last executing test programs: 1.028897675s ago: executing program 2 (id=5699): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 932.844572ms ago: executing program 2 (id=5704): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2}}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a"], 0xfe33) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a"], 0xfe33) 863.448017ms ago: executing program 3 (id=5709): perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="00290a80e5893f6a", 0x8}], 0x1, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}], 0x38}, 0x4) 768.433994ms ago: executing program 4 (id=5712): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600d001141090005000400000037153e370248038000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 753.293485ms ago: executing program 3 (id=5714): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x17, 0x1}, 0x20) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 740.482126ms ago: executing program 2 (id=5715): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008204ce0050000000000008877fbacfe1416e000030a83029f03b18000070c0511e0845013f2325f000709050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 639.192073ms ago: executing program 3 (id=5716): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 634.355324ms ago: executing program 0 (id=5727): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r0) 599.689946ms ago: executing program 4 (id=5717): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000040)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 545.35543ms ago: executing program 0 (id=5720): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="060000000f0a"}) 544.51596ms ago: executing program 2 (id=5721): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 532.903421ms ago: executing program 3 (id=5722): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='E'], 0x31) 492.366024ms ago: executing program 1 (id=5723): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x84}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 458.681077ms ago: executing program 3 (id=5724): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:23'], 0xa) 452.425317ms ago: executing program 0 (id=5725): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x90) r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000007c0)=""/97, 0x61}], 0x1}, 0x0) 412.02352ms ago: executing program 4 (id=5726): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000040)={r0, &(0x7f0000000600)="b9bee7ce2059093abb47"}, 0x20) 380.204022ms ago: executing program 0 (id=5728): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0xac, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 372.010323ms ago: executing program 3 (id=5729): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/131, 0x83}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 346.451945ms ago: executing program 1 (id=5730): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006babda3fe3d86e17aa0a046b5a6c1d0048007ea60864160af36504001a003800317c39aa50c82c2b76111d001931a0e69ee517d34460bca705251e6182949a3651f60a84c9f4218e13fbb277ff2fd31be8d0c2db330b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)=""/213, 0xd5}, {&(0x7f0000000ec0)=""/252, 0xfc}, {&(0x7f0000002140)=""/4058, 0xfda}, {&(0x7f0000001080)=""/235, 0xeb}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f00000007c0)=""/190, 0xbe}, {&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000e40)=""/21, 0x15}, {&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000fc0)=""/183, 0xb7}, {&(0x7f0000000c00)=""/155, 0x9b}, {&(0x7f0000000880)=""/64, 0x40}, {&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000000cc0)=""/59, 0x3b}, {&(0x7f00000013c0)=""/245, 0xf5}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000001200)=""/228, 0xe4}], 0x11}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 343.793705ms ago: executing program 2 (id=5731): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 308.600428ms ago: executing program 4 (id=5732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) 251.742222ms ago: executing program 1 (id=5733): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r1, 0x1}, 0xc) 251.516232ms ago: executing program 0 (id=5734): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) close(r1) 217.853894ms ago: executing program 1 (id=5735): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f10", 0x8}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc2497", 0x2b}], 0x2}, 0x4000000) 198.598416ms ago: executing program 4 (id=5736): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2e}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000000), 0x0}, 0x20) 59.682545ms ago: executing program 1 (id=5737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) gettid() openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) 59.466116ms ago: executing program 4 (id=5738): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e39dc4509df33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 59.374395ms ago: executing program 2 (id=5739): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'virt_wifi0\x00', @random="0e0000200200"}) 43.978937ms ago: executing program 0 (id=5740): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 0s ago: executing program 1 (id=5741): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) kernel console output (not intermixed with test programs): : ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.240462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.261197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.270286][ T3610] Bluetooth: hci1: command 0x040f tx timeout [ 50.282560][ T3610] Bluetooth: hci2: command 0x040f tx timeout [ 50.293362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.302394][ T3610] Bluetooth: hci3: command 0x040f tx timeout [ 50.308479][ T3610] Bluetooth: hci0: command 0x040f tx timeout [ 50.325210][ T3582] device veth0_macvtap entered promiscuous mode [ 50.340704][ T3582] device veth1_macvtap entered promiscuous mode [ 50.350386][ T3612] Bluetooth: hci4: command 0x040f tx timeout [ 50.372553][ T2646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.385383][ T3582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.414393][ T2646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.442260][ T3582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.463910][ T3582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.476271][ T3582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.492244][ T3582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.507121][ T3582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.517621][ T3582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.528556][ T3582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.542829][ T3582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.571293][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.597879][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.619104][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.656633][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.665755][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.688680][ T3582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.703974][ T3582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.731017][ T3582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.742388][ T3582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.768593][ T3582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.779422][ T3582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.791552][ T3582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.802592][ T3582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.814447][ T3582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.847306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.870065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.881949][ T3582] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.892101][ T3582] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.901505][ T3582] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.911917][ T3582] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.946112][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.986650][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.033449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.087900][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.116238][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.168333][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.186193][ T2646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.213687][ T2646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.231607][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.382124][ T3688] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.21'. [ 51.417740][ T3688] netlink: zone id is out of range [ 51.431649][ T3688] netlink: zone id is out of range [ 51.508175][ T3688] netlink: del zone limit has 4 unknown bytes [ 51.570525][ C0] hrtimer: interrupt took 61084 ns [ 51.740347][ T3707] syz.3.30 (3707) used obsolete PPPIOCDETACH ioctl [ 51.802504][ T3714] netlink: 'syz.0.32': attribute type 3 has an invalid length. [ 51.824970][ T3714] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.32'. [ 52.349955][ T3570] Bluetooth: hci0: command 0x0419 tx timeout [ 52.359039][ T3570] Bluetooth: hci3: command 0x0419 tx timeout [ 52.394838][ T3570] Bluetooth: hci2: command 0x0419 tx timeout [ 52.434744][ T3570] Bluetooth: hci1: command 0x0419 tx timeout [ 52.454636][ T3570] Bluetooth: hci4: command 0x0419 tx timeout [ 52.520095][ T3732] netlink: 'syz.1.40': attribute type 21 has an invalid length. [ 52.527868][ T3732] netlink: 'syz.1.40': attribute type 3 has an invalid length. [ 52.574152][ T3736] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.42'. [ 52.621865][ T3732] netlink: 144 bytes leftover after parsing attributes in process `syz.1.40'. [ 52.800421][ T3752] netlink: 'syz.3.49': attribute type 1 has an invalid length. [ 52.828106][ T3752] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.49'. [ 53.370520][ T3786] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 53.398296][ T3786] netlink: 5 bytes leftover after parsing attributes in process `syz.0.64'. [ 53.732622][ T3805] netlink: 'syz.0.74': attribute type 3 has an invalid length. [ 53.765831][ T3805] netlink: 132 bytes leftover after parsing attributes in process `syz.0.74'. [ 53.804909][ T3809] netlink: 'syz.2.77': attribute type 5 has an invalid length. [ 53.828330][ T3809] netlink: 156 bytes leftover after parsing attributes in process `syz.2.77'. [ 53.938466][ T3816] netlink: 'syz.2.81': attribute type 1 has an invalid length. [ 54.034208][ T3816] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.81'. [ 54.225979][ T3841] netlink: 'syz.1.91': attribute type 3 has an invalid length. [ 54.247396][ T3841] netlink: 'syz.1.91': attribute type 1 has an invalid length. [ 54.256323][ T3841] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.91'. [ 54.735626][ T3883] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 56.611054][ T4036] __nla_validate_parse: 9 callbacks suppressed [ 56.611071][ T4036] netlink: 763 bytes leftover after parsing attributes in process `syz.1.186'. [ 57.117695][ T3028] udevd[3028]: worker [3681] terminated by signal 33 (Unknown signal 33) [ 57.143050][ T4067] validate_nla: 9 callbacks suppressed [ 57.143068][ T4067] netlink: 'syz.0.199': attribute type 21 has an invalid length. [ 57.167782][ T3028] udevd[3028]: worker [3681] failed while handling '/devices/virtual/block/loop4' [ 57.241853][ T4070] netlink: 'syz.4.200': attribute type 1 has an invalid length. [ 57.271352][ T4070] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.200'. [ 57.585594][ T4100] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.214'. [ 57.949909][ T4124] netlink: 'syz.4.225': attribute type 21 has an invalid length. [ 58.948223][ T4142] netlink: 'syz.4.234': attribute type 3 has an invalid length. [ 59.009096][ T4142] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.234'. [ 59.134820][ T4154] netlink: 'syz.2.238': attribute type 11 has an invalid length. [ 59.185761][ T4154] netlink: 140 bytes leftover after parsing attributes in process `syz.2.238'. [ 59.327724][ T4166] netlink: 'syz.1.246': attribute type 21 has an invalid length. [ 59.369548][ T4166] netlink: 156 bytes leftover after parsing attributes in process `syz.1.246'. [ 59.697455][ T4192] netlink: 'syz.2.258': attribute type 11 has an invalid length. [ 59.732106][ T4192] netlink: 140 bytes leftover after parsing attributes in process `syz.2.258'. [ 59.821683][ T4198] netlink: 'syz.4.261': attribute type 3 has an invalid length. [ 59.913596][ T4204] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.264'. [ 60.170086][ T4218] Dead loop on virtual device ip6_vti0, fix it urgently! [ 60.432017][ T4234] syz.4.279 uses obsolete (PF_INET,SOCK_PACKET) [ 60.449718][ T4237] netlink: 4093 bytes leftover after parsing attributes in process `syz.0.280'. [ 60.773829][ T4257] netlink: 'syz.2.289': attribute type 3 has an invalid length. [ 60.806817][ T4257] netlink: 132 bytes leftover after parsing attributes in process `syz.2.289'. [ 60.831143][ T4262] netlink: 'syz.0.293': attribute type 2 has an invalid length. [ 61.904132][ T4284] team0 (unregistering): Port device team_slave_0 removed [ 61.935496][ T4284] team0 (unregistering): Port device team_slave_1 removed [ 62.440647][ T4322] __nla_validate_parse: 1 callbacks suppressed [ 62.440663][ T4322] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.319'. [ 62.992537][ T4348] netlink: 144 bytes leftover after parsing attributes in process `syz.2.333'. [ 63.694152][ T4375] validate_nla: 2 callbacks suppressed [ 63.694167][ T4375] netlink: 'syz.1.346': attribute type 21 has an invalid length. [ 63.729595][ T4375] netlink: 'syz.1.346': attribute type 1 has an invalid length. [ 64.014038][ T4384] netlink: 76 bytes leftover after parsing attributes in process `syz.2.350'. [ 64.174148][ T4388] netlink: 132 bytes leftover after parsing attributes in process `syz.2.352'. [ 64.485735][ T4409] netlink: 'syz.2.362': attribute type 11 has an invalid length. [ 64.549420][ T4409] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.362'. [ 64.602906][ T4408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.871760][ T4436] netlink: 'syz.4.376': attribute type 1 has an invalid length. [ 64.889546][ T4436] netlink: 5 bytes leftover after parsing attributes in process `syz.4.376'. [ 65.017801][ T4445] netlink: 'syz.3.380': attribute type 21 has an invalid length. [ 65.049851][ T4445] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.380'. [ 65.287919][ T4461] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.387'. [ 65.325472][ T4461] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.387'. [ 65.354441][ T4467] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.387'. [ 65.675323][ C1] eth0: bad gso: type: 1, size: 1408 [ 66.001882][ T4514] netlink: 'syz.0.413': attribute type 29 has an invalid length. [ 66.052401][ T4514] netlink: 'syz.0.413': attribute type 29 has an invalid length. [ 66.096851][ T4516] netlink: 'syz.0.413': attribute type 29 has an invalid length. [ 67.838447][ T4631] netlink: 'syz.1.470': attribute type 7 has an invalid length. [ 68.191459][ T4665] netlink: 'syz.0.486': attribute type 3 has an invalid length. [ 68.226050][ T4665] __nla_validate_parse: 2 callbacks suppressed [ 68.226064][ T4665] netlink: 132 bytes leftover after parsing attributes in process `syz.0.486'. [ 68.238210][ T4669] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.498'. [ 68.480215][ T4686] netlink: 'syz.4.494': attribute type 2 has an invalid length. [ 68.487885][ T4686] netlink: 132 bytes leftover after parsing attributes in process `syz.4.494'. [ 68.700566][ T4705] validate_nla: 1 callbacks suppressed [ 68.700581][ T4705] netlink: 'syz.2.505': attribute type 3 has an invalid length. [ 68.718063][ T4707] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.506'. [ 68.723009][ T4706] netlink: 'syz.1.507': attribute type 29 has an invalid length. [ 68.759360][ T4705] netlink: 132 bytes leftover after parsing attributes in process `syz.2.505'. [ 68.773170][ T4706] netlink: 'syz.1.507': attribute type 29 has an invalid length. [ 68.800627][ T4709] netlink: 'syz.1.507': attribute type 29 has an invalid length. [ 69.017154][ T4727] netlink: 'syz.2.517': attribute type 29 has an invalid length. [ 69.025540][ T4727] netlink: 'syz.2.517': attribute type 29 has an invalid length. [ 69.081214][ T4727] netlink: 'syz.2.517': attribute type 29 has an invalid length. [ 69.204854][ T4742] netlink: 'syz.0.524': attribute type 29 has an invalid length. [ 69.229973][ T4742] netlink: 'syz.0.524': attribute type 29 has an invalid length. [ 69.253584][ T4747] netlink: 'syz.0.524': attribute type 29 has an invalid length. [ 69.558557][ T4774] netlink: 144 bytes leftover after parsing attributes in process `syz.1.534'. [ 69.989220][ T4806] netlink: 144 bytes leftover after parsing attributes in process `syz.2.554'. [ 70.451256][ T4841] netlink: 132 bytes leftover after parsing attributes in process `syz.4.572'. [ 70.849625][ T4871] netlink: 40 bytes leftover after parsing attributes in process `syz.4.585'. [ 71.153356][ T1386] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.159903][ T1386] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.338902][ T4910] netlink: 5 bytes leftover after parsing attributes in process `syz.3.603'. [ 74.220725][ T4998] validate_nla: 3 callbacks suppressed [ 74.220772][ T4998] netlink: 'syz.3.647': attribute type 10 has an invalid length. [ 74.644253][ T4998] team0 (unregistering): Port device team_slave_0 removed [ 74.683689][ T4998] team0 (unregistering): Port device team_slave_1 removed [ 74.784053][ T5006] netlink: 'syz.2.650': attribute type 3 has an invalid length. [ 74.796702][ T5006] __nla_validate_parse: 1 callbacks suppressed [ 74.796716][ T5006] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.650'. [ 74.947050][ T5017] netlink: 'syz.0.666': attribute type 3 has an invalid length. [ 74.980791][ T5017] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.666'. [ 75.223416][ T3028] udevd[3028]: worker [3682] terminated by signal 33 (Unknown signal 33) [ 75.258075][ T3028] udevd[3028]: worker [3682] failed while handling '/devices/virtual/block/loop0' [ 75.659920][ T5047] netlink: 'syz.0.670': attribute type 3 has an invalid length. [ 75.667593][ T5047] netlink: 132 bytes leftover after parsing attributes in process `syz.0.670'. [ 75.701010][ T5051] netlink: 'syz.1.668': attribute type 10 has an invalid length. [ 75.908793][ T5051] team0 (unregistering): Port device team_slave_0 removed [ 76.102281][ T5051] team0 (unregistering): Port device team_slave_1 removed [ 76.273094][ T26] cfg80211: failed to load regulatory.db [ 77.450247][ T5093] netlink: 'syz.2.691': attribute type 10 has an invalid length. [ 77.655418][ T5093] team0 (unregistering): Port device team_slave_0 removed [ 77.723848][ T5093] team0 (unregistering): Port device team_slave_1 removed [ 78.264085][ T5121] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.703'. [ 78.312195][ T5118] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.701'. [ 78.385889][ T5126] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.416142][ T5118] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.701'. [ 78.528655][ T5132] netlink: 'syz.4.708': attribute type 10 has an invalid length. [ 78.948515][ T5132] team0 (unregistering): Port device team_slave_0 removed [ 79.056907][ T5132] team0 (unregistering): Port device team_slave_1 removed [ 79.575615][ T5159] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.719'. [ 79.606449][ T5158] netlink: 'syz.4.731': attribute type 10 has an invalid length. [ 79.748462][ T5168] netlink: 'syz.4.725': attribute type 3 has an invalid length. [ 79.763245][ T5168] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.725'. [ 79.884609][ T5177] netlink: 'syz.3.729': attribute type 1 has an invalid length. [ 79.971773][ T5177] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.729'. [ 80.356593][ T5191] netlink: 'syz.0.738': attribute type 10 has an invalid length. [ 80.367885][ T5190] netlink: 'syz.2.736': attribute type 3 has an invalid length. [ 80.408950][ T5190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.736'. [ 80.558607][ T5199] netlink: 'syz.0.743': attribute type 3 has an invalid length. [ 80.584225][ T5199] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.743'. [ 80.840609][ T5212] netlink: 'syz.1.746': attribute type 1 has an invalid length. [ 80.848273][ T5212] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.746'. [ 81.555414][ T5215] netlink: 'syz.4.751': attribute type 10 has an invalid length. [ 81.677316][ T5224] netlink: 'syz.3.752': attribute type 21 has an invalid length. [ 81.693325][ T5224] netlink: 'syz.3.752': attribute type 3 has an invalid length. [ 81.707442][ T5224] netlink: 144 bytes leftover after parsing attributes in process `syz.3.752'. [ 81.754393][ T5228] netlink: 152 bytes leftover after parsing attributes in process `syz.2.765'. [ 82.772218][ T5246] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.775'. [ 82.851171][ T5255] netlink: 144 bytes leftover after parsing attributes in process `syz.0.769'. [ 83.188740][ T5280] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.782'. [ 83.548046][ T5306] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.795'. [ 84.507664][ T5373] netlink: del zone limit has 4 unknown bytes [ 84.625121][ T5377] validate_nla: 7 callbacks suppressed [ 84.625166][ T5377] netlink: 'syz.1.827': attribute type 10 has an invalid length. [ 85.072099][ T5404] __nla_validate_parse: 5 callbacks suppressed [ 85.072114][ T5404] netlink: 164320 bytes leftover after parsing attributes in process `syz.4.839'. [ 85.087900][ T5404] netlink: del zone limit has 4 unknown bytes [ 85.450342][ T5435] netlink: 164320 bytes leftover after parsing attributes in process `syz.2.854'. [ 85.468214][ T5432] netlink: 'syz.4.855': attribute type 4 has an invalid length. [ 85.480397][ T5435] netlink: del zone limit has 4 unknown bytes [ 85.688590][ T5450] netlink: 35347 bytes leftover after parsing attributes in process `syz.3.862'. [ 85.706616][ T5452] netlink: 'syz.1.864': attribute type 10 has an invalid length. [ 85.903870][ T5471] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.871'. [ 86.634975][ T5509] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.899'. [ 86.717386][ T5513] netlink: 'syz.2.890': attribute type 29 has an invalid length. [ 86.742148][ T5513] netlink: 'syz.2.890': attribute type 29 has an invalid length. [ 87.105601][ T5541] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.904'. [ 87.110187][ T5543] netlink: 'syz.2.914': attribute type 1 has an invalid length. [ 87.157905][ T5543] netlink: 131752 bytes leftover after parsing attributes in process `syz.2.914'. [ 87.343664][ T5551] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.906'. [ 88.010819][ T5578] netlink: 'syz.4.919': attribute type 21 has an invalid length. [ 88.018790][ T5578] netlink: 'syz.4.919': attribute type 1 has an invalid length. [ 88.546119][ T5614] netlink: 'syz.2.936': attribute type 2 has an invalid length. [ 88.565788][ T5617] netlink: 'syz.1.938': attribute type 21 has an invalid length. [ 88.579424][ T5614] netlink: 132 bytes leftover after parsing attributes in process `syz.2.936'. [ 89.028910][ T5647] netlink: 132 bytes leftover after parsing attributes in process `syz.3.951'. [ 90.663608][ T5737] validate_nla: 4 callbacks suppressed [ 90.663624][ T5737] netlink: 'syz.4.993': attribute type 13 has an invalid length. [ 90.686043][ T5737] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.993'. [ 91.044506][ T5755] netlink: 'syz.1.1002': attribute type 32 has an invalid length. [ 91.135118][ T5757] netlink: 'syz.1.1005': attribute type 1 has an invalid length. [ 91.143114][ T5757] netlink: 131752 bytes leftover after parsing attributes in process `syz.1.1005'. [ 91.743164][ T5786] netlink: 'syz.3.1016': attribute type 32 has an invalid length. [ 92.080778][ T5807] netlink: 'syz.3.1026': attribute type 13 has an invalid length. [ 92.129033][ T5807] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1026'. [ 93.185000][ T5858] netlink: 'syz.2.1052': attribute type 16 has an invalid length. [ 93.193042][ T5858] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1052'. [ 93.593512][ T5887] netlink: 'syz.1.1065': attribute type 16 has an invalid length. [ 93.631992][ T5887] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1065'. [ 94.520968][ T5934] delete_channel: no stack [ 94.525920][ T5934] delete_channel: no stack [ 95.112296][ T5967] tap0: tun_chr_ioctl cmd 1074025673 [ 95.122150][ T5970] delete_channel: no stack [ 95.126824][ T5970] delete_channel: no stack [ 95.665359][ T6000] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1124'. [ 95.794388][ T6012] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1128'. [ 96.094149][ C1] eth0: bad gso: type: 1, size: 1408 [ 96.388301][ T6044] tap0: tun_chr_ioctl cmd 2147767517 [ 96.434541][ T6046] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1143'. [ 96.660625][ T6051] netlink: 'syz.3.1147': attribute type 2 has an invalid length. [ 96.710705][ T6051] netlink: 'syz.3.1147': attribute type 1 has an invalid length. [ 97.565354][ T6118] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1177'. [ 97.607762][ T6118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.792890][ T6128] tun0: tun_chr_ioctl cmd 1074025677 [ 97.798372][ T6128] tun0: linktype set to 1 [ 97.828927][ T6131] netlink: 'syz.2.1183': attribute type 2 has an invalid length. [ 97.838081][ T6131] netlink: 'syz.2.1183': attribute type 1 has an invalid length. [ 98.031022][ T6149] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1194'. [ 98.098332][ T6149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.334513][ T6170] tun0: tun_chr_ioctl cmd 1074025677 [ 98.357670][ T6170] tun0: linktype set to 1 [ 98.524750][ T6190] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1213'. [ 98.554529][ T6190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.677061][ T6196] netlink: 'syz.4.1218': attribute type 3 has an invalid length. [ 98.685638][ T6196] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1218'. [ 98.763545][ T6200] tap0: tun_chr_ioctl cmd 1074812118 [ 99.194697][ T6232] tun0: tun_chr_ioctl cmd 1074025677 [ 99.212864][ T6232] tun0: linktype set to 1 [ 99.320382][ T6242] netlink: 'syz.2.1241': attribute type 6 has an invalid length. [ 99.341101][ T6242] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1241'. [ 99.371833][ T6249] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1242'. [ 99.390051][ T6249] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1242'. [ 99.575952][ T6258] tap0: tun_chr_ioctl cmd 1074812118 [ 99.611612][ T6259] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1249'. [ 99.877609][ T6284] netlink: 'syz.0.1260': attribute type 3 has an invalid length. [ 101.072743][ T6312] __nla_validate_parse: 5 callbacks suppressed [ 101.072759][ T6312] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1276'. [ 101.156610][ T6312] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1276'. [ 101.577347][ T6358] netlink: 'syz.3.1296': attribute type 27 has an invalid length. [ 101.626779][ T6358] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1296'. [ 101.667676][ T6362] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1308'. [ 103.441767][ T6436] netlink: 'syz.3.1332': attribute type 6 has an invalid length. [ 103.487707][ T6436] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1332'. [ 104.763296][ C1] eth0: bad gso: type: 1, size: 1408 [ 105.119595][ T6560] netlink: 'syz.4.1391': attribute type 10 has an invalid length. [ 105.159503][ T6560] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1391'. [ 105.196766][ T6560] batman_adv: batadv0: Adding interface: vlan1 [ 105.203446][ T6560] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.239666][ T6560] batman_adv: batadv0: Interface activated: vlan1 [ 105.326697][ T6572] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1395'. [ 105.883940][ T6572] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 105.910741][ C1] eth0: bad gso: type: 1, size: 1408 [ 105.959142][ T6572] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 106.430198][ T6618] netlink: 'syz.2.1418': attribute type 10 has an invalid length. [ 106.467928][ T6618] device hsr0 entered promiscuous mode [ 106.504945][ T6618] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 106.525252][ T6618] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 106.538112][ T6618] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 106.556516][ T6618] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 106.563898][ T6620] netlink: 'syz.2.1418': attribute type 10 has an invalid length. [ 106.582347][ T6620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.596480][ T6620] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 107.208334][ T6640] netlink: 'syz.1.1427': attribute type 9 has an invalid length. [ 107.219922][ T6640] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1427'. [ 107.295823][ C1] eth0: bad gso: type: 1, size: 1408 [ 107.299548][ T6648] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1431'. [ 107.302343][ C1] eth0: bad gso: type: 1, size: 1408 [ 110.483000][ T6685] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1445'. [ 110.806329][ T6703] netlink: 'syz.0.1456': attribute type 10 has an invalid length. [ 110.845038][ T6703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1456'. [ 110.877229][ T6703] batman_adv: batadv0: Adding interface: vlan1 [ 110.893717][ T6703] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.966423][ T6703] batman_adv: batadv0: Interface activated: vlan1 [ 111.356634][ T6716] netlink: 'syz.0.1471': attribute type 9 has an invalid length. [ 111.386972][ T6716] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1471'. [ 111.500205][ T6722] netlink: 'syz.2.1463': attribute type 2 has an invalid length. [ 111.531103][ T6722] netlink: 'syz.2.1463': attribute type 4 has an invalid length. [ 111.578873][ T6728] netlink: 'syz.4.1478': attribute type 2 has an invalid length. [ 111.606978][ T6728] netlink: 'syz.4.1478': attribute type 6 has an invalid length. [ 111.878169][ T6748] tap0: tun_chr_ioctl cmd 1074025677 [ 111.885132][ T6748] tap0: linktype set to 774 [ 111.958403][ T6751] netlink: 'syz.3.1477': attribute type 9 has an invalid length. [ 111.972469][ T6751] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1477'. [ 112.045135][ T6756] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1482'. [ 112.384687][ T6778] netlink: 'syz.1.1492': attribute type 2 has an invalid length. [ 112.407173][ T6778] netlink: 'syz.1.1492': attribute type 8 has an invalid length. [ 112.442970][ T6778] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1492'. [ 112.587278][ T6791] netpci0: tun_chr_ioctl cmd 1074025677 [ 112.593896][ T6791] netpci0: linktype set to 825 [ 112.609627][ T6792] netlink: 'syz.4.1499': attribute type 2 has an invalid length. [ 112.823574][ T6808] tap0: tun_chr_ioctl cmd 1074025677 [ 112.849555][ T6808] tap0: linktype set to 774 [ 112.869141][ T6812] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1507'. [ 112.974758][ T6816] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1508'. [ 113.097095][ T6821] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1510'. [ 113.173505][ T6830] netpci0: tun_chr_ioctl cmd 1074025677 [ 113.196928][ T6830] netpci0: linktype set to 825 [ 113.821761][ T6864] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1529'. [ 114.005689][ T6876] netpci0: tun_chr_ioctl cmd 1074025677 [ 114.017348][ T6876] netpci0: linktype set to 825 [ 114.189705][ T6885] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1541'. [ 114.237047][ T6889] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1543'. [ 114.370300][ T6900] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1547'. [ 114.701833][ T6916] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.1556'. [ 115.149037][ T6942] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1568'. [ 115.664968][ T6981] tap0: tun_chr_ioctl cmd 1074025677 [ 115.706657][ T6981] tap0: linktype set to 270 [ 115.811064][ T6993] validate_nla: 16 callbacks suppressed [ 115.811080][ T6993] netlink: 'syz.3.1592': attribute type 2 has an invalid length. [ 116.386277][ T7035] nicvf0: tun_chr_ioctl cmd 35111 [ 116.533100][ T7045] tun0: tun_chr_ioctl cmd 1074025694 [ 116.828126][ T7069] netlink: 'syz.2.1628': attribute type 21 has an invalid length. [ 117.293565][ T7110] netlink: 'syz.0.1648': attribute type 12 has an invalid length. [ 117.625695][ T7137] netlink: 'syz.4.1661': attribute type 2 has an invalid length. [ 117.665844][ T7137] __nla_validate_parse: 10 callbacks suppressed [ 117.665990][ T7137] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1661'. [ 118.400009][ T7165] netlink: 'syz.0.1672': attribute type 21 has an invalid length. [ 118.429600][ T7167] netlink: 'syz.1.1674': attribute type 21 has an invalid length. [ 118.564812][ T7177] netlink: 'syz.1.1679': attribute type 1 has an invalid length. [ 118.607605][ T7177] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1679'. [ 118.839896][ T7189] Zero length message leads to an empty skb [ 119.075287][ T7212] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1696'. [ 119.140570][ T7218] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1699'. [ 119.281523][ T7232] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1705'. [ 119.934742][ T7283] netlink: 'syz.0.1728': attribute type 10 has an invalid length. [ 119.947701][ T7283] netlink: 'syz.0.1728': attribute type 4 has an invalid length. [ 119.958201][ T7283] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1728'. [ 119.993244][ T7283] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 120.044662][ T7287] netlink: 'syz.2.1731': attribute type 21 has an invalid length. [ 120.065299][ T7287] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1731'. [ 120.568614][ T7330] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1751'. [ 120.618804][ T7333] netlink: 4019 bytes leftover after parsing attributes in process `syz.1.1753'. [ 120.685424][ T7339] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1756'. [ 121.008107][ T7368] syz.4.1769[7368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.008208][ T7368] syz.4.1769[7368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.039430][ T7376] validate_nla: 3 callbacks suppressed [ 121.039444][ T7376] netlink: 'syz.2.1772': attribute type 10 has an invalid length. [ 121.096790][ T7374] netlink: 'syz.3.1771': attribute type 1 has an invalid length. [ 121.116539][ T7380] netlink: 'syz.0.1774': attribute type 1 has an invalid length. [ 121.132205][ T7382] netlink: 'syz.2.1772': attribute type 10 has an invalid length. [ 121.340576][ T7398] netlink: zone id is out of range [ 121.345728][ T7398] netlink: zone id is out of range [ 121.377939][ T7398] netlink: del zone limit has 4 unknown bytes [ 121.463933][ T7408] tap0: tun_chr_ioctl cmd 2148553947 [ 121.582847][ T7414] netlink: 'syz.3.1791': attribute type 3 has an invalid length. [ 121.839666][ T7437] tun0: tun_chr_ioctl cmd 1074025688 [ 122.380039][ T7478] pim6reg0: tun_chr_ioctl cmd 1074025678 [ 122.407210][ T7478] pim6reg0: group set to 0 [ 125.539114][ T7499] tap0: tun_chr_ioctl cmd 21731 [ 125.616638][ T7506] tun0: tun_chr_ioctl cmd 2147767507 [ 125.671864][ T7508] netlink: 'syz.1.1835': attribute type 1 has an invalid length. [ 126.057588][ T7524] netlink: 'syz.3.1842': attribute type 2 has an invalid length. [ 126.092918][ T7524] netlink: 'syz.3.1842': attribute type 8 has an invalid length. [ 126.108721][ T7524] __nla_validate_parse: 7 callbacks suppressed [ 126.108736][ T7524] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1842'. [ 126.204957][ T7529] tap0: tun_chr_ioctl cmd 1074025677 [ 126.229480][ T7529] tap0: linktype set to 774 [ 126.559156][ T7562] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1859'. [ 126.606544][ T7562] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1859'. [ 126.643908][ T7571] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1859'. [ 126.674389][ T7564] tun0: tun_chr_ioctl cmd 2148553947 [ 126.692704][ T7562] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1859'. [ 126.856602][ T7584] netlink: 'syz.0.1871': attribute type 1 has an invalid length. [ 127.165920][ T7600] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1879'. [ 127.183831][ T7600] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1879'. [ 127.251082][ T7605] netlink: 'syz.4.1881': attribute type 11 has an invalid length. [ 127.278945][ T7605] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.1881'. [ 127.347352][ T7616] netlink: 'syz.1.1884': attribute type 27 has an invalid length. [ 127.379426][ T7616] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.1884'. [ 127.567454][ T7630] netlink: 'syz.2.1890': attribute type 3 has an invalid length. [ 127.576654][ T7630] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1890'. [ 128.125900][ T7656] netlink: 'syz.2.1902': attribute type 12 has an invalid length. [ 128.452338][ T7674] netlink: 'syz.3.1912': attribute type 1 has an invalid length. [ 128.860908][ T7700] netlink: 'syz.1.1924': attribute type 21 has an invalid length. [ 130.400457][ T7810] netlink: 'syz.0.1975': attribute type 29 has an invalid length. [ 130.429707][ T7810] netlink: 'syz.0.1975': attribute type 29 has an invalid length. [ 130.595992][ T7821] rose0: tun_chr_ioctl cmd 1074812117 [ 130.947527][ T7849] tc_dump_action: action bad kind [ 131.012012][ T7852] IPv6: Can't replace route, no match found [ 132.599676][ T1386] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.605964][ T1386] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.500899][ T7910] validate_nla: 2 callbacks suppressed [ 134.500916][ T7910] netlink: 'syz.4.2022': attribute type 3 has an invalid length. [ 134.539715][ T7910] __nla_validate_parse: 10 callbacks suppressed [ 134.539729][ T7910] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2022'. [ 134.956568][ T7936] Â: renamed from pim6reg1 [ 135.007049][ T7945] tap0: tun_chr_ioctl cmd 1074025677 [ 135.020079][ T7945] tap0: linktype set to 6 [ 135.044800][ T7947] netlink: 'syz.3.2039': attribute type 13 has an invalid length. [ 135.062297][ T7947] device veth0_macvtap left promiscuous mode [ 135.091634][ T7947] macvtap0: refused to change device tx_queue_len [ 135.271940][ T7960] netlink: 'syz.1.2044': attribute type 6 has an invalid length. [ 135.319326][ T7960] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2044'. [ 135.651410][ T7979] tap0: tun_chr_ioctl cmd 1074025677 [ 135.670327][ T7979] tap0: linktype set to 776 [ 135.796336][ T7991] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.2060'. [ 136.826492][ T8073] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2098'. [ 136.874993][ T8073] netlink: 'syz.0.2098': attribute type 1 has an invalid length. [ 136.919471][ T8073] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2098'. [ 136.980571][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2100'. [ 137.045322][ T8094] netlink: 'syz.0.2108': attribute type 5 has an invalid length. [ 137.076973][ T8094] netlink: 'syz.0.2108': attribute type 5 has an invalid length. [ 137.599072][ T8140] netlink: 'syz.3.2130': attribute type 2 has an invalid length. [ 137.640403][ T8140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2130'. [ 137.654024][ T8144] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 137.660565][ T8144] pim6reg0: linktype set to 0 [ 137.918277][ T8168] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 137.925020][ T8168] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 137.937538][ T8172] netlink: 'syz.2.2143': attribute type 17 has an invalid length. [ 137.953791][ T8172] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2143'. [ 138.022161][ T8177] netlink: 40227 bytes leftover after parsing attributes in process `syz.4.2146'. [ 138.073548][ T8179] netlink: 'syz.2.2148': attribute type 21 has an invalid length. [ 138.087778][ T8179] netlink: 'syz.2.2148': attribute type 22 has an invalid length. [ 138.100442][ T8179] netlink: 14378 bytes leftover after parsing attributes in process `syz.2.2148'. [ 139.869485][ T8249] validate_nla: 2 callbacks suppressed [ 139.869501][ T8249] netlink: 'syz.4.2180': attribute type 7 has an invalid length. [ 140.314164][ T8263] netlink: 'syz.1.2187': attribute type 2 has an invalid length. [ 140.337537][ T8261] netlink: 'syz.0.2186': attribute type 29 has an invalid length. [ 140.352806][ T8263] __nla_validate_parse: 1 callbacks suppressed [ 140.352821][ T8263] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2187'. [ 140.392846][ T8261] netlink: 'syz.0.2186': attribute type 29 has an invalid length. [ 140.459723][ T8272] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2191'. [ 141.068533][ T8317] netlink: 'syz.4.2213': attribute type 1 has an invalid length. [ 141.164314][ T8317] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2213'. [ 141.481742][ T8343] netlink: 'syz.0.2225': attribute type 10 has an invalid length. [ 141.509291][ T8343] netlink: 3867 bytes leftover after parsing attributes in process `syz.0.2225'. [ 141.529831][ T8347] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2226'. [ 141.555561][ T8347] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2226'. [ 141.586242][ T8351] netlink: 67 bytes leftover after parsing attributes in process `syz.4.2229'. [ 141.598903][ T8351] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.625317][ T8351] IPv6: Can't replace route, no match found [ 141.654511][ T8354] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2226'. [ 141.669828][ T8347] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2226'. [ 141.680959][ T8361] netlink: 'syz.0.2233': attribute type 1 has an invalid length. [ 141.688688][ T8361] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2233'. [ 142.278963][ T8409] netlink: 'syz.2.2256': attribute type 3 has an invalid length. [ 142.308810][ T8410] netlink: 'syz.4.2254': attribute type 10 has an invalid length. [ 142.345311][ T8410] device bridge_slave_1 left promiscuous mode [ 142.367970][ T8410] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.417235][ C1] eth0: bad gso: type: 1, size: 1408 [ 142.460149][ T8410] device bridge_slave_0 left promiscuous mode [ 142.520604][ T8410] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.635898][ T8434] netlink: 'syz.1.2267': attribute type 29 has an invalid length. [ 143.062446][ T8463] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.138676][ T8463] device bridge_slave_0 left promiscuous mode [ 143.157667][ T8463] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.085168][ T8572] validate_nla: 4 callbacks suppressed [ 145.085179][ T8572] netlink: 'syz.2.2332': attribute type 22 has an invalid length. [ 145.465710][ T8597] __nla_validate_parse: 9 callbacks suppressed [ 145.465735][ T8597] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2344'. [ 145.794873][ T8624] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2355'. [ 146.091258][ T8649] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2368'. [ 146.170575][ T8654] netlink: 'syz.4.2371': attribute type 13 has an invalid length. [ 146.178545][ T8654] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.2371'. [ 146.194262][ T8657] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2370'. [ 146.265067][ T8662] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.2375'. [ 146.322616][ T8667] netlink: 16122 bytes leftover after parsing attributes in process `syz.3.2378'. [ 146.894026][ T8709] netlink: 164320 bytes leftover after parsing attributes in process `syz.4.2397'. [ 146.965600][ T8709] netlink: get zone limit has 4 unknown bytes [ 147.001020][ T8711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2398'. [ 147.051840][ T8711] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2398'. [ 147.145314][ T8715] netlink: 'syz.0.2400': attribute type 9 has an invalid length. [ 149.673742][ T8745] tap0: tun_chr_ioctl cmd 1074025677 [ 149.704772][ T8745] tap0: linktype set to 780 [ 150.175815][ T8789] tun0: tun_chr_ioctl cmd 1074812118 [ 150.184461][ T8795] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.979047][ T8845] tap0: tun_chr_ioctl cmd 1074025677 [ 151.017013][ T8845] tap0: linktype set to 864 [ 151.151195][ T8859] __nla_validate_parse: 6 callbacks suppressed [ 151.151210][ T8859] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2465'. [ 151.280665][ T8871] netlink: 'syz.0.2473': attribute type 33 has an invalid length. [ 151.308897][ T8871] netlink: 'syz.0.2473': attribute type 13 has an invalid length. [ 151.326225][ T8871] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2473'. [ 151.359360][ T8875] netlink: 'syz.0.2473': attribute type 33 has an invalid length. [ 151.533535][ T8885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2479'. [ 151.669608][ T8889] tun0: tun_chr_ioctl cmd 1074025677 [ 151.700636][ T8889] tun0: linktype set to 778 [ 151.795379][ T8903] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2487'. [ 152.293496][ T8940] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 152.300221][ T8940] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 152.530803][ T8956] tun1: tun_chr_ioctl cmd 1074025677 [ 152.545687][ T8956] tun1: linktype set to 65534 [ 152.660645][ T8963] tap0: tun_chr_ioctl cmd 2147767511 [ 153.115043][ T8994] tun0: tun_chr_ioctl cmd 1074025677 [ 153.134900][ T8994] tun0: linktype set to 65534 [ 153.315912][ T9007] tap0: tun_chr_ioctl cmd 2147767511 [ 153.502233][ T9017] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2543'. [ 153.544133][ T9017] netlink: 'syz.1.2543': attribute type 8 has an invalid length. [ 153.738335][ T9030] tun0: tun_chr_ioctl cmd 1074025677 [ 153.754150][ T9030] tun0: linktype set to 65534 [ 153.899592][ T9042] netlink: 'syz.2.2555': attribute type 21 has an invalid length. [ 153.999333][ T9051] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2559'. [ 154.008309][ T9051] netlink: 'syz.4.2559': attribute type 8 has an invalid length. [ 154.067563][ T9055] netlink: 'syz.2.2562': attribute type 3 has an invalid length. [ 154.085471][ T9058] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2560'. [ 154.089318][ T9055] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2562'. [ 154.661221][ T9096] netlink: 'syz.4.2577': attribute type 29 has an invalid length. [ 154.672695][ T9098] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2582'. [ 154.689455][ T9096] netlink: 'syz.4.2577': attribute type 29 has an invalid length. [ 154.731448][ T9104] netlink: 'syz.4.2577': attribute type 29 has an invalid length. [ 155.364339][ T9116] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2587'. [ 155.970104][ T9158] tap0: tun_chr_ioctl cmd 1074025677 [ 155.975826][ T9158] tap0: linktype set to 270 [ 156.347306][ T9192] __nla_validate_parse: 4 callbacks suppressed [ 156.347322][ T9192] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.2618'. [ 156.517652][ T9201] nicvf0: tun_chr_ioctl cmd 35111 [ 156.591722][ T9206] tun1: tun_chr_ioctl cmd 1074025694 [ 156.968211][ T9222] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2636'. [ 157.015265][ T9232] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2639'. [ 157.117799][ T9238] validate_nla: 4 callbacks suppressed [ 157.117814][ T9238] netlink: 'syz.0.2644': attribute type 21 has an invalid length. [ 157.175187][ T9238] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.2644'. [ 157.218507][ T9246] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2648'. [ 157.691283][ T9280] netlink: 'syz.1.2664': attribute type 12 has an invalid length. [ 157.709348][ T9280] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.2664'. [ 157.803417][ T9286] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2667'. [ 158.041826][ T9299] netlink: 'syz.1.2674': attribute type 2 has an invalid length. [ 158.097348][ T9299] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2674'. [ 158.657098][ T9331] netlink: 'syz.3.2688': attribute type 21 has an invalid length. [ 158.873221][ T9340] netlink: 'syz.0.2691': attribute type 21 has an invalid length. [ 159.399705][ T9355] netlink: 'syz.3.2697': attribute type 1 has an invalid length. [ 159.448275][ T9355] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2697'. [ 159.594757][ T9375] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2710'. [ 160.717087][ T9451] netlink: 'syz.1.2744': attribute type 10 has an invalid length. [ 160.789319][ T9451] netlink: 'syz.1.2744': attribute type 4 has an invalid length. [ 160.845725][ T9451] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 160.907303][ T9459] netlink: 'syz.3.2749': attribute type 21 has an invalid length. [ 161.395390][ T9500] __nla_validate_parse: 5 callbacks suppressed [ 161.395405][ T9500] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2767'. [ 161.723211][ T9513] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2772'. [ 161.732392][ T9513] netlink: 'syz.1.2772': attribute type 4 has an invalid length. [ 162.138590][ T9546] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2788'. [ 162.163478][ T9553] syz.3.2789[9553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.163570][ T9553] syz.3.2789[9553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.163999][ T9550] validate_nla: 4 callbacks suppressed [ 162.164010][ T9550] netlink: 'syz.2.2790': attribute type 1 has an invalid length. [ 162.183278][ T9546] netlink: 'syz.1.2788': attribute type 1 has an invalid length. [ 162.207659][ T9550] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.2790'. [ 162.394199][ T9567] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2798'. [ 162.424513][ T9567] netlink: zone id is out of range [ 162.454495][ T9567] netlink: zone id is out of range [ 162.475287][ T9567] netlink: del zone limit has 4 unknown bytes [ 162.553839][ T9577] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2802'. [ 162.614907][ T9583] tap0: tun_chr_ioctl cmd 2148553947 [ 162.616064][ T9585] netlink: 'syz.4.2806': attribute type 3 has an invalid length. [ 162.660032][ T9585] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2806'. [ 162.860851][ T9602] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.2812'. [ 163.062556][ T9615] tun0: tun_chr_ioctl cmd 1074025688 [ 163.631353][ T9658] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2844'. [ 163.669997][ T9660] netlink: 'syz.4.2842': attribute type 21 has an invalid length. [ 163.771001][ T9669] netlink: 'syz.0.2846': attribute type 3 has an invalid length. [ 163.791142][ T9669] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2846'. [ 163.914710][ T9677] pim6reg0: tun_chr_ioctl cmd 1074025678 [ 163.920784][ T9677] pim6reg0: group set to 0 [ 166.942281][ T9690] netlink: 'syz.1.2852': attribute type 33 has an invalid length. [ 166.996616][ T9690] netlink: 'syz.1.2852': attribute type 13 has an invalid length. [ 167.049299][ T9690] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2852'. [ 167.091063][ T9695] netlink: 'syz.4.2857': attribute type 1 has an invalid length. [ 167.112123][ T9694] netlink: 'syz.1.2852': attribute type 33 has an invalid length. [ 167.278560][ T9704] tap0: tun_chr_ioctl cmd 21731 [ 167.299997][ T9706] tun0: tun_chr_ioctl cmd 2147767507 [ 167.545098][ T9723] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2874'. [ 167.600700][ T9727] netlink: 'syz.0.2875': attribute type 33 has an invalid length. [ 167.608701][ T9727] netlink: 'syz.0.2875': attribute type 13 has an invalid length. [ 167.662380][ T9727] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2875'. [ 167.688482][ T9736] netlink: 'syz.0.2875': attribute type 33 has an invalid length. [ 167.771333][ T9740] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2880'. [ 167.797617][ T9742] netlink: 'syz.4.2878': attribute type 3 has an invalid length. [ 167.815542][ T9740] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2880'. [ 167.825477][ T9742] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2878'. [ 167.836296][ T9746] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2880'. [ 167.863186][ T9740] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2880'. [ 167.907439][ T9747] tun1: tun_chr_ioctl cmd 2148553947 [ 167.960593][ T9751] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2895'. [ 168.013339][ T9751] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2895'. [ 168.034082][ T9757] netlink: 'syz.1.2885': attribute type 1 has an invalid length. [ 168.307486][ T9776] netlink: 'syz.0.2896': attribute type 11 has an invalid length. [ 168.362288][ T9783] netlink: 'syz.2.2900': attribute type 27 has an invalid length. [ 168.380436][ T9785] netlink: 'syz.3.2899': attribute type 33 has an invalid length. [ 168.422006][ T9785] netlink: 'syz.3.2899': attribute type 13 has an invalid length. [ 168.490237][ T9790] netlink: 'syz.3.2899': attribute type 33 has an invalid length. [ 168.539986][ T9796] netlink: 'syz.1.2905': attribute type 3 has an invalid length. [ 170.509392][ T1965] Bluetooth: hci0: command 0x0406 tx timeout [ 170.509428][ T1073] Bluetooth: hci3: command 0x0406 tx timeout [ 170.521889][ T1965] Bluetooth: hci4: command 0x0406 tx timeout [ 170.551785][ T1965] Bluetooth: hci1: command 0x0406 tx timeout [ 170.554347][ T1073] Bluetooth: hci2: command 0x0406 tx timeout [ 171.352972][ T9990] rose0: tun_chr_ioctl cmd 1074812117 [ 171.748124][T10016] tc_dump_action: action bad kind [ 171.884775][T10020] IPv6: Can't replace route, no match found [ 172.083502][T10042] batman_adv: The newly added mac address (00:20:00:00:00:00) already exists on: batadv_slave_0 [ 172.115421][T10042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.555555][T10078] Â: renamed from pim6reg1 [ 173.628856][T10084] validate_nla: 7 callbacks suppressed [ 173.628872][T10084] netlink: 'syz.0.3041': attribute type 3 has an invalid length. [ 173.651153][T10084] __nla_validate_parse: 15 callbacks suppressed [ 173.651168][T10084] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3041'. [ 175.661003][T10102] netlink: 'syz.0.3052': attribute type 13 has an invalid length. [ 175.715013][T10102] device veth0_macvtap left promiscuous mode [ 175.756207][T10102] macvtap0: refused to change device tx_queue_len [ 175.779862][T10104] tap0: tun_chr_ioctl cmd 1074025677 [ 175.806377][T10104] tap0: linktype set to 6 [ 176.003206][T10122] netlink: 'syz.2.3061': attribute type 6 has an invalid length. [ 176.025981][T10122] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3061'. [ 176.036357][T10126] tap0: tun_chr_ioctl cmd 1074025677 [ 176.057898][T10126] tap0: linktype set to 776 [ 176.458602][T10159] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.3079'. [ 177.440980][T10239] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3118'. [ 177.478015][T10239] netlink: 'syz.4.3118': attribute type 1 has an invalid length. [ 177.509109][T10239] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3118'. [ 177.522519][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3119'. [ 177.630003][T10254] netlink: 'syz.4.3124': attribute type 5 has an invalid length. [ 177.638022][T10254] netlink: 'syz.4.3124': attribute type 5 has an invalid length. [ 178.071563][T10297] netlink: 'syz.4.3145': attribute type 2 has an invalid length. [ 178.093581][T10297] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3145'. [ 178.156891][T10301] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 178.181419][T10301] pim6reg0: linktype set to 0 [ 178.471871][T10326] netlink: 'syz.1.3158': attribute type 17 has an invalid length. [ 178.501231][T10326] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3158'. [ 178.611959][T10337] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.3162'. [ 178.630439][T10341] netlink: 'syz.0.3164': attribute type 21 has an invalid length. [ 178.638442][T10341] netlink: 'syz.0.3164': attribute type 22 has an invalid length. [ 178.663268][T10341] netlink: 'syz.0.3164': attribute type 22 has an invalid length. [ 178.676755][T10339] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 178.683210][T10339] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 178.689583][T10341] netlink: 14378 bytes leftover after parsing attributes in process `syz.0.3164'. [ 179.612085][T10362] netlink: 'syz.4.3175': attribute type 10 has an invalid length. [ 179.647506][T10362] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3175'. [ 179.748972][T10362] batman_adv: batadv0: Interface deactivated: vlan1 [ 179.937711][T10362] batman_adv: batadv0: Removing interface: vlan1 [ 181.033285][T10418] netlink: 'syz.3.3200': attribute type 7 has an invalid length. [ 181.086484][T10424] netlink: 'syz.2.3202': attribute type 2 has an invalid length. [ 181.095193][T10424] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3202'. [ 181.182405][T10437] netlink: 'syz.4.3205': attribute type 29 has an invalid length. [ 181.190956][T10435] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3206'. [ 181.222791][T10437] netlink: 'syz.4.3205': attribute type 29 has an invalid length. [ 181.755458][T10484] netlink: 'syz.1.3228': attribute type 1 has an invalid length. [ 181.789388][T10484] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3228'. [ 182.005244][T10503] netlink: 'syz.3.3241': attribute type 10 has an invalid length. [ 182.024291][T10503] netlink: 3867 bytes leftover after parsing attributes in process `syz.3.3241'. [ 182.158049][T10514] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3245'. [ 182.178274][T10514] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3245'. [ 182.202717][T10514] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3245'. [ 182.221970][T10514] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3245'. [ 182.271554][T10521] IPv6: NLM_F_CREATE should be specified when creating new route [ 182.309492][T10521] IPv6: Can't replace route, no match found [ 183.227947][T10594] device bridge_slave_1 left promiscuous mode [ 183.245898][T10594] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.364041][ C1] eth0: bad gso: type: 1, size: 1408 [ 183.662763][T10624] validate_nla: 7 callbacks suppressed [ 183.662777][T10624] netlink: 'syz.0.3295': attribute type 10 has an invalid length. [ 183.847639][T10636] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.951685][T10636] device bridge_slave_0 left promiscuous mode [ 183.957929][T10636] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.071743][T10646] netlink: 'syz.0.3305': attribute type 29 has an invalid length. [ 184.094119][T10646] netlink: 'syz.0.3305': attribute type 29 has an invalid length. [ 184.154350][T10650] netlink: 'syz.0.3305': attribute type 29 has an invalid length. [ 184.196731][T10646] netlink: 'syz.0.3305': attribute type 29 has an invalid length. [ 184.242973][T10657] __nla_validate_parse: 7 callbacks suppressed [ 184.242987][T10657] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3312'. [ 185.457644][T10691] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3328'. [ 185.563681][T10699] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3332'. [ 185.881124][T10726] netlink: 'syz.3.3345': attribute type 22 has an invalid length. [ 185.888971][T10726] netlink: 14378 bytes leftover after parsing attributes in process `syz.3.3345'. [ 186.356055][T10754] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3358'. [ 187.123441][T10785] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3382'. [ 187.147368][T10786] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3372'. [ 187.250863][T10792] netlink: 'syz.0.3385': attribute type 13 has an invalid length. [ 187.272611][T10792] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.3385'. [ 187.579631][T10823] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3386'. [ 187.764352][T10831] netlink: 16122 bytes leftover after parsing attributes in process `syz.0.3393'. [ 187.883090][T10841] netlink: 'syz.1.3399': attribute type 29 has an invalid length. [ 187.924733][T10841] netlink: 'syz.1.3399': attribute type 29 has an invalid length. [ 187.953947][T10846] netlink: 'syz.1.3399': attribute type 29 has an invalid length. [ 188.211844][T10868] netlink: get zone limit has 4 unknown bytes [ 191.450794][T10910] validate_nla: 2 callbacks suppressed [ 191.450808][T10910] netlink: 'syz.3.3427': attribute type 29 has an invalid length. [ 191.482923][T10910] netlink: 'syz.3.3427': attribute type 29 has an invalid length. [ 191.496546][T10911] netlink: 'syz.3.3427': attribute type 29 has an invalid length. [ 191.519408][T10910] netlink: 'syz.3.3427': attribute type 29 has an invalid length. [ 191.752641][T10933] __nla_validate_parse: 6 callbacks suppressed [ 191.752656][T10933] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.3437'. [ 191.860089][T10939] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3442'. [ 191.944581][T10951] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.995668][T10951] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3448'. [ 192.030502][T10949] tun0: tun_chr_ioctl cmd 1074812118 [ 192.628999][T10999] netlink: 'syz.1.3471': attribute type 29 has an invalid length. [ 192.662727][T10999] netlink: 'syz.1.3471': attribute type 29 has an invalid length. [ 192.694503][T11002] netlink: 'syz.1.3471': attribute type 29 has an invalid length. [ 192.769398][T10999] netlink: 'syz.1.3471': attribute type 29 has an invalid length. [ 192.803619][T11009] tap0: tun_chr_ioctl cmd 1074025677 [ 192.811469][T11009] tap0: linktype set to 864 [ 192.933765][T11019] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3482'. [ 193.195108][T11043] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3491'. [ 193.238523][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3491'. [ 193.269303][T11043] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3491'. [ 193.294887][T11047] netlink: 'syz.1.3493': attribute type 33 has an invalid length. [ 193.339323][T11047] netlink: 'syz.1.3493': attribute type 13 has an invalid length. [ 