last executing test programs: 1.495970239s ago: executing program 0 (id=24492): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.460739972s ago: executing program 3 (id=24493): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000071070000000000001600000000000000950074f9"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r0], 0xfe33) 1.375155969s ago: executing program 0 (id=24495): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1316}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 1.375057829s ago: executing program 1 (id=24496): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x20000840) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 1.317294633s ago: executing program 3 (id=24498): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0xa) 1.317108064s ago: executing program 1 (id=24499): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 1.247439879s ago: executing program 3 (id=24500): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)=""/116, 0x74}, {&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f00000037c0)=""/4073, 0xfe9}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000000a40)=""/139, 0x8b}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000500)=""/30, 0x1e}, {&(0x7f0000000140)=""/59, 0x3b}], 0x8}, 0x100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 1.246834399s ago: executing program 2 (id=24508): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1.23824121s ago: executing program 0 (id=24501): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='p'], 0x8) 1.141219748s ago: executing program 1 (id=24502): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="614160e530da4ec5c2b2f6b97455", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.141078088s ago: executing program 0 (id=24503): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 1.140255118s ago: executing program 2 (id=24511): r0 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 1.087343052s ago: executing program 3 (id=24504): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000081"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.086806702s ago: executing program 1 (id=24505): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, &(0x7f0000000000)=r1, 0x4) 1.026475957s ago: executing program 2 (id=24506): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.021546317s ago: executing program 0 (id=24507): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, 0x0}, 0xc8d4) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0x12b) 921.164075ms ago: executing program 0 (id=24509): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) 917.930966ms ago: executing program 2 (id=24510): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x8}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 857.28685ms ago: executing program 2 (id=24512): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)=""/116, 0x74}, {&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f00000037c0)=""/4073, 0xfe9}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000000a40)=""/139, 0x8b}, {&(0x7f0000000800)=""/213, 0xd5}], 0x6}, 0x100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 826.563693ms ago: executing program 1 (id=24513): sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c0c5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe06010000c2e89d53bfbcf3c498e32f08c078", 0x62}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 772.651087ms ago: executing program 3 (id=24514): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$SIOCSIFHWADDR(r0, 0x8b05, 0x0) 671.681586ms ago: executing program 1 (id=24515): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)=""/116, 0x74}, {&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f00000037c0)=""/4073, 0xfe9}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000000a40)=""/139, 0x8b}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000500)=""/30, 0x1e}, {&(0x7f0000000140)=""/59, 0x3b}], 0x8}, 0x100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 360.054371ms ago: executing program 32 (id=24515): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)=""/116, 0x74}, {&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f00000037c0)=""/4073, 0xfe9}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000000a40)=""/139, 0x8b}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000500)=""/30, 0x1e}, {&(0x7f0000000140)=""/59, 0x3b}], 0x8}, 0x100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 351.671221ms ago: executing program 2 (id=24517): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b0d, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 164.796787ms ago: executing program 33 (id=24517): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b0d, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 113.88055ms ago: executing program 3 (id=24518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140)=0x1) 0s ago: executing program 34 (id=24518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140)=0x1) kernel console output (not intermixed with test programs): 9972] openvswitch: netlink: Flow actions attr not present in new flow. [ 774.912120][ T9992] netlink: 'syz.3.17697': attribute type 5 has an invalid length. [ 775.119537][T10004] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 775.150004][T10004] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 775.177982][T10009] sctp: [Deprecated]: syz.3.17707 (pid 10009) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.177982][T10009] Use struct sctp_sack_info instead [ 776.084832][T10059] netlink: 'syz.1.17731': attribute type 5 has an invalid length. [ 776.129496][T10061] openvswitch: netlink: Flow actions attr not present in new flow. [ 776.466838][T10073] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 776.489206][T10073] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 776.598031][T10082] netlink: 'syz.2.17742': attribute type 5 has an invalid length. [ 776.693051][T10088] openvswitch: netlink: Flow actions attr not present in new flow. [ 776.935011][T10102] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 776.944480][T10102] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 778.253208][T10168] netlink: 'syz.3.17784': attribute type 21 has an invalid length. [ 778.269076][T10168] netlink: 'syz.3.17784': attribute type 4 has an invalid length. [ 778.277695][T10168] netlink: 'syz.3.17784': attribute type 5 has an invalid length. [ 778.278091][T10169] sctp: [Deprecated]: syz.1.17783 (pid 10169) Use of int in max_burst socket option deprecated. [ 778.278091][T10169] Use struct sctp_assoc_value instead [ 778.351812][T10173] __nla_validate_parse: 13 callbacks suppressed [ 778.351829][T10173] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.17786'. [ 778.509047][T10181] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17791'. [ 778.708517][T10197] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.17798'. [ 778.807711][T10203] sctp: [Deprecated]: syz.0.17800 (pid 10203) Use of int in max_burst socket option deprecated. [ 778.807711][T10203] Use struct sctp_assoc_value instead [ 778.939680][T10212] netlink: 'syz.1.17802': attribute type 21 has an invalid length. [ 778.964616][T10212] netlink: 128 bytes leftover after parsing attributes in process `syz.1.17802'. [ 778.980542][T10212] netlink: 'syz.1.17802': attribute type 4 has an invalid length. [ 778.997464][T10214] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17806'. [ 778.999247][T10212] netlink: 'syz.1.17802': attribute type 5 has an invalid length. [ 779.037180][T10212] netlink: 3 bytes leftover after parsing attributes in process `syz.1.17802'. [ 779.188913][T10225] netlink: 'syz.0.17819': attribute type 21 has an invalid length. [ 779.207338][T10225] netlink: 128 bytes leftover after parsing attributes in process `syz.0.17819'. [ 779.227077][T10225] netlink: 3 bytes leftover after parsing attributes in process `syz.0.17819'. [ 779.299709][T10233] sctp: [Deprecated]: syz.3.17814 (pid 10233) Use of int in max_burst socket option deprecated. [ 779.299709][T10233] Use struct sctp_assoc_value instead [ 779.451372][T10242] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17820'. [ 779.708477][T10260] netlink: 128 bytes leftover after parsing attributes in process `syz.2.17826'. [ 780.172828][T10287] netlink: zone id is out of range [ 780.188439][T10287] netlink: set zone limit has 8 unknown bytes [ 782.056209][T10356] netlink: zone id is out of range [ 782.068241][T10356] netlink: set zone limit has 8 unknown bytes [ 782.186650][T10362] validate_nla: 5 callbacks suppressed [ 782.186666][T10362] netlink: 'syz.2.17876': attribute type 9 has an invalid length. [ 783.008856][T10422] netlink: 'syz.1.17903': attribute type 1 has an invalid length. [ 783.740504][T10459] netlink: 'syz.3.17925': attribute type 17 has an invalid length. [ 783.749965][T10459] netlink: 'syz.3.17925': attribute type 16 has an invalid length. [ 783.757967][T10459] __nla_validate_parse: 8 callbacks suppressed [ 783.757981][T10459] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17925'. [ 784.180137][T10485] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.17938'. [ 785.160854][T10541] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17966'. [ 785.403663][T10550] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17978'. [ 785.839489][T10575] sctp: [Deprecated]: syz.2.17984 (pid 10575) Use of int in maxseg socket option. [ 785.839489][T10575] Use struct sctp_assoc_value instead [ 785.997627][T10585] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.17995'. [ 786.618433][T10625] netlink: 68 bytes leftover after parsing attributes in process `syz.3.18005'. [ 787.340786][T10672] netlink: 'syz.0.18029': attribute type 17 has an invalid length. [ 787.349268][T10672] netlink: 148 bytes leftover after parsing attributes in process `syz.0.18029'. [ 787.600838][T10689] netlink: 'syz.2.18033': attribute type 9 has an invalid length. [ 787.618490][T10689] netlink: 399 bytes leftover after parsing attributes in process `syz.2.18033'. [ 787.999656][T10714] netlink: 'syz.3.18048': attribute type 3 has an invalid length. [ 788.007531][T10714] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.18048'. [ 788.194309][T10726] netlink: 'syz.0.18062': attribute type 9 has an invalid length. [ 788.208521][T10726] netlink: 399 bytes leftover after parsing attributes in process `syz.0.18062'. [ 788.698442][T10750] netlink: 'syz.3.18065': attribute type 13 has an invalid length. [ 788.706717][T10750] erspan0: refused to change device tx_queue_len [ 788.713704][T10750] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 789.290166][T10754] netlink: 'syz.1.18075': attribute type 1 has an invalid length. [ 789.298125][T10754] __nla_validate_parse: 1 callbacks suppressed [ 789.298138][T10754] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.18075'. [ 789.586408][T10772] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.18076'. [ 789.710907][T10782] netlink: 'syz.3.18082': attribute type 1 has an invalid length. [ 789.719085][T10782] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.18082'. [ 789.830460][T10790] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18084'. [ 789.842988][T10790] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18084'. [ 789.861673][T10786] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18084'. [ 790.025338][T10803] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18097'. [ 790.044099][T10803] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18097'. [ 790.053947][T10799] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18097'. [ 790.115330][T10807] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.18091'. [ 790.205533][T10815] netlink: 'syz.2.18093': attribute type 1 has an invalid length. [ 790.302612][T10817] netlink: 'syz.0.18095': attribute type 13 has an invalid length. [ 790.336784][T10817] erspan0: refused to change device tx_queue_len [ 790.358334][T10817] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 790.919979][T10855] netlink: 'syz.2.18113': attribute type 13 has an invalid length. [ 790.960481][T10855] erspan0: refused to change device tx_queue_len [ 790.966878][T10855] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 791.479501][T10893] erspan0: refused to change device tx_queue_len [ 791.507790][T10893] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 792.795765][T10979] validate_nla: 2 callbacks suppressed [ 792.795781][T10979] netlink: 'syz.0.18174': attribute type 2 has an invalid length. [ 795.307966][T11146] __nla_validate_parse: 13 callbacks suppressed [ 795.307983][T11146] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.18259'. [ 795.575013][T11166] netlink: 'syz.0.18269': attribute type 1 has an invalid length. [ 795.678643][T11172] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18279'. [ 796.013854][T11192] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.18282'. [ 796.121466][T11198] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18284'. [ 796.333456][T11213] netlink: 144 bytes leftover after parsing attributes in process `syz.1.18292'. [ 796.540022][T11223] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18295'. [ 796.979895][T11250] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18310'. [ 799.428894][T11419] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18392'. [ 799.444873][T11419] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18392'. [ 799.461469][T11412] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18392'. [ 799.590011][T11427] netlink: 'syz.1.18403': attribute type 2 has an invalid length. [ 800.051424][T11457] netlink: 'syz.3.18410': attribute type 2 has an invalid length. [ 800.482653][T11488] netlink: 'syz.0.18424': attribute type 2 has an invalid length. [ 800.493096][T11488] __nla_validate_parse: 2 callbacks suppressed [ 800.493109][T11488] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.18424'. [ 800.919507][T11514] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.18437'. [ 801.859332][T11525] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18439'. [ 801.878319][T11525] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18439'. [ 801.887824][T11518] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18439'. [ 803.845929][T11636] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.18493'. [ 803.977729][T11641] netlink: 'syz.2.18496': attribute type 10 has an invalid length. [ 803.994996][T11641] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18496'. [ 804.016028][T11641] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 804.346032][T11658] netlink: 'syz.1.18504': attribute type 10 has an invalid length. [ 804.364450][T11658] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.18504'. [ 804.374345][T11658] openvswitch: netlink: Flow key attr not present in new flow. [ 804.930782][T11689] netlink: 'syz.1.18519': attribute type 21 has an invalid length. [ 805.104356][T11696] netlink: set zone limit has 8 unknown bytes [ 805.292938][T11704] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.18525'. [ 805.441862][T11712] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.18529'. [ 805.521410][T11717] netlink: 'syz.3.18531': attribute type 10 has an invalid length. [ 805.539013][T11717] __nla_validate_parse: 1 callbacks suppressed [ 805.539426][T11717] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18531'. [ 805.579412][T11717] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 805.660515][T11724] netlink: set zone limit has 8 unknown bytes [ 805.709219][T11726] netlink: 'syz.2.18535': attribute type 10 has an invalid length. [ 805.730201][T11726] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.18535'. [ 805.762862][T11726] openvswitch: netlink: Flow key attr not present in new flow. [ 805.901017][T11737] netlink: 196 bytes leftover after parsing attributes in process `syz.1.18541'. [ 806.078443][T11744] netlink: 'syz.2.18544': attribute type 21 has an invalid length. [ 806.278500][T11752] netlink: 'syz.0.18548': attribute type 10 has an invalid length. [ 806.286707][T11752] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.18548'. [ 806.296887][T11752] openvswitch: netlink: Flow key attr not present in new flow. [ 806.687540][T11764] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.18554'. [ 806.697118][T11764] netlink: 8454 bytes leftover after parsing attributes in process `syz.0.18554'. [ 806.850415][T11774] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.18558'. [ 806.944765][T11780] netlink: 'syz.3.18560': attribute type 21 has an invalid length. [ 807.128745][T11790] netlink: 76 bytes leftover after parsing attributes in process `syz.3.18565'. [ 807.653457][T11816] netlink: 76 bytes leftover after parsing attributes in process `syz.1.18579'. [ 807.994073][T11831] netlink: 'syz.0.18587': attribute type 10 has an invalid length. [ 808.003484][T11831] team0: left allmulticast mode [ 808.009758][T11831] team_slave_1: left allmulticast mode [ 808.015261][T11831] veth0_to_bond: left allmulticast mode [ 808.021382][T11831] geneve1: