.13768[518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 790.065117][ T526] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13770'. [ 790.166903][ T526] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13770'. [ 790.358480][ T538] tun0: tun_chr_ioctl cmd 2147767507 [ 790.967877][ T565] syz.0.13798[565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 790.968058][ T565] syz.0.13798[565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 792.422285][ T594] tun0: tun_chr_ioctl cmd 2147767507 [ 792.453478][ T597] syz.1.13802[597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 792.453655][ T597] syz.1.13802[597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 793.867805][ T637] tun0: tun_chr_ioctl cmd 2147767507 [ 793.931307][ T640] tap0: tun_chr_ioctl cmd 1074025677 [ 793.944718][ T640] tap0: linktype set to 821 [ 794.710300][ T670] __nla_validate_parse: 10 callbacks suppressed [ 794.710322][ T670] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.13836'. [ 795.842155][ T703] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13849'. [ 795.873895][ T703] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13849'. [ 795.887283][ T702] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13849'. [ 795.918419][ T703] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13849'. [ 797.222819][ T753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 798.140650][ T788] tap0: tun_chr_ioctl cmd 1074025677 [ 798.155480][ T788] tap0: linktype set to 821 [ 798.260585][ T796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 798.607021][ T806] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13893'. [ 798.634800][ T806] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13893'. [ 798.667868][ T802] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13893'. [ 798.686773][ T807] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13893'. [ 799.226934][ T833] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.13906'. [ 800.441726][ T877] __nla_validate_parse: 4 callbacks suppressed [ 800.441746][ T877] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13923'. [ 800.476413][ T877] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13923'. [ 800.486822][ T875] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13923'. [ 800.508150][ T884] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13923'. [ 800.520907][ T883] netlink: 'syz.3.13927': attribute type 3 has an invalid length. [ 800.548886][ T887] netlink: 'syz.4.13928': attribute type 29 has an invalid length. [ 800.549367][ T883] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.13927'. [ 800.557532][ T887] netlink: 'syz.4.13928': attribute type 29 has an invalid length. [ 800.614851][ T889] netlink: 'syz.4.13928': attribute type 29 has an invalid length. [ 800.661687][ T887] netlink: 'syz.4.13928': attribute type 29 has an invalid length. [ 800.809533][ T902] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 800.854600][ T902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 802.334148][ T933] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13941'. [ 802.356871][ T933] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13941'. [ 802.377499][ T930] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13941'. [ 802.406425][ T936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13941'. [ 803.211723][ T980] netlink: 'syz.4.13963': attribute type 3 has an invalid length. [ 803.245971][ T980] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.13963'. [ 803.378766][ T990] netlink: 'syz.2.13965': attribute type 29 has an invalid length. [ 803.388176][ T990] netlink: 'syz.2.13965': attribute type 29 has an invalid length. [ 803.399933][ T990] netlink: 'syz.2.13965': attribute type 29 has an invalid length. [ 803.409615][ T990] netlink: 'syz.2.13965': attribute type 29 has an invalid length. [ 805.926210][ T1108] __nla_validate_parse: 14 callbacks suppressed [ 805.926232][ T1108] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14013'. [ 806.412026][ T1125] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.14021'. [ 807.030251][ T1141] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14028'. [ 807.726143][ T1175] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14044'. [ 808.221053][ T1204] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 808.227532][ T1204] syzkaller0: linktype set to 779 [ 808.302892][ T1208] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.14057'. [ 808.366884][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.373293][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.937646][ T1238] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 808.954715][ T1238] syzkaller0: linktype set to 779 [ 808.972456][ T1241] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.14074'. [ 809.006664][ T1243] netlink: 'syz.1.14075': attribute type 49 has an invalid length. [ 809.456556][ T1272] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 809.478247][ T1276] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14088'. [ 809.487539][ T1276] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14088'. [ 