193.366034][T11047] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3493'. [ 193.488390][T11059] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3502'. [ 193.549752][T11063] tun0: tun_chr_ioctl cmd 1074025677 [ 193.555326][T11063] tun0: linktype set to 778 [ 194.039579][ T1386] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.045912][ T1386] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.156407][T11099] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 194.162943][T11099] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 194.630882][T11120] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3539'. [ 196.329011][T11210] tap0: tun_chr_ioctl cmd 1074025677 [ 196.334733][T11210] tap0: linktype set to 270 [ 196.575159][T11223] validate_nla: 3 callbacks suppressed [ 196.575173][T11223] netlink: 'syz.4.3576': attribute type 2 has an invalid length. [ 197.043950][T11251] tap0: tun_chr_ioctl cmd 1074025677 [ 197.050905][T11251] tap0: linktype set to 270 [ 197.209073][T11257] netlink: 'syz.2.3592': attribute type 2 has an invalid length. [ 197.258560][T11257] __nla_validate_parse: 6 callbacks suppressed [ 197.258575][T11257] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3592'. [ 197.290980][T11263] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3594'. [ 197.700764][T11291] tap0: tun_chr_ioctl cmd 1074025677 [ 197.740754][T11291] tap0: linktype set to 270 [ 197.928606][T11297] nicvf0: tun_chr_ioctl cmd 35111 [ 198.072581][T11305] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.3615'. [ 198.201598][T11311] nicvf0: tun_chr_ioctl cmd 35111 [ 198.279553][T11317] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3633'. [ 198.299150][T11316] tun0: tun_chr_ioctl cmd 1074025694 [ 198.438722][T11326] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3637'. [ 198.916647][T11352] tun1: tun_chr_ioctl cmd 1074025694 [ 199.227573][T11365] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3640'. [ 199.523868][T11379] netlink: 'syz.3.3650': attribute type 21 has an invalid length. [ 199.557644][T11379] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.3650'. [ 199.836803][T11397] netlink: 'syz.4.3667': attribute type 21 has an invalid length. [ 199.849390][T11397] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.3667'. [ 199.875707][T11400] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3655'. [ 200.154831][T11416] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3660'. [ 200.773711][T11448] netlink: 'syz.1.3676': attribute type 21 has an invalid length. [ 201.653729][T11489] netlink: 'syz.3.3705': attribute type 12 has an invalid length. [ 202.286358][T11528] netlink: 'syz.4.3721': attribute type 12 has an invalid length. [ 202.305124][T11528] __nla_validate_parse: 5 callbacks suppressed [ 202.305141][T11528] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.3721'. [ 203.354537][T11565] netlink: 'syz.0.3737': attribute type 2 has an invalid length. [ 203.365550][T11565] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3737'. [ 203.862880][T11599] netlink: 'syz.3.3755': attribute type 2 has an invalid length. [ 203.917136][T11599] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3755'. [ 204.272597][T11611] netlink: 'syz.4.3761': attribute type 21 has an invalid length. [ 204.788004][T11629] netlink: 'syz.3.3768': attribute type 21 has an invalid length. [ 205.017779][T11637] netlink: 'syz.4.3783': attribute type 21 has an invalid length. [ 205.096872][T11641] netlink: 'syz.2.3770': attribute type 2 has an invalid length. [ 205.135456][T11641] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3770'. [ 205.435971][T11654] netlink: 'syz.1.3775': attribute type 21 has an invalid length. [ 206.085668][T11678] netlink: 'syz.4.3789': attribute type 1 has an invalid length. [ 206.099268][T11678] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.3789'. [ 206.836920][T11707] validate_nla: 1 callbacks suppressed [ 206.836935][T11707] netlink: 'syz.0.3806': attribute type 1 has an invalid length. [ 206.942969][T11707] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.3806'. [ 208.331923][T11765] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3825'. [ 209.412785][T11793] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.3841'. [ 209.805632][T11806] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3845'. [ 210.157281][T11831] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.3857'. [ 210.205006][T11834] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3855'. [ 210.529654][T11854] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3865'. [ 210.676029][T11868] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3872'. [ 211.463507][T11936] netlink: 'syz.4.3918': attribute type 10 has an invalid length. [ 211.489000][T11936] netlink: 'syz.4.3918': attribute type 4 has an invalid length. [ 211.507296][T11936] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3918'. [ 211.585051][T11936] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 211.992304][T11976] netlink: 'syz.1.3924': attribute type 21 has an invalid length. [ 212.024644][T11976] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3924'. [ 212.143502][T11989] netlink: 'syz.3.3928': attribute type 10 has an invalid length. [ 212.163057][T11989] netlink: 'syz.3.3928': attribute type 4 has an invalid length. [ 212.176077][T11989] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3928'. [ 212.221529][T11989] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 212.625966][T12023] netlink: 'syz.4.3944': attribute type 21 has an invalid length. [ 212.938276][T12046] netlink: 'syz.0.3967': attribute type 21 has an invalid length. [ 213.591111][T12097] netlink: 'syz.4.3989': attribute type 29 has an invalid length. [ 213.621715][T12097] netlink: 'syz.4.3989': attribute type 29 has an invalid length. [ 213.734347][T12106] __nla_validate_parse: 3 callbacks suppressed [ 213.734364][T12106] netlink: 4019 bytes leftover after parsing attributes in process `syz.2.3978'. [ 213.747500][T12111] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3980'. [ 213.820670][T12116] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3982'. [ 213.839710][T12116] netlink: 'syz.3.3982': attribute type 4 has an invalid length. [ 214.177698][T12138] netlink: 'syz.3.3997': attribute type 29 has an invalid length. [ 214.185903][T12138] netlink: 'syz.3.3997': attribute type 29 has an invalid length. [ 214.231969][T12144] netlink: 4019 bytes leftover after parsing attributes in process `syz.4.4002'. [ 214.366527][T12154] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4004'. [ 214.695325][T12175] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.4026'. [ 214.925474][T12190] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.4032'. [ 215.067006][T12200] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4022'. [ 215.134826][T12202] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.4024'. [ 215.152610][T12204] syz.1.4025[12204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.152699][T12204] syz.1.4025[12204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.286652][T12212] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.4044'. [ 215.567798][T12236] syz.0.4045[12236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.567890][T12236] syz.0.4045[12236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.625191][T12239] netlink: zone id is out of range [ 215.642979][T12239] netlink: zone id is out of range [ 215.655814][T12239] netlink: del zone limit has 4 unknown bytes [ 215.810534][T12250] syz.2.4061[12250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.810623][T12250] syz.2.4061[12250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.256712][T12280] netlink: zone id is out of range [ 216.304974][T12280] netlink: zone id is out of range [ 216.326704][T12283] tap0: tun_chr_ioctl cmd 2148553947 [ 216.362742][T12280] netlink: del zone limit has 4 unknown bytes [ 216.920659][T12327] tap0: tun_chr_ioctl cmd 2148553947 [ 217.074568][T12339] validate_nla: 11 callbacks suppressed [ 217.074613][T12339] netlink: 'syz.1.4102': attribute type 3 has an invalid length. [ 217.434644][T12367] netlink: 'syz.0.4107': attribute type 3 has an invalid length. [ 217.566932][T12377] tun1: tun_chr_ioctl cmd 1074025688 [ 217.883974][T12400] netlink: 'syz.2.4124': attribute type 3 has an invalid length. [ 218.098742][T12414] tun0: tun_chr_ioctl cmd 1074025688 [ 218.794962][T12462] netlink: 'syz.3.4152': attribute type 1 has an invalid length. [ 222.386549][T12502] netlink: 'syz.0.4170': attribute type 1 has an invalid length. [ 225.557562][T12512] pim6reg0: tun_chr_ioctl cmd 1074025678 [ 225.589424][T12512] pim6reg0: group set to 0 [ 225.675076][T12520] tap0: tun_chr_ioctl cmd 21731 [ 226.368739][T12540] tun0: tun_chr_ioctl cmd 2147767507 [ 229.992455][T12578] pim6reg0: tun_chr_ioctl cmd 1074025678 [ 230.015246][T12578] pim6reg0: group set to 0 [ 230.063931][T12579] tap0: tun_chr_ioctl cmd 21731 [ 230.444929][T12587] __nla_validate_parse: 13 callbacks suppressed [ 230.444945][T12587] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4217'. [ 230.468098][T12587] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4217'. [ 230.478923][T12589] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4217'. [ 230.495025][T12587] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4217'. [ 230.643006][T12595] tun0: tun_chr_ioctl cmd 2147767507 [ 233.955343][T12613] tun0: tun_chr_ioctl cmd 2148553947 [ 234.069007][T12622] netlink: 'syz.2.4221': attribute type 1 has an invalid length. [ 234.115066][T12625] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4224'. [ 234.145813][T12625] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4224'. [ 234.195907][T12629] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4224'. [ 234.244655][T12625] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4224'. [ 236.932446][T12723] netlink: 'syz.1.4253': attribute type 10 has an invalid length. [ 236.945467][T12723] netlink: 4067 bytes leftover after parsing attributes in process `syz.1.4253'. [ 237.890356][T12723] netlink: 'syz.1.4253': attribute type 10 has an invalid length. [ 237.920078][T12723] netlink: 4067 bytes leftover after parsing attributes in process `syz.1.4253'. [ 238.118660][T12734] tap0: tun_chr_ioctl cmd 1074025676 [ 238.133883][T12734] tap0: owner set to 0 [ 238.294498][T12753] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4267'. [ 238.332858][T12758] netlink: 'syz.3.4268': attribute type 11 has an invalid length. [ 238.340428][T12753] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4267'. [ 238.379246][T12758] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.4268'. [ 238.448012][T12766] netlink: 'syz.0.4271': attribute type 27 has an invalid length. [ 238.487557][T12766] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.4271'. [ 238.868571][T12789] netlink: 'syz.3.4284': attribute type 2 has an invalid length. [ 238.886874][T12789] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4284'. [ 239.012019][T12802] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4289'. [ 239.167667][T12814] netlink: 187308 bytes leftover after parsing attributes in process `syz.1.4296'. [ 239.228816][T12819] netlink: 'syz.1.4296': attribute type 2 has an invalid length. [ 239.371128][T12827] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4303'. [ 240.578888][T12891] netlink: 'syz.1.4328': attribute type 2 has an invalid length. [ 242.801504][T12948] tap0: tun_chr_ioctl cmd 1074025676 [ 242.807040][T12948] tap0: owner set to 0 [ 243.926987][T12979] netlink: 'syz.2.4379': attribute type 2 has an invalid length. [ 243.959291][T12979] __nla_validate_parse: 4 callbacks suppressed [ 243.959305][T12979] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4379'. [ 244.545111][T12986] tap0: tun_chr_ioctl cmd 1074025676 [ 244.564861][T12986] tap0: owner set to 0 [ 251.633101][T13078] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4406'. [ 252.257885][T13121] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.4429'. [ 252.453618][T13134] netlink: 164320 bytes leftover after parsing attributes in process `syz.1.4449'. [ 252.474592][T13140] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4440'. [ 252.512905][T13142] netlink: 'syz.4.4441': attribute type 9 has an invalid length. [ 252.521472][T13134] netlink: get zone limit has 4 unknown bytes [ 252.531125][T13142] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.4441'. [ 252.716018][T13147] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4445'. [ 252.732961][T13147] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4445'. [ 252.746792][T13147] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4445'. [ 252.756772][T13147] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4445'. [ 253.453808][T13182] netlink: 164320 bytes leftover after parsing attributes in process `syz.2.4461'. [ 253.467697][T13182] netlink: get zone limit has 4 unknown bytes [ 253.630581][T13199] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.741878][T13202] tun1: tun_chr_ioctl cmd 1074812118 [ 253.961697][T13221] netlink: get zone limit has 4 unknown bytes [ 255.479577][ T1386] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.485895][ T1386] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.688127][T13266] netlink: 'syz.2.4495': attribute type 13 has an invalid length. [ 257.135482][T13288] netlink: 'syz.1.4507': attribute type 22 has an invalid length. [ 257.199288][T13288] __nla_validate_parse: 5 callbacks suppressed [ 257.199302][T13288] netlink: 14378 bytes leftover after parsing attributes in process `syz.1.4507'. [ 258.143031][T13327] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4530'. [ 258.543910][T13356] netlink: 'syz.1.4541': attribute type 10 has an invalid length. [ 258.607539][T13356] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.4541'. [ 258.607669][ C1] eth0: bad gso: type: 1, size: 1408 [ 259.232487][T13399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4572'. [ 259.288492][T13401] netlink: 'syz.3.4563': attribute type 10 has an invalid length. [ 259.306667][T13401] device bridge_slave_1 left promiscuous mode [ 259.323904][T13401] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.359550][T13401] device bridge_slave_0 left promiscuous mode [ 259.379787][T13401] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.697964][T13419] netlink: 'syz.2.4571': attribute type 29 has an invalid length. [ 259.729926][T13419] netlink: 'syz.2.4571': attribute type 29 has an invalid length. [ 259.767638][T13419] netlink: 'syz.2.4571': attribute type 29 has an invalid length. [ 259.810910][T13419] netlink: 'syz.2.4571': attribute type 29 has an invalid length. [ 259.969400][T13438] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4578'. [ 260.129048][T13452] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4587'. [ 260.228199][T13459] netlink: 'syz.1.4592': attribute type 1 has an invalid length. [ 260.278236][T13459] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4592'. [ 260.398696][T13474] netlink: 'syz.4.4596': attribute type 10 has an invalid length. [ 260.407425][T13474] netlink: 3867 bytes leftover after parsing attributes in process `syz.4.4596'. [ 260.417566][T13472] netlink: 67 bytes leftover after parsing attributes in process `syz.3.4595'. [ 260.439371][T13472] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.465858][T13472] IPv6: Can't replace route, no match found [ 260.541340][T13482] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4600'. [ 260.843203][T13503] netlink: 