last executing test programs: 6.742883307s ago: executing program 1 (id=26487): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./cgroup\x00', 0x0, 0x4008, r0}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000100)='./cgroup/../file0\x00', r1, 0x4000, r0}, 0x18) 6.638091341s ago: executing program 1 (id=26490): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) 4.618548628s ago: executing program 0 (id=26531): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xb, 0x6, 0x0, 0x0, 0x0, 0x40000000000, 0x24010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1a2d, 0x0, 0x800004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x91850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0xa, 0x0, 0x0, 0xfffffffd, 0x0, 0x7}, 0xffffffffffffffff, 0x2, r0, 0x1) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xf7) 4.5393051s ago: executing program 0 (id=26532): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='/cpu'], 0x5) 4.53850627s ago: executing program 2 (id=26540): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 4.470312422s ago: executing program 2 (id=26534): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x801) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r0], 0xfe33) 4.433232903s ago: executing program 0 (id=26535): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.362173365s ago: executing program 2 (id=26536): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000001140)=ANY=[@ANYBLOB='1-2:5'], 0x31) 4.272111639s ago: executing program 2 (id=26538): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) 4.136043323s ago: executing program 3 (id=26541): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 3.516321274s ago: executing program 1 (id=26542): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 3.516177614s ago: executing program 3 (id=26543): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 3.401151117s ago: executing program 3 (id=26544): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffdf}, 0x8000, 0x5, 0x3, 0xaaf04684de878bdf, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a020000000880802fb0a000200110ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3.398447768s ago: executing program 0 (id=26545): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x801) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r0], 0xfe33) 3.290993741s ago: executing program 1 (id=26546): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000017000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70700000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 3.290235181s ago: executing program 2 (id=26554): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x200000000000ff, 0x3}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x890c, 0x0) 3.266434342s ago: executing program 0 (id=26547): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000001140)=ANY=[@ANYBLOB='1-2:5'], 0x31) 3.202347384s ago: executing program 3 (id=26548): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0) 3.179445395s ago: executing program 3 (id=26549): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x2e, 0x0, &(0x7f0000000000)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03035ab130ebde34e9", 0x0, 0xffffeffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.156049565s ago: executing program 1 (id=26550): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc) 3.104840117s ago: executing program 2 (id=26551): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) 3.096075948s ago: executing program 0 (id=26552): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1bee, 0xe021, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x7, 0x5}, 0x200, 0x1, 0x0, 0x8}, 0x0, 0x400b, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 3.065034768s ago: executing program 1 (id=26553): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 0s ago: executing program 3 (id=26555): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) kernel console output (not intermixed with test programs): . [ 1101.385901][T17139] netlink: 'syz.2.21155': attribute type 29 has an invalid length. [ 1101.625860][T17150] netlink: 'syz.1.21170': attribute type 7 has an invalid length. [ 1101.869424][T17167] netlink: 'syz.0.21166': attribute type 29 has an invalid length. [ 1101.903903][T17167] netlink: 'syz.0.21166': attribute type 29 has an invalid length. [ 1101.926859][T17168] netlink: 'syz.0.21166': attribute type 29 has an invalid length. [ 1103.580638][T17222] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.21197'. [ 1105.320560][T17269] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.21218'. [ 1105.507049][T17277] sctp: [Deprecated]: syz.0.21222 (pid 17277) Use of int in max_burst socket option deprecated. [ 1105.507049][T17277] Use struct sctp_assoc_value instead [ 1105.756832][T17293] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.21230'. [ 1107.384521][T17340] validate_nla: 4 callbacks suppressed [ 1107.384541][T17340] netlink: 'syz.2.21252': attribute type 3 has an invalid length. [ 1107.398733][T17340] netlink: 'syz.2.21252': attribute type 1 has an invalid length. [ 1107.410679][T17340] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.21252'. [ 1107.683030][T17345] netlink: 196 bytes leftover after parsing attributes in process `syz.2.21254'. [ 1107.918625][T17353] sctp: [Deprecated]: syz.1.21257 (pid 17353) Use of int in max_burst socket option deprecated. [ 1107.918625][T17353] Use struct sctp_assoc_value instead [ 1108.338073][T17360] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21261'. [ 1108.352605][T17360] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21261'. [ 1108.367192][T17360] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21261'. [ 1108.532409][T17371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21264'. [ 1108.543530][T17371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21264'. [ 1108.553047][T17368] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21264'. [ 1110.597796][T17453] __nla_validate_parse: 5 callbacks suppressed [ 1110.597814][T17453] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21305'. [ 1110.655808][T17453] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21305'. [ 1110.703924][T17455] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21305'. [ 1110.802536][T17458] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21307'. [ 1110.843799][T17458] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21307'. [ 1110.860901][T17457] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21307'. [ 1112.465768][T17505] netlink: 'syz.3.21330': attribute type 21 has an invalid length. [ 1112.480952][T17505] netlink: 'syz.3.21330': attribute type 6 has an invalid length. [ 1112.496231][T17505] netlink: 132 bytes leftover after parsing attributes in process `syz.3.21330'. [ 1112.704031][T17518] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.21336'. [ 1113.610876][T17543] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.21347'. [ 1114.000615][T17559] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 1114.126649][T17565] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.21357'. [ 1116.048613][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.055212][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.754866][T17643] netlink: 'syz.1.21401': attribute type 27 has an invalid length. [ 1116.763326][T17643] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.21401'. [ 1116.897900][T17645] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 1117.535354][T17677] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 1117.551214][T17682] netlink: 'syz.2.21412': attribute type 46 has an invalid length. [ 1117.564310][T17682] netlink: 'syz.2.21412': attribute type 46 has an invalid length. [ 1117.808730][T17696] netlink: 'syz.0.21420': attribute type 27 has an invalid length. [ 1117.817302][T17696] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.21420'. [ 1118.014860][T17706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21425'. [ 1118.078671][T17710] netlink: 'syz.3.21427': attribute type 46 has an invalid length. [ 1118.087839][T17710] netlink: 'syz.3.21427': attribute type 46 has an invalid length. [ 1118.545374][T17737] netlink: 'syz.0.21440': attribute type 46 has an invalid length. [ 1118.554470][T17737] netlink: 'syz.0.21440': attribute type 46 has an invalid length. [ 1118.646268][T17739] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 1118.924593][T17757] netlink: 'syz.2.21447': attribute type 25 has an invalid length. [ 1118.932595][T17757] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.21447'. [ 1119.043520][T17760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21452'. [ 1119.138227][T17767] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 1119.485821][T17787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21466'. [ 1119.554907][T17793] netlink: 6 bytes leftover after parsing attributes in process `syz.2.21468'. [ 1119.570217][T17791] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.21467'. [ 1119.583467][T17793] openvswitch: netlink: Flow actions attr not present in new flow. [ 1119.586008][T17791] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.21467'. [ 1119.813779][T17805] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.21474'. [ 1120.974957][T17848] netlink: 'syz.0.21495': attribute type 25 has an invalid length. [ 1122.780001][T17936] __nla_validate_parse: 4 callbacks suppressed [ 1122.780019][T17936] netlink: 132 bytes leftover after parsing attributes in process `syz.2.21537'. [ 1124.373837][T18003] netlink: 132 bytes leftover after parsing attributes in process `syz.0.21571'. [ 1125.596459][T18031] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21583'. [ 1127.288973][T18066] netlink: 'syz.0.21599': attribute type 9 has an invalid length. [ 1127.297528][T18066] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.21599'. [ 1128.774311][T18100] netlink: 'syz.2.21615': attribute type 2 has an invalid length. [ 1128.967053][T18109] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.21627'. [ 1129.004826][T18111] netlink: 68 bytes leftover after parsing attributes in process `syz.2.21619'. [ 1129.137034][T18119] netlink: 'syz.2.21624': attribute type 8 has an invalid length. [ 1129.183406][T18119] netlink: 'syz.2.21624': attribute type 3 has an invalid length. [ 1129.210022][T18119] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.21624'. [ 1129.523801][T18139] netlink: 68 bytes leftover after parsing attributes in process `syz.0.21635'. [ 1129.955898][T18162] netlink: 68 bytes leftover after parsing attributes in process `syz.1.21647'. [ 1130.328035][T18180] netlink: 'syz.1.21654': attribute type 2 has an invalid length. [ 1130.587626][T18188] netlink: 'syz.1.21659': attribute type 11 has an invalid length. [ 1130.600539][T18188] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.21659'. [ 1131.426471][T18224] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.21674'. [ 1133.287063][T18299] netlink: 763 bytes leftover after parsing attributes in process `syz.2.21713'. [ 1133.614691][T18321] netlink: 'syz.1.21724': attribute type 21 has an invalid length. [ 1133.622878][T18321] netlink: 164 bytes leftover after parsing attributes in process `syz.1.21724'. [ 1133.667715][T18323] netlink: 763 bytes leftover after parsing attributes in process `syz.3.21725'. [ 1134.748167][T18373] netlink: 'syz.3.21747': attribute type 21 has an invalid length. [ 1134.756430][T18373] netlink: 'syz.3.21747': attribute type 1 has an invalid length. [ 1134.764839][T18373] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.21747'. [ 1134.825768][T18375] netlink: 'syz.2.21749': attribute type 21 has an invalid length. [ 1134.835738][T18375] netlink: 164 bytes leftover after parsing attributes in process `syz.2.21749'. [ 1135.247089][T18397] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.21760'. [ 1135.283541][T18397] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1135.378589][T18401] netlink: 'syz.0.21762': attribute type 21 has an invalid length. [ 1135.394398][T18401] netlink: 164 bytes leftover after parsing attributes in process `syz.0.21762'. [ 1135.506889][T18409] netlink: 'syz.2.21765': attribute type 21 has an invalid length. [ 1135.515631][T18409] netlink: 'syz.2.21765': attribute type 1 has an invalid length. [ 1135.523539][T18409] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.21765'. [ 1135.996681][T18438] netlink: 'syz.1.21778': attribute type 21 has an invalid length. [ 1136.004794][T18438] netlink: 'syz.1.21778': attribute type 1 has an invalid length. [ 1136.012659][T18438] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.21778'. [ 1136.964610][T18496] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21807'. [ 1136.996639][T18495] netlink: 'syz.3.21808': attribute type 1 has an invalid length. [ 1137.023577][T18495] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.21808'. [ 1137.525082][T18528] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21820'. [ 1137.957185][T18551] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.21833'. [ 1138.808810][T18588] validate_nla: 2 callbacks suppressed [ 1138.808831][T18588] netlink: 'syz.1.21850': attribute type 1 has an invalid length. [ 1139.229628][T18602] netlink: 'syz.2.21856': attribute type 3 has an invalid length. [ 1139.408746][T18611] netlink: 'syz.2.21859': attribute type 1 has an invalid length. [ 1140.282320][T18642] __nla_validate_parse: 5 callbacks suppressed [ 1140.282337][T18642] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.21875'. [ 1140.966759][T18680] netlink: 'syz.3.21894': attribute type 12 has an invalid length. [ 1140.990556][T18680] netlink: 'syz.3.21894': attribute type 11 has an invalid length. [ 1141.008514][T18680] netlink: 188816 bytes leftover after parsing attributes in process `syz.3.21894'. [ 1141.392282][T18698] netlink: 'syz.2.21903': attribute type 21 has an invalid length. [ 1141.408786][T18698] netlink: 128 bytes leftover after parsing attributes in process `syz.2.21903'. [ 1141.421633][T18698] netlink: 'syz.2.21903': attribute type 5 has an invalid length. [ 1141.429999][T18698] netlink: 3 bytes leftover after parsing attributes in process `syz.2.21903'. [ 1141.710787][T18715] netlink: 'syz.3.21909': attribute type 1 has an invalid length. [ 1141.732191][T18715] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.21909'. [ 1142.850985][T18763] netlink: 'syz.2.21938': attribute type 1 has an invalid length. [ 1142.868567][T18763] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.21938'. [ 1143.129867][T18779] netlink: 'syz.0.21943': attribute type 21 has an invalid length. [ 1143.151351][T18779] netlink: 128 bytes leftover after parsing attributes in process `syz.0.21943'. [ 1143.164077][T18779] netlink: 'syz.0.21943': attribute type 5 has an invalid length. [ 1143.172518][T18779] netlink: 3 bytes leftover after parsing attributes in process `syz.0.21943'. [ 1143.191442][T18783] mac80211_hwsim hwsim24 ..c: renamed from wlan1 [ 1144.687899][T18869] ref_ctr_offset mismatch. inode: 0x6b3e offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 1145.120167][T18892] mac80211_hwsim hwsim26 ..c: renamed from wlan1 [ 1145.400522][T18902] netlink: 'syz.0.22001': attribute type 21 has an invalid length. [ 1146.144409][T18949] ref_ctr_offset mismatch. inode: 0x6c0b offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 1146.251815][T18956] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22030'. [ 1146.442656][T18967] netlink: 'syz.3.22035': attribute type 21 has an invalid length. [ 1146.565815][T18974] netlink: 'syz.3.22038': attribute type 29 has an invalid length. [ 1146.574675][T18974] netlink: 'syz.3.22038': attribute type 29 has an invalid