last executing test programs: 20.143071222s ago: executing program 0 (id=42110): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x106000, 0x0, 0x80, 0x5, 0x7, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2a, 0x5, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x240088b1) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0xc7, 0x0}, 0x4000040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0xfffffffffffffffd) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="e51d0f00"}) 20.028316274s ago: executing program 0 (id=42101): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="13023f277b2ee57b28", 0x20000489}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x2000000000000}, 0x0, 0x0, 0xf61, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4d31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1000, 0x5}, 0x7000, 0x2, 0x0, 0x0, 0x200000000, 0x5}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={r2, 0x20, &(0x7f0000001740)={&(0x7f0000000280)=""/122, 0x7a, 0x0, &(0x7f0000000740)=""/4096, 0x1000}}, 0x10) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 16.953661314s ago: executing program 0 (id=42118): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x63) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='THAWED\x00', 0x7) 16.804960338s ago: executing program 0 (id=42112): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0x806, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1}, 0x0, 0x1, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000000)=r3, 0x11) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000000)=[{&(0x7f00000000c0)="140000002a000b0521b94d326792527204f8ab94", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000040)=r3, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 16.540165764s ago: executing program 0 (id=42119): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000002980), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x4080b000, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0) 15.715135392s ago: executing program 3 (id=42134): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0x4000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) 15.653924513s ago: executing program 0 (id=42136): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x4}, 0x38) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a11800152c280014", 0x1f}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) r1 = socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r2, 0x20, &(0x7f0000000400)={0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000780)=""/164, 0xa4}}, 0x10) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000380)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9edb1f8562b031338", 0xb}], 0x1}, 0x9c00) sendmsg$inet(r1, &(0x7f0000001d80)={&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000003280)=[{&(0x7f0000001dc0)="36e7cd52107c14433536a161b4dacb5fe7df9eac27b919694a3d97685c0013c0b4802ddc6f480fe6a05af150b4", 0x2d}], 0x1}, 0x400a0) 15.38909382s ago: executing program 3 (id=42141): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000700000006000000c6c4ffff80040000", @ANYRES32=r3, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0400000004000000020000000800000000000000000000000000e76b"], 0x50) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) close(r0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000000000010000000000000003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcdcdbd9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000725c8bbb58794c643b000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9b9", 0xd9}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) socket$kcm(0x29, 0x8, 0x0) 15.075860327s ago: executing program 3 (id=42146): socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 14.475136151s ago: executing program 4 (id=42152): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}], 0x1}, 0x4000000) recvmsg$kcm(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x2000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, 0x0, &(0x7f0000000700)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0x0, 0x0}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 14.320437244s ago: executing program 4 (id=42154): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003440)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x3, &(0x7f0000003ac0), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004"], 0x48) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5f}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 14.173346907s ago: executing program 4 (id=42155): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000000000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x3) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a204d8c71ef2685634a8270e7123c00"/30], 0xffdd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0000000b000000020005004000000042000000", @ANYRES32, @ANYBLOB="04000000000000000000", @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000040), 0x1006, r1, 0x0, 0xd88d02a0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a90402000000000000", 0x17}], 0x1}, 0x4090) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) 14.172689108s ago: executing program 2 (id=42156): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xf, 0x3, 0x2) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r2, 0x0, 0x10100) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120) 14.126121228s ago: executing program 1 (id=42157): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0x806, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1}, 0x0, 0x1, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000000)=r3, 0x11) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000000)=[{&(0x7f00000000c0)="140000002a000b0521b94d326792527204f8ab94", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000040)=r3, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 14.085590309s ago: executing program 2 (id=42158): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x7}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x7}, 0x10) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748"], 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000001140)=""/224, 0x0, 0xe0, 0x0, 0x9}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa}, 0x94) 13.950312033s ago: executing program 2 (id=42159): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x0, 0x0, 0x40, 0x0, 0x0, 0x309, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1b0000001e006bcd9e3fe3dc6e0800000a0000dd600000007ea608", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x1, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001a40)=""/4060, 0xfffffffffffffec3}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x891a, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) 13.950177103s ago: executing program 4 (id=42160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 13.949397443s ago: executing program 1 (id=42169): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000000000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x3) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a204d8c71ef2685634a8270e7123c00"/30], 0xffdd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0000000b000000020005004000000042000000", @ANYRES32, @ANYBLOB="04000000000000000000", @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000040), 0x1006, r1, 0x0, 0xd88d02a0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a90402000000000000", 0x17}], 0x1}, 0x4090) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) 13.725432307s ago: executing program 2 (id=42161): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x4, &(0x7f00000004c0)=[{0x2d, 0x0, 0x2}, {0x15}, {}, {0x6}]}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x7, 0x2, 0x20}, 0x48) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f0000001a40)="1189cda35005d9e556"}, 0x20) ioctl$TUNSETIFINDEX(r1, 0x5450, 0x0) recvmsg$kcm(r4, &(0x7f0000000740)={&(0x7f0000000000)=@caif=@util, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000200)=""/10, 0xa}, {&(0x7f0000000240)=""/14, 0xe}, {0x0}, {&(0x7f0000000340)=""/120, 0x78}, {&(0x7f00000003c0)=""/72, 0x48}, {&(0x7f0000000500)=""/167, 0xa7}], 0x7, &(0x7f00000006c0)=""/109, 0x6d}, 0x40002000) 13.699046348s ago: executing program 1 (id=42162): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='+cpu'], 0x5) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xb, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 13.61839031s ago: executing program 1 (id=42163): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x2880, 0xc8, 0x1, 0x0, 0x2, 0x40000, 0x5, 0x0, 0x2, 0x0, 0x4cb8307c}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce22001b2f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(0x0, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 13.480714543s ago: executing program 2 (id=42164): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0x4000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) 13.480522833s ago: executing program 3 (id=42165): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNSETNOCSUM(r1, 0xb702, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) close(r0) 13.480315573s ago: executing program 4 (id=42166): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5aa, 0x1, @perf_bp={0x0}, 0x100410, 0x7fffffff, 0x9, 0x1, 0x9, 0xab, 0xfffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000001000000000000000000d669f8646f1cda", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x9, 0xfffff010}, {0x6, 0x0, 0x8, 0xfffffffc}]}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8941, &(0x7f0000000080)) 13.475134323s ago: executing program 1 (id=42176): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x7}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x7}, 0x10) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000001140)=""/224, 0x0, 0xe0, 0x0, 0x9}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa}, 0x94) 125.010396ms ago: executing program 32 (id=42136): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x4}, 0x38) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a11800152c280014", 0x1f}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) r1 = socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r2, 0x20, &(0x7f0000000400)={0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000780)=""/164, 0xa4}}, 0x10) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000380)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9edb1f8562b031338", 0xb}], 0x1}, 0x9c00) sendmsg$inet(r1, &(0x7f0000001d80)={&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000003280)=[{&(0x7f0000001dc0)="36e7cd52107c14433536a161b4dacb5fe7df9eac27b919694a3d97685c0013c0b4802ddc6f480fe6a05af150b4", 0x2d}], 0x1}, 0x400a0) 90.439337ms ago: executing program 1 (id=42168): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xf, 0x3, 0x2) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r2, 0x0, 0x10100) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120) 81.982098ms ago: executing program 2 (id=42170): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0x806, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1}, 0x0, 0x1, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000000)=r3, 0x11) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000000)=[{&(0x7f00000000c0)="140000002a000b0521b94d326792527204f8ab94", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000040)=r3, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 81.344107ms ago: executing program 3 (id=42171): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}], 0x1}, 0x4000000) recvmsg$kcm(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x2000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, 0x0, &(0x7f0000000700)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0x0, 0x0}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 74.442378ms ago: executing program 4 (id=42172): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80d1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000500)=0xae) syz_clone(0x108300000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x13bb711e) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 0s ago: executing program 3 (id=42173): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000002980), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x4080b000, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0) kernel console output (not intermixed with test programs): in process `syz.0.36095'. [ 1915.048092][T16849] netlink: 198236 bytes leftover after parsing attributes in process `syz.0.36100'. [ 1915.169661][T16859] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.36104'. [ 1915.188976][T16858] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.36103'. [ 1915.354571][T16871] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.36112'. [ 1915.482700][T16882] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.36117'. [ 1915.725683][T16897] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.36123'. [ 1918.124718][T16941] device syzkaller0 entered promiscuous mode [ 1918.508198][T16962] sctp: [Deprecated]: syz.4.36158 (pid 16962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1918.508198][T16962] Use struct sctp_sack_info instead [ 1921.002661][T17001] sctp: [Deprecated]: syz.2.36165 (pid 17001) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1921.002661][T17001] Use struct sctp_sack_info instead [ 1921.996291][T17047] validate_nla: 13 callbacks suppressed [ 1921.996359][T17047] netlink: 'syz.3.36187': attribute type 21 has an invalid length. [ 1922.021518][T17047] netlink: 132 bytes leftover after parsing attributes in process `syz.3.36187'. [ 1924.480087][T17097] netlink: 'syz.0.36220': attribute type 21 has an invalid length. [ 1924.501499][T17097] netlink: 132 bytes leftover after parsing attributes in process `syz.0.36220'. [ 1925.296579][T17120] device syzkaller0 entered promiscuous mode [ 1926.723034][T17146] netlink: 'syz.1.36231': attribute type 21 has an invalid length. [ 1926.769763][T17146] netlink: 132 bytes leftover after parsing attributes in process `syz.1.36231'. [ 1927.886793][T17159] netlink: 'syz.0.36245': attribute type 3 has an invalid length. [ 1927.923749][T17164] sctp: [Deprecated]: syz.3.36235 (pid 17164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1927.923749][T17164] Use struct sctp_sack_info instead [ 1927.968741][T17159] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.36245'. [ 1928.035950][T17158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1928.961862][T17167] device syzkaller0 entered promiscuous mode [ 1929.617505][T17182] netlink: 'syz.0.36243': attribute type 10 has an invalid length. [ 1929.643009][T17182] team0: Port device netdevsim3 added [ 1929.718595][T17186] netlink: 8221 bytes leftover after parsing attributes in process `syz.3.36246'. [ 1930.082246][T17197] device syzkaller0 entered promiscuous mode [ 1930.177830][T17211] -1: renamed from syzkaller0 [ 1930.672929][T17236] netlink: 'syz.4.36261': attribute type 3 has an invalid length. [ 1930.711039][T17236] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.36261'. [ 1930.817529][T17228] device syzkaller0 entered promiscuous mode [ 1930.843857][T17235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1930.917150][T17240] netlink: 8221 bytes leftover after parsing attributes in process `syz.2.36264'. [ 1931.303986][T17257] device syzkaller0 entered promiscuous mode [ 1931.328373][T17260] -1: renamed from syzkaller0 [ 1931.557481][T17274] netlink: 8221 bytes leftover after parsing attributes in process `syz.4.36279'. [ 1932.020458][T17288] device syzkaller0 entered promiscuous mode [ 1932.733033][T17312] device syzkaller0 entered promiscuous mode [ 1932.750488][T17316] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.36294'. [ 1933.067929][T17331] netlink: 'syz.3.36302': attribute type 10 has an invalid length. [ 1933.154596][T17331] team0: Port device netdevsim3 added [ 1934.562047][T17382] netlink: 'syz.1.36323': attribute type 10 has an invalid length. [ 1934.626123][T17382] team0: Port device netdevsim3 added [ 1934.727305][T17388] netlink: 'syz.0.36328': attribute type 21 has an invalid length. [ 1934.749440][T17388] netlink: 'syz.0.36328': attribute type 19 has an invalid length. [ 1934.794206][T17388] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.36328'. [ 1935.406411][T17403] netlink: 'syz.1.36332': attribute type 7 has an invalid length. [ 1935.461635][T17403] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.36332'. [ 1935.910060][T17421] sctp: [Deprecated]: syz.0.36341 (pid 17421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1935.910060][T17421] Use struct sctp_sack_info instead [ 1936.448434][T17450] sctp: [Deprecated]: syz.3.36356 (pid 17450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1936.448434][T17450] Use struct sctp_sack_info instead [ 1937.036049][T17477] netlink: 'syz.0.36368': attribute type 7 has an invalid length. [ 1937.072691][T17477] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.36368'. [ 1937.190029][T17481] sctp: [Deprecated]: syz.2.36370 (pid 17481) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1937.190029][T17481] Use struct sctp_sack_info instead [ 1938.084434][T17515] netlink: 'syz.3.36383': attribute type 7 has an invalid length. [ 1938.104004][T17515] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.36383'. [ 1938.580191][T17543] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.36406'. [ 1938.637181][T17543] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.36406'. [ 1939.362792][T17564] netlink: 'syz.4.36400': attribute type 7 has an invalid length. [ 1939.444516][T17564] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.36400'. [ 1939.657818][T17572] netlink: 'syz.2.36418': attribute type 7 has an invalid length. [ 