'syz.0.4611': attribute type 1 has an invalid length. [ 261.550595][T13555] netlink: 'syz.2.4629': attribute type 1 has an invalid length. [ 262.250914][T13584] __nla_validate_parse: 10 callbacks suppressed [ 262.250931][T13584] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4647'. [ 262.392375][ C1] eth0: bad gso: type: 1, size: 1408 [ 263.900049][T13651] validate_nla: 4 callbacks suppressed [ 263.900065][T13651] netlink: 'syz.0.4688': attribute type 2 has an invalid length. [ 263.955594][T13651] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4688'. [ 264.117396][T13667] netlink: 'syz.3.4680': attribute type 1 has an invalid length. [ 264.133047][T13667] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.4680'. [ 264.992173][T13719] netlink: 'syz.2.4708': attribute type 5 has an invalid length. [ 265.025230][T13719] netlink: 'syz.2.4708': attribute type 5 has an invalid length. [ 265.119297][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4711'. [ 265.451726][T13756] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.4728'. [ 265.539488][T13761] tap0: tun_chr_ioctl cmd 1074025677 [ 265.560117][T13761] tap0: linktype set to 776 [ 265.673316][T13771] netlink: 'syz.4.4734': attribute type 6 has an invalid length. [ 265.737040][T13771] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4734'. [ 265.977499][T13781] tap0: tun_chr_ioctl cmd 1074025677 [ 265.999407][T13781] tap0: linktype set to 6 [ 266.071003][T13790] netlink: 'syz.2.4743': attribute type 3 has an invalid length. [ 266.078751][T13790] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4743'. [ 266.181778][T13800] batman_adv: The newly added mac address (00:20:00:00:00:00) already exists on: batadv_slave_0 [ 266.207624][T13800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.233109][T13800] batman_adv: The newly added mac address (00:20:00:00:00:00) already exists on: batadv_slave_0 [ 266.259596][T13800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.615177][T13830] rose0: tun_chr_ioctl cmd 1074812117 [ 266.619103][T13832] netlink: 'syz.1.4763': attribute type 29 has an invalid length. [ 266.667468][T13834] netlink: 2530 bytes leftover after parsing attributes in process `syz.2.4764'. [ 266.680585][T13832] netlink: 'syz.1.4763': attribute type 29 has an invalid length. [ 266.688674][T13837] netlink: 'syz.1.4763': attribute type 29 has an invalid length. [ 266.762551][T13832] netlink: 'syz.1.4763': attribute type 29 has an invalid length. [ 267.007443][T13864] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4779'. [ 267.134670][T13878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4786'. [ 267.981256][T13945] __nla_validate_parse: 1 callbacks suppressed [ 267.981271][T13945] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.4822'. [ 268.065238][T13949] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4821'. [ 268.336630][T13969] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4830'. [ 268.466412][T13984] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4837'. [ 268.757854][T14004] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.4844'. [ 268.799195][T14004] tc_dump_action: action bad kind [ 269.112776][T14034] Â: renamed from pim6reg1 [ 269.167229][T14039] validate_nla: 3 callbacks suppressed [ 269.167246][T14039] netlink: 'syz.2.4862': attribute type 13 has an invalid length. [ 269.222779][T14039] device veth0_macvtap left promiscuous mode [ 269.260938][T14039] macvtap0: refused to change device tx_queue_len [ 269.431294][T14059] IPv6: Can't replace route, no match found [ 270.220153][T14085] netlink: 'syz.4.4886': attribute type 3 has an invalid length. [ 270.238365][T14087] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4885'. [ 270.269316][T14085] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.4886'. [ 273.627528][T14124] netlink: 'syz.1.4902': attribute type 1 has an invalid length. [ 273.659191][T14124] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.4902'. [ 273.688901][T14130] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4903'. [ 273.762379][T14135] batman_adv: The newly added mac address (00:20:00:00:00:00) already exists on: batadv_slave_0 [ 273.783723][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.804879][T14135] batman_adv: The newly added mac address (00:20:00:00:00:00) already exists on: batadv_slave_0 [ 273.815771][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.863880][T14135] batman_adv: The newly added mac address (00:20:00:00:00:00) already exists on: batadv_slave_0 [ 273.903694][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.165987][T14166] netlink: 'syz.1.4922': attribute type 5 has an invalid length. [ 274.180267][T14166] netlink: 'syz.1.4922': attribute type 5 has an invalid length. [ 274.260065][T14171] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.4936'. [ 274.521613][T14189] netlink: 'syz.0.4934': attribute type 17 has an invalid length. [ 274.538684][T14189] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4934'. [ 274.610004][T14195] netlink: 'syz.3.4939': attribute type 5 has an invalid length. [ 274.664953][T14200] netlink: 'syz.1.4940': attribute type 21 has an invalid length. [ 274.683901][T14200] netlink: 'syz.1.4940': attribute type 22 has an invalid length. [ 274.716199][T14200] netlink: 'syz.1.4940': attribute type 22 has an invalid length. [ 274.726070][T14200] netlink: 14378 bytes leftover after parsing attributes in process `syz.1.4940'. [ 274.737004][T14202] netlink: 'syz.2.4941': attribute type 10 has an invalid length. [ 274.755621][T14202] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4941'. [ 274.996864][T14195] netlink: 'syz.3.4939': attribute type 5 has an invalid length. [ 275.113677][T14218] netlink: 'syz.0.4956': attribute type 5 has an invalid length. [ 275.151483][T14218] netlink: 'syz.0.4956': attribute type 5 has an invalid length. [ 275.252870][T14223] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4962'. [ 275.350352][T14228] device bridge_slave_1 left promiscuous mode [ 275.356653][T14228] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.371483][T14228] device bridge_slave_0 left promiscuous mode [ 275.378020][T14228] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.692999][T14250] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4959'. [ 276.847322][T14250] batman_adv: batadv0: Interface deactivated: vlan1 [ 277.260475][T14250] batman_adv: batadv0: Removing interface: vlan1 [ 277.281999][T14260] device bridge_slave_1 left promiscuous mode [ 277.288207][T14260] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.353117][T14268] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4970'. [ 278.409384][ C1] eth0: bad gso: type: 1, size: 1408 [ 278.901172][T14307] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4987'. [ 281.191631][T14339] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5002'. [ 281.322257][T14346] validate_nla: 6 callbacks suppressed [ 281.322299][T14346] netlink: 'syz.0.5007': attribute type 10 has an invalid length. [ 281.406387][T14346] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5007'. [ 281.606424][T14361] netlink: 'syz.3.5025': attribute type 10 has an invalid length. [ 281.619604][T14361] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5025'. [ 281.741836][T14369] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5017'. [ 285.040953][T14405] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5031'. [ 285.642469][T14444] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5048'. [ 285.823302][T14454] tun0: tun_chr_ioctl cmd 1074025677 [ 285.829065][T14454] tun0: linktype set to 778 [ 293.401472][T14566] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5104'. [ 293.406539][T14568] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5103'. [ 293.466472][T14568] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5103'. [ 293.498525][T14574] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5103'. [ 293.561372][T14579] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5108'. [ 293.626908][T14581] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5103'. [ 293.968180][ C1] eth0: bad gso: type: 1, size: 1408 [ 293.983823][ C1] eth0: bad gso: type: 1, size: 1408 [ 294.106051][T14615] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5125'. [ 294.128482][T14617] netlink: 'syz.1.5127': attribute type 12 has an invalid length. [ 294.157586][T14617] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5127'. [ 294.755493][T14640] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5136'. [ 298.003629][T14640] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5136'. [ 298.321023][T14672] netlink: 'syz.2.5149': attribute type 12 has an invalid length. [ 298.458195][T14679] __nla_validate_parse: 2 callbacks suppressed [ 298.458211][T14679] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5153'. [ 298.567388][T14682] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5154'. [ 298.588532][T14684] tun0: tun_chr_ioctl cmd 1074025680 [ 298.685036][T14694] netlink: 1042 bytes leftover after parsing attributes in process `syz.4.5159'. [ 299.292847][T14734] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.5178'. [ 299.363553][T14736] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5180'. [ 299.956795][T14765] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.5194'. [ 300.070204][T14770] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5197'. [ 301.461929][T14803] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5212'. [ 302.254239][T14813] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 302.264291][T14813] dvmrp1: linktype set to 769 [ 305.113786][T14849] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5233'. [ 305.692141][T14892] netlink: 'syz.3.5253': attribute type 21 has an invalid length. [ 305.705275][T14892] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5253'. [ 306.088091][T14915] netlink: 'syz.2.5263': attribute type 21 has an invalid length. [ 306.105304][T14915] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5263'. [ 306.329840][T14931] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 306.816669][T14968] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 307.343235][T15007] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 308.097445][T15045] netlink: 'syz.0.5323': attribute type 21 has an invalid length. [ 308.141821][T15045] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5323'. [ 312.439210][T15106] netlink: 'syz.0.5357': attribute type 17 has an invalid length. [ 312.485312][T15106] netlink: 'syz.0.5357': attribute type 41 has an invalid length. [ 312.519845][T15106] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5357'. [ 314.670418][T15159] netlink: 'syz.4.5372': attribute type 10 has an invalid length. [ 314.781148][T15159] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 314.864215][T15164] tap0: tun_chr_ioctl cmd 1074025677 [ 314.882950][T15164] tap0: linktype set to 804 [ 315.007025][ T3581] cgroup: fork rejected by pids controller in /syz3 [ 316.377496][T15219] chnl_net:caif_netlink_parms(): no params data found [ 316.496827][T15219] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.504594][T15219] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.513784][T15219] device bridge_slave_0 entered promiscuous mode [ 316.522948][T15219] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.530400][T15219] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.538678][T15219] device bridge_slave_1 entered promiscuous mode [ 316.616161][T15219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.711556][T15219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.846596][T15219] team0: Port device team_slave_0 added [ 316.880151][T15219] team0: Port device team_slave_1 added [ 316.919972][ T1386] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.926355][ T1386] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.040643][T15219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.047817][T15219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.138522][T15219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.228458][T15219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.240181][T15219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.307293][T15219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.586102][T15219] device hsr_slave_0 entered promiscuous mode [ 317.656731][T15219] device hsr_slave_1 entered promiscuous mode [ 317.699523][T15219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.707101][T15219] Cannot create hsr debugfs directory [ 317.937673][T15219] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.013467][T15219] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.095826][T15219] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.119632][ T1073] Bluetooth: hci4: command 0x0409 tx timeout [ 318.154061][T15219] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.272489][T15219] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 318.301315][T15219] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 318.317793][T15219] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 318.328152][T15219] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 318.406008][T15219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.429387][T15219] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.436302][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.447784][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.458114][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.467483][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.476420][ T2646] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.483487][ T2646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.493235][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 318.510355][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 318.519068][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.532788][ T1414] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.539876][ T1414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.552360][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.569701][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.581500][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.594091][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.604535][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.622738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.633872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.648663][T15219] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.660393][T15219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.678716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.691048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.702786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.713065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.723878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.804554][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 318.813717][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 318.828955][T15219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.853970][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.864942][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.885421][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.894297][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.903420][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.911659][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.935592][T15219] device veth0_vlan entered promiscuous mode [ 318.948872][T15219] device