809.498135][ T1270] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14088'. [ 809.509577][ T1276] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14088'. [ 811.114022][ T1342] netlink: 'syz.1.14128': attribute type 21 has an invalid length. [ 811.125664][ T1342] netlink: 'syz.1.14128': attribute type 1 has an invalid length. [ 811.133665][ T1342] netlink: 16050 bytes leftover after parsing attributes in process `syz.1.14128'. [ 812.010502][ T1369] netlink: 'syz.4.14130': attribute type 49 has an invalid length. [ 812.190338][ T1379] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.14134'. [ 812.215063][ T1378] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 812.670916][ T1394] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 813.686413][ T1419] netlink: 'syz.0.14151': attribute type 3 has an invalid length. [ 813.705739][ T1419] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.14151'. [ 813.818656][ T1421] netlink: 61959 bytes leftover after parsing attributes in process `syz.1.14163'. [ 813.848677][ T1421] tc_dump_action: action bad kind [ 814.216818][ T1435] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.14159'. [ 814.594664][ T1449] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14166'. [ 814.925137][ T1455] netlink: 61959 bytes leftover after parsing attributes in process `syz.2.14168'. [ 814.967179][ T1455] tc_dump_action: action bad kind [ 815.404567][ T1470] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.14175'. [ 815.539566][ T1475] netlink: 'syz.4.14178': attribute type 3 has an invalid length. [ 815.547893][ T1475] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.14178'. [ 815.705339][ T1484] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.14183'. [ 816.319024][ T1514] netlink: 'syz.3.14195': attribute type 3 has an invalid length. [ 816.327274][ T1514] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.14195'. [ 816.605313][ T1523] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.14198'. [ 816.822564][ T1531] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14202'. [ 817.150923][ T1545] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.14212'. [ 817.373222][ T1559] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14217'. [ 818.245594][ T1596] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14232'. [ 820.018836][ T1667] netlink: 'syz.3.14269': attribute type 13 has an invalid length. [ 820.110558][ T1667] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.14269'. [ 821.590381][ T1736] netlink: 'syz.0.14300': attribute type 13 has an invalid length. [ 821.615639][ T1736] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.14300'. [ 822.195762][ T1766] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14311'. [ 822.225948][ T1766] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14311'. [ 822.236381][ T1763] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14311'. [ 822.248562][ T1773] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14311'. [ 822.403476][ T1781] netlink: 'syz.1.14316': attribute type 13 has an invalid length. [ 822.412098][ T1781] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.14316'. [ 822.790022][ T1799] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.14328'. [ 823.602906][ T1829] netlink: 'syz.3.14342': attribute type 29 has an invalid length. [ 823.615160][ T1829] netlink: 'syz.3.14342': attribute type 29 has an invalid length. [ 824.208053][ T1862] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.14357'. [ 824.494442][ T1872] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.14373'. [ 825.302293][ T1907] netlink: 'syz.4.14378': attribute type 46 has an invalid length. [ 825.321943][ T1907] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14378'. [ 827.137719][ T1973] netlink: 'syz.3.14411': attribute type 46 has an invalid length. [ 827.157610][ T1973] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14411'. [ 827.459120][ T1981] ref_ctr_offset mismatch. inode: 0x39c0 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 829.023158][ T2047] ref_ctr_offset mismatch. inode: 0x382d offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 829.275859][ T2067] netlink: 'syz.4.14456': attribute type 21 has an invalid length. [ 829.294646][ T2067] netlink: 'syz.4.14456': attribute type 2 has an invalid length. [ 829.302541][ T2067] netlink: 15970 bytes leftover after parsing attributes in process `syz.4.14456'. [ 829.334752][ T2066] netlink: 'syz.0.14450': attribute type 21 has an invalid length. [ 829.364776][ T2066] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14450'. [ 829.858006][ T2098] netlink: 'syz.1.14470': attribute type 21 has an invalid length. [ 829.866685][ T2098] netlink: 'syz.1.14470': attribute type 2 has an invalid length. [ 829.875202][ T2098] netlink: 15970 bytes leftover after parsing attributes in process `syz.1.14470'. [ 829.935753][ T2101] netlink: 'syz.4.14472': attribute type 1 has an invalid length. [ 829.962260][ T2104] netlink: 'syz.1.14474': attribute type 21 has an invalid length. [ 829.971994][ T2104] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14474'. [ 830.002677][ T2085] ref_ctr_offset mismatch. inode: 0x37e4 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 830.259089][ T2117] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.14479'. [ 830.523886][ T2132] netlink: 'syz.3.14487': attribute type 21 has an invalid length. [ 830.539540][ T2133] netlink: 'syz.1.14486': attribute type 1 has an invalid length. [ 830.544628][ T2132] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14487'. [ 830.805240][ T2146] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.14493'. [ 830.899384][ T2152] tap0: tun_chr_ioctl cmd 1074025677 [ 830.905197][ T2152] tap0: linktype set to 6 [ 831.074788][ T2158] ref_ctr_offset mismatch. inode: 0x382d offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 831.703576][ T2192] ref_ctr_offset mismatch. inode: 0x3a45 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 832.752314][ T2236] tap0: tun_chr_ioctl cmd 1074025677 [ 832.759341][ T2236] tap0: linktype set to 6 [ 833.438106][ T2245] netlink: 4031 bytes leftover after parsing attributes in process `syz.3.14539'. [ 835.354498][ T2332] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14581'. [ 835.373955][ T2332] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14581'. [ 835.387177][ T2328] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14581'. [ 835.419009][ T2334] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14581'. [ 835.505038][ T2338] tun0: tun_chr_ioctl cmd 21731 [ 836.117792][ T2369] validate_nla: 1 callbacks suppressed [ 836.117816][ T2369] netlink: 'syz.3.14597': attribute type 2 has an invalid length. [ 836.154670][ T2369] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.14597'. [ 836.311605][ T2380] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14601'. [ 837.116828][ T2416] tun0: tun_chr_ioctl cmd 21731 [ 837.531192][ T2430] netlink: 'syz.2.14621': attribute type 3 has an invalid length. [ 837.599772][ T2430] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.14621'. [ 837.830496][ T2442] netlink: 'syz.4.14625': attribute type 10 has an invalid length. [ 837.843581][ T2442] netlink: 3867 bytes leftover after parsing attributes in process `syz.4.14625'. [ 839.168181][ T2479] tap0: tun_chr_ioctl cmd 1074812118 [ 841.520393][ T2480] tun0: tun_chr_ioctl cmd 21731 [ 841.539391][ T2482] netlink: 'syz.4.14640': attribute type 28 has an invalid length. [ 842.110024][ T2501] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14648'. [ 842.646994][ T2529] pimreg0: tun_chr_ioctl cmd 1074025677 [ 842.653245][ T2529] pimreg0: linktype set to 769 [ 843.723966][ T2579] pimreg0: tun_chr_ioctl cmd 1074025677 [ 843.730421][ T2579] pimreg0: linktype set to 769 [ 844.918438][ T2620] pimreg0: tun_chr_ioctl cmd 1074025677 [ 844.932535][ T2620] pimreg0: linktype set to 769 [ 845.356626][ T2650] tap0: tun_chr_ioctl cmd 1074812118 [ 850.107326][ T2773] syzkaller0: tun_chr_ioctl cmd 35108 [ 850.833330][ T2792] tap0: tun_chr_ioctl cmd 1074025677 [ 850.839147][ T2792] tap0: linktype set to 773 [ 853.097509][ T2881] syzkaller0: tun_chr_ioctl cmd 35108 [ 853.710716][ T2906] netlink: 'syz.1.14813': attribute type 5 has an invalid length. [ 853.720119][ T2906] netlink: 'syz.1.14813': attribute type 5 has an invalid length. [ 854.147755][ T2918] netlink: 'syz.4.14806': attribute type 11 has an invalid length. [ 854.156389][ T2918] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.14806'. [ 854.195866][ T2917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.222504][ T2920] tap0: tun_chr_ioctl cmd 2147767519 [ 855.279923][ T2944] tap0: tun_chr_ioctl cmd 2147767519 [ 860.696123][ T3037] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14859'. [ 860.716628][ T3037] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14859'. [ 860.727477][ T3034] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14859'. [ 860.740053][ T3037] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14859'. [ 863.116941][ T3079] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.14883'. [ 863.629137][ T3103] netlink: 'syz.4.14895': attribute type 46 has an invalid length. [ 863.809741][ T3117] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14900'. [ 864.350949][ T3149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14913'. [ 864.496683][ T3138] netlink: 'syz.0.14907': attribute type 46 has an invalid length. [ 864.524566][ T3160] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.14916'. [ 865.075805][ T3189] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14942'. [ 865.412506][ T3208] netlink: 'syz.2.14932': attribute type 46 has an invalid length. [ 865.522197][ T3215] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.14944'. [ 866.449982][ T3262] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14961'. [ 866.622543][ T3268] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.14963'. [ 866.639693][ T3269] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.14966'. [ 867.208761][ T3297] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.14981'. [ 867.398150][ T3309] netlink: 830 bytes leftover after parsing attributes in process `syz.4.14987'. [ 868.059529][ T3346] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.14998'. [ 868.383805][ T3365] netlink: 830 bytes leftover after parsing attributes in process `syz.2.15003'. [ 868.397941][ T3367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15009'. [ 868.465458][ T3372] netlink: 188 bytes leftover after parsing attributes in process `syz.3.15011'. [ 868.888538][ T3393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15022'. [ 869.817098][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.823924][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.544456][ T3467] netlink: 'syz.2.15052': attribute type 10 has an invalid length. [ 871.186013][ T3496] netlink: 'syz.1.15067': attribute type 10 has an invalid length. [ 871.468235][ T3502] __nla_validate_parse: 13 callbacks suppressed [ 871.468259][ T3502] netlink: 188 bytes leftover after parsing attributes in process `syz.1.15070'. [ 871.817863][ T3517] netlink: 830 bytes leftover after parsing attributes in process `syz.1.15075'. [ 871.961890][ T3524] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.15079'. [ 873.779134][ T3567] netlink: 830 bytes leftover after parsing attributes in process `syz.0.15092'. [ 874.691602][ T3600] netlink: 830 bytes leftover after parsing attributes in process `syz.3.15115'. [ 876.834209][ T3683] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.15150'. [ 877.161544][ T3693] netlink: 830 bytes leftover after parsing attributes in process `syz.4.15155'. [ 878.908207][ T3741] netlink: 830 bytes leftover after parsing attributes in process `syz.1.15177'. [ 879.696954][ T3775] netlink: 830 bytes leftover after parsing attributes in process `syz.3.15192'. [ 881.440880][ T3838] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.15221'. [ 881.457634][ T3838] netlink: zone id is out of range [ 881.475241][ T3838] netlink: zone id is out of range [ 882.468042][ T3862] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.15232'. [ 882.480727][ T3862] netlink: zone id is out of range [ 882.490499][ T3862] netlink: zone id is out of range [ 884.173923][ T3902] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.15248'. [ 884.186160][ T3902] netlink: zone id is out of range [ 884.192899][ T3902] netlink: zone id is out of range [ 884.309296][ T3908] netlink: 'syz.3.15250': attribute type 21 has an invalid length. [ 884.317400][ T3908] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.15250'. [ 884.593773][ T3925] netlink: 830 bytes leftover after parsing attributes in process `syz.2.15253'. [ 885.136141][ T3943] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.15264'. [ 885.147154][ T3943] netlink: zone id is out of range [ 885.153225][ T3943] netlink: zone id is out of range [ 885.285563][ T3947] netlink: 'syz.2.15266': attribute type 21 has an invalid length. [ 885.304961][ T3947] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.15266'. [ 885.559610][ T3958] netlink: 830 bytes leftover after parsing attributes in process `syz.1.15270'. [ 886.710910][ T3981] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.15277'. [ 886.775660][ T3981] netlink: zone id is out of range [ 886.806588][ T3990] netlink: 830 bytes leftover after parsing attributes in process `syz.3.15283'. [ 886.815151][ T3981] netlink: zone id is out of range [ 886.911981][ T3995] netlink: 'syz.1.15286': attribute type 21 has an invalid length. [ 886.920453][ T3995] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.15286'. [ 887.521861][ T4011] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.15304'. [ 887.545069][ T4011] netlink: zone id is out of range [ 887.562589][ T4011] netlink: zone id is out of range [ 888.085950][ T4027] netlink: 'syz.3.15302': attribute type 9 has an invalid length. [ 888.104317][ T4027] netlink: 40451 bytes leftover after parsing attributes in process `syz.3.15302'. [ 889.178846][ T4088] netlink: 'syz.4.15329': attribute type 29 has an invalid length. [ 889.197771][ T4088] netlink: 'syz.4.15329': attribute type 29 has an invalid length. [ 889.211471][ T4088] netlink: 'syz.4.15329': attribute type 29 has an invalid length. [ 889.222206][ T4088] netlink: 'syz.4.15329': attribute type 29 has an invalid length. [ 889.915128][ T4130] netlink: 'syz.3.15346': attribute type 29 has an invalid length. [ 889.944939][ T4130] netlink: 'syz.3.15346': attribute type 29 has an invalid length. [ 889.965239][ T4130] netlink: 'syz.3.15346': attribute type 29 has an invalid length. [ 889.976356][ T4132] netlink: 'syz.1.15348': attribute type 27 has an invalid length. [ 889.982157][ T4130] netlink: 'syz.3.15346': attribute type 29 has an invalid length. [ 889.984510][ T4132] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.15348'. [ 890.190180][ T4141] netlink: 'syz.0.15360': attribute type 29 has an invalid length. [ 890.199512][ T4141] netlink: 'syz.0.15360': attribute type 29 has an invalid length. [ 890.213168][ T4141] netlink: 'syz.0.15360': attribute type 29 has an invalid length. [ 890.225398][ T4141] netlink: 'syz.0.15360': attribute type 29 has an invalid length. [ 890.438209][ T4153] netlink: 'syz.4.15354': attribute type 9 has an invalid length. [ 890.462649][ T4153] netlink: 40451 bytes leftover after parsing attributes in process `syz.4.15354'. [ 890.857395][ T4167] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.15364'. [ 890.875257][ T4167] netlink: zone id is out of range [ 890.884648][ T4167] netlink: zone id is out of range [ 891.016896][ T4176] netlink: 40451 bytes leftover after parsing attributes in process `syz.1.15371'. [ 893.385947][ T4241] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.15399'. [ 895.270410][ T4339] validate_nla: 10 callbacks suppressed [ 895.270432][ T4339] netlink: 'syz.3.15430': attribute type 21 has an invalid length. [ 895.288060][ T4339] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.15430'. [ 896.776374][ T4418] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 898.004086][ T4444] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 901.037230][ T4476] netlink: 'syz.1.15505': attribute type 3 has an invalid length. [ 901.062269][ T4476] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15505'. [ 901.306464][ T4485] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.15508'. [ 901.324466][ T4485] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.15508'. [ 901.343946][ T4484] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.15508'. [ 902.428179][ T4510] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15512'. [ 903.482943][ T4557] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.15530'. [ 903.515808][ T4557] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.15530'. [ 903.555012][ T4554] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.15530'. [ 904.691466][ T4600] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.15546'. [ 904.702230][ T4600] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.15546'. [ 905.640348][ T4623] netlink: 'syz.1.15572': attribute type 49 has an invalid length. [ 905.651474][ T4623] netlink: 'syz.1.15572': attribute type 49 has an invalid length. [ 905.889161][ T4627] netlink: 'syz.4.15563': attribute type 3 has an invalid length. [ 907.146139][ T4664] __nla_validate_parse: 3 callbacks suppressed [ 907.146157][ T4664] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.15580'. [ 907.580018][ T4683] netlink: 'syz.4.15590': attribute type 49 has an invalid length. [ 907.595978][ T4683] netlink: 'syz.4.15590': attribute type 49 has an invalid length. [ 908.737499][ T4709] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.15600'. [ 908.930940][ T4721] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15607'. [ 908.945026][ T4721] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15607'. [ 908.954175][ T4721] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15607'. [ 908.984252][ T4721] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15607'. [ 915.044555][ T4859] netlink: 'syz.1.15667': attribute type 1 has an invalid length. [ 917.096024][ T4946] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.15707'. [ 917.483598][ T4963] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15716'. [ 917.526871][ T4963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 918.944458][ T5015] netlink: 'syz.1.15746': attribute type 13 has an invalid length. [ 918.962732][ T5015] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.15746'. [ 919.208155][ T5026] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.15743'. [ 919.975379][ T5044] netlink: 'syz.2.15751': attribute type 13 has an invalid length. [ 920.175004][ T5044] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.15751'. [ 920.989995][ T5076] delete_channel: no stack [ 920.995550][ T5076] delete_channel: no stack [ 921.782493][ T5095] netlink: 'syz.4.15770': attribute type 13 has an invalid length. [ 921.791967][ T5095] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.15770'. [ 922.235928][ T5114] tap0: tun_chr_ioctl cmd 1074025677 [ 922.241502][ T5114] tap0: linktype set to 270 [ 923.039075][ T5152] tun1: tun_chr_ioctl cmd 1074025681 [ 923.269549][ T5160] tap0: tun_chr_ioctl cmd 1074025677 [ 923.275844][ T5160] tap0: linktype set to 270 [ 923.865193][ T5185] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15809'. [ 923.877877][ T5185] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15809'. [ 923.892749][ T5183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15809'. [ 923.904225][ T5183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15809'. [ 924.034066][ T5191] tun1: tun_chr_ioctl cmd 1074025681 [ 924.180984][ T5197] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.15829'. [ 924.359795][ T5208] delete_channel: no stack [ 924.365673][ T5208] delete_channel: no stack [ 927.738779][ T5232] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.15831'. [ 927.913254][ T5239] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15835'. [ 927.997751][ T5239] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15835'. [ 928.009174][ T5236] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15835'. [ 