left allmulticast mode [ 808.041419][T11831] netlink: 'syz.0.18587': attribute type 10 has an invalid length. [ 808.062445][T11831] netlink: 2 bytes leftover after parsing attributes in process `syz.0.18587'. [ 808.072501][T11831] team0: entered promiscuous mode [ 808.077562][T11831] team_slave_1: entered promiscuous mode [ 808.084399][T11831] veth0_to_bond: entered promiscuous mode [ 808.090575][T11831] geneve1: entered promiscuous mode [ 808.101098][T11831] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.760734][T11867] netlink: 'syz.3.18601': attribute type 10 has an invalid length. [ 808.772350][T11867] team0: left allmulticast mode [ 808.777390][T11867] C: left allmulticast mode [ 808.782146][T11867] team_slave_1: left allmulticast mode [ 808.787876][T11867] mac80211_hwsim hwsim7 O3ãc¤±: left allmulticast mode [ 808.795023][T11867] veth0_to_bond: left allmulticast mode [ 808.804835][T11867] geneve1: left allmulticast mode [ 808.812888][T11869] netlink: 'syz.3.18601': attribute type 10 has an invalid length. [ 808.821665][T11869] team0: entered promiscuous mode [ 808.826991][T11869] C: entered promiscuous mode [ 808.832817][T11869] team_slave_1: entered promiscuous mode [ 808.839077][T11869] mac80211_hwsim hwsim7 O3ãc¤±: entered promiscuous mode [ 808.846557][T11869] veth0_to_bond: entered promiscuous mode [ 808.853154][T11869] geneve1: entered promiscuous mode [ 808.861129][T11869] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.870350][T11869] bridge0: port 1(team0) entered blocking state [ 808.879658][T11869] bridge0: port 1(team0) entered disabled state [ 808.891112][T11869] team0: entered allmulticast mode [ 808.896474][T11869] C: entered allmulticast mode [ 808.901928][T11869] team_slave_1: entered allmulticast mode [ 808.914764][T11869] mac80211_hwsim hwsim7 O3ãc¤±: entered allmulticast mode [ 808.926654][T11869] veth0_to_bond: entered allmulticast mode [ 808.936251][T11869] geneve1: entered allmulticast mode [ 808.983320][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.989976][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.288820][T11882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 809.551225][T11896] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 810.025843][T11926] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 810.521261][T11954] validate_nla: 1 callbacks suppressed [ 810.521289][T11954] netlink: 'syz.2.18646': attribute type 10 has an invalid length. [ 810.549032][T11954] team0: left promiscuous mode [ 810.559269][T11954] C: left promiscuous mode [ 810.563930][T11954] team_slave_1: left promiscuous mode [ 810.581327][T11954] mac80211_hwsim hwsim5 O3ãc¤±: left promiscuous mode [ 810.588947][T11954] veth0_to_bond: left promiscuous mode [ 810.594686][T11954] geneve1: left promiscuous mode [ 810.600099][T11954] netdevsim netdevsim2 ÿÿÿÿÿÿ: left promiscuous mode [ 810.608467][T11954] team0: left allmulticast mode [ 810.617513][T11959] netlink: 'syz.3.18654': attribute type 1 has an invalid length. [ 810.622411][T11954] C: left allmulticast mode [ 810.630451][T11954] team_slave_1: left allmulticast mode [ 810.636063][T11954] mac80211_hwsim hwsim5 O3ãc¤±: left allmulticast mode [ 810.643023][T11959] __nla_validate_parse: 7 callbacks suppressed [ 810.643036][T11959] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.18654'. [ 810.691073][T11954] $Hÿ: left allmulticast mode [ 810.699577][T11954] ÿ: left allmulticast mode [ 810.704817][T11954] bond_slave_1: left allmulticast mode [ 810.710436][T11954] veth0_to_bond: left allmulticast mode [ 810.716273][T11954] geneve1: left allmulticast mode [ 810.721443][T11954] netdevsim netdevsim2 ÿÿÿÿÿÿ: left allmulticast mode [ 810.734909][T11957] netlink: 'syz.2.18646': attribute type 10 has an invalid length. [ 810.747805][T11957] netlink: 2 bytes leftover after parsing attributes in process `syz.2.18646'. [ 810.760645][T11957] team0: entered promiscuous mode [ 810.765734][T11957] C: entered promiscuous mode [ 810.770724][T11957] team_slave_1: entered promiscuous mode [ 810.776746][T11957] mac80211_hwsim hwsim5 O3ãc¤±: entered promiscuous mode [ 810.784887][T11957] veth0_to_bond: entered promiscuous mode [ 810.790961][T11957] geneve1: entered promiscuous mode [ 810.796323][T11957] netdevsim netdevsim2 ÿÿÿÿÿÿ: entered promiscuous mode [ 810.804369][T11957] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.827912][T11966] netlink: 'syz.3.18649': attribute type 40 has an invalid length. [ 811.253411][T11995] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.18662'. [ 811.423703][T12007] netlink: 'syz.0.18669': attribute type 1 has an invalid length. [ 811.433015][T12007] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.18669'. [ 811.686778][T12019] netlink: 'syz.0.18675': attribute type 21 has an invalid length. [ 811.705892][T12019] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.18675'. [ 811.821696][T12027] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.18678'. [ 812.115810][T12047] netlink: 'syz.1.18688': attribute type 21 has an invalid length. [ 812.129581][T12047] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.18688'. [ 812.201679][T12053] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.18691'. [ 812.409647][T12067] netlink: 'syz.1.18697': attribute type 10 has an invalid length. [ 812.418807][T12067] netlink: 'syz.1.18697': attribute type 10 has an invalid length. [ 812.426737][T12067] netlink: 2 bytes leftover after parsing attributes in process `syz.1.18697'. [ 812.437987][T12067] team0: entered promiscuous mode [ 812.448289][T12067] C: entered promiscuous mode [ 812.453222][T12067] team_slave_1: entered promiscuous mode [ 812.459160][T12067] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 812.466388][T12067] geneve1: entered promiscuous mode [ 812.472939][T12067] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.480079][T12069] netlink: 'syz.0.18698': attribute type 40 has an invalid length. [ 812.592649][T12077] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.18701'. [ 815.730926][T12249] __nla_validate_parse: 3 callbacks suppressed [ 815.730942][T12249] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.18787'. [ 815.973289][T12263] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.18792'. [ 816.182809][T12273] validate_nla: 4 callbacks suppressed [ 816.182844][T12273] netlink: 'syz.3.18800': attribute type 2 has an invalid length. [ 816.209329][T12273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18800'. [ 816.462726][T12289] netlink: 'syz.3.18808': attribute type 29 has an invalid length. [ 816.488731][T12289] netlink: 'syz.3.18808': attribute type 29 has an invalid length. [ 816.516441][T12289] netlink: 'syz.3.18808': attribute type 29 has an invalid length. [ 816.539925][T12293] netlink: 'syz.1.18810': attribute type 10 has an invalid length. [ 816.564766][T12293] netdevsim netdevsim1 ÿÿÿÿÿÿ: entered promiscuous mode [ 816.572986][T12293] team0: Port device ÿÿÿÿÿÿ added [ 816.608652][T12293] netlink: 'syz.1.18810': attribute type 10 has an invalid length. [ 816.616912][T12293] netdevsim netdevsim1 ÿÿÿÿÿÿ: left promiscuous mode [ 816.645549][T12297] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.18812'. [ 816.676506][T12293] team0: Port device ÿÿÿÿÿÿ removed [ 816.707034][T12301] netlink: 'syz.0.18813': attribute type 2 has an invalid length. [ 816.740230][T12301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18813'. [ 817.179940][T12323] delete_channel: no stack [ 817.232072][T12328] netlink: 'syz.2.18827': attribute type 2 has an invalid length. [ 817.242987][T12328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18827'. [ 817.555985][T12344] delete_channel: no stack [ 817.662670][T12356] netlink: 'syz.1.18841': attribute type 2 has an invalid length. [ 817.670752][T12356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18841'. [ 817.696244][T12360] netlink: 'syz.0.18849': attribute type 29 has an invalid length. [ 818.504197][T12406] netdevsim netdevsim0 ÿÿÿÿÿÿ: entered promiscuous mode [ 818.539877][T12406] team0: Port device ÿÿÿÿÿÿ added [ 818.578995][T12409] netdevsim netdevsim0 ÿÿÿÿÿÿ: left promiscuous mode [ 818.631840][T12409] team0: Port device ÿÿÿÿÿÿ removed [ 820.391483][T12513] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18923'. [ 820.862874][T12540] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18928'. [ 821.401917][T12573] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.18942'. [ 821.858855][T12601] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.18957'. [ 822.279430][T12626] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18971'. [ 822.293110][T12626] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18971'. [ 822.307328][T12624] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18971'. [ 822.600268][T12646] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.18981'. [ 823.539114][T12703] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19007'. [ 823.718879][T12711] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.19013'. [ 824.263931][T12743] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.19029'. [ 824.328809][T12745] openvswitch: netlink: Tunnel attr 0 has unexpected len 338 expected 8 [ 825.272260][T12788] validate_nla: 9 callbacks suppressed [ 825.272276][T12788] netlink: 'syz.0.19051': attribute type 1 has an invalid length. [ 825.845119][T12820] netlink: 'syz.3.19065': attribute type 1 has an invalid length. [ 825.932148][T12826] __nla_validate_parse: 4 callbacks suppressed [ 825.932168][T12826] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.19066'. [ 825.988740][T12826] openvswitch: netlink: Tunnel attr 0 has unexpected len 338 expected 8 [ 826.344724][T12846] netlink: 'syz.2.19079': attribute type 1 has an invalid length. [ 826.363417][T12846] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.19079'. [ 826.525103][T12856] netlink: 'syz.2.19084': attribute type 3 has an invalid length. [ 826.534860][T12856] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.19084'. [ 826.917443][T12881] netlink: set zone limit has 8 unknown bytes [ 827.491401][T12916] netlink: 'syz.0.19113': attribute type 30 has an invalid length. [ 827.551104][T12922] netlink: 'syz.1.19116': attribute type 3 has an invalid length. [ 827.559874][T12922] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.19116'. [ 827.804769][T12941] netlink: 'syz.2.19121': attribute type 21 has an invalid length. [ 828.299927][T12966] netlink: 'syz.1.19137': attribute type 30 has an invalid length. [ 828.696467][T12986] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.19147'. [ 829.506372][T13035] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.19170'. [ 829.646143][T13044] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.19174'. [ 829.788721][T13054] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.19188'. [ 829.951261][T13062] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.19184'. [ 830.099703][T13075] netlink: 'syz.3.19198': attribute type 1 has an invalid length. [ 830.117912][T13075] netlink: 152 bytes leftover after parsing attributes in process `syz.3.19198'. [ 831.317301][T13120] netlink: 'syz.1.19208': attribute type 1 has an invalid length. [ 831.335012][T13120] __nla_validate_parse: 1 callbacks suppressed [ 831.335028][T13120] netlink: 152 bytes leftover after parsing attributes in process `syz.1.19208'. [ 832.089883][T13169] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.19235'. [ 832.473120][T13189] netlink: 'syz.2.19245': attribute type 29 has an invalid length. [ 832.513367][T13189] netlink: 'syz.2.19245': attribute type 29 has an invalid length. [ 832.830044][T13214] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19255'. [ 832.915388][T13214] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19255'. [ 832.938973][T13209] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19255'. [ 832.991448][T13217] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.19259'. [ 833.363888][T13241] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19271'. [ 833.522281][T13251] netlink: 'syz.3.19276': attribute type 29 has an invalid length. [ 833.542643][T13251] netlink: 'syz.3.19276': attribute type 29 has an invalid length. [ 834.764160][T13326] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.19311'. [ 835.743069][T13386] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.19341'. [ 835.878789][T13396] netlink: 'syz.1.19345': attribute type 41 has an invalid length. [ 836.582047][T13439] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.19373'. [ 836.709717][T13449] netlink: 'syz.2.19369': attribute type 41 has an invalid length. [ 836.889269][T13458] netlink: 'syz.1.19376': attribute type 9 has an invalid length. [ 836.912533][T13458] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.19376'. [ 836.957923][T13461] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.19377'. [ 837.306574][T13471] netlink: 'syz.3.19382': attribute type 41 has an invalid length. [ 837.372990][T13473] netlink: 168 bytes leftover after parsing attributes in process `syz.1.19390'. [ 837.997186][T13500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19391'. [ 838.026327][T13500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19391'. [ 838.049341][T13493] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19391'. [ 838.333635][T13516] netlink: 'syz.0.19403': attribute type 9 has an invalid length. [ 838.347040][T13516] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.19403'. [ 838.663392][T13539] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.19413'. [ 840.986606][T13631] netlink: 'syz.3.19457': attribute type 21 has an invalid length. [ 841.407918][T13648] netlink: 'syz.3.19466': attribute type 12 has an invalid length. [ 841.433308][T13648] netlink: 172 bytes leftover after parsing attributes in process `syz.3.19466'. [ 841.841987][T13669] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.19478'. [ 841.868385][T13674] netlink: 'syz.2.19479': attribute type 21 has an invalid length. [ 841.881195][T13669] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 841.890043][T13669] openvswitch: netlink: Message has 1 unknown bytes. [ 842.503013][T13692] netlink: 'syz.2.19487': attribute type 2 has an invalid length. [ 842.511326][T13692] netlink: 'syz.2.19487': attribute type 1 has an invalid length. [ 843.215543][T13718] netlink: 'syz.0.19499': attribute type 2 has an invalid length. [ 843.228319][T13718] netlink: 'syz.0.19499': attribute type 1 has an invalid length. [ 844.659459][T13770] netlink: 'syz.2.19526': attribute type 3 has an invalid length. [ 844.669677][T13770] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.19526'. [ 846.426929][T13842] netlink: 'syz.1.19560': attribute type 3 has an invalid length. [ 846.434994][T13842] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.19560'. [ 847.058563][T13874] netlink: 'syz.3.19574': attribute type 3 has an invalid length. [ 847.066423][T13874] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.19574'. [ 848.012702][T13900] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19596'. [ 848.735868][T13926] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19601'. [ 850.408769][T14027] netlink: 'syz.1.19650': attribute type 27 has an invalid length. [ 850.416954][T14027] netlink: 152 bytes leftover after parsing attributes in process `syz.1.19650'. [ 850.427839][T14027] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 851.140889][T14075] netlink: 'syz.2.19683': attribute type 27 has an invalid length. [ 851.169504][T14075] netlink: 152 bytes leftover after parsing attributes in process `syz.2.19683'. [ 851.199550][T14075] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 851.670464][T14108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19688'. [ 851.700176][T14108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19688'. [ 851.721100][T14103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19688'. [ 851.783479][T14110] netlink: 'syz.3.19692': attribute type 27 has an invalid length. [ 851.799102][T14110] netlink: 152 bytes leftover after parsing attributes in process `syz.3.19692'. [ 851.810822][T14110] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 852.848633][T14175] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19719'. [ 852.863787][T14175] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19719'. [ 852.878019][T14170] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19719'. [ 853.265301][T14202] netlink: 'syz.0.19736': attribute type 10 has an invalid length. [ 853.294648][T14205] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19735'. [ 853.322826][T14205] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19735'. [ 853.339699][T14200] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19735'. [ 853.400925][T14211] netlink: 'syz.1.19741': attribute type 21 has an invalid length. [ 853.826017][T14236] netlink: 'syz.3.19753': attribute type 21 has an invalid length. [ 853.949280][T14244] netlink: 14 bytes leftover after parsing attributes in process `syz.3.19756'. [ 854.075947][T14253] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.19762'. [ 854.087661][T14255] netlink: 'syz.0.19763': attribute type 8 has an invalid length. [ 854.090196][T14252] netlink: 'syz.2.19760': attribute type 10 has an invalid length. [ 854.228234][T14265] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19764'. [ 854.237512][T14265] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19764'. [ 854.394774][T14273] netlink: 'syz.2.19772': attribute type 21 has an invalid length. [ 854.554638][T14286] netlink: 'syz.1.19777': attribute type 8 has an invalid length. [ 854.815239][T14301] netlink: 'syz.0.19784': attribute type 21 has an invalid length. [ 854.969582][T14310] netlink: 'syz.2.19787': attribute type 8 has an invalid length. [ 855.298664][T14328] netlink: 'syz.3.19795': attribute type 21 has an invalid length. [ 858.020701][T14489] __nla_validate_parse: 10 callbacks suppressed [ 858.020718][T14489] netlink: 164 bytes leftover after parsing attributes in process `syz.0.19876'. [ 858.070813][T14493] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19878'. [ 858.089891][T14493] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19878'. [ 858.112059][T14493] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19878'. [ 858.595820][T14522] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19892'. [ 858.619213][T14522] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19892'. [ 858.631413][T14522] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19892'. [ 858.811616][T14536] validate_nla: 4 callbacks suppressed [ 858.811632][T14536] netlink: 'syz.0.19899': attribute type 3 has an invalid length. [ 858.838275][T14536] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19899'. [ 859.080721][T14553] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19906'. [ 859.100726][T14553] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19906'. [ 859.650303][T14590] netlink: 'syz.1.19924': attribute type 3 has an invalid length. [ 859.790131][T14596] netlink: 'syz.0.19928': attribute type 9 has an invalid length. [ 860.780357][T14662] netlink: 'syz.2.19962': attribute type 9 has an invalid length. [ 862.626146][T14782] netlink: 'syz.3.20019': attribute type 21 has an invalid length. [ 862.745115][T14788] openvswitch: netlink: Flow key attr not present in new flow. [ 862.872682][T14798] netlink: 'syz.3.20029': attribute type 4 has an invalid length. [ 863.322866][T14825] netlink: 'syz.1.20041': attribute type 10 has an invalid length. [ 863.818478][T14853] netlink: 'syz.0.20054': attribute type 10 has an invalid length. [ 863.861514][T14856] netlink: 'syz.1.20055': attribute type 4 has an invalid length. [ 863.870249][T14856] __nla_validate_parse: 10 callbacks suppressed [ 863.870262][T14856] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.20055'. [ 863.983406][T14865] netlink: 'syz.2.20069': attribute type 10 has an invalid length. [ 864.498113][T14899] netlink: 'syz.2.20080': attribute type 1 has an invalid length. [ 864.511914][T14899] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.20080'. [ 864.524829][T14901] netlink: 'syz.1.20079': attribute type 3 has an invalid length. [ 864.543424][T14901] netlink: 'syz.1.20079': attribute type 1 has an invalid length. [ 864.724623][T14913] netlink: 'syz.3.20086': attribute type 4 has an invalid length. [ 864.732754][T14913] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.20086'. [ 864.946806][T14925] netlink: 'syz.3.20092': attribute type 3 has an invalid length. [ 864.965493][T14925] netlink: 'syz.3.20092': attribute type 1 has an invalid length. [ 865.309540][T14949] netlink: 'syz.3.20103': attribute type 1 has an invalid length. [ 865.317409][T14949] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.20103'. [ 865.970537][T14991] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.20125'. [ 866.820205][T15050] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.20153'. [ 867.220672][T15079] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.20164'. [ 868.240266][T15146] netlink: 132 bytes leftover after parsing attributes in process `syz.1.20200'. [ 868.653696][T15175] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20213'. [ 868.857300][T15188] validate_nla: 14 callbacks suppressed [ 868.857318][T15188] netlink: 'syz.3.20219': attribute type 30 has an invalid length. [ 868.994161][T15197] netlink: 'syz.3.20226': attribute type 21 has an invalid length. [ 869.002618][T15197] netlink: 'syz.3.20226': attribute type 6 has an invalid length. [ 869.011852][T15197] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20226'. [ 869.248938][T15216] netlink: 'syz.3.20233': attribute type 10 has an invalid length. [ 869.260982][T15216] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20233'. [ 869.403358][T15228] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.20239'. [ 869.805812][T15257] netlink: 'syz.0.20260': attribute type 10 has an invalid length. [ 869.814412][T15257] netlink: 152 bytes leftover after parsing attributes in process `syz.0.20260'. [ 869.833258][T15259] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.20252'. [ 869.954500][T15263] netlink: 'syz.0.20255': attribute type 17 has an invalid length. [ 870.421726][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.429012][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.650551][T15300] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.20275'. [ 870.692811][T15300] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 871.466679][T15343] netlink: 'syz.1.20294': attribute type 1 has an invalid length. [ 871.474948][T15343] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.20294'. [ 871.910861][T15364] syz.1.20304[15364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 871.910984][T15364] syz.1.20304[15364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 872.023267][T15372] netlink: 'syz.0.20307': attribute type 1 has an invalid length. [ 872.044297][T15372] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.20307'. [ 872.310244][T15390] syz.0.20316[15390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 872.310366][T15390] syz.0.20316[15390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 872.444192][T15397] netlink: 'syz.2.20319': attribute type 1 has an invalid length. [ 872.464831][T15397] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.20319'. [ 872.765548][T15419] syz.2.20327[15419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 872.765683][T15419] syz.2.20327[15419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 873.798469][T15436] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20336'. [ 873.852116][T15439] netlink: 'syz.0.20347': attribute type 1 has an invalid length. [ 874.159110][T15458] netlink: 'syz.0.20349': attribute type 29 has an invalid length. [ 874.187169][T15458] netlink: 'syz.0.20349': attribute type 29 has an invalid length. [ 874.309384][T15468] netlink: 'syz.1.20354': attribute type 1 has an invalid length. [ 874.317306][T15468] __nla_validate_parse: 3 callbacks suppressed [ 874.317320][T15468] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.20354'. [ 874.329029][T15469] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.20353'. [ 874.621036][T15488] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.20364'. [ 874.655075][T15488] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 874.795195][T15497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20373'. [ 874.810622][T15497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20373'. [ 874.833057][T15500] netlink: 'syz.3.20368': attribute type 21 has an invalid length. [ 874.849165][T15492] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20373'. [ 875.144667][T15517] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.20376'. [ 875.166712][T15517] openvswitch: netlink: Key type 4112 is out of range max 32 [ 875.207912][T15520] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.20377'. [ 875.222184][T15520] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 875.231254][T15520] CPU: 1 PID: 15520 Comm: syz.1.20377 Not tainted syzkaller #0 [ 875.238854][T15520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 875.248967][T15520] Call Trace: [ 875.252274][T15520] [ 875.255245][T15520] dump_stack_lvl+0x16c/0x230 [ 875.259982][T15520] ? show_regs_print_info+0x20/0x20 [ 875.265244][T15520] ? load_image+0x3b0/0x3b0 [ 875.269820][T15520] sysfs_warn_dup+0x8e/0xa0 [ 875.274374][T15520] sysfs_do_create_link_sd+0xc0/0x110 [ 875.279833][T15520] device_add_class_symlinks+0x1cf/0x240 [ 875.285519][T15520] device_add+0x507/0xc20 [ 875.289920][T15520] wiphy_register+0x1e74/0x2c00 [ 875.294858][T15520] ? cfg80211_event_work+0x40/0x40 [ 875.300003][T15520] ? minstrel_ht_alloc+0x88a/0x990 [ 875.305178][T15520] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 875.311298][T15520] ieee80211_register_hw+0x2dc2/0x3ac0 [ 875.316844][T15520] ? ieee80211_tasklet_handler+0x20/0x20 [ 875.322527][T15520] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 875.328525][T15520] ? __debug_object_init+0xe8/0x430 [ 875.333807][T15520] ? __asan_memset+0x22/0x40 [ 875.338446][T15520] ? __hrtimer_init+0x186/0x270 [ 875.343337][T15520] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 875.349142][T15520] ? mac80211_hwsim_free+0x220/0x220 [ 875.354463][T15520] ? rcu_is_watching+0x15/0xb0 [ 875.359277][T15520] ? kstrndup+0xbd/0x140 [ 875.363594][T15520] hwsim_new_radio_nl+0xd78/0x19d0 [ 875.368779][T15520] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 875.375171][T15520] ? __nla_parse+0x40/0x50 [ 875.379640][T15520] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 875.386027][T15520] genl_family_rcv_msg_doit+0x209/0x2f0 [ 875.391649][T15520] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 875.397603][T15520] ? bpf_lsm_capable+0x9/0x10 [ 875.402310][T15520] ? security_capable+0x89/0xb0 [ 875.407192][T15520] genl_rcv_msg+0x60b/0x790 [ 875.411720][T15520] ? genl_bind+0x360/0x360 [ 875.416143][T15520] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 875.422475][T15520] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 875.429088][T15520] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 875.435698][T15520] netlink_rcv_skb+0x216/0x480 [ 875.440503][T15520] ? genl_bind+0x360/0x360 [ 875.445024][T15520] ? netlink_ack+0x1110/0x1110 [ 875.449814][T15520] ? __lock_acquire+0x7c80/0x7c80 [ 875.454844][T15520] ? net_generic+0x1e/0x240 [ 875.459353][T15520] ? down_read+0x1ac/0x2e0 [ 875.463770][T15520] genl_rcv+0x28/0x40 [ 875.467752][T15520] netlink_unicast+0x751/0x8d0 [ 875.472531][T15520] netlink_sendmsg+0x8c1/0xbe0 [ 875.477311][T15520] ? netlink_getsockopt+0x580/0x580 [ 875.482510][T15520] ? aa_sock_msg_perm+0x94/0x150 [ 875.487451][T15520] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 875.492744][T15520] ? security_socket_sendmsg+0x80/0xa0 [ 875.498206][T15520] ? netlink_getsockopt+0x580/0x580 [ 875.503417][T15520] ____sys_sendmsg+0x5bf/0x950 [ 875.508203][T15520] ? __asan_memset+0x22/0x40 [ 875.512794][T15520] ? __sys_sendmsg_sock+0x30/0x30 [ 875.517815][T15520] ? __import_iovec+0x5f2/0x860 [ 875.522765][T15520] ? import_iovec+0x73/0xa0 [ 875.527294][T15520] ___sys_sendmsg+0x220/0x290 [ 875.531979][T15520] ? __sys_sendmsg+0x270/0x270 [ 875.536788][T15520] ? debug_mutex_init+0x38/0x70 [ 875.541676][T15520] __se_sys_sendmsg+0x1a5/0x270 [ 875.546531][T15520] ? __x64_sys_sendmsg+0x80/0x80 [ 875.551493][T15520] ? lockdep_hardirqs_on+0x98/0x150 [ 875.556698][T15520] do_syscall_64+0x55/0xb0 [ 875.561111][T15520] ? clear_bhb_loop+0x40/0x90 [ 875.565783][T15520] ? clear_bhb_loop+0x40/0x90 [ 875.570460][T15520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.576352][T15520] RIP: 0033:0x7f5fb318ebe9 [ 875.580775][T15520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.600471][T15520] RSP: 002b:00007f5fb3f25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.608903][T15520] RAX: ffffffffffffffda RBX: 00007f5fb33b5fa0 RCX: 00007f5fb318ebe9 [ 875.616872][T15520] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 875.624840][T15520] RBP: 00007f5fb3211e19 R08: 0000000000000000 R09: 0000000000000000 [ 875.632824][T15520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.640791][T15520] R13: 00007f5fb33b6038 R14: 00007f5fb33b5fa0 R15: 00007ffd20bf50b8 [ 875.648874][T15520] [ 875.653854][T15531] netlink: 60 bytes leftover after parsing attributes in process `syz.2.20381'. [ 875.689395][T15526] netlink: 'syz.0.20380': attribute type 21 has an invalid length. [ 875.728410][T15531] netlink: 60 bytes leftover after parsing attributes in process `syz.2.20381'. [ 876.395907][T15557] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 876.407437][T15557] CPU: 1 PID: 15557 Comm: syz.0.20395 Not tainted syzkaller #0 [ 876.415047][T15557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 876.425121][T15557] Call Trace: [ 876.428424][T15557] [ 876.431380][T15557] dump_stack_lvl+0x16c/0x230 [ 876.436097][T15557] ? show_regs_print_info+0x20/0x20 [ 876.441321][T15557] ? load_image+0x3b0/0x3b0 [ 876.445875][T15557] sysfs_warn_dup+0x8e/0xa0 [ 876.450404][T15557] sysfs_do_create_link_sd+0xc0/0x110 [ 876.455807][T15557] device_add_class_symlinks+0x1cf/0x240 [ 876.461479][T15557] device_add+0x507/0xc20 [ 876.465846][T15557] wiphy_register+0x1e74/0x2c00 [ 876.470768][T15557] ? cfg80211_event_work+0x40/0x40 [ 876.475916][T15557] ? minstrel_ht_alloc+0x88a/0x990 [ 876.481080][T15557] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 876.487184][T15557] ieee80211_register_hw+0x2dc2/0x3ac0 [ 876.492712][T15557] ? ieee80211_tasklet_handler+0x20/0x20 [ 876.498372][T15557] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 876.504312][T15557] ? __debug_object_init+0xe8/0x430 [ 876.509556][T15557] ? __asan_memset+0x22/0x40 [ 876.514182][T15557] ? __hrtimer_init+0x186/0x270 [ 876.519077][T15557] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 876.524963][T15557] ? mac80211_hwsim_free+0x220/0x220 [ 876.530279][T15557] ? rcu_is_watching+0x15/0xb0 [ 876.535085][T15557] ? kstrndup+0xbd/0x140 [ 876.539380][T15557] hwsim_new_radio_nl+0xd78/0x19d0 [ 876.544565][T15557] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 876.550967][T15557] ? __nla_parse+0x40/0x50 [ 876.555428][T15557] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 876.561813][T15557] genl_family_rcv_msg_doit+0x209/0x2f0 [ 876.567408][T15557] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 876.573371][T15557] ? bpf_lsm_capable+0x9/0x10 [ 876.578090][T15557] ? security_capable+0x89/0xb0 [ 876.582989][T15557] genl_rcv_msg+0x60b/0x790 [ 876.587540][T15557] ? genl_bind+0x360/0x360 [ 876.591989][T15557] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 876.598360][T15557] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 876.604987][T15557] ? ref_tracker_free+0x634/0x7d0 [ 876.610069][T15557] netlink_rcv_skb+0x216/0x480 [ 876.614878][T15557] ? genl_bind+0x360/0x360 [ 876.619337][T15557] ? netlink_ack+0x1110/0x1110 [ 876.624167][T15557] ? __lock_acquire+0x7c80/0x7c80 [ 876.629244][T15557] ? down_read+0x1ac/0x2e0 [ 876.633705][T15557] genl_rcv+0x28/0x40 [ 876.637721][T15557] netlink_unicast+0x751/0x8d0 [ 876.642541][T15557] netlink_sendmsg+0x8c1/0xbe0 [ 876.647355][T15557] ? netlink_getsockopt+0x580/0x580 [ 876.652596][T15557] ? aa_sock_msg_perm+0x94/0x150 [ 876.657583][T15557] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 876.662898][T15557] ? security_socket_sendmsg+0x80/0xa0 [ 876.668381][T15557] ? netlink_getsockopt+0x580/0x580 [ 876.673600][T15557] ____sys_sendmsg+0x5bf/0x950 [ 876.678388][T15557] ? __asan_memset+0x22/0x40 [ 876.682993][T15557] ? __sys_sendmsg_sock+0x30/0x30 [ 876.688013][T15557] ? __import_iovec+0x5f2/0x860 [ 876.692875][T15557] ? import_iovec+0x73/0xa0 [ 876.697384][T15557] ___sys_sendmsg+0x220/0x290 [ 876.702065][T15557] ? __sys_sendmsg+0x270/0x270 [ 876.706906][T15557] ? debug_mutex_init+0x38/0x70 [ 876.711792][T15557] __se_sys_sendmsg+0x1a5/0x270 [ 876.716647][T15557] ? __x64_sys_sendmsg+0x80/0x80 [ 876.721612][T15557] ? lockdep_hardirqs_on+0x98/0x150 [ 876.726816][T15557] do_syscall_64+0x55/0xb0 [ 876.731229][T15557] ? clear_bhb_loop+0x40/0x90 [ 876.735897][T15557] ? clear_bhb_loop+0x40/0x90 [ 876.740570][T15557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 876.746469][T15557] RIP: 0033:0x7f769978ebe9 [ 876.750885][T15557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.770485][T15557] RSP: 002b:00007f769a555038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.778921][T15557] RAX: ffffffffffffffda RBX: 00007f76999b5fa0 RCX: 00007f769978ebe9 [ 876.786885][T15557] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 876.794851][T15557] RBP: 00007f7699811e19 R08: 0000000000000000 R09: 0000000000000000 [ 876.802823][T15557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 876.810786][T15557] R13: 00007f76999b6038 R14: 00007f76999b5fa0 R15: 00007ffdffd0fdf8 [ 876.818776][T15557] [ 876.826888][T15559] netlink: 'syz.2.20394': attribute type 21 has an invalid length. [ 877.547728][T15595] netlink: 