length. [ 1146.802013][T18987] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.22044'. [ 1146.993788][T18993] netlink: 'syz.2.22047': attribute type 21 has an invalid length. [ 1147.232659][T19006] ref_ctr_offset mismatch. inode: 0x6b45 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 1147.579668][T19029] netlink: 'syz.1.22059': attribute type 21 has an invalid length. [ 1147.591651][T19031] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.22064'. [ 1148.260508][T19068] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.22080'. [ 1148.351484][T19070] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.22081'. [ 1148.371204][T19070] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1148.670421][T19093] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.22091'. [ 1149.020057][T19111] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.22101'. [ 1149.047314][T19111] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1149.203621][T19120] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.22104'. [ 1149.516426][T19141] netlink: 'syz.1.22114': attribute type 10 has an invalid length. [ 1150.065102][T19173] netlink: 'syz.2.22129': attribute type 10 has an invalid length. [ 1150.509019][T19200] netlink: 'syz.0.22141': attribute type 10 has an invalid length. [ 1151.056966][T19227] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.22155'. [ 1151.083591][T19227] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.22155'. [ 1151.105855][T19229] bridge_slave_1: entered promiscuous mode [ 1151.356648][T19245] __nla_validate_parse: 2 callbacks suppressed [ 1151.356668][T19245] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.22162'. [ 1151.650990][T19257] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.22170'. [ 1151.665514][T19257] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.22170'. [ 1151.679229][T19257] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.22170'. [ 1151.871675][T19271] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.22177'. [ 1152.081826][T19285] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.22183'. [ 1152.092118][T19285] bridge_slave_1: entered promiscuous mode [ 1152.318149][T19299] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.22192'. [ 1152.649089][T19319] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.22198'. [ 1152.663769][T19317] netlink: 'syz.0.22208': attribute type 3 has an invalid length. [ 1152.994088][T19329] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.22204'. [ 1153.003702][T19329] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.22204'. [ 1153.600345][T19365] netlink: 'syz.1.22223': attribute type 3 has an invalid length. [ 1155.035582][T19432] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1155.672966][T19466] delete_channel: no stack [ 1155.723675][T19469] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1156.143477][T19492] netlink: 'syz.1.22281': attribute type 3 has an invalid length. [ 1157.997083][T19562] netlink: 'syz.1.22315': attribute type 2 has an invalid length. [ 1158.013399][T19562] __nla_validate_parse: 12 callbacks suppressed [ 1158.013416][T19562] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.22315'. [ 1158.937183][T19596] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.22328'. [ 1158.959019][T19596] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1158.973579][T19596] openvswitch: netlink: Message has 1 unknown bytes. [ 1159.188697][T19601] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.22330'. [ 1160.137822][T19627] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.22349'. [ 1160.149587][T19627] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1160.159362][T19627] openvswitch: netlink: Message has 1 unknown bytes. [ 1160.227149][T19630] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.22342'. [ 1160.734775][T19650] netlink: 'syz.2.22353': attribute type 3 has an invalid length. [ 1160.742679][T19650] netlink: 'syz.2.22353': attribute type 8 has an invalid length. [ 1160.751919][T19650] netlink: 197324 bytes leftover after parsing attributes in process `syz.2.22353'. [ 1160.847272][T19653] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.22355'. [ 1164.062706][T19749] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.22401'. [ 1165.604779][T19776] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.22412'. [ 1165.768109][T19784] netlink: 'syz.1.22418': attribute type 29 has an invalid length. [ 1165.788507][T19784] netlink: 'syz.1.22418': attribute type 29 has an invalid length. [ 1165.817626][T19789] netlink: 'syz.1.22418': attribute type 29 has an invalid length. [ 1166.056092][T19805] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.22427'. [ 1166.190472][T19811] netlink: 'syz.3.22432': attribute type 29 has an invalid length. [ 1166.199336][T19811] netlink: 'syz.3.22432': attribute type 29 has an invalid length. [ 1166.212216][T19811] netlink: 'syz.3.22432': attribute type 29 has an invalid length. [ 1166.650937][T19839] netlink: 'syz.2.22444': attribute type 29 has an invalid length. [ 1166.676937][T19839] netlink: 'syz.2.22444': attribute type 29 has an invalid length. [ 1166.695136][T19839] netlink: 'syz.2.22444': attribute type 29 has an invalid length. [ 1167.466462][T19887] netlink: 'syz.1.22468': attribute type 10 has an invalid length. [ 1167.486137][T19887] .`: (slave ): Enslaving as an active interface with an up link [ 1168.826258][T19941] bond0: (slave ): Enslaving as an active interface with an up link [ 1169.940534][T19978] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.22518'. [ 1170.137278][T19991] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22512'. [ 1170.924687][T20018] validate_nla: 2 callbacks suppressed [ 1170.924709][T20018] netlink: 'syz.0.22527': attribute type 3 has an invalid length. [ 1170.948004][T20018] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22527'. [ 1170.971917][T20020] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.22529'. [ 1172.130981][T20042] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.22538'. [ 1172.852404][T20058] netlink: 'syz.3.22545': attribute type 3 has an invalid length. [ 1172.899628][T20058] netlink: 132 bytes leftover after parsing attributes in process `syz.3.22545'. [ 1173.507861][T20078] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.22554'. [ 1173.596549][T20082] netlink: 'syz.1.22556': attribute type 29 has an invalid length. [ 1173.609834][T20082] netlink: 'syz.1.22556': attribute type 29 has an invalid length. [ 1173.623231][T20082] netlink: 'syz.1.22556': attribute type 29 has an invalid length. [ 1173.692885][T20087] netlink: 'syz.1.22557': attribute type 3 has an invalid length. [ 1173.702389][T20087] netlink: 132 bytes leftover after parsing attributes in process `syz.1.22557'. [ 1173.745361][T20091] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.22569'. [ 1174.446870][T20097] netlink: 'syz.3.22563': attribute type 3 has an invalid length. [ 1174.583499][T20097] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.22563'. [ 1177.156485][T20154] netlink: 'syz.0.22590': attribute type 3 has an invalid length. [ 1177.173425][T20154] __nla_validate_parse: 1 callbacks suppressed [ 1177.173443][T20154] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.22590'. [ 1177.487740][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.494176][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.982856][T20185] netlink: 'syz.2.22601': attribute type 3 has an invalid length. [ 1178.990942][T20185] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.22601'. [ 1179.608613][T20203] netlink: 'syz.3.22612': attribute type 3 has an invalid length. [ 1179.633311][T20203] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.22612'. [ 1179.804440][T20209] netlink: 'syz.1.22616': attribute type 3 has an invalid length. [ 1179.823548][T20209] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.22616'. [ 1180.837833][T20232] netlink: 'syz.1.22626': attribute type 33 has an invalid length. [ 1180.863328][T20232] netlink: 164 bytes leftover after parsing attributes in process `syz.1.22626'. [ 1181.290936][T20249] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.22637'. [ 1182.126186][T20297] netlink: 'syz.0.22655': attribute type 33 has an invalid length. [ 1182.143761][T20297] netlink: 164 bytes leftover after parsing attributes in process `syz.0.22655'. [ 1182.432186][T20314] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.22665'. [ 1182.729117][T20332] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22673'. [ 1183.090565][T20351] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.22682'. [ 1183.457525][T20374] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.22694'. [ 1183.491416][T20376] netlink: 'syz.1.22695': attribute type 21 has an invalid length. [ 1183.503375][T20376] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.22695'. [ 1183.610607][T20384] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.22698'. [ 1183.837196][T20399] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.22707'. [ 1184.206098][T20421] netlink: 'syz.1.22719': attribute type 10 has an invalid length. [ 1184.215553][T20421] netlink: 2 bytes leftover after parsing attributes in process `syz.1.22719'. [ 1184.229685][T20421] batadv_slave_1: entered promiscuous mode [ 1184.619475][T20446] netlink: 'syz.3.22737': attribute type 21 has an invalid length. [ 1184.628765][T20446] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.22737'. [ 1185.161156][T20482] netlink: 'syz.0.22745': attribute type 10 has an invalid length. [ 1185.170247][T20482] netlink: 2 bytes leftover after parsing attributes in process `syz.0.22745'. [ 1185.190491][T20482] 0: entered promiscuous mode [ 1186.594153][T20564] netlink: 'syz.2.22786': attribute type 1 has an invalid length. [ 1187.029231][T20587] netlink: 'syz.1.22797': attribute type 3 has an invalid length. [ 1188.057349][T20645] netlink: 'syz.1.22826': attribute type 1 has an invalid length. [ 1188.073490][T20645] __nla_validate_parse: 5 callbacks suppressed [ 1188.073504][T20645] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.22826'. [ 1188.295534][T20658] netlink: 'syz.3.22833': attribute type 3 has an invalid length. [ 1188.304604][T20658] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.22833'. [ 1188.504235][T20669] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.22838'. [ 1189.438850][T20719] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.22861'. [ 1190.365910][T20733] netlink: 'syz.3.22869': attribute type 29 has an invalid length. [ 1190.386509][T20733] netlink: 'syz.3.22869': attribute type 29 has an invalid length. [ 1190.417033][T20733] netlink: 'syz.3.22869': attribute type 29 has an invalid length. [ 1190.636573][T20741] netlink: 144 bytes leftover after parsing attributes in process `syz.2.22873'. [ 1190.665033][T20741] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1191.234128][T20762] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22884'. [ 1191.243660][T20762] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22884'. [ 1191.260074][T20762] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22884'. [ 1191.883561][T20793] netlink: 144 bytes leftover after parsing attributes in process `syz.3.22899'. [ 1191.914028][T20793] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1192.541952][T20810] IPv6: NLM_F_CREATE should be specified when creating new route [ 1192.712261][T20816] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22910'. [ 1194.335470][T20896] __nla_validate_parse: 2 callbacks suppressed [ 1194.335489][T20896] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.22947'. [ 1194.801742][T20922] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.22959'. [ 1194.951764][T20932] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.22966'. [ 1194.961499][T20932] netlink: 'syz.0.22966': attribute type 2 has an invalid length. [ 1195.315374][T20949] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.22976'. [ 1195.445325][T20955] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.22977'. [ 1195.462502][T20955] netlink: 'syz.1.22977': attribute type 2 has an invalid length. [ 1195.662040][T20969] netlink: 4079 bytes leftover after parsing attributes in process `syz.3.22983'. [ 1195.829209][T20977] netlink: 64 bytes leftover after parsing attributes in process `syz.0.22996'. [ 1196.007553][T20987] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.22991'. [ 1196.051355][T20987] netlink: 'syz.2.22991': attribute type 2 has an invalid length. [ 1196.191610][T20997] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.22997'. [ 1196.530104][T21013] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.23005'. [ 1196.729792][T21025] netlink: 'syz.2.23012': attribute type 46 has an invalid length. [ 1197.239981][T21055] netlink: 'syz.0.23027': attribute type 29 has an invalid length. [ 1197.256677][T21055] netlink: 'syz.0.23027': attribute type 29 has an invalid length. [ 1197.275565][T21055] netlink: 'syz.0.23027': attribute type 29 has an invalid length. [ 1197.847191][T21087] netlink: 'syz.3.23044': attribute type 46 has an invalid length. [ 1198.305241][T21110] netlink: 'syz.0.23054': attribute type 46 has an invalid length. [ 1198.487845][T21122] netlink: 'syz.1.23058': attribute type 29 has an invalid length. [ 1198.497170][T21122] netlink: 'syz.1.23058': attribute type 29 has an invalid length. [ 1198.697437][T21132] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 1198.713089][T21132] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 1199.446377][T21177] mac80211_hwsim hwsim64 wlan1: entered promiscuous mode [ 1199.453737][T21177] mac80211_hwsim hwsim64 wlan1: entered allmulticast mode [ 1199.963711][T21203] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 1199.970999][T21203] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 1200.004093][T21207] __nla_validate_parse: 8 callbacks suppressed [ 1200.004109][T21207] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.23100'. [ 1200.587816][T21240] validate_nla: 6 callbacks suppressed [ 1200.587950][T21240] netlink: 'syz.0.23115': attribute type 46 has an invalid length. [ 1200.602447][T21240] netlink: 'syz.0.23115': attribute type 46 has an invalid length. [ 1201.618348][T21265] netlink: 'syz.2.23133': attribute type 46 has an invalid length. [ 1201.627499][T21265] netlink: 'syz.2.23133': attribute type 46 has an invalid length. [ 1202.678383][T21322] netlink: 'syz.3.23154': attribute type 4 has an invalid length. [ 1202.687131][T21322] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.23154'. [ 1202.992604][T21336] netlink: 'syz.2.23161': attribute type 3 has an invalid length. [ 1203.011517][T21336] netlink: 16795 bytes leftover after parsing attributes in process `syz.2.23161'. [ 1204.911763][T21379] netlink: 763 bytes leftover after parsing attributes in process `syz.3.23176'. [ 1205.745330][T21406] netlink: 763 bytes leftover after parsing attributes in process `syz.2.23191'. [ 1206.715611][T21426] netlink: 763 bytes leftover after parsing attributes in process `syz.1.23201'. [ 1206.910189][T21434] netlink: 144308 bytes leftover after parsing attributes in process `syz.3.23206'. [ 1207.015451][T21438] netlink: 132 bytes leftover after parsing attributes in process `syz.1.23207'. [ 1207.133499][T21443] netlink: 'syz.2.23211': attribute type 2 has an invalid length. [ 1207.151632][T21443] netlink: 'syz.2.23211': attribute type 8 has an invalid length. [ 1207.169977][T21443] netlink: 132 bytes leftover after parsing attributes in process `syz.2.23211'. [ 1207.518193][T21458] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.23218'. [ 1207.838698][T21471] netlink: 'syz.1.23224': attribute type 2 has an invalid