1939.689497][T17572] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.36418'. [ 1940.271842][T17599] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.36421'. [ 1940.313296][T17599] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.36421'. [ 1941.738935][T17641] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.36436'. [ 1941.767521][T17641] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.36436'. [ 1943.577353][T17662] netlink: 60823 bytes leftover after parsing attributes in process `syz.4.36444'. [ 1943.635147][T17662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36444'. [ 1944.494812][T17696] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.36459'. [ 1944.555592][T17696] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1945.925678][T17710] netlink: 63719 bytes leftover after parsing attributes in process `syz.2.36462'. [ 1948.513581][T17768] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.36481'. [ 1948.592834][T17768] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1948.671654][T17772] netlink: 63719 bytes leftover after parsing attributes in process `syz.0.36480'. [ 1949.334630][T17798] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.36507'. [ 1949.464785][T17798] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1949.546780][T17803] netlink: 'syz.4.36497': attribute type 10 has an invalid length. [ 1949.575548][T17803] netlink: 40 bytes leftover after parsing attributes in process `syz.4.36497'. [ 1949.608285][T17803] device team0 entered promiscuous mode [ 1949.635485][T17803] device team_slave_0 entered promiscuous mode [ 1949.654720][T17803] device team_slave_1 entered promiscuous mode [ 1949.699013][T17803] bridge0: port 5(team0) entered blocking state [ 1949.708656][T17803] bridge0: port 5(team0) entered disabled state [ 1949.734179][T17803] bridge0: port 5(team0) entered blocking state [ 1949.740842][T17803] bridge0: port 5(team0) entered listening state [ 1951.726702][T17851] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.36515'. [ 1951.766575][T17851] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1951.811440][T17851] CPU: 1 PID: 17851 Comm: syz.2.36515 Not tainted syzkaller #0 [ 1951.819145][T17851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1951.829452][T17851] Call Trace: [ 1951.832773][T17851] [ 1951.835736][T17851] dump_stack_lvl+0x188/0x250 [ 1951.840451][T17851] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1951.846662][T17851] ? show_regs_print_info+0x20/0x20 [ 1951.851913][T17851] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1951.858130][T17851] sysfs_warn_dup+0x8a/0xa0 [ 1951.862768][T17851] sysfs_do_create_link_sd+0xc0/0x110 [ 1951.868190][T17851] device_add+0x83b/0x1050 [ 1951.872666][T17851] wiphy_register+0x1e74/0x2c40 [ 1951.877574][T17851] ? cfg80211_event_work+0x40/0x40 [ 1951.882725][T17851] ? minstrel_ht_alloc+0x807/0x980 [ 1951.887885][T17851] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1951.894012][T17851] ieee80211_register_hw+0x2a03/0x3a60 [ 1951.899526][T17851] ? ieee80211_register_hw+0xac1/0x3a60 [ 1951.905102][T17851] ? ieee80211_tasklet_handler+0x20/0x20 [ 1951.910766][T17851] ? rcu_is_watching+0x11/0xa0 [ 1951.915742][T17851] ? hrtimer_init+0x10c/0x220 [ 1951.920462][T17851] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1951.926240][T17851] hwsim_new_radio_nl+0xa7d/0xc50 [ 1951.931308][T17851] genl_rcv_msg+0xd0b/0xfa0 [ 1951.935863][T17851] ? genl_bind+0x370/0x370 [ 1951.940322][T17851] ? up_read+0x20/0x20 [ 1951.944431][T17851] ? vmacache_find+0x238/0x590 [ 1951.949310][T17851] ? verify_lock_unused+0x140/0x140 [ 1951.954538][T17851] ? verify_lock_unused+0x140/0x140 [ 1951.959851][T17851] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1951.965980][T17851] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1951.972169][T17851] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1951.978537][T17851] netlink_rcv_skb+0x1e9/0x430 [ 1951.983327][T17851] ? genl_bind+0x370/0x370 [ 1951.987774][T17851] ? netlink_ack+0xb10/0xb10 [ 1951.992398][T17851] ? down_read+0x1aa/0x2e0 [ 1951.996844][T17851] genl_rcv+0x24/0x40 [ 1952.000854][T17851] netlink_unicast+0x78f/0x940 [ 1952.005661][T17851] netlink_sendmsg+0x8ba/0xbe0 [ 1952.010544][T17851] ? netlink_getsockopt+0x570/0x570 [ 1952.015763][T17851] ? aa_sock_msg_perm+0x94/0x150 [ 1952.020716][T17851] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1952.026037][T17851] ? security_socket_sendmsg+0x7c/0xa0 [ 1952.031516][T17851] ? netlink_getsockopt+0x570/0x570 [ 1952.036741][T17851] ____sys_sendmsg+0x5be/0x8f0 [ 1952.041666][T17851] ? __sys_sendmsg_sock+0x30/0x30 [ 1952.046737][T17851] ? import_iovec+0x6f/0xa0 [ 1952.051268][T17851] ___sys_sendmsg+0x236/0x2e0 [ 1952.055974][T17851] ? __sys_sendmsg+0x290/0x290 [ 1952.060792][T17851] __se_sys_sendmsg+0x1b7/0x2a0 [ 1952.065676][T17851] ? __x64_sys_sendmsg+0x80/0x80 [ 1952.070760][T17851] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1952.076779][T17851] ? lockdep_hardirqs_on+0x94/0x140 [ 1952.082009][T17851] do_syscall_64+0x4c/0xa0 [ 1952.086471][T17851] ? clear_bhb_loop+0x30/0x80 [ 1952.091182][T17851] ? clear_bhb_loop+0x30/0x80 [ 1952.095879][T17851] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1952.101804][T17851] RIP: 0033:0x7f8c9b7f2e59 [ 1952.106237][T17851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1952.125873][T17851] RSP: 002b:00007f8c99a4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1952.134313][T17851] RAX: ffffffffffffffda RBX: 00007f8c9ba7afa0 RCX: 00007f8c9b7f2e59 [ 1952.142308][T17851] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1952.150471][T17851] RBP: 00007f8c9b888e6f R08: 0000000000000000 R09: 0000000000000000 [ 1952.158480][T17851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1952.166481][T17851] R13: 00007f8c9ba7b038 R14: 00007f8c9ba7afa0 R15: 00007fff3325d648 [ 1952.174499][T17851] [ 1953.877025][T17879] netlink: 2639 bytes leftover after parsing attributes in process `syz.2.36530'. [ 1953.929259][T17881] netlink: 'syz.0.36531': attribute type 10 has an invalid length. [ 1953.976215][T17881] netlink: 40 bytes leftover after parsing attributes in process `syz.0.36531'. [ 1954.025818][T17881] device team0 entered promiscuous mode [ 1954.052605][T17881] device team_slave_0 entered promiscuous mode [ 1954.095467][T17881] device team_slave_1 entered promiscuous mode [ 1954.114708][T17881] device netdevsim3 entered promiscuous mode [ 1954.168830][T17881] bridge0: port 5(team0) entered blocking state [ 1954.204237][T17881] bridge0: port 5(team0) entered disabled state [ 1954.364207][T17881] bridge0: port 5(team0) entered blocking state [ 1954.371006][T17881] bridge0: port 5(team0) entered forwarding state [ 1955.368522][T17919] netlink: 2639 bytes leftover after parsing attributes in process `syz.0.36544'. [ 1955.399765][T17916] netlink: 'syz.1.36547': attribute type 10 has an invalid length. [ 1955.432058][T17916] netlink: 40 bytes leftover after parsing attributes in process `syz.1.36547'. [ 1955.470799][T17916] device team0 entered promiscuous mode [ 1955.480506][T17916] device team_slave_0 entered promiscuous mode [ 1955.500172][T17916] device team_slave_1 entered promiscuous mode [ 1955.509688][T17916] device netdevsim3 entered promiscuous mode [ 1955.530688][T17916] bridge0: port 4(team0) entered blocking state [ 1955.547926][T17916] bridge0: port 4(team0) entered disabled state [ 1955.709244][T17916] bridge0: port 4(team0) entered blocking state [ 1955.716120][T17916] bridge0: port 4(team0) entered forwarding state [ 1955.889726][T17933] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.36554'. [ 1955.976435][T17933] netlink: 16770 bytes leftover after parsing attributes in process `syz.0.36554'. [ 1955.996921][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36554'. [ 1956.906954][T17965] netlink: 2639 bytes leftover after parsing attributes in process `syz.4.36564'. [ 1956.918912][T17963] netlink: 'syz.2.36565': attribute type 10 has an invalid length. [ 1956.951645][T17963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.36565'. [ 1960.459960][T17989] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.36571'. [ 1960.539621][T17989] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1960.580660][T17989] CPU: 1 PID: 17989 Comm: syz.0.36571 Not tainted syzkaller #0 [ 1960.588287][T17989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1960.598485][T17989] Call Trace: [ 1960.601806][T17989] [ 1960.604766][T17989] dump_stack_lvl+0x188/0x250 [ 1960.609491][T17989] ? show_regs_print_info+0x20/0x20 [ 1960.614747][T17989] ? load_image+0x410/0x410 [ 1960.619343][T17989] sysfs_warn_dup+0x8a/0xa0 [ 1960.623884][T17989] sysfs_do_create_link_sd+0xc0/0x110 [ 1960.629324][T17989] device_add+0x83b/0x1050 [ 1960.633782][T17989] wiphy_register+0x1e74/0x2c40 [ 1960.638668][T17989] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1960.644446][T17989] ? cfg80211_event_work+0x40/0x40 [ 1960.649602][T17989] ? _dev_printk+0x1/0x180 [ 1960.654113][T17989] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1960.660197][T17989] ieee80211_register_hw+0x2a03/0x3a60 [ 1960.665681][T17989] ? ieee80211_register_hw+0xac1/0x3a60 [ 1960.671406][T17989] ? ieee80211_tasklet_handler+0x20/0x20 [ 1960.677068][T17989] ? rcu_is_watching+0x11/0xa0 [ 1960.681898][T17989] ? hrtimer_init+0x10c/0x220 [ 1960.686632][T17989] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1960.692433][T17989] hwsim_new_radio_nl+0xa7d/0xc50 [ 1960.697524][T17989] genl_rcv_msg+0xd0b/0xfa0 [ 1960.702247][T17989] ? genl_bind+0x370/0x370 [ 1960.706723][T17989] ? __dev_queue_xmit+0x1b64/0x2e50 [ 1960.712244][T17989] ? verify_lock_unused+0x140/0x140 [ 1960.717506][T17989] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1960.723902][T17989] netlink_rcv_skb+0x1e9/0x430 [ 1960.728718][T17989] ? genl_bind+0x370/0x370 [ 1960.733179][T17989] ? netlink_ack+0xb10/0xb10 [ 1960.737823][T17989] ? down_read+0x1aa/0x2e0 [ 1960.742294][T17989] genl_rcv+0x24/0x40 [ 1960.746323][T17989] netlink_unicast+0x78f/0x940 [ 1960.751145][T17989] netlink_sendmsg+0x8ba/0xbe0 [ 1960.755971][T17989] ? netlink_getsockopt+0x570/0x570 [ 1960.761222][T17989] ? aa_sock_msg_perm+0x94/0x150 [ 1960.766235][T17989] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1960.771590][T17989] ? security_socket_sendmsg+0x7c/0xa0 [ 1960.777099][T17989] ? netlink_getsockopt+0x570/0x570 [ 1960.782343][T17989] ____sys_sendmsg+0x5be/0x8f0 [ 1960.787160][T17989] ? __sys_sendmsg_sock+0x30/0x30 [ 1960.792240][T17989] ? import_iovec+0x6f/0xa0 [ 1960.796824][T17989] ___sys_sendmsg+0x236/0x2e0 [ 1960.801556][T17989] ? __sys_sendmsg+0x290/0x290 [ 1960.806369][T17989] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1960.812757][T17989] __se_sys_sendmsg+0x1b7/0x2a0 [ 1960.817664][T17989] ? __x64_sys_sendmsg+0x80/0x80 [ 1960.822642][T17989] ? lockdep_hardirqs_on+0x94/0x140 [ 1960.827900][T17989] do_syscall_64+0x4c/0xa0 [ 1960.832358][T17989] ? clear_bhb_loop+0x30/0x80 [ 1960.837093][T17989] ? clear_bhb_loop+0x30/0x80 [ 1960.841814][T17989] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1960.847757][T17989] RIP: 0033:0x7fc28a562e59 [ 1960.852215][T17989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1960.871877][T17989] RSP: 002b:00007fc2887bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1960.880338][T17989] RAX: ffffffffffffffda RBX: 00007fc28a7eafa0 RCX: 00007fc28a562e59 [ 1960.888338][T17989] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1960.896335][T17989] RBP: 00007fc28a5f8e6f R08: 0000000000000000 R09: 0000000000000000 [ 1960.904331][T17989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1960.912497][T17989] R13: 00007fc28a7eb038 R14: 00007fc28a7eafa0 R15: 00007ffe30875ee8 [ 1960.920504][T17989] [ 1964.094487][T18012] netlink: 'syz.3.36579': attribute type 10 has an invalid length. [ 1964.143276][T18012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.36579'. [ 1964.174748][T18012] device team0 entered promiscuous mode [ 1964.194346][T18012] device team_slave_0 entered promiscuous mode [ 1964.230502][T18012] device team_slave_1 entered promiscuous mode [ 1964.244812][T18012] device netdevsim3 entered promiscuous mode [ 1964.272951][T18023] netlink: 'syz.4.36585': attribute type 1 has an invalid length. [ 1964.291056][T18012] bridge0: port 4(team0) entered blocking state [ 1964.291191][T18023] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.36585'. [ 1964.338288][T18012] bridge0: port 4(team0) entered disabled state [ 1964.369022][T18012] bridge0: port 4(team0) entered blocking state [ 1964.375682][T18012] bridge0: port 4(team0) entered forwarding state [ 1964.483360][T18035] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.36590'. [ 1964.578794][T18039] netlink: 'syz.2.36593': attribute type 2 has an invalid length. [ 1964.592138][T18038] device bridge0 entered promiscuous mode [ 1964.625953][T18039] netlink: 'syz.2.36593': attribute type 1 has an invalid length. [ 1964.650489][T18039] netlink: 'syz.2.36593': attribute type 1 has an invalid length. [ 1964.681079][T18039] netlink: 'syz.2.36593': attribute type 11 has an invalid length. [ 1964.692549][T18039] netlink: 198172 bytes leftover after parsing attributes in process `syz.2.36593'. [ 1964.729804][T18047] netlink: 'syz.0.36596': attribute type 21 has an invalid length. [ 1964.759880][T18047] netlink: 'syz.0.36596': attribute type 10 has an invalid length. [ 1964.781023][T18047] netlink: 'syz.0.36596': attribute type 12 has an invalid length. [ 1964.799270][T18047] netlink: 'syz.0.36596': attribute type 13 has an invalid length. [ 1964.807946][T18047] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.36596'. [ 1965.061265][ C0] bridge0: port 5(team0) entered learning state [ 1965.213140][T18062] netlink: 40 bytes leftover after parsing attributes in process `syz.0.36604'. [ 1969.186082][T18102] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.36632'. [ 1972.764607][T18132] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.36644'. [ 1973.231576][T18149] device syzkaller0 entered promiscuous mode [ 1973.503295][T18160] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.36648'. [ 1974.004549][T18177] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.36653'. [ 1974.685551][T18193] netlink: 123072 bytes leftover after parsing attributes in process `syz.2.36658'. [ 1974.758703][T18197] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.36660'. [ 1974.984797][T18205] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.36667'. [ 1975.005421][T18210] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.36676'. [ 1975.950280][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.956800][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.427409][T18232] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.36673'. [ 1977.569893][T18237] netlink: 132 bytes leftover after parsing attributes in process `syz.2.36678'. [ 1977.723965][T18241] netlink: 60 bytes leftover after parsing attributes in process `syz.0.36680'. [ 1978.188336][T18257] validate_nla: 7 callbacks suppressed [ 1978.188433][T18257] netlink: 'syz.0.36688': attribute type 10 has an invalid length. [ 1978.247013][T18257] netlink: 40 bytes leftover after parsing attributes in process `syz.0.36688'. [ 1978.534621][T18265] netlink: 'syz.0.36691': attribute type 4 has an invalid length. [ 1978.591420][T18265] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.36691'. [ 1979.307334][T18291] netlink: 'syz.1.36701': attribute type 10 has an invalid length. [ 1979.321503][T18291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.36701'. [ 1979.706118][T18308] __nla_validate_parse: 1 callbacks suppressed [ 1979.706158][T18308] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.36710'. [ 1980.417793][T18325] device syzkaller0 entered promiscuous mode [ 1980.423927][ C0] bridge0: port 5(team0) entered forwarding state [ 1980.424001][ C0] bridge0: topology change detected, propagating [ 1980.508388][T18329] netlink: 'syz.0.36719': attribute type 10 has an invalid length. [ 1980.527252][T18329] netlink: 40 bytes leftover after parsing attributes in process `syz.0.36719'. [ 1980.638592][T18333] device syzkaller0 entered promiscuous mode [ 1980.756648][T18348] netlink: 'syz.0.36735': attribute type 10 has an invalid length. [ 1980.771315][T18348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.36735'. [ 1980.912834][T18353] netlink: 'syz.0.36726': attribute type 1 has an invalid length. [ 1980.920740][T18353] netlink: 'syz.0.36726': attribute type 4 has an invalid length. [ 1981.001028][T18353] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.36726'. [ 1981.134106][T18362] netlink: 208644 bytes leftover after parsing attributes in process `syz.4.36729'. [ 1981.181286][T18362] netlink: 'syz.4.36729': attribute type 1 has an invalid length. [ 1981.506236][T18376] netlink: 'syz.1.36737': attribute type 4 has an invalid length. [ 1981.554619][T18376] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.36737'. [ 1982.019729][T18388] netlink: 'syz.1.36742': attribute type 4 has an invalid length. [ 1982.033595][T18388] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.36742'. [ 1983.490331][T18378] netlink: 'syz.4.36738': attribute type 10 has an invalid length. [ 1983.498923][T18378] netlink: 40 bytes leftover after parsing attributes in process `syz.4.36738'. [ 1983.626144][T18392] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.36743'. [ 1983.815230][T18408] netlink: 'syz.4.36750': attribute type 4 has an invalid length. [ 1983.867496][T18408] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.36750'. [ 1983.950967][T18415] netlink: 'syz.0.36755': attribute type 3 has an invalid length. [ 1984.008223][T18417] netlink: 'syz.0.36755': attribute type 3 has an invalid length. [ 1984.077077][T18421] netlink: 