'syz.3.20413': attribute type 153 has an invalid length. [ 877.574275][T15597] netlink: 'syz.2.20414': attribute type 6 has an invalid length. [ 877.582324][T15597] netlink: 'syz.2.20414': attribute type 1 has an invalid length. [ 877.972351][T15624] syz.2.20427[15624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 877.972531][T15624] syz.2.20427[15624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 878.303990][T15642] netlink: 'syz.1.20435': attribute type 153 has an invalid length. [ 880.334991][T15709] syz.3.20467[15709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 880.335235][T15709] syz.3.20467[15709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 880.424299][T15712] validate_nla: 2 callbacks suppressed [ 880.424315][T15712] netlink: 'syz.0.20469': attribute type 10 has an invalid length. [ 880.681571][T15718] netlink: 'syz.0.20479': attribute type 4 has an invalid length. [ 880.699055][T15718] __nla_validate_parse: 9 callbacks suppressed [ 880.699069][T15718] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.20479'. [ 881.574070][T15765] netlink: 'syz.3.20494': attribute type 10 has an invalid length. [ 881.975210][T15775] netlink: 'syz.3.20500': attribute type 4 has an invalid length. [ 882.007300][T15775] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.20500'. [ 882.453857][T15803] netlink: 'syz.2.20512': attribute type 4 has an invalid length. [ 882.462460][T15803] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.20512'. [ 883.997137][T15880] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.20550'. [ 884.219958][T15896] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.20556'. [ 884.624990][T15917] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.20574'. [ 885.368977][T15961] netlink: 'syz.2.20588': attribute type 12 has an invalid length. [ 885.376983][T15961] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20588'. [ 885.723394][T15986] netlink: 'syz.1.20598': attribute type 153 has an invalid length. [ 885.731892][T15986] netlink: 'syz.1.20598': attribute type 1 has an invalid length. [ 885.755832][T15986] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.20598'. [ 886.000242][T16004] netlink: 'syz.3.20608': attribute type 29 has an invalid length. [ 886.018557][T16004] netlink: 'syz.3.20608': attribute type 29 has an invalid length. [ 886.036694][T16004] netlink: 'syz.3.20608': attribute type 29 has an invalid length. [ 886.195460][T16015] netlink: 'syz.0.20614': attribute type 12 has an invalid length. [ 886.209769][T16015] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20614'. [ 886.384227][T16028] netlink: 'syz.2.20619': attribute type 153 has an invalid length. [ 886.396517][T16028] netlink: 'syz.2.20619': attribute type 1 has an invalid length. [ 886.409829][T16028] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.20619'. [ 886.536488][T16038] netlink: 'syz.1.20625': attribute type 29 has an invalid length. [ 886.558325][T16038] netlink: 'syz.1.20625': attribute type 29 has an invalid length. [ 886.980093][T16068] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.20635'. [ 887.076339][T16073] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20642'. [ 888.980315][T16174] netlink: 152 bytes leftover after parsing attributes in process `syz.2.20691'. [ 889.047900][T16178] netlink: 2 bytes leftover after parsing attributes in process `syz.0.20692'. [ 889.069210][T16178] batadv_slave_1: entered promiscuous mode [ 889.667730][T16202] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.20704'. [ 890.142076][T16218] netlink: 2 bytes leftover after parsing attributes in process `syz.1.20713'. [ 890.815903][T16255] validate_nla: 7 callbacks suppressed [ 890.815917][T16255] netlink: 'syz.3.20731': attribute type 29 has an invalid length. [ 890.832899][T16255] netlink: 'syz.3.20731': attribute type 29 has an invalid length. [ 891.136346][T16275] netlink: 'syz.2.20740': attribute type 6 has an invalid length. [ 891.144624][T16275] netlink: 'syz.2.20740': attribute type 3 has an invalid length. [ 891.152875][T16275] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.20740'. [ 891.611153][T16301] netlink: 'syz.1.20752': attribute type 6 has an invalid length. [ 891.628675][T16301] netlink: 'syz.1.20752': attribute type 3 has an invalid length. [ 891.639673][T16301] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.20752'. [ 892.661824][T16364] netlink: 'syz.1.20791': attribute type 29 has an invalid length. [ 892.682049][T16364] netlink: 'syz.1.20791': attribute type 29 has an invalid length. [ 893.537268][T16412] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.20806'. [ 893.933872][T16440] netlink: 'syz.0.20821': attribute type 29 has an invalid length. [ 893.958520][T16440] netlink: 'syz.0.20821': attribute type 29 has an invalid length. [ 893.978071][T16442] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20819'. [ 894.002839][T16442] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20819'. [ 894.014332][T16437] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20819'. [ 894.242495][T16459] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.20836'. [ 894.766978][T16491] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.20845'. [ 894.877421][T16498] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.20849'. [ 895.096354][T16513] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.20865'. [ 895.864925][T16569] validate_nla: 4 callbacks suppressed [ 895.864943][T16569] netlink: 'syz.3.20883': attribute type 2 has an invalid length. [ 896.164273][T16582] netlink: 'syz.1.20889': attribute type 3 has an invalid length. [ 896.185625][T16582] __nla_validate_parse: 7 callbacks suppressed [ 896.185642][T16582] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.20889'. [ 896.885365][T16618] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.20906'. [ 896.897504][T16618] netlink: 'syz.1.20906': attribute type 2 has an invalid length. [ 896.911230][T16617] netlink: 'syz.3.20907': attribute type 3 has an invalid length. [ 896.920290][T16617] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.20907'. [ 898.014053][T16652] netlink: 'syz.2.20922': attribute type 1 has an invalid length. [ 898.023024][T16652] netlink: 199572 bytes leftover after parsing attributes in process `syz.2.20922'. [ 898.080895][T16654] netlink: 'syz.3.20923': attribute type 12 has an invalid length. [ 898.108856][T16654] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.20923'. [ 898.515832][T16678] netlink: 'syz.1.20935': attribute type 9 has an invalid length. [ 898.555377][T16678] netlink: 399 bytes leftover after parsing attributes in process `syz.1.20935'. [ 898.636895][T16687] ref_ctr_offset mismatch. inode: 0x64d7 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 899.020891][T16702] netlink: 'syz.1.20948': attribute type 1 has an invalid length. [ 899.038270][T16702] netlink: 199572 bytes leftover after parsing attributes in process `syz.1.20948'. [ 899.424738][T16717] netlink: 'syz.1.20955': attribute type 12 has an invalid length. [ 899.458307][T16717] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.20955'. [ 900.000711][T16735] netlink: 'syz.2.20962': attribute type 9 has an invalid length. [ 900.040609][T16735] netlink: 399 bytes leftover after parsing attributes in process `syz.2.20962'. [ 901.079464][T16766] netlink: 'syz.0.20977': attribute type 9 has an invalid length. [ 901.087343][T16766] netlink: 399 bytes leftover after parsing attributes in process `syz.0.20977'. [ 901.643728][T16783] delete_channel: no stack [ 902.108380][T16798] netlink: 'syz.3.20993': attribute type 4 has an invalid length. [ 903.624294][T16855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.031331][T16872] netlink: 'syz.2.21028': attribute type 5 has an invalid length. [ 904.056601][T16872] netlink: 'syz.2.21028': attribute type 1 has an invalid length. [ 904.098344][T16872] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.21028'. [ 904.477554][T16887] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21036'. [ 904.561479][T16891] netlink: 'syz.0.21037': attribute type 1 has an invalid length. [ 904.604321][T16891] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.21037'. [ 905.146554][T16918] netlink: 'syz.3.21054': attribute type 1 has an invalid length. [ 905.163975][T16918] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.21054'. [ 905.890337][T16950] netlink: 'syz.0.21068': attribute type 3 has an invalid length. [ 905.900289][T16950] netlink: 'syz.0.21068': attribute type 238 has an invalid length. [ 906.517831][T16983] netlink: 'syz.1.21084': attribute type 3 has an invalid length. [ 906.526026][T16983] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.21084'. [ 908.356271][T17069] netlink: 'syz.2.21125': attribute type 21 has an invalid length. [ 908.378374][T17069] netlink: 132 bytes leftover after parsing attributes in process `syz.2.21125'. [ 908.400537][T17069] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21125'. [ 909.041437][T17114] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21147'. [ 909.053393][T17117] netlink: 168 bytes leftover after parsing attributes in process `syz.3.21146'. [ 909.462811][T17137] netlink: 168 bytes leftover after parsing attributes in process `syz.0.21159'. [ 910.413904][T17164] netlink: 192440 bytes leftover after parsing attributes in process `syz.1.21170'. [ 910.437136][T17164] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 910.793068][T17184] netlink: 76 bytes leftover after parsing attributes in process `syz.3.21182'. [ 910.941945][T17189] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21184'. [ 911.100256][T17199] netlink: 'syz.3.21188': attribute type 2 has an invalid length. [ 911.119343][T17199] netlink: 'syz.3.21188': attribute type 8 has an invalid length. [ 911.127659][T17199] netlink: 132 bytes leftover after parsing attributes in process `syz.3.21188'. [ 911.177362][T17201] netlink: 'syz.1.21190': attribute type 10 has an invalid length. [ 911.185831][T17201] netlink: 152 bytes leftover after parsing attributes in process `syz.1.21190'. [ 911.197876][T17201] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 911.357736][T17211] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.21194'. [ 911.484500][T17220] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.21200'. [ 911.606101][T17228] netlink: 'syz.2.21203': attribute type 2 has an invalid length. [ 911.623766][T17228] netlink: 'syz.2.21203': attribute type 8 has an invalid length. [ 911.639925][T17228] netlink: 132 bytes leftover after parsing attributes in process `syz.2.21203'. [ 911.874672][T17240] netlink: 192440 bytes leftover after parsing attributes in process `syz.2.21209'. [ 911.894523][T17240] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 912.720328][T17259] netlink: 'syz.0.21215': attribute type 2 has an invalid length. [ 912.737914][T17259] netlink: 'syz.0.21215': attribute type 8 has an invalid length. [ 912.876990][T17268] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 913.813200][T17322] sock: sock_set_timeout: `syz.1.21248' (pid 17322) tries to set negative timeout [ 913.904780][T17327] netlink: 'syz.0.21252': attribute type 10 has an invalid length. [ 913.925145][T17327] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 914.149572][T17345] netlink: 'syz.0.21261': attribute type 46 has an invalid length. [ 914.298080][T17355] netlink: 'syz.3.21266': attribute type 10 has an invalid length. [ 914.322141][T17355] team0: left allmulticast mode [ 914.327063][T17355] C: left allmulticast mode [ 914.338425][T17355] team_slave_1: left allmulticast mode [ 914.343939][T17355] mac80211_hwsim hwsim7 O3ãc¤±: left allmulticast mode [ 914.362494][T17355] veth0_to_bond: left allmulticast mode [ 914.373820][T17355] geneve1: left allmulticast mode [ 914.383859][T17355] bridge0: port 1(team0) entered disabled state [ 914.453061][T17355] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 915.045854][T17385] __nla_validate_parse: 9 callbacks suppressed [ 915.045869][T17385] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.21279'. [ 915.217863][T17390] netlink: 'syz.2.21281': attribute type 46 has an invalid length. [ 915.229287][T17390] netlink: 55 bytes leftover after parsing attributes in process `syz.2.21281'. [ 915.354239][T17398] sock: sock_set_timeout: `syz.3.21285' (pid 17398) tries to set negative timeout [ 915.568589][T17409] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.21289'. [ 915.583361][T17409] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 915.715860][T17417] netlink: 'syz.1.21292': attribute type 46 has an invalid length. [ 915.736667][T17417] netlink: 55 bytes leftover after parsing attributes in process `syz.1.21292'. [ 915.842329][T17426] netlink: 'syz.2.21295': attribute type 10 has an invalid length. [ 915.856756][T17426] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21295'. [ 915.878788][T17426] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21295'. [ 916.770650][T17487] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.21336'. [ 916.785828][T17487] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 916.999558][T17503] validate_nla: 2 callbacks suppressed [ 916.999573][T17503] netlink: 'syz.1.21333': attribute type 10 has an invalid length. [ 917.038213][T17503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21333'. [ 917.058561][T17503] netlink: 'syz.1.21333': attribute type 10 has an invalid length. [ 917.066654][T17503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21333'. [ 917.375355][T17527] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.21348'. [ 917.851952][T17557] netlink: 'syz.2.21359': attribute type 21 has an invalid length. [ 917.890454][T17561] netlink: 'syz.0.21360': attribute type 10 has an invalid length. [ 917.898640][T17561] netlink: 'syz.0.21360': attribute type 10 has an invalid length. [ 917.994289][T17565] netlink: 'syz.3.21364': attribute type 1 has an invalid length. [ 918.427432][T17597] netlink: 'syz.3.21376': attribute type 10 has an invalid length. [ 918.447398][T17597] netlink: 'syz.3.21376': attribute type 10 has an invalid length. [ 918.470057][T17595] netlink: 'syz.3.21376': attribute type 10 has an invalid length. [ 919.206035][T17644] sctp: [Deprecated]: syz.3.21403 (pid 17644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 919.206035][T17644] Use struct sctp_sack_info instead [ 919.693985][T17670] netlink: 'syz.0.21413': attribute type 1 has an invalid length. [ 920.109167][T17692] sctp: [Deprecated]: syz.0.21427 (pid 17692) Use of struct sctp_assoc_value in delayed_ack socket option. [ 920.109167][T17692] Use struct sctp_sack_info instead [ 920.571082][T17719] __nla_validate_parse: 5 callbacks suppressed [ 920.571098][T17719] netlink: 156 bytes leftover after parsing attributes in process `syz.3.21441'. [ 921.311857][T17762] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.21460'. [ 921.355332][T17766] netlink: 156 bytes leftover after parsing attributes in process `syz.0.21462'. [ 921.741504][T17787] netlink: 156 bytes leftover after parsing attributes in process `syz.1.21473'. [ 921.757655][T17789] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.21472'. [ 922.215217][T17817] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.21486'. [ 923.534786][T17905] netlink: 763 bytes leftover after parsing attributes in process `syz.3.21530'. [ 923.564784][T17906] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.21529'. [ 923.626438][T17910] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.21533'. [ 923.963774][T17933] netlink: 763 bytes leftover after parsing attributes in process `syz.2.21542'. [ 924.447062][T17959] validate_nla: 1 callbacks suppressed [ 924.447078][T17959] netlink: 'syz.3.21556': attribute type 8 has an invalid length. [ 924.462735][T17959] netlink: 'syz.3.21556': attribute type 1 has an invalid length. [ 924.739621][T17977] netlink: 'syz.0.21564': attribute type 17 has an invalid length. [ 924.748026][T17977] netlink: 'syz.0.21564': attribute type 16 has an invalid length. [ 924.872474][T17985] netlink: 'syz.1.21569': attribute type 10 has an invalid length. [ 924.950393][T17989] netlink: 'syz.0.21578': attribute type 8 has an invalid length. [ 924.958437][T17989] netlink: 'syz.0.21578': attribute type 1 has an invalid length. [ 925.239186][T18009] netlink: 'syz.2.21579': attribute type 17 has an invalid length. [ 925.255068][T18009] netlink: 'syz.2.21579': attribute type 16 has an invalid length. [ 925.507138][T18023] netlink: 'syz.0.21595': attribute type 10 has an invalid length. [ 925.749397][T18041] __nla_validate_parse: 8 callbacks suppressed [ 925.749413][T18041] netlink: 152 bytes leftover after parsing attributes in process `syz.1.21594'. [ 926.727321][T18085] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21621'. [ 926.747570][T18085] caif0: entered promiscuous mode [ 926.757404][T18085] caif0: entered allmulticast mode [ 928.065487][T18119] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.21633'. [ 