last executing test programs: 5.376482996s ago: executing program 1 (id=24471): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000012006bab9a3ff3d86e17aa0a056b876c1d00489200000080000000002a5ad6f7007ea60864160af34afe5f5e1be7ff5bdf1931a0e64f88c1976627dc80fd4460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000009c0)=""/185, 0xb9}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000600)=""/183, 0xb7}], 0x4}, 0x40010022) 5.084187794s ago: executing program 1 (id=24478): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) 4.939380472s ago: executing program 1 (id=24481): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 4.795181731s ago: executing program 1 (id=24484): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x9) 4.687376955s ago: executing program 1 (id=24486): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff79}, 0x60) 4.478540162s ago: executing program 1 (id=24490): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 2.40082212s ago: executing program 2 (id=24517): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x3}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) 2.190803007s ago: executing program 3 (id=24518): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r0}, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000600)=ANY=[@ANYBLOB="180000008000000000000000fdffffffb7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000850000000700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 2.177222698s ago: executing program 2 (id=24519): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2.156551191s ago: executing program 0 (id=24520): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x9) 2.071752622s ago: executing program 0 (id=24521): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000631177fbac141416ac14141686189f034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 2.00723428s ago: executing program 2 (id=24522): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001680)={&(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000000)="660e", 0x2}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000008400000002000000050009"], 0x20}, 0x0) 1.982470754s ago: executing program 3 (id=24523): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r0, &(0x7f00000004c0)}, 0x20) 1.756871423s ago: executing program 3 (id=24524): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.676895253s ago: executing program 0 (id=24525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.057838313s ago: executing program 2 (id=24526): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 733.966475ms ago: executing program 3 (id=24527): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) 620.566619ms ago: executing program 0 (id=24528): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 557.389427ms ago: executing program 3 (id=24529): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x2, 0x1, 0x100, &(0x7f0000000440)) 556.754277ms ago: executing program 2 (id=24537): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)="f5fa", 0x2}], 0x1}, 0x10) close(r1) 506.695194ms ago: executing program 0 (id=24530): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 96.640267ms ago: executing program 3 (id=24531): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41) 93.964097ms ago: executing program 2 (id=24540): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 0s ago: executing program 0 (id=24532): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8100, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x115905, 0x4, 0x0, 0x2, 0x6, 0xa, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02", 0x8}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33) kernel console output (not intermixed with test programs): nk: 'syz.0.18147': attribute type 1 has an invalid length. [ 893.664084][T10772] __nla_validate_parse: 4 callbacks suppressed [ 893.664100][T10772] netlink: 5 bytes leftover after parsing attributes in process `syz.0.18147'. [ 895.110022][T10834] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.18178'. [ 895.134319][T10836] netlink: 'syz.1.18177': attribute type 3 has an invalid length. [ 895.158061][T10836] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.18177'. [ 895.687125][T10864] netlink: 'syz.0.18193': attribute type 3 has an invalid length. [ 895.708608][T10864] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.18193'. [ 896.013946][T10881] sctp: [Deprecated]: syz.1.18200 (pid 10881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 896.013946][T10881] Use struct sctp_sack_info instead [ 896.131971][T10886] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.18204'. [ 896.249110][T10892] netlink: 'syz.2.18205': attribute type 3 has an invalid length. [ 896.257430][T10892] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.18205'. [ 896.897191][T10928] netlink: 'syz.2.18232': attribute type 3 has an invalid length. [ 896.905319][T10928] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.18232'. [ 897.059261][T10937] sctp: [Deprecated]: syz.2.18228 (pid 10937) Use of struct sctp_assoc_value in delayed_ack socket option. [ 897.059261][T10937] Use struct sctp_sack_info instead [ 897.350795][T10949] netlink: 'syz.2.18234': attribute type 2 has an invalid length. [ 897.368433][T10949] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18234'. [ 897.608227][T10961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 897.779447][T10967] sctp: [Deprecated]: syz.0.18242 (pid 10967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 897.779447][T10967] Use struct sctp_sack_info instead [ 897.904071][T10974] netlink: 'syz.3.18247': attribute type 2 has an invalid length. [ 897.912721][T10974] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18247'. [ 899.576416][T11009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 899.935185][T11022] sock: sock_set_timeout: `syz.1.18271' (pid 11022) tries to set negative timeout [ 900.160600][T11030] sock: sock_set_timeout: `syz.0.18282' (pid 11030) tries to set negative timeout [ 900.666000][T11047] netlink: 'syz.2.18280': attribute type 10 has an invalid length. [ 900.676825][T11048] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.18279'. [ 900.697912][T11047] netlink: 152 bytes leftover after parsing attributes in process `syz.2.18280'. [ 901.397826][T11058] sock: sock_set_timeout: `syz.3.18286' (pid 11058) tries to set negative timeout [ 901.502232][T11062] netlink: 'syz.1.18289': attribute type 3 has an invalid length. [ 901.510357][T11062] netlink: 'syz.1.18289': attribute type 8 has an invalid length. [ 901.518586][T11062] netlink: 197324 bytes leftover after parsing attributes in process `syz.1.18289'. [ 901.637522][T11069] netlink: 'syz.1.18291': attribute type 11 has an invalid length. [ 901.657811][T11069] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.18291'. [ 901.814823][T11078] netlink: 'syz.0.18306': attribute type 11 has an invalid length. [ 901.823221][T11078] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.18306'. [ 902.069184][T11095] netlink: 'syz.0.18305': attribute type 9 has an invalid length. [ 902.077298][T11095] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.18305'. [ 902.300258][T11106] netlink: 'syz.3.18311': attribute type 3 has an invalid length. [ 902.318803][T11106] netlink: 'syz.3.18311': attribute type 8 has an invalid length. [ 902.337939][T11106] netlink: 197324 bytes leftover after parsing attributes in process `syz.3.18311'. [ 902.776773][T11134] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.18324'. [ 903.037288][T11146] netlink: 'syz.0.18331': attribute type 10 has an invalid length. [ 903.046270][T11146] netlink: 152 bytes leftover after parsing attributes in process `syz.0.18331'. [ 903.214730][T11155] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.18342'. [ 903.235165][T11155] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 903.392180][T11163] openvswitch: netlink: Flow actions attr not present in new flow. [ 903.799597][T11185] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 904.095198][T11199] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 904.110476][T11199] CPU: 0 PID: 11199 Comm: syz.1.18362 Not tainted syzkaller #0 [ 904.118122][T11199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 904.128262][T11199] Call Trace: [ 904.131617][T11199] [ 904.134612][T11199] dump_stack_lvl+0x18c/0x250 [ 904.139386][T11199] ? show_regs_print_info+0x20/0x20 [ 904.144654][T11199] ? load_image+0x400/0x400 [ 904.149271][T11199] sysfs_warn_dup+0x8e/0xa0 [ 904.153855][T11199] sysfs_do_create_link_sd+0xc0/0x110 [ 904.159314][T11199] device_add_class_symlinks+0x1cf/0x240 [ 904.165045][T11199] device_add+0x507/0xc20 [ 904.169484][T11199] wiphy_register+0x1dad/0x2ae0 [ 904.174473][T11199] ? cfg80211_event_work+0x40/0x40 [ 904.179662][T11199] ? minstrel_ht_alloc+0x88a/0x990 [ 904.184877][T11199] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 904.191034][T11199] ieee80211_register_hw+0x3464/0x4250 [ 904.196627][T11199] ? ieee80211_tasklet_handler+0x20/0x20 [ 904.202329][T11199] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 904.208312][T11199] ? __debug_object_init+0xec/0x450 [ 904.213608][T11199] ? __asan_memset+0x22/0x40 [ 904.218283][T11199] ? __hrtimer_init+0x186/0x270 [ 904.223288][T11199] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 904.229097][T11199] ? mac80211_hwsim_free+0x220/0x220 [ 904.234428][T11199] ? rcu_is_watching+0x15/0xb0 [ 904.239236][T11199] ? kstrndup+0xbd/0x140 [ 904.243537][T11199] hwsim_new_radio_nl+0xdc9/0x1a90 [ 904.248705][T11199] ? __nla_validate+0x50/0x50 [ 904.253462][T11199] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 904.259856][T11199] ? __nla_parse+0x40/0x50 [ 904.264323][T11199] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 904.270711][T11199] genl_family_rcv_msg_doit+0x211/0x310 [ 904.276303][T11199] ? end_current_label_crit_section+0x170/0x170 [ 904.282593][T11199] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 904.288552][T11199] ? bpf_lsm_capable+0x9/0x10 [ 904.293275][T11199] ? security_capable+0x89/0xb0 [ 904.298183][T11199] genl_rcv_msg+0x619/0x7a0 [ 904.302754][T11199] ? genl_bind+0x360/0x360 [ 904.307204][T11199] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 904.313576][T11199] ? perf_trace_lock+0x304/0x3b0 [ 904.318584][T11199] netlink_rcv_skb+0x241/0x4d0 [ 904.323394][T11199] ? genl_bind+0x360/0x360 [ 904.327854][T11199] ? netlink_ack+0x1180/0x1180 [ 904.332682][T11199] ? __lock_acquire+0x7d40/0x7d40 [ 904.337772][T11199] ? down_read+0x1ac/0x2e0 [ 904.342232][T11199] genl_rcv+0x28/0x40 [ 904.346247][T11199] netlink_unicast+0x751/0x8d0 [ 904.351079][T11199] netlink_sendmsg+0x8d0/0xbf0 [ 904.355885][T11199] ? perf_trace_lock+0x304/0x3b0 [ 904.360879][T11199] ? netlink_getsockopt+0x590/0x590 [ 904.366117][T11199] ? aa_sock_msg_perm+0x94/0x150 [ 904.371099][T11199] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 904.376423][T11199] ? security_socket_sendmsg+0x80/0xa0 [ 904.381924][T11199] ? netlink_getsockopt+0x590/0x590 [ 904.387162][T11199] ____sys_sendmsg+0x5ba/0x960 [ 904.392082][T11199] ? __asan_memset+0x22/0x40 [ 904.396721][T11199] ? __sys_sendmsg_sock+0x30/0x30 [ 904.401800][T11199] ? __import_iovec+0x5f2/0x850 [ 904.406715][T11199] ? import_iovec+0x73/0xa0 [ 904.411275][T11199] ___sys_sendmsg+0x2a6/0x360 [ 904.416006][T11199] ? __sys_sendmsg+0x2a0/0x2a0 [ 904.420894][T11199] __se_sys_sendmsg+0x1c2/0x2b0 [ 904.425790][T11199] ? __x64_sys_sendmsg+0x80/0x80 [ 904.430798][T11199] ? lockdep_hardirqs_on+0x98/0x150 [ 904.436058][T11199] do_syscall_64+0x55/0xa0 [ 904.440512][T11199] ? clear_bhb_loop+0x40/0x90 [ 904.445230][T11199] ? clear_bhb_loop+0x40/0x90 [ 904.449967][T11199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 904.455915][T11199] RIP: 0033:0x7fd00ad9acb9 [ 904.460383][T11199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.480034][T11199] RSP: 002b:00007fd00bbad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.488494][T11199] RAX: ffffffffffffffda RBX: 00007fd00b015fa0 RCX: 00007fd00ad9acb9 [ 904.496503][T11199] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 904.504512][T11199] RBP: 00007fd00ae08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 904.512518][T11199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 904.520524][T11199] R13: 00007fd00b016038 R14: 00007fd00b015fa0 R15: 00007fffe0430848 [ 904.528555][T11199] [ 905.887341][T11233] __nla_validate_parse: 4 callbacks suppressed [ 905.887360][T11233] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.18371'. [ 905.917592][T11233] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 906.190368][T11249] netlink: 6 bytes leftover after parsing attributes in process `syz.2.18376'. [ 906.214456][T11249] openvswitch: netlink: Flow actions attr not present in new flow. [ 906.340833][T11260] netlink: 'syz.3.18384': attribute type 7 has an invalid length. [ 906.523020][T11270] netlink: 'syz.2.18388': attribute type 17 has an invalid length. [ 906.539976][T11270] netlink: 'syz.2.18388': attribute type 16 has an invalid length. [ 906.549323][T11270] netlink: 152 bytes leftover after parsing attributes in process `syz.2.18388'. [ 907.011285][T11295] netlink: 'syz.3.18401': attribute type 17 has an invalid length. [ 907.019684][T11295] netlink: 'syz.3.18401': attribute type 16 has an invalid length. [ 907.027657][T11295] netlink: 152 bytes leftover after parsing attributes in process `syz.3.18401'. [ 907.137064][T11297] netlink: 'syz.0.18410': attribute type 29 has an invalid length. [ 907.153299][T11297] netlink: 'syz.0.18410': attribute type 29 has an invalid length. [ 907.358915][T11309] netlink: 'syz.2.18407': attribute type 7 has an invalid length. [ 907.467042][T11316] netlink: 'syz.0.18411': attribute type 10 has an invalid length. [ 907.475885][T11316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18411'. [ 907.491963][T11316] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 907.523711][T11316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 908.041232][T11346] netlink: 'syz.2.18425': attribute type 10 has an invalid length. [ 908.050146][T11346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18425'. [ 908.061517][T11346] `: Device Q6`Ҙ is loopback device. Loopback devices can't be added as a team port [ 908.086694][T11346] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 908.533977][T11371] netlink: 'syz.2.18438': attribute type 21 has an invalid length. [ 908.547889][T11371] netlink: 'syz.2.18438': attribute type 1 has an invalid length. [ 908.655448][T11375] netlink: 'syz.3.18439': attribute type 10 has an invalid length. [ 908.673933][T11375] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18439'. [ 908.694162][T11375] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 908.731185][T11375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 909.144694][T11402] netlink: 'syz.1.18453': attribute type 10 has an invalid length. [ 909.156690][T11402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18453'. [ 909.170988][T11402] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 909.193318][T11402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 910.890084][T11502] netlink: 'syz.0.18499': attribute type 2 has an invalid length. [ 910.898599][T11502] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.18499'. [ 911.167031][T11514] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.18515'. [ 911.406458][T11528] netlink: 'syz.3.18513': attribute type 2 has an invalid length. [ 911.414908][T11528] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.18513'. [ 911.636082][T11539] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.18517'. [ 911.651823][T11539] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.18517'. [ 911.663515][T11534] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.18517'. [ 912.154280][T11564] netlink: 'syz.2.18527': attribute type 2 has an invalid length. [ 912.189213][T11564] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.18527'. [ 912.756612][T11602] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 912.763797][T11603] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.18546'. [ 912.775415][T11603] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.18546'. [ 912.787195][T11600] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.18546'. [ 913.256442][T11625] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 913.844461][T11655] netlink: 'syz.2.18581': attribute type 1 has an invalid length. [ 913.880078][T11658] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 914.261408][T11682] netlink: 'syz.1.18585': attribute type 8 has an invalid length. [ 914.349912][T11686] netlink: 