928.024516][ T5244] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15835'. [ 929.112277][ T5277] __nla_validate_parse: 1 callbacks suppressed [ 929.112303][ T5277] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.15855'. [ 929.328555][ T5289] tap0: tun_chr_ioctl cmd 1074025677 [ 929.334797][ T5289] tap0: linktype set to 270 [ 929.384272][ T5294] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15861'. [ 929.404564][ T5294] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15861'. [ 929.414280][ T5291] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15861'. [ 929.452615][ T5296] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15861'. [ 929.987987][ T5317] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.15869'. [ 930.008421][ T5323] tap0: tun_chr_ioctl cmd 1074025677 [ 930.013981][ T5323] tap0: linktype set to 270 [ 930.294182][ T5330] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.15877'. [ 930.537375][ T5337] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15876'. [ 930.642510][ T5337] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15876'. [ 930.740292][ T5334] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15876'. [ 931.257730][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.264142][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.876328][ T5375] tap0: tun_chr_ioctl cmd 1074025677 [ 933.882004][ T5375] tap0: linktype set to 270 [ 934.038939][ T5381] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 934.055458][ T5381] pim6reg0: owner set to 1 [ 934.670296][ T5414] __nla_validate_parse: 3 callbacks suppressed [ 934.670318][ T5414] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15899'. [ 934.764882][ T5414] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15899'. [ 934.849134][ T5409] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15899'. [ 937.884069][ T5417] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15899'. [ 938.241311][ T5436] netlink: 'syz.4.15917': attribute type 10 has an invalid length. [ 938.291653][ T5436] device hsr_slave_0 entered promiscuous mode [ 938.298543][ T5436] team0: Port device hsr_slave_0 added [ 938.305306][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 938.722584][ T5457] tap0: tun_chr_ioctl cmd 1074025677 [ 938.728591][ T5457] tap0: linktype set to 780 [ 939.122354][ T5472] netlink: 148 bytes leftover after parsing attributes in process `syz.3.15936'. [ 940.187859][ T5511] netlink: 148 bytes leftover after parsing attributes in process `syz.4.15950'. [ 941.004071][ T5543] netlink: 148 bytes leftover after parsing attributes in process `syz.0.15962'. [ 941.863983][ T5572] tap0: tun_chr_ioctl cmd 1074025677 [ 941.870869][ T5572] tap0: linktype set to 780 [ 942.797549][ T5609] netlink: 'syz.0.15996': attribute type 10 has an invalid length. [ 942.852667][ T5609] team0: Port device hsr_slave_0 added [ 942.868684][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 943.947564][ T5643] netlink: 'syz.3.16011': attribute type 10 has an invalid length. [ 943.962923][ T5643] device hsr_slave_0 entered promiscuous mode [ 943.970859][ T5643] team0: Port device hsr_slave_0 added [ 943.978812][ T5638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 944.578827][ T4255] cgroup: fork rejected by pids controller in /syz4 [ 944.946368][ T5676] ================================================================== [ 944.954787][ T5676] BUG: KASAN: use-after-free in dev_map_enqueue+0x3c/0x340 [ 944.962633][ T5676] Read of size 8 at addr ffff888043a36200 by task syz.3.16022/5676 [ 944.970542][ T5676] [ 944.972970][ T5676] CPU: 1 PID: 5676 Comm: syz.3.16022 Not tainted 6.1.126-syzkaller #0 [ 944.981228][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 944.991565][ T5676] Call Trace: [ 944.994962][ T5676] [ 944.998350][ T5676] dump_stack_lvl+0x1e3/0x2cb [ 945.004101][ T5676] ? nf_tcp_handle_invalid+0x642/0x642 [ 945.009586][ T5676] ? panic+0x764/0x764 [ 945.013667][ T5676] ? _printk+0xd1/0x111 [ 945.017838][ T5676] ? __virt_addr_valid+0x17f/0x530 [ 945.023171][ T5676] ? __virt_addr_valid+0x17f/0x530 [ 945.028301][ T5676] print_report+0x15f/0x4f0 [ 945.032815][ T5676] ? __virt_addr_valid+0x17f/0x530 [ 945.037994][ T5676] ? __virt_addr_valid+0x17f/0x530 [ 945.043120][ T5676] ? __virt_addr_valid+0x45b/0x530 [ 945.048429][ T5676] ? __phys_addr+0xb6/0x170 [ 945.053053][ T5676] ? dev_map_enqueue+0x3c/0x340 [ 945.058106][ T5676] kasan_report+0x136/0x160 [ 945.062747][ T5676] ? dev_map_enqueue+0x3c/0x340 [ 945.067615][ T5676] dev_map_enqueue+0x3c/0x340 [ 945.072308][ T5676] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 945.078572][ T5676] xdp_do_redirect_frame+0x323/0x660 [ 945.083871][ T5676] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 945.089264][ T5676] ? wake_up_q+0x9f/0xd0 [ 945.093529][ T5676] ? __mutex_unlock_slowpath+0x6f6/0x750 [ 945.099307][ T5676] ? bpf_dispatcher_xdp+0x800/0x1000 [ 945.104601][ T5676] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 945.110245][ T5676] ? xdp_convert_md_to_buff+0x330/0x330 [ 945.115817][ T5676] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 