veth1_vlan entered promiscuous mode [ 318.970372][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 318.978469][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 318.990746][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 319.001195][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 319.012907][T15219] device veth0_macvtap entered promiscuous mode [ 319.032019][T15219] device veth1_macvtap entered promiscuous mode [ 319.052925][T15219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.063948][T15219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.076032][T15219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.083523][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 319.095802][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 319.103892][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 319.114631][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 319.135564][T15219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.146358][T15219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.157210][T15219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.167904][T15219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.178282][T15219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.188728][T15219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.198706][T15219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.209538][T15219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.219436][T15219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.230046][T15219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.241152][T15219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.253600][T15219] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.263278][T15219] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.272503][T15219] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.281856][T15219] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.295767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 319.305182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 319.328793][ T154] device hsr_slave_0 left promiscuous mode [ 319.335838][ T154] device hsr_slave_1 left promiscuous mode [ 319.344897][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.352957][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.361720][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.369168][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.379089][ T154] device veth1_macvtap left promiscuous mode [ 319.507438][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.521698][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.572549][ T154] bond0 (unregistering): Released all slaves [ 319.655067][ T2646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.686766][ T2646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.701666][ T1414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.716922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 319.717426][ T1414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.742356][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 320.193420][ T1073] Bluetooth: hci4: command 0x041b tx timeout [ 320.197803][T15338] tap0: tun_chr_ioctl cmd 1074025677 [ 320.228335][T15338] tap0: linktype set to 804 [ 320.262353][ T3582] cgroup: fork rejected by pids controller in /syz4 [ 322.279693][ T1073] Bluetooth: hci4: command 0x040f tx timeout [ 324.349812][ T3611] Bluetooth: hci4: command 0x0419 tx timeout [ 324.367771][T15367] netlink: 'syz.0.5460': attribute type 10 has an invalid length. [ 324.385218][T15367] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 324.612763][ T3568] cgroup: fork rejected by pids controller in /syz2 [ 324.656341][T15379] netlink: 'syz.1.5475': attribute type 10 has an invalid length. [ 324.673774][T15379] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 324.911628][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.250485][T15389] tap0: tun_chr_ioctl cmd 1074025677 [ 325.269450][T15389] tap0: linktype set to 804 [ 325.459676][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.564723][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.989280][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 327.549237][ T1965] Bluetooth: hci3: command 0x0409 tx timeout [ 328.713476][T15408] netlink: 'syz.3.5479': attribute type 10 has an invalid length. [ 328.777247][ T154] bond0: (slave netdevsim0): Releasing backup interface [ 328.832624][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.048727][T15386] chnl_net:caif_netlink_parms(): no params data found [ 329.069309][ T1073] Bluetooth: hci1: command 0x041b tx timeout [ 329.108864][T15393] chnl_net:caif_netlink_parms(): no params data found [ 329.353004][T15386] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.365812][T15386] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.376368][T15386] device bridge_slave_0 entered promiscuous mode [ 329.401810][T15393] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.408891][T15393] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.418605][T15393] device bridge_slave_0 entered promiscuous mode [ 329.427083][T15386] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.435429][T15386] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.443561][T15386] device bridge_slave_1 entered promiscuous mode [ 329.459230][T15393] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.466464][T15393] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.474703][T15393] device bridge_slave_1 entered promiscuous mode [ 329.540903][T15393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.566095][T15393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.586494][T15386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.631386][ T3611] Bluetooth: hci3: command 0x041b tx timeout [ 329.645547][T15386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.682506][T15393] team0: Port device team_slave_0 added [ 329.703014][T15386] team0: Port device team_slave_0 added [ 329.712271][T15393] team0: Port device team_slave_1 added [ 329.728926][T15386] team0: Port device team_slave_1 added [ 329.770093][T15393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.777046][T15393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.805208][T15393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.830998][T15386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.837948][T15386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.865862][T15386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.878024][T15393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.885838][T15393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.911901][T15393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.927649][T15386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.935069][T15386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.961947][T15386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.024450][T15386] device hsr_slave_0 entered promiscuous mode [ 330.037084][T15386] device hsr_slave_1 entered promiscuous mode [ 330.043725][T15386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.051727][T15386] Cannot create hsr debugfs directory [ 330.060062][T15393] device hsr_slave_0 entered promiscuous mode [ 330.066710][T15393] device hsr_slave_1 entered promiscuous mode [ 330.073768][T15393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.081947][T15393] Cannot create hsr debugfs directory [ 330.533168][ T154] device hsr_slave_0 left promiscuous mode [ 330.542673][ T154] device hsr_slave_1 left promiscuous mode [ 330.550996][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.558679][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.567429][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.575266][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.586970][ T154] device veth1_macvtap left promiscuous mode [ 330.593582][ T154] device veth0_macvtap left promiscuous mode [ 330.777456][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.793448][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.861849][ T154] bond0 (unregistering): Released all slaves [ 330.984996][T15393] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.048694][T15393] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.125094][T15393] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.164937][ T3611] Bluetooth: hci1: command 0x040f tx timeout [ 331.241787][T15393] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.422769][T15386] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 331.459793][T15393] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 331.485471][T15386] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 331.516832][T15393] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 331.527511][T15386] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 331.546436][T15393] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 331.565712][T15386] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 331.588626][T15393] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 331.719326][ T2989] Bluetooth: hci3: command 0x040f tx timeout [ 331.753765][T15386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.777036][T15393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.788925][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.812817][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.834911][T15386] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.858473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.869751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.893443][T15393] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.901842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.913788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.930148][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.937227][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.951346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.964885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.978042][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.985282][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.994669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 332.003897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.040858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.050212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 332.061488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.073066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 332.100397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 332.108952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.126624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.144695][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.151912][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.169537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.188194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.202839][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.209965][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.221498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 332.235591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.245090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.254224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.285108][T15386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.313592][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.328394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.337404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.352942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.365719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.379536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 332.399568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.416803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 332.429454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 332.438144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.454503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.474202][T15393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.486345][T15393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.504655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.520547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.544231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.643688][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.660423][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.672498][T15393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.714036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.730855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.763927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.777288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.786458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.795000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.804194][T15393] device veth0_vlan entered promiscuous mode [ 332.820482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.828080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.873202][T15386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.884247][T15393] device veth1_vlan entered promiscuous mode [ 332.928248][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 332.939748][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 332.948180][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.961117][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.973749][T15393] device veth0_macvtap entered promiscuous mode [ 332.984617][T15393] device veth1_macvtap entered promiscuous mode [ 333.031351][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.050194][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.078590][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.090244][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.101222][T15393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.109963][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 333.118139][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 333.129987][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.138520][ T1414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.153837][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.172474][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.185475][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.197770][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.207792][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.218640][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.228844][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.239529][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.249924][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 333.250967][T15393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.273149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.283213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.302811][T15393] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.313471][T15393] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.324971][T15393] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.335375][T15393] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.356653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.367978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.414354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.423150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.432594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.440951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.458111][T15386] device