'syz.0.18587': attribute type 1 has an invalid length. [ 915.102689][T11730] netlink: 'syz.3.18608': attribute type 10 has an invalid length. [ 915.111518][T11730] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 915.277108][T11738] netlink: 'syz.3.18610': attribute type 8 has an invalid length. [ 915.686923][T11761] netlink: 'syz.0.18622': attribute type 10 has an invalid length. [ 915.707890][T11761] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 919.132615][T11912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.007176][T11930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.103588][T11934] netlink: 'syz.2.18708': attribute type 2 has an invalid length. [ 920.117329][T11934] netlink: 'syz.2.18708': attribute type 1 has an invalid length. [ 920.126222][T11934] __nla_validate_parse: 10 callbacks suppressed [ 920.126238][T11934] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.18708'. [ 920.433699][T11954] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.18716'. [ 920.587127][T11964] netlink: 'syz.1.18721': attribute type 2 has an invalid length. [ 920.595678][T11964] netlink: 'syz.1.18721': attribute type 1 has an invalid length. [ 920.605194][T11964] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.18721'. [ 920.850601][T11978] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.18728'. [ 920.966301][T11984] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.18730'. [ 921.029446][T11988] netlink: 'syz.0.18732': attribute type 2 has an invalid length. [ 921.037665][T11988] netlink: 'syz.0.18732': attribute type 1 has an invalid length. [ 921.047154][T11988] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.18732'. [ 921.703496][T12018] netlink: 'syz.2.18745': attribute type 9 has an invalid length. [ 921.711710][T12018] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.18745'. [ 922.500624][T12046] netlink: 'syz.0.18766': attribute type 9 has an invalid length. [ 922.518643][T12046] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.18766'. [ 922.665417][T12054] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.18762'. [ 922.739970][T12059] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.18767'. [ 923.082857][T12073] netlink: 'syz.1.18773': attribute type 9 has an invalid length. [ 924.511327][T12118] netlink: 'syz.2.18794': attribute type 21 has an invalid length. [ 925.451544][T12150] __nla_validate_parse: 4 callbacks suppressed [ 925.451561][T12150] netlink: 188 bytes leftover after parsing attributes in process `syz.1.18812'. [ 925.588729][T12152] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.18813'. [ 925.631961][T12157] netlink: 68 bytes leftover after parsing attributes in process `syz.0.18814'. [ 926.245434][T12178] validate_nla: 3 callbacks suppressed [ 926.245453][T12178] netlink: 'syz.1.18823': attribute type 21 has an invalid length. [ 926.259800][T12178] netlink: 'syz.1.18823': attribute type 1 has an invalid length. [ 926.267677][T12178] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.18823'. [ 926.364923][T12182] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.18824'. [ 926.783608][T12205] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.18839'. [ 927.061355][T12212] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18842'. [ 927.816076][T12240] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18854'. [ 927.920847][T12246] netlink: 'syz.2.18857': attribute type 1 has an invalid length. [ 927.929236][T12246] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.18857'. [ 928.228974][T12264] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.18865'. [ 928.356965][T12272] netlink: 'syz.0.18870': attribute type 1 has an invalid length. [ 928.845636][T12296] netlink: 'syz.3.18882': attribute type 1 has an invalid length. [ 929.411805][T12328] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 930.155815][T12355] netlink: 'syz.0.18919': attribute type 2 has an invalid length. [ 930.167922][T12355] netlink: 'syz.0.18919': attribute type 8 has an invalid length. [ 930.468178][T12371] __nla_validate_parse: 7 callbacks suppressed [ 930.468203][T12371] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18916'. [ 930.569866][T12375] netlink: 'syz.3.18923': attribute type 2 has an invalid length. [ 930.578648][T12375] netlink: 'syz.3.18923': attribute type 8 has an invalid length. [ 930.586537][T12375] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18923'. [ 931.001249][T12395] netlink: 64 bytes leftover after parsing attributes in process `syz.1.18930'. [ 931.165052][T12404] netlink: 'syz.1.18936': attribute type 2 has an invalid length. [ 931.173264][T12404] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18936'. [ 931.618016][T12432] netlink: 64 bytes leftover after parsing attributes in process `syz.2.18946'. [ 931.760896][T12435] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 931.954790][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.961275][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.456125][T12442] validate_nla: 1 callbacks suppressed [ 932.456141][T12442] netlink: 'syz.3.18959': attribute type 4 has an invalid length. [ 932.470099][T12442] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.18959'. [ 933.311611][T12491] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.18977'. [ 933.732301][T12517] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.18990'. [ 934.225077][T12549] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.19004'. [ 934.236960][T12549] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.19004'. [ 934.468181][T12562] netlink: 'syz.1.19012': attribute type 4 has an invalid length. [ 934.610818][T12568] netlink: 'syz.3.19015': attribute type 1 has an invalid length. [ 935.141615][T12600] syz.3.19031 (12600) used obsolete PPPIOCDETACH ioctl [ 935.155444][T12602] netlink: 'syz.1.19032': attribute type 2 has an invalid length. [ 935.632508][T12629] netlink: 'syz.3.19044': attribute type 2 has an invalid length. [ 935.640716][T12629] __nla_validate_parse: 4 callbacks suppressed [ 935.640732][T12629] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.19044'. [ 935.849683][T12638] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.19048'. [ 936.127437][T12656] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.19059'. [ 936.520932][T12678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19070'. [ 936.541653][T12678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19070'. [ 936.578112][T12683] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19070'. [ 937.394088][T12729] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19096'. [ 937.413878][T12729] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19096'. [ 937.425555][T12729] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19096'. [ 937.861084][T12759] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19108'. [ 939.688781][T12838] netlink: 'syz.2.19148': attribute type 2 has an invalid length. [ 939.696831][T12838] netlink: 'syz.2.19148': attribute type 1 has an invalid length. [ 941.058602][T12907] netlink: 'syz.0.19189': attribute type 2 has an invalid length. [ 941.081729][T12907] netlink: 'syz.0.19189': attribute type 1 has an invalid length. [ 941.090423][T12907] __nla_validate_parse: 10 callbacks suppressed [ 941.090440][T12907] netlink: 152 bytes leftover after parsing attributes in process `syz.0.19189'. [ 941.126698][T12909] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.19178'. [ 941.707879][T12934] netlink: 'syz.3.19195': attribute type 1 has an invalid length. [ 942.059694][T12955] netlink: 'syz.0.19205': attribute type 9 has an invalid length. [ 942.067591][T12955] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.19205'. [ 942.147555][T12958] netlink: 'syz.0.19205': attribute type 9 has an invalid length. [ 942.198158][T12958] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.19205'. [ 942.579814][T12981] netlink: 'syz.1.19217': attribute type 8 has an invalid length. [ 942.588944][T12981] netlink: 'syz.1.19217': attribute type 1 has an invalid length. [ 942.597347][T12981] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.19217'. [ 942.802963][T12987] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.19219'. [ 943.021413][T13000] netlink: 'syz.2.19225': attribute type 9 has an invalid length. [ 943.043766][T13000] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.19225'. [ 943.144341][T13001] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.19225'. [ 943.233176][T13008] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.19229'. [ 943.360917][T13011] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.19230'. [ 944.730253][T13072] validate_nla: 3 callbacks suppressed [ 944.730271][T13072] netlink: 'syz.1.19258': attribute type 9 has an invalid length. [ 944.814046][T13075] netlink: 'syz.1.19258': attribute type 9 has an invalid length. [ 945.079289][T13085] netlink: 'syz.3.19266': attribute type 33 has an invalid length. [ 945.473994][T13109] netlink: 'syz.3.19273': attribute type 21 has an invalid length. [ 945.486888][T13109] netlink: 'syz.3.19273': attribute type 1 has an invalid length. [ 945.713919][T13119] netlink: 'syz.2.19278': attribute type 33 has an invalid length. [ 946.261881][T13151] netlink: 'syz.1.19294': attribute type 33 has an invalid length. [ 946.287868][T13151] __nla_validate_parse: 12 callbacks suppressed [ 946.288094][T13151] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.19294'. [ 946.891830][T13187] netlink: 'syz.2.19312': attribute type 29 has an invalid length. [ 946.915471][T13187] netlink: 'syz.2.19312': attribute type 29 has an invalid length. [ 946.932345][T13187] netlink: 'syz.2.19312': attribute type 29 has an invalid length. [ 947.493793][T13218] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.19328'. [ 948.676296][T13265] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.19348'. [ 948.877209][T13269] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.19351'. [ 949.581538][T13302] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19365'. [ 949.702194][T13307] syz.0.19374[13307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 949.702337][T13307] syz.0.19374[13307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 949.739931][T13305] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.19364'. [ 949.918913][T13314] validate_nla: 2 callbacks suppressed [ 949.918932][T13314] netlink: 'syz.2.19369': attribute type 5 has an invalid length. [ 950.122249][T13319] netlink: 'syz.1.19372': attribute type 17 has an invalid length. [ 950.135301][T13319] netlink: 'syz.1.19372': attribute type 41 has an invalid length. [ 950.278165][T13327] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19375'. [ 950.399050][T13333] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19387'. [ 950.544719][T13342] syz.1.19379[13342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 950.544867][T13342] syz.1.19379[13342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 950.738039][T13347] netlink: 'syz.1.19382': attribute type 5 has an invalid length. [ 950.824590][T13352] netlink: 'syz.3.19385': attribute type 17 has an invalid length. [ 950.849550][T13352] netlink: 'syz.3.19385': attribute type 41 has an invalid length. [ 951.103630][T13364] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.19394'. [ 951.177442][T13366] syz.3.19393[13366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 951.177589][T13366] syz.3.19393[13366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 951.413202][T13379] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.19400'. [ 951.467996][T13380] netlink: 'syz.3.19399': attribute type 5 has an invalid length. [ 952.590853][T13436] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.19425'. [ 952.611382][T13436] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 952.641449][T13436] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 953.159503][T13458] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.19435'. [ 953.386261][T13469] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.19446'. [ 953.531206][T13478] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.19442'. [ 954.090597][T13500] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.19456'. [ 954.450684][T13519] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19463'. [ 954.461420][T13519] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 954.477900][T13519] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 954.866525][T13539] netlink: 'syz.3.19476': attribute type 2 has an invalid length. [ 954.874557][T13539] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.19476'. [ 954.926070][T13542] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.19477'. [ 954.935968][T13542] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 954.944905][T13542] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 954.972634][T13543] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.19475'. [ 955.198902][T13556] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 955.217527][T13556] openvswitch: netlink: Message has 1 unknown bytes. [ 955.896698][T13595] netlink: 'syz.1.19501': attribute type 2 has an invalid length. [ 956.008946][T13599] netlink: 'syz.0.19502': attribute type 21 has an invalid length. [ 956.249135][T13611] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 956.271180][T13611] openvswitch: netlink: Message has 1 unknown bytes. [ 956.741273][T13634] __nla_validate_parse: 7 callbacks suppressed [ 956.741299][T13634] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.19520'. [ 956.811050][T13638] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.19523'. [ 956.876096][T13641] netlink: 'syz.1.19524': attribute type 21 has an invalid length. [ 957.119685][T13655] netlink: 'syz.2.19531': attribute type 21 has an invalid length. [ 957.128320][T13655] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19531'. [ 957.138722][T13655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19531'. [ 957.719232][T13683] delete_channel: no stack [ 957.756861][T13690] net_ratelimit: 4 callbacks suppressed [ 957.756883][T13690] sock: sock_set_timeout: `syz.3.19547' (pid 13690) tries to set negative timeout [ 958.603874][T13737] netlink: 'syz.3.19570': attribute type 21 has an invalid length. [ 962.098762][T13935] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.19663'. [ 963.295541][T13995] syz.3.19685[13995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 963.295807][T13995] syz.3.19685[13995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 963.757622][T14020] netlink: 209588 bytes leftover after parsing attributes in process `syz.3.19696'. [ 963.918423][T14026] syz.0.19708[14026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 963.918697][T14026] syz.0.19708[14026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 964.600725][T14056] netlink: 'syz.0.19714': attribute type 3 has an invalid length. [ 964.634315][T14056] netlink: 152 bytes leftover after parsing attributes in process `syz.0.19714'. [ 965.181626][T14076] netlink: 'syz.3.19723': attribute type 3 has an invalid length. [ 965.207818][T14076] netlink: 152 bytes leftover after parsing attributes in process `syz.3.19723'. [ 965.702286][T14096] netlink: 'syz.1.19734': attribute type 29 has an invalid length. [ 965.730761][T14096] netlink: 'syz.1.19734': attribute type 29 has an invalid length. [ 965.778968][T14097] netlink: 'syz.1.19734': attribute type 29 has an invalid length. [ 965.829272][T14099] netlink: 'syz.2.19735': attribute type 3 has an invalid length. [ 965.848254][T14099] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.19735'. [ 965.991437][T14102] netlink: 'syz.3.19737': attribute type 4 has an invalid length. [ 966.009424][T14102] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.19737'. [ 966.539239][T14123] netlink: 'syz.1.19746': attribute type 3 has an invalid length. [ 966.547281][T14123] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.19746'. [ 966.582974][T14124] netlink: 'syz.3.19745': attribute type 29 has an invalid length. [ 966.601538][T14124] netlink: 'syz.3.19745': attribute type 29 has an invalid length. [ 966.658454][T14126] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.19748'. [ 967.745609][T14150] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.19760'. [ 968.247300][T14177] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.19773'. [ 969.754371][T14221] validate_nla: 10 callbacks suppressed [ 969.754393][T14221] netlink: 'syz.0.19794': attribute type 3 has an invalid length. [ 969.783477][T14221] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.19794'. [ 970.967922][T14261] netlink: 