945.121725][ T5676] ? bpf_dispatcher_xdp+0x800/0x1000 [ 945.127205][ T5676] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 945.133488][ T5676] ? bpf_prog_test_run_xdp+0x70a/0x1130 [ 945.139073][ T5676] ? bpf_prog_change_xdp+0xe/0x30 [ 945.144133][ T5676] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 945.149568][ T5676] ? dev_put+0x80/0x80 [ 945.153661][ T5676] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 945.160011][ T5676] ? lockdep_hardirqs_on+0x94/0x130 [ 945.165317][ T5676] ? dev_put+0x80/0x80 [ 945.169491][ T5676] bpf_prog_test_run+0x32f/0x3a0 [ 945.174456][ T5676] __sys_bpf+0x3eb/0x6c0 [ 945.178752][ T5676] ? bpf_link_show_fdinfo+0x300/0x300 [ 945.184235][ T5676] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 945.190461][ T5676] __x64_sys_bpf+0x78/0x90 [ 945.194951][ T5676] do_syscall_64+0x3b/0xb0 [ 945.199417][ T5676] ? clear_bhb_loop+0x45/0xa0 [ 945.204120][ T5676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 945.210087][ T5676] RIP: 0033:0x7f7e53d85d29 [ 945.214520][ T5676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.234143][ T5676] RSP: 002b:00007f7e54c2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 945.242773][ T5676] RAX: ffffffffffffffda RBX: 00007f7e53f76080 RCX: 00007f7e53d85d29 [ 945.250790][ T5676] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 945.258807][ T5676] RBP: 00007f7e53e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 945.266906][ T5676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 945.274922][ T5676] R13: 0000000000000000 R14: 00007f7e53f76080 R15: 00007ffc9c9daf28 [ 945.282932][ T5676] [ 945.285971][ T5676] [ 945.288332][ T5676] Allocated by task 5659: [ 945.292674][ T5676] kasan_set_track+0x4b/0x70 [ 945.297280][ T5676] __kasan_kmalloc+0x97/0xb0 [ 945.301886][ T5676] __kmalloc_node+0xb3/0x230 [ 945.306498][ T5676] bpf_map_kmalloc_node+0xce/0x1c0 [ 945.311648][ T5676] __dev_map_alloc_node+0x56/0x4d0 [ 945.316776][ T5676] dev_map_update_elem+0x1eb/0x3c0 [ 945.321911][ T5676] bpf_map_update_value+0x5cf/0x6f0 [ 945.327147][ T5676] map_update_elem+0x503/0x680 [ 945.331943][ T5676] __sys_bpf+0x337/0x6c0 [ 945.336206][ T5676] __x64_sys_bpf+0x78/0x90 [ 945.340697][ T5676] do_syscall_64+0x3b/0xb0 [ 945.345160][ T5676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 945.351068][ T5676] [ 945.353396][ T5676] Freed by task 5638: [ 945.357374][ T5676] kasan_set_track+0x4b/0x70 [ 945.361971][ T5676] kasan_save_free_info+0x27/0x40 [ 945.367200][ T5676] ____kasan_slab_free+0xd6/0x120 [ 945.372233][ T5676] __kmem_cache_free+0x25c/0x3c0 [ 945.377187][ T5676] dev_map_free+0x571/0x690 [ 945.381698][ T5676] process_one_work+0x8a9/0x11d0 [ 945.386657][ T5676] worker_thread+0xa47/0x1200 [ 945.391367][ T5676] kthread+0x28d/0x320 [ 945.395462][ T5676] ret_from_fork+0x1f/0x30 [ 945.399921][ T5676] [ 945.402263][ T5676] Last potentially related work creation: [ 945.407976][ T5676] kasan_save_stack+0x3b/0x60 [ 945.412670][ T5676] __kasan_record_aux_stack+0xb0/0xc0 [ 945.418154][ T5676] kvfree_call_rcu+0x116/0x8c0 [ 945.422930][ T5676] trie_update_elem+0x9be/0xdd0 [ 945.427822][ T5676] bpf_map_update_value+0x5cf/0x6f0 [ 945.433212][ T5676] generic_map_update_batch+0x579/0x920 [ 945.438803][ T5676] bpf_map_do_batch+0x4d0/0x620 [ 945.443856][ T5676] __sys_bpf+0x658/0x6c0 [ 945.448118][ T5676] __x64_sys_bpf+0x78/0x90 [ 945.452544][ T5676] do_syscall_64+0x3b/0xb0 [ 945.457078][ T5676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 945.463162][ T5676] [ 945.465498][ T5676] The buggy address belongs to the object at ffff888043a36200 [ 945.465498][ T5676] which belongs to the cache kmalloc-cg-96 of size 96 [ 945.479678][ T5676] The buggy address is located 0 bytes inside of [ 945.479678][ T5676] 96-byte region [ffff888043a36200, ffff888043a36260) [ 945.492877][ T5676] [ 945.495224][ T5676] The buggy address belongs to the physical page: [ 945.501649][ T5676] page:ffffea00010e8d80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x43a36 [ 945.511895][ T5676] memcg:ffff888076ff5001 [ 945.516308][ T5676] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 945.523905][ T5676] raw: 00fff00000000200 ffffea0000a48f40 dead000000000002 ffff888017c428c0 [ 945.532778][ T5676] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888076ff5001 [ 945.541465][ T5676] page dumped because: kasan: bad access detected [ 945.547955][ T5676] page_owner tracks the page as allocated [ 945.553777][ T5676] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112800(GFP_NOWAIT|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 3284, tgid 3283 (syz.0.14974), ts 866997598589, free_ts 866981153194 [ 945.573872][ T5676] post_alloc_hook+0x18d/0x1b0 [ 945.578915][ T5676] get_page_from_freelist+0x3731/0x38d0 [ 945.584490][ T5676] __alloc_pages+0x28d/0x770 [ 945.589806][ T5676] alloc_slab_page+0x6a/0x150 [ 945.594533][ T5676] new_slab+0x84/0x2d0 [ 945.598895][ T5676] ___slab_alloc+0xc20/0x1270 [ 945.603709][ T5676] __kmem_cache_alloc_node+0x19f/0x260 [ 945.609187][ T5676] __kmalloc_node+0xa2/0x230 [ 945.613900][ T5676] bpf_map_kmalloc_node+0xce/0x1c0 [ 945.619031][ T5676] trie_update_elem+0x176/0xdd0 [ 945.623997][ T5676] bpf_map_update_value+0x5cf/0x6f0 [ 945.629211][ T5676] generic_map_update_batch+0x579/0x920 [ 945.634867][ T5676] bpf_map_do_batch+0x4d0/0x620 [ 945.639737][ T5676] __sys_bpf+0x658/0x6c0 [ 945.644080][ T5676] __x64_sys_bpf+0x78/0x90 [ 945.648563][ T5676] do_syscall_64+0x3b/0xb0 [ 945.653020][ T5676] page last free stack trace: [ 945.657698][ T5676] free_unref_page_prepare+0x12a6/0x15b0 [ 945.663338][ T5676] free_unref_page+0x33/0x3e0 [ 945.668119][ T5676] tlb_finish_mmu+0x119/0x1f0 [ 945.672810][ T5676] exit_mmap+0x3b3/0x980 [ 945.677067][ T5676] __mmput+0x115/0x3c0 [ 945.681228][ T5676] exit_mm+0x226/0x300 [ 945.685311][ T5676] do_exit+0x9f1/0x26a0 [ 945.689483][ T5676] __x64_sys_exit+0x3c/0x40 [ 945.694007][ T5676] do_syscall_64+0x3b/0xb0 [ 945.698531][ T5676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 945.704446][ T5676] [ 945.706776][ T5676] Memory state around the buggy address: [ 945.712497][ T5676] ffff888043a36100: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 945.720749][ T5676] ffff888043a36180: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 945.728999][ T5676] >ffff888043a36200: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 945.737163][ T5676] ^ [ 945.741257][ T5676] ffff888043a36280: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 945.749784][ T5676] ffff888043a36300: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 945.758408][ T5676] ================================================================== [ 945.766980][ T5676] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 945.775363][ T5676] CPU: 1 PID: 5676 Comm: syz.3.16022 Not tainted 6.1.126-syzkaller #0 [ 945.784184][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 945.794477][ T5676] Call Trace: [ 945.797890][ T5676] [ 945.800879][ T5676] dump_stack_lvl+0x1e3/0x2cb [ 945.805632][ T5676] ? nf_tcp_handle_invalid+0x642/0x642 [ 945.811423][ T5676] ? panic+0x764/0x764 [ 945.815559][ T5676] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 945.821776][ T5676] ? vscnprintf+0x59/0x80 [ 945.826164][ T5676] panic+0x318/0x764 [ 945.830080][ T5676] ? check_panic_on_warn+0x1d/0xa0 [ 945.835554][ T5676] ? memcpy_page_flushcache+0xfc/0xfc [ 945.841157][ T5676] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 945.847340][ T5676] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 945.853378][ T5676] ? _raw_spin_unlock+0x40/0x40 [ 945.858503][ T5676] ? print_report+0x4a3/0x4f0 [ 945.863385][ T5676] check_panic_on_warn+0x7e/0xa0 [ 945.868352][ T5676] ? dev_map_enqueue+0x3c/0x340 [ 945.873356][ T5676] end_report+0x66/0x110 [ 945.878157][ T5676] kasan_report+0x143/0x160 [ 945.882767][ T5676] ? dev_map_enqueue+0x3c/0x340 [ 945.889567][ T5676] dev_map_enqueue+0x3c/0x340 [ 945.894446][ T5676] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 945.901366][ T5676] xdp_do_redirect_frame+0x323/0x660 [ 945.906954][ T5676] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 945.912844][ T5676] ? wake_up_q+0x9f/0xd0 [ 945.917296][ T5676] ? __mutex_unlock_slowpath+0x6f6/0x750 [ 945.922985][ T5676] ? bpf_dispatcher_xdp+0x800/0x1000 [ 945.928747][ T5676] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 945.934602][ T5676] ? xdp_convert_md_to_buff+0x330/0x330 [ 945.940263][ T5676] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 945.946707][ T5676] ? bpf_dispatcher_xdp+0x800/0x1000 [ 945.952111][ T5676] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 945.958911][ T5676] ? bpf_prog_test_run_xdp+0x70a/0x1130 [ 945.964561][ T5676] ? bpf_prog_change_xdp+0xe/0x30 [ 945.969718][ T5676] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 945.975465][ T5676] ? dev_put+0x80/0x80 [ 945.979571][ T5676] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 945.985763][ T5676] ? lockdep_hardirqs_on+0x94/0x130 [ 945.991072][ T5676] ? dev_put+0x80/0x80 [ 945.995254][ T5676] bpf_prog_test_run+0x32f/0x3a0 [ 946.000427][ T5676] __sys_bpf+0x3eb/0x6c0 [ 946.004714][ T5676] ? bpf_link_show_fdinfo+0x300/0x300 [ 946.010146][ T5676] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 946.016365][ T5676] __x64_sys_bpf+0x78/0x90 [ 946.020827][ T5676] do_syscall_64+0x3b/0xb0 [ 946.025369][ T5676] ? clear_bhb_loop+0x45/0xa0 [ 946.030242][ T5676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 946.036432][ T5676] RIP: 0033:0x7f7e53d85d29 [ 946.040958][ T5676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 946.061299][ T5676] RSP: 002b:00007f7e54c2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 946.070176][ T5676] RAX: ffffffffffffffda RBX: 00007f7e53f76080 RCX: 00007f7e53d85d29 [ 946.078444][ T5676] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 946.086437][ T5676] RBP: 00007f7e53e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 946.094681][ T5676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.102690][ T5676] R13: 0000000000000000 R14: 00007f7e53f76080 R15: 00007ffc9c9daf28 [ 946.110893][ T5676] [ 946.114353][ T5676] Kernel Offset: disabled [ 946.118823][ T5676] Rebooting in 86400 seconds..