'syz.4.36757': attribute type 10 has an invalid length. [ 1984.299646][T18426] netlink: 'syz.4.36759': attribute type 1 has an invalid length. [ 1984.376689][T18426] netlink: 'syz.4.36759': attribute type 4 has an invalid length. [ 1984.674400][T18428] device syzkaller0 entered promiscuous mode [ 1986.455058][T18450] __nla_validate_parse: 4 callbacks suppressed [ 1986.455076][T18450] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.36769'. [ 1986.910143][T18470] device syzkaller0 entered promiscuous mode [ 1987.547021][T18506] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.36791'. [ 1988.246648][T18530] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.36801'. [ 1988.317553][T18528] netlink: 'syz.0.36800': attribute type 29 has an invalid length. [ 1988.327367][T18528] netlink: 'syz.0.36800': attribute type 29 has an invalid length. [ 1988.362005][T18531] netlink: 'syz.0.36800': attribute type 29 has an invalid length. [ 1988.708591][T18547] device syzkaller0 entered promiscuous mode [ 1988.995351][T18562] netlink: 63579 bytes leftover after parsing attributes in process `syz.2.36813'. [ 1989.373950][T18569] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.36817'. [ 1989.942108][T18584] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.36833'. [ 1990.135178][T18594] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.36829'. [ 1990.278462][T18602] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.36832'. [ 1990.359421][T18605] netlink: 'syz.4.36835': attribute type 15 has an invalid length. [ 1990.382113][T18605] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.36835'. [ 1990.647572][T18619] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.36841'. [ 1991.380462][T18648] netlink: 'syz.2.36853': attribute type 1 has an invalid length. [ 1991.534904][T18655] netlink: 'syz.0.36856': attribute type 15 has an invalid length. [ 1991.557769][T18655] __nla_validate_parse: 3 callbacks suppressed [ 1991.557802][T18655] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.36856'. [ 1991.675086][T18657] netlink: 'syz.1.36857': attribute type 3 has an invalid length. [ 1991.713755][T18657] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.36857'. [ 1991.900141][T18671] netlink: 'syz.1.36872': attribute type 15 has an invalid length. [ 1991.929810][T18671] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.36872'. [ 1992.217044][T18683] netlink: 'syz.2.36867': attribute type 1 has an invalid length. [ 1992.271642][T18683] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.36867'. [ 1993.829043][T18720] netlink: 'syz.2.36881': attribute type 29 has an invalid length. [ 1993.878352][T18720] netlink: 'syz.2.36881': attribute type 29 has an invalid length. [ 1993.935082][T18722] netlink: 'syz.2.36881': attribute type 29 has an invalid length. [ 1994.284003][T18743] netlink: 'syz.4.36891': attribute type 1 has an invalid length. [ 1994.307023][T18743] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.36891'. [ 1994.331416][T18747] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.36904'. [ 1994.361052][T18745] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.36893'. [ 1996.156723][T18787] validate_nla: 1 callbacks suppressed [ 1996.156742][T18787] netlink: 'syz.3.36903': attribute type 29 has an invalid length. [ 1996.272520][T18787] netlink: 'syz.3.36903': attribute type 29 has an invalid length. [ 1996.351336][T18786] netlink: 'syz.3.36903': attribute type 29 has an invalid length. [ 1996.605841][T18791] netlink: 'syz.3.36907': attribute type 3 has an invalid length. [ 1996.637735][T18791] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.36907'. [ 1997.487280][T18833] netlink: 'syz.2.36929': attribute type 3 has an invalid length. [ 1997.527867][T18833] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.36929'. [ 1997.705201][T18841] device syzkaller0 entered promiscuous mode [ 1999.023979][T18875] netlink: 'syz.4.36944': attribute type 1 has an invalid length. [ 1999.053966][T18875] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.36944'. [ 1999.180020][T18883] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.36946'. [ 1999.200656][T18880] netlink: 'syz.0.36958': attribute type 1 has an invalid length. [ 1999.301176][T18880] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.36958'. [ 1999.594547][T18895] netlink: 'syz.1.36953': attribute type 1 has an invalid length. [ 1999.647267][T18895] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.36953'. [ 2000.245950][T18918] netlink: 'syz.1.36963': attribute type 1 has an invalid length. [ 2000.280311][T18918] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.36963'. [ 2000.512251][T18927] netlink: 'syz.0.36968': attribute type 1 has an invalid length. [ 2000.534938][T18927] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.36968'. [ 2001.679600][T18955] netlink: 'syz.3.36976': attribute type 1 has an invalid length. [ 2001.698813][T18955] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.36976'. [ 2001.904129][T18958] netlink: 'syz.4.36979': attribute type 29 has an invalid length. [ 2001.950245][T18958] netlink: 'syz.4.36979': attribute type 29 has an invalid length. [ 2001.985715][T18965] netlink: 'syz.4.36979': attribute type 29 has an invalid length. [ 2002.400022][T18979] netlink: 'syz.1.36998': attribute type 29 has an invalid length. [ 2002.449155][T18979] netlink: 'syz.1.36998': attribute type 29 has an invalid length. [ 2002.577939][T18976] netlink: 'syz.1.36998': attribute type 29 has an invalid length. [ 2002.625117][T18982] netlink: 'syz.4.36989': attribute type 12 has an invalid length. [ 2002.661238][T18982] netlink: 'syz.4.36989': attribute type 11 has an invalid length. [ 2002.679784][T18982] netlink: 188816 bytes leftover after parsing attributes in process `syz.4.36989'. [ 2002.936225][T18993] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.36996'. [ 2003.708246][T19008] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.37002'. [ 2005.045584][T19049] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.37020'. [ 2005.207023][T19056] netlink: 'syz.3.37024': attribute type 11 has an invalid length. [ 2005.265244][T19056] netlink: 'syz.3.37024': attribute type 1 has an invalid length. [ 2005.287211][T19056] netlink: 198236 bytes leftover after parsing attributes in process `syz.3.37024'. [ 2007.196657][T19068] validate_nla: 1 callbacks suppressed [ 2007.196694][T19068] netlink: 'syz.1.37027': attribute type 12 has an invalid length. [ 2007.302693][T19068] netlink: 'syz.1.37027': attribute type 11 has an invalid length. [ 2007.332185][T19068] netlink: 188816 bytes leftover after parsing attributes in process `syz.1.37027'. [ 2008.128255][T19089] netlink: 164 bytes leftover after parsing attributes in process `syz.2.37035'. [ 2008.228987][T19093] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.37037'. [ 2008.278568][T19098] netlink: 'syz.2.37039': attribute type 1 has an invalid length. [ 2008.286596][T19093] netlink: 'syz.4.37037': attribute type 1 has an invalid length. [ 2008.286633][T19093] netlink: 'syz.4.37037': attribute type 2 has an invalid length. [ 2008.323578][T19093] netlink: 'syz.4.37037': attribute type 3 has an invalid length. [ 2008.332091][T19093] netlink: 'syz.4.37037': attribute type 4 has an invalid length. [ 2008.350667][T19098] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.37039'. [ 2008.351589][T19093] netlink: 44 bytes leftover after parsing attributes in process `syz.4.37037'. [ 2008.461620][T19103] device syzkaller0 entered promiscuous mode [ 2008.522277][T19109] netlink: 'syz.2.37042': attribute type 12 has an invalid length. [ 2008.545688][T19109] netlink: 'syz.2.37042': attribute type 11 has an invalid length. [ 2008.555439][T19109] netlink: 188816 bytes leftover after parsing attributes in process `syz.2.37042'. [ 2008.575957][T19110] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.37043'. [ 2008.945209][T19110] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2008.972600][T19110] CPU: 1 PID: 19110 Comm: syz.0.37043 Not tainted syzkaller #0 [ 2008.980216][T19110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2008.990308][T19110] Call Trace: [ 2008.993766][T19110] [ 2008.996732][T19110] dump_stack_lvl+0x188/0x250 [ 2009.001444][T19110] ? show_regs_print_info+0x20/0x20 [ 2009.006717][T19110] ? load_image+0x410/0x410 [ 2009.011297][T19110] sysfs_warn_dup+0x8a/0xa0 [ 2009.015840][T19110] sysfs_do_create_link_sd+0xc0/0x110 [ 2009.021923][T19110] device_add+0x83b/0x1050 [ 2009.026369][T19110] wiphy_register+0x1e74/0x2c40 [ 2009.031267][T19110] ? cfg80211_event_work+0x40/0x40 [ 2009.036428][T19110] ? minstrel_ht_alloc+0x807/0x980 [ 2009.041593][T19110] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2009.047721][T19110] ieee80211_register_hw+0x2a03/0x3a60 [ 2009.053231][T19110] ? ieee80211_register_hw+0xac1/0x3a60 [ 2009.058822][T19110] ? ieee80211_tasklet_handler+0x20/0x20 [ 2009.064490][T19110] ? rcu_is_watching+0x11/0xa0 [ 2009.069275][T19110] ? hrtimer_init+0x10c/0x220 [ 2009.073973][T19110] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2009.079718][T19110] hwsim_new_radio_nl+0xa7d/0xc50 [ 2009.084779][T19110] genl_rcv_msg+0xd0b/0xfa0 [ 2009.089342][T19110] ? genl_bind+0x370/0x370 [ 2009.093922][T19110] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2009.099162][T19110] ? verify_lock_unused+0x140/0x140 [ 2009.104403][T19110] ? dev_queue_xmit+0x20/0x20 [ 2009.109105][T19110] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2009.115681][T19110] netlink_rcv_skb+0x1e9/0x430 [ 2009.120474][T19110] ? genl_bind+0x370/0x370 [ 2009.125032][T19110] ? netlink_ack+0xb10/0xb10 [ 2009.129653][T19110] ? down_read+0x1aa/0x2e0 [ 2009.134124][T19110] genl_rcv+0x24/0x40 [ 2009.138142][T19110] netlink_unicast+0x78f/0x940 [ 2009.143021][T19110] netlink_sendmsg+0x8ba/0xbe0 [ 2009.147838][T19110] ? netlink_getsockopt+0x570/0x570 [ 2009.153176][T19110] ? netlink_getsockopt+0x570/0x570 [ 2009.158431][T19110] ____sys_sendmsg+0x5be/0x8f0 [ 2009.163216][T19110] ? __sys_sendmsg_sock+0x30/0x30 [ 2009.168258][T19110] ? import_iovec+0x6f/0xa0 [ 2009.172791][T19110] ___sys_sendmsg+0x236/0x2e0 [ 2009.177495][T19110] ? __sys_sendmsg+0x290/0x290 [ 2009.182295][T19110] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2009.188612][T19110] __se_sys_sendmsg+0x1b7/0x2a0 [ 2009.193519][T19110] ? __x64_sys_sendmsg+0x80/0x80 [ 2009.198487][T19110] ? lockdep_hardirqs_on+0x94/0x140 [ 2009.204101][T19110] do_syscall_64+0x4c/0xa0 [ 2009.208556][T19110] ? clear_bhb_loop+0x30/0x80 [ 2009.213358][T19110] ? clear_bhb_loop+0x30/0x80 [ 2009.218066][T19110] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2009.223990][T19110] RIP: 0033:0x7fc28a562e59 [ 2009.228414][T19110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2009.248128][T19110] RSP: 002b:00007fc2887bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2009.256677][T19110] RAX: ffffffffffffffda RBX: 00007fc28a7eafa0 RCX: 00007fc28a562e59 [ 2009.264702][T19110] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2009.272827][T19110] RBP: 00007fc28a5f8e6f R08: 0000000000000000 R09: 0000000000000000 [ 2009.280819][T19110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2009.288822][T19110] R13: 00007fc28a7eb038 R14: 00007fc28a7eafa0 R15: 00007ffe30875ee8 [ 2009.296861][T19110] [ 2009.877462][T19142] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.37056'. [ 2009.952654][T19142] netlink: 'syz.3.37056': attribute type 1 has an invalid length. [ 2010.007976][T19142] netlink: 'syz.3.37056': attribute type 2 has an invalid length. [ 2010.061254][T19142] netlink: 'syz.3.37056': attribute type 3 has an invalid length. [ 2010.105622][T19142] netlink: 44 bytes leftover after parsing attributes in process `syz.3.37056'. [ 2010.418006][T19160] netlink: 63743 bytes leftover after parsing attributes in process `syz.4.37063'. [ 2010.506467][T19163] netlink: 'syz.3.37065': attribute type 11 has an invalid length. [ 2011.057424][T19190] device netdevsim0 entered promiscuous mode [ 2012.497566][T19241] validate_nla: 5 callbacks suppressed [ 2012.497608][T19241] netlink: 'syz.4.37102': attribute type 10 has an invalid length. [ 2012.553936][T19241] device netdevsim0 entered promiscuous mode [ 2013.057193][T19259] __nla_validate_parse: 3 callbacks suppressed [ 2013.057228][T19259] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.37110'. [ 2015.359185][T19283] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.37120'. [ 2015.853212][T19293] device syzkaller0 entered promiscuous mode [ 2016.670971][T19308] netlink: 'syz.1.37130': attribute type 10 has an invalid length. [ 2016.678950][T19308] device netdevsim0 entered promiscuous mode [ 2017.068688][T19320] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.37135'. [ 2017.106464][T19324] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.37136'. [ 2017.515299][T19340] netlink: 'syz.2.37144': attribute type 10 has an invalid length. [ 2017.626333][T19348] netlink: 'syz.1.37147': attribute type 9 has an invalid length. [ 2017.664801][T19348] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.37147'. [ 2018.255473][T19350] netlink: 'syz.1.37147': attribute type 9 has an invalid length. [ 2018.271842][T19350] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.37147'. [ 2018.590728][T19374] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.37151'. [ 2018.763553][T19380] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.37156'. [ 2019.215749][T19397] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.37164'. [ 2019.470639][T19397] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2019.495136][T19397] CPU: 0 PID: 19397 Comm: syz.1.37164 Not tainted syzkaller #0 [ 2019.502759][T19397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2019.512852][T19397] Call Trace: [ 2019.516179][T19397] [ 2019.519142][T19397] dump_stack_lvl+0x188/0x250 [ 2019.523928][T19397] ? show_regs_print_info+0x20/0x20 [ 2019.529175][T19397] ? load_image+0x410/0x410 [ 2019.533735][T19397] sysfs_warn_dup+0x8a/0xa0 [ 2019.538279][T19397] sysfs_do_create_link_sd+0xc0/0x110 [ 2019.543693][T19397] device_add+0x83b/0x1050 [ 2019.548157][T19397] wiphy_register+0x1e74/0x2c40 [ 2019.553068][T19397] ? cfg80211_event_work+0x40/0x40 [ 2019.558213][T19397] ? minstrel_ht_alloc+0x807/0x980 [ 2019.563453][T19397] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2019.569572][T19397] ieee80211_register_hw+0x2a03/0x3a60 [ 2019.575337][T19397] ? ieee80211_register_hw+0xac1/0x3a60 [ 2019.580931][T19397] ? ieee80211_tasklet_handler+0x20/0x20 [ 2019.586789][T19397] ? rcu_is_watching+0x11/0xa0 [ 2019.591594][T19397] ? hrtimer_init+0x10c/0x220 [ 2019.596312][T19397] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2019.602179][T19397] hwsim_new_radio_nl+0xa7d/0xc50 [ 2019.607268][T19397] genl_rcv_msg+0xd0b/0xfa0 [ 2019.611824][T19397] ? genl_bind+0x370/0x370 [ 2019.616289][T19397] ? mark_lock+0x94/0x320 [ 2019.620658][T19397] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2019.626686][T19397] ? lock_chain_count+0x20/0x20 [ 2019.631580][T19397] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2019.637771][T19397] ? lockdep_hardirqs_on+0x94/0x140 [ 2019.643016][T19397] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2019.649391][T19397] ? netlink_rcv_skb+0x1c8/0x430 [ 2019.654379][T19397] netlink_rcv_skb+0x1e9/0x430 [ 2019.659190][T19397] ? genl_bind+0x370/0x370 [ 2019.663661][T19397] ? netlink_ack+0xb10/0xb10 [ 2019.668304][T19397] ? down_read+0x1aa/0x2e0 [ 2019.672765][T19397] genl_rcv+0x24/0x40 [ 2019.676899][T19397] netlink_unicast+0x78f/0x940 [ 2019.681890][T19397] netlink_sendmsg+0x8ba/0xbe0 [ 2019.686814][T19397] ? netlink_getsockopt+0x570/0x570 [ 2019.692342][T19397] ? aa_sock_msg_perm+0x94/0x150 [ 2019.697330][T19397] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2019.702657][T19397] ? security_socket_sendmsg+0x7c/0xa0 [ 2019.708166][T19397] ? netlink_getsockopt+0x570/0x570 [ 2019.713422][T19397] ____sys_sendmsg+0x5be/0x8f0 [ 2019.718295][T19397] ? __sys_sendmsg_sock+0x30/0x30 [ 2019.723378][T19397] ? import_iovec+0x6f/0xa0 [ 2019.727931][T19397] ___sys_sendmsg+0x236/0x2e0 [ 2019.732658][T19397] ? __sys_sendmsg+0x290/0x290 [ 2019.737474][T19397] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2019.743328][T19397] __se_sys_sendmsg+0x1b7/0x2a0 [ 2019.748231][T19397] ? __x64_sys_sendmsg+0x80/0x80 [ 2019.753218][T19397] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2019.759159][T19397] do_syscall_64+0x4c/0xa0 [ 2019.763619][T19397] ? clear_bhb_loop+0x30/0x80 [ 2019.768327][T19397] ? clear_bhb_loop+0x30/0x80 [ 2019.773172][T19397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2019.779111][T19397] RIP: 0033:0x7f21df21fe59 [ 2019.783563][T19397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2019.803291][T19397] RSP: 002b:00007f21dd478028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2019.811748][T19397] RAX: ffffffffffffffda RBX: 00007f21df4a7fa0 RCX: 00007f21df21fe59 [ 2019.819759][T19397] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2019.827771][T19397] RBP: 00007f21df2b5e6f R08: 0000000000000000 R09: 0000000000000000 [ 2019.835781][T19397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2019.843794][T19397] R13: 00007f21df4a8038 R14: 00007f21df4a7fa0 R15: 00007ffc268afd28 [ 2019.851835][T19397] [ 2020.200125][T19409] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.37169'. [ 2020.470427][T19421] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.37172'. [ 2023.926476][T19434] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.37179'. [ 2023.966559][T19434] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2024.003748][T19434] CPU: 1 PID: 19434 Comm: syz.4.37179 Not tainted syzkaller #0 [ 2024.011369][T19434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2024.021464][T19434] Call Trace: [ 