'syz.0.19813': attribute type 1 has an invalid length. [ 971.175315][T14272] netlink: 'syz.1.19819': attribute type 10 has an invalid length. [ 971.378651][T14284] netlink: 'syz.2.19824': attribute type 1 has an invalid length. [ 971.617347][T14300] netlink: 'syz.1.19831': attribute type 3 has an invalid length. [ 971.625782][T14300] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.19831'. [ 971.749185][T14303] netlink: 'syz.0.19832': attribute type 10 has an invalid length. [ 971.897490][T14309] netlink: 'syz.1.19836': attribute type 1 has an invalid length. [ 972.227980][T14323] netlink: 'syz.2.19844': attribute type 3 has an invalid length. [ 972.236062][T14323] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.19844'. [ 972.386227][T14331] netlink: 'syz.2.19846': attribute type 10 has an invalid length. [ 972.585043][T14344] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.19853'. [ 972.594799][T14344] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 973.635994][T14384] mac80211_hwsim hwsim5 O3c: renamed from wlan1 [ 975.050461][T14447] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.19902'. [ 975.078822][T14447] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 975.464990][T14469] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.19912'. [ 975.479613][T14469] netlink: 'syz.1.19912': attribute type 2 has an invalid length. [ 976.913313][T14500] mac80211_hwsim hwsim9 O3c: renamed from wlan1 [ 977.766036][T14526] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.19943'. [ 977.827488][T14526] netlink: 'syz.2.19943': attribute type 2 has an invalid length. [ 981.722313][T14613] netlink: 'syz.1.19983': attribute type 21 has an invalid length. [ 983.052892][T14630] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.19990'. [ 983.072394][T14631] netlink: 'syz.1.19991': attribute type 1 has an invalid length. [ 983.089379][T14631] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.19991'. [ 983.465316][T14655] netlink: 'syz.0.20009': attribute type 21 has an invalid length. [ 983.760935][T14664] netlink: 'syz.0.20004': attribute type 1 has an invalid length. [ 983.801266][T14664] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.20004'. [ 984.747839][T14688] netlink: 'syz.3.20016': attribute type 10 has an invalid length. [ 986.022122][T14714] netlink: set zone limit has 8 unknown bytes [ 986.106547][T14718] netlink: 'syz.0.20029': attribute type 10 has an invalid length. [ 986.238295][T14725] netlink: 'syz.0.20034': attribute type 3 has an invalid length. [ 986.248926][T14725] netlink: 'syz.0.20034': attribute type 238 has an invalid length. [ 986.436443][T14737] netlink: 'syz.3.20039': attribute type 9 has an invalid length. [ 986.445474][T14737] netlink: 399 bytes leftover after parsing attributes in process `syz.3.20039'. [ 986.484386][T14739] netlink: 'syz.0.20048': attribute type 30 has an invalid length. [ 986.656930][T14748] netlink: set zone limit has 8 unknown bytes [ 986.914337][T14764] validate_nla: 1 callbacks suppressed [ 986.914358][T14764] netlink: 'syz.1.20051': attribute type 9 has an invalid length. [ 986.958288][T14764] netlink: 399 bytes leftover after parsing attributes in process `syz.1.20051'. [ 987.084293][T14772] netlink: 'syz.2.20055': attribute type 30 has an invalid length. [ 987.140129][T14777] netlink: set zone limit has 8 unknown bytes [ 987.586235][T14799] netlink: 'syz.2.20069': attribute type 9 has an invalid length. [ 987.607879][T14799] netlink: 399 bytes leftover after parsing attributes in process `syz.2.20069'. [ 987.734299][T14809] netlink: 'syz.1.20070': attribute type 30 has an invalid length. [ 987.821469][T14812] netlink: 'syz.2.20074': attribute type 4 has an invalid length. [ 987.829554][T14812] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.20074'. [ 988.326730][T14841] netlink: 'syz.3.20088': attribute type 4 has an invalid length. [ 988.335605][T14841] netlink: 'syz.3.20088': attribute type 3 has an invalid length. [ 988.348736][T14841] netlink: 152988 bytes leftover after parsing attributes in process `syz.3.20088'. [ 989.303863][T14858] netlink: 'syz.2.20097': attribute type 8 has an invalid length. [ 989.323095][T14858] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.20097'. [ 989.960393][T14888] netlink: 'syz.1.20111': attribute type 4 has an invalid length. [ 989.968695][T14888] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.20111'. [ 989.978616][T14886] netlink: 'syz.2.20110': attribute type 4 has an invalid length. [ 989.996787][T14886] netlink: 152988 bytes leftover after parsing attributes in process `syz.2.20110'. [ 990.159312][T14896] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.20124'. [ 990.290464][T14906] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.20120'. [ 990.450532][T14913] netlink: 152988 bytes leftover after parsing attributes in process `syz.1.20125'. [ 990.466295][T14916] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20123'. [ 990.772930][T14932] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.20133'. [ 990.973451][T14942] netlink: 76 bytes leftover after parsing attributes in process `syz.1.20138'. [ 992.282478][T14981] validate_nla: 5 callbacks suppressed [ 992.282499][T14981] netlink: 'syz.1.20157': attribute type 1 has an invalid length. [ 993.322014][T15040] syz.3.20186[15040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 993.322207][T15040] syz.3.20186[15040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 993.392735][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.410776][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.476602][T15046] netlink: 'syz.0.20196': attribute type 1 has an invalid length. [ 993.493564][T15046] __nla_validate_parse: 7 callbacks suppressed [ 993.493582][T15046] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.20196'. [ 994.171789][T15087] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.20208'. [ 994.189282][T15087] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.20208'. [ 994.210523][T15087] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.20208'. [ 994.822083][T15122] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.20224'. [ 994.845923][T15122] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.20224'. [ 994.859315][T15122] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.20224'. [ 995.850235][T15149] netlink: 'syz.2.20236': attribute type 46 has an invalid length. [ 995.858463][T15149] netlink: 'syz.2.20236': attribute type 46 has an invalid length. [ 996.020661][T15159] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.20241'. [ 996.395559][T15182] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.20251'. [ 996.408568][T15177] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.20251'. [ 996.591638][T15193] netlink: 'syz.2.20259': attribute type 13 has an invalid length. [ 996.600928][T15193] erspan0: refused to change device tx_queue_len [ 996.607500][T15193] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 996.752155][T15202] netlink: 'syz.1.20262': attribute type 46 has an invalid length. [ 996.777886][T15202] netlink: 'syz.1.20262': attribute type 46 has an invalid length. [ 997.303820][T15227] netlink: 'syz.0.20273': attribute type 46 has an invalid length. [ 997.332415][T15227] netlink: 'syz.0.20273': attribute type 46 has an invalid length. [ 998.228247][T15271] netlink: 'syz.0.20293': attribute type 13 has an invalid length. [ 998.236661][T15271] erspan0: refused to change device tx_queue_len [ 998.264491][T15271] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 998.772832][T15295] __nla_validate_parse: 6 callbacks suppressed [ 998.772851][T15295] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.20304'. [ 998.799971][T15297] sock: sock_set_timeout: `syz.1.20305' (pid 15297) tries to set negative timeout [ 998.811031][T15292] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.20304'. [ 999.050548][T15312] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.20318'. [ 999.068517][T15308] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.20318'. [ 999.478484][T15324] sock: sock_set_timeout: `syz.3.20319' (pid 15324) tries to set negative timeout [ 999.698687][T15336] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.20323'. [ 999.739149][T15333] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.20323'. [ 1001.582507][T15428] netlink: 'syz.2.20367': attribute type 21 has an invalid length. [ 1001.617942][T15428] netlink: 'syz.2.20367': attribute type 6 has an invalid length. [ 1001.632904][T15428] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20367'. [ 1002.228932][T15457] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.20380'. [ 1002.249316][T15457] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.20380'. [ 1002.269953][T15456] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.20380'. [ 1006.083139][T15586] __nla_validate_parse: 1 callbacks suppressed [ 1006.083158][T15586] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.20439'. [ 1006.434535][T15607] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.20447'. [ 1006.450901][T15607] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.20447'. [ 1006.461679][T15602] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.20447'. [ 1006.620405][T15617] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20454'. [ 1006.754386][T15623] netlink: set zone limit has 8 unknown bytes [ 1009.914069][T15742] netlink: 14 bytes leftover after parsing attributes in process `syz.1.20515'. [ 1009.942499][T15742] netlink: get zone limit has 4 unknown bytes [ 1012.244798][T15822] netlink: 14 bytes leftover after parsing attributes in process `syz.3.20553'. [ 1012.275926][T15822] netlink: get zone limit has 4 unknown bytes [ 1014.785073][T15883] netlink: 'syz.2.20578': attribute type 17 has an invalid length. [ 1014.805124][T15883] netlink: 152 bytes leftover after parsing attributes in process `syz.2.20578'. [ 1015.231530][T15897] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.20586'. [ 1016.522897][T15932] netlink: 'syz.3.20602': attribute type 17 has an invalid length. [ 1016.537799][T15932] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20602'. [ 1018.460237][T16003] netlink: 'syz.2.20637': attribute type 2 has an invalid length. [ 1018.468264][T16003] netlink: 'syz.2.20637': attribute type 8 has an invalid length. [ 1018.476810][T16003] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20637'. [ 1018.708706][T16011] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.20641'. [ 1019.963281][T16051] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.20660'. [ 1019.985170][T16050] netlink: 'syz.0.20668': attribute type 10 has an invalid length. [ 1019.995141][T16050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.20668'. [ 1020.005775][T16050] `: entered promiscuous mode [ 1020.011453][T16050] team_slave_1: entered promiscuous mode [ 1020.017632][T16050] geneve1: entered promiscuous mode [ 1020.023793][T16050] `: entered allmulticast mode [ 1020.029348][T16050] team_slave_1: entered allmulticast mode [ 1020.035206][T16050] geneve1: entered allmulticast mode [ 1020.060243][T16050] 8021q: adding VLAN 0 to HW filter on device ` [ 1020.079500][T16050] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 1020.230556][T16061] netlink: 'syz.3.20665': attribute type 41 has an invalid length. [ 1020.238905][T16061] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20665'. [ 1020.330356][T16065] delete_channel: no stack [ 1020.454452][T16073] netlink: 'syz.2.20679': attribute type 10 has an invalid length. [ 1020.469993][T16073] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1020.477132][T16073] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1020.508670][T16073] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1020.525794][T16073] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1020.534850][T16073] `: Port device netdevsim0 added [ 1020.545315][T16078] netlink: 'syz.2.20679': attribute type 10 has an invalid length. [ 1020.554336][T16078] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1020.562170][T16078] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1020.612627][T16078] `: Port device netdevsim0 removed [ 1020.995282][T16097] netlink: 'syz.1.20683': attribute type 10 has an invalid length. [ 1021.007867][T16097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20683'. [ 1021.029423][T16097] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1021.255289][T16111] netlink: 'syz.2.20688': attribute type 41 has an invalid length. [ 1021.271473][T16111] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20688'. [ 1021.574258][T16124] netlink: 'syz.3.20696': attribute type 10 has an invalid length. [ 1021.595335][T16124] netdevsim netdevsim3 : left promiscuous mode [ 1021.602795][T16124] netdevsim netdevsim3 : left allmulticast mode [ 1021.646911][T16124] team0: Port device added [ 1021.665665][T16128] netlink: 'syz.3.20696': attribute type 10 has an invalid length. [ 1021.685513][T16128] team0: Port device removed [ 1021.896075][T16141] netlink: 'syz.2.20703': attribute type 29 has an invalid length. [ 1021.905569][T16141] netlink: 'syz.2.20703': attribute type 29 has an invalid length. [ 1021.998146][T16144] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1022.019848][T16144] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1022.071006][T16144] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1022.079462][T16144] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1022.088544][T16144] `: Port device netdevsim0 added [ 1022.096085][T16148] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1022.108991][T16148] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1022.164147][T16148] `: Port device netdevsim0 removed [ 1022.242573][T16155] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.20706'. [ 1022.440162][T16163] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.20712'. [ 1022.575490][T16171] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.20718'. [ 1022.739607][T16180] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1022.746732][T16180] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1022.786782][T16180] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1022.795969][T16180] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1022.805075][T16180] team0: Port device netdevsim0 added [ 1022.838454][T16181] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1022.845781][T16181] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1022.931065][T16181] team0: Port device netdevsim0 removed [ 1023.089213][T16193] delete_channel: no stack [ 1023.580533][T16220] __nla_validate_parse: 1 callbacks suppressed [ 1023.580553][T16220] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.20741'. [ 1023.671716][T16224] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.20743'. [ 1024.113428][T16249] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1024.139339][T16249] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1024.159675][T16249] `: Port device netdevsim0 added [ 1024.165737][T16250] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1024.186704][T16250] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1024.240073][T16250] `: Port device netdevsim0 removed [ 1024.554167][T16272] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.20771'. [ 1025.633359][T16333] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.20794'. [ 1025.740647][T16341] validate_nla: 14 callbacks suppressed [ 1025.740665][T16341] netlink: 'syz.3.20798': attribute type 10 has an invalid length. [ 1025.761712][T16341] team0: Port device added [ 1025.786112][T16341] netlink: 'syz.3.20798': attribute type 10 has an invalid length. [ 1025.827804][T16341] team0: Port device removed [ 1026.067165][T16359] netlink: 'syz.3.20807': attribute type 3 has an invalid length. [ 1026.087930][T16359] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20807'. [ 1026.155058][T16361] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.20809'. [ 1026.484820][T16384] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.20817'. [ 1026.514758][T16384] openvswitch: netlink: Duplicate key (type 0). [ 1026.851974][T16405] netlink: 'syz.1.20830': attribute type 3 has an invalid length. [ 1026.861704][T16405] netlink: 132 bytes leftover after parsing attributes in process `syz.1.20830'. [ 1027.048985][T16419] netlink: 'syz.0.20841': attribute type 3 has an invalid length. [ 1027.056907][T16419] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20841'. [ 1027.490763][T16441] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.20846'. [ 1027.512633][T16441] openvswitch: netlink: Duplicate key (type 0). [ 1028.883605][T16523] __nla_validate_parse: 1 callbacks suppressed [ 1028.883624][T16523] netlink: 14 bytes leftover after parsing attributes in process `syz.0.20886'. [ 1028.901186][T16524] netlink: 'syz.3.20884': attribute type 2 has an invalid length. [ 1028.923938][T16524] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.20884'. [ 1029.675628][T16572] netlink: 'syz.0.20909': attribute type 153 has an invalid length. [ 1029.685677][T16572] netlink: 'syz.0.20909': attribute type 1 has an invalid length. [ 1029.694070][T16572] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.20909'. [ 1030.096460][T16594] netlink: 'syz.1.20922': attribute type 153 has an invalid length. [ 1030.104620][T16594] netlink: 'syz.1.20922': attribute type 1 has an invalid length. [ 1030.115933][T16594] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.20922'. [ 1030.379554][T16605] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.20935'. [ 1032.738756][T16715] validate_nla: 2 callbacks suppressed [ 1032.738774][T16715] netlink: 'syz.2.20980': attribute type 9 has an invalid length. [ 1032.757817][T16715] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.20980'. [ 1032.873746][T16718] netlink: 'syz.2.20980': attribute type 9 has an invalid length. [ 1032.892776][T16718] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.20980'. [ 1034.197076][T16768] netlink: 'syz.2.21004': attribute type 21 has an invalid length. [ 1034.205714][T16768] netlink: 156 bytes leftover after parsing attributes in process `syz.2.21004'. [ 1034.601916][T16787] netlink: 'syz.0.21020': attribute type 9 has an invalid length. [ 1034.617790][T16787] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.21020'. [ 1034.715706][T16793] netlink: 'syz.0.21020': attribute type 9 has an invalid length. [ 1034.723748][T16793] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.21020'. [ 1034.964712][T16807] netlink: 'syz.0.21021': attribute type 21 has an invalid length. [ 1034.979697][T16807] netlink: 156 bytes leftover after parsing attributes in process `syz.0.21021'. [ 1035.325775][T16826] netlink: 'syz.1.21032': attribute type 9 has an invalid length. [ 1035.335329][T16826] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.21032'. [ 1035.359859][T16827] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21031'. [ 1035.387030][T16827] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21031'. [ 1035.411761][T16824] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21031'. [ 1035.447903][T16829] netlink: 'syz.1.21032': attribute type 9 has an invalid length. [ 1035.469829][T16829] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.21032'. [ 1036.774297][T16865] netlink: 'syz.3.21050': attribute type 2 has an invalid length. [ 1036.782552][T16865] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.21050'. [ 1036.883795][T16868] netlink: 'syz.2.21051': attribute type 13 has an invalid length. [ 1037.785415][T16921] validate_nla: 3 callbacks suppressed [ 1037.785436][T16921] netlink: 'syz.2.21077': attribute type 2 has an invalid length. [ 1040.199824][T17025] netlink: 'syz.3.21128': attribute type 9 has an invalid length. [ 1040.237888][T17025] __nla_validate_parse: 7 callbacks suppressed [ 1040.237904][T17025] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.21128'. [ 1040.356814][T17027] netlink: 'syz.3.21128': attribute type 9 has an invalid length. [ 1040.364880][T17027] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.21128'. [ 1040.429538][T17036] netlink: 132 bytes leftover after parsing attributes in process `syz.0.21134'. [ 1040.839862][T17059] netlink: 168 bytes leftover after parsing attributes in process `syz.3.21145'. [ 1041.026161][T17069] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.21150'. [ 1041.405351][T17089] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.21160'. [ 1041.556924][T17097] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21163'. [ 1042.011193][T17118] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.21174'. [ 1042.270738][T17133] netlink: 127924 bytes leftover after parsing attributes in process `syz.3.21182'. [ 1042.306735][T17133] netlink: 16384 bytes leftover after parsing attributes in process `syz.3.21182'. [ 1042.892716][T17164] netlink: 'syz.0.21205': attribute type 9 has an invalid length. [ 1043.031354][T17169] netlink: 'syz.0.21205': attribute type 9 has an invalid length. [ 1043.700912][T17202] netlink: 'syz.1.21215': attribute type 9 has an invalid length. [ 1043.760365][T17204] netlink: 'syz.1.21215': attribute type 9 has an invalid length. [ 1043.866576][T17207] netlink: 'syz.2.21217': attribute type 29 has an invalid length. [ 1043.883518][T17207] netlink: 'syz.2.21217': attribute type 29 has an invalid length. [ 1043.899982][T17207] netlink: 'syz.2.21217': attribute type 29 has an invalid length. [ 1044.099753][T17216] netlink: 'syz.1.21220': attribute type 4 has an invalid length. [ 1044.470084][T17232] netlink: 'syz.3.21229': attribute type 9 has an invalid length. [ 1044.592382][T17235] netlink: 'syz.3.21229': attribute type 9 has an invalid length. [ 1045.773719][T17292] __nla_validate_parse: 18 callbacks suppressed [ 1045.773737][T17292] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21266'. [ 1045.790996][T17292] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21266'. [ 1045.837867][T17292] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21266'. [ 1046.050509][T17305] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.21264'. [ 1046.468701][T17319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1046.721029][T17334] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.21276'. [ 1046.745205][T17334] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.21276'. [ 1046.765452][T17329] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.21276'. [ 1047.024144][T17346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1047.505237][T17363] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.21292'. [ 1047.529224][T17363] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.21292'. [ 1047.554278][T17362] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.21292'. [ 1049.538713][T17434] netlink: 'syz.2.21325': attribute type 27 has an invalid length. [ 1052.606694][T17588] __nla_validate_parse: 11 callbacks suppressed [ 1052.606715][T17588] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.21396'. [ 1052.821924][T17598] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.21408'. [ 1053.377601][T17622] netlink: 'syz.3.21412': attribute type 1 has an invalid length. [ 1053.432869][T17622] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.21412'. [ 1053.553062][T17630] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.21415'. [ 1054.257635][T17669] netlink: 'syz.2.21436': attribute type 1 has an invalid length. [ 1054.266786][T17669] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.21436'. [ 1054.478823][T17680] netlink: 'syz.3.21440': attribute type 3 has an invalid length. [ 1054.500947][T17680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.21440'. [ 1054.832182][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.848082][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.929099][T17696] netlink: 'syz.0.21449': attribute type 1 has an invalid length. [ 1054.940436][T17696] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.21449'. [ 1056.743330][T17766] netlink: 'syz.2.21484': attribute type 3 has an invalid length. [ 1056.766447][T17766] netlink: 132 bytes leftover after parsing attributes in process `syz.2.21484'. [ 1058.328741][T17822] netlink: 'syz.1.21511': attribute type 12 has an invalid length. [ 1058.336736][T17822] netlink: 'syz.1.21511': attribute type 11 has an invalid length. [ 1058.345281][T17822] netlink: 188816 bytes leftover after parsing attributes in process `syz.1.21511'. [ 1059.516118][T17840] netlink: 'syz.3.21527': attribute type 1 has an invalid length. [ 1059.829148][T17854] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.21525'. [ 1060.942398][T17880] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.21539'. [ 1061.769364][T17920] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.21558'. [ 1063.204906][T17989] netlink: 'syz.1.21585': attribute type 10 has an invalid length. [ 1063.219777][T17989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21585'. [ 1063.235517][T17989] netlink: 'syz.1.21585': attribute type 10 has an invalid length. [ 1063.243948][T17989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21585'. [ 1063.929481][T18011] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21597'. [ 1064.153145][T18020] netlink: 'syz.3.21600': attribute type 10 has an invalid length. [ 1064.194891][T18020] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21600'. [ 1064.234168][T18020] netlink: 'syz.3.21600': attribute type 10 has an invalid length. [ 1064.255940][T18020] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21600'. [ 1064.665417][T18047] netlink: zone id is out of range [ 1064.670910][T18047] netlink: set zone limit has 8 unknown bytes [ 1064.766476][T18054] netlink: zone id is out of range [ 1064.773702][T18054] netlink: set zone limit has 8 unknown bytes [ 1064.780245][T18056] netlink: 'syz.2.21616': attribute type 10 has an invalid length. [ 1064.792196][T18056] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21616'. [ 1064.802378][T18056] netlink: 'syz.2.21616': attribute type 10 has an invalid length. [ 1064.810745][T18056] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21616'. [ 1065.199482][T18079] netlink: 'syz.0.21628': attribute type 10 has an invalid length. [ 1065.207484][T18079] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21628'. [ 1065.236087][T18079] netlink: 'syz.0.21628': attribute type 10 has an invalid length. [ 1065.246119][T18079] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21628'. [ 1065.500376][T18096] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21636'. [ 1068.576945][T18241] netlink: 'syz.3.21707': attribute type 2 has an invalid length. [ 1068.586696][T18241] netlink: 'syz.3.21707': attribute type 1 has an invalid length. [ 1069.220217][T18277] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.21726'. [ 1069.319229][T18282] netlink: 'syz.0.21736': attribute type 5 has an invalid length. [ 1069.327573][T18282] netlink: 'syz.0.21736': attribute type 1 has an invalid length. [ 1069.349381][T18282] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.21736'. [ 1069.704328][T18302] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.21738'. [ 1070.484024][T18339] netlink: 'syz.3.21758': attribute type 5 has an invalid length. [ 1070.508094][T18339] netlink: 'syz.3.21758': attribute type 1 has an invalid length. [ 1070.537727][T18339] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.21758'. [ 1070.772499][T18347] netlink: 168 bytes leftover after parsing attributes in process `syz.0.21762'. [ 1071.100471][T18364] netlink: 'syz.3.21769': attribute type 2 has an invalid length. [ 1071.111123][T18364] netlink: 'syz.3.21769': attribute type 8 has an invalid length. [ 1071.120145][T18364] netlink: 132 bytes leftover after parsing attributes in process `syz.3.21769'. [ 1072.371923][T18433] netlink: 'syz.0.21806': attribute type 29 has an invalid length. [ 1072.380610][T18433] netlink: 'syz.0.21806': attribute type 29 has an invalid length. [ 1073.046945][T18475] netlink: 132 bytes leftover after parsing attributes in process `syz.0.21821'. [ 1073.464607][T18500] netlink: 132 bytes leftover after parsing attributes in process `syz.2.21835'. [ 1073.530662][T18504] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.21837'. [ 1073.958521][T18530] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.21850'. [ 1074.112567][T18540] validate_nla: 4 callbacks suppressed [ 1074.112585][T18540] netlink: 'syz.3.21855': attribute type 29 has an invalid length. [ 1074.139240][T18540] netlink: 'syz.3.21855': attribute type 29 has an invalid length. [ 1074.239300][T18547] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.21866'. [ 1074.380085][T18557] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.21859'. [ 1074.390285][T18557] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.21859'. [ 1074.400504][T18552] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.21859'. [ 1074.489811][T18561] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.21863'. [ 1075.073788][T18589] netlink: 'syz.2.21877': attribute type 1 has an invalid length. [ 1075.087799][T18589] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.21877'. [ 1075.337470][T18603] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.21885'. [ 1075.528328][T18613] netlink: 'syz.1.21892': attribute type 40 has an invalid length. [ 1075.850215][T18632] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.21898'. [ 1075.897826][T18632] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.21898'. [ 1075.918006][T18629] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.21898'. [ 1076.027504][T18644] netlink: 'syz.3.21902': attribute type 40 has an invalid length. [ 1076.039474][T18641] netlink: 'syz.1.21912': attribute type 1 has an invalid length. [ 1076.249483][T18653] delete_channel: no stack [ 1076.315500][T18658] netlink: 'syz.3.21913': attribute type 33 has an invalid length. [ 1076.522837][T18670] netlink: 'syz.2.21918': attribute type 40 has an invalid length. [ 1077.208406][T18685] netlink: 'syz.0.21927': attribute type 10 has an invalid length. [ 1077.220937][T18685] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 1077.369510][T18692] netlink: 'syz.2.21930': attribute type 46 has an invalid length. [ 1077.711513][T18712] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1078.227203][T18740] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 1079.201113][T18796] validate_nla: 2 callbacks suppressed [ 1079.201132][T18796] netlink: 'syz.2.21982': attribute type 10 has an invalid length. [ 1079.440599][T18812] __nla_validate_parse: 8 callbacks suppressed [ 1079.440619][T18812] netlink: 49920 bytes leftover after parsing attributes in process `syz.2.21987'. [ 1079.740652][T18828] netlink: 'syz.3.21997': attribute type 4 has an invalid length. [ 1079.758169][T18828] netlink: 140 bytes leftover after parsing attributes in process `syz.3.21997'. [ 1079.828624][T18831] netlink: 'syz.1.22007': attribute type 10 has an invalid length. [ 1080.632636][T18877] netlink: 'syz.3.22022': attribute type 29 has an invalid length. [ 1080.658347][T18877] netlink: 'syz.3.22022': attribute type 29 has an invalid length. [ 1080.669095][T18878] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.22021'. [ 1080.686700][T18877] netlink: 'syz.3.22022': attribute type 29 has an invalid length. [ 1080.715093][T18882] netlink: 'syz.2.22024': attribute type 28 has an invalid length. [ 1080.734439][T18882] netlink: 'syz.2.22024': attribute type 4 has an invalid length. [ 1080.748839][T18882] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22024'. [ 1081.090852][T18902] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.22034'. [ 1081.527750][T18930] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.22046'. [ 1081.924557][T18953] netlink: 'syz.1.22065': attribute type 2 has an invalid length. [ 1081.933064][T18953] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.22065'. [ 1082.089854][T18961] netlink: 'syz.1.22068': attribute type 28 has an invalid length. [ 1082.100192][T18961] netlink: 132 bytes leftover after parsing attributes in process `syz.1.22068'. [ 1082.261562][T18970] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.22063'. [ 1082.359824][T18976] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.22067'. [ 1084.882125][T19100] __nla_validate_parse: 2 callbacks suppressed [ 1084.882145][T19100] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.22123'. [ 1085.196013][T19120] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.22132'. [ 1085.221910][T19120] openvswitch: netlink: Tunnel attr 0 has unexpected len 338 expected 8 [ 1085.679036][T19145] validate_nla: 3 callbacks suppressed [ 1085.679056][T19145] netlink: 'syz.2.22145': attribute type 12 has an invalid length. [ 1085.708447][T19145] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22145'. [ 1085.732798][T19147] netlink: 'syz.0.22147': attribute type 17 has an invalid length. [ 1085.749122][T19147] netlink: 'syz.0.22147': attribute type 16 has an invalid length. [ 1085.757141][T19147] netlink: 152 bytes leftover after parsing attributes in process `syz.0.22147'. [ 1085.972544][T19160] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.22152'. [ 