length. [ 1207.855561][T21471] netlink: 'syz.1.23224': attribute type 8 has an invalid length. [ 1207.873364][T21471] netlink: 132 bytes leftover after parsing attributes in process `syz.1.23224'. [ 1208.229740][T21487] netlink: 144308 bytes leftover after parsing attributes in process `syz.0.23229'. [ 1208.297282][T21490] netlink: 132 bytes leftover after parsing attributes in process `syz.3.23233'. [ 1209.532199][T21520] netlink: 196 bytes leftover after parsing attributes in process `syz.0.23248'. [ 1209.846213][T21538] netlink: 'syz.0.23257': attribute type 29 has an invalid length. [ 1209.868322][T21538] netlink: 'syz.0.23257': attribute type 29 has an invalid length. [ 1209.949579][T21544] netlink: 'syz.1.23267': attribute type 29 has an invalid length. [ 1209.971792][T21544] netlink: 'syz.1.23267': attribute type 29 has an invalid length. [ 1210.000618][T21542] netlink: 'syz.1.23267': attribute type 29 has an invalid length. [ 1210.070178][T21552] netlink: 'syz.2.23262': attribute type 1 has an invalid length. [ 1210.760040][T21593] __nla_validate_parse: 5 callbacks suppressed [ 1210.760060][T21593] netlink: 9 bytes leftover after parsing attributes in process `syz.1.23284'. [ 1210.938837][T21602] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.23287'. [ 1211.273710][T21616] can: request_module (can-proto-3) failed. [ 1211.861873][T21649] can: request_module (can-proto-3) failed. [ 1212.509569][T21684] can: request_module (can-proto-3) failed. [ 1212.666450][T21698] validate_nla: 12 callbacks suppressed [ 1212.666470][T21698] netlink: 'syz.3.23329': attribute type 2 has an invalid length. [ 1212.680625][T21698] netlink: 'syz.3.23329': attribute type 1 has an invalid length. [ 1212.688971][T21698] netlink: 9 bytes leftover after parsing attributes in process `syz.3.23329'. [ 1212.811285][T21701] netlink: 'syz.2.23340': attribute type 2 has an invalid length. [ 1212.841449][T21701] netlink: 'syz.2.23340': attribute type 1 has an invalid length. [ 1212.859120][T21701] netlink: 9 bytes leftover after parsing attributes in process `syz.2.23340'. [ 1212.959179][T21710] netlink: 'syz.1.23336': attribute type 3 has an invalid length. [ 1212.984932][T21710] netlink: 'syz.1.23336': attribute type 1 has an invalid length. [ 1212.992826][T21710] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.23336'. [ 1213.329207][T21728] syz.0.23353[21728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1213.329422][T21728] syz.0.23353[21728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1213.487065][T21738] netlink: 'syz.2.23349': attribute type 3 has an invalid length. [ 1213.518438][T21738] netlink: 'syz.2.23349': attribute type 1 has an invalid length. [ 1213.543343][T21738] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.23349'. [ 1213.667319][T21746] netlink: 'syz.3.23354': attribute type 29 has an invalid length. [ 1213.675825][T21746] netlink: 'syz.3.23354': attribute type 29 has an invalid length. [ 1214.030523][T21768] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.23363'. [ 1214.692595][T21788] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.23376'. [ 1214.881087][T21798] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.23381'. [ 1215.621109][T21840] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.23402'. [ 1216.134697][T21868] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.23415'. [ 1217.374868][T21904] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.23433'. [ 1217.849180][T21931] validate_nla: 14 callbacks suppressed [ 1217.849199][T21931] netlink: 'syz.2.23447': attribute type 29 has an invalid length. [ 1217.863692][T21931] netlink: 'syz.2.23447': attribute type 29 has an invalid length. [ 1217.873986][T21931] netlink: 'syz.2.23447': attribute type 29 has an invalid length. [ 1217.944223][T21936] netlink: 52711 bytes leftover after parsing attributes in process `syz.0.23450'. [ 1218.091520][T21944] netlink: 'syz.0.23455': attribute type 3 has an invalid length. [ 1218.109831][T21944] netlink: 'syz.0.23455': attribute type 1 has an invalid length. [ 1218.323042][T21956] netlink: 'syz.3.23460': attribute type 29 has an invalid length. [ 1218.353634][T21956] netlink: 'syz.3.23460': attribute type 29 has an invalid length. [ 1218.374236][T21956] netlink: 'syz.3.23460': attribute type 29 has an invalid length. [ 1218.499248][T21965] netlink: 52711 bytes leftover after parsing attributes in process `syz.2.23464'. [ 1218.601784][T21970] netlink: 'syz.3.23466': attribute type 3 has an invalid length. [ 1218.615333][T21970] netlink: 'syz.3.23466': attribute type 1 has an invalid length. [ 1219.088234][T21999] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.23477'. [ 1219.566798][T22026] netlink: 399 bytes leftover after parsing attributes in process `syz.3.23495'. [ 1219.850762][T22043] netlink: 168 bytes leftover after parsing attributes in process `syz.0.23502'. [ 1221.474864][T22119] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23539'. [ 1222.457567][T22161] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23561'. [ 1222.830033][T22185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23571'. [ 1222.961773][T22193] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23582'. [ 1226.812750][T22314] validate_nla: 1 callbacks suppressed [ 1226.812768][T22314] netlink: 'syz.3.23635': attribute type 21 has an invalid length. [ 1226.865805][T22318] delete_channel: no stack [ 1227.588220][T22339] netlink: 'syz.2.23646': attribute type 21 has an invalid length. [ 1228.160899][T22363] delete_channel: no stack [ 1228.167652][T22365] netlink: 'syz.1.23657': attribute type 21 has an invalid length. [ 1228.579143][T22376] netlink: 'syz.2.23661': attribute type 64 has an invalid length. [ 1228.588559][T22376] netlink: 'syz.2.23661': attribute type 64 has an invalid length. [ 1228.633769][T22375] netlink: 'syz.2.23661': attribute type 64 has an invalid length. [ 1228.943061][T22388] delete_channel: no stack [ 1229.007827][T22390] netlink: 'syz.0.23670': attribute type 21 has an invalid length. [ 1229.034027][T22393] netlink: 'syz.1.23671': attribute type 29 has an invalid length. [ 1229.042975][T22393] netlink: 'syz.1.23671': attribute type 29 has an invalid length. [ 1229.054195][T22393] netlink: 'syz.1.23671': attribute type 29 has an invalid length. [ 1229.808936][T22442] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.23695'. [ 1232.435298][T22528] validate_nla: 16 callbacks suppressed [ 1232.435315][T22528] netlink: 'syz.0.23735': attribute type 1 has an invalid length. [ 1232.850175][T22552] netlink: 'syz.2.23748': attribute type 1 has an invalid length. [ 1234.925749][T22619] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.23777'. [ 1237.260827][ T5828] cgroup: fork rejected by pids controller in /syz3 [ 1237.651733][T22692] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.23812'. [ 1238.526379][T22705] netlink: 'syz.1.23827': attribute type 3 has an invalid length. [ 1238.543915][T22705] netlink: 'syz.1.23827': attribute type 1 has an invalid length. [ 1238.553852][T22705] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.23827'. [ 1238.584793][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1238.594239][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1238.602229][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1238.611823][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1238.627379][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1238.634850][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1238.967035][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.977838][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.209846][ T5826] cgroup: fork rejected by pids controller in /syz0 [ 1239.553514][T22707] chnl_net:caif_netlink_parms(): no params data found [ 1239.813125][T22707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.835284][T22707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.842592][T22707] bridge_slave_0: entered allmulticast mode [ 1239.875744][T22707] bridge_slave_0: entered promiscuous mode [ 1239.935631][T22707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.942852][T22707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.963661][T22707] bridge_slave_1: entered allmulticast mode [ 1239.971336][T22707] bridge_slave_1: entered promiscuous mode [ 1240.109944][T22707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.190956][T22707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.242383][ T5832] cgroup: fork rejected by pids controller in /syz2 [ 1240.441335][T22707] team0: Port device team_slave_0 added [ 1240.541804][T22707] team0: Port device team_slave_1 added [ 1240.608247][T22707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.630502][T22707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.659132][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1240.669872][T22707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.673752][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1240.688425][T22709] Bluetooth: hci2: command tx timeout [ 1240.695628][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1240.704621][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1240.715697][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1240.723100][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1240.755346][T22707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.762368][T22707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.810221][T22707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.063457][T22707] hsr_slave_0: entered promiscuous mode [ 1241.098662][T22707] hsr_slave_1: entered promiscuous mode [ 1241.778542][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1241.788796][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1241.798113][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1241.807601][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1241.815467][ T5824] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1241.822868][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1242.166912][T22773] chnl_net:caif_netlink_parms(): no params data found [ 1242.763940][ T5824] Bluetooth: hci2: command tx timeout [ 1242.764238][ T51] Bluetooth: hci1: command tx timeout [ 1242.846880][T22773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.864766][T22773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.881887][T22773] bridge_slave_0: entered allmulticast mode [ 1242.901311][T22773] bridge_slave_0: entered promiscuous mode [ 1243.320295][T19889] team0 (unregistering): Port device geneve1 removed [ 1243.492762][T19889] team0 (unregistering): Port device team_slave_1 removed [ 1243.838345][T22773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.845704][T22773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.852902][T22773] bridge_slave_1: entered allmulticast mode [ 1243.860523][T22773] bridge_slave_1: entered promiscuous mode [ 1243.883616][ T51] Bluetooth: hci3: command tx timeout [ 1244.066558][T22773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.110923][T22707] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1244.133013][T22773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.171324][T22707] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1244.184888][T22707] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1244.201885][T22707] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1244.250946][T22773] team0: Port device team_slave_0 added [ 1244.261614][T22773] team0: Port device team_slave_1 added [ 1244.284456][T22800] chnl_net:caif_netlink_parms(): no params data found [ 1244.349771][T22773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1244.358101][T22773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1244.384499][T22773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1244.410311][T22773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1244.417630][T22773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1244.443901][T22773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.501819][T22800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.509203][T22800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.517296][T22800] bridge_slave_0: entered allmulticast mode [ 1244.524786][T22800] bridge_slave_0: entered promiscuous mode [ 1244.540900][T22800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.548196][T22800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.555515][T22800] bridge_slave_1: entered allmulticast mode [ 1244.562587][T22800] bridge_slave_1: entered promiscuous mode [ 1244.595024][T22800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.630049][T22800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.658859][T22773] hsr_slave_0: entered promiscuous mode [ 1244.665811][T22773] hsr_slave_1: entered promiscuous mode [ 1244.672009][T22773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1244.680316][T22773] Cannot create hsr debugfs directory [ 1244.717280][T22800] team0: Port device team_slave_0 added [ 1244.726631][T22800] team0: Port device team_slave_1 added [ 1244.786992][T22800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1244.794340][T22800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1244.820381][T22800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1244.834937][T22800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1244.842013][T22800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1244.868382][ T51] Bluetooth: hci1: command tx timeout [ 1244.873839][ T5824] Bluetooth: hci2: command tx timeout [ 1244.879402][T22800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1245.030073][T22800] hsr_slave_0: entered promiscuous mode [ 1245.036988][T22800] hsr_slave_1: entered promiscuous mode [ 1245.043146][T22800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1245.050941][T22800] Cannot create hsr debugfs directory [ 1245.220250][T22773] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.314594][T22773] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.425168][T22773] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.490267][T22707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.566175][T22773] bond0: (slave ): Releasing backup interface [ 1245.583914][T22773] netdevsim netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.643188][T22707] 8021q: adding VLAN 0 to HW filter on device team0 [ 1245.702111][T19893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.709369][T19893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.756637][ T556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.763914][ T556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.963469][ T5824] Bluetooth: hci3: command tx timeout [ 1246.112123][T22773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1246.125571][T22773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1246.140006][T22773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1246.258210][T22773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1246.697241][T22707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1246.869007][T22773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1246.923512][ T5824] Bluetooth: hci2: command tx timeout [ 1246.923526][ T51] Bluetooth: hci1: command tx timeout [ 1246.946895][T22800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1246.980654][T22773] 8021q: adding VLAN 0 to HW filter on device team0 [ 1246.988959][T22800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1247.008139][T22800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1247.030222][T22800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1247.055996][T15178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.063190][T15178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1247.118385][T15178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.125626][T15178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1247.169007][T22707] veth0_vlan: entered promiscuous mode [ 1247.254998][T22707] veth1_vlan: entered promiscuous mode [ 1247.390917][T22773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1247.434406][T22707] veth0_macvtap: entered promiscuous mode [ 1247.463080][T22707] veth1_macvtap: entered promiscuous mode [ 1247.562275][T22800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.605698][T22707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.660724][T22707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.699816][T22707] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.724182][T22707] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.732972][T22707] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.748133][T22707] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.842749][T22800] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.879787][T15178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.887018][T15178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1247.956038][T19910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.963366][T19910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.025136][T22773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1248.049281][ T5824] Bluetooth: hci3: command tx timeout [ 1248.193834][T19904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.201732][T19904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.359673][T19910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.394186][T19910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.411956][T22773] veth0_vlan: entered promiscuous mode [ 1248.491617][T22773] veth1_vlan: entered promiscuous mode [ 1248.735306][T22773] veth0_macvtap: entered promiscuous mode [ 1248.757092][T22773] veth1_macvtap: entered promiscuous mode [ 1248.912371][T22773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.942441][T22773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.965715][T22773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1248.986661][T22773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.005400][ T5824] Bluetooth: hci1: command tx timeout [ 1249.007197][T22773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.027863][T22773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1249.823409][T22917] netlink: 'syz.3.23853': attribute type 28 has an invalid length. [ 1249.837571][T22773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.862078][T22773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.880336][T22773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.895368][T22773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.911954][T22800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.125149][ T5824] Bluetooth: hci3: command tx timeout [ 1250.344499][T22800] veth0_vlan: entered promiscuous mode [ 1250.371334][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.389792][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.466407][T22800] veth1_vlan: entered promiscuous mode [ 1250.758668][T19893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.786604][T19893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1251.002888][T22800] veth0_macvtap: entered promiscuous mode [ 1251.156271][T22800] veth1_macvtap: entered promiscuous mode [ 1251.589123][T22800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.632231][T22800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.663406][T22800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.687403][T22800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.722089][T22800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1251.802959][T22800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.850564][T22800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.871641][T22800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.882905][T22800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.899492][T22800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1251.914336][T22800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.926921][T22800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.945522][T22800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.967725][T22800] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.260044][T19893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.303253][T19893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.444371][T19893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.491935][T19893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.707858][T22958] netlink: 'syz.0.23872': attribute type 28 has an invalid length. [ 1255.613116][T19889] team0 (unregistering): Port device geneve1 removed [ 1255.738473][T19889] team0 (unregistering): Port device hsr_slave_0 removed [ 1255.852131][T19889] team0 (unregistering): Port device team_slave_1 removed [ 1255.943945][T19889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1256.004494][T19889] bond0 (unregistering): (slave 1.@): Releasing backup interface [ 1256.048745][T19889] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1256.234497][T19889] bond0 (unregistering): Released all slaves [ 1256.541008][T23021] netlink: 'syz.1.23900': attribute type 29 has an invalid length. [ 1256.579966][T23021] netlink: 'syz.1.23900': attribute type 29 has an invalid length. [ 1256.593559][T23021] netlink: 'syz.1.23900': attribute type 29 has an invalid length. [ 1256.617956][T23021] netlink: 'syz.1.23900': attribute type 29 has an invalid length. [ 1258.426222][T23096] netlink: 68 bytes leftover after parsing attributes in process `syz.2.23936'. [ 1258.519493][T23098] netlink: 'syz.2.23937': attribute type 29 has an invalid length. [ 1258.541585][T23098] netlink: 'syz.2.23937': attribute type 29 has an invalid length. [ 1258.569614][T23098] netlink: 'syz.2.23937': attribute type 29 has an invalid length. [ 1258.592140][T23098] netlink: 'syz.2.23937': attribute type 29 has an invalid length. [ 1259.877965][T23128] netlink: 'syz.3.23949': attribute type 29 has an invalid length. [ 1259.886667][T23128] netlink: 'syz.3.23949': attribute type 29 has an invalid length. [ 1261.813040][T23166] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23970'. [ 1262.362292][T23194] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23981'. [ 1262.825873][T23218] validate_nla: 2 callbacks suppressed [ 1262.825890][T23218] netlink: 'syz.3.23993': attribute type 29 has an invalid length. [ 1262.844026][T23218] netlink: 'syz.3.23993': attribute type 29 has an invalid length. [ 1262.863825][T23218] netlink: 'syz.3.23993': attribute type 29 has an invalid length. [ 1262.878776][T23218] netlink: 'syz.3.23993': attribute type 29 has an invalid length. [ 1263.069295][T23226] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23995'. [ 1263.419745][T23243] netlink: 'syz.2.24004': attribute type 29 has an invalid length. [ 1263.428338][T23243] netlink: 'syz.2.24004': attribute type 29 has an invalid length. [ 1263.444544][T23243] netlink: 'syz.2.24004': attribute type 29 has an invalid length. [ 1263.456131][T23243] netlink: 'syz.2.24004': attribute type 29 has an invalid length. [ 1264.461176][T23253] netlink: 'syz.1.24009': attribute type 7 has an invalid length. [ 1264.470266][T23253] netlink: 'syz.1.24009': attribute type 6 has an invalid length. [ 1269.784512][T23386] validate_nla: 4 callbacks suppressed [ 1269.784529][T23386] netlink: 'syz.2.24067': attribute type 29 has an invalid length. [ 1269.820070][T23386] netlink: 'syz.2.24067': attribute type 29 has an invalid length. [ 1269.841151][T23389] netlink: 'syz.2.24067': attribute type 29 has an invalid length. [ 1269.880432][T23386] netlink: 'syz.2.24067': attribute type 29 has an invalid length. [ 1271.032886][T23412] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.24081'. [ 1271.081041][T23413] netlink: 'syz.1.24080': attribute type 29 has an invalid length. [ 1271.114086][T23413] netlink: 'syz.1.24080': attribute type 29 has an invalid length. [ 1271.140788][T23413] netlink: 'syz.1.24080': attribute type 29 has an invalid length. [ 1271.172102][T23413] netlink: 'syz.1.24080': attribute type 29 has an invalid length. [ 1271.196843][T23417] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.24082'. [ 1271.208054][T23417] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 1271.514076][T23435] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.24091'. [ 1271.622197][T23438] netlink: 'syz.3.24093': attribute type 29 has an invalid length. [ 1271.634264][T23438] netlink: 'syz.3.24093': attribute type 29 has an invalid length. [ 1271.732693][T23440] syz.3.24094[23440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1271.733081][T23440] syz.3.24094[23440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1272.235635][T23448] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.24097'. [ 1272.262602][T23448] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 1272.293761][T23450] tap0: tun_chr_ioctl cmd 2147767511 [ 1273.058888][T23459] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.24101'. [ 1273.320521][T23470] netlink: 135856 bytes leftover after parsing attributes in process `syz.2.24107'. [ 1273.330279][T23470] netlink: 8442 bytes leftover after parsing attributes in process `syz.2.24107'. [ 1273.973609][T23491] syz.0.24116[23491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1273.973872][T23491] syz.0.24116[23491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1274.832533][T23507] sctp: [Deprecated]: syz.3.24123 (pid 23507) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1274.832533][T23507] Use struct sctp_sack_info instead [ 1274.918872][T23511] tap0: tun_chr_ioctl cmd 2147767511 [ 1276.204832][T23541] netlink: 135856 bytes leftover after parsing attributes in process `syz.1.24138'. [ 1276.215760][T23541] netlink: 8442 bytes leftover after parsing attributes in process `syz.1.24138'. [ 1277.095468][T23562] netlink: 135856 bytes leftover after parsing attributes in process `syz.3.24150'. [ 1277.125139][T23562] netlink: 8442 bytes leftover after parsing attributes in process `syz.3.24150'. [ 1279.061825][T23630] validate_nla: 2 callbacks suppressed [ 1279.061843][T23630] netlink: 'syz.3.24183': attribute type 2 has an invalid length. [ 1279.078173][T23630] netlink: 132 bytes leftover after parsing attributes in process `syz.3.24183'. [ 1279.281666][T23635] netlink: 'syz.3.24185': attribute type 19 has an invalid length. [ 1279.307900][T23635] netlink: 144 bytes leftover after parsing attributes in process `syz.3.24185'. [ 1280.159558][T23658] netlink: 'syz.1.24195': attribute type 2 has an invalid length. [ 1280.171617][T23658] netlink: 132 bytes leftover after parsing attributes in process `syz.1.24195'. [ 1281.918968][T23699] netlink: 10 bytes leftover after parsing attributes in process `syz.2.24214'. [ 1282.189086][T23712] netlink: 'syz.2.24221': attribute type 19 has an invalid length. [ 1282.212633][T23712] netlink: 144 bytes leftover after parsing attributes in process `syz.2.24221'. [ 1282.429818][T23717] aD: renamed from lo (while UP) [ 1282.579821][T23723] netlink: 'syz.3.24227': attribute type 2 has an invalid length. [ 1282.639878][T23723] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.24227'. [ 1282.814101][T23728] tap0: tun_chr_ioctl cmd 1074025677 [ 1282.819714][T23728] tap0: linktype set to 778 [ 1283.201513][T23749] netlink: 'syz.0.24239': attribute type 2 has an invalid length. [ 1283.219575][T23749] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.24239'. [ 1283.565583][T23766] tap0: tun_chr_ioctl cmd 1074025677 [ 1283.572220][T23766] tap0: linktype set to 778 [ 1283.717230][T23773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1283.724584][T23773] IPv6: NLM_F_CREATE should be set when creating new route [ 1283.731889][T23773] IPv6: NLM_F_CREATE should be set when creating new route [ 1283.739218][T23773] IPv6: NLM_F_CREATE should be set when creating new route [ 1284.368763][T23790] netlink: 10 bytes leftover after parsing attributes in process `syz.1.24257'. [ 1285.679789][T23810] netlink: 132 bytes leftover after parsing attributes in process `syz.2.24274'. [ 1286.158237][T23834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1286.165609][T23834] IPv6: NLM_F_CREATE should be set when creating new route [ 1286.172915][T23834] IPv6: NLM_F_CREATE should be set when creating new route [ 1286.180241][T23834] IPv6: NLM_F_CREATE should be set when creating new route [ 1286.194912][T23835] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.24278'. [ 1286.892050][T23865] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.24293'. [ 1287.091131][T23870] netlink: 'syz.1.24295': attribute type 1 has an invalid length. [ 1288.806598][T23900] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.24305'. [ 1290.068759][T23962] netlink: 'syz.2.24338': attribute type 21 has an invalid length. [ 1290.083416][T23962] netlink: 164 bytes leftover after parsing attributes in process `syz.2.24338'. [ 1290.275724][T23969] netlink: 148 bytes leftover after parsing attributes in process `syz.2.24340'. [ 1292.011838][T24020] netlink: 'syz.0.24371': attribute type 10 has an invalid length. [ 1292.023461][T24020] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.24371'. [ 1292.185858][T24025] netlink: 148 bytes leftover after parsing attributes in process `syz.0.24364'. [ 1292.266508][T24028] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24365'. [ 1292.297572][T24028] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24365'. [ 1292.321125][T24023] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24365'. [ 1292.344292][T24026] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24365'. [ 1292.427221][T24036] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.24367'. [ 1292.582326][T24043] netlink: 'syz.2.24374': attribute type 10 has an invalid length. [ 1293.896215][T24072] __nla_validate_parse: 5 callbacks suppressed [ 1293.896231][T24072] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.24383'. [ 1293.922891][T24072] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.24383'. [ 1293.945249][T24070] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.24383'. [ 1293.983702][T24072] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.24383'. [ 1297.266177][T24233] netlink: 132 bytes leftover after parsing attributes in process `syz.1.24459'. [ 1297.618043][T24251] netlink: 'syz.0.24467': attribute type 10 has an invalid length. [ 1297.644015][T24251] macvlan0: entered promiscuous mode [ 1297.649432][T24251] macvlan0: entered allmulticast mode [ 1297.676810][T24251] veth1_vlan: entered allmulticast mode [ 1297.729163][T24251] team0: Port device macvlan0 added [ 1298.738661][T24283] netlink: 'syz.2.24484': attribute type 10 has an invalid length. [ 1298.765877][T24283] macvlan0: entered promiscuous mode [ 1298.771320][T24283] macvlan0: entered allmulticast mode [ 1298.800704][T24283] veth1_vlan: entered allmulticast mode [ 1298.831039][T24283] team0: Port device macvlan0 added [ 1298.969010][T24293] netlink: 132 bytes leftover after parsing attributes in process `syz.3.24489'. [ 1299.677367][T24318] netlink: 'syz.1.24500': attribute type 10 has an invalid length. [ 1299.815603][T24321] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.24502'. [ 1299.829267][T24323] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24501'. [ 1300.083431][T24335] netlink: 'syz.0.24509': attribute type 11 has an invalid length. [ 1300.101700][T24335] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.24509'. [ 1300.341402][T24343] netlink: 'syz.3.24513': attribute type 10 has an invalid length. [ 