2024.024775][T19434] [ 2024.027733][T19434] dump_stack_lvl+0x188/0x250 [ 2024.032643][T19434] ? show_regs_print_info+0x20/0x20 [ 2024.037882][T19434] ? load_image+0x410/0x410 [ 2024.042446][T19434] sysfs_warn_dup+0x8a/0xa0 [ 2024.046976][T19434] sysfs_do_create_link_sd+0xc0/0x110 [ 2024.052387][T19434] device_add+0x83b/0x1050 [ 2024.056849][T19434] wiphy_register+0x1e74/0x2c40 [ 2024.061727][T19434] ? __rtnl_unlock+0xa/0xa0 [ 2024.066302][T19434] ? cfg80211_event_work+0x40/0x40 [ 2024.071457][T19434] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2024.077560][T19434] ieee80211_register_hw+0x2a03/0x3a60 [ 2024.083146][T19434] ? ieee80211_register_hw+0xac1/0x3a60 [ 2024.088733][T19434] ? ieee80211_tasklet_handler+0x20/0x20 [ 2024.094408][T19434] ? rcu_is_watching+0x11/0xa0 [ 2024.099206][T19434] ? hrtimer_init+0x10c/0x220 [ 2024.103926][T19434] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2024.109718][T19434] hwsim_new_radio_nl+0xa7d/0xc50 [ 2024.114785][T19434] genl_rcv_msg+0xd0b/0xfa0 [ 2024.119337][T19434] ? genl_bind+0x370/0x370 [ 2024.123780][T19434] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 2024.129743][T19434] ? verify_lock_unused+0x140/0x140 [ 2024.135008][T19434] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 2024.141650][T19434] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2024.148037][T19434] netlink_rcv_skb+0x1e9/0x430 [ 2024.152832][T19434] ? genl_bind+0x370/0x370 [ 2024.157280][T19434] ? netlink_ack+0xb10/0xb10 [ 2024.161924][T19434] ? down_read+0x1aa/0x2e0 [ 2024.166391][T19434] genl_rcv+0x24/0x40 [ 2024.170437][T19434] netlink_unicast+0x78f/0x940 [ 2024.175249][T19434] netlink_sendmsg+0x8ba/0xbe0 [ 2024.180059][T19434] ? netlink_getsockopt+0x570/0x570 [ 2024.185294][T19434] ? aa_sock_msg_perm+0x94/0x150 [ 2024.190262][T19434] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2024.195577][T19434] ? security_socket_sendmsg+0x7c/0xa0 [ 2024.201065][T19434] ? netlink_getsockopt+0x570/0x570 [ 2024.206303][T19434] ____sys_sendmsg+0x5be/0x8f0 [ 2024.211110][T19434] ? __sys_sendmsg_sock+0x30/0x30 [ 2024.216173][T19434] ? import_iovec+0x6f/0xa0 [ 2024.220814][T19434] ___sys_sendmsg+0x236/0x2e0 [ 2024.225560][T19434] ? __sys_sendmsg+0x290/0x290 [ 2024.230387][T19434] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2024.236164][T19434] __se_sys_sendmsg+0x1b7/0x2a0 [ 2024.241068][T19434] ? __x64_sys_sendmsg+0x80/0x80 [ 2024.246058][T19434] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2024.251994][T19434] do_syscall_64+0x4c/0xa0 [ 2024.256442][T19434] ? clear_bhb_loop+0x30/0x80 [ 2024.261149][T19434] ? clear_bhb_loop+0x30/0x80 [ 2024.265877][T19434] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2024.271813][T19434] RIP: 0033:0x7f4822540e59 [ 2024.276523][T19434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2024.296244][T19434] RSP: 002b:00007f4820799028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2024.304688][T19434] RAX: ffffffffffffffda RBX: 00007f48227c8fa0 RCX: 00007f4822540e59 [ 2024.312721][T19434] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2024.320808][T19434] RBP: 00007f48225d6e6f R08: 0000000000000000 R09: 0000000000000000 [ 2024.328848][T19434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2024.336843][T19434] R13: 00007f48227c9038 R14: 00007f48227c8fa0 R15: 00007ffef1576a48 [ 2024.344858][T19434] [ 2024.685213][T19455] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.37184'. [ 2027.040338][T19466] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.37185'. [ 2029.577911][T19479] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.37192'. [ 2029.824976][T19490] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.37195'. [ 2029.910573][T19490] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2029.931238][T19490] CPU: 1 PID: 19490 Comm: syz.3.37195 Not tainted syzkaller #0 [ 2029.938883][T19490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2029.949078][T19490] Call Trace: [ 2029.952392][T19490] [ 2029.955356][T19490] dump_stack_lvl+0x188/0x250 [ 2029.960081][T19490] ? show_regs_print_info+0x20/0x20 [ 2029.965326][T19490] ? load_image+0x410/0x410 [ 2029.969884][T19490] sysfs_warn_dup+0x8a/0xa0 [ 2029.974435][T19490] sysfs_do_create_link_sd+0xc0/0x110 [ 2029.979847][T19490] device_add+0x83b/0x1050 [ 2029.984483][T19490] wiphy_register+0x1e74/0x2c40 [ 2029.989394][T19490] ? cfg80211_event_work+0x40/0x40 [ 2029.994540][T19490] ? minstrel_ht_alloc+0x807/0x980 [ 2029.999707][T19490] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2030.005820][T19490] ieee80211_register_hw+0x2a03/0x3a60 [ 2030.011454][T19490] ? ieee80211_register_hw+0xac1/0x3a60 [ 2030.017080][T19490] ? ieee80211_tasklet_handler+0x20/0x20 [ 2030.023028][T19490] ? rcu_is_watching+0x11/0xa0 [ 2030.027848][T19490] ? hrtimer_init+0x10c/0x220 [ 2030.032609][T19490] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2030.038411][T19490] hwsim_new_radio_nl+0xa7d/0xc50 [ 2030.043514][T19490] genl_rcv_msg+0xd0b/0xfa0 [ 2030.048084][T19490] ? genl_bind+0x370/0x370 [ 2030.052545][T19490] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 2030.058510][T19490] ? verify_lock_unused+0x140/0x140 [ 2030.063848][T19490] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 2030.070498][T19490] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2030.076893][T19490] netlink_rcv_skb+0x1e9/0x430 [ 2030.081712][T19490] ? genl_bind+0x370/0x370 [ 2030.086184][T19490] ? netlink_ack+0xb10/0xb10 [ 2030.090828][T19490] ? down_read+0x1aa/0x2e0 [ 2030.095292][T19490] genl_rcv+0x24/0x40 [ 2030.099321][T19490] netlink_unicast+0x78f/0x940 [ 2030.104144][T19490] netlink_sendmsg+0x8ba/0xbe0 [ 2030.108966][T19490] ? netlink_getsockopt+0x570/0x570 [ 2030.114211][T19490] ? aa_sock_msg_perm+0x94/0x150 [ 2030.119194][T19490] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2030.124523][T19490] ? security_socket_sendmsg+0x7c/0xa0 [ 2030.130031][T19490] ? netlink_getsockopt+0x570/0x570 [ 2030.135294][T19490] ____sys_sendmsg+0x5be/0x8f0 [ 2030.140224][T19490] ? __sys_sendmsg_sock+0x30/0x30 [ 2030.145310][T19490] ? import_iovec+0x6f/0xa0 [ 2030.150211][T19490] ___sys_sendmsg+0x236/0x2e0 [ 2030.154945][T19490] ? __sys_sendmsg+0x290/0x290 [ 2030.159793][T19490] __se_sys_sendmsg+0x1b7/0x2a0 [ 2030.164689][T19490] ? __x64_sys_sendmsg+0x80/0x80 [ 2030.169671][T19490] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2030.175804][T19490] ? lockdep_hardirqs_on+0x94/0x140 [ 2030.181064][T19490] do_syscall_64+0x4c/0xa0 [ 2030.186052][T19490] ? clear_bhb_loop+0x30/0x80 [ 2030.190763][T19490] ? clear_bhb_loop+0x30/0x80 [ 2030.195487][T19490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2030.201422][T19490] RIP: 0033:0x7f3fc6996e59 [ 2030.205877][T19490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2030.225544][T19490] RSP: 002b:00007f3fc4bef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2030.234301][T19490] RAX: ffffffffffffffda RBX: 00007f3fc6c1efa0 RCX: 00007f3fc6996e59 [ 2030.242595][T19490] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2030.250615][T19490] RBP: 00007f3fc6a2ce6f R08: 0000000000000000 R09: 0000000000000000 [ 2030.258711][T19490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2030.266727][T19490] R13: 00007f3fc6c1f038 R14: 00007f3fc6c1efa0 R15: 00007ffe4ca2c348 [ 2030.274771][T19490] [ 2030.419769][T19494] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.37201'. [ 2031.519489][T19537] netlink: 'syz.0.37214': attribute type 4 has an invalid length. [ 2031.584484][T19537] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.37214'. [ 2031.689690][T19541] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.37216'. [ 2031.736068][T19541] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2031.754949][T19541] CPU: 0 PID: 19541 Comm: syz.2.37216 Not tainted syzkaller #0 [ 2031.762567][T19541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2031.772667][T19541] Call Trace: [ 2031.775994][T19541] [ 2031.778964][T19541] dump_stack_lvl+0x188/0x250 [ 2031.783691][T19541] ? show_regs_print_info+0x20/0x20 [ 2031.788936][T19541] ? load_image+0x410/0x410 [ 2031.793578][T19541] sysfs_warn_dup+0x8a/0xa0 [ 2031.798117][T19541] sysfs_do_create_link_sd+0xc0/0x110 [ 2031.803793][T19541] device_add+0x83b/0x1050 [ 2031.808273][T19541] wiphy_register+0x1e74/0x2c40 [ 2031.813197][T19541] ? cfg80211_event_work+0x40/0x40 [ 2031.818441][T19541] ? minstrel_ht_alloc+0x807/0x980 [ 2031.823599][T19541] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2031.829712][T19541] ieee80211_register_hw+0x2a03/0x3a60 [ 2031.835221][T19541] ? ieee80211_register_hw+0xac1/0x3a60 [ 2031.840844][T19541] ? ieee80211_tasklet_handler+0x20/0x20 [ 2031.846524][T19541] ? rcu_is_watching+0x11/0xa0 [ 2031.851340][T19541] ? hrtimer_init+0x10c/0x220 [ 2031.856257][T19541] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2031.862044][T19541] hwsim_new_radio_nl+0xa7d/0xc50 [ 2031.867128][T19541] genl_rcv_msg+0xd0b/0xfa0 [ 2031.871688][T19541] ? genl_bind+0x370/0x370 [ 2031.876243][T19541] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2031.882317][T19541] ? lock_chain_count+0x20/0x20 [ 2031.887221][T19541] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2031.893430][T19541] ? lockdep_hardirqs_on+0x94/0x140 [ 2031.898759][T19541] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2031.904957][T19541] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2031.911330][T19541] ? lock_acquire+0x208/0x400 [ 2031.916058][T19541] netlink_rcv_skb+0x1e9/0x430 [ 2031.920873][T19541] ? genl_bind+0x370/0x370 [ 2031.925337][T19541] ? netlink_ack+0xb10/0xb10 [ 2031.929975][T19541] ? down_read+0x1aa/0x2e0 [ 2031.934436][T19541] genl_rcv+0x24/0x40 [ 2031.938574][T19541] netlink_unicast+0x78f/0x940 [ 2031.943385][T19541] netlink_sendmsg+0x8ba/0xbe0 [ 2031.948193][T19541] ? lockdep_hardirqs_on+0x94/0x140 [ 2031.953442][T19541] ? netlink_getsockopt+0x570/0x570 [ 2031.958693][T19541] ? security_socket_sendmsg+0x56/0xa0 [ 2031.964192][T19541] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2031.969645][T19541] ? security_socket_sendmsg+0x7c/0xa0 [ 2031.975142][T19541] ? netlink_getsockopt+0x570/0x570 [ 2031.980405][T19541] ____sys_sendmsg+0x5be/0x8f0 [ 2031.985228][T19541] ? __sys_sendmsg_sock+0x30/0x30 [ 2031.990314][T19541] ? import_iovec+0x6f/0xa0 [ 2031.994866][T19541] ___sys_sendmsg+0x236/0x2e0 [ 2031.999615][T19541] ? __sys_sendmsg+0x290/0x290 [ 2032.004732][T19541] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2032.010965][T19541] __se_sys_sendmsg+0x1b7/0x2a0 [ 2032.016156][T19541] ? __x64_sys_sendmsg+0x80/0x80 [ 2032.021216][T19541] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2032.027321][T19541] ? lockdep_hardirqs_on+0x94/0x140 [ 2032.032708][T19541] do_syscall_64+0x4c/0xa0 [ 2032.037258][T19541] ? clear_bhb_loop+0x30/0x80 [ 2032.042074][T19541] ? clear_bhb_loop+0x30/0x80 [ 2032.046986][T19541] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2032.052936][T19541] RIP: 0033:0x7f8c9b7f2e59 [ 2032.057400][T19541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2032.077054][T19541] RSP: 002b:00007f8c99a4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2032.085615][T19541] RAX: ffffffffffffffda RBX: 00007f8c9ba7afa0 RCX: 00007f8c9b7f2e59 [ 2032.093634][T19541] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2032.101738][T19541] RBP: 00007f8c9b888e6f R08: 0000000000000000 R09: 0000000000000000 [ 2032.109746][T19541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2032.117754][T19541] R13: 00007f8c9ba7b038 R14: 00007f8c9ba7afa0 R15: 00007fff3325d648 [ 2032.125958][T19541] [ 2032.423604][T19547] netlink: 'syz.3.37221': attribute type 10 has an invalid length. [ 2032.441004][T19547] netlink: 'syz.3.37221': attribute type 16 has an invalid length. [ 2032.448974][T19547] netlink: 156 bytes leftover after parsing attributes in process `syz.3.37221'. [ 2032.873117][T19564] netlink: 'syz.1.37237': attribute type 4 has an invalid length. [ 2032.929194][T19564] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.37237'. [ 2032.976153][T19566] netlink: 'syz.0.37228': attribute type 9 has an invalid length. [ 2033.020023][T19566] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.37228'. [ 2033.286419][T19567] netlink: 'syz.0.37228': attribute type 9 has an invalid length. [ 2033.329596][T19567] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.37228'. [ 2033.685172][T19579] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.37235'. [ 2033.754137][T19579] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2033.783743][T19579] CPU: 0 PID: 19579 Comm: syz.2.37235 Not tainted syzkaller #0 [ 2033.791615][T19579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2033.801706][T19579] Call Trace: [ 2033.805116][T19579] [ 2033.808167][T19579] dump_stack_lvl+0x188/0x250 [ 2033.812893][T19579] ? show_regs_print_info+0x20/0x20 [ 2033.818139][T19579] ? load_image+0x410/0x410 [ 2033.822686][T19579] sysfs_warn_dup+0x8a/0xa0 [ 2033.827304][T19579] sysfs_do_create_link_sd+0xc0/0x110 [ 2033.832718][T19579] device_add+0x83b/0x1050 [ 2033.837177][T19579] wiphy_register+0x1e74/0x2c40 [ 2033.842086][T19579] ? cfg80211_event_work+0x40/0x40 [ 2033.847237][T19579] ? ieee80211_register_hw+0x28c1/0x3a60 [ 2033.852903][T19579] ? ieee80211_register_hw+0x2729/0x3a60 [ 2033.858574][T19579] ? kasan_check_range+0x84/0x290 [ 2033.863740][T19579] ieee80211_register_hw+0x2a03/0x3a60 [ 2033.869244][T19579] ? ieee80211_register_hw+0xac1/0x3a60 [ 2033.874839][T19579] ? ieee80211_tasklet_handler+0x20/0x20 [ 2033.880516][T19579] ? rcu_is_watching+0x11/0xa0 [ 2033.885345][T19579] ? hrtimer_init+0x10c/0x220 [ 2033.890072][T19579] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2033.895856][T19579] hwsim_new_radio_nl+0xa7d/0xc50 [ 2033.900943][T19579] genl_rcv_msg+0xd0b/0xfa0 [ 2033.905504][T19579] ? genl_bind+0x370/0x370 [ 2033.909984][T19579] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2033.915769][T19579] ? mark_lock+0x94/0x320 [ 2033.920229][T19579] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2033.926252][T19579] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2033.932637][T19579] ? lock_chain_count+0x20/0x20 [ 2033.937548][T19579] netlink_rcv_skb+0x1e9/0x430 [ 2033.942361][T19579] ? genl_bind+0x370/0x370 [ 2033.946828][T19579] ? netlink_ack+0xb10/0xb10 [ 2033.951499][T19579] ? preempt_count_add+0x80/0x190 [ 2033.956673][T19579] ? down_read+0x1aa/0x2e0 [ 2033.961138][T19579] genl_rcv+0x24/0x40 [ 2033.965168][T19579] netlink_unicast+0x78f/0x940 [ 2033.970046][T19579] netlink_sendmsg+0x8ba/0xbe0 [ 2033.974953][T19579] ? netlink_getsockopt+0x570/0x570 [ 2033.980196][T19579] ? aa_sock_msg_perm+0x94/0x150 [ 2033.985175][T19579] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2033.990588][T19579] ? security_socket_sendmsg+0x7c/0xa0 [ 2033.996099][T19579] ? netlink_getsockopt+0x570/0x570 [ 2034.001343][T19579] ____sys_sendmsg+0x5be/0x8f0 [ 2034.006158][T19579] ? __sys_sendmsg_sock+0x30/0x30 [ 2034.011229][T19579] ? import_iovec+0x6f/0xa0 [ 2034.015775][T19579] ___sys_sendmsg+0x236/0x2e0 [ 2034.020503][T19579] ? __sys_sendmsg+0x290/0x290 [ 2034.025334][T19579] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2034.031130][T19579] __se_sys_sendmsg+0x1b7/0x2a0 [ 2034.036028][T19579] ? __x64_sys_sendmsg+0x80/0x80 [ 2034.041030][T19579] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2034.046979][T19579] do_syscall_64+0x4c/0xa0 [ 2034.051437][T19579] ? clear_bhb_loop+0x30/0x80 [ 2034.056153][T19579] ? clear_bhb_loop+0x30/0x80 [ 2034.061017][T19579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2034.067213][T19579] RIP: 0033:0x7f8c9b7f2e59 [ 2034.071676][T19579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2034.091321][T19579] RSP: 002b:00007f8c99a4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2034.099790][T19579] RAX: ffffffffffffffda RBX: 00007f8c9ba7afa0 RCX: 00007f8c9b7f2e59 [ 2034.107808][T19579] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2034.115822][T19579] RBP: 00007f8c9b888e6f R08: 0000000000000000 R09: 0000000000000000 [ 2034.123837][T19579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2034.131849][T19579] R13: 00007f8c9ba7b038 R14: 00007f8c9ba7afa0 R15: 00007fff3325d648 [ 2034.139891][T19579] [ 2034.393964][T19586] netlink: 'syz.0.37238': attribute type 10 has an invalid length. [ 2034.402506][T19586] netlink: 'syz.0.37238': attribute type 16 has an invalid length. [ 2037.382833][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.389170][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.607837][T19605] netlink: 'syz.2.37243': attribute type 4 has an invalid length. [ 2037.721562][T19605] __nla_validate_parse: 1 callbacks suppressed [ 2037.721581][T19605] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.37243'. [ 2037.780210][T19597] netlink: 14 bytes leftover after parsing attributes in process `syz.3.37252'. [ 2040.583933][T19597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2040.646225][T19597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2040.691547][T19597] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 2040.741510][T19597] bond0 (unregistering): Released all slaves [ 2040.856386][T19621] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.37261'. [ 2040.892329][T19620] netlink: 'syz.2.37248': attribute type 9 has an invalid length. [ 2040.932267][T19620] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.37248'. [ 2041.133360][T19624] netlink: 'syz.2.37248': attribute type 9 has an invalid length. [ 2041.181034][T19624] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.37248'. [ 2041.335072][T19632] netlink: 'syz.1.37253': attribute type 10 has an invalid length. [ 2041.357447][T19632] netlink: 'syz.1.37253': attribute type 16 has an invalid length. [ 2041.369475][T19632] netlink: 156 bytes leftover after parsing attributes in process `syz.1.37253'. [ 