1085.992810][T19160] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1086.016994][T19160] CPU: 1 PID: 19160 Comm: syz.2.22152 Not tainted syzkaller #0 [ 1086.024748][T19160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1086.034882][T19160] Call Trace: [ 1086.038229][T19160] [ 1086.041227][T19160] dump_stack_lvl+0x18c/0x250 [ 1086.045992][T19160] ? show_regs_print_info+0x20/0x20 [ 1086.051259][T19160] ? load_image+0x400/0x400 [ 1086.055875][T19160] sysfs_warn_dup+0x8e/0xa0 [ 1086.060464][T19160] sysfs_do_create_link_sd+0xc0/0x110 [ 1086.065952][T19160] device_add_class_symlinks+0x1cf/0x240 [ 1086.071684][T19160] device_add+0x507/0xc20 [ 1086.076108][T19160] wiphy_register+0x1dad/0x2ae0 [ 1086.081089][T19160] ? cfg80211_event_work+0x40/0x40 [ 1086.086259][T19160] ? minstrel_ht_alloc+0x88a/0x990 [ 1086.091471][T19160] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1086.097644][T19160] ieee80211_register_hw+0x3464/0x4250 [ 1086.103235][T19160] ? ieee80211_tasklet_handler+0x20/0x20 [ 1086.108937][T19160] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1086.114923][T19160] ? __debug_object_init+0xec/0x450 [ 1086.120211][T19160] ? __asan_memset+0x22/0x40 [ 1086.124879][T19160] ? __hrtimer_init+0x186/0x270 [ 1086.129809][T19160] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1086.135616][T19160] ? mac80211_hwsim_free+0x220/0x220 [ 1086.140954][T19160] ? rcu_is_watching+0x15/0xb0 [ 1086.145782][T19160] ? kstrndup+0xbd/0x140 [ 1086.150090][T19160] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1086.155260][T19160] ? __nla_validate+0x50/0x50 [ 1086.160020][T19160] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1086.166420][T19160] ? __nla_parse+0x40/0x50 [ 1086.170904][T19160] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1086.177298][T19160] genl_family_rcv_msg_doit+0x211/0x310 [ 1086.182898][T19160] ? end_current_label_crit_section+0x170/0x170 [ 1086.189199][T19160] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1086.195340][T19160] ? bpf_lsm_capable+0x9/0x10 [ 1086.200069][T19160] ? security_capable+0x89/0xb0 [ 1086.204985][T19160] genl_rcv_msg+0x619/0x7a0 [ 1086.209549][T19160] ? genl_bind+0x360/0x360 [ 1086.214045][T19160] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1086.220433][T19160] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1086.227077][T19160] ? ref_tracker_free+0x690/0x840 [ 1086.232176][T19160] netlink_rcv_skb+0x241/0x4d0 [ 1086.237167][T19160] ? genl_bind+0x360/0x360 [ 1086.241627][T19160] ? netlink_ack+0x1180/0x1180 [ 1086.246452][T19160] ? __lock_acquire+0x7d40/0x7d40 [ 1086.251541][T19160] ? down_read+0x1ac/0x2e0 [ 1086.256007][T19160] genl_rcv+0x28/0x40 [ 1086.260040][T19160] netlink_unicast+0x751/0x8d0 [ 1086.264881][T19160] netlink_sendmsg+0x8d0/0xbf0 [ 1086.269710][T19160] ? netlink_getsockopt+0x590/0x590 [ 1086.274956][T19160] ? aa_sock_msg_perm+0x94/0x150 [ 1086.280119][T19160] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1086.285448][T19160] ? security_socket_sendmsg+0x80/0xa0 [ 1086.290942][T19160] ? netlink_getsockopt+0x590/0x590 [ 1086.296183][T19160] ____sys_sendmsg+0x5ba/0x960 [ 1086.301005][T19160] ? __asan_memset+0x22/0x40 [ 1086.305647][T19160] ? __sys_sendmsg_sock+0x30/0x30 [ 1086.310803][T19160] ? __import_iovec+0x5f2/0x850 [ 1086.315737][T19160] ? import_iovec+0x73/0xa0 [ 1086.320298][T19160] ___sys_sendmsg+0x2a6/0x360 [ 1086.325038][T19160] ? __sys_sendmsg+0x2a0/0x2a0 [ 1086.329928][T19160] __se_sys_sendmsg+0x1c2/0x2b0 [ 1086.334843][T19160] ? __x64_sys_sendmsg+0x80/0x80 [ 1086.339941][T19160] ? lockdep_hardirqs_on+0x98/0x150 [ 1086.345192][T19160] do_syscall_64+0x55/0xa0 [ 1086.349643][T19160] ? clear_bhb_loop+0x40/0x90 [ 1086.354362][T19160] ? clear_bhb_loop+0x40/0x90 [ 1086.359086][T19160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1086.365021][T19160] RIP: 0033:0x7f027579acb9 [ 1086.369477][T19160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.389130][T19160] RSP: 002b:00007f02766a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1086.397678][T19160] RAX: ffffffffffffffda RBX: 00007f0275a15fa0 RCX: 00007f027579acb9 [ 1086.405702][T19160] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1086.413710][T19160] RBP: 00007f0275808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1086.421820][T19160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1086.430283][T19160] R13: 00007f0275a16038 R14: 00007f0275a15fa0 R15: 00007ffed82c0808 [ 1086.438332][T19160] [ 1086.826532][T19183] netlink: 'syz.0.22164': attribute type 12 has an invalid length. [ 1086.835659][T19183] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22164'. [ 1087.099012][T19197] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.22171'. [ 1087.133648][T19200] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.22172'. [ 1087.147011][T19200] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1087.156186][T19200] CPU: 0 PID: 19200 Comm: syz.1.22172 Not tainted syzkaller #0 [ 1087.163861][T19200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1087.173998][T19200] Call Trace: [ 1087.177354][T19200] [ 1087.180350][T19200] dump_stack_lvl+0x18c/0x250 [ 1087.185121][T19200] ? show_regs_print_info+0x20/0x20 [ 1087.190404][T19200] ? load_image+0x400/0x400 [ 1087.195026][T19200] sysfs_warn_dup+0x8e/0xa0 [ 1087.199619][T19200] sysfs_do_create_link_sd+0xc0/0x110 [ 1087.205078][T19200] device_add_class_symlinks+0x1cf/0x240 [ 1087.210796][T19200] device_add+0x507/0xc20 [ 1087.215206][T19200] wiphy_register+0x1dad/0x2ae0 [ 1087.220171][T19200] ? cfg80211_event_work+0x40/0x40 [ 1087.225343][T19200] ? minstrel_ht_alloc+0x88a/0x990 [ 1087.230560][T19200] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1087.236717][T19200] ieee80211_register_hw+0x3464/0x4250 [ 1087.242285][T19200] ? ieee80211_tasklet_handler+0x20/0x20 [ 1087.247971][T19200] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1087.253935][T19200] ? __debug_object_init+0xec/0x450 [ 1087.259193][T19200] ? __asan_memset+0x22/0x40 [ 1087.263843][T19200] ? __hrtimer_init+0x186/0x270 [ 1087.268743][T19200] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1087.274553][T19200] ? mac80211_hwsim_free+0x220/0x220 [ 1087.279878][T19200] ? rcu_is_watching+0x15/0xb0 [ 1087.284691][T19200] ? kstrndup+0xbd/0x140 [ 1087.288996][T19200] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1087.294166][T19200] ? __nla_validate+0x50/0x50 [ 1087.298917][T19200] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1087.305312][T19200] ? __nla_parse+0x40/0x50 [ 1087.309786][T19200] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1087.316169][T19200] genl_family_rcv_msg_doit+0x211/0x310 [ 1087.321761][T19200] ? end_current_label_crit_section+0x170/0x170 [ 1087.328065][T19200] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1087.334025][T19200] ? bpf_lsm_capable+0x9/0x10 [ 1087.338754][T19200] ? security_capable+0x89/0xb0 [ 1087.343661][T19200] genl_rcv_msg+0x619/0x7a0 [ 1087.348220][T19200] ? genl_bind+0x360/0x360 [ 1087.352678][T19200] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1087.359051][T19200] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1087.365687][T19200] ? ref_tracker_free+0x690/0x840 [ 1087.370773][T19200] netlink_rcv_skb+0x241/0x4d0 [ 1087.375592][T19200] ? genl_bind+0x360/0x360 [ 1087.380055][T19200] ? netlink_ack+0x1180/0x1180 [ 1087.384878][T19200] ? __lock_acquire+0x7d40/0x7d40 [ 1087.389965][T19200] ? down_read+0x1ac/0x2e0 [ 1087.394428][T19200] genl_rcv+0x28/0x40 [ 1087.398456][T19200] netlink_unicast+0x751/0x8d0 [ 1087.403297][T19200] netlink_sendmsg+0x8d0/0xbf0 [ 1087.408114][T19200] ? netlink_getsockopt+0x590/0x590 [ 1087.413375][T19200] ? aa_sock_msg_perm+0x94/0x150 [ 1087.418362][T19200] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1087.423694][T19200] ? security_socket_sendmsg+0x80/0xa0 [ 1087.429198][T19200] ? netlink_getsockopt+0x590/0x590 [ 1087.434434][T19200] ____sys_sendmsg+0x5ba/0x960 [ 1087.439260][T19200] ? __asan_memset+0x22/0x40 [ 1087.443896][T19200] ? __sys_sendmsg_sock+0x30/0x30 [ 1087.448989][T19200] ? __import_iovec+0x5f2/0x850 [ 1087.453997][T19200] ? import_iovec+0x73/0xa0 [ 1087.458555][T19200] ___sys_sendmsg+0x2a6/0x360 [ 1087.463288][T19200] ? __sys_sendmsg+0x2a0/0x2a0 [ 1087.468216][T19200] __se_sys_sendmsg+0x1c2/0x2b0 [ 1087.473136][T19200] ? __x64_sys_sendmsg+0x80/0x80 [ 1087.478145][T19200] ? lockdep_hardirqs_on+0x98/0x150 [ 1087.483433][T19200] do_syscall_64+0x55/0xa0 [ 1087.487907][T19200] ? clear_bhb_loop+0x40/0x90 [ 1087.492721][T19200] ? clear_bhb_loop+0x40/0x90 [ 1087.497469][T19200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1087.503442][T19200] RIP: 0033:0x7fd00ad9acb9 [ 1087.507906][T19200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.527559][T19200] RSP: 002b:00007fd00bbad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1087.536046][T19200] RAX: ffffffffffffffda RBX: 00007fd00b015fa0 RCX: 00007fd00ad9acb9 [ 1087.544061][T19200] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1087.552168][T19200] RBP: 00007fd00ae08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1087.560276][T19200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.568307][T19200] R13: 00007fd00b016038 R14: 00007fd00b015fa0 R15: 00007fffe0430848 [ 1087.576367][T19200] [ 1087.623317][T19204] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.22174'. [ 1087.642653][T19204] openvswitch: netlink: Tunnel attr 0 has unexpected len 338 expected 8 [ 1087.706889][T19206] netlink: 'syz.2.22175': attribute type 17 has an invalid length. [ 1087.715424][T19206] netlink: 'syz.2.22175': attribute type 16 has an invalid length. [ 1087.723663][T19206] netlink: 152 bytes leftover after parsing attributes in process `syz.2.22175'. [ 1087.862227][T19214] netlink: 'syz.1.22177': attribute type 12 has an invalid length. [ 1088.169176][T19230] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1088.177169][T19230] CPU: 0 PID: 19230 Comm: syz.0.22187 Not tainted syzkaller #0 [ 1088.184882][T19230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1088.194987][T19230] Call Trace: [ 1088.198302][T19230] [ 1088.201530][T19230] dump_stack_lvl+0x18c/0x250 [ 1088.206266][T19230] ? show_regs_print_info+0x20/0x20 [ 1088.211521][T19230] ? load_image+0x400/0x400 [ 1088.216097][T19230] sysfs_warn_dup+0x8e/0xa0 [ 1088.220668][T19230] sysfs_do_create_link_sd+0xc0/0x110 [ 1088.226098][T19230] device_add_class_symlinks+0x1cf/0x240 [ 1088.231786][T19230] device_add+0x507/0xc20 [ 1088.236175][T19230] wiphy_register+0x1dad/0x2ae0 [ 1088.241115][T19230] ? cfg80211_event_work+0x40/0x40 [ 1088.246282][T19230] ? minstrel_ht_alloc+0x88a/0x990 [ 1088.251490][T19230] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1088.257610][T19230] ieee80211_register_hw+0x3464/0x4250 [ 1088.263166][T19230] ? ieee80211_tasklet_handler+0x20/0x20 [ 1088.268841][T19230] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1088.274789][T19230] ? __debug_object_init+0xec/0x450 [ 1088.280047][T19230] ? __asan_memset+0x22/0x40 [ 1088.284684][T19230] ? __hrtimer_init+0x186/0x270 [ 1088.289598][T19230] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1088.295411][T19230] ? mac80211_hwsim_free+0x220/0x220 [ 1088.300748][T19230] ? rcu_is_watching+0x15/0xb0 [ 1088.305569][T19230] ? kstrndup+0xbd/0x140 [ 1088.309905][T19230] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1088.315085][T19230] ? __nla_validate+0x50/0x50 [ 1088.319840][T19230] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1088.326248][T19230] ? __nla_parse+0x40/0x50 [ 1088.330738][T19230] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1088.337126][T19230] genl_family_rcv_msg_doit+0x211/0x310 [ 1088.342740][T19230] ? end_current_label_crit_section+0x170/0x170 [ 1088.349044][T19230] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1088.355001][T19230] ? bpf_lsm_capable+0x9/0x10 [ 1088.359736][T19230] ? security_capable+0x89/0xb0 [ 1088.364692][T19230] genl_rcv_msg+0x619/0x7a0 [ 1088.369263][T19230] ? genl_bind+0x360/0x360 [ 1088.373721][T19230] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1088.380096][T19230] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1088.386733][T19230] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1088.393389][T19230] netlink_rcv_skb+0x241/0x4d0 [ 1088.398196][T19230] ? genl_bind+0x360/0x360 [ 1088.402685][T19230] ? netlink_ack+0x1180/0x1180 [ 1088.407507][T19230] ? __lock_acquire+0x7d40/0x7d40 [ 1088.412588][T19230] ? net_generic+0x1e/0x240 [ 1088.417153][T19230] ? down_read+0x1ac/0x2e0 [ 1088.421631][T19230] genl_rcv+0x28/0x40 [ 1088.425669][T19230] netlink_unicast+0x751/0x8d0 [ 1088.430500][T19230] netlink_sendmsg+0x8d0/0xbf0 [ 1088.435323][T19230] ? netlink_getsockopt+0x590/0x590 [ 1088.440572][T19230] ? aa_sock_msg_perm+0x94/0x150 [ 1088.445655][T19230] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1088.450994][T19230] ? security_socket_sendmsg+0x80/0xa0 [ 1088.456504][T19230] ? netlink_getsockopt+0x590/0x590 [ 1088.461857][T19230] ____sys_sendmsg+0x5ba/0x960 [ 1088.466685][T19230] ? __asan_memset+0x22/0x40 [ 1088.471376][T19230] ? __sys_sendmsg_sock+0x30/0x30 [ 1088.476444][T19230] ? __import_iovec+0x5f2/0x850 [ 1088.481362][T19230] ? import_iovec+0x73/0xa0 [ 1088.485963][T19230] ___sys_sendmsg+0x2a6/0x360 [ 1088.490712][T19230] ? __sys_sendmsg+0x2a0/0x2a0 [ 1088.495653][T19230] __se_sys_sendmsg+0x1c2/0x2b0 [ 1088.500562][T19230] ? __x64_sys_sendmsg+0x80/0x80 [ 1088.505593][T19230] ? lockdep_hardirqs_on+0x98/0x150 [ 1088.510858][T19230] do_syscall_64+0x55/0xa0 [ 1088.515330][T19230] ? clear_bhb_loop+0x40/0x90 [ 1088.520083][T19230] ? clear_bhb_loop+0x40/0x90 [ 1088.524811][T19230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1088.530841][T19230] RIP: 0033:0x7ff62f39acb9 [ 1088.535439][T19230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.555266][T19230] RSP: 002b:00007ff630228028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1088.563726][T19230] RAX: ffffffffffffffda RBX: 00007ff62f615fa0 RCX: 00007ff62f39acb9 [ 1088.571738][T19230] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1088.579755][T19230] RBP: 00007ff62f408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1088.587770][T19230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1088.595773][T19230] R13: 00007ff62f616038 R14: 00007ff62f615fa0 R15: 00007ffef10e6f68 [ 1088.603907][T19230] [ 1090.373041][T19339] __nla_validate_parse: 2 callbacks suppressed [ 1090.373058][T19339] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.22241'. [ 1090.731531][T19362] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.22253'. [ 1091.534118][T19405] netlink: 'syz.1.22274': attribute type 29 has an invalid length. [ 1091.554174][T19405] netlink: 'syz.1.22274': attribute type 29 has an invalid length. [ 1091.586971][T19405] netlink: 'syz.1.22274': attribute type 29 has an invalid length. [ 1091.774358][T19415] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.22279'. [ 1091.916558][T19423] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.22281'. [ 1092.325589][T19445] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.22291'. [ 1092.553877][T19446] delete_channel: no stack [ 1093.732858][T19510] delete_channel: no stack [ 1093.994210][T19536] netlink: 763 bytes leftover after parsing attributes in process `syz.3.22336'. [ 1094.280511][T19555] netlink: 'syz.3.22345': attribute type 12 has an invalid length. [ 1094.288609][T19555] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.22345'. [ 1094.347993][T19544] delete_channel: no stack [ 1094.958858][T19593] sctp: [Deprecated]: syz.2.22365 (pid 19593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1094.958858][T19593] Use struct sctp_sack_info instead [ 1095.066896][T19583] delete_channel: no stack [ 1095.414096][T19614] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.22376'. [ 1095.448164][T19614] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1095.477863][T19614] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1095.501476][T19620] netlink: 763 bytes leftover after parsing attributes in process `syz.1.22377'. [ 1095.919918][T19642] netlink: 'syz.2.22387': attribute type 2 has an invalid length. [ 1095.930848][T19642] netlink: 51 bytes leftover after parsing attributes in process `syz.2.22387'. [ 1096.515320][T19675] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.22405'. [ 1096.537843][T19675] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1096.552613][T19675] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1096.564100][T19679] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.22407'. [ 1097.025512][T19705] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.22419'. [ 1097.475107][T19731] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.22432'. [ 