veth0_vlan entered promiscuous mode [ 333.491885][T15386] device veth1_vlan entered promiscuous mode [ 333.535026][ T2646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.540243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 333.551253][ T2646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.567959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 333.576937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 333.584967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 333.593688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.620560][T15386] device veth0_macvtap entered promiscuous mode [ 333.630896][T15386] device veth1_macvtap entered promiscuous mode [ 333.657036][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.665825][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.675933][T15386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.687907][T15386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.698039][T15386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.708791][T15386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.719891][T15386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.730551][T15386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.742169][T15386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.756131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 333.764497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 333.772667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 333.780667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.789861][ T26] Bluetooth: hci3: command 0x0419 tx timeout [ 333.789943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.811312][T15386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.825346][T15386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.837590][T15386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.848602][T15386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.858449][T15386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.869406][T15386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.879464][T15386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.889889][T15386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.900042][T15386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.910505][T15386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.922001][T15386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.941800][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.973292][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.990068][T15386] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.998804][T15386] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.007925][T15386] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.017040][T15386] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.151557][ T1414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.169697][ T1414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.283621][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 334.307022][ T3673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.329488][ T3673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.344553][T15548] netlink: 'syz.1.5494': attribute type 29 has an invalid length. [ 334.372867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 334.511827][T15548] netlink: 'syz.1.5494': attribute type 29 has an invalid length. [ 334.761181][T15568] netlink: 'syz.0.5503': attribute type 3 has an invalid length. [ 334.776680][T15558] netlink: 'syz.3.5497': attribute type 3 has an invalid length. [ 334.783482][T15568] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.5503'. [ 334.815305][T15558] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.5497'. [ 335.191272][ T154] device hsr_slave_0 left promiscuous mode [ 335.211816][ T154] device hsr_slave_1 left promiscuous mode [ 335.251820][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.279922][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.289847][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.341679][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.385934][ T154] device veth1_macvtap left promiscuous mode [ 335.589712][T15607] netlink: 'syz.3.5521': attribute type 49 has an invalid length. [ 335.725462][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.753885][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.891425][ T154] bond0 (unregistering): Released all slaves [ 335.918992][T15607] netlink: 'syz.3.5521': attribute type 49 has an invalid length. [ 336.072916][T15613] netlink: 'syz.0.5526': attribute type 49 has an invalid length. [ 336.098753][T15613] netlink: 'syz.0.5526': attribute type 49 has an invalid length. [ 336.256216][T15629] netlink: 'syz.1.5530': attribute type 10 has an invalid length. [ 336.313755][T15629] netlink: 'syz.1.5530': attribute type 19 has an invalid length. [ 336.354185][T15629] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5530'. [ 338.051440][T15712] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.5570'. [ 339.347051][T15731] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.5579'. [ 339.510258][T15747] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.5587'. [ 339.764526][T15761] validate_nla: 1 callbacks suppressed [ 339.764542][T15761] netlink: 'syz.3.5594': attribute type 3 has an invalid length. [ 339.814693][T15761] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5594'. [ 340.041166][T15784] tun0: tun_chr_ioctl cmd 35108 [ 340.247677][T15797] tap0: tun_chr_ioctl cmd 2147767521 [ 341.311287][T15828] tap0: tun_chr_ioctl cmd 2147767521 [ 341.330814][T15830] tun0: tun_chr_ioctl cmd 35108 [ 341.788591][T15864] tap0: tun_chr_ioctl cmd 2147767521 [ 341.851383][T15867] tun1: tun_chr_ioctl cmd 35108 [ 342.023443][T15882] netlink: 'syz.0.5651': attribute type 3 has an invalid length. [ 342.049077][T15882] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5651'. [ 342.366327][T15906] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.5663'. [ 342.588342][T15921] netlink: 'syz.4.5669': attribute type 3 has an invalid length. [ 342.661604][T15921] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5669'. [ 342.915653][T15942] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.5678'. [ 343.247809][T15958] netlink: 'syz.4.5688': attribute type 2 has an invalid length. [ 343.270484][T15958] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.5688'. [ 343.504740][T15974] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.5695'. [ 343.779992][T15995] netlink: 'syz.2.5704': attribute type 2 has an invalid length. [ 343.787755][T15995] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.5704'. [ 343.938499][T16009] netlink: 'syz.4.5712': attribute type 3 has an invalid length. [ 343.962522][T16009] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.5712'. [ 344.091502][T16021] netlink: 'syz.4.5717': attribute type 29 has an invalid length. [ 344.141303][T16021] netlink: 'syz.4.5717': attribute type 29 has an invalid length. [ 344.657737][T16063] ------------[ cut here ]------------ [ 344.677895][T16063] WARNING: CPU: 1 PID: 16063 at net/wireless/core.h:220 cfg80211_wireless_stats+0x57d/0x660 [ 344.706149][T16063] Modules linked in: [ 344.721540][T16063] CPU: 1 PID: 16063 Comm: syz.2.5739 Not tainted 5.15.166-syzkaller #0 [ 344.748503][T16063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 344.772008][T16063] RIP: 0010:cfg80211_wireless_stats+0x57d/0x660 [ 344.785515][T16063] Code: 00 00 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 60 0f 85 e7 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 33 9a c5 f7 <0f> 0b e9 3c fc ff ff e8 27 9a c5 f7 0f 0b e9 81 fd ff ff e8 1b 9a [ 344.834882][T16063] RSP: 0018:ffffc900031279c0 EFLAGS: 00010287 [ 344.853746][T16063] RAX: ffffffff89babfcd RBX: 0000000000000000 RCX: 0000000000040000 [ 344.875817][T16063] RDX: ffffc9000b332000 RSI: 000000000000053e RDI: 000000000000053f [ 344.898971][T16063] RBP: ffffc90003127a78 R08: ffffffff89babbd0 R09: fffffbfff1bd2b66 [ 344.909453][T16063] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888023726000 [ 344.918204][T16063] R13: ffff88807dca5000 R14: 1ffff1100fb94a00 R15: ffff8880237265c0 [ 344.928346][T16063] FS: 00007fbcb20376c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 344.938773][T16063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.946481][T16063] CR2: 0000000020dc8000 CR3: 0000000065a45000 CR4: 00000000003506e0 [ 344.961849][T16063] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 344.971123][T16063] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 344.981506][T16063] Call Trace: [ 344.985109][T16063] [ 344.988301][T16063] ? __warn+0x15b/0x300 [ 344.993460][T16063] ? cfg80211_wireless_stats+0x57d/0x660 [ 345.000715][T16063] ? report_bug+0x1b7/0x2e0 [ 345.005745][T16063] ? handle_bug+0x3d/0x70 [ 345.011840][T16063] ? exc_invalid_op+0x16/0x40 [ 345.017414][T16063] ? asm_exc_invalid_op+0x16/0x20 [ 345.027545][T16063] ? cfg80211_wireless_stats+0x180/0x660 [ 345.036923][T16063] ? cfg80211_wireless_stats+0x57d/0x660 [ 345.046426][T16063] ? cfg80211_wireless_stats+0x57d/0x660 [ 345.056923][T16063] ? cfg80211_wext_giwretry+0x360/0x360 [ 345.067582][T16063] ? cfg80211_wext_giwretry+0x360/0x360 [ 345.077716][T16063] iw_handler_get_iwstats+0x7d/0x240 [ 345.083699][T16063] ioctl_standard_iw_point+0x781/0xca0 [ 345.089955][T16063] ? wireless_nlevent_process+0x110/0x110 [ 345.095976][T16063] ? iw_handler_get_iwstats+0x240/0x240 [ 345.102843][T16063] ? wext_ioctl_dispatch+0xb9/0x460 [ 345.108379][T16063] ? __lock_acquire+0x1ff0/0x1ff0 [ 345.115271][T16063] ? mutex_lock_io_nested+0x60/0x60 [ 345.127532][T16063] ? full_name_hash+0x8f/0xe0 [ 345.137036][T16063] ioctl_standard_call+0xc3/0x280 [ 345.148076][T16063] ? wireless_nlevent_process+0x110/0x110 [ 345.157705][T16063] ? wext_ioctl_dispatch+0x460/0x460 [ 345.163724][T16063] wext_ioctl_dispatch+0x16f/0x460 [ 345.169541][T16063] ? wext_ioctl_dispatch+0x460/0x460 [ 345.175194][T16063] ? iw_handler_get_private+0x1e0/0x1e0 [ 345.184255][T16063] wext_handle_ioctl+0x15b/0x260 [ 345.191084][T16063] ? call_commit_handler+0xf0/0xf0 [ 345.196609][T16063] sock_ioctl+0x13b/0x770 [ 345.201639][T16063] ? sock_poll+0x410/0x410 [ 345.207271][T16063] ? __fget_files+0x413/0x480 [ 345.214053][T16063] ? bpf_lsm_file_ioctl+0x5/0x10 [ 345.224762][T16063] ? security_file_ioctl+0x7d/0xa0 [ 345.234312][T16063] ? sock_poll+0x410/0x410 [ 345.239078][T16063] __se_sys_ioctl+0xf1/0x160 [ 345.251377][T16063] do_syscall_64+0x3b/0xb0 [ 345.256164][T16063] ? clear_bhb_loop+0x15/0x70 [ 345.266920][T16063] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.275105][T16063] RIP: 0033:0x7fbcb3bbdef9 [ 345.289259][T16063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.329917][T16063] RSP: 002b:00007fbcb2037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.338387][T16063] RAX: ffffffffffffffda RBX: 00007fbcb3d76f80 RCX: 00007fbcb3bbdef9 [ 345.369207][T16063] RDX: 0000000020000000 RSI: 0000000000008b0f RDI: 0000000000000004 [ 345.377216][T16063] RBP: 00007fbcb3c3001e R08: 0000000000000000 R09: 0000000000000000 [ 345.399217][T16063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.407358][T16063] R13: 0000000000000000 R14: 00007fbcb3d76f80 R15: 00007ffc2de623a8 [ 345.419636][T16063] [ 345.422684][T16063] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 345.429964][T16063] CPU: 0 PID: 16063 Comm: syz.2.5739 Not tainted 5.15.166-syzkaller #0 [ 345.438222][T16063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 345.448289][T16063] Call Trace: [ 345.451571][T16063] [ 345.454510][T16063] dump_stack_lvl+0x1e3/0x2d0 [ 345.459188][T16063] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 345.464825][T16063] ? panic+0x860/0x860 [ 345.468909][T16063] ? cfg80211_wireless_stats+0x4b0/0x660 [ 345.474547][T16063] ? cfg80211_wireless_stats+0x4b0/0x660 [ 345.480177][T16063] panic+0x318/0x860 [ 345.484265][T16063] ? __warn+0x16a/0x300 [ 345.488430][T16063] ? fb_is_primary_device+0xd0/0xd0 [ 345.493651][T16063] ? cfg80211_wireless_stats+0x57d/0x660 [ 345.499282][T16063] __warn+0x2b2/0x300 [ 345.503268][T16063] ? cfg80211_wireless_stats+0x57d/0x660 [ 345.508887][T16063] report_bug+0x1b7/0x2e0 [ 345.513217][T16063] handle_bug+0x3d/0x70 [ 345.517367][T16063] exc_invalid_op+0x16/0x40 [ 345.521858][T16063] asm_exc_invalid_op+0x16/0x20 [ 345.526704][T16063] RIP: 0010:cfg80211_wireless_stats+0x57d/0x660 [ 345.532946][T16063] Code: 00 00 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 60 0f 85 e7 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 33 9a c5 f7 <0f> 0b e9 3c fc ff ff e8 27 9a c5 f7 0f 0b e9 81 fd ff ff e8 1b 9a [ 345.552626][T16063] RSP: 0018:ffffc900031279c0 EFLAGS: 00010287 [ 345.558682][T16063] RAX: ffffffff89babfcd RBX: 0000000000000000 RCX: 0000000000040000 [ 345.566636][T16063] RDX: ffffc9000b332000 RSI: 000000000000053e RDI: 000000000000053f [ 345.574592][T16063] RBP: ffffc90003127a78 R08: ffffffff89babbd0 R09: fffffbfff1bd2b66 [ 345.582550][T16063] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888023726000 [ 345.590505][T16063] R13: ffff88807dca5000 R14: 1ffff1100fb94a00 R15: ffff8880237265c0 [ 345.598473][T16063] ? cfg80211_wireless_stats+0x180/0x660 [ 345.604095][T16063] ? cfg80211_wireless_stats+0x57d/0x660 [ 345.609731][T16063] ? cfg80211_wext_giwretry+0x360/0x360 [ 345.615279][T16063] ? cfg80211_wext_giwretry+0x360/0x360 [ 345.620808][T16063] iw_handler_get_iwstats+0x7d/0x240 [ 345.626087][T16063] ioctl_standard_iw_point+0x781/0xca0 [ 345.631548][T16063] ? wireless_nlevent_process+0x110/0x110 [ 345.637261][T16063] ? iw_handler_get_iwstats+0x240/0x240 [ 345.642795][T16063] ? wext_ioctl_dispatch+0xb9/0x460 [ 345.647976][T16063] ? __lock_acquire+0x1ff0/0x1ff0 [ 345.652989][T16063] ? mutex_lock_io_nested+0x60/0x60 [ 345.658179][T16063] ? full_name_hash+0x8f/0xe0 [ 345.662849][T16063] ioctl_standard_call+0xc3/0x280 [ 345.667956][T16063] ? wireless_nlevent_process+0x110/0x110 [ 345.673662][T16063] ? wext_ioctl_dispatch+0x460/0x460 [ 345.678936][T16063] wext_ioctl_dispatch+0x16f/0x460 [ 345.684035][T16063] ? wext_ioctl_dispatch+0x460/0x460 [ 345.689306][T16063] ? iw_handler_get_private+0x1e0/0x1e0 [ 345.694843][T16063] wext_handle_ioctl+0x15b/0x260 [ 345.699772][T16063] ? call_commit_handler+0xf0/0xf0 [ 345.704890][T16063] sock_ioctl+0x13b/0x770 [ 345.709215][T16063] ? sock_poll+0x410/0x410 [ 345.713624][T16063] ? __fget_files+0x413/0x480 [ 345.718300][T16063] ? bpf_lsm_file_ioctl+0x5/0x10 [ 345.723224][T16063] ? security_file_ioctl+0x7d/0xa0 [ 345.728326][T16063] ? sock_poll+0x410/0x410 [ 345.732733][T16063] __se_sys_ioctl+0xf1/0x160 [ 345.737314][T16063] do_syscall_64+0x3b/0xb0 [ 345.741808][T16063] ? clear_bhb_loop+0x15/0x70 [ 345.746471][T16063] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.752351][T16063] RIP: 0033:0x7fbcb3bbdef9 [ 345.756754][T16063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.776344][T16063] RSP: 002b:00007fbcb2037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.784744][T16063] RAX: ffffffffffffffda RBX: 00007fbcb3d76f80 RCX: 00007fbcb3bbdef9 [ 345.792702][T16063] RDX: 0000000020000000 RSI: 0000000000008b0f RDI: 0000000000000004 [ 345.800658][T16063] RBP: 00007fbcb3c3001e R08: 0000000000000000 R09: 0000000000000000 [ 345.808614][T16063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.816573][T16063] R13: 0000000000000000 R14: 00007fbcb3d76f80 R15: 00007ffc2de623a8 [ 345.824555][T16063] [ 345.827643][T16063] Kernel Offset: disabled [ 345.831970][T16063] Rebooting in 86400 seconds..