2041.846342][T19648] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.37260'. [ 2042.038231][T19648] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2042.051300][T19648] CPU: 0 PID: 19648 Comm: syz.1.37260 Not tainted syzkaller #0 [ 2042.058907][T19648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2042.069087][T19648] Call Trace: [ 2042.072400][T19648] [ 2042.075368][T19648] dump_stack_lvl+0x188/0x250 [ 2042.080096][T19648] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2042.086298][T19648] ? show_regs_print_info+0x20/0x20 [ 2042.091545][T19648] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2042.097765][T19648] sysfs_warn_dup+0x8a/0xa0 [ 2042.102313][T19648] sysfs_do_create_link_sd+0xc0/0x110 [ 2042.107728][T19648] device_add+0x83b/0x1050 [ 2042.112367][T19648] wiphy_register+0x1e74/0x2c40 [ 2042.117284][T19648] ? cfg80211_event_work+0x40/0x40 [ 2042.122433][T19648] ? minstrel_ht_alloc+0x807/0x980 [ 2042.127737][T19648] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2042.133857][T19648] ieee80211_register_hw+0x2a03/0x3a60 [ 2042.139361][T19648] ? ieee80211_register_hw+0xac1/0x3a60 [ 2042.144952][T19648] ? ieee80211_tasklet_handler+0x20/0x20 [ 2042.150640][T19648] ? rcu_is_watching+0x11/0xa0 [ 2042.155452][T19648] ? hrtimer_init+0x10c/0x220 [ 2042.160178][T19648] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2042.166047][T19648] hwsim_new_radio_nl+0xa7d/0xc50 [ 2042.171129][T19648] genl_rcv_msg+0xd0b/0xfa0 [ 2042.175682][T19648] ? genl_bind+0x370/0x370 [ 2042.180137][T19648] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 2042.186089][T19648] ? swake_up_one+0x6d/0x130 [ 2042.190802][T19648] ? verify_lock_unused+0x140/0x140 [ 2042.196048][T19648] ? rcu_preempt_deferred_qs_irqrestore+0x855/0xbd0 [ 2042.202717][T19648] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2042.209109][T19648] netlink_rcv_skb+0x1e9/0x430 [ 2042.214008][T19648] ? genl_bind+0x370/0x370 [ 2042.218559][T19648] ? netlink_ack+0xb10/0xb10 [ 2042.223301][T19648] ? down_read+0x1aa/0x2e0 [ 2042.227855][T19648] genl_rcv+0x24/0x40 [ 2042.231893][T19648] netlink_unicast+0x78f/0x940 [ 2042.236716][T19648] netlink_sendmsg+0x8ba/0xbe0 [ 2042.241537][T19648] ? netlink_getsockopt+0x570/0x570 [ 2042.246794][T19648] ? aa_sock_msg_perm+0x94/0x150 [ 2042.251786][T19648] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2042.257115][T19648] ? security_socket_sendmsg+0x7c/0xa0 [ 2042.262620][T19648] ? netlink_getsockopt+0x570/0x570 [ 2042.267912][T19648] ____sys_sendmsg+0x5be/0x8f0 [ 2042.272734][T19648] ? __sys_sendmsg_sock+0x30/0x30 [ 2042.277808][T19648] ? import_iovec+0x6f/0xa0 [ 2042.282396][T19648] ___sys_sendmsg+0x236/0x2e0 [ 2042.287129][T19648] ? __sys_sendmsg+0x290/0x290 [ 2042.291944][T19648] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2042.298268][T19648] __se_sys_sendmsg+0x1b7/0x2a0 [ 2042.303164][T19648] ? __x64_sys_sendmsg+0x80/0x80 [ 2042.308142][T19648] ? lockdep_hardirqs_on+0x94/0x140 [ 2042.313400][T19648] do_syscall_64+0x4c/0xa0 [ 2042.317859][T19648] ? clear_bhb_loop+0x30/0x80 [ 2042.322585][T19648] ? clear_bhb_loop+0x30/0x80 [ 2042.327302][T19648] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2042.333225][T19648] RIP: 0033:0x7f21df21fe59 [ 2042.337673][T19648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2042.357450][T19648] RSP: 002b:00007f21dd478028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2042.366043][T19648] RAX: ffffffffffffffda RBX: 00007f21df4a7fa0 RCX: 00007f21df21fe59 [ 2042.374056][T19648] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2042.382153][T19648] RBP: 00007f21df2b5e6f R08: 0000000000000000 R09: 0000000000000000 [ 2042.390302][T19648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2042.398323][T19648] R13: 00007f21df4a8038 R14: 00007f21df4a7fa0 R15: 00007ffc268afd28 [ 2042.406361][T19648] [ 2042.545745][T19659] netlink: 'syz.3.37263': attribute type 4 has an invalid length. [ 2042.556356][T19659] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.37263'. [ 2042.925604][T19669] netlink: 'syz.4.37269': attribute type 9 has an invalid length. [ 2042.968936][T19669] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.37269'. [ 2043.320217][T19670] netlink: 'syz.4.37269': attribute type 9 has an invalid length. [ 2043.335462][T19670] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.37269'. [ 2043.825020][T19688] netlink: 'syz.3.37290': attribute type 9 has an invalid length. [ 2043.861015][T19688] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.37290'. [ 2044.144467][T19694] netlink: 'syz.3.37290': attribute type 9 has an invalid length. [ 2044.159900][T19694] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.37290'. [ 2044.323665][T19696] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.37280'. [ 2044.365322][T19696] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2044.395723][T19696] CPU: 1 PID: 19696 Comm: syz.0.37280 Not tainted syzkaller #0 [ 2044.403345][T19696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2044.413525][T19696] Call Trace: [ 2044.416838][T19696] [ 2044.419795][T19696] dump_stack_lvl+0x188/0x250 [ 2044.424515][T19696] ? show_regs_print_info+0x20/0x20 [ 2044.429766][T19696] ? load_image+0x410/0x410 [ 2044.434332][T19696] sysfs_warn_dup+0x8a/0xa0 [ 2044.438880][T19696] sysfs_do_create_link_sd+0xc0/0x110 [ 2044.444301][T19696] device_add+0x83b/0x1050 [ 2044.448777][T19696] wiphy_register+0x1e74/0x2c40 [ 2044.453690][T19696] ? cfg80211_event_work+0x40/0x40 [ 2044.458843][T19696] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2044.465044][T19696] ? rtnl_unlock+0x5/0x10 [ 2044.469483][T19696] ieee80211_register_hw+0x2a03/0x3a60 [ 2044.474987][T19696] ? ieee80211_register_hw+0xac1/0x3a60 [ 2044.480762][T19696] ? ieee80211_tasklet_handler+0x20/0x20 [ 2044.486452][T19696] ? rcu_is_watching+0x11/0xa0 [ 2044.491274][T19696] ? hrtimer_init+0x10c/0x220 [ 2044.496000][T19696] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2044.502048][T19696] hwsim_new_radio_nl+0xa7d/0xc50 [ 2044.507136][T19696] genl_rcv_msg+0xd0b/0xfa0 [ 2044.511794][T19696] ? genl_bind+0x370/0x370 [ 2044.516272][T19696] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2044.521515][T19696] ? verify_lock_unused+0x140/0x140 [ 2044.526788][T19696] ? dev_queue_xmit+0x20/0x20 [ 2044.531513][T19696] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2044.537907][T19696] netlink_rcv_skb+0x1e9/0x430 [ 2044.542827][T19696] ? genl_bind+0x370/0x370 [ 2044.547288][T19696] ? netlink_ack+0xb10/0xb10 [ 2044.551939][T19696] ? down_read+0x1aa/0x2e0 [ 2044.556405][T19696] genl_rcv+0x24/0x40 [ 2044.560432][T19696] netlink_unicast+0x78f/0x940 [ 2044.565261][T19696] netlink_sendmsg+0x8ba/0xbe0 [ 2044.570069][T19696] ? lockdep_hardirqs_on+0x94/0x140 [ 2044.575319][T19696] ? netlink_getsockopt+0x570/0x570 [ 2044.580572][T19696] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 2044.586150][T19696] ? security_socket_sendmsg+0x7c/0xa0 [ 2044.591649][T19696] ? netlink_getsockopt+0x570/0x570 [ 2044.596894][T19696] ____sys_sendmsg+0x5be/0x8f0 [ 2044.601708][T19696] ? __sys_sendmsg_sock+0x30/0x30 [ 2044.606784][T19696] ? import_iovec+0x6f/0xa0 [ 2044.611331][T19696] ___sys_sendmsg+0x236/0x2e0 [ 2044.616052][T19696] ? __sys_sendmsg+0x290/0x290 [ 2044.620859][T19696] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2044.627164][T19696] __se_sys_sendmsg+0x1b7/0x2a0 [ 2044.632065][T19696] ? __x64_sys_sendmsg+0x80/0x80 [ 2044.637067][T19696] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2044.643012][T19696] do_syscall_64+0x4c/0xa0 [ 2044.647461][T19696] ? clear_bhb_loop+0x30/0x80 [ 2044.652345][T19696] ? clear_bhb_loop+0x30/0x80 [ 2044.657060][T19696] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2044.662984][T19696] RIP: 0033:0x7fc28a562e59 [ 2044.667439][T19696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2044.687252][T19696] RSP: 002b:00007fc2887bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2044.695718][T19696] RAX: ffffffffffffffda RBX: 00007fc28a7eafa0 RCX: 00007fc28a562e59 [ 2044.703975][T19696] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2044.711997][T19696] RBP: 00007fc28a5f8e6f R08: 0000000000000000 R09: 0000000000000000 [ 2044.720019][T19696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2044.728029][T19696] R13: 00007fc28a7eb038 R14: 00007fc28a7eafa0 R15: 00007ffe30875ee8 [ 2044.736061][T19696] [ 2044.849888][T19709] netlink: 'syz.1.37297': attribute type 9 has an invalid length. [ 2044.879046][T19709] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.37297'. [ 2045.069533][T19710] netlink: 'syz.1.37297': attribute type 9 has an invalid length. [ 2045.080284][T19710] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.37297'. [ 2045.121966][T19714] netlink: 'syz.4.37286': attribute type 4 has an invalid length. [ 2045.129854][T19714] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.37286'. [ 2045.685133][T19720] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.37300'. [ 2045.902362][T19733] netlink: 63747 bytes leftover after parsing attributes in process `syz.3.37294'. [ 2046.577660][T19759] netlink: 'syz.2.37307': attribute type 4 has an invalid length. [ 2048.300577][T19819] netlink: 'syz.4.37330': attribute type 4 has an invalid length. [ 2048.337445][T19819] __nla_validate_parse: 4 callbacks suppressed [ 2048.337477][T19819] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.37330'. [ 2049.225545][T19834] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.37338'. [ 2049.638649][T19854] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.37347'. [ 2049.698055][T19854] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2049.743205][T19854] CPU: 1 PID: 19854 Comm: syz.1.37347 Not tainted syzkaller #0 [ 2049.750862][T19854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2049.760972][T19854] Call Trace: [ 2049.764303][T19854] [ 2049.767283][T19854] dump_stack_lvl+0x188/0x250 [ 2049.772043][T19854] ? show_regs_print_info+0x20/0x20 [ 2049.777298][T19854] ? load_image+0x410/0x410 [ 2049.781933][T19854] sysfs_warn_dup+0x8a/0xa0 [ 2049.786587][T19854] sysfs_do_create_link_sd+0xc0/0x110 [ 2049.792016][T19854] device_add+0x83b/0x1050 [ 2049.796499][T19854] wiphy_register+0x1e74/0x2c40 [ 2049.801424][T19854] ? cfg80211_event_work+0x40/0x40 [ 2049.806594][T19854] ? minstrel_ht_alloc+0x807/0x980 [ 2049.811778][T19854] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2049.817915][T19854] ieee80211_register_hw+0x2a03/0x3a60 [ 2049.823437][T19854] ? ieee80211_register_hw+0xac1/0x3a60 [ 2049.829058][T19854] ? ieee80211_tasklet_handler+0x20/0x20 [ 2049.834751][T19854] ? rcu_is_watching+0x11/0xa0 [ 2049.839568][T19854] ? hrtimer_init+0x10c/0x220 [ 2049.844306][T19854] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2049.850113][T19854] hwsim_new_radio_nl+0xa7d/0xc50 [ 2049.855217][T19854] genl_rcv_msg+0xd0b/0xfa0 [ 2049.859794][T19854] ? genl_bind+0x370/0x370 [ 2049.864292][T19854] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2049.869548][T19854] ? verify_lock_unused+0x140/0x140 [ 2049.874834][T19854] ? dev_queue_xmit+0x20/0x20 [ 2049.879577][T19854] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2049.885979][T19854] netlink_rcv_skb+0x1e9/0x430 [ 2049.890798][T19854] ? genl_bind+0x370/0x370 [ 2049.895267][T19854] ? netlink_ack+0xb10/0xb10 [ 2049.899938][T19854] ? down_read+0x1aa/0x2e0 [ 2049.904417][T19854] genl_rcv+0x24/0x40 [ 2049.908454][T19854] netlink_unicast+0x78f/0x940 [ 2049.913283][T19854] netlink_sendmsg+0x8ba/0xbe0 [ 2049.918114][T19854] ? netlink_getsockopt+0x570/0x570 [ 2049.923364][T19854] ? aa_sock_msg_perm+0x94/0x150 [ 2049.928348][T19854] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2049.933683][T19854] ? security_socket_sendmsg+0x7c/0xa0 [ 2049.939188][T19854] ? netlink_getsockopt+0x570/0x570 [ 2049.944448][T19854] ____sys_sendmsg+0x5be/0x8f0 [ 2049.949286][T19854] ? __sys_sendmsg_sock+0x30/0x30 [ 2049.954368][T19854] ? import_iovec+0x6f/0xa0 [ 2049.958984][T19854] ___sys_sendmsg+0x236/0x2e0 [ 2049.963723][T19854] ? __sys_sendmsg+0x290/0x290 [ 2049.968533][T19854] ? rcu_nmi_exit+0x6f/0xf0 [ 2049.973148][T19854] __se_sys_sendmsg+0x1b7/0x2a0 [ 2049.978055][T19854] ? __x64_sys_sendmsg+0x80/0x80 [ 2049.983040][T19854] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2049.989090][T19854] ? lockdep_hardirqs_on+0x94/0x140 [ 2049.994348][T19854] do_syscall_64+0x4c/0xa0 [ 2049.998812][T19854] ? clear_bhb_loop+0x30/0x80 [ 2050.003552][T19854] ? clear_bhb_loop+0x30/0x80 [ 2050.008287][T19854] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2050.014231][T19854] RIP: 0033:0x7f21df21fe59 [ 2050.018698][T19854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2050.038361][T19854] RSP: 002b:00007f21dd478028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2050.046832][T19854] RAX: ffffffffffffffda RBX: 00007f21df4a7fa0 RCX: 00007f21df21fe59 [ 2050.054858][T19854] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2050.062896][T19854] RBP: 00007f21df2b5e6f R08: 0000000000000000 R09: 0000000000000000 [ 2050.070915][T19854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2050.078941][T19854] R13: 00007f21df4a8038 R14: 00007f21df4a7fa0 R15: 00007ffc268afd28 [ 2050.086981][T19854] [ 2050.146918][T19859] device veth1_macvtap left promiscuous mode [ 2050.488114][T19866] device veth1_macvtap entered promiscuous mode [ 2050.502794][T19866] device macsec0 entered promiscuous mode [ 2050.658520][T19870] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.37361'. [ 2050.745478][T19870] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2050.766232][T19870] CPU: 1 PID: 19870 Comm: syz.0.37361 Not tainted syzkaller #0 [ 2050.773851][T19870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2050.783939][T19870] Call Trace: [ 2050.787239][T19870] [ 2050.790189][T19870] dump_stack_lvl+0x188/0x250 [ 2050.794905][T19870] ? show_regs_print_info+0x20/0x20 [ 2050.800136][T19870] ? load_image+0x410/0x410 [ 2050.804680][T19870] sysfs_warn_dup+0x8a/0xa0 [ 2050.809306][T19870] sysfs_do_create_link_sd+0xc0/0x110 [ 2050.814705][T19870] device_add+0x83b/0x1050 [ 2050.819150][T19870] wiphy_register+0x1e74/0x2c40 [ 2050.824044][T19870] ? cfg80211_event_work+0x40/0x40 [ 2050.829181][T19870] ? minstrel_ht_alloc+0x807/0x980 [ 2050.834313][T19870] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2050.840401][T19870] ieee80211_register_hw+0x2a03/0x3a60 [ 2050.845881][T19870] ? ieee80211_register_hw+0xac1/0x3a60 [ 2050.851450][T19870] ? ieee80211_tasklet_handler+0x20/0x20 [ 2050.857111][T19870] ? rcu_is_watching+0x11/0xa0 [ 2050.861896][T19870] ? hrtimer_init+0x10c/0x220 [ 2050.866605][T19870] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2050.872357][T19870] hwsim_new_radio_nl+0xa7d/0xc50 [ 2050.877504][T19870] genl_rcv_msg+0xd0b/0xfa0 [ 2050.882043][T19870] ? genl_bind+0x370/0x370 [ 2050.886586][T19870] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2050.893370][T19870] ? lock_chain_count+0x20/0x20 [ 2050.898257][T19870] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2050.904444][T19870] ? lockdep_hardirqs_on+0x94/0x140 [ 2050.909669][T19870] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2050.915862][T19870] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2050.922222][T19870] ? lock_acquire+0x208/0x400 [ 2050.927053][T19870] netlink_rcv_skb+0x1e9/0x430 [ 2050.931845][T19870] ? genl_bind+0x370/0x370 [ 2050.936284][T19870] ? netlink_ack+0xb10/0xb10 [ 2050.940903][T19870] ? down_read+0x1aa/0x2e0 [ 2050.945342][T19870] genl_rcv+0x24/0x40 [ 2050.949358][T19870] netlink_unicast+0x78f/0x940 [ 2050.954152][T19870] netlink_sendmsg+0x8ba/0xbe0 [ 2050.958944][T19870] ? netlink_getsockopt+0x570/0x570 [ 2050.964164][T19870] ? aa_sock_msg_perm+0x94/0x150 [ 2050.969219][T19870] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2050.974524][T19870] ? security_socket_sendmsg+0x7c/0xa0 [ 2050.980010][T19870] ? netlink_getsockopt+0x570/0x570 [ 2050.985235][T19870] ____sys_sendmsg+0x5be/0x8f0 [ 2050.990035][T19870] ? __sys_sendmsg_sock+0x30/0x30 [ 2050.995092][T19870] ? import_iovec+0x6f/0xa0 [ 2050.999619][T19870] ___sys_sendmsg+0x236/0x2e0 [ 2051.004329][T19870] ? __sys_sendmsg+0x290/0x290 [ 2051.009123][T19870] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2051.015405][T19870] __se_sys_sendmsg+0x1b7/0x2a0 [ 2051.020281][T19870] ? __x64_sys_sendmsg+0x80/0x80 [ 2051.025235][T19870] ? lockdep_hardirqs_on+0x94/0x140 [ 2051.030474][T19870] do_syscall_64+0x4c/0xa0 [ 2051.034906][T19870] ? clear_bhb_loop+0x30/0x80 [ 2051.039608][T19870] ? clear_bhb_loop+0x30/0x80 [ 2051.044306][T19870] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2051.050215][T19870] RIP: 0033:0x7fc28a562e59 [ 2051.054667][T19870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2051.074294][T19870] RSP: 002b:00007fc2887bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2051.082754][T19870] RAX: ffffffffffffffda RBX: 00007fc28a7eafa0 RCX: 00007fc28a562e59 [ 2051.090829][T19870] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2051.098824][T19870] RBP: 00007fc28a5f8e6f R08: 0000000000000000 R09: 0000000000000000 [ 2051.106913][T19870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2051.114917][T19870] R13: 00007fc28a7eb038 R14: 00007fc28a7eafa0 R15: 00007ffe30875ee8 [ 2051.122931][T19870] [ 2051.354887][T19889] netlink: 63747 bytes leftover after parsing attributes in process `syz.1.37356'. [ 2051.695300][T19900] device syzkaller0 entered promiscuous mode [ 2051.709701][T19904] device veth1_macvtap left promiscuous mode [ 2051.926053][T19907] device veth1_macvtap entered promiscuous mode [ 2051.941005][T19907] device macsec0 entered promiscuous mode [ 2052.077584][T19909] device veth1_macvtap left promiscuous mode [ 2052.340912][T19919] device veth1_macvtap entered promiscuous mode [ 2052.347362][T19919] device macsec0 entered promiscuous mode [ 