1098.025893][T19767] netlink: 'syz.2.22448': attribute type 21 has an invalid length. [ 1098.195230][T19776] netlink: 'syz.0.22452': attribute type 2 has an invalid length. [ 1098.203380][T19776] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.22452'. [ 1098.774031][T19810] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.22467'. [ 1099.280261][T19831] netlink: 'syz.2.22476': attribute type 21 has an invalid length. [ 1099.296369][T19831] netlink: 'syz.2.22476': attribute type 6 has an invalid length. [ 1099.322097][T19831] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22476'. [ 1099.423404][T19838] netlink: 'syz.1.22487': attribute type 5 has an invalid length. [ 1099.433436][T19838] netlink: 'syz.1.22487': attribute type 1 has an invalid length. [ 1099.839509][T19853] netlink: 'syz.1.22484': attribute type 2 has an invalid length. [ 1099.932770][T19859] netlink: 'syz.0.22488': attribute type 21 has an invalid length. [ 1099.944445][T19859] netlink: 'syz.0.22488': attribute type 6 has an invalid length. [ 1099.990123][T19862] netlink: 'syz.2.22490': attribute type 5 has an invalid length. [ 1100.726750][T19901] __nla_validate_parse: 5 callbacks suppressed [ 1100.726770][T19901] netlink: 6 bytes leftover after parsing attributes in process `syz.1.22509'. [ 1100.754392][T19901] openvswitch: netlink: Flow key attr not present in new flow. [ 1101.182553][T19928] netlink: 192 bytes leftover after parsing attributes in process `syz.1.22527'. [ 1101.465572][T19938] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.22533'. [ 1101.478570][T19938] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.22533'. [ 1101.507724][T19938] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.22533'. [ 1101.708107][T19954] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.22531'. [ 1101.863234][T19961] netlink: 152 bytes leftover after parsing attributes in process `syz.2.22534'. [ 1101.873568][T19961] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1102.372121][T19982] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.22545'. [ 1102.385616][T19986] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.22552'. [ 1102.395581][T19982] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.22545'. [ 1103.431950][T20042] validate_nla: 6 callbacks suppressed [ 1103.431968][T20042] netlink: 'syz.0.22573': attribute type 3 has an invalid length. [ 1103.446250][T20042] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1103.950259][T20072] netlink: 'syz.3.22586': attribute type 3 has an invalid length. [ 1104.163349][T20084] netlink: 'syz.3.22589': attribute type 10 has an invalid length. [ 1104.198317][T20084] netlink: 'syz.3.22589': attribute type 19 has an invalid length. [ 1104.440230][T20099] netlink: 'syz.2.22600': attribute type 3 has an invalid length. [ 1105.170316][T20140] netlink: 'syz.1.22618': attribute type 10 has an invalid length. [ 1105.194407][T20140] netlink: 'syz.1.22618': attribute type 19 has an invalid length. [ 1105.743951][T20173] __nla_validate_parse: 15 callbacks suppressed [ 1105.743973][T20173] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.22635'. [ 1106.324610][T20203] netlink: 'syz.2.22645': attribute type 29 has an invalid length. [ 1106.333390][T20203] netlink: 'syz.2.22645': attribute type 29 has an invalid length. [ 1106.354655][T20203] netlink: 'syz.2.22645': attribute type 29 has an invalid length. [ 1106.521523][T20218] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.22653'. [ 1106.531205][T20218] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.22653'. [ 1106.542435][T20218] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.22653'. [ 1106.764675][T20223] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.22659'. [ 1106.786838][T20226] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.22660'. [ 1107.207890][T20254] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.22671'. [ 1107.241739][T20253] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.22672'. [ 1107.408459][T20262] netlink: 399 bytes leftover after parsing attributes in process `syz.2.22676'. [ 1107.713603][T20280] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.22683'. [ 1108.482878][T20318] validate_nla: 1 callbacks suppressed [ 1108.482897][T20318] netlink: 'syz.2.22709': attribute type 10 has an invalid length. [ 1108.590366][T20320] netlink: 'syz.3.22703': attribute type 9 has an invalid length. [ 1108.780391][T20322] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1109.110274][T20340] netlink: 'syz.0.22713': attribute type 9 has an invalid length. [ 1109.958703][T20362] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1110.211777][T20374] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1112.334265][T20470] __nla_validate_parse: 12 callbacks suppressed [ 1112.334286][T20470] netlink: 14 bytes leftover after parsing attributes in process `syz.3.22776'. [ 1112.645353][T20483] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.22780'. [ 1112.910063][T20490] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.22794'. [ 1113.612377][T20516] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.22797'. [ 1113.883298][T20526] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.22812'. [ 1116.272521][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.279256][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.364997][T20622] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22850'. [ 1116.375122][T20622] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22850'. [ 1116.387871][T20622] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22850'. [ 1116.921060][T20646] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22861'. [ 1116.957101][T20646] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22861'. [ 1117.920884][T20690] netlink: 'syz.1.22879': attribute type 1 has an invalid length. [ 1118.121018][T20696] __nla_validate_parse: 1 callbacks suppressed [ 1118.121037][T20696] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22885'. [ 1118.144111][T20696] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22885'. [ 1118.155876][T20696] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22885'. [ 1118.615445][T20715] netlink: 'syz.2.22894': attribute type 1 has an invalid length. [ 1118.843150][T20727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22897'. [ 1118.853286][T20727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22897'. [ 1118.882381][T20727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22897'. [ 1119.405182][T20756] netlink: 'syz.1.22915': attribute type 11 has an invalid length. [ 1119.425881][T20756] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.22915'. [ 1121.239932][T20840] netlink: 'syz.1.22955': attribute type 27 has an invalid length. [ 1121.260520][T20840] netlink: 'syz.1.22955': attribute type 4 has an invalid length. [ 1121.276858][T20840] netlink: 152 bytes leftover after parsing attributes in process `syz.1.22955'. [ 1121.704529][T20861] netlink: 52711 bytes leftover after parsing attributes in process `syz.0.22964'. [ 1122.492799][T20890] netlink: 'syz.3.22976': attribute type 7 has an invalid length. [ 1122.826970][T20909] netlink: 52711 bytes leftover after parsing attributes in process `syz.2.22988'. [ 1122.873152][T20911] netlink: 'syz.1.22989': attribute type 21 has an invalid length. [ 1123.445064][T20939] __nla_validate_parse: 1 callbacks suppressed [ 1123.445084][T20939] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.23001'. [ 1123.494599][T20941] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.23000'. [ 1123.600974][T20945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23013'. [ 1123.627871][T20945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23013'. [ 1123.650097][T20945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23013'. [ 1123.698587][T20950] netlink: 'syz.1.23004': attribute type 7 has an invalid length. [ 1124.054625][T20967] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.23014'. [ 1124.162624][T20971] netlink: 'syz.3.23016': attribute type 7 has an invalid length. [ 1124.171355][T20971] netlink: 'syz.3.23016': attribute type 1 has an invalid length. [ 1124.180498][T20971] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.23016'. [ 1124.620992][T20996] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.23030'. [ 1124.873934][T21006] netlink: 'syz.2.23035': attribute type 3 has an invalid length. [ 1124.898998][T21006] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23035'. [ 1126.868635][T21074] netlink: 'syz.3.23064': attribute type 3 has an invalid length. [ 1126.878922][T21074] netlink: 152 bytes leftover after parsing attributes in process `syz.3.23064'. [ 1127.152961][T21084] netlink: 'syz.2.23069': attribute type 3 has an invalid length. [ 1127.177881][T21084] netlink: 'syz.2.23069': attribute type 1 has an invalid length. [ 1127.642387][T21112] netlink: 'syz.0.23084': attribute type 2 has an invalid length. [ 1127.651829][T21112] netlink: 'syz.0.23084': attribute type 2 has an invalid length. [ 1127.970514][T21130] netlink: 'syz.1.23095': attribute type 21 has an invalid length. [ 1128.859879][T21164] netlink: 'syz.2.23108': attribute type 21 has an invalid length. [ 1128.879255][T21164] __nla_validate_parse: 3 callbacks suppressed [ 1128.879274][T21164] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.23108'. [ 1129.059009][T21174] netlink: 'syz.0.23114': attribute type 3 has an invalid length. [ 1129.067229][T21174] netlink: 'syz.0.23114': attribute type 1 has an invalid length. [ 1129.077273][T21174] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.23114'. [ 1129.154040][T21179] netlink: 'syz.1.23116': attribute type 21 has an invalid length. [ 1129.321323][T21189] netlink: 'syz.3.23121': attribute type 21 has an invalid length. [ 1129.338933][T21189] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.23121'. [ 1129.606005][T21205] netlink: 'syz.2.23129': attribute type 21 has an invalid length. [ 1129.930999][T21225] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23138'. [ 1129.955626][T21225] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23138'. [ 1129.966500][T21225] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23138'. [ 1130.049987][T21231] netlink: 'syz.0.23142': attribute type 21 has an invalid length. [ 1130.484830][T21258] netlink: 'syz.3.23154': attribute type 21 has an invalid length. [ 1130.946622][T21286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23167'. [ 1130.968078][T21286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23167'. [ 1130.985153][T21286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23167'. [ 1131.495696][T21318] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23181'. [ 1133.293966][T21397] netlink: 'syz.3.23221': attribute type 8 has an invalid length. [ 1134.438514][T21463] netlink: 'syz.0.23252': attribute type 8 has an invalid length. [ 1134.924779][T21492] __nla_validate_parse: 3 callbacks suppressed [ 1134.924797][T21492] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23267'. [ 1134.942552][T21492] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23267'. [ 1134.953721][T21492] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23267'. [ 1135.098736][T21502] netlink: 'syz.2.23269': attribute type 8 has an invalid length. [ 1135.604821][T21530] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.23284'. [ 1135.959304][T21548] @0: renamed from bond_slave_1 [ 1136.660671][T21588] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.23312'. [ 1137.130186][T21612] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.23324'. [ 1137.711124][T21646] netlink: 'syz.3.23341': attribute type 15 has an invalid length. [ 1137.719618][T21646] netlink: 176 bytes leftover after parsing attributes in process `syz.3.23341'. [ 1138.381610][T21675] netlink: 'syz.3.23355': attribute type 3 has an invalid length. [ 1138.519280][T21683] syz.2.23359[21683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1138.519427][T21683] syz.2.23359[21683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1138.587178][T21685] netlink: 'syz.0.23360': attribute type 29 has an invalid length. [ 1138.608351][T21685] netlink: 'syz.0.23360': attribute type 29 has an invalid length. [ 1138.622259][T21685] netlink: 'syz.0.23360': attribute type 29 has an invalid length. [ 1139.437570][T21727] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.23378'. [ 1139.468024][T21727] openvswitch: netlink: Key type 29 is not supported [ 1140.479551][T21786] netlink: 'syz.3.23405': attribute type 1 has an invalid length. [ 1140.823172][T21805] netlink: 'syz.0.23412': attribute type 1 has an invalid length. [ 1140.835322][T21805] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.23412'. [ 1140.902189][T21807] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23413'. [ 1140.911901][T21807] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23413'. [ 1140.922766][T21807] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23413'. [ 1140.933222][T21807] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23413'. [ 1140.994632][T21811] tap0: tun_chr_ioctl cmd 2147767507 [ 1141.701175][T21849] tap0: tun_chr_ioctl cmd 1074025681 [ 1141.751459][T21852] tap0: tun_chr_ioctl cmd 1074025677 [ 1141.757344][T21852] tap0: linktype set to 6 [ 1142.115683][T21875] tap0: tun_chr_ioctl cmd 1074025677 [ 1142.123004][T21875] tap0: linktype set to 774 [ 1143.493776][T21900] netlink: 116 bytes leftover after parsing attributes in process `syz.0.23455'. [ 1143.503902][T21900] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 1143.711869][T21910] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.23460'. [ 1144.154517][T21934] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.23471'. [ 1144.268951][ T5769] cgroup: fork rejected by pids controller in /syz0 [ 1144.432083][T21947] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.23477'. [ 1144.681221][T27326] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.814594][T27326] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.910761][T27326] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.029764][T27326] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.206219][T21969] netlink: 'syz.2.23487': attribute type 10 has an invalid length. [ 1145.393187][T21974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1145.404356][T21974] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1145.413103][T21974] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1145.423581][T21974] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1145.452510][T21974] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1145.461310][T21974] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1146.302528][T21973] chnl_net:caif_netlink_parms(): no params data found [ 1146.364797][T22015] netlink: 'syz.1.23504': attribute type 10 has an invalid length. [ 1146.374741][T22015] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23504'. [ 1146.612628][T21973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.631259][T21973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.650769][T21973] bridge_slave_0: entered allmulticast mode [ 1146.667450][T21973] bridge_slave_0: entered promiscuous mode [ 1146.695050][T21973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.705800][T21973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.722393][T21973] bridge_slave_1: entered allmulticast mode [ 1146.740693][T21973] bridge_slave_1: entered promiscuous mode [ 1146.904125][T21973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.934636][T21973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.035110][T21973] team0: Port device team_slave_0 added [ 1147.079989][T21973] team0: Port device team_slave_1 added [ 1147.547816][ T5781] Bluetooth: hci1: command tx timeout [ 1147.989394][T21973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.996716][T21973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1148.025548][T21973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1148.093015][T22045] syz.2.23517[22045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1148.093165][T22045] syz.2.23517[22045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1148.132260][T21973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.151523][T21973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1148.197831][T21973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.511705][T21973] hsr_slave_0: entered promiscuous mode [ 1148.520544][T21973] hsr_slave_1: entered promiscuous mode [ 1149.627864][ T5781] Bluetooth: hci1: command tx timeout [ 1149.736422][T22086] netlink: 