928.821169][T18171] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.21660'. [ 929.091966][T18191] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.21670'. [ 929.163990][T18195] netlink: 132 bytes leftover after parsing attributes in process `syz.2.21674'. [ 929.364464][T18207] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21686'. [ 929.648582][T18220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21682'. [ 929.666519][T18220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21682'. [ 929.686366][T18217] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21682'. [ 929.799035][T18226] validate_nla: 13 callbacks suppressed [ 929.799051][T18226] netlink: 'syz.1.21685': attribute type 2 has an invalid length. [ 930.133029][T18236] netlink: 'syz.1.21692': attribute type 27 has an invalid length. [ 930.457124][T18252] netlink: 'syz.0.21700': attribute type 2 has an invalid length. [ 930.554971][T18260] netlink: 'syz.2.21705': attribute type 1 has an invalid length. [ 931.493455][T18310] netlink: 'syz.0.21728': attribute type 27 has an invalid length. [ 931.503153][T18310] __nla_validate_parse: 5 callbacks suppressed [ 931.503166][T18310] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.21728'. [ 931.865084][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.871911][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.987697][T18341] netlink: 'syz.0.21744': attribute type 29 has an invalid length. [ 931.996129][T18341] netlink: 'syz.0.21744': attribute type 29 has an invalid length. [ 932.006321][T18341] netlink: 'syz.0.21744': attribute type 29 has an invalid length. [ 932.083733][T18345] netlink: 49920 bytes leftover after parsing attributes in process `syz.1.21753'. [ 932.459650][T18373] netlink: 49920 bytes leftover after parsing attributes in process `syz.2.21759'. [ 932.991626][T18397] netlink: 49920 bytes leftover after parsing attributes in process `syz.3.21771'. [ 933.467862][T18418] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.21780'. [ 933.518298][T18418] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 934.337008][T18460] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.21800'. [ 934.781806][T18480] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.21808'. [ 934.794041][T18480] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 934.796303][T18479] netlink: 'syz.3.21809': attribute type 4 has an invalid length. [ 934.842809][T18479] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.21809'. [ 934.903002][T18484] netlink: 'syz.0.21811': attribute type 3 has an invalid length. [ 934.916619][T18484] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.21811'. [ 935.173520][T18500] netlink: 192 bytes leftover after parsing attributes in process `syz.2.21819'. [ 935.499744][T18508] netlink: 'syz.1.21823': attribute type 4 has an invalid length. [ 935.863818][T18526] netlink: 'syz.1.21832': attribute type 2 has an invalid length. [ 936.323381][T18561] netlink: 'syz.3.21846': attribute type 2 has an invalid length. [ 936.795167][T18588] netlink: 'syz.2.21862': attribute type 2 has an invalid length. [ 936.824114][T18588] __nla_validate_parse: 5 callbacks suppressed [ 936.824132][T18588] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.21862'. [ 937.060933][T18602] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.21876'. [ 937.814139][T18637] netlink: 2 bytes leftover after parsing attributes in process `syz.0.21885'. [ 938.051103][T18652] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.21893'. [ 938.351735][T18666] netlink: 2 bytes leftover after parsing attributes in process `syz.1.21899'. [ 938.867052][T18700] netlink: 'syz.1.21915': attribute type 3 has an invalid length. [ 938.886773][T18700] netlink: 152 bytes leftover after parsing attributes in process `syz.1.21915'. [ 938.905237][T18700] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 939.429169][T18729] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.21928'. [ 940.906430][T18816] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.21969'. [ 942.039429][T18877] netlink: 'syz.2.22000': attribute type 21 has an invalid length. [ 942.047486][T18877] netlink: 'syz.2.22000': attribute type 1 has an invalid length. [ 942.308859][T18889] netlink: 209588 bytes leftover after parsing attributes in process `syz.3.22007'. [ 942.485595][T18903] netlink: 'syz.0.22013': attribute type 9 has an invalid length. [ 942.493667][T18903] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.22013'. [ 942.579825][T18907] syz.3.22017[18907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 942.580012][T18907] syz.3.22017[18907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 942.646145][T18913] netlink: 'syz.1.22023': attribute type 21 has an invalid length. [ 942.672305][T18913] netlink: 'syz.1.22023': attribute type 1 has an invalid length. [ 942.847278][T18923] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.22021'. [ 943.097016][T18940] netlink: 'syz.0.22029': attribute type 21 has an invalid length. [ 943.105963][T18940] netlink: 'syz.0.22029': attribute type 1 has an invalid length. [ 943.511378][T18966] netlink: 'syz.1.22041': attribute type 9 has an invalid length. [ 943.528342][T18966] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.22041'. [ 943.560614][T18970] syz.0.22044[18970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 943.560812][T18970] syz.0.22044[18970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 944.032127][T18996] syz.2.22056[18996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 944.048418][T18996] syz.2.22056[18996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 944.308825][T19013] netlink: 'syz.3.22064': attribute type 1 has an invalid length. [ 944.640875][T19037] netlink: 168 bytes leftover after parsing attributes in process `syz.0.22074'. [ 945.178882][T19073] netlink: 'syz.1.22091': attribute type 1 has an invalid length. [ 945.265779][T19078] team0: left promiscuous mode [ 945.270803][T19078] C: left promiscuous mode [ 945.281801][T19078] team_slave_1: left promiscuous mode [ 945.289363][T19078] mac80211_hwsim hwsim7 O3ãc¤±: left promiscuous mode [ 945.296506][T19078] veth0_to_bond: left promiscuous mode [ 945.302836][T19078] geneve1: left promiscuous mode [ 945.321058][T19078] team0: Cannot enslave team device to itself [ 945.677960][T19100] netlink: 168 bytes leftover after parsing attributes in process `syz.1.22104'. [ 946.430724][T19141] team0: left promiscuous mode [ 946.435577][T19141] C: left promiscuous mode [ 946.449440][T19141] team_slave_1: left promiscuous mode [ 946.455261][T19141] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 946.462673][T19141] geneve1: left promiscuous mode [ 946.476003][T19141] team0: Cannot enslave team device to itself [ 946.483184][T19144] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.22129'. [ 946.588216][T19153] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.22132'. [ 946.647714][T19157] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22134'. [ 946.657968][T19157] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22134'. [ 947.353969][T19204] __nla_validate_parse: 4 callbacks suppressed [ 947.353983][T19204] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.22156'. [ 947.494442][T19210] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22166'. [ 947.518350][T19210] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22166'. [ 947.541586][T19210] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22166'. [ 947.651923][T19219] validate_nla: 2 callbacks suppressed [ 947.651940][T19219] netlink: 'syz.3.22162': attribute type 10 has an invalid length. [ 947.670880][T19219] netlink: 156 bytes leftover after parsing attributes in process `syz.3.22162'. [ 947.980788][T19238] netlink: 'syz.0.22170': attribute type 2 has an invalid length. [ 947.990101][T19238] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22170'. [ 948.446561][T19268] netlink: 763 bytes leftover after parsing attributes in process `syz.3.22184'. [ 948.523057][T19270] netlink: 'syz.2.22185': attribute type 10 has an invalid length. [ 948.531208][T19270] netlink: 156 bytes leftover after parsing attributes in process `syz.2.22185'. [ 948.687511][T19281] netlink: 'syz.1.22199': attribute type 10 has an invalid length. [ 948.698999][T19281] netlink: 156 bytes leftover after parsing attributes in process `syz.1.22199'. [ 948.731680][T19283] netlink: 'syz.0.22191': attribute type 6 has an invalid length. [ 948.759039][T19283] netlink: 'syz.0.22191': attribute type 1 has an invalid length. [ 948.766916][T19283] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.22191'. [ 948.946565][T19295] netlink: 'syz.1.22205': attribute type 6 has an invalid length. [ 948.955583][T19295] netlink: 'syz.1.22205': attribute type 1 has an invalid length. [ 949.071008][T19302] netlink: 'syz.3.22200': attribute type 2 has an invalid length. [ 949.235090][T19313] netlink: 'syz.3.22203': attribute type 10 has an invalid length. [ 952.434628][T19454] __nla_validate_parse: 14 callbacks suppressed [ 952.434645][T19454] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22274'. [ 952.450711][T19454] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22274'. [ 952.462291][T19454] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22274'. [ 952.765667][T19476] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22285'. [ 952.774994][T19476] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22285'. [ 952.786458][T19476] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22285'. [ 953.065234][T19499] netlink: 212900 bytes leftover after parsing attributes in process `syz.0.22301'. [ 953.075320][T19499] openvswitch: netlink: IP tunnel dst address not specified [ 953.660213][T19529] netlink: 212900 bytes leftover after parsing attributes in process `syz.2.22308'. [ 953.685841][T19529] openvswitch: netlink: IP tunnel dst address not specified [ 954.214652][T19564] netlink: 212900 bytes leftover after parsing attributes in process `syz.3.22324'. [ 954.227241][T19564] openvswitch: netlink: IP tunnel dst address not specified [ 955.543504][T19645] validate_nla: 11 callbacks suppressed [ 955.543520][T19645] netlink: 'syz.3.22364': attribute type 3 has an invalid length. [ 955.568241][T19645] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.22364'. [ 956.788138][T19689] netlink: 'syz.0.22386': attribute type 21 has an invalid length. [ 956.796673][T19689] netlink: 'syz.0.22386': attribute type 6 has an invalid length. [ 956.871955][T19696] netlink: 'syz.1.22389': attribute type 3 has an invalid length. [ 957.412151][T19716] netlink: 'syz.2.22401': attribute type 3 has an invalid length. [ 958.037494][T19741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 958.298662][T19749] netlink: 'syz.1.22414': attribute type 21 has an invalid length. [ 958.314218][T19749] netlink: 'syz.1.22414': attribute type 6 has an invalid length. [ 958.328705][T19749] __nla_validate_parse: 3 callbacks suppressed [ 958.328717][T19749] netlink: 132 bytes leftover after parsing attributes in process `syz.1.22414'. [ 958.341079][T19751] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22416'. [ 958.378799][T19751] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22416'. [ 958.404484][T19751] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22416'. [ 958.900841][T19770] netlink: 'syz.2.22426': attribute type 21 has an invalid length. [ 958.914258][T19770] netlink: 'syz.2.22426': attribute type 6 has an invalid length. [ 958.928665][T19770] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22426'. [ 959.217040][T19783] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22432'. [ 959.270235][T19783] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22432'. [ 959.309778][T19783] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22432'. [ 959.715167][T19806] netlink: 'syz.3.22438': attribute type 21 has an invalid length. [ 959.729427][T19806] netlink: 132 bytes leftover after parsing attributes in process `syz.3.22438'. [ 960.427537][T19833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 961.003615][T19857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 961.348707][T19871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 961.662132][T19896] IPv6: NLM_F_CREATE should be specified when creating new route [ 961.952632][T19912] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.22492'. [ 962.943195][T19948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 964.019443][T19982] __nla_validate_parse: 1 callbacks suppressed [ 964.019460][T19982] netlink: 1 bytes leftover after parsing attributes in process `syz.3.22528'. [ 964.270011][T19998] validate_nla: 1 callbacks suppressed [ 964.270025][T19998] netlink: 'syz.0.22536': attribute type 29 has an invalid length. [ 964.284411][T19998] netlink: 'syz.0.22536': attribute type 29 has an invalid length. [ 964.294662][T19998] netlink: 'syz.0.22536': attribute type 29 has an invalid length. [ 964.403505][T20003] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.22538'. [ 965.449924][T20055] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.22562'. [ 966.685345][T20081] netlink: 'syz.0.22577': attribute type 16 has an invalid length. [ 966.709768][T20081] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22577'. [ 967.187529][T20111] netlink: 'syz.2.22591': attribute type 16 has an invalid length. [ 967.228568][T20111] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22591'. [ 967.997862][T20149] netlink: 'syz.3.22605': attribute type 16 has an invalid length. [ 968.005947][T20149] netlink: 132 bytes leftover after parsing attributes in process `syz.3.22605'. [ 971.830168][T20300] delete_channel: no stack [ 972.359127][T20336] delete_channel: no stack [ 973.022403][T20376] netlink: 'syz.1.22714': attribute type 9 has an invalid length. [ 973.030454][T20376] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.22714'. [ 973.087685][T20378] netlink: 'syz.1.22714': attribute type 9 has an invalid length. [ 973.095709][T20368] delete_channel: no stack [ 973.095856][T20378] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.22714'. [ 973.665689][T20406] netlink: 'syz.1.22727': attribute type 2 has an invalid length. [ 973.682669][T20406] netlink: 51 bytes leftover after parsing attributes in process `syz.1.22727'. [ 974.599960][T20434] netlink: 'syz.2.22740': attribute type 2 has an invalid length. [ 974.607842][T20434] netlink: 51 bytes leftover after parsing attributes in process `syz.2.22740'. [ 975.065284][T20465] netlink: 'syz.0.22755': attribute type 2 has an invalid length. [ 975.081456][T20465] netlink: 51 bytes leftover after parsing attributes in process `syz.0.22755'. [ 975.590016][T20497] netlink: 'syz.3.22770': attribute type 9 has an invalid length. [ 975.600189][T20497] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.22770'. [ 975.665848][T20501] netlink: 'syz.3.22770': attribute type 9 has an invalid length. [ 975.675687][T20501] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.22770'. [ 975.916227][T20513] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.22785'. [ 976.462299][T20543] netlink: 'syz.3.22792': attribute type 3 has an invalid length. [ 976.470992][T20543] netlink: 132 bytes leftover after parsing attributes in process `syz.3.22792'. [ 976.643997][T20557] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.22799'. [ 977.016071][T20578] netlink: 'syz.2.22806': attribute type 3 has an invalid length. [ 977.469290][T20609] netlink: 'syz.2.22822': attribute type 9 has an invalid length. [ 978.162936][T20646] validate_nla: 2 callbacks suppressed [ 978.162952][T20646] netlink: 'syz.0.22837': attribute type 9 has an invalid length. [ 978.177936][T20646] __nla_validate_parse: 4 callbacks suppressed [ 978.177950][T20646] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.22837'. [ 978.258264][T20651] netlink: 'syz.0.22837': attribute type 9 has an invalid length. [ 978.271585][T20651] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.22837'. [ 978.539860][T20664] netlink: 'syz.1.22855': attribute type 9 has an invalid length. [ 978.549354][T20664] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.22855'. [ 978.632162][T20666] netlink: 'syz.1.22855': attribute type 9 has an invalid length. [ 978.646999][T20666] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.22855'. [ 979.103011][T20693] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.22869'. [ 979.325927][T20708] netlink: 'syz.1.22868': attribute type 9 has an invalid length. [ 979.334686][T20708] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.22868'. [ 979.458637][T20711] netlink: 'syz.1.22868': attribute type 9 has an invalid length. [ 979.466502][T20711] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.22868'. [ 980.306289][T20748] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.22888'. [ 980.323997][T20748] netlink: 18430 bytes leftover after parsing attributes in process `syz.2.22888'. [ 980.421120][T20752] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.22889'. [ 981.057846][T20796] netlink: 