2053.268229][T19930] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.37371'. [ 2053.315921][T19930] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2053.358686][T19930] CPU: 1 PID: 19930 Comm: syz.2.37371 Not tainted syzkaller #0 [ 2053.366317][T19930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2053.376401][T19930] Call Trace: [ 2053.379714][T19930] [ 2053.382672][T19930] dump_stack_lvl+0x188/0x250 [ 2053.387399][T19930] ? show_regs_print_info+0x20/0x20 [ 2053.392660][T19930] ? load_image+0x410/0x410 [ 2053.397299][T19930] sysfs_warn_dup+0x8a/0xa0 [ 2053.401833][T19930] sysfs_do_create_link_sd+0xc0/0x110 [ 2053.407242][T19930] device_add+0x83b/0x1050 [ 2053.411696][T19930] wiphy_register+0x1e74/0x2c40 [ 2053.416622][T19930] ? cfg80211_event_work+0x40/0x40 [ 2053.422041][T19930] ? minstrel_ht_alloc+0x807/0x980 [ 2053.427191][T19930] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2053.433305][T19930] ieee80211_register_hw+0x2a03/0x3a60 [ 2053.438808][T19930] ? ieee80211_register_hw+0xac1/0x3a60 [ 2053.444403][T19930] ? ieee80211_tasklet_handler+0x20/0x20 [ 2053.450075][T19930] ? rcu_is_watching+0x11/0xa0 [ 2053.454887][T19930] ? hrtimer_init+0x10c/0x220 [ 2053.459613][T19930] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2053.465478][T19930] hwsim_new_radio_nl+0xa7d/0xc50 [ 2053.470559][T19930] genl_rcv_msg+0xd0b/0xfa0 [ 2053.475199][T19930] ? genl_bind+0x370/0x370 [ 2053.479672][T19930] ? rcu_nmi_exit+0x6f/0xf0 [ 2053.484216][T19930] ? verify_lock_unused+0x140/0x140 [ 2053.489470][T19930] ? verify_lock_unused+0x140/0x140 [ 2053.494702][T19930] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2053.500819][T19930] ? lock_chain_count+0x20/0x20 [ 2053.505739][T19930] ? rcu_nmi_exit+0x6f/0xf0 [ 2053.510380][T19930] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2053.516786][T19930] netlink_rcv_skb+0x1e9/0x430 [ 2053.521596][T19930] ? genl_bind+0x370/0x370 [ 2053.526055][T19930] ? netlink_ack+0xb10/0xb10 [ 2053.530692][T19930] ? down_read+0x1aa/0x2e0 [ 2053.535148][T19930] genl_rcv+0x24/0x40 [ 2053.539164][T19930] netlink_unicast+0x78f/0x940 [ 2053.543980][T19930] netlink_sendmsg+0x8ba/0xbe0 [ 2053.548790][T19930] ? netlink_getsockopt+0x570/0x570 [ 2053.554028][T19930] ? aa_sock_msg_perm+0x94/0x150 [ 2053.558996][T19930] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2053.564320][T19930] ? security_socket_sendmsg+0x7c/0xa0 [ 2053.569825][T19930] ? netlink_getsockopt+0x570/0x570 [ 2053.575058][T19930] ____sys_sendmsg+0x5be/0x8f0 [ 2053.579877][T19930] ? __sys_sendmsg_sock+0x30/0x30 [ 2053.584958][T19930] ? import_iovec+0x6f/0xa0 [ 2053.589657][T19930] ___sys_sendmsg+0x236/0x2e0 [ 2053.594391][T19930] ? __sys_sendmsg+0x290/0x290 [ 2053.599218][T19930] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2053.605535][T19930] __se_sys_sendmsg+0x1b7/0x2a0 [ 2053.610441][T19930] ? __x64_sys_sendmsg+0x80/0x80 [ 2053.615426][T19930] ? lockdep_hardirqs_on+0x94/0x140 [ 2053.620685][T19930] do_syscall_64+0x4c/0xa0 [ 2053.625137][T19930] ? clear_bhb_loop+0x30/0x80 [ 2053.629853][T19930] ? clear_bhb_loop+0x30/0x80 [ 2053.634576][T19930] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2053.640895][T19930] RIP: 0033:0x7f8c9b7f2e59 [ 2053.645345][T19930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2053.665114][T19930] RSP: 002b:00007f8c99a4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2053.673601][T19930] RAX: ffffffffffffffda RBX: 00007f8c9ba7afa0 RCX: 00007f8c9b7f2e59 [ 2053.681747][T19930] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2053.689753][T19930] RBP: 00007f8c9b888e6f R08: 0000000000000000 R09: 0000000000000000 [ 2053.697757][T19930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2053.705764][T19930] R13: 00007f8c9ba7b038 R14: 00007f8c9ba7afa0 R15: 00007fff3325d648 [ 2053.713788][T19930] [ 2053.787808][T19937] netlink: 63747 bytes leftover after parsing attributes in process `syz.4.37374'. [ 2053.805237][T19928] netlink: 'syz.1.37370': attribute type 1 has an invalid length. [ 2053.816022][T19928] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.37370'. [ 2054.627403][T19967] device veth1_macvtap left promiscuous mode [ 2054.719049][T19970] device veth1_macvtap entered promiscuous mode [ 2054.760163][T19970] device macsec0 entered promiscuous mode [ 2054.869435][T19976] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.37393'. [ 2055.138350][T19982] device syzkaller0 entered promiscuous mode [ 2055.677973][T19995] device syzkaller0 entered promiscuous mode [ 2055.937228][T20007] netlink: 'syz.1.37407': attribute type 9 has an invalid length. [ 2055.956286][T20007] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.37407'. [ 2056.174853][T20015] netlink: 'syz.1.37407': attribute type 9 has an invalid length. [ 2056.189538][T20015] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.37407'. [ 2056.278251][T20021] netlink: 'syz.2.37411': attribute type 1 has an invalid length. [ 2056.290832][T20021] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.37411'. [ 2056.309160][T20019] netlink: 'syz.0.37410': attribute type 4 has an invalid length. [ 2056.323609][T20019] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.37410'. [ 2056.667554][T20039] device syzkaller0 entered promiscuous mode [ 2056.917465][T20050] netlink: 'syz.1.37423': attribute type 9 has an invalid length. [ 2056.926188][T20050] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.37423'. [ 2057.075312][T20052] netlink: 'syz.1.37423': attribute type 9 has an invalid length. [ 2057.086054][T20052] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.37423'. [ 2057.171365][T20056] netlink: 'syz.0.37425': attribute type 1 has an invalid length. [ 2057.182910][T20056] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.37425'. [ 2057.556219][T20063] netlink: 'syz.0.37438': attribute type 9 has an invalid length. [ 2057.786380][T20066] netlink: 'syz.0.37438': attribute type 9 has an invalid length. [ 2057.996654][T20082] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 2058.810513][T20103] __nla_validate_parse: 6 callbacks suppressed [ 2058.810580][T20103] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.37440'. [ 2058.946015][T20107] tap1: tun_chr_ioctl cmd 1074025684 [ 2062.333109][T20188] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.37479'. [ 2063.532376][T20202] validate_nla: 4 callbacks suppressed [ 2063.532414][T20202] netlink: 'syz.1.37485': attribute type 9 has an invalid length. [ 2063.558471][T20202] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.37485'. [ 2063.829371][T20206] netlink: 'syz.1.37485': attribute type 9 has an invalid length. [ 2063.845105][T20206] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.37485'. [ 2064.919367][T20246] netlink: 'syz.1.37504': attribute type 9 has an invalid length. [ 2064.964390][T20246] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.37504'. [ 2065.004998][T20243] netlink: 'syz.1.37504': attribute type 9 has an invalid length. [ 2065.042824][T20243] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.37504'. [ 2067.582135][T20297] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.37526'. [ 2067.974817][T20304] device syzkaller0 entered promiscuous mode [ 2071.401018][T20319] netlink: 14 bytes leftover after parsing attributes in process `syz.4.37535'. [ 2071.539168][T20325] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.37539'. [ 2071.897915][T20344] device syzkaller0 entered promiscuous mode [ 2071.943737][T20347] netlink: 3 bytes leftover after parsing attributes in process `syz.0.37548'. [ 2075.015464][T20369] netlink: 'syz.4.37562': attribute type 10 has an invalid length. [ 2075.062316][T20369] device veth0_macvtap left promiscuous mode [ 2075.243226][T20375] netlink: 'syz.3.37563': attribute type 4 has an invalid length. [ 2075.264691][T20375] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.37563'. [ 2075.294388][T20384] netlink: 3 bytes leftover after parsing attributes in process `syz.1.37566'. [ 2076.442732][T20420] netlink: 3 bytes leftover after parsing attributes in process `syz.2.37584'. [ 2076.563659][T20432] netlink: 'syz.2.37590': attribute type 10 has an invalid length. [ 2076.875334][T20442] netlink: 'syz.1.37594': attribute type 4 has an invalid length. [ 2076.909224][T20442] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.37594'. [ 2077.022660][T20453] netlink: 3 bytes leftover after parsing attributes in process `syz.4.37599'. [ 2077.514401][T20467] netlink: 'syz.1.37605': attribute type 10 has an invalid length. [ 2077.525919][T20467] device veth0_macvtap left promiscuous mode [ 2078.157475][T20486] netlink: 'syz.0.37624': attribute type 10 has an invalid length. [ 2078.264553][T20495] netlink: 'syz.2.37612': attribute type 4 has an invalid length. [ 2078.273364][T20486] device veth0_macvtap left promiscuous mode [ 2078.280338][T20495] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.37612'. [ 2078.521060][T20493] netlink: 3 bytes leftover after parsing attributes in process `syz.3.37613'. [ 2079.091241][T20507] device syzkaller0 entered promiscuous mode [ 2079.216217][T20511] netlink: 'syz.0.37620': attribute type 3 has an invalid length. [ 2079.437757][T20524] netlink: 3 bytes leftover after parsing attributes in process `syz.2.37629'. [ 2079.522956][T20530] netlink: 'syz.3.37631': attribute type 10 has an invalid length. [ 2079.565434][T20530] device veth0_macvtap left promiscuous mode [ 2079.945722][T20544] netlink: 'syz.0.37636': attribute type 4 has an invalid length. [ 2079.985466][T20544] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.37636'. [ 2080.016136][T20547] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.37637'. [ 2080.044998][T20549] validate_nla: 1 callbacks suppressed [ 2080.045033][T20549] netlink: 'syz.4.37638': attribute type 29 has an invalid length. [ 2080.156213][T20557] netlink: 3 bytes leftover after parsing attributes in process `syz.2.37643'. [ 2080.677233][T20578] netlink: 'syz.2.37651': attribute type 10 has an invalid length. [ 2080.699553][T20576] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.37650'. [ 2082.710097][T20622] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.37670'. [ 2083.375554][T20643] netlink: 'syz.4.37688': attribute type 3 has an invalid length. [ 2083.451221][T20643] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.37688'. [ 2083.583636][T20652] netlink: 'syz.2.37683': attribute type 29 has an invalid length. [ 2083.895836][T20664] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.37689'. [ 2084.364117][T20675] device syzkaller0 entered promiscuous mode [ 2084.893195][T20700] netlink: 'syz.3.37699': attribute type 29 has an invalid length. [ 2085.166866][T20714] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.37704'. [ 2085.585538][T20728] device syzkaller0 entered promiscuous mode [ 2085.707927][T20738] netlink: 'syz.1.37716': attribute type 29 has an invalid length. [ 2086.765952][T20773] netlink: 'syz.0.37732': attribute type 29 has an invalid length. [ 2087.945963][T20807] netlink: 'syz.2.37745': attribute type 29 has an invalid length. [ 2088.436677][T20823] device syzkaller0 entered promiscuous mode [ 2090.725038][T20843] netlink: 'syz.3.37760': attribute type 29 has an invalid length. [ 2090.971935][T20853] netlink: 'syz.3.37766': attribute type 29 has an invalid length. [ 2091.692723][T20853] netlink: 'syz.3.37766': attribute type 29 has an invalid length. [ 2091.738838][T20854] netlink: 'syz.3.37766': attribute type 29 has an invalid length. [ 2092.103032][T20872] netlink: 'syz.0.37776': attribute type 29 has an invalid length. [ 2093.403601][T20912] netlink: 'syz.1.37790': attribute type 29 has an invalid length. [ 2093.632457][T20931] netlink: 'syz.2.37801': attribute type 29 has an invalid length. [ 2093.686128][T20931] netlink: 'syz.2.37801': attribute type 29 has an invalid length. [ 2093.724518][T20937] netlink: 'syz.2.37801': attribute type 29 has an invalid length. [ 2093.821882][T20947] netlink: 'syz.4.37808': attribute type 29 has an invalid length. [ 2094.485820][T21001] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.37832'. [ 2095.133664][T21045] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.37844'. [ 2095.239657][T21047] device syzkaller0 entered promiscuous mode [ 2096.130118][T21080] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.37866'. [ 2096.401585][T21087] validate_nla: 11 callbacks suppressed [ 2096.401623][T21087] netlink: 'syz.2.37870': attribute type 1 has an invalid length. [ 2096.428444][T21087] netlink: 'syz.2.37870': attribute type 4 has an invalid length. [ 2096.438886][T21087] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.37870'. [ 2097.158506][T21120] netlink: 'syz.4.37883': attribute type 29 has an invalid length. [ 2097.181664][T21124] netlink: 'syz.3.37885': attribute type 1 has an invalid length. [ 2097.205385][T21124] netlink: 'syz.3.37885': attribute type 4 has an invalid length. [ 2097.228242][T21124] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.37885'. [ 2097.279744][T21120] netlink: 'syz.4.37883': attribute type 29 has an invalid length. [ 2097.338896][T21126] netlink: 'syz.4.37883': attribute type 29 has an invalid length. [ 2097.790755][T21152] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.37898'. [ 2097.925684][T21162] netlink: 'syz.0.37902': attribute type 29 has an invalid length. [ 2097.956660][T21162] netlink: 'syz.0.37902': attribute type 29 has an invalid length. [ 2097.994938][T21162] netlink: 'syz.0.37902': attribute type 29 has an invalid length. [ 2098.091470][T21172] netlink: 198692 bytes leftover after parsing attributes in process `syz.2.37906'. [ 2098.823329][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.829684][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.164189][T21228] IPv6: pim6reg1: Disabled Multicast RS [ 2099.176579][T21231] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.37943'. [ 2099.947332][T21270] netlink: 132 bytes leftover after parsing attributes in process `syz.3.37951'. [ 2099.993110][T21270] netlink: 132 bytes leftover after parsing attributes in process `syz.3.37951'. [ 2100.039581][T21270] netlink: 156 bytes leftover after parsing attributes in process `syz.3.37951'. [ 2100.355802][T21288] netlink: 180 bytes leftover after parsing attributes in process `syz.2.37960'. [ 2100.499956][T21298] IPv6: NLM_F_CREATE should be specified when creating new route [ 2100.732446][T21316] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.37967'. [ 2101.310761][T21346] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.37981'. [ 2101.338869][T21350] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.37984'. [ 2101.457834][T21359] netlink: 180 bytes leftover after parsing attributes in process `syz.1.37997'. [ 2101.618943][T21365] netlink: 132 bytes leftover after parsing attributes in process `syz.4.37989'. [ 2101.693737][T21365] validate_nla: 4 callbacks suppressed [ 2101.693778][T21365] netlink: 'syz.4.37989': attribute type 12 has an invalid length. [ 2101.728561][T21365] netlink: 132 bytes leftover after parsing attributes in process `syz.4.37989'. [ 2101.786929][T21375] netlink: 'syz.4.37989': attribute type 21 has an invalid length. [ 2101.812603][T21378] IPv6: pim6reg1: Disabled Multicast RS [ 2101.989457][T21389] netlink: 'syz.2.38002': attribute type 21 has an invalid length. [ 2102.370072][T21409] netlink: zone id is out of range [ 2102.381520][T21409] netlink: zone id is out of range [ 2102.387660][T21409] netlink: zone id is out of range [ 2102.398912][T21409] netlink: zone id is out of range [ 2102.457778][T21409] netlink: zone id is out of range [ 2102.486625][T21409] netlink: zone id is out of range [ 2102.551253][T21409] netlink: zone id is out of range [ 2102.571265][T21409] netlink: zone id is out of range [ 2102.577010][T21409] netlink: zone id is out of range [ 2102.603519][T21409] netlink: zone id is out of range [ 2102.644958][T21422] IPv6: pim6reg1: Disabled Multicast RS [ 2102.905670][T21434] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 2103.036792][T21443] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 2103.190484][T21456] netlink: 'syz.1.38029': attribute type 12 has an invalid length. [ 2103.223737][T21456] netlink: 'syz.1.38029': attribute type 21 has an invalid length. [ 2103.743278][T21491] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 2104.651518][T21535] netlink: 'syz.0.38069': attribute type 21 has an invalid length. [ 2104.711333][T21535] netlink: 'syz.0.38069': attribute type 12 has an invalid length. [ 2104.746438][T21535] netlink: 'syz.0.38069': attribute type 13 has an invalid length. [ 2104.768251][T21535] netlink: 'syz.0.38069': attribute type 14 has an invalid length. [ 2104.825792][T21535] netlink: 'syz.0.38069': attribute type 15 has an invalid length. [ 2104.841198][T21542] IPv6: NLM_F_CREATE should be specified when creating new route [ 2104.959081][T21544] __nla_validate_parse: 13 callbacks suppressed [ 2104.959122][T21544] netlink: 132 bytes leftover after parsing attributes in process `syz.2.38072'. [ 2105.019362][T21550] netlink: 132 bytes leftover after parsing attributes in process `syz.2.38072'. [ 2105.079804][T21557] netlink: 156 bytes leftover after parsing attributes in process `syz.2.38072'. [ 2105.167760][T21559] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.38078'. [ 2105.200549][T21554] bond0: (slave wlan1): Releasing backup interface [ 2105.240806][T21554] device wlan1 left promiscuous mode [ 2105.264727][T21554] device wlan1 entered promiscuous mode [ 2105.274550][T21554] team0: Port device wlan1 added [ 2105.364780][T21563] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.38091'. [ 2105.802005][T21586] IPv6: NLM_F_CREATE should be specified when creating new route [ 2105.967964][T21595] netlink: 143108 bytes leftover after parsing