'syz.1.23535': attribute type 6 has an invalid length. [ 1149.768015][T27326] hsr_slave_0: left promiscuous mode [ 1149.778995][T27326] hsr_slave_1: left promiscuous mode [ 1149.811138][T27326] veth1_vlan: left promiscuous mode [ 1149.817228][T27326] veth0_vlan: left promiscuous mode [ 1150.168189][T27326] geneve1 (unregistering): left promiscuous mode [ 1150.176031][T27326] geneve1 (unregistering): left allmulticast mode [ 1150.198286][T27326] ` (unregistering): Port device geneve1 removed [ 1150.663134][T27326] team_slave_1 (unregistering): left promiscuous mode [ 1150.670480][T27326] team_slave_1 (unregistering): left allmulticast mode [ 1150.680640][T27326] ` (unregistering): Port device team_slave_1 removed [ 1151.143475][T22098] tap0: tun_chr_ioctl cmd 2147767506 [ 1151.161449][T22106] dvmrp1: tun_chr_ioctl cmd 99999999 [ 1151.351652][T22109] netlink: 64 bytes leftover after parsing attributes in process `syz.2.23544'. [ 1151.383367][T22109] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 1151.424363][T21973] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1151.445126][T21973] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1151.477159][T21973] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1151.503250][T21973] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1151.696200][T21973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1151.708223][ T5781] Bluetooth: hci1: command tx timeout [ 1151.732040][T21973] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.762963][T27342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.770244][T27342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.780615][T27342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.787888][T27342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1152.141687][T22142] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.23556'. [ 1152.158706][T22142] netlink: 'syz.2.23556': attribute type 1 has an invalid length. [ 1152.272051][T21973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.385536][T21973] veth0_vlan: entered promiscuous mode [ 1152.416280][T21973] veth1_vlan: entered promiscuous mode [ 1152.495635][T21973] veth0_macvtap: entered promiscuous mode [ 1152.536381][T21973] veth1_macvtap: entered promiscuous mode [ 1152.959462][T21973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.978627][T22160] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.23564'. [ 1153.016938][T21973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1153.050657][T21973] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.067289][T21973] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.137802][T21973] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.147480][T21973] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.194590][T22167] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 1153.201725][T22167] pim6reg0: ignored: set checksum disabled [ 1153.369974][T27342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.381620][T27342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.455197][T27342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.468442][T27342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.797862][ T5781] Bluetooth: hci1: command tx timeout [ 1154.619892][T22207] netlink: 72 bytes leftover after parsing attributes in process `syz.2.23583'. [ 1154.739863][T22211] netlink: 3787 bytes leftover after parsing attributes in process `syz.0.23585'. [ 1155.923947][T22269] netlink: 'syz.1.23611': attribute type 2 has an invalid length. [ 1155.932165][T22269] netlink: 132 bytes leftover after parsing attributes in process `syz.1.23611'. [ 1156.386165][T22283] dvmrp0: tun_chr_ioctl cmd 1074025677 [ 1156.412138][T22283] dvmrp0: linktype set to 768 [ 1156.781395][T22303] netlink: 'syz.0.23628': attribute type 33 has an invalid length. [ 1156.791628][T22303] netlink: 160 bytes leftover after parsing attributes in process `syz.0.23628'. [ 1157.861430][T22328] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.23640'. [ 1158.540623][T22360] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23652'. [ 1158.563067][T22360] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23652'. [ 1158.580965][T22355] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23652'. [ 1158.601547][T22360] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23652'. [ 1159.005321][T22377] netlink: 'syz.0.23660': attribute type 6 has an invalid length. [ 1159.057772][T22377] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.23660'. [ 1161.104738][T22435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23685'. [ 1161.126670][T22435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23685'. [ 1161.148791][T22435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23685'. [ 1161.163467][T22435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23685'. [ 1161.253182][T22441] openvswitch: netlink: IP tunnel dst address not specified [ 1162.822955][T22494] netlink: 'syz.1.23711': attribute type 3 has an invalid length. [ 1163.427106][T22518] netlink: 'syz.2.23723': attribute type 153 has an invalid length. [ 1163.435407][T22518] __nla_validate_parse: 11 callbacks suppressed [ 1163.435422][T22518] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.23723'. [ 1164.341048][T22552] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.23738'. [ 1164.352707][T22552] openvswitch: netlink: Duplicate key (type 0). [ 1164.512900][T22556] netlink: 'syz.2.23740': attribute type 3 has an invalid length. [ 1164.527738][T22556] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.23740'. [ 1164.649645][T22562] netlink: 135856 bytes leftover after parsing attributes in process `syz.2.23743'. [ 1164.769526][T22568] netlink: 'syz.2.23747': attribute type 10 has an invalid length. [ 1164.783395][T22568] netlink: 120 bytes leftover after parsing attributes in process `syz.2.23747'. [ 1165.322098][T22593] netlink: 48 bytes leftover after parsing attributes in process `syz.3.23758'. [ 1165.416433][T22599] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.23761'. [ 1166.174594][T22635] netlink: 132 bytes leftover after parsing attributes in process `syz.1.23778'. [ 1166.591054][T22658] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.23790'. [ 1166.809635][T22664] netlink: 'syz.1.23793': attribute type 29 has an invalid length. [ 1166.848194][T22664] netlink: 'syz.1.23793': attribute type 29 has an invalid length. [ 1166.859921][T22664] netlink: 'syz.1.23793': attribute type 29 has an invalid length. [ 1166.948144][T22672] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23795'. [ 1166.971959][T22673] netlink: 'syz.2.23797': attribute type 2 has an invalid length. [ 1167.065239][T22678] netlink: 'syz.2.23800': attribute type 21 has an invalid length. [ 1167.157415][T22681] netlink: 'syz.3.23801': attribute type 10 has an invalid length. [ 1167.779449][T22710] netlink: zone id is out of range [ 1167.784799][T22710] netlink: zone id is out of range [ 1167.790426][T22710] netlink: zone id is out of range [ 1167.795686][T22710] netlink: zone id is out of range [ 1167.801663][T22710] netlink: zone id is out of range [ 1167.808306][T22710] netlink: zone id is out of range [ 1167.814030][T22710] netlink: zone id is out of range [ 1167.819336][T22710] netlink: zone id is out of range [ 1167.824670][T22710] netlink: zone id is out of range [ 1167.837099][T22710] netlink: zone id is out of range [ 1167.974503][T22714] netlink: 'syz.2.23816': attribute type 29 has an invalid length. [ 1167.997219][T22714] netlink: 'syz.2.23816': attribute type 29 has an invalid length. [ 1169.387861][T22774] __nla_validate_parse: 10 callbacks suppressed [ 1169.387880][T22774] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.23843'. [ 1169.577680][T22780] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23846'. [ 1169.606266][T22780] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23846'. [ 1169.630667][T22780] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23846'. [ 1169.662106][T22780] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23846'. [ 1170.675792][T22815] netlink: 'syz.1.23862': attribute type 13 has an invalid length. [ 1170.704609][T22815] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.23862'. [ 1170.866615][T22820] netlink: 'syz.1.23864': attribute type 22 has an invalid length. [ 1170.889388][T22820] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.23864'. [ 1170.921807][T22822] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.23865'. [ 1173.701134][T22927] netlink: 188 bytes leftover after parsing attributes in process `syz.1.23914'. [ 1173.891912][T22941] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.23919'. [ 1174.706669][T22975] __nla_validate_parse: 4 callbacks suppressed [ 1174.706689][T22975] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23936'. [ 1174.723883][T22975] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23936'. [ 1174.736182][T22975] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23936'. [ 1174.747429][T22975] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23936'. [ 1174.792613][T22977] netlink: 'syz.1.23935': attribute type 2 has an invalid length. [ 1176.083175][T23029] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23960'. [ 1176.103556][T23029] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23960'. [ 1176.115031][T23029] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23960'. [ 1176.128006][T23029] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23960'. [ 1176.158145][T23032] netlink: 'syz.2.23962': attribute type 1 has an invalid length. [ 1177.433399][T23089] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.23988'. [ 1177.458925][T23088] netlink: 830 bytes leftover after parsing attributes in process `syz.3.23987'. [ 1177.722041][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.729795][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.411131][T23108] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1178.416847][T23108] dvmrp1: linktype set to 825 [ 1179.999881][T23152] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.24016'. [ 1180.425916][T23176] netlink: 'syz.2.24028': attribute type 29 has an invalid length. [ 1180.434869][T23176] netlink: 'syz.2.24028': attribute type 29 has an invalid length. [ 1180.446381][T23176] netlink: 'syz.2.24028': attribute type 29 has an invalid length. [ 1180.467842][T23176] netlink: 'syz.2.24028': attribute type 29 has an invalid length. [ 1180.542676][T23178] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 1180.719724][T23181] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24031'. [ 1181.414362][T23212] netlink: 112 bytes leftover after parsing attributes in process `syz.2.24046'. [ 1181.423877][T23212] net_ratelimit: 216 callbacks suppressed [ 1181.423891][T23212] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 1181.558893][T23217] netlink: 'syz.0.24048': attribute type 10 has an invalid length. [ 1181.950993][T23226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24052'. [ 1181.968282][T23226] netlink: 152 bytes leftover after parsing attributes in process `syz.1.24052'. [ 1182.990019][T23263] netlink: 44 bytes leftover after parsing attributes in process `syz.0.24069'. [ 1183.118059][T23267] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.24072'. [ 1183.231485][T23273] netlink: 'syz.3.24075': attribute type 10 has an invalid length. [ 1183.310436][T23275] netlink: 'syz.2.24076': attribute type 29 has an invalid length. [ 1183.328256][T23275] netlink: 'syz.2.24076': attribute type 29 has an invalid length. [ 1183.350485][T23275] netlink: 'syz.2.24076': attribute type 29 has an invalid length. [ 1183.361101][T23275] netlink: 'syz.2.24076': attribute type 29 has an invalid length. [ 1183.493419][T23281] netlink: 'syz.1.24080': attribute type 29 has an invalid length. [ 1183.502962][T23281] netlink: 'syz.1.24080': attribute type 29 has an invalid length. [ 1183.555578][T23283] netlink: 'syz.2.24079': attribute type 29 has an invalid length. [ 1183.601059][T23283] netlink: 'syz.2.24079': attribute type 29 has an invalid length. [ 1183.745603][T23296] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.24085'. [ 1185.003447][T23360] tap0: tun_chr_ioctl cmd 1074025677 [ 1185.009381][T23360] tap0: linktype set to 1 [ 1185.301281][T23370] tap0: tun_chr_ioctl cmd 1074025678 [ 1185.306670][T23370] tap0: group set to 0 [ 1186.448467][T23397] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.24134'. [ 1187.554761][T23437] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.24150'. [ 1187.572348][T23437] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 1187.857069][T23453] netlink: 148 bytes leftover after parsing attributes in process `syz.1.24159'. [ 1188.431142][T23486] validate_nla: 6 callbacks suppressed [ 1188.431160][T23486] netlink: 'syz.1.24174': attribute type 1 has an invalid length. [ 1188.694829][T23499] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.24182'. [ 1188.859885][T23505] sock: sock_set_timeout: `syz.3.24185' (pid 23505) tries to set negative timeout [ 1188.908841][T23509] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.24187'. [ 1188.944431][T23513] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24189'. [ 1188.954883][T23513] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24189'. [ 1188.979041][T23513] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24189'. [ 1189.017099][T23513] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24189'. [ 1189.532530][T23540] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24202'. [ 1190.456675][T23575] netlink: 'syz.3.24217': attribute type 28 has an invalid length. [ 1191.997555][T23635] netlink: 'syz.1.24245': attribute type 27 has an invalid length. [ 1192.007195][T23635] __nla_validate_parse: 7 callbacks suppressed [ 1192.007241][T23635] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.24245'. [ 1192.204732][T23646] netlink: 'syz.1.24250': attribute type 39 has an invalid length. [ 1192.872303][T23670] netlink: 'syz.3.24261': attribute type 27 has an invalid length. [ 1192.903683][T23670] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.24261'. [ 1193.886664][T23708] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24280'. [ 1193.918803][T23708] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24280'. [ 1193.947489][T23708] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24280'. [ 1195.044574][T23751] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.24296'. [ 1195.493816][T23770] @0: renamed from bond_slave_1 (while UP) [ 1196.320487][T23815] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.24327'. [ 1196.655485][T23831] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.24336'. [ 1197.267150][T23869] netlink: 'syz.2.24354': attribute type 15 has an invalid length. [ 1197.287784][T23869] netlink: 176 bytes leftover after parsing attributes in process `syz.2.24354'. [ 1197.872961][T23894] netlink: 'syz.2.24366': attribute type 3 has an invalid length. [ 1198.183162][T23909] netlink: 'syz.1.24372': attribute type 29 has an invalid length. [ 1198.194159][T23909] netlink: 'syz.1.24372': attribute type 29 has an invalid length. [ 1198.210044][T23909] netlink: 'syz.1.24372': attribute type 29 has an invalid length. [ 1198.671658][T23933] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.24393'. [ 1198.687987][T23933] openvswitch: netlink: Key type 29 is not supported [ 1199.861541][T23994] netlink: 'syz.0.24417': attribute type 1 has an invalid length. [ 1200.658767][T24032] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24425'. [ 1200.679912][T24032] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24425'. [ 1200.694125][T24032] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24425'. [ 1200.700658][T24034] netlink: 'syz.2.24424': attribute type 1 has an invalid length. [ 1200.711039][T24032] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24425'. [ 1200.750283][T24034] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.24424'. [ 1200.957777][T24040] tap0: tun_chr_ioctl cmd 2147767507 [ 1201.513019][T24072] tap0: tun_chr_ioctl cmd 1074025681 [ 1201.658014][T24078] tap0: tun_chr_ioctl cmd 1074025677 [ 1201.664112][T24078] tap0: linktype set to 6 [ 1202.155812][T24101] tap0: tun_chr_ioctl cmd 1074025677 [ 1202.170975][T24101] tap0: linktype set to 774 [ 1202.452993][T24119] netlink: 116 bytes leftover after parsing attributes in process `syz.3.24465'. [ 1202.480900][T24119] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1203.652203][T24135] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.24473'. [ 