1300.360980][T24343] macvlan0: entered promiscuous mode [ 1300.377198][T24343] macvlan0: entered allmulticast mode [ 1300.382594][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.382718][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.448161][T24343] veth1_vlan: entered allmulticast mode [ 1300.469399][T24343] team0: Port device macvlan0 added [ 1301.647653][T24373] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.24526'. [ 1301.935518][T24379] netlink: 'syz.1.24530': attribute type 11 has an invalid length. [ 1301.987327][T24379] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.24530'. [ 1302.058079][T24379] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1302.101738][T24379] CPU: 0 PID: 24379 Comm: syz.1.24530 Not tainted syzkaller #0 [ 1302.109380][T24379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1302.119488][T24379] Call Trace: [ 1302.122819][T24379] [ 1302.125799][T24379] dump_stack_lvl+0x18c/0x250 [ 1302.130541][T24379] ? show_regs_print_info+0x20/0x20 [ 1302.135793][T24379] ? load_image+0x420/0x420 [ 1302.140368][T24379] sysfs_warn_dup+0x8e/0xa0 [ 1302.144929][T24379] sysfs_do_create_link_sd+0xc0/0x110 [ 1302.150362][T24379] device_add_class_symlinks+0x1cf/0x240 [ 1302.156075][T24379] device_add+0x507/0xc50 [ 1302.160477][T24379] wiphy_register+0x1dad/0x2ae0 [ 1302.165417][T24379] ? cfg80211_event_work+0x40/0x40 [ 1302.170582][T24379] ? minstrel_ht_alloc+0x88a/0x990 [ 1302.175761][T24379] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1302.181901][T24379] ieee80211_register_hw+0x3464/0x4250 [ 1302.187451][T24379] ? ieee80211_tasklet_handler+0x20/0x20 [ 1302.193136][T24379] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1302.199095][T24379] ? __debug_object_init+0xec/0x450 [ 1302.204363][T24379] ? __asan_memset+0x22/0x40 [ 1302.208998][T24379] ? __hrtimer_init+0x186/0x270 [ 1302.213899][T24379] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1302.219677][T24379] ? mac80211_hwsim_free+0x220/0x220 [ 1302.225022][T24379] ? rcu_is_watching+0x15/0xb0 [ 1302.229826][T24379] ? kstrndup+0xbd/0x140 [ 1302.234113][T24379] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1302.239264][T24379] ? __nla_validate+0x50/0x50 [ 1302.243976][T24379] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1302.250347][T24379] ? __nla_parse+0x40/0x50 [ 1302.254790][T24379] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1302.261159][T24379] genl_family_rcv_msg_doit+0x211/0x310 [ 1302.266737][T24379] ? end_current_label_crit_section+0x170/0x170 [ 1302.273019][T24379] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1302.278955][T24379] ? bpf_lsm_capable+0x9/0x10 [ 1302.283690][T24379] ? security_capable+0x89/0xb0 [ 1302.288588][T24379] genl_rcv_msg+0x619/0x7a0 [ 1302.293127][T24379] ? genl_bind+0x360/0x360 [ 1302.297575][T24379] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1302.303946][T24379] netlink_rcv_skb+0x241/0x4d0 [ 1302.308743][T24379] ? genl_bind+0x360/0x360 [ 1302.313205][T24379] ? netlink_ack+0x1180/0x1180 [ 1302.318026][T24379] ? __lock_acquire+0x7d40/0x7d40 [ 1302.323178][T24379] ? down_read+0x1ac/0x2e0 [ 1302.327641][T24379] genl_rcv+0x28/0x40 [ 1302.331648][T24379] netlink_unicast+0x751/0x8d0 [ 1302.336471][T24379] netlink_sendmsg+0x8d0/0xbf0 [ 1302.341292][T24379] ? netlink_getsockopt+0x590/0x590 [ 1302.346532][T24379] ? aa_sock_msg_perm+0x94/0x150 [ 1302.351513][T24379] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1302.356833][T24379] ? security_socket_sendmsg+0x80/0xa0 [ 1302.362322][T24379] ? netlink_getsockopt+0x590/0x590 [ 1302.367548][T24379] ____sys_sendmsg+0x5ba/0x960 [ 1302.372354][T24379] ? __asan_memset+0x22/0x40 [ 1302.376978][T24379] ? __sys_sendmsg_sock+0x30/0x30 [ 1302.382036][T24379] ? __import_iovec+0x5f2/0x850 [ 1302.386920][T24379] ? import_iovec+0x73/0xa0 [ 1302.391449][T24379] ___sys_sendmsg+0x2a6/0x360 [ 1302.396172][T24379] ? __sys_sendmsg+0x2a0/0x2a0 [ 1302.401020][T24379] __se_sys_sendmsg+0x1c2/0x2b0 [ 1302.405907][T24379] ? __x64_sys_sendmsg+0x80/0x80 [ 1302.410889][T24379] ? lockdep_hardirqs_on+0x98/0x150 [ 1302.416125][T24379] do_syscall_64+0x55/0xb0 [ 1302.420615][T24379] ? clear_bhb_loop+0x40/0x90 [ 1302.425321][T24379] ? clear_bhb_loop+0x40/0x90 [ 1302.430030][T24379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1302.435960][T24379] RIP: 0033:0x7f3f81b9ce59 [ 1302.440411][T24379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1302.460044][T24379] RSP: 002b:00007f3f7fdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1302.468516][T24379] RAX: ffffffffffffffda RBX: 00007f3f81e15fa0 RCX: 00007f3f81b9ce59 [ 1302.476520][T24379] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1302.484516][T24379] RBP: 00007f3f81c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1302.492509][T24379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1302.500505][T24379] R13: 00007f3f81e16038 R14: 00007f3f81e15fa0 R15: 00007ffca9b275e8 [ 1302.508528][T24379] [ 1302.875443][T24391] netlink: 1772 bytes leftover after parsing attributes in process `syz.3.24536'. [ 1303.278037][T24409] netlink: 'syz.3.24543': attribute type 11 has an invalid length. [ 1303.289342][T24409] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.24543'. [ 1303.310724][T24409] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1303.348962][T24407] netlink: 'syz.1.24552': attribute type 8 has an invalid length. [ 1303.358307][T24407] netlink: 'syz.1.24552': attribute type 6 has an invalid length. [ 1303.366508][T24407] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.24552'. [ 1304.600028][T24430] netlink: 'syz.2.24554': attribute type 29 has an invalid length. [ 1304.612397][T24430] netlink: 'syz.2.24554': attribute type 29 has an invalid length. [ 1304.623891][T24430] netlink: 'syz.2.24554': attribute type 29 has an invalid length. [ 1304.632572][T24430] netlink: 'syz.2.24554': attribute type 29 has an invalid length. [ 1304.798184][T24439] netlink: 'syz.2.24557': attribute type 11 has an invalid length. [ 1304.806381][T24439] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.24557'. [ 1304.820764][T24439] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1305.159192][T24449] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.24563'. [ 1305.316799][T24453] netlink: 'syz.2.24565': attribute type 10 has an invalid length. [ 1305.458210][T24453] veth1_vlan: left allmulticast mode [ 1305.671225][T24462] netlink: 'syz.3.24568': attribute type 8 has an invalid length. [ 1305.682592][T24462] netlink: 'syz.3.24568': attribute type 6 has an invalid length. [ 1305.693554][T24462] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.24568'. [ 1305.806325][T24467] netlink: 'syz.2.24581': attribute type 8 has an invalid length. [ 1305.823354][T24467] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.24581'. [ 1305.964872][T24474] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.24573'. [ 1306.357776][T24489] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24580'. [ 1306.392495][T24489] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24580'. [ 1306.653007][T24495] netlink: 132 bytes leftover after parsing attributes in process `syz.1.24592'. [ 1306.669917][T24495] netlink: 132 bytes leftover after parsing attributes in process `syz.1.24592'. [ 1306.786705][T24498] netlink: 148 bytes leftover after parsing attributes in process `syz.2.24595'. [ 1307.461355][T24533] netlink: zone id is out of range [ 1308.233846][T24556] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 1308.253400][T24556] pim6reg0: ignored: set checksum disabled [ 1313.519373][T24608] __nla_validate_parse: 5 callbacks suppressed [ 1313.519392][T24608] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.24638'. [ 1313.542100][T24608] netlink: zone id is out of range [ 1314.020320][T24628] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 1314.033163][T24628] pim6reg0: ignored: set checksum disabled [ 1314.247148][T24636] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.24648'. [ 1314.260636][T24636] netlink: zone id is out of range [ 1314.962593][T24661] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 1314.972007][T24661] pim6reg0: ignored: set checksum disabled [ 1315.122184][T24666] validate_nla: 13 callbacks suppressed [ 1315.122202][T24666] netlink: 'syz.1.24664': attribute type 49 has an invalid length. [ 1315.156783][T24666] netlink: 'syz.1.24664': attribute type 49 has an invalid length. [ 1316.541617][T24692] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 1316.561520][T24692] pim6reg0: ignored: set checksum disabled [ 1316.899031][T19910] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.021916][T19910] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.183120][T19910] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.320323][T19910] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.186095][T24721] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 1318.192313][T24721] pim6reg0: ignored: set checksum disabled [ 1318.266785][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1318.314779][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1318.324897][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1318.338093][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1318.347049][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1318.377578][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1320.443367][ T5824] Bluetooth: hci3: command tx timeout [ 1321.902007][T24753] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24700'. [ 1321.992094][T24753] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24700'. [ 1322.038665][T24743] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24700'. [ 1322.064670][T24750] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24700'. [ 1322.523460][ T5824] Bluetooth: hci3: command tx timeout [ 1322.538574][T24723] chnl_net:caif_netlink_parms(): no params data found [ 1322.915424][T24723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.934030][T24723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.941458][T24723] bridge_slave_0: entered allmulticast mode [ 1322.950251][T24723] bridge_slave_0: entered promiscuous mode [ 1322.968211][T24723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.978538][T24723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.986321][T24723] bridge_slave_1: entered allmulticast mode [ 1323.000799][T24723] bridge_slave_1: entered promiscuous mode [ 1323.078638][T19910] hsr_slave_0: left promiscuous mode [ 1323.089018][T19910] hsr_slave_1: left promiscuous mode [ 1323.102819][T19910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1323.113082][T19910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1323.126836][T19910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1323.137042][T19910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1323.147920][T19910] bridge_slave_1: left allmulticast mode [ 1323.156226][T19910] bridge_slave_1: left promiscuous mode [ 1323.163613][T19910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.178814][T19910] bridge_slave_0: left allmulticast mode [ 1323.195927][T19910] bridge_slave_0: left promiscuous mode [ 1323.201779][T19910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.271151][T19910] veth1_macvtap: left promiscuous mode [ 1323.278614][T19910] veth0_macvtap: left promiscuous mode [ 1323.294471][T19910] veth1_vlan: left promiscuous mode [ 1323.300177][T19910] veth0_vlan: left promiscuous mode [ 1323.761125][T19910] team0 (unregistering): Port device macvlan0 removed [ 1324.071713][T19910] team0 (unregistering): Port device team_slave_1 removed [ 1324.115149][T19910] team0 (unregistering): Port device team_slave_0 removed [ 1324.161376][T19910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1324.206839][T19910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1324.521889][T19910] bond0 (unregistering): Released all slaves [ 1324.592574][T24723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.603604][ T5824] Bluetooth: hci3: command tx timeout [ 1324.660976][T24723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.746398][T24723] team0: Port device team_slave_0 added [ 1324.781178][T24723] team0: Port device team_slave_1 added [ 1324.837347][T24723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1324.893283][T24723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.964122][T24723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.995802][T24723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.002820][T24723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.117711][T24723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1325.205394][T24723] hsr_slave_0: entered promiscuous mode [ 1325.212090][T24723] hsr_slave_1: entered promiscuous mode [ 1325.234261][T24723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1325.241881][T24723] Cannot create hsr debugfs directory [ 1325.762869][T19910] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.927483][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1325.945194][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1325.955331][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1325.977236][T22709] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1325.986755][T22709] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1325.992968][T19910] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.007498][T22709] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1326.091349][T19910] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.184614][T19910] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.269188][T24723] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1326.287871][T24723] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1326.299118][T24723] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1326.336168][T24723] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1326.652590][T24823] chnl_net:caif_netlink_parms(): no params data found [ 1326.684474][ T5824] Bluetooth: hci3: command tx timeout [ 1326.941773][T24823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.950465][T24823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.965871][T24823] bridge_slave_0: entered allmulticast mode [ 1326.976441][T24823] bridge_slave_0: entered promiscuous mode [ 1326.992234][T24723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.027016][T24823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.036741][T24823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.049033][T24823] bridge_slave_1: entered allmulticast mode [ 1327.057989][T24823] bridge_slave_1: entered promiscuous mode [ 1327.162402][T24823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.176865][T24823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.199952][T24723] 8021q: adding VLAN 0 to HW filter on device team0 [ 1327.251910][T24823] team0: Port device team_slave_0 added [ 1327.289012][ T556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.296260][ T556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.317073][T24823] team0: Port device team_slave_1 added [ 1327.327509][T19893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.334711][T19893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.381981][T24823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1327.391072][T24823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1327.421343][T24823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1327.460022][T24823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1327.467833][T24823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1327.504422][T24823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1327.691411][T24823] hsr_slave_0: entered promiscuous mode [ 1327.701610][T24823] hsr_slave_1: entered promiscuous mode [ 