attributes in process `syz.2.38094'. [ 2106.294747][T21612] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.38098'. [ 2106.362140][T21610] device wlan1 entered promiscuous mode [ 2106.398845][T21610] team0: Port device wlan1 added [ 2106.627959][T21631] IPv6: NLM_F_CREATE should be specified when creating new route [ 2106.694738][T21635] netlink: 143108 bytes leftover after parsing attributes in process `syz.4.38112'. [ 2106.879666][T21646] validate_nla: 8 callbacks suppressed [ 2106.879698][T21646] netlink: 'syz.1.38127': attribute type 21 has an invalid length. [ 2107.227610][T21658] netlink: 'syz.4.38121': attribute type 10 has an invalid length. [ 2107.477664][T21658] device wlan1 entered promiscuous mode [ 2107.572317][T21658] team0: Port device wlan1 added [ 2107.606245][T21675] netlink: 'syz.1.38129': attribute type 1 has an invalid length. [ 2107.654056][T21675] netlink: 63763 bytes leftover after parsing attributes in process `syz.1.38129'. [ 2107.715420][T21677] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.38130'. [ 2107.878796][T21681] netlink: 'syz.1.38132': attribute type 21 has an invalid length. [ 2108.254696][T21696] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.457766][T21708] netlink: 'syz.1.38145': attribute type 21 has an invalid length. [ 2108.598500][T21714] netlink: 'syz.3.38146': attribute type 10 has an invalid length. [ 2108.728110][T21714] device wlan1 entered promiscuous mode [ 2108.743891][T21714] team0: Port device wlan1 added [ 2108.866328][T21733] netlink: 'syz.1.38155': attribute type 3 has an invalid length. [ 2108.876929][T21733] netlink: 'syz.1.38155': attribute type 1 has an invalid length. [ 2108.896126][T21733] netlink: 'syz.1.38155': attribute type 6 has an invalid length. [ 2108.912360][T21732] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2109.428959][T21763] netlink: 'syz.0.38167': attribute type 12 has an invalid length. [ 2109.503463][T21767] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.021559][T21799] __nla_validate_parse: 11 callbacks suppressed [ 2110.021580][T21799] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.38187'. [ 2110.042896][T21800] netlink: 208644 bytes leftover after parsing attributes in process `syz.4.38188'. [ 2110.080100][T21800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38188'. [ 2110.158751][T21806] netlink: 132 bytes leftover after parsing attributes in process `syz.0.38190'. [ 2110.227669][T21809] netlink: 132 bytes leftover after parsing attributes in process `syz.0.38190'. [ 2110.268344][T21806] netlink: 156 bytes leftover after parsing attributes in process `syz.0.38190'. [ 2110.497961][T21825] netlink: 132 bytes leftover after parsing attributes in process `syz.0.38210'. [ 2110.536189][T21825] netlink: 132 bytes leftover after parsing attributes in process `syz.0.38210'. [ 2110.568311][T21825] netlink: 156 bytes leftover after parsing attributes in process `syz.0.38210'. [ 2110.608855][T21833] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.38204'. [ 2111.355034][T21878] __sock_release: fasync list not empty! [ 2111.707955][T21894] device syzkaller0 entered promiscuous mode [ 2111.943782][T21902] device syzkaller0 entered promiscuous mode [ 2112.214041][T21921] device team_slave_0 left promiscuous mode [ 2112.472795][T21921] team0: Port device team_slave_0 removed [ 2112.514438][T21921] net_ratelimit: 245 callbacks suppressed [ 2112.514461][T21921] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2112.584923][T21931] validate_nla: 14 callbacks suppressed [ 2112.584948][T21931] netlink: 'syz.0.38249': attribute type 3 has an invalid length. [ 2112.640058][T21931] netlink: 'syz.0.38249': attribute type 1 has an invalid length. [ 2112.670754][T21931] netlink: 'syz.0.38249': attribute type 6 has an invalid length. [ 2112.714825][T21933] netlink: 'syz.4.38250': attribute type 12 has an invalid length. [ 2112.756773][T21933] netlink: 'syz.4.38250': attribute type 21 has an invalid length. [ 2113.524552][T21963] netlink: 'syz.3.38262': attribute type 2 has an invalid length. [ 2113.588189][T21963] netlink: 'syz.3.38262': attribute type 8 has an invalid length. [ 2113.660569][T21966] netlink: 'syz.1.38263': attribute type 12 has an invalid length. [ 2113.753028][T21966] netlink: 'syz.1.38263': attribute type 21 has an invalid length. [ 2113.842119][T21971] __sock_release: fasync list not empty! [ 2114.322638][T21985] device syzkaller0 entered promiscuous mode [ 2114.549833][T22003] __sock_release: fasync list not empty! [ 2114.612451][T22005] netlink: 'syz.1.38280': attribute type 12 has an invalid length. [ 2115.157481][T22025] __nla_validate_parse: 28 callbacks suppressed [ 2115.157521][T22025] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.38290'. [ 2115.520715][T22039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.38298'. [ 2115.550095][T22039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.38298'. [ 2115.637630][T22039] netlink: 156 bytes leftover after parsing attributes in process `syz.1.38298'. [ 2115.841527][T22052] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.38302'. [ 2116.785833][T22061] netlink: 144 bytes leftover after parsing attributes in process `syz.1.38305'. [ 2116.844446][T22061] device team_slave_0 left promiscuous mode [ 2117.363828][T22061] team0: Port device team_slave_0 removed [ 2117.438355][T22061] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2117.626679][T22072] validate_nla: 8 callbacks suppressed [ 2117.626741][T22072] netlink: 'syz.4.38310': attribute type 2 has an invalid length. [ 2117.641271][T22072] netlink: 'syz.4.38310': attribute type 8 has an invalid length. [ 2117.671418][T22072] netlink: 132 bytes leftover after parsing attributes in process `syz.4.38310'. [ 2118.279974][T22084] device syzkaller0 entered promiscuous mode [ 2118.462755][T22096] netlink: 'syz.0.38318': attribute type 1 has an invalid length. [ 2118.470771][T22096] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.38318'. [ 2119.027664][T22116] netlink: 'syz.0.38327': attribute type 2 has an invalid length. [ 2119.051087][T22116] netlink: 'syz.0.38327': attribute type 8 has an invalid length. [ 2119.094607][T22116] netlink: 132 bytes leftover after parsing attributes in process `syz.0.38327'. [ 2119.418685][T22130] device syzkaller0 entered promiscuous mode [ 2119.518208][T22134] netlink: 'syz.3.38335': attribute type 1 has an invalid length. [ 2119.541071][T22134] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.38335'. [ 2120.287971][T22154] netlink: 'syz.1.38343': attribute type 2 has an invalid length. [ 2120.307780][T22154] netlink: 'syz.1.38343': attribute type 8 has an invalid length. [ 2120.328920][T22154] netlink: 132 bytes leftover after parsing attributes in process `syz.1.38343'. [ 2120.627306][T22167] netlink: 'syz.1.38349': attribute type 1 has an invalid length. [ 2120.636037][T22165] netlink: 'syz.3.38348': attribute type 3 has an invalid length. [ 2120.659162][T22165] netlink: 152 bytes leftover after parsing attributes in process `syz.3.38348'. [ 2120.671583][T22167] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.38349'. [ 2120.691262][T22164] netlink: 132 bytes leftover after parsing attributes in process `syz.0.38359'. [ 2121.659503][T22201] netlink: 132 bytes leftover after parsing attributes in process `syz.0.38364'. [ 2121.701615][T22200] netlink: 152 bytes leftover after parsing attributes in process `syz.4.38365'. [ 2122.348734][T22224] team0: Device hsr_slave_0 failed to register rx_handler [ 2122.720798][T22240] validate_nla: 7 callbacks suppressed [ 2122.726589][T22240] netlink: 'syz.0.38382': attribute type 3 has an invalid length. [ 2122.755194][T22240] netlink: 152 bytes leftover after parsing attributes in process `syz.0.38382'. [ 2123.145142][T22261] netlink: 'syz.4.38393': attribute type 10 has an invalid length. [ 2123.991844][T22298] netlink: 3 bytes leftover after parsing attributes in process `syz.0.38410'. [ 2124.204794][T22312] netlink: 'syz.0.38417': attribute type 3 has an invalid length. [ 2124.427241][T22320] netlink: 'syz.0.38421': attribute type 9 has an invalid length. [ 2124.437517][T22320] netlink: 165200 bytes leftover after parsing attributes in process `syz.0.38421'. [ 2124.515299][T22322] device syzkaller0 entered promiscuous mode [ 2124.867735][T22327] netlink: 'syz.0.38421': attribute type 9 has an invalid length. [ 2124.881814][T22327] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.38421'. [ 2125.381615][T22352] netlink: 'syz.2.38432': attribute type 3 has an invalid length. [ 2125.913183][T22371] netlink: 'syz.1.38442': attribute type 3 has an invalid length. [ 2125.955321][T22371] __nla_validate_parse: 1 callbacks suppressed [ 2125.955401][T22371] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.38442'. [ 2126.157137][T22376] netlink: 3 bytes leftover after parsing attributes in process `syz.3.38445'. [ 2127.209983][T22396] netlink: 'syz.3.38456': attribute type 3 has an invalid length. [ 2127.240673][T22396] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.38456'. [ 2127.525506][T22413] netlink: 3 bytes leftover after parsing attributes in process `syz.4.38460'. [ 2128.847482][T22440] device syzkaller0 entered promiscuous mode [ 2128.930195][T22446] netlink: 'syz.2.38469': attribute type 9 has an invalid length. [ 2128.966163][T22446] netlink: 165200 bytes leftover after parsing attributes in process `syz.2.38469'. [ 2129.175110][T22456] netlink: 'syz.1.38475': attribute type 25 has an invalid length. [ 2129.216796][T22456] netlink: 'syz.1.38475': attribute type 6 has an invalid length. [ 2129.424810][T22448] netlink: 'syz.2.38469': attribute type 9 has an invalid length. [ 2129.470444][T22448] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.38469'. [ 2130.816872][T22482] device syzkaller0 entered promiscuous mode [ 2131.253634][T22513] netlink: 'syz.4.38499': attribute type 9 has an invalid length. [ 2131.318557][T22513] netlink: 165200 bytes leftover after parsing attributes in process `syz.4.38499'. [ 2131.624452][T22516] netlink: 'syz.4.38499': attribute type 9 has an invalid length. [ 2131.700793][T22516] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.38499'. [ 2132.084740][T22532] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.38511'. [ 2133.303836][T22549] device syzkaller0 entered promiscuous mode [ 2133.582796][T22570] netlink: 'syz.3.38526': attribute type 11 has an invalid length. [ 2133.619860][T22570] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.38526'. [ 2133.672167][T22570] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2133.714361][T22570] CPU: 0 PID: 22570 Comm: syz.3.38526 Not tainted syzkaller #0 [ 2133.721985][T22570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2133.732174][T22570] Call Trace: [ 2133.735492][T22570] [ 2133.738463][T22570] dump_stack_lvl+0x188/0x250 [ 2133.743268][T22570] ? show_regs_print_info+0x20/0x20 [ 2133.748514][T22570] ? load_image+0x410/0x410 [ 2133.753074][T22570] sysfs_warn_dup+0x8a/0xa0 [ 2133.757616][T22570] sysfs_do_create_link_sd+0xc0/0x110 [ 2133.763028][T22570] device_add+0x83b/0x1050 [ 2133.767498][T22570] wiphy_register+0x1e74/0x2c40 [ 2133.772418][T22570] ? cfg80211_event_work+0x40/0x40 [ 2133.777572][T22570] ? minstrel_ht_alloc+0x807/0x980 [ 2133.782814][T22570] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2133.788931][T22570] ieee80211_register_hw+0x2a03/0x3a60 [ 2133.794443][T22570] ? ieee80211_register_hw+0xac1/0x3a60 [ 2133.800313][T22570] ? ieee80211_tasklet_handler+0x20/0x20 [ 2133.805988][T22570] ? rcu_is_watching+0x11/0xa0 [ 2133.810802][T22570] ? hrtimer_init+0x10c/0x220 [ 2133.815533][T22570] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2133.821416][T22570] hwsim_new_radio_nl+0xa7d/0xc50 [ 2133.826516][T22570] genl_rcv_msg+0xd0b/0xfa0 [ 2133.831083][T22570] ? genl_bind+0x370/0x370 [ 2133.835552][T22570] ? swake_up_one+0x6d/0x130 [ 2133.840186][T22570] ? verify_lock_unused+0x140/0x140 [ 2133.845435][T22570] ? rcu_preempt_deferred_qs_irqrestore+0x993/0xbd0 [ 2133.852098][T22570] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2133.858495][T22570] netlink_rcv_skb+0x1e9/0x430 [ 2133.863308][T22570] ? genl_bind+0x370/0x370 [ 2133.867777][T22570] ? netlink_ack+0xb10/0xb10 [ 2133.872429][T22570] ? down_read+0x1aa/0x2e0 [ 2133.876927][T22570] genl_rcv+0x24/0x40 [ 2133.880954][T22570] netlink_unicast+0x78f/0x940 [ 2133.885769][T22570] netlink_sendmsg+0x8ba/0xbe0 [ 2133.890585][T22570] ? netlink_getsockopt+0x570/0x570 [ 2133.895828][T22570] ? aa_sock_msg_perm+0x94/0x150 [ 2133.900809][T22570] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2133.906134][T22570] ? security_socket_sendmsg+0x7c/0xa0 [ 2133.911631][T22570] ? netlink_getsockopt+0x570/0x570 [ 2133.916871][T22570] ____sys_sendmsg+0x5be/0x8f0 [ 2133.921685][T22570] ? __sys_sendmsg_sock+0x30/0x30 [ 2133.926762][T22570] ? import_iovec+0x6f/0xa0 [ 2133.931315][T22570] ___sys_sendmsg+0x236/0x2e0 [ 2133.936044][T22570] ? __sys_sendmsg+0x290/0x290 [ 2133.940984][T22570] __se_sys_sendmsg+0x1b7/0x2a0 [ 2133.945880][T22570] ? __x64_sys_sendmsg+0x80/0x80 [ 2133.950865][T22570] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2133.956904][T22570] ? lockdep_hardirqs_on+0x94/0x140 [ 2133.962150][T22570] do_syscall_64+0x4c/0xa0 [ 2133.966611][T22570] ? clear_bhb_loop+0x30/0x80 [ 2133.971329][T22570] ? clear_bhb_loop+0x30/0x80 [ 2133.976062][T22570] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2133.981990][T22570] RIP: 0033:0x7f3fc6996e59 [ 2133.986451][T22570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2134.006102][T22570] RSP: 002b:00007f3fc4bef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2134.014564][T22570] RAX: ffffffffffffffda RBX: 00007f3fc6c1efa0 RCX: 00007f3fc6996e59 [ 2134.022582][T22570] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2134.030592][T22570] RBP: 00007f3fc6a2ce6f R08: 0000000000000000 R09: 0000000000000000 [ 2134.038602][T22570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2134.046610][T22570] R13: 00007f3fc6c1f038 R14: 00007f3fc6c1efa0 R15: 00007ffe4ca2c348 [ 2134.054639][T22570] [ 2134.508784][T22579] netlink: 'syz.1.38527': attribute type 9 has an invalid length. [ 2134.554755][T22579] netlink: 165200 bytes leftover after parsing attributes in process `syz.1.38527'. [ 2134.928600][T22586] netlink: 'syz.1.38527': attribute type 9 has an invalid length. [ 2135.007811][T22586] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.38527'. [ 2135.668018][T22599] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.38533'. [ 2136.987218][T22632] netlink: 'syz.4.38546': attribute type 1 has an invalid length. [ 2137.025466][T22632] netlink: 101600 bytes leftover after parsing attributes in process `syz.4.38546'. [ 2138.194189][T22647] netlink: 'syz.3.38550': attribute type 9 has an invalid length. [ 2138.211168][T22647] netlink: 165200 bytes leftover after parsing attributes in process `syz.3.38550'. [ 2138.529469][T22662] sock: sock_set_timeout: `syz.4.38555' (pid 22662) tries to set negative timeout [ 2138.634391][T22648] netlink: 'syz.3.38550': attribute type 9 has an invalid length. [ 2138.671500][T22648] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.38550'. [ 2138.912541][T22654] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.38552'. [ 2139.641329][T22671] device syzkaller0 entered promiscuous mode [ 2141.049043][T22699] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.38581'. [ 2141.390565][T22702] netlink: 'syz.3.38572': attribute type 9 has an invalid length. [ 2141.413486][T22702] netlink: 165200 bytes leftover after parsing attributes in process `syz.3.38572'. [ 2141.560554][T22696] netlink: 'syz.3.38572': attribute type 9 has an invalid length. [ 2141.580289][T22696] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.38572'. [ 2145.148105][T22734] netlink: 'syz.1.38594': attribute type 21 has an invalid length. [ 2145.198690][T22734] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.38594'. [ 2146.765016][T22770] netlink: 'syz.2.38601': attribute type 21 has an invalid length. [ 2146.780750][T22770] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.38601'. [ 2152.622638][T22838] netlink: 15179 bytes leftover after parsing attributes in process `syz.0.38625'. [ 2155.666170][T22852] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.38630'. [ 2160.263062][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.269412][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.510239][T22904] netlink: 'syz.0.38650': attribute type 3 has an invalid length. [ 2165.555919][T22904] netlink: 'syz.0.38650': attribute type 1 has an invalid length. [ 2165.581968][T22904] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.38650'. [ 2169.913311][T22949] netlink: 'syz.3.38680': attribute type 3 has an invalid length. [ 2169.965599][T22949] netlink: 'syz.3.38680': attribute type 1 has an invalid length. [ 2170.004435][T22949] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.38680'. [ 2174.639420][T23025] device syzkaller0 entered promiscuous mode [ 2175.625329][T23046] -1: renamed from syzkaller0 [ 2176.058235][T23059] device syzkaller0 entered promiscuous mode [ 2177.110212][T23081] device syzkaller0 entered promiscuous mode [ 2177.255722][T23083] device syzkaller0 entered promiscuous mode [ 2178.478370][T23124] netlink: 144 bytes leftover after parsing attributes in process `syz.4.38740'. [ 2179.191058][T23147] netlink: 144 bytes leftover after parsing attributes in process `syz.2.38759'. [ 2179.528109][T23151] device syzkaller0 entered promiscuous mode [ 2180.210572][T23180] netlink: 144 bytes leftover after parsing attributes in process `syz.0.38762'. [ 2180.320857][T23182] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.38763'. [ 2180.988052][T23197] netlink: 144 bytes leftover after parsing