'syz.0.22911': attribute type 2 has an invalid length. [ 981.088510][T20797] netlink: 'syz.3.22912': attribute type 21 has an invalid length. [ 981.108259][T20796] netlink: 'syz.0.22911': attribute type 2 has an invalid length. [ 982.192862][T20868] netlink: 'syz.3.22944': attribute type 2 has an invalid length. [ 983.171117][T20925] validate_nla: 6 callbacks suppressed [ 983.171131][T20925] netlink: 'syz.1.22969': attribute type 2 has an invalid length. [ 983.186490][T20925] __nla_validate_parse: 12 callbacks suppressed [ 983.186506][T20925] netlink: 164 bytes leftover after parsing attributes in process `syz.1.22969'. [ 983.954735][T20975] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.23000'. [ 984.722326][T21015] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.23020'. [ 984.921103][T21025] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23015'. [ 985.010585][T21031] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.23017'. [ 986.194126][T21058] netlink: 'syz.3.23034': attribute type 21 has an invalid length. [ 986.203747][T21058] netlink: 156 bytes leftover after parsing attributes in process `syz.3.23034'. [ 986.339544][T21066] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.23036'. [ 986.597100][T21078] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23043'. [ 986.641453][T21084] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.23046'. [ 987.055666][T21111] netlink: 'syz.1.23056': attribute type 21 has an invalid length. [ 987.085416][T21111] netlink: 156 bytes leftover after parsing attributes in process `syz.1.23056'. [ 987.600994][T21145] netlink: 'syz.0.23070': attribute type 21 has an invalid length. [ 989.896054][T21270] __nla_validate_parse: 8 callbacks suppressed [ 989.896069][T21270] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.23130'. [ 989.937751][T21270] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.23130'. [ 989.958874][T21270] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.23130'. [ 990.817013][T21319] netlink: 'syz.2.23156': attribute type 3 has an invalid length. [ 990.848519][T21319] netlink: 'syz.2.23156': attribute type 8 has an invalid length. [ 990.872014][T21319] netlink: 197324 bytes leftover after parsing attributes in process `syz.2.23156'. [ 991.633507][T21372] netlink: 192 bytes leftover after parsing attributes in process `syz.0.23174'. [ 991.828321][T21385] netlink: 'syz.1.23180': attribute type 3 has an invalid length. [ 991.836936][T21385] netlink: 'syz.1.23180': attribute type 8 has an invalid length. [ 991.849131][T21385] netlink: 197324 bytes leftover after parsing attributes in process `syz.1.23180'. [ 991.908737][T21387] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23181'. [ 992.747918][T21413] netlink: 'syz.1.23193': attribute type 2 has an invalid length. [ 992.758068][T21413] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.23193'. [ 992.918812][T21424] netlink: 192 bytes leftover after parsing attributes in process `syz.1.23200'. [ 993.027598][T21433] netlink: 132 bytes leftover after parsing attributes in process `syz.2.23203'. [ 993.303071][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.310130][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.933697][T21726] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.23345'. [ 999.943633][T21726] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.23345'. [ 999.957252][T21726] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.23345'. [ 1000.201828][T21736] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.23350'. [ 1000.220527][T21736] tc_dump_action: action bad kind [ 1000.285088][T21739] netlink: 'syz.0.23352': attribute type 25 has an invalid length. [ 1000.293168][T21739] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.23352'. [ 1000.659821][T21755] netlink: 'syz.2.23360': attribute type 8 has an invalid length. [ 1000.667888][T21755] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.23360'. [ 1000.801317][T21763] netlink: 'syz.2.23362': attribute type 4 has an invalid length. [ 1000.823407][T21763] netlink: 140 bytes leftover after parsing attributes in process `syz.2.23362'. [ 1000.926014][T21770] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.23366'. [ 1000.976958][T21775] netlink: 'syz.2.23368': attribute type 21 has an invalid length. [ 1001.449870][T21789] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.23375'. [ 1001.478218][T21789] tc_dump_action: action bad kind [ 1001.585124][T21791] netlink: 'syz.2.23376': attribute type 25 has an invalid length. [ 1001.594023][T21791] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.23376'. [ 1002.004401][T21809] netlink: 'syz.3.23383': attribute type 21 has an invalid length. [ 1002.388819][T21824] netlink: 'syz.3.23389': attribute type 25 has an invalid length. [ 1002.490358][T21830] netlink: 'syz.2.23393': attribute type 4 has an invalid length. [ 1003.290169][T21868] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1003.298122][T21868] CPU: 1 PID: 21868 Comm: syz.0.23410 Not tainted syzkaller #0 [ 1003.305697][T21868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1003.315779][T21868] Call Trace: [ 1003.319087][T21868] [ 1003.322051][T21868] dump_stack_lvl+0x16c/0x230 [ 1003.326772][T21868] ? show_regs_print_info+0x20/0x20 [ 1003.332010][T21868] ? load_image+0x3b0/0x3b0 [ 1003.336574][T21868] sysfs_warn_dup+0x8e/0xa0 [ 1003.341119][T21868] sysfs_do_create_link_sd+0xc0/0x110 [ 1003.346535][T21868] device_add_class_symlinks+0x1cf/0x240 [ 1003.352202][T21868] device_add+0x507/0xc20 [ 1003.356546][T21868] wiphy_register+0x1e74/0x2c00 [ 1003.361430][T21868] ? cfg80211_event_work+0x40/0x40 [ 1003.366542][T21868] ? minstrel_ht_alloc+0x88a/0x990 [ 1003.371670][T21868] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1003.377747][T21868] ieee80211_register_hw+0x2dc2/0x3ac0 [ 1003.383244][T21868] ? ieee80211_tasklet_handler+0x20/0x20 [ 1003.388877][T21868] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1003.394783][T21868] ? __debug_object_init+0xe8/0x430 [ 1003.399986][T21868] ? __asan_memset+0x22/0x40 [ 1003.404579][T21868] ? __hrtimer_init+0x186/0x270 [ 1003.409432][T21868] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 1003.415181][T21868] ? mac80211_hwsim_free+0x220/0x220 [ 1003.420459][T21868] ? rcu_is_watching+0x15/0xb0 [ 1003.425245][T21868] ? kstrndup+0xbd/0x140 [ 1003.429504][T21868] hwsim_new_radio_nl+0xd78/0x19d0 [ 1003.434639][T21868] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1003.440983][T21868] ? __nla_parse+0x40/0x50 [ 1003.445420][T21868] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1003.451762][T21868] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1003.457317][T21868] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 1003.463224][T21868] ? bpf_lsm_capable+0x9/0x10 [ 1003.467905][T21868] ? security_capable+0x89/0xb0 [ 1003.472765][T21868] genl_rcv_msg+0x60b/0x790 [ 1003.477278][T21868] ? genl_bind+0x360/0x360 [ 1003.481691][T21868] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1003.488031][T21868] ? perf_trace_lock+0x2ed/0x380 [ 1003.493003][T21868] netlink_rcv_skb+0x216/0x480 [ 1003.497771][T21868] ? genl_bind+0x360/0x360 [ 1003.502198][T21868] ? netlink_ack+0x1110/0x1110 [ 1003.506978][T21868] ? __lock_acquire+0x7c80/0x7c80 [ 1003.512022][T21868] ? down_read+0x1ac/0x2e0 [ 1003.516444][T21868] genl_rcv+0x28/0x40 [ 1003.520429][T21868] netlink_unicast+0x751/0x8d0 [ 1003.525220][T21868] netlink_sendmsg+0x8c1/0xbe0 [ 1003.529996][T21868] ? netlink_getsockopt+0x580/0x580 [ 1003.535199][T21868] ? aa_sock_msg_perm+0x94/0x150 [ 1003.540141][T21868] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1003.545422][T21868] ? security_socket_sendmsg+0x80/0xa0 [ 1003.550875][T21868] ? netlink_getsockopt+0x580/0x580 [ 1003.556075][T21868] ____sys_sendmsg+0x5bf/0x950 [ 1003.560849][T21868] ? __asan_memset+0x22/0x40 [ 1003.565439][T21868] ? __sys_sendmsg_sock+0x30/0x30 [ 1003.570460][T21868] ? __import_iovec+0x5f2/0x860 [ 1003.575326][T21868] ? import_iovec+0x73/0xa0 [ 1003.579833][T21868] ___sys_sendmsg+0x220/0x290 [ 1003.584515][T21868] ? __sys_sendmsg+0x270/0x270 [ 1003.589350][T21868] __se_sys_sendmsg+0x1a5/0x270 [ 1003.594209][T21868] ? __x64_sys_sendmsg+0x80/0x80 [ 1003.599172][T21868] ? lockdep_hardirqs_on+0x98/0x150 [ 1003.604379][T21868] do_syscall_64+0x55/0xb0 [ 1003.608792][T21868] ? clear_bhb_loop+0x40/0x90 [ 1003.613470][T21868] ? clear_bhb_loop+0x40/0x90 [ 1003.618145][T21868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1003.624053][T21868] RIP: 0033:0x7f769978ebe9 [ 1003.628512][T21868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.648113][T21868] RSP: 002b:00007f769a555038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1003.656532][T21868] RAX: ffffffffffffffda RBX: 00007f76999b5fa0 RCX: 00007f769978ebe9 [ 1003.664497][T21868] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1003.672469][T21868] RBP: 00007f7699811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1003.680433][T21868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1003.688400][T21868] R13: 00007f76999b6038 R14: 00007f76999b5fa0 R15: 00007ffdffd0fdf8 [ 1003.696391][T21868] [ 1006.200849][T22003] __nla_validate_parse: 7 callbacks suppressed [ 1006.200865][T22003] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.23476'. [ 1006.245725][T22003] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1006.268627][T22003] CPU: 0 PID: 22003 Comm: syz.1.23476 Not tainted syzkaller #0 [ 1006.276249][T22003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1006.286337][T22003] Call Trace: [ 1006.289639][T22003] [ 1006.292595][T22003] dump_stack_lvl+0x16c/0x230 [ 1006.297317][T22003] ? show_regs_print_info+0x20/0x20 [ 1006.302552][T22003] ? load_image+0x3b0/0x3b0 [ 1006.307105][T22003] sysfs_warn_dup+0x8e/0xa0 [ 1006.311623][T22003] sysfs_do_create_link_sd+0xc0/0x110 [ 1006.317007][T22003] device_add_class_symlinks+0x1cf/0x240 [ 1006.322650][T22003] device_add+0x507/0xc20 [ 1006.326990][T22003] wiphy_register+0x1e74/0x2c00 [ 1006.331886][T22003] ? cfg80211_event_work+0x40/0x40 [ 1006.337002][T22003] ? minstrel_ht_alloc+0x88a/0x990 [ 1006.342131][T22003] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1006.348217][T22003] ieee80211_register_hw+0x2dc2/0x3ac0 [ 1006.353709][T22003] ? ieee80211_tasklet_handler+0x20/0x20 [ 1006.359343][T22003] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1006.365253][T22003] ? __debug_object_init+0xe8/0x430 [ 1006.370458][T22003] ? __asan_memset+0x22/0x40 [ 1006.375069][T22003] ? __hrtimer_init+0x186/0x270 [ 1006.379926][T22003] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 1006.385681][T22003] ? mac80211_hwsim_free+0x220/0x220 [ 1006.390965][T22003] ? rcu_is_watching+0x15/0xb0 [ 1006.395730][T22003] ? kstrndup+0xbd/0x140 [ 1006.399983][T22003] hwsim_new_radio_nl+0xd78/0x19d0 [ 1006.405130][T22003] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1006.411481][T22003] ? __nla_parse+0x40/0x50 [ 1006.415914][T22003] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1006.422282][T22003] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1006.427860][T22003] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 1006.433778][T22003] ? bpf_lsm_capable+0x9/0x10 [ 1006.438456][T22003] ? security_capable+0x89/0xb0 [ 1006.443317][T22003] genl_rcv_msg+0x60b/0x790 [ 1006.447834][T22003] ? genl_bind+0x360/0x360 [ 1006.452257][T22003] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1006.458589][T22003] ? perf_trace_lock+0x2ed/0x380 [ 1006.463547][T22003] netlink_rcv_skb+0x216/0x480 [ 1006.468325][T22003] ? genl_bind+0x360/0x360 [ 1006.472746][T22003] ? netlink_ack+0x1110/0x1110 [ 1006.477528][T22003] ? __lock_acquire+0x7c80/0x7c80 [ 1006.482551][T22003] ? net_generic+0x1e/0x240 [ 1006.487060][T22003] ? down_read+0x1ac/0x2e0 [ 1006.491489][T22003] genl_rcv+0x28/0x40 [ 1006.495499][T22003] netlink_unicast+0x751/0x8d0 [ 1006.500369][T22003] netlink_sendmsg+0x8c1/0xbe0 [ 1006.505148][T22003] ? netlink_getsockopt+0x580/0x580 [ 1006.510351][T22003] ? aa_sock_msg_perm+0x94/0x150 [ 1006.515305][T22003] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1006.520589][T22003] ? security_socket_sendmsg+0x80/0xa0 [ 1006.526047][T22003] ? netlink_getsockopt+0x580/0x580 [ 1006.531246][T22003] ____sys_sendmsg+0x5bf/0x950 [ 1006.536023][T22003] ? __asan_memset+0x22/0x40 [ 1006.540632][T22003] ? __sys_sendmsg_sock+0x30/0x30 [ 1006.545654][T22003] ? __import_iovec+0x5f2/0x860 [ 1006.550521][T22003] ? import_iovec+0x73/0xa0 [ 1006.555031][T22003] ___sys_sendmsg+0x220/0x290 [ 1006.559715][T22003] ? __sys_sendmsg+0x270/0x270 [ 1006.564556][T22003] __se_sys_sendmsg+0x1a5/0x270 [ 1006.569412][T22003] ? __x64_sys_sendmsg+0x80/0x80 [ 1006.574374][T22003] ? lockdep_hardirqs_on+0x98/0x150 [ 1006.579587][T22003] do_syscall_64+0x55/0xb0 [ 1006.584024][T22003] ? clear_bhb_loop+0x40/0x90 [ 1006.588702][T22003] ? clear_bhb_loop+0x40/0x90 [ 1006.593382][T22003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.599301][T22003] RIP: 0033:0x7f5fb318ebe9 [ 1006.603717][T22003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.623321][T22003] RSP: 002b:00007f5fb3f25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1006.631760][T22003] RAX: ffffffffffffffda RBX: 00007f5fb33b5fa0 RCX: 00007f5fb318ebe9 [ 1006.639729][T22003] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1006.647697][T22003] RBP: 00007f5fb3211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1006.655667][T22003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.663637][T22003] R13: 00007f5fb33b6038 R14: 00007f5fb33b5fa0 R15: 00007ffd20bf50b8 [ 1006.671635][T22003] [ 1007.241356][T22040] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.23493'. [ 1007.266780][T22040] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1007.275239][T22040] CPU: 0 PID: 22040 Comm: syz.2.23493 Not tainted syzkaller #0 [ 1007.282823][T22040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1007.292901][T22040] Call Trace: [ 1007.296205][T22040] [ 1007.299158][T22040] dump_stack_lvl+0x16c/0x230 [ 1007.303872][T22040] ? show_regs_print_info+0x20/0x20 [ 1007.309101][T22040] ? load_image+0x3b0/0x3b0 [ 1007.313665][T22040] sysfs_warn_dup+0x8e/0xa0 [ 1007.318205][T22040] sysfs_do_create_link_sd+0xc0/0x110 [ 1007.323621][T22040] device_add_class_symlinks+0x1cf/0x240 [ 1007.329296][T22040] device_add+0x507/0xc20 [ 1007.333667][T22040] wiphy_register+0x1e74/0x2c00 [ 1007.338595][T22040] ? cfg80211_event_work+0x40/0x40 [ 1007.343735][T22040] ? minstrel_ht_alloc+0x88a/0x990 [ 1007.348893][T22040] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1007.355000][T22040] ieee80211_register_hw+0x2dc2/0x3ac0 [ 1007.360539][T22040] ? ieee80211_tasklet_handler+0x20/0x20 [ 1007.366200][T22040] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1007.372131][T22040] ? __debug_object_init+0xe8/0x430 [ 1007.377362][T22040] ? __asan_memset+0x22/0x40 [ 1007.382017][T22040] ? __hrtimer_init+0x186/0x270 [ 1007.386908][T22040] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 1007.392705][T22040] ? mac80211_hwsim_free+0x220/0x220 [ 1007.398016][T22040] ? rcu_is_watching+0x15/0xb0 [ 1007.402808][T22040] ? kstrndup+0xbd/0x140 [ 1007.407100][T22040] hwsim_new_radio_nl+0xd78/0x19d0 [ 1007.412274][T22040] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1007.418664][T22040] ? __nla_parse+0x40/0x50 [ 1007.423116][T22040] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1007.429489][T22040] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1007.435087][T22040] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 1007.441026][T22040] ? bpf_lsm_capable+0x9/0x10 [ 1007.445730][T22040] ? security_capable+0x89/0xb0 [ 1007.450621][T22040] genl_rcv_msg+0x60b/0x790 [ 1007.455165][T22040] ? genl_bind+0x360/0x360 [ 1007.459609][T22040] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1007.465960][T22040] ? perf_trace_lock+0x2ed/0x380 [ 1007.470949][T22040] netlink_rcv_skb+0x216/0x480 [ 1007.475748][T22040] ? genl_bind+0x360/0x360 [ 1007.480196][T22040] ? netlink_ack+0x1110/0x1110 [ 1007.485014][T22040] ? __lock_acquire+0x7c80/0x7c80 [ 1007.490083][T22040] ? down_read+0x1ac/0x2e0 [ 1007.494552][T22040] genl_rcv+0x28/0x40 [ 1007.498557][T22040] netlink_unicast+0x751/0x8d0 [ 1007.503368][T22040] netlink_sendmsg+0x8c1/0xbe0 [ 1007.508176][T22040] ? netlink_getsockopt+0x580/0x580 [ 1007.513405][T22040] ? aa_sock_msg_perm+0x94/0x150 [ 1007.518372][T22040] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1007.523679][T22040] ? security_socket_sendmsg+0x80/0xa0 [ 1007.529169][T22040] ? netlink_getsockopt+0x580/0x580 [ 1007.534400][T22040] ____sys_sendmsg+0x5bf/0x950 [ 1007.539208][T22040] ? __asan_memset+0x22/0x40 [ 1007.543817][T22040] ? __sys_sendmsg_sock+0x30/0x30 [ 1007.548863][T22040] ? __import_iovec+0x5f2/0x860 [ 1007.553758][T22040] ? import_iovec+0x73/0xa0 [ 1007.558295][T22040] ___sys_sendmsg+0x220/0x290 [ 1007.563004][T22040] ? __sys_sendmsg+0x270/0x270 [ 1007.567900][T22040] __se_sys_sendmsg+0x1a5/0x270 [ 1007.572784][T22040] ? __x64_sys_sendmsg+0x80/0x80 [ 