1327.712953][T24823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1327.721735][T24823] Cannot create hsr debugfs directory [ 1327.748133][T24723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1327.821302][T19910] hsr_slave_0: left promiscuous mode [ 1327.833060][T19910] hsr_slave_1: left promiscuous mode [ 1327.849331][T19910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1327.873993][T19910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1327.888640][T19910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1327.913691][T19910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1327.935424][T19910] bridge_slave_1: left allmulticast mode [ 1327.941145][T19910] bridge_slave_1: left promiscuous mode [ 1327.953814][T19910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.964465][T19910] bridge_slave_0: left allmulticast mode [ 1327.970171][T19910] bridge_slave_0: left promiscuous mode [ 1327.986789][T19910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.018717][T19910] veth1_macvtap: left promiscuous mode [ 1328.025283][T19910] veth0_macvtap: left promiscuous mode [ 1328.031004][T19910] veth1_vlan: left allmulticast mode [ 1328.037078][T19910] veth1_vlan: left promiscuous mode [ 1328.042468][T19910] veth0_vlan: left promiscuous mode [ 1328.050015][ T5824] Bluetooth: hci2: command tx timeout [ 1328.384953][T19910] team0 (unregistering): Port device macvlan0 removed [ 1328.666694][T19910] team0 (unregistering): Port device team_slave_1 removed [ 1328.708419][T19910] team0 (unregistering): Port device team_slave_0 removed [ 1328.752562][T19910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.799743][T19910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1329.109858][T19910] bond0 (unregistering): Released all slaves [ 1329.444186][T24723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.582326][T24723] veth0_vlan: entered promiscuous mode [ 1329.601497][T24723] veth1_vlan: entered promiscuous mode [ 1329.722787][T24723] veth0_macvtap: entered promiscuous mode [ 1329.740923][T24723] veth1_macvtap: entered promiscuous mode [ 1329.770260][T24723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.781361][T24723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.799541][T24723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.817223][T24723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.831163][T24723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.845623][T24723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1329.867249][T24723] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.884686][T24723] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.896781][T24723] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.912252][T24723] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.068452][T24823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1330.087855][T19910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.090711][T24823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1330.113134][T19910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.121452][T24823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1330.131654][ T5824] Bluetooth: hci2: command tx timeout [ 1330.142356][T24823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1330.195688][ T556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.223313][ T556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.391005][T24823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.421849][T24823] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.480984][ T556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.488235][ T556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.528168][ T556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.535428][ T556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.656431][T24823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1330.804734][ T5823] cgroup: fork rejected by pids controller in /syz1 [ 1331.282195][T24823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1331.427099][T24823] veth0_vlan: entered promiscuous mode [ 1331.462786][T24823] veth1_vlan: entered promiscuous mode [ 1331.525578][T24823] veth0_macvtap: entered promiscuous mode [ 1331.542715][T24823] veth1_macvtap: entered promiscuous mode [ 1331.592919][T24823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.619459][T24823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.644079][T24823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.664558][T24823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.685028][T24823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.718758][T24823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.748860][T24823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.774340][T24823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.795007][T24823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.817120][T24823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.832794][T24823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.842786][T24823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.859196][T24823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.877586][T24823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.203923][ T5824] Bluetooth: hci2: command tx timeout [ 1332.246213][T19893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.279744][T19893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.351436][T22709] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1332.360724][T22709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1332.373711][T22709] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1332.382275][T22709] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1332.390348][T22709] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1332.397928][T22709] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1332.521848][T19889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.550884][T19889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.613558][ T556] .`: (slave ): Releasing backup interface [ 1332.876972][T24928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24716'. [ 1332.930675][T24928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24716'. [ 1333.071093][T24924] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24716'. [ 1333.160361][T24927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24716'. [ 1333.369472][T24916] chnl_net:caif_netlink_parms(): no params data found [ 1334.099570][T24916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.119432][T24916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.141239][T24916] bridge_slave_0: entered allmulticast mode [ 1334.160401][T24916] bridge_slave_0: entered promiscuous mode [ 1334.285203][T22709] Bluetooth: hci2: command tx timeout [ 1334.450779][T22709] Bluetooth: hci0: command tx timeout [ 1335.063810][T24916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.076945][T24916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.112839][T24916] bridge_slave_1: entered allmulticast mode [ 1335.124602][T24916] bridge_slave_1: entered promiscuous mode [ 1335.381123][T24916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.431169][T24916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1335.510569][T24916] team0: Port device team_slave_0 added [ 1335.745526][T24916] team0: Port device team_slave_1 added [ 1335.833758][T24916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.853339][T24916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1335.896439][T24916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.912425][T24916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.919986][T24916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1335.946700][T24916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1336.475422][T24916] hsr_slave_0: entered promiscuous mode [ 1336.513686][T24916] hsr_slave_1: entered promiscuous mode [ 1336.524671][T22709] Bluetooth: hci0: command tx timeout [ 1336.557122][T25025] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.24750'. [ 1337.157653][T25045] netlink: 'syz.0.24759': attribute type 21 has an invalid length. [ 1337.179526][T25045] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24759'. [ 1338.286933][T24916] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1338.341823][T24916] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1338.362211][T24916] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1338.394142][T24916] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1338.603513][T22709] Bluetooth: hci0: command tx timeout [ 1338.815042][T24916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1338.942838][T24916] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.018571][T19893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.025814][T19893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1339.142649][T19904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.149909][T19904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1339.238048][ T556] veth1_macvtap: left promiscuous mode [ 1339.259741][ T556] veth0_macvtap: left promiscuous mode [ 1339.612300][ T556] team0 (unregistering): Port device geneve1 removed [ 1339.806659][ T556] team0 (unregistering): Port device hsr_slave_0 removed [ 1340.345387][ T556] team0 (unregistering): Port device team_slave_1 removed [ 1340.637922][ T556] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.683335][T22709] Bluetooth: hci0: command tx timeout [ 1340.846830][ T556] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1341.214668][ T556] .` (unregistering): Released all slaves [ 1341.878590][T24916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.044384][T24916] veth0_vlan: entered promiscuous mode [ 1342.089440][T24916] veth1_vlan: entered promiscuous mode [ 1342.170852][T24916] veth0_macvtap: entered promiscuous mode [ 1342.192078][T24916] veth1_macvtap: entered promiscuous mode [ 1342.262561][T24916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.288675][T24916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.313353][T24916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.349338][T24916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.369535][T24916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.381540][T24916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.398030][T24916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1342.437229][T24916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.488506][T24916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.514672][T24916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.527145][T24916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.551475][T24916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.574117][T24916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.605846][T24916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1342.655488][T24916] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.679723][T24916] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.693262][T24916] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.702022][T24916] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.963110][T19910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.005632][T19910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.093780][T19889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.119054][T19889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.477347][T25226] tun0: tun_chr_ioctl cmd 1074025677 [ 1344.482937][T25226] tun0: linktype set to 1 [ 1345.808361][T25294] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.24836'. [ 1345.833516][T25294] netlink: zone id is out of range [ 1346.680772][T25336] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.24861'. [ 1346.704323][T25336] netlink: zone id is out of range [ 1346.750509][T25338] tun0: tun_chr_ioctl cmd 1074025677 [ 1346.765824][T25338] tun0: linktype set to 1 [ 1347.140603][T25344] can: request_module (can-proto-0) failed. [ 1348.292599][T25397] can: request_module (can-proto-0) failed. [ 1348.836124][T25426] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.24900'. [ 1349.131695][T25432] can: request_module (can-proto-0) failed. [ 1349.980459][T25462] netlink: 'syz.0.24915': attribute type 27 has an invalid length. [ 1349.999144][T25462] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.24915'. [ 1350.588695][T25486] netlink: 'syz.3.24928': attribute type 27 has an invalid length. [ 1350.614162][T25486] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.24928'. [ 1351.360974][T25522] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.24947'. [ 1352.016351][T25537] delete_channel: no stack [ 1352.261745][T25559] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.24960'. [ 1352.283415][T25559] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.24960'. [ 1352.333741][T25555] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.24960'. [ 1352.375049][T25562] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.24960'. [ 1353.619005][T25594] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1353.625658][T25594] dvmrp1: linktype set to 823 [ 1353.761655][T25598] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1353.768055][T25598] syzkaller1: linktype set to 769 [ 1354.260073][T25622] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1354.272788][T25622] dvmrp1: linktype set to 823 [ 1354.478071][T25629] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1354.485479][T25629] syzkaller1: linktype set to 769 [ 1354.926434][T25649] netlink: 'syz.1.25005': attribute type 49 has an invalid length. [ 1354.940769][T25649] netlink: set zone limit has 8 unknown bytes [ 1355.000969][T25648] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1355.031553][T25648] dvmrp1: linktype set to 823 [ 1355.245984][T25659] netlink: 'syz.3.25009': attribute type 29 has an invalid length. [ 1355.283883][T25659] netlink: 'syz.3.25009': attribute type 29 has an invalid length. [ 1355.311466][T25659] netlink: 'syz.3.25009': attribute type 29 has an invalid length. [ 1355.340409][T25659] netlink: 'syz.3.25009': attribute type 29 has an invalid length. [ 1355.585441][T25675] netlink: 'syz.1.25017': attribute type 29 has an invalid length. [ 1355.607766][T25675] netlink: 'syz.1.25017': attribute type 29 has an invalid length. [ 1355.618369][T25675] netlink: 'syz.1.25017': attribute type 29 has an invalid length. [ 1355.627392][T25675] netlink: 'syz.1.25017': attribute type 29 has an invalid length. [ 1356.049997][T25684] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.25022'. [ 1356.127553][T25687] netlink: 'syz.0.25023': attribute type 29 has an invalid length. [ 1356.142865][T25687] netlink: 'syz.0.25023': attribute type 29 has an invalid length. [ 1357.120465][T25733] tap0: tun_chr_ioctl cmd 1074025680 [ 1358.130016][T25774] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.25066'. [ 1358.153313][T25774] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 1358.346180][T25786] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.25073'. [ 1358.465090][T25788] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.25082'. [ 1358.489072][T25788] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 1359.016996][T25812] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.25086'. [ 1359.190833][T25822] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.25089'. [ 1359.200831][T25822] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 1359.454531][T25829] netlink: 48 bytes leftover after parsing attributes in process `syz.2.25093'. [ 1359.562518][T25832] netlink: 48 bytes leftover after parsing attributes in process `syz.0.25103'. [ 1359.899725][T25841] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.25099'. [ 