1203.681083][T24138] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24471'. [ 1203.719018][T24138] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24471'. [ 1203.765941][T24139] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24471'. [ 1204.285049][ T5768] cgroup: fork rejected by pids controller in /syz1 [ 1204.331655][T24161] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.24485'. [ 1204.464506][T24166] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.24487'. [ 1204.486222][T24170] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24489'. [ 1204.520590][T27326] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.570211][T24170] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24489'. [ 1204.588268][T24172] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24489'. [ 1204.651804][T27326] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.750454][T27326] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.865642][T27326] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.432091][T21974] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1205.448133][T21974] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1205.457812][T21974] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1205.467557][T21974] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1205.475927][T21974] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1205.486991][T21974] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1206.281839][T24193] chnl_net:caif_netlink_parms(): no params data found [ 1206.517270][T24193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.539265][T24193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.546622][T24193] bridge_slave_0: entered allmulticast mode [ 1206.554652][T24193] bridge_slave_0: entered promiscuous mode [ 1206.564935][T24193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.572939][T24193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.580691][T24193] bridge_slave_1: entered allmulticast mode [ 1206.588626][T24193] bridge_slave_1: entered promiscuous mode [ 1206.751840][T24193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.791361][T24193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.936499][T24193] team0: Port device team_slave_0 added [ 1206.980952][T24193] team0: Port device team_slave_1 added [ 1207.129158][T24193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1207.136185][T24193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.187028][T24193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1207.216518][T24193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1207.234899][T24193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.262146][T24193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1207.361823][T24193] hsr_slave_0: entered promiscuous mode [ 1207.381683][T24193] hsr_slave_1: entered promiscuous mode [ 1207.547830][ T5781] Bluetooth: hci0: command tx timeout [ 1208.246359][T24193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1208.267766][T24193] Cannot create hsr debugfs directory [ 1208.284986][T24264] syz.3.24527[24264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1208.285216][T24264] syz.3.24527[24264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1209.063200][T27326] [ 1209.077082][T27326] ====================================================== [ 1209.084143][T27326] WARNING: possible circular locking dependency detected [ 1209.091224][T27326] syzkaller #0 Not tainted [ 1209.095763][T27326] ------------------------------------------------------ [ 1209.102820][T27326] kworker/u4:7/27326 is trying to acquire lock: [ 1209.109184][T27326] ffff88805fad4d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 1209.118832][T27326] [ 1209.118832][T27326] but task is already holding lock: [ 1209.126233][T27326] ffff88801db60768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1209.136655][T27326] [ 1209.136655][T27326] which lock already depends on the new lock. [ 1209.136655][T27326] [ 1209.147094][T27326] [ 1209.147094][T27326] the existing dependency chain (in reverse order) is: [ 1209.156491][T27326] [ 1209.156491][T27326] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 1209.164360][T27326] __mutex_lock+0x136/0xcc0 [ 1209.169419][T27326] ieee80211_open+0x144/0x200 [ 1209.174649][T27326] __dev_open+0x2cb/0x430 [ 1209.179540][T27326] dev_open+0xab/0x190 [ 1209.184161][T27326] team_add_slave+0xaf8/0x26d0 [ 1209.189469][T27326] do_setlink+0xdfe/0x4130 [ 1209.194490][T27326] rtnl_newlink+0x17da/0x20a0 [ 1209.199728][T27326] rtnetlink_rcv_msg+0x869/0xfa0 [ 1209.205282][T27326] netlink_rcv_skb+0x241/0x4d0 [ 1209.210598][T27326] netlink_unicast+0x751/0x8d0 [ 1209.215938][T27326] netlink_sendmsg+0x8d0/0xbf0 [ 1209.221273][T27326] ____sys_sendmsg+0x5ba/0x960 [ 1209.226602][T27326] ___sys_sendmsg+0x2a6/0x360 [ 1209.231844][T27326] __se_sys_sendmsg+0x1c2/0x2b0 [ 1209.237385][T27326] do_syscall_64+0x55/0xa0 [ 1209.242469][T27326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1209.248926][T27326] [ 1209.248926][T27326] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 1209.257136][T27326] __lock_acquire+0x2df1/0x7d40 [ 1209.262541][T27326] lock_acquire+0x19e/0x420 [ 1209.267593][T27326] __mutex_lock+0x136/0xcc0 [ 1209.272640][T27326] team_del_slave+0x32/0x1c0 [ 1209.277775][T27326] team_device_event+0x28d/0xa20 [ 1209.283266][T27326] notifier_call_chain+0x197/0x380 [ 1209.288921][T27326] unregister_netdevice_many_notify+0x100d/0x1900 [ 1209.295879][T27326] unregister_netdevice_queue+0x32c/0x370 [ 1209.302241][T27326] _cfg80211_unregister_wdev+0x16b/0x580 [ 1209.308601][T27326] ieee80211_remove_interfaces+0x49e/0x690 [ 1209.314957][T27326] ieee80211_unregister_hw+0x5d/0x2a0 [ 1209.320886][T27326] mac80211_hwsim_del_radio+0x289/0x480 [ 1209.326980][T27326] hwsim_exit_net+0x58d/0x650 [ 1209.332214][T27326] cleanup_net+0x70a/0xbb0 [ 1209.337176][T27326] process_scheduled_works+0xa5d/0x15d0 [ 1209.343268][T27326] worker_thread+0xa55/0xfc0 [ 1209.348410][T27326] kthread+0x2fa/0x390 [ 1209.353016][T27326] ret_from_fork+0x48/0x80 [ 1209.357980][T27326] ret_from_fork_asm+0x11/0x20 [ 1209.363288][T27326] [ 1209.363288][T27326] other info that might help us debug this: [ 1209.363288][T27326] [ 1209.373624][T27326] Possible unsafe locking scenario: [ 1209.373624][T27326] [ 1209.381089][T27326] CPU0 CPU1 [ 1209.386473][T27326] ---- ---- [ 1209.391849][T27326] lock(&rdev->wiphy.mtx); [ 1209.396373][T27326] lock(team->team_lock_key#2); [ 1209.403863][T27326] lock(&rdev->wiphy.mtx); [ 1209.410900][T27326] lock(team->team_lock_key#2); [ 1209.415873][T27326] [ 1209.415873][T27326] *** DEADLOCK *** [ 1209.415873][T27326] [ 1209.424032][T27326] 5 locks held by kworker/u4:7/27326: [ 1209.429467][T27326] #0: ffff888017c73938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1209.440381][T27326] #1: ffffc90018d1fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1209.450970][T27326] #2: ffffffff8e3ab490 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 1209.460578][T27326] #3: ffffffff8e3b83c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 1209.470541][T27326] #4: ffff88801db60768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1209.481356][T27326] [ 1209.481356][T27326] stack backtrace: [ 1209.487260][T27326] CPU: 1 PID: 27326 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1209.494944][T27326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1209.505026][T27326] Workqueue: netns cleanup_net [ 1209.509818][T27326] Call Trace: [ 1209.513126][T27326] [ 1209.516076][T27326] dump_stack_lvl+0x18c/0x250 [ 1209.520781][T27326] ? load_image+0x400/0x400 [ 1209.525312][T27326] ? show_regs_print_info+0x20/0x20 [ 1209.530540][T27326] ? print_circular_bug+0x12b/0x1a0 [ 1209.535763][T27326] check_noncircular+0x2fc/0x400 [ 1209.540727][T27326] ? print_deadlock_bug+0x5d0/0x5d0 [ 1209.545952][T27326] ? lockdep_lock+0xf5/0x230 [ 1209.550662][T27326] ? __lock_acquire+0x1347/0x7d40 [ 1209.555724][T27326] ? _find_first_zero_bit+0xd3/0x100 [ 1209.561050][T27326] __lock_acquire+0x2df1/0x7d40 [ 1209.566025][T27326] ? verify_lock_unused+0x140/0x140 [ 1209.571252][T27326] ? verify_lock_unused+0x140/0x140 [ 1209.576490][T27326] lock_acquire+0x19e/0x420 [ 1209.581021][T27326] ? team_del_slave+0x32/0x1c0 [ 1209.585811][T27326] ? __might_sleep+0xe0/0xe0 [ 1209.590435][T27326] ? read_lock_is_recursive+0x20/0x20 [ 1209.595841][T27326] __mutex_lock+0x136/0xcc0 [ 1209.600390][T27326] ? team_del_slave+0x32/0x1c0 [ 1209.605261][T27326] ? __lock_acquire+0x7d40/0x7d40 [ 1209.610316][T27326] ? rcu_is_watching+0x15/0xb0 [ 1209.615113][T27326] ? trace_contention_end+0x39/0xe0 [ 1209.620336][T27326] ? __mutex_lock+0x315/0xcc0 [ 1209.625042][T27326] ? team_del_slave+0x32/0x1c0 [ 1209.629831][T27326] ? mutex_lock_nested+0x20/0x20 [ 1209.634793][T27326] ? bond_netdev_event+0xeb/0xf30 [ 1209.639862][T27326] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1209.645534][T27326] team_del_slave+0x32/0x1c0 [ 1209.650152][T27326] team_device_event+0x28d/0xa20 [ 1209.655125][T27326] notifier_call_chain+0x197/0x380 [ 1209.660299][T27326] unregister_netdevice_many_notify+0x100d/0x1900 [ 1209.666739][T27326] ? lock_chain_count+0x20/0x20 [ 1209.671622][T27326] ? unregister_netdevice_many+0x20/0x20 [ 1209.677290][T27326] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1209.683037][T27326] ? __lock_acquire+0x7d40/0x7d40 [ 1209.688091][T27326] unregister_netdevice_queue+0x32c/0x370 [ 1209.693840][T27326] ? list_netdevice+0x730/0x730 [ 1209.698718][T27326] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1209.704466][T27326] _cfg80211_unregister_wdev+0x16b/0x580 [ 1209.710130][T27326] ieee80211_remove_interfaces+0x49e/0x690 [ 1209.715969][T27326] ? ieee80211_do_stop+0x1e20/0x1e20 [ 1209.721305][T27326] ? rcu_is_watching+0x15/0xb0 [ 1209.726127][T27326] ieee80211_unregister_hw+0x5d/0x2a0 [ 1209.731539][T27326] mac80211_hwsim_del_radio+0x289/0x480 [ 1209.737122][T27326] ? rhashtable_remove_fast+0xc00/0xc00 [ 1209.742726][T27326] hwsim_exit_net+0x58d/0x650 [ 1209.747454][T27326] ? hwsim_init_net+0x90/0x90 [ 1209.752178][T27326] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1209.758019][T27326] cleanup_net+0x70a/0xbb0 [ 1209.762473][T27326] ? ops_free_list+0x3b0/0x3b0 [ 1209.767268][T27326] ? _raw_spin_unlock_irq+0x23/0x50 [ 1209.772503][T27326] ? process_scheduled_works+0x96f/0x15d0 [ 1209.778256][T27326] ? process_scheduled_works+0x96f/0x15d0 [ 1209.783999][T27326] process_scheduled_works+0xa5d/0x15d0 [ 1209.789584][T27326] ? assign_work+0x430/0x430 [ 1209.794203][T27326] ? assign_work+0x3d0/0x430 [ 1209.798996][T27326] worker_thread+0xa55/0xfc0 [ 1209.803629][T27326] kthread+0x2fa/0x390 [ 1209.807722][T27326] ? pr_cont_work+0x560/0x560 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1209.812422][T27326] ? kthread_blkcg+0xd0/0xd0 [ 1209.817034][T27326] ret_from_fork+0x48/0x80 [ 1209.821478][T27326] ? kthread_blkcg+0xd0/0xd0 [ 1209.826117][T27326] ret_from_fork_asm+0x11/0x20 [ 1209.830918][T27326] [ 1209.840760][ T5781] Bluetooth: hci0: command tx timeout [ 1209.948599][T27326] mac80211_hwsim hwsim4 O3c (unregistering): left promiscuous mode [ 1209.956831][T27326] mac80211_hwsim hwsim4 O3c (unregistering): left allmulticast mode [ 1210.041081][T27326] team0: Port device O3c removed [ 1210.490628][T27326] hsr_slave_0: left promiscuous mode [ 1210.496668][T27326] hsr_slave_1: left promiscuous mode [ 1210.504522][T27326] veth1_macvtap: left promiscuous mode [ 1210.530607][T27326] veth0_macvtap: left promiscuous mode [ 1210.666695][T27326] geneve1 (unregistering): left promiscuous mode [ 1210.673280][T27326] geneve1 (unregistering): left allmulticast mode [ 1210.681912][T27326] team0 (unregistering): Port device geneve1 removed [ 1210.824976][T27326] team_slave_1 (unregistering): left promiscuous mode [ 1210.837741][T27326] team_slave_1 (unregistering): left allmulticast mode [ 1210.845555][T27326] team0 (unregistering): Port device team_slave_1 removed [ 1210.871935][T27326] C (unregistering): left promiscuous mode [ 1210.877844][T27326] C (unregistering): left allmulticast mode [ 1210.885325][T27326] team0 (unregistering): Port device C removed [ 1211.402531][T27326] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.472504][T27326] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.523786][T27326] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.564653][T27326] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.669483][T27326] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.713923][T27326] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.753946][T27326] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.908495][T27326] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.013872][T27326] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.052849][T27326] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.123029][T27326] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.282044][T27326] netdevsim netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.434191][T27326] hsr_slave_0: left promiscuous mode [ 1214.440261][T27326] hsr_slave_1: left promiscuous mode [ 1214.446165][T27326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.453638][T27326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.461647][T27326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1214.469976][T27326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.478470][T27326] bridge_slave_1: left allmulticast mode [ 1214.484166][T27326] bridge_slave_1: left promiscuous mode [ 1214.490195][T27326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.499056][T27326] bridge_slave_0: left promiscuous mode [ 1214.504815][T27326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.517236][T27326] hsr_slave_0: left promiscuous mode [ 1214.523220][T27326] hsr_slave_1: left promiscuous mode [ 1214.529267][T27326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.536871][T27326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.544666][T27326] bridge_slave_1: left allmulticast mode [ 1214.551870][T27326] bridge_slave_1: left promiscuous mode [ 1214.557580][T27326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.565841][T27326] bridge_slave_0: left allmulticast mode [ 1214.571635][T27326] bridge_slave_0: left promiscuous mode [ 1214.577330][T27326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.598597][T27326] veth1_macvtap: left promiscuous mode [ 1214.604238][T27326] veth0_macvtap: left promiscuous mode [ 1214.610146][T27326] veth1_vlan: left promiscuous mode [ 1214.615453][T27326] veth0_vlan: left promiscuous mode [ 1214.621881][T27326] veth1_macvtap: left promiscuous mode [ 1214.627568][T27326] veth0_macvtap: left promiscuous mode [ 1214.633244][T27326] veth1_vlan: left promiscuous mode [ 1214.638809][T27326] veth0_vlan: left promiscuous mode [ 1214.645618][T27326] veth1_macvtap: left promiscuous mode [ 1214.651600][T27326] veth0_macvtap: left promiscuous mode [ 1214.993466][T27326] team0 (unregistering): Port device team_slave_1 removed [ 1215.026579][T27326] team0 (unregistering): Port device team_slave_0 removed [ 1215.052517][T27326] bond0 (unregistering): (slave 4@0): Releasing backup interface [ 1215.087245][T27326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.179060][T27326] bond0 (unregistering): Released all slaves [ 1215.367348][T27326] team0 (unregistering): Port device team_slave_1 removed [ 1215.400071][T27326] team0 (unregistering): Port device team_slave_0 removed [ 1215.426265][T27326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1215.455108][T27326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.515281][T27326] bond0 (unregistering): Released all slaves [ 1215.673360][T27326] geneve1 (unregistering): left promiscuous mode [ 1215.679777][T27326] geneve1 (unregistering): left allmulticast mode [ 1215.687006][T27326] ` (unregistering): Port device geneve1 removed [ 1215.800187][T27326] hsr_slave_0 (unregistering): left promiscuous mode [ 1215.806913][T27326] hsr_slave_0 (unregistering): left allmulticast mode [ 1215.816061][T27326] ` (unregistering): Port device hsr_slave_0 removed [ 1215.868662][T27326] team_slave_1 (unregistering): left promiscuous mode [ 1215.875472][T27326] team_slave_1 (unregistering): left allmulticast mode [ 1215.885098][T27326] ` (unregistering): Port device team_slave_1 removed [ 1215.911816][T27326] C (unregistering): left promiscuous mode [ 1215.917729][T27326] C (unregistering): left allmulticast mode [ 1215.924399][T27326] ` (unregistering): Port device C removed [ 1216.369189][T27326] team0 (unregistering): Port device hsr_slave_0 removed [ 1216.424272][T27326] team0 (unregistering): Port device team_slave_1 removed