1007.577785][T22040] ? lockdep_hardirqs_on+0x98/0x150 [ 1007.583020][T22040] do_syscall_64+0x55/0xb0 [ 1007.587458][T22040] ? clear_bhb_loop+0x40/0x90 [ 1007.592162][T22040] ? clear_bhb_loop+0x40/0x90 [ 1007.596863][T22040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1007.602783][T22040] RIP: 0033:0x7fc5ca78ebe9 [ 1007.607221][T22040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1007.626853][T22040] RSP: 002b:00007fc5cb56d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1007.635301][T22040] RAX: ffffffffffffffda RBX: 00007fc5ca9b5fa0 RCX: 00007fc5ca78ebe9 [ 1007.643297][T22040] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1007.651294][T22040] RBP: 00007fc5ca811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1007.659297][T22040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.667289][T22040] R13: 00007fc5ca9b6038 R14: 00007fc5ca9b5fa0 R15: 00007fffb4a2c5f8 [ 1007.675319][T22040] [ 1007.750749][T22046] netlink: 'syz.1.23496': attribute type 12 has an invalid length. [ 1007.768243][T22046] netlink: 132 bytes leftover after parsing attributes in process `syz.1.23496'. [ 1010.505564][T22173] delete_channel: no stack [ 1011.560746][T22222] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23577'. [ 1011.578568][T22222] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23577'. [ 1011.597614][T22222] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23577'. [ 1011.832876][T22230] delete_channel: no stack [ 1012.967805][T22256] netlink: 'syz.0.23593': attribute type 3 has an invalid length. [ 1013.008259][T22256] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.23593'. [ 1014.093248][T22312] netlink: 'syz.3.23622': attribute type 3 has an invalid length. [ 1014.116919][T22312] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.23622'. [ 1014.639086][T22346] netlink: 196 bytes leftover after parsing attributes in process `syz.1.23639'. [ 1015.085001][T22369] netlink: 196 bytes leftover after parsing attributes in process `syz.2.23650'. [ 1015.269221][T22380] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.23655'. [ 1015.284509][T22380] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1015.292867][T22380] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1015.812235][T22411] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.23667'. [ 1015.838484][T22411] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1015.858578][T22411] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1016.232841][T22440] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.23683'. [ 1016.246432][T22440] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1016.265582][T22440] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1016.413744][T22452] netlink: 'syz.1.23689': attribute type 1 has an invalid length. [ 1016.663776][T22466] tap0: tun_chr_ioctl cmd 1074025677 [ 1016.672705][T22466] tap0: linktype set to 804 [ 1016.686924][T22470] __nla_validate_parse: 1 callbacks suppressed [ 1016.686938][T22470] netlink: 180 bytes leftover after parsing attributes in process `syz.1.23696'. [ 1016.908802][T22483] netlink: 188 bytes leftover after parsing attributes in process `syz.1.23711'. [ 1017.521983][T22524] netlink: 180 bytes leftover after parsing attributes in process `syz.2.23724'. [ 1017.713175][T22537] tap0: tun_chr_ioctl cmd 1074025677 [ 1017.728127][T22537] tap0: linktype set to 804 [ 1017.751855][T22541] netlink: 188 bytes leftover after parsing attributes in process `syz.2.23732'. [ 1018.043019][T22561] netlink: 180 bytes leftover after parsing attributes in process `syz.0.23737'. [ 1018.235125][T22570] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23744'. [ 1018.269417][T22570] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23744'. [ 1018.282511][T22568] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23744'. [ 1018.293721][T22573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23744'. [ 1018.783196][T22604] tap0: tun_chr_ioctl cmd 2147767521 [ 1019.727164][T22647] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23778'. [ 1020.158350][T22669] batadv0: tun_chr_ioctl cmd 1074025678 [ 1020.165200][T22669] batadv0: group set to 801 [ 1020.294942][T22678] tap0: tun_chr_ioctl cmd 1074025677 [ 1020.300561][T22678] tap0: linktype set to 6 [ 1020.828860][T22718] netlink: 'syz.3.23816': attribute type 1 has an invalid length. [ 1020.966181][T22724] batadv0: tun_chr_ioctl cmd 1074025678 [ 1020.971959][T22724] batadv0: group set to 801 [ 1021.607050][T22751] tap0: tun_chr_ioctl cmd 1074025677 [ 1021.619829][T22751] tap0: linktype set to 6 [ 1021.789358][T22759] batadv0: tun_chr_ioctl cmd 1074025678 [ 1021.805255][T22759] batadv0: group set to 801 [ 1022.176496][T22782] tap0: tun_chr_ioctl cmd 1074025677 [ 1022.182317][T22782] tap0: linktype set to 6 [ 1024.283298][T22808] netlink: 'syz.1.23865': attribute type 10 has an invalid length. [ 1024.293175][T22808] __nla_validate_parse: 12 callbacks suppressed [ 1024.293190][T22808] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.23865'. [ 1024.451605][T22813] tap0: tun_chr_ioctl cmd 1074025677 [ 1024.457496][T22813] tap0: linktype set to 6 [ 1025.248127][T22845] tap0: tun_chr_ioctl cmd 1074025677 [ 1025.253999][T22845] tap0: linktype set to 6 [ 1025.494394][T22854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23879'. [ 1025.509794][T22854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23879'. [ 1025.525582][T22847] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23879'. [ 1025.546561][T22847] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23879'. [ 1026.074454][T22887] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23891'. [ 1026.092807][T22887] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23891'. [ 1026.111371][T22886] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23891'. [ 1026.123767][T22887] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23891'. [ 1027.110985][T22927] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23905'. [ 1028.196513][T22952] netlink: 'syz.2.23918': attribute type 21 has an invalid length. [ 1028.223899][T22952] netlink: 'syz.2.23918': attribute type 1 has an invalid length. [ 1031.662825][T23044] __nla_validate_parse: 5 callbacks suppressed [ 1031.662842][T23044] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.23954'. [ 1033.719457][T23150] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24010'. [ 1033.749147][T23150] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24010'. [ 1033.779682][T23145] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24010'. [ 1033.810233][T23153] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24010'. [ 1034.779147][T23190] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.24026'. [ 1034.799333][T23191] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.24025'. [ 1034.808736][T23191] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.24025'. [ 1034.820394][T23188] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.24025'. [ 1034.831470][T23191] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.24025'. [ 1035.968877][T23240] tap0: tun_chr_ioctl cmd 1074025692 [ 1037.107405][T23258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24066'. [ 1037.129691][T23258] netlink: 'syz.0.24066': attribute type 12 has an invalid length. [ 1037.137856][T23258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24066'. [ 1037.262237][T23269] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.24064'. [ 1037.577245][T23287] netlink: 132 bytes leftover after parsing attributes in process `syz.1.24074'. [ 1037.590108][T23287] netlink: 'syz.1.24074': attribute type 12 has an invalid length. [ 1037.601192][T23287] netlink: 132 bytes leftover after parsing attributes in process `syz.1.24074'. [ 1037.619907][T23289] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.24073'. [ 1037.638468][T23289] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.24073'. [ 1037.651286][T23285] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.24073'. [ 1037.664157][T23289] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.24073'. [ 1038.441810][T23297] netlink: 'syz.0.24078': attribute type 7 has an invalid length. [ 1038.571692][T23303] syzkaller0: tun_chr_ioctl cmd 35111 [ 1039.637579][T23340] netlink: 830 bytes leftover after parsing attributes in process `syz.1.24098'. [ 1039.978867][T23356] syzkaller0: tun_chr_ioctl cmd 35092 [ 1040.168310][T23362] syzkaller0: tun_chr_ioctl cmd 35111 [ 1040.917015][T23385] netlink: 'syz.1.24119': attribute type 7 has an invalid length. [ 1041.798311][T23404] syzkaller0: tun_chr_ioctl cmd 35111 [ 1042.229519][T23423] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24136'. [ 1042.239079][T23423] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24136'. [ 1042.250036][T23423] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24136'. [ 1042.267250][T23423] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24136'. [ 1042.765853][T23430] netlink: 'syz.3.24139': attribute type 10 has an invalid length. [ 1042.784907][T23430] netlink: 'syz.3.24139': attribute type 19 has an invalid length. [ 1042.805172][T23430] netlink: 156 bytes leftover after parsing attributes in process `syz.3.24139'. [ 1043.132579][T23434] tap0: tun_chr_ioctl cmd 1074025681 [ 1043.394068][T23445] syzkaller0: tun_chr_ioctl cmd 35111 [ 1043.868667][T23462] tap0: tun_chr_ioctl cmd 2147767506 [ 1044.014260][T23470] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.24158'. [ 1044.201307][T23478] syzkaller0: tun_chr_ioctl cmd 35092 [ 1044.250669][T23481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24163'. [ 1044.338601][T23481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24163'. [ 1044.357872][T23482] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24163'. [ 1044.378720][T23481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24163'. [ 1045.565236][T23509] tap0: tun_chr_ioctl cmd 2147767506 [ 1046.589342][T23533] tap0: tun_chr_ioctl cmd 2147767506 [ 1047.274567][T23556] tap0: tun_chr_ioctl cmd 2147767506 [ 1047.946274][T23572] __nla_validate_parse: 9 callbacks suppressed [ 1047.946288][T23572] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24202'. [ 1047.982842][T23572] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24202'. [ 1047.997527][T23572] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24202'. [ 1048.020223][T23572] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24202'. [ 1049.213516][T23615] netlink: 'syz.0.24223': attribute type 10 has an invalid length. [ 1049.238717][T23615] netdevsim netdevsim0 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.257873][T23615] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.278831][T23615] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.291221][T23615] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.790269][T23631] netlink: 'syz.0.24231': attribute type 1 has an invalid length. [ 1049.827732][T23631] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.24231'. [ 1050.911372][T23664] netlink: 'syz.1.24248': attribute type 1 has an invalid length. [ 1050.944509][T23664] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.24248'. [ 1051.141929][T23669] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.24250'. [ 1051.182514][T23669] openvswitch: netlink: Duplicate key (type 0). [ 1051.991780][T23697] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.24262'. [ 1052.008910][T23697] openvswitch: netlink: Duplicate key (type 0). [ 1052.412571][T23713] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.24270'. [ 1054.221881][T23778] netlink: 'syz.3.24302': attribute type 1 has an invalid length. [ 1054.248327][T23778] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.24302'. [ 1054.742885][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.749806][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.172448][T23810] netlink: 'syz.2.24315': attribute type 1 has an invalid length. [ 1055.192485][T23810] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.24315'. [ 1055.600170][T23836] netlink: 'syz.1.24330': attribute type 1 has an invalid length. [ 1055.622208][T23836] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.24330'. [ 1056.205993][T23863] netlink: 'syz.0.24340': attribute type 1 has an invalid length. [ 1056.237666][T23863] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.24340'. [ 1056.876253][T23899] netlink: 'syz.1.24358': attribute type 1 has an invalid length. [ 1056.884308][T23899] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.24358'. [ 1057.017096][T23903] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24363'. [ 1058.271215][T23961] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24387'. [ 1058.286735][T23961] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24387'. [ 1058.297732][T23956] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24387'. [ 1058.308752][T23961] netlink: 60 bytes leftover after parsing attributes in process `syz.3.24387'. [ 1059.073855][T23989] netlink: 'syz.2.24401': attribute type 27 has an invalid length. [ 1059.371270][T24006] __nla_validate_parse: 2 callbacks suppressed [ 1059.371285][T24006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24406'. [ 1059.400516][T24006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24406'. [ 1059.417156][T24000] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24406'. [ 1059.448673][T24006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24406'. [ 1059.811778][T24032] netlink: 164 bytes leftover after parsing attributes in process `syz.2.24419'. [ 1059.921293][T24041] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24424'. [ 1059.948363][T24041] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24424'. [ 1059.979270][T24038] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24424'. [ 1060.008845][T24047] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24424'. [ 1060.330706][T24063] netlink: 'syz.0.24442': attribute type 10 has an invalid length. [ 1060.348998][T24063] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.24442'. [ 1060.579438][T24076] netlink: 'syz.2.24438': attribute type 21 has an invalid length. [ 1060.959684][T24099] netlink: 'syz.1.24450': attribute type 10 has an invalid length. [ 1061.358569][T24119] tun0: tun_chr_ioctl cmd 1074025694 [ 1062.333966][T24186] netlink: 'syz.1.24497': attribute type 29 has an invalid length. [ 1062.358542][T24186] netlink: 'syz.1.24497': attribute type 29 has an invalid length. [ 1062.399258][T24186] netlink: 'syz.1.24497': attribute type 29 has an invalid length. [ 1062.408745][T24186] netlink: 'syz.1.24497': attribute type 29 has an invalid length. [ 1062.477241][T24194] netlink: 'syz.3.24493': attribute type 1 has an invalid length. [ 1062.561984][T24198] netlink: 'syz.2.24494': attribute type 10 has an invalid length. [ 1064.209443][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1064.219302][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1064.227445][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1064.246077][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1064.255128][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1064.263874][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1064.275580][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1064.290174][T24254] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1064.308850][T24254] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1064.323219][T24254] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1064.330942][T24254] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1064.341396][T24254] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1064.700824][T24251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1064.712144][T24251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1064.720388][T24251] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1064.728673][T24249] chnl_net:caif_netlink_parms(): no params data found [ 1064.729353][T24251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1064.743616][T24251] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1064.751888][T24251] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1064.816769][T24252] chnl_net:caif_netlink_parms(): no params data found [ 1064.929214][T24249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.936349][T24249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.945508][T24249] bridge_slave_0: entered allmulticast mode [ 1064.952454][T24249] bridge_slave_0: entered promiscuous mode [ 1064.983996][T24249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.991546][T24249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.999151][T24249] bridge_slave_1: entered allmulticast mode [ 1065.005871][T24249] bridge_slave_1: entered promiscuous mode [ 1065.060658][T24252] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.067805][T24252] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.075713][T24252] bridge_slave_0: entered allmulticast mode [ 1065.086072][T24252] bridge_slave_0: entered promiscuous mode [ 