1359.967284][T25843] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.25109'. [ 1360.117603][T25849] netlink: 132 bytes leftover after parsing attributes in process `syz.2.25102'. [ 1361.816071][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.822796][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.886966][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 1364.807143][T25958] __nla_validate_parse: 3 callbacks suppressed [ 1364.807160][T25958] netlink: 188 bytes leftover after parsing attributes in process `syz.3.25156'. [ 1365.826889][T25994] netlink: 188 bytes leftover after parsing attributes in process `syz.2.25173'. [ 1366.452867][T26026] netlink: 188 bytes leftover after parsing attributes in process `syz.1.25186'. [ 1367.950498][T26085] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.25216'. [ 1368.774891][T26119] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.25232'. [ 1369.511944][T26142] validate_nla: 7 callbacks suppressed [ 1369.511964][T26142] netlink: 'syz.2.25242': attribute type 10 has an invalid length. [ 1369.603273][T26142] macvlan0: entered promiscuous mode [ 1369.612244][T26142] macvlan0: entered allmulticast mode [ 1369.638186][T26142] veth1_vlan: entered allmulticast mode [ 1369.677169][T26142] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1369.695043][T26143] netlink: 'syz.2.25242': attribute type 4 has an invalid length. [ 1369.709787][T26143] netlink: 156 bytes leftover after parsing attributes in process `syz.2.25242'. [ 1369.850961][T26151] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.25246'. [ 1370.019156][T26161] ip6gretap0: refused to change device tx_queue_len [ 1370.384052][T26173] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 1370.389783][T26173] pim6reg0: persist enabled [ 1370.727783][T26184] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 1370.736494][T26184] pim6reg0: persist enabled [ 1371.321615][T26210] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 1371.327527][T26210] pim6reg0: persist enabled [ 1372.163155][T26227] ip6gretap0: refused to change device tx_queue_len [ 1372.708537][T26244] netlink: 60 bytes leftover after parsing attributes in process `syz.1.25296'. [ 1372.720135][T26244] netlink: 60 bytes leftover after parsing attributes in process `syz.1.25296'. [ 1372.734785][T26244] netlink: 60 bytes leftover after parsing attributes in process `syz.1.25296'. [ 1372.750102][T26244] netlink: 60 bytes leftover after parsing attributes in process `syz.1.25296'. [ 1373.519660][T26261] ip6gretap0: refused to change device tx_queue_len [ 1373.599823][T26263] netlink: 'syz.3.25295': attribute type 10 has an invalid length. [ 1373.666161][T26265] netlink: 'syz.0.25297': attribute type 1 has an invalid length. [ 1373.685766][T26263] team0: Device vxcan1 is of different type [ 1373.873518][T26273] netlink: 60 bytes leftover after parsing attributes in process `syz.0.25301'. [ 1373.908442][T26273] netlink: 60 bytes leftover after parsing attributes in process `syz.0.25301'. [ 1373.941415][T26276] netlink: 60 bytes leftover after parsing attributes in process `syz.0.25301'. [ 1373.980254][T26273] netlink: 60 bytes leftover after parsing attributes in process `syz.0.25301'. [ 1374.600320][T26299] netlink: 'syz.0.25313': attribute type 10 has an invalid length. [ 1374.676097][T26299] team0: Device vxcan1 is of different type [ 1374.889806][T26310] netlink: 'syz.1.25327': attribute type 1 has an invalid length. [ 1374.928594][T26311] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25318'. [ 1374.957462][T26311] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25318'. [ 1374.982725][T26311] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25318'. [ 1375.005374][T26311] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25318'. [ 1375.634850][T26344] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1375.650565][T26344] syzkaller0: linktype set to 768 [ 1376.106878][T26365] netlink: 'syz.2.25346': attribute type 21 has an invalid length. [ 1376.387351][T26379] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1376.393690][T26379] syzkaller0: linktype set to 768 [ 1377.214313][T26400] netlink: 703 bytes leftover after parsing attributes in process `syz.2.25362'. [ 1377.865582][T26417] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.25368'. [ 1378.078699][T26419] netlink: 'syz.1.25369': attribute type 21 has an invalid length. [ 1378.237329][T26428] netlink: 703 bytes leftover after parsing attributes in process `syz.1.25372'. [ 1378.666841][T26442] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.25378'. [ 1378.703347][T26442] netlink: 'syz.0.25378': attribute type 1 has an invalid length. [ 1378.740014][T26445] netlink: 'syz.3.25380': attribute type 21 has an invalid length. [ 1379.064322][T26458] netlink: 703 bytes leftover after parsing attributes in process `syz.3.25383'. [ 1379.275331][T26463] tap0: tun_chr_ioctl cmd 1074025677 [ 1379.280916][T26463] tap0: linktype set to 825 [ 1379.567567][T26473] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.25392'. [ 1380.518682][T26512] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.25412'. [ 1380.991686][T26528] netlink: 'syz.0.25422': attribute type 21 has an invalid length. [ 1381.024650][T26528] netlink: 'syz.0.25422': attribute type 4 has an invalid length. [ 1381.033080][T26528] netlink: 152 bytes leftover after parsing attributes in process `syz.0.25422'. [ 1381.193755][T26534] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.25425'. [ 1381.238262][T26532] tap0: tun_chr_ioctl cmd 1074025677 [ 1381.258069][T26532] tap0: linktype set to 825 [ 1382.637126][T26561] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.25435'. [ 1388.267151][T26712] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.25507'. [ 1388.278288][T26712] netlink: 8446 bytes leftover after parsing attributes in process `syz.2.25507'. [ 1389.826527][T26742] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.25520'. [ 1389.852773][T26742] netlink: 8446 bytes leftover after parsing attributes in process `syz.0.25520'. [ 1390.063060][T26748] team0: Port device team_slave_0 removed [ 1390.084528][T26748] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1390.575753][T26772] C: renamed from team_slave_0 (while UP) [ 1390.584456][T26775] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.25534'. [ 1390.604924][T26772] netlink: 'syz.1.25535': attribute type 3 has an invalid length. [ 1390.612812][T26772] netlink: 152 bytes leftover after parsing attributes in process `syz.1.25535'. [ 1390.643539][T26772] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1390.660749][T26775] netlink: 8446 bytes leftover after parsing attributes in process `syz.3.25534'. [ 1391.141060][T26800] team0: Port device C removed [ 1391.165137][T26800] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1391.192833][T26802] C: renamed from team_slave_0 (while UP) [ 1391.209865][T26802] netlink: 'syz.2.25549': attribute type 3 has an invalid length. [ 1391.224276][T26802] netlink: 152 bytes leftover after parsing attributes in process `syz.2.25549'. [ 1391.234651][T26802] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1391.372555][T26810] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.25552'. [ 1391.383184][T26810] netlink: 8446 bytes leftover after parsing attributes in process `syz.1.25552'. [ 1391.834688][T26830] C: renamed from team_slave_0 [ 1391.849814][T26830] netlink: 'syz.0.25563': attribute type 3 has an invalid length. [ 1391.861818][T26830] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1391.993777][T26833] team0: Port device team_slave_0 removed [ 1392.013926][T26833] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1392.477621][T26854] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 1392.901932][T26870] team0: Port device C removed [ 1392.917857][T26870] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1392.979382][T26872] tun0: tun_chr_ioctl cmd 1074025681 [ 1393.257817][T26888] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 1393.439691][T26897] __nla_validate_parse: 3 callbacks suppressed [ 1393.439710][T26897] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.25595'. [ 1393.723832][T26907] tun0: tun_chr_ioctl cmd 1074025681 [ 1393.984892][T26921] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.25604'. [ 1394.013940][T26921] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 1394.328517][T26932] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.25608'. [ 1394.476344][T26940] tun0: tun_chr_ioctl cmd 1074025681 [ 1394.802500][T26953] tap0: tun_chr_ioctl cmd 1074025677 [ 1394.828165][T26953] tap0: linktype set to 805 [ 1394.881864][T26959] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.25623'. [ 1395.401236][T26987] netlink: 'syz.2.25636': attribute type 3 has an invalid length. [ 1395.428655][T26987] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.25636'. [ 1395.828256][T27005] netlink: 'syz.0.25645': attribute type 153 has an invalid length. [ 1395.863337][T27005] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.25645'. [ 1396.621922][T27037] netlink: 'syz.2.25661': attribute type 11 has an invalid length. [ 1396.631308][T27037] netlink: 212788 bytes leftover after parsing attributes in process `syz.2.25661'. [ 1397.030386][T27057] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.25670'. [ 1397.041406][T27057] openvswitch: netlink: Duplicate key (type 0). [ 1397.384208][T27070] netlink: 'syz.1.25676': attribute type 153 has an invalid length. [ 1397.392332][T27070] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.25676'. [ 1397.964015][T27079] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1397.973752][T27079] pim6reg1: linktype set to 773 [ 1398.276715][T27093] netlink: 'syz.3.25687': attribute type 153 has an invalid length. [ 1398.295979][T27093] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.25687'. [ 1399.355059][T27112] netlink: 'syz.3.25694': attribute type 27 has an invalid length. [ 1400.863096][T27138] netlink: 'syz.1.25705': attribute type 12 has an invalid length. [ 1400.883921][T27138] netlink: 132 bytes leftover after parsing attributes in process `syz.1.25705'. [ 1400.943663][T27141] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1400.970336][T27141] pim6reg1: linktype set to 773 [ 1401.876019][T27170] netlink: 'syz.0.25719': attribute type 27 has an invalid length. [ 1402.229372][T27174] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1402.239875][T27174] pim6reg1: linktype set to 773 [ 1402.808070][T27202] netlink: 'syz.1.25733': attribute type 27 has an invalid length. [ 1404.403562][T27231] netlink: 'syz.2.25746': attribute type 27 has an invalid length. [ 1405.702582][T27248] netlink: 'syz.2.25766': attribute type 10 has an invalid length. [ 1405.730033][T27248] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.25766'. [ 1405.992459][T27258] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 1406.069689][T27261] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1406.087860][T27261] pim6reg1: linktype set to 776 [ 1406.566585][T27283] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 1406.654757][T27292] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1406.660637][T27292] pim6reg1: linktype set to 776 [ 1407.172699][T27317] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 1407.272256][T27319] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1407.278818][T27319] pim6reg1: linktype set to 776 [ 1407.306826][T27323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.25799'. [ 1407.333425][T27323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.25799'. [ 1407.344435][T27323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.25799'. [ 1407.354781][T27323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.25799'. [ 1408.891087][T27387] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.25822'. [ 1410.366019][T27413] netlink: 'syz.3.25834': attribute type 27 has an invalid length. [ 1410.388424][T27415] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25835'. [ 1410.411753][T27415] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25835'. [ 1410.424837][T27415] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25835'. [ 1410.463768][T27415] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25835'. [ 1410.810303][T27427] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.25841'. [ 1412.403032][T27483] __nla_validate_parse: 1 callbacks suppressed [ 1412.403048][T27483] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.25865'. [ 1415.254498][T27594] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.25918'. [ 1415.286737][T27594] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.25918'. [ 1415.322200][T27588] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.25918'. [ 1415.344561][T27596] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.25918'. [ 1417.146456][T27634] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.25932'. [ 1417.161826][T27634] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.25932'. [ 1417.173087][T27629] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.25932'. [ 1417.190355][T27629] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.25932'. [ 1417.265560][T27636] netlink: 'syz.1.25936': attribute type 3 has an invalid length. [ 1418.503975][T27658] netpci0: tun_chr_ioctl cmd 2147767519 [ 1420.483071][T27699] netpci0: tun_chr_ioctl cmd 2147767519 [ 1421.822814][T27706] netlink: 'syz.2.25968': attribute type 3 has an invalid length. [ 1421.970162][T27711] netpci0: tun_chr_ioctl cmd 2147767519 [ 1422.739612][T27726] netlink: 'syz.0.25985': attribute type 12 has an invalid length. [ 1422.764509][T27726] netlink: 112 bytes leftover after parsing attributes in process `syz.0.25985'. [ 1422.998950][T27736] netlink: 'syz.3.25981': attribute type 3 has an invalid length. [ 1423.279559][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.286266][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.789669][T27747] netlink: 'syz.3.25990': attribute type 12 has an invalid length. [ 1423.827219][T27747] netlink: 112 bytes leftover after parsing attributes in process `syz.3.25990'. [ 1424.253339][T27760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25995'. [ 1424.276773][T27760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25995'. [ 1424.312793][T27760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25995'. [ 1424.324964][T27760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25995'. [ 1424.765569][T27770] netlink: 'syz.2.26000': attribute type 12 has an invalid length. [ 1424.790876][T27770] netlink: 112 bytes leftover after parsing attributes in process `syz.2.26000'. [ 1434.611551][T28012] netlink: 192188 bytes leftover after parsing attributes in process `syz.1.26112'. [ 1434.648297][T28012] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 1434.902433][T28022] netlink: 192188 bytes leftover after parsing attributes in process `syz.3.26125'. [ 1434.912477][T28022] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 1435.632820][T28044] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.26122'. [ 1435.797247][T28052] netlink: 192188 bytes leftover after parsing attributes in process `syz.0.26128'. [ 1435.811600][T28052] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 1436.420391][T28073] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.26139'. [ 1436.830990][T28094] netlink: 188 bytes leftover after parsing attributes in process `syz.0.26149'. [ 1437.716694][T28128] netlink: 188 bytes leftover after parsing attributes in process `syz.1.26162'. [ 1437.995751][T28141] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.26168'. [ 1438.069736][T28140] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.26170'. [ 1439.176094][T28162] netlink: 188 bytes leftover after parsing attributes in process `syz.3.26178'. [ 1440.686037][T22709] Bluetooth: hci3: command 0x0406 tx timeout [ 1441.241851][T28197] netlink: 'syz.0.26204': attribute type 4 has an invalid length. [ 1441.259102][T28197] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1441.500684][T28207] netlink: 'syz.2.26200': attribute type 3 has an invalid length. [ 1441.509325][T28207] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.26200'. [ 1441.636200][T28211] netlink: 'syz.0.26202': attribute type 1 has an invalid length. [ 1441.657247][T28211] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.26202'. [ 1441.678892][T28215] netlink: 'syz.2.26205': attribute type 9 has an invalid length. [ 1441.715609][T28215] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.26205'. [ 1441.821993][T28218] netlink: 'syz.2.26205': attribute type 9 has an invalid length. [ 1441.882782][T28218] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.26205'. [ 1442.628823][T28255] netlink: 'syz.2.26224': attribute type 29 has an invalid length. [ 1442.652728][T28255] netlink: 'syz.2.26224': attribute type 29 has an invalid length. [ 1442.677569][T28255] netlink: 'syz.2.26224': attribute type 29 has an invalid length. [ 1442.697430][T28255] netlink: 'syz.2.26224': attribute type 29 has an invalid length. [ 1442.798877][T28258] netlink: 'syz.0.26226': attribute type 9 has an invalid length. [ 1442.812169][T28258] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.26226'. [ 1442.909833][T28265] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.26226'. [ 1443.348636][T28283] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.26245'. [ 1443.514008][T28283] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.26245'. [ 1443.746145][T28298] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1444.402160][T28327] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.26257'. [ 1444.502115][T28327] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.26257'. [ 1446.589292][T28376] validate_nla: 19 callbacks suppressed [ 1446.589310][T28376] netlink: 'syz.0.26280': attribute type 9 has an invalid length. [ 1446.619885][T28376] __nla_validate_parse: 5 callbacks suppressed [ 1446.619902][T28376] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.26280'. [ 1446.734326][T28382] netlink: 'syz.0.26280': attribute type 9 has an invalid length. [ 1446.763903][T28382] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.26280'. [ 1446.979537][T28388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26285'. [ 1446.996804][T28388] netlink: 152 bytes leftover after parsing attributes in process `syz.2.26285'. [ 1447.160745][T28396] netlink: 'syz.1.26288': attribute type 3 has an invalid length. [ 1447.169455][T28396] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.26288'. [ 1448.264422][T28415] netlink: 'syz.3.26299': attribute type 9 has an invalid length. [ 1448.272407][T28415] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.26299'. [ 1448.291731][T28417] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26295'. [ 1448.332311][T28417] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26295'. [ 1448.349569][T28410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26295'. [ 1448.380964][T28419] netlink: 'syz.3.26299': attribute type 9 has an invalid length. [ 1448.381894][T28413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26295'. [ 1450.027667][T28459] netlink: 'syz.2.26317': attribute type 29 has an invalid length. [ 1450.051756][T28459] netlink: 'syz.2.26317': attribute type 29 has an invalid length. [ 1450.061813][T28458] netlink: 'syz.2.26317': attribute type 29 has an invalid length. [ 1450.074545][T28459] netlink: 'syz.2.26317': attribute type 29 has an invalid length. [ 1450.295261][T28471] netlink: 'syz.2.26324': attribute type 9 has an invalid length. [ 1450.925662][T22709] Bluetooth: hci2: command 0x0406 tx timeout [ 1451.611115][T28528] tap0: tun_chr_ioctl cmd 1074025677 [ 1451.616803][T28528] tap0: linktype set to 0 [ 1452.916055][T28560] tap0: tun_chr_ioctl cmd 1074025677 [ 1452.921601][T28560] tap0: linktype set to 0 [ 1453.071604][T28567] __nla_validate_parse: 6 callbacks suppressed [ 1453.071624][T28567] netlink: 188 bytes leftover after parsing attributes in process `syz.0.26363'. [ 1456.018320][T28622] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.26391'. [ 1456.064810][T22709] Bluetooth: hci0: command 0x0406 tx timeout [ 1456.073645][T28622] tc_dump_action: action bad kind [ 1457.147639][T28650] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.26404'. [ 1457.189389][T28650] tc_dump_action: action bad kind [ 1457.334423][T28656] netlink: 2 bytes leftover after parsing attributes in process `syz.0.26407'. [ 1458.724337][T28684] netlink: 2 bytes leftover after parsing attributes in process `syz.3.26420'. [ 1459.377391][T28705] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.26427'. [ 1459.570220][T28709] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.26429'. [ 1459.718105][T28709] validate_nla: 1 callbacks suppressed [ 1459.718121][T28709] netlink: 'syz.2.26429': attribute type 1 has an invalid length. [ 1459.732073][T28709] netlink: 16520 bytes leftover after parsing attributes in process `syz.2.26429'. [ 1460.595889][T28732] netlink: 'syz.3.26441': attribute type 21 has an invalid length. [ 1460.614631][T28732] netlink: 'syz.3.26441': attribute type 1 has an invalid length. [ 1460.650894][T28732] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.26441'. [ 1461.051792][T28739] netlink: 2 bytes leftover after parsing attributes in process `syz.1.26445'. [ 1461.709994][T28758] netlink: 'syz.1.26454': attribute type 21 has an invalid length. [ 1461.728589][T28758] netlink: 'syz.1.26454': attribute type 1 has an invalid length. [ 1461.746868][T28758] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.26454'. [ 1462.557448][T28767] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.26457'. [ 1462.588845][T28764] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.26458'. [ 1462.604779][T28766] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.26456'. [ 1462.638453][T28764] netlink: 'syz.3.26458': attribute type 1 has an invalid length. [ 1463.834580][T28803] __nla_validate_parse: 4 callbacks suppressed [ 1463.834600][T28803] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26473'. [ 1463.887815][T28803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26473'. [ 1463.909110][T28805] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 1463.923709][T28802] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1464.062774][T28812] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.26478'. [ 1464.245321][T28817] netlink: 'syz.2.26481': attribute type 1 has an invalid length. [ 1464.259943][T28817] netlink: 116 bytes leftover after parsing attributes in process `syz.2.26481'. [ 1464.269737][T28817] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1464.571357][T28826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.26484'. [ 1464.620202][T28826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26484'. [ 1464.807108][T28838] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1465.297356][T28857] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.26499'. [ 1465.505383][T28865] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 1465.511981][T28865] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1465.727205][T28877] netlink: 'syz.0.26508': attribute type 1 has an invalid length. [ 1465.735590][T28877] netlink: 116 bytes leftover after parsing attributes in process `syz.0.26508'. [ 1465.745314][T28877] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1466.100214][T28892] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.26515'. [ 1466.479683][T28907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26520'. [ 1471.284384][T28968] netlink: 'syz.0.26552': attribute type 3 has an invalid length. [ 1471.309861][T28968] __nla_validate_parse: 7 callbacks suppressed [ 1471.309884][T28968] netlink: 144 bytes leftover after parsing attributes in process `syz.0.26552'. [ 1471.334699][T28967] ------------[ cut here ]------------ [ 1471.340242][T28967] WARNING: CPU: 1 PID: 28967 at kernel/events/core.c:6808 perf_pending_task+0x35c/0x470 [ 1471.350189][T28967] Modules linked in: [ 1471.354180][T28967] CPU: 1 PID: 28967 Comm: syz.2.26551 Not tainted syzkaller #0 [ 1471.361779][T28967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1471.372309][T28967] RIP: 0010:perf_pending_task+0x35c/0x470 [ 1471.378272][T28967] Code: ff 84 db 75 14 e8 74 cb d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 cb d5 ff e8 4b 3d 4f ff eb e5 e8 54 cb d5 ff <0f> 0b e9 f3 fe ff ff e8 48 cb d5 ff 48 c7 c7 10 f9 1c 8d 4c 89 f6 [ 1471.398939][T28967] RSP: 0018:ffffc9000badf9c0 EFLAGS: 00010293 [ 1471.405362][T28967] RAX: ffffffff81b1603c RBX: ffff88801c278468 RCX: ffff888028795a00 [ 1471.413517][T28967] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1471.421534][T28967] RBP: 0000000000000001 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 1471.429668][T28967] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff888028795a00 [ 1471.437988][T28967] R13: ffff88805e6ff930 R14: ffff88801c278228 R15: 1ffff1100384f045 [ 1471.446059][T28967] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1471.455124][T28967] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1471.457912][T28968] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1471.461739][T28967] CR2: 00007f9acf7ea2f8 CR3: 0000000023970000 CR4: 00000000003506e0 [ 1471.486027][T28967] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1471.494221][T28967] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1471.502245][T28967] Call Trace: [ 1471.505620][T28967] [ 1471.508602][T28967] task_work_run+0x1d4/0x260 [ 1471.513397][T28967] ? task_work_cancel+0x220/0x220 [ 1471.518491][T28967] do_exit+0x95a/0x2460 [ 1471.522804][T28967] ? put_task_struct+0xc0/0xc0 [ 1471.527719][T28967] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1471.533824][T28967] ? get_signal+0x1068/0x13f0 [ 1471.538561][T28967] ? lock_chain_count+0x20/0x20 [ 1471.543514][T28967] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1471.548611][T28967] do_group_exit+0x21b/0x2d0 [ 1471.553321][T28967] ? lockdep_hardirqs_on+0x98/0x150 [ 1471.558583][T28967] get_signal+0x12fc/0x13f0 [ 1471.563289][T28967] arch_do_signal_or_restart+0xc2/0x800 [ 1471.568940][T28967] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1471.575025][T28967] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 1471.581154][T28967] ? get_sigframe_size+0x20/0x20 [ 1471.586213][T28967] ? exit_to_user_mode_loop+0x3b/0x110 [ 1471.592534][T28967] exit_to_user_mode_loop+0x70/0x110 [ 1471.598050][T28967] exit_to_user_mode_prepare+0xee/0x180 [ 1471.603714][T28967] syscall_exit_to_user_mode+0x1a/0x50 [ 1471.609236][T28967] do_syscall_64+0x61/0xb0 [ 1471.613769][T28967] ? clear_bhb_loop+0x40/0x90 [ 1471.618489][T28967] ? clear_bhb_loop+0x40/0x90 [ 1471.623247][T28967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1471.629192][T28967] RIP: 0033:0x7fdfb3b9ce59 [ 1471.633768][T28967] Code: Unable to access opcode bytes at 0x7fdfb3b9ce2f. [ 1471.640903][T28967] RSP: 002b:00007fdfb4b170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1471.649883][T28967] RAX: fffffffffffffe00 RBX: 00007fdfb3e15fa8 RCX: 00007fdfb3b9ce59 [ 1471.658140][T28967] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdfb3e15fa8 [ 1471.666234][T28967] RBP: 00007fdfb3e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1471.674353][T28967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1471.682368][T28967] R13: 00007fdfb3e16038 R14: 00007ffd2a2d0370 R15: 00007ffd2a2d0458 [ 1471.691296][T28967] [ 1471.694595][T28967] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1471.701916][T28967] CPU: 1 PID: 28967 Comm: syz.2.26551 Not tainted syzkaller #0 [ 1471.709499][T28967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1471.719598][T28967] Call Trace: [ 1471.722918][T28967] [ 1471.725891][T28967] dump_stack_lvl+0x18c/0x250 [ 1471.730623][T28967] ? show_regs_print_info+0x20/0x20 [ 1471.735870][T28967] ? load_image+0x420/0x420 [ 1471.740434][T28967] panic+0x2dc/0x730 [ 1471.744425][T28967] ? bpf_jit_dump+0xd0/0xd0 [ 1471.748996][T28967] __warn+0x2e0/0x470 [ 1471.753022][T28967] ? perf_pending_task+0x35c/0x470 [ 1471.758191][T28967] ? perf_pending_task+0x35c/0x470 [ 1471.763354][T28967] report_bug+0x2be/0x4f0 [ 1471.767755][T28967] ? perf_pending_task+0x35c/0x470 [ 1471.772936][T28967] ? perf_pending_task+0x35c/0x470 [ 1471.778108][T28967] ? perf_pending_task+0x35e/0x470 [ 1471.783317][T28967] handle_bug+0xcf/0x120 [ 1471.787625][T28967] exc_invalid_op+0x1a/0x50 [ 1471.792187][T28967] asm_exc_invalid_op+0x1a/0x20 [ 1471.797089][T28967] RIP: 0010:perf_pending_task+0x35c/0x470 [ 1471.802873][T28967] Code: ff 84 db 75 14 e8 74 cb d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 cb d5 ff e8 4b 3d 4f ff eb e5 e8 54 cb d5 ff <0f> 0b e9 f3 fe ff ff e8 48 cb d5 ff 48 c7 c7 10 f9 1c 8d 4c 89 f6 [ 1471.822528][T28967] RSP: 0018:ffffc9000badf9c0 EFLAGS: 00010293 [ 1471.828642][T28967] RAX: ffffffff81b1603c RBX: ffff88801c278468 RCX: ffff888028795a00 [ 1471.836655][T28967] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1471.844673][T28967] RBP: 0000000000000001 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 1471.852703][T28967] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff888028795a00 [ 1471.860722][T28967] R13: ffff88805e6ff930 R14: ffff88801c278228 R15: 1ffff1100384f045 [ 1471.868749][T28967] ? perf_pending_task+0x35c/0x470 [ 1471.873936][T28967] task_work_run+0x1d4/0x260 [ 1471.878580][T28967] ? task_work_cancel+0x220/0x220 [ 1471.883675][T28967] do_exit+0x95a/0x2460 [ 1471.887900][T28967] ? put_task_struct+0xc0/0xc0 [ 1471.892713][T28967] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1471.898735][T28967] ? get_signal+0x1068/0x13f0 [ 1471.903457][T28967] ? lock_chain_count+0x20/0x20 [ 1471.908386][T28967] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1471.913478][T28967] do_group_exit+0x21b/0x2d0 [ 1471.918145][T28967] ? lockdep_hardirqs_on+0x98/0x150 [ 1471.923394][T28967] get_signal+0x12fc/0x13f0 [ 1471.927996][T28967] arch_do_signal_or_restart+0xc2/0x800 [ 1471.933721][T28967] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1471.939659][T28967] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 1471.945782][T28967] ? get_sigframe_size+0x20/0x20 [ 1471.950796][T28967] ? exit_to_user_mode_loop+0x3b/0x110 [ 1471.956311][T28967] exit_to_user_mode_loop+0x70/0x110 [ 1471.961657][T28967] exit_to_user_mode_prepare+0xee/0x180 [ 1471.967256][T28967] syscall_exit_to_user_mode+0x1a/0x50 [ 1471.972766][T28967] do_syscall_64+0x61/0xb0 [ 1471.977226][T28967] ? clear_bhb_loop+0x40/0x90 [ 1471.981949][T28967] ? clear_bhb_loop+0x40/0x90 [ 1471.986666][T28967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1471.992610][T28967] RIP: 0033:0x7fdfb3b9ce59 [ 1471.997064][T28967] Code: Unable to access opcode bytes at 0x7fdfb3b9ce2f. [ 1472.004119][T28967] RSP: 002b:00007fdfb4b170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1472.012580][T28967] RAX: fffffffffffffe00 RBX: 00007fdfb3e15fa8 RCX: 00007fdfb3b9ce59 [ 1472.020593][T28967] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdfb3e15fa8 [ 1472.028617][T28967] RBP: 00007fdfb3e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1472.036631][T28967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1472.044643][T28967] R13: 00007fdfb3e16038 R14: 00007ffd2a2d0370 R15: 00007ffd2a2d0458 [ 1472.052697][T28967] [ 1472.056332][T28967] Kernel Offset: disabled [ 1472.060670][T28967] Rebooting in 86400 seconds..