1065.097739][T24252] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.104927][T24252] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.112497][T24252] bridge_slave_1: entered allmulticast mode [ 1065.119342][T24252] bridge_slave_1: entered promiscuous mode [ 1065.129221][T24249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.166850][T24249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.215213][T24252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.229840][T24252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.253769][T24249] team0: Port device team_slave_0 added [ 1065.295191][T24249] team0: Port device team_slave_1 added [ 1065.316498][T24252] team0: Port device team_slave_0 added [ 1065.352298][T24252] team0: Port device team_slave_1 added [ 1065.409808][T24249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.416789][T24249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.444024][T24249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.474051][T24252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.481143][T24252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.507385][T24252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.520158][T24252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.527122][T24252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.553911][T24252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.573728][T24249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.580828][T24249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.606820][T24249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.702195][T24262] chnl_net:caif_netlink_parms(): no params data found [ 1065.716834][T24252] hsr_slave_0: entered promiscuous mode [ 1065.723328][T24252] hsr_slave_1: entered promiscuous mode [ 1065.794556][T24249] hsr_slave_0: entered promiscuous mode [ 1065.800982][T24249] hsr_slave_1: entered promiscuous mode [ 1065.806995][T24249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1065.815024][T24249] Cannot create hsr debugfs directory [ 1065.935322][T24262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.942895][T24262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.950531][T24262] bridge_slave_0: entered allmulticast mode [ 1065.957484][T24262] bridge_slave_0: entered promiscuous mode [ 1065.991817][T24262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.999162][T24262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.006355][T24262] bridge_slave_1: entered allmulticast mode [ 1066.013422][T24262] bridge_slave_1: entered promiscuous mode [ 1066.068455][T24262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.103584][T24262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1066.167037][T24262] team0: Port device team_slave_0 added [ 1066.197233][T24262] team0: Port device team_slave_1 added [ 1066.230675][ T2883] [ 1066.233044][ T2883] ====================================================== [ 1066.240056][ T2883] WARNING: possible circular locking dependency detected [ 1066.247090][ T2883] syzkaller #0 Not tainted [ 1066.251480][ T2883] ------------------------------------------------------ [ 1066.258471][ T2883] kworker/u4:8/2883 is trying to acquire lock: [ 1066.264603][ T2883] ffff8880267a0d00 (team->team_lock_key#5){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 1066.274147][ T2883] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1066.274147][ T2883] but task is already holding lock: [ 1066.281485][ T2883] ffff88807dda8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 1066.291821][ T2883] [ 1066.291821][ T2883] which lock already depends on the new lock. [ 1066.291821][ T2883] [ 1066.302229][ T2883] [ 1066.302229][ T2883] the existing dependency chain (in reverse order) is: [ 1066.311246][ T2883] [ 1066.311246][ T2883] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 1066.318991][ T2883] __mutex_lock+0x129/0xcc0 [ 1066.324021][ T2883] ieee80211_open+0x144/0x200 [ 1066.329227][ T2883] __dev_open+0x2bc/0x430 [ 1066.334089][ T2883] dev_open+0xab/0x170 [ 1066.338550][T24254] Bluetooth: hci0: command tx timeout [ 1066.338670][ T2883] team_add_slave+0xae7/0x2660 [ 1066.349309][ T2883] do_setlink+0xe14/0x3fb0 [ 1066.354256][ T2883] rtnl_newlink+0x175b/0x2020 [ 1066.359467][ T2883] rtnetlink_rcv_msg+0x7c7/0xf10 [ 1066.364941][ T2883] netlink_rcv_skb+0x216/0x480 [ 1066.370231][ T2883] netlink_unicast+0x751/0x8d0 [ 1066.375519][ T2883] netlink_sendmsg+0x8c1/0xbe0 [ 1066.380809][ T2883] ____sys_sendmsg+0x5bf/0x950 [ 1066.386096][ T2883] ___sys_sendmsg+0x220/0x290 [ 1066.391280][ T2883] __se_sys_sendmsg+0x1a5/0x270 [ 1066.396633][ T2883] do_syscall_64+0x55/0xb0 [ 1066.401546][ T2883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1066.407939][ T2883] [ 1066.407939][ T2883] -> #0 (team->team_lock_key#5){+.+.}-{3:3}: [ 1066.416079][ T2883] __lock_acquire+0x2ddb/0x7c80 [ 1066.421427][ T2883] lock_acquire+0x197/0x410 [ 1066.426423][ T2883] __mutex_lock+0x129/0xcc0 [ 1066.431421][ T2883] team_del_slave+0x32/0x1c0 [ 1066.436504][ T2883] team_device_event+0x28d/0xa20 [ 1066.441943][ T2883] notifier_call_chain+0x197/0x390 [ 1066.447552][ T2883] unregister_netdevice_many_notify+0xf36/0x1810 [ 1066.454377][ T2883] unregister_netdevice_queue+0x324/0x360 [ 1066.460596][ T2883] _cfg80211_unregister_wdev+0x16b/0x580 [ 1066.466728][ T2883] ieee80211_remove_interfaces+0x496/0x680 [ 1066.473034][ T2883] ieee80211_unregister_hw+0x5d/0x2a0 [ 1066.478903][ T2883] mac80211_hwsim_del_radio+0x274/0x450 [ 1066.484951][ T2883] hwsim_exit_net+0x585/0x640 [ 1066.490151][ T2883] cleanup_net+0x6f4/0xb90 [ 1066.495067][ T2883] process_scheduled_works+0xa45/0x15b0 [ 1066.501107][ T2883] worker_thread+0xa55/0xfc0 [ 1066.506191][ T2883] kthread+0x2fa/0x390 [ 1066.510755][ T2883] ret_from_fork+0x48/0x80 [ 1066.515667][ T2883] ret_from_fork_asm+0x11/0x20 [ 1066.520934][ T2883] [ 1066.520934][ T2883] other info that might help us debug this: [ 1066.520934][ T2883] [ 1066.531138][ T2883] Possible unsafe locking scenario: [ 1066.531138][ T2883] [ 1066.538677][ T2883] CPU0 CPU1 [ 1066.544154][ T2883] ---- ---- [ 1066.549506][ T2883] lock(&rdev->wiphy.mtx); [ 1066.553989][ T2883] lock(team->team_lock_key#5); [ 1066.561441][ T2883] lock(&rdev->wiphy.mtx); [ 1066.568449][ T2883] lock(team->team_lock_key#5); [ 1066.573371][ T2883] [ 1066.573371][ T2883] *** DEADLOCK *** [ 1066.573371][ T2883] [ 1066.581498][ T2883] 5 locks held by kworker/u4:8/2883: [ 1066.586765][ T2883] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1066.597632][ T2883] #1: ffffc9000bc97d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1066.608184][ T2883] #2: ffffffff8dfaf510 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 1066.617562][ T2883] #3: ffffffff8dfbc348 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 1066.627375][ T2883] #4: ffff88807dda8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 1066.638150][ T2883] [ 1066.638150][ T2883] stack backtrace: [ 1066.644041][ T2883] CPU: 1 PID: 2883 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 1066.651574][ T2883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1066.661620][ T2883] Workqueue: netns cleanup_net [ 1066.666378][ T2883] Call Trace: [ 1066.669639][ T2883] [ 1066.672589][ T2883] dump_stack_lvl+0x16c/0x230 [ 1066.677246][ T2883] ? load_image+0x3b0/0x3b0 [ 1066.681724][ T2883] ? show_regs_print_info+0x20/0x20 [ 1066.686902][ T2883] ? print_circular_bug+0x12b/0x1a0 [ 1066.692082][ T2883] check_noncircular+0x2bd/0x3c0 [ 1066.697002][ T2883] ? print_deadlock_bug+0x5d0/0x5d0 [ 1066.702194][ T2883] ? lockdep_lock+0xe0/0x220 [ 1066.706773][ T2883] ? __lock_acquire+0x1334/0x7c80 [ 1066.711773][ T2883] ? _find_first_zero_bit+0xd3/0x100 [ 1066.717041][ T2883] __lock_acquire+0x2ddb/0x7c80 [ 1066.721873][ T2883] ? verify_lock_unused+0x140/0x140 [ 1066.727047][ T2883] ? verify_lock_unused+0x140/0x140 [ 1066.732221][ T2883] lock_acquire+0x197/0x410 [ 1066.736698][ T2883] ? team_del_slave+0x32/0x1c0 [ 1066.741446][ T2883] ? __might_sleep+0xe0/0xe0 [ 1066.746018][ T2883] ? read_lock_is_recursive+0x20/0x20 [ 1066.751371][ T2883] __mutex_lock+0x129/0xcc0 [ 1066.755853][ T2883] ? team_del_slave+0x32/0x1c0 [ 1066.760594][ T2883] ? __lock_acquire+0x7c80/0x7c80 [ 1066.765598][ T2883] ? rcu_is_watching+0x15/0xb0 [ 1066.770341][ T2883] ? trace_contention_end+0x39/0xe0 [ 1066.775521][ T2883] ? __mutex_lock+0x304/0xcc0 [ 1066.780177][ T2883] ? team_del_slave+0x32/0x1c0 [ 1066.784913][ T2883] ? mutex_lock_nested+0x20/0x20 [ 1066.789830][ T2883] ? bond_netdev_event+0xe1/0xef0 [ 1066.794839][ T2883] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1066.800451][ T2883] ? bond_ipsec_offload_ok+0x410/0x410 [ 1066.805890][ T2883] team_del_slave+0x32/0x1c0 [ 1066.810463][ T2883] team_device_event+0x28d/0xa20 [ 1066.815380][ T2883] notifier_call_chain+0x197/0x390 [ 1066.820491][ T2883] unregister_netdevice_many_notify+0xf36/0x1810 [ 1066.826803][ T2883] ? lock_chain_count+0x20/0x20 [ 1066.831630][ T2883] ? unregister_netdevice_many+0x20/0x20 [ 1066.837254][ T2883] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1066.842980][ T2883] ? __lock_acquire+0x7c80/0x7c80 [ 1066.848007][ T2883] unregister_netdevice_queue+0x324/0x360 [ 1066.853814][ T2883] ? list_netdevice+0x730/0x730 [ 1066.858657][ T2883] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1066.864364][ T2883] _cfg80211_unregister_wdev+0x16b/0x580 [ 1066.869986][ T2883] ieee80211_remove_interfaces+0x496/0x680 [ 1066.875779][ T2883] ? ieee80211_do_stop+0x1db0/0x1db0 [ 1066.881062][ T2883] ? rcu_is_watching+0x15/0xb0 [ 1066.885811][ T2883] ieee80211_unregister_hw+0x5d/0x2a0 [ 1066.891170][ T2883] mac80211_hwsim_del_radio+0x274/0x450 [ 1066.896712][ T2883] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 1066.902240][ T2883] hwsim_exit_net+0x585/0x640 [ 1066.906901][ T2883] ? hwsim_init_net+0x90/0x90 [ 1066.911556][ T2883] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1066.917360][ T2883] cleanup_net+0x6f4/0xb90 [ 1066.921756][ T2883] ? ops_free_list+0x3b0/0x3b0 [ 1066.926499][ T2883] ? _raw_spin_unlock_irq+0x23/0x50 [ 1066.931682][ T2883] ? process_scheduled_works+0x957/0x15b0 [ 1066.937379][ T2883] ? process_scheduled_works+0x957/0x15b0 [ 1066.943079][ T2883] process_scheduled_works+0xa45/0x15b0 [ 1066.948616][ T2883] ? assign_work+0x400/0x400 [ 1066.953186][ T2883] ? assign_work+0x39e/0x400 [ 1066.957750][ T2883] worker_thread+0xa55/0xfc0 [ 1066.962317][ T2883] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1066.968192][ T2883] ? _raw_spin_unlock+0x40/0x40 [ 1066.973045][ T2883] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1066.978932][ T2883] kthread+0x2fa/0x390 [ 1066.982981][ T2883] ? pr_cont_work+0x560/0x560 [ 1066.987634][ T2883] ? kthread_blkcg+0xd0/0xd0 [ 1066.992209][ T2883] ret_from_fork+0x48/0x80 [ 1066.996616][ T2883] ? kthread_blkcg+0xd0/0xd0 [ 1067.001181][ T2883] ret_from_fork_asm+0x11/0x20 [ 1067.005928][ T2883] [ 1067.009365][T24254] Bluetooth: hci2: command tx timeout [ 1067.009702][T24251] Bluetooth: hci3: command tx timeout [ 1067.024482][ T2883] team0: Port device wlan1 removed [ 1067.617377][ T2883] team0 (unregistering): Port device geneve1 removed [ 1067.654280][ T2883] team0 (unregistering): Port device team_slave_1 removed [ 1067.680542][ T2883] team0 (unregistering): Port device C removed [ 1068.783649][ T2883] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.821987][ T2883] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.862118][ T2883] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.996369][ T2883] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.083918][ T2883] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.122169][ T2883] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.182173][ T2883] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.237413][ T2883] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): left promiscuous mode [ 1069.247168][ T2883] team0: Port device ÿÿÿÿÿÿ removed [ 1069.253159][ T2883] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.582013][ T2883] team0: Port device O3ãc¤± removed [ 1073.151441][ T2883] mac80211_hwsim hwsim5 O3ãc¤± (unregistering): left promiscuous mode [ 1073.161078][ T2883] team0: Port device O3ãc¤± removed [ 1073.292473][ T2883] hsr_slave_0: left promiscuous mode [ 1073.298088][ T2883] hsr_slave_1: left promiscuous mode [ 1073.303898][ T2883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.311350][ T2883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.320112][ T2883] bridge_slave_1: left allmulticast mode [ 1073.325842][ T2883] bridge_slave_1: left promiscuous mode [ 1073.332325][ T2883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.340190][ T2883] bridge_slave_0: left allmulticast mode [ 1073.345898][ T2883] bridge_slave_0: left promiscuous mode [ 1073.351746][ T2883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.361098][ T2883] bridge_slave_1: left allmulticast mode [ 1073.366761][ T2883] bridge_slave_1: left promiscuous mode [ 1073.372460][ T2883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.380367][ T2883] bridge_slave_0: left allmulticast mode [ 1073.386005][ T2883] bridge_slave_0: left promiscuous mode [ 1073.391736][ T2883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.402964][ T2883] hsr_slave_0: left promiscuous mode [ 1073.408743][ T2883] hsr_slave_1: left promiscuous mode [ 1073.414369][ T2883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.422312][ T2883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.429905][ T2883] bridge_slave_1: left allmulticast mode [ 1073.435529][ T2883] bridge_slave_1: left promiscuous mode [ 1073.442214][ T2883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.450070][ T2883] bridge_slave_0: left allmulticast mode [ 1073.455693][ T2883] bridge_slave_0: left promiscuous mode [ 1073.461656][ T2883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.471369][ T2883] hsr_slave_0: left promiscuous mode [ 1073.477011][ T2883] hsr_slave_1: left promiscuous mode [ 1073.483278][ T2883] bridge_slave_1: left allmulticast mode [ 1073.488941][ T2883] bridge_slave_1: left promiscuous mode [ 1073.494558][ T2883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.503869][ T2883] hsr_slave_1: left promiscuous mode [ 1073.705782][ T2883] geneve1 (unregistering): left promiscuous mode [ 1073.712977][ T2883] team0 (unregistering): Port device geneve1 removed [ 1073.773937][ T2883] team_slave_1 (unregistering): left promiscuous mode [ 1073.781311][ T2883] team0 (unregistering): Port device team_slave_1 removed [ 1073.867890][ T2883] veth0_to_bond (unregistering): left promiscuous mode [ 1073.875388][ T2883] team0 (unregistering): Port device veth0_to_bond removed [ 1074.064641][ T2883] team0 (unregistering): Port device team_slave_1 removed [ 1074.104704][ T2883] team0 (unregistering): Port device team_slave_0 removed [ 1074.124890][ T2883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.146281][ T2883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.196592][ T2883] bond0 (unregistering): Released all slaves [ 1074.281674][ T2883] team0 (unregistering): Port device team_slave_1 removed [ 1074.292520][ T2883] team0 (unregistering): Port device team_slave_0 removed [ 1074.302854][ T2883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.320815][ T2883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.366141][ T2883] bond0 (unregistering): Released all slaves [ 1074.505516][ T2883] team0 (unregistering): Port device team_slave_1 removed [ 1074.527896][ T2883] team0 (unregistering): Port device team_slave_0 removed [ 1074.552522][ T2883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.575928][ T2883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.617229][ T2883] bond0 (unregistering): Released all slaves [ 1074.797299][ T2883] team0 (unregistering): Port device geneve1 removed [ 1074.847093][ T2883] team0 (unregistering): Port device team_slave_1 removed [ 1074.862036][ T2883] team0 (unregistering): Port device C removed [ 1074.933626][ T2883] team0 (unregistering): Port device veth0_to_bond removed [ 1075.196783][ T2883] geneve1 (unregistering): left promiscuous mode [ 1075.203708][ T2883] team0 (unregistering): Port device geneve1 removed [ 1075.259264][ T2883] team_slave_1 (unregistering): left promiscuous mode [ 1075.266529][ T2883] team0 (unregistering): Port device team_slave_1 removed [ 1075.290104][ T2883] C (unregistering): left promiscuous mode [ 1075.296561][ T2883] team0 (unregistering): Port device C removed [ 1075.317594][ T2883] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 1075.326608][ T2883] bond_slave_1 (unregistering): left promiscuous mode [ 1075.348993][ T2883] $Hÿ (unregistering): (slave c1ÿ): Releasing backup interface [ 1075.357382][ T2883] ÿ (unregistering): left promiscuous mode [ 1075.376625][ T2883] veth0_to_bond (unregistering): left promiscuous mode [ 1075.385865][ T2883] team0 (unregistering): Port device veth0_to_bond removed [ 1075.523092][ T2883] team0 (unregistering): Port device $Hÿ removed [ 1075.620236][ T2883] $Hÿ (unregistering): Released all slaves