attributes in process `syz.1.38777'. [ 2181.228755][T23208] device syzkaller0 entered promiscuous mode [ 2181.537101][T23218] delete_channel: no stack [ 2181.632420][T23223] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.38778'. [ 2181.827252][T23227] netlink: 'syz.4.38780': attribute type 21 has an invalid length. [ 2181.840439][T23227] netlink: 'syz.4.38780': attribute type 6 has an invalid length. [ 2181.848992][T23227] netlink: 6172 bytes leftover after parsing attributes in process `syz.4.38780'. [ 2184.823173][T23242] netlink: 144 bytes leftover after parsing attributes in process `syz.3.38784'. [ 2184.847998][T23240] device syzkaller0 entered promiscuous mode [ 2185.217865][T23252] delete_channel: no stack [ 2188.892049][T23281] device syzkaller0 entered promiscuous mode [ 2188.900241][T11103] syzkaller0: tun_net_xmit 70 [ 2188.913695][T23282] syzkaller0: create flow: hash 4069045648 index 1 [ 2190.949454][T23280] syzkaller0: delete flow: hash 4069045648 index 1 [ 2190.998304][T23287] delete_channel: no stack [ 2191.377309][T23298] device syzkaller0 entered promiscuous mode [ 2191.447038][T23311] netlink: 144 bytes leftover after parsing attributes in process `syz.1.38814'. [ 2191.741116][T23315] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.38815'. [ 2195.534270][T23333] device syzkaller0 entered promiscuous mode [ 2195.939567][T23359] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.38829'. [ 2208.902413][T23470] netlink: 'syz.3.38872': attribute type 1 has an invalid length. [ 2208.931285][T23470] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.38872'. [ 2212.486792][T23505] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.38886'. [ 2212.619032][T23510] netlink: 'syz.4.38892': attribute type 1 has an invalid length. [ 2212.634195][T23510] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.38892'. [ 2212.688038][T23517] netlink: 'syz.3.38895': attribute type 21 has an invalid length. [ 2216.268794][T23562] device syzkaller0 entered promiscuous mode [ 2216.319612][T23572] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.38916'. [ 2217.561587][T23612] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.38930'. [ 2218.089589][T23629] device syzkaller0 entered promiscuous mode [ 2220.875759][T23650] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.38944'. [ 2221.702851][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.709214][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.169385][T23701] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.38966'. [ 2227.514522][T23709] netlink: 'syz.3.38970': attribute type 2 has an invalid length. [ 2227.533171][T23709] netlink: 198692 bytes leftover after parsing attributes in process `syz.3.38970'. [ 2228.532579][T23721] netlink: 132 bytes leftover after parsing attributes in process `syz.0.38975'. [ 2228.764232][T23723] netlink: 'syz.3.38976': attribute type 2 has an invalid length. [ 2228.794903][T23723] netlink: 'syz.3.38976': attribute type 8 has an invalid length. [ 2228.803954][T23723] netlink: 132 bytes leftover after parsing attributes in process `syz.3.38976'. [ 2228.926027][T23734] netlink: 'syz.0.38981': attribute type 21 has an invalid length. [ 2228.953139][T23734] netlink: 'syz.0.38981': attribute type 1 has an invalid length. [ 2228.978814][T23734] netlink: 144 bytes leftover after parsing attributes in process `syz.0.38981'. [ 2229.558867][T23761] netlink: 'syz.0.38992': attribute type 2 has an invalid length. [ 2229.580287][T23761] netlink: 198692 bytes leftover after parsing attributes in process `syz.0.38992'. [ 2229.739942][T23769] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.38995'. [ 2229.982396][T23781] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.39011'. [ 2230.627165][T23804] netlink: 'syz.4.39010': attribute type 2 has an invalid length. [ 2230.665672][T23804] netlink: 198692 bytes leftover after parsing attributes in process `syz.4.39010'. [ 2231.153685][T23818] netlink: 'syz.4.39019': attribute type 21 has an invalid length. [ 2231.191480][T23818] netlink: 'syz.4.39019': attribute type 1 has an invalid length. [ 2231.199526][T23818] netlink: 144 bytes leftover after parsing attributes in process `syz.4.39019'. [ 2231.441764][T23829] netlink: 'syz.0.39031': attribute type 2 has an invalid length. [ 2234.211573][T23876] validate_nla: 4 callbacks suppressed [ 2234.211594][T23876] netlink: 'syz.4.39039': attribute type 2 has an invalid length. [ 2234.283060][T23876] netlink: 'syz.4.39039': attribute type 8 has an invalid length. [ 2234.329879][T23876] __nla_validate_parse: 4 callbacks suppressed [ 2234.329896][T23876] netlink: 132 bytes leftover after parsing attributes in process `syz.4.39039'. [ 2234.877704][T23895] netlink: 14 bytes leftover after parsing attributes in process `syz.3.39050'. [ 2234.946842][T23895] device hsr_slave_0 left promiscuous mode [ 2234.990360][T23895] device hsr_slave_1 left promiscuous mode [ 2238.416696][T23944] netlink: 'syz.2.39062': attribute type 2 has an invalid length. [ 2238.462318][T23944] netlink: 'syz.2.39062': attribute type 8 has an invalid length. [ 2238.547493][T23944] netlink: 132 bytes leftover after parsing attributes in process `syz.2.39062'. [ 2238.816750][T23951] device syzkaller0 entered promiscuous mode [ 2238.876104][T23951] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 2241.159732][T23991] device syzkaller0 entered promiscuous mode [ 2243.311839][T24024] netlink: 'syz.2.39095': attribute type 3 has an invalid length. [ 2243.340490][T24024] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.39095'. [ 2243.588546][T24033] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.39098'. [ 2243.624679][T24033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39098'. [ 2247.862561][T24067] device syzkaller0 entered promiscuous mode [ 2248.992617][T24104] device syzkaller0 entered promiscuous mode [ 2249.136789][T24109] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.39129'. [ 2249.186707][T24109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39129'. [ 2254.898754][T24243] device syzkaller0 entered promiscuous mode [ 2258.185406][T24308] device syzkaller0 entered promiscuous mode [ 2260.595251][T24350] device syzkaller0 entered promiscuous mode [ 2263.089873][T24396] device syzkaller0 entered promiscuous mode [ 2266.194316][T24424] netlink: 'syz.0.39256': attribute type 10 has an invalid length. [ 2266.368469][T24424] device wg1 entered promiscuous mode [ 2266.386880][T24424] team0: Device wg1 is of different type [ 2266.441367][T24444] netlink: 'syz.2.39263': attribute type 9 has an invalid length. [ 2266.488977][T24444] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.39263'. [ 2266.551609][T24422] delete_channel: no stack [ 2266.578882][T24437] device syzkaller0 entered promiscuous mode [ 2273.519479][T24494] netlink: 'syz.1.39283': attribute type 9 has an invalid length. [ 2273.547269][T24494] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.39283'. [ 2273.604375][T24498] device syzkaller0 entered promiscuous mode [ 2277.315532][T24557] netlink: 'syz.4.39307': attribute type 9 has an invalid length. [ 2277.340518][T24557] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.39307'. [ 2277.437765][T24558] device syzkaller0 entered promiscuous mode [ 2277.584869][T24566] delete_channel: no stack [ 2278.624503][T24590] netlink: 'syz.4.39320': attribute type 3 has an invalid length. [ 2278.681208][T24590] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.39320'. [ 2278.828095][T24599] delete_channel: no stack [ 2280.977187][T24650] delete_channel: no stack [ 2282.605995][T24680] delete_channel: no stack [ 2283.049658][T24691] delete_channel: no stack [ 2283.143007][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.149539][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.297021][T24710] netlink: 'syz.2.39364': attribute type 21 has an invalid length. [ 2284.366857][T24710] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.39364'. [ 2284.556552][T24715] netlink: 'syz.2.39366': attribute type 29 has an invalid length. [ 2284.627533][T24715] netlink: 'syz.2.39366': attribute type 29 has an invalid length. [ 2284.668003][T24715] netlink: 'syz.2.39366': attribute type 1 has an invalid length. [ 2284.696836][T24715] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.39366'. [ 2284.724609][T24716] netlink: 'syz.2.39366': attribute type 29 has an invalid length. [ 2285.636871][T24727] netlink: 'syz.1.39370': attribute type 10 has an invalid length. [ 2286.395177][T24726] delete_channel: no stack [ 2286.842306][T24731] delete_channel: no stack [ 2288.535969][T24727] device wg1 entered promiscuous mode [ 2288.551122][T24727] team0: Device wg1 is of different type [ 2289.008127][T24745] delete_channel: no stack [ 2291.098746][T24776] delete_channel: no stack [ 2291.316969][T24789] netlink: 'syz.1.39395': attribute type 21 has an invalid length. [ 2291.366372][T24789] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.39395'. [ 2291.934510][T24804] netlink: 'syz.4.39410': attribute type 21 has an invalid length. [ 2291.950971][T24804] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.39410'. [ 2293.199774][T24817] delete_channel: no stack [ 2298.579245][T24856] delete_channel: no stack [ 2298.619704][T24859] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.39434'. [ 2298.681097][T24859] openvswitch: netlink: Duplicate key (type 0). [ 2299.182945][T24869] delete_channel: no stack [ 2301.259376][T24886] delete_channel: no stack [ 2302.446810][T24891] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.39439'. [ 2302.498869][T24891] openvswitch: netlink: Duplicate key (type 0). [ 2302.897324][T24906] delete_channel: no stack [ 2303.089697][T24913] device syzkaller0 entered promiscuous mode [ 2303.100271][T24915] netlink: 'syz.4.39448': attribute type 10 has an invalid length. [ 2303.866595][T24914] delete_channel: no stack [ 2306.023632][T24915] device wg1 entered promiscuous mode [ 2306.029296][T24915] team0: Device wg1 is of different type [ 2306.053992][T24917] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.39449'. [ 2306.068218][T24917] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.39449'. [ 2306.088035][T24917] netlink: 2 bytes leftover after parsing attributes in process `syz.2.39449'. [ 2307.231368][T24943] delete_channel: no stack [ 2308.120206][T24972] netlink: 'syz.1.39471': attribute type 10 has an invalid length. [ 2308.295120][T24969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2308.498715][T24980] delete_channel: no stack [ 2309.710444][T25011] device syzkaller0 entered promiscuous mode [ 2309.717810][T25018] delete_channel: no stack [ 2311.127702][T25054] device syzkaller0 entered promiscuous mode [ 2314.275174][T25081] netlink: 'syz.3.39513': attribute type 10 has an invalid length. [ 2314.446124][T25080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2316.215455][T25106] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.39523'. [ 2317.056449][T25126] netlink: 'syz.4.39531': attribute type 10 has an invalid length. [ 2317.114188][T25122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2317.314999][T25131] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.39533'. [ 2317.405896][T25131] netlink: 'syz.0.39533': attribute type 3 has an invalid length. [ 2317.431043][T25131] netlink: 16770 bytes leftover after parsing attributes in process `syz.0.39533'. [ 2317.469048][T25131] netlink: 'syz.0.39533': attribute type 1 has an invalid length. [ 2317.767092][T25147] tap1: tun_chr_ioctl cmd 1074025675 [ 2317.798547][T25147] tap1: persist enabled [ 2319.113381][T25170] device syzkaller0 entered promiscuous mode [ 2319.198914][T25174] netlink: 'syz.0.39547': attribute type 10 has an invalid length. [ 2319.279127][T25173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2320.332407][T25211] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.39562'. [ 2320.810041][T25218] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.39565'. [ 2320.878825][T25218] netlink: 'syz.4.39565': attribute type 3 has an invalid length. [ 2320.928022][T25218] netlink: 16770 bytes leftover after parsing attributes in process `syz.4.39565'. [ 2320.976062][T25218] netlink: 'syz.4.39565': attribute type 1 has an invalid length. [ 2321.097938][T25222] tap1: tun_chr_ioctl cmd 1074025675 [ 2321.104344][T25222] tap1: persist enabled [ 2322.669639][T25243] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.39576'. [ 2322.819461][T25252] netlink: 'syz.3.39578': attribute type 10 has an invalid length. [ 2322.861719][T25252] netlink: 55 bytes leftover after parsing attributes in process `syz.3.39578'. [ 2322.901758][T25254] netlink: 'syz.2.39577': attribute type 10 has an invalid length. [ 2322.961454][T25255] netlink: 'syz.3.39578': attribute type 1 has an invalid length. [ 2322.979159][T25253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2323.224970][T25258] tap1: tun_chr_ioctl cmd 1074025675 [ 2323.260934][T25258] tap1: persist enabled [ 2326.288099][T25292] netlink: 'syz.0.39596': attribute type 10 has an invalid length. [ 2326.342093][T25290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2329.405105][T25383] netlink: 'syz.1.39635': attribute type 10 has an invalid length. [ 2329.480056][T25383] netlink: 55 bytes leftover after parsing attributes in process `syz.1.39635'. [ 2329.531200][T25387] netlink: 'syz.1.39635': attribute type 1 has an invalid length. [ 2330.598020][T25430] mac80211_hwsim hwsim103 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2331.002203][T25448] bridge0: port 5(batadv0) entered blocking state [ 2331.022648][T25448] bridge0: port 5(batadv0) entered disabled state [ 2331.052177][T25448] device batadv0 entered promiscuous mode [ 2331.081725][T25448] bridge0: port 5(batadv0) entered blocking state [ 2331.088475][T25448] bridge0: port 5(batadv0) entered forwarding state [ 2331.381190][T13732] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2331.391080][T13732] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2332.110630][T25501] netlink: 'syz.4.39686': attribute type 10 has an invalid length. [ 2332.132290][T25501] netlink: 55 bytes leftover after parsing attributes in process `syz.4.39686'. [ 2332.153645][T25501] netlink: 'syz.4.39686': attribute type 1 has an invalid length. [ 2332.618534][T25522] netlink: 'syz.0.39697': attribute type 2 has an invalid length. [ 2332.630349][T25519] bridge0: port 5(batadv0) entered blocking state [ 2332.661399][T25522] netlink: 'syz.0.39697': attribute type 11 has an invalid length. [ 2332.678676][T25519] bridge0: port 5(batadv0) entered disabled state [ 2332.702083][T25522] netlink: 198172 bytes leftover after parsing attributes in process `syz.0.39697'. [ 2332.723645][T25519] device batadv0 entered promiscuous mode [ 2332.752256][T25519] bridge0: port 5(batadv0) entered blocking state [ 2332.758941][T25519] bridge0: port 5(batadv0) entered forwarding state [ 2333.007567][T13732] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2333.016900][T13732] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2333.252789][T25542] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.39704'. [ 2333.711124][T25556] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.39720'. [ 2333.728818][T25554] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.39720'. [ 2335.533895][T25625] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.39739'. [ 2335.855304][T25636] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.39743'. [ 2335.877437][T25633] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.39743'. [ 2336.313963][T25644] netlink: 144 bytes leftover after parsing attributes in process `syz.0.39746'. [ 2336.332517][T25644] device team_slave_0 left promiscuous mode [ 2336.397182][T25644] team0: Port device team_slave_0 removed [ 2336.408934][T25644] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2336.548008][T25653] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.39753'. [ 2336.723099][T25669] netlink: 132 bytes leftover after parsing attributes in process `syz.1.39759'. [ 2336.797069][T25673] netlink: 60 bytes leftover after parsing attributes in process `syz.1.39759'. [ 2336.858134][T25673] netlink: 60 bytes leftover after parsing attributes in process `syz.1.39759'. [ 2336.887524][T25669] netlink: 60 bytes leftover after parsing attributes in process `syz.1.39759'. [ 2337.012946][T25676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2337.029973][T25676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2337.060326][T25676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2337.113315][T25676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2337.192154][T25676] bridge0: port 5(batadv0) entered disabled state [ 2337.235124][T25676] device batadv0 left promiscuous mode [ 2337.246106][T25676] bridge0: port 5(batadv0) entered disabled state [ 2337.303049][T25690] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.39766'. [ 2338.216822][T25719] device syzkaller0 entered promiscuous mode [ 2338.708928][T25736] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2338.810628][T25747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2338.819518][T25747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2340.749940][T25797] netlink: 'syz.1.39807': attribute type 3 has an invalid length. [ 2340.807199][T25797] netlink: 'syz.1.39807': attribute type 1 has an invalid length. [ 2340.831124][T25797] __nla_validate_parse: 2 callbacks suppressed [ 2340.831172][T25797] netlink: 132 bytes leftover after parsing attributes in process `syz.1.39807'. [ 2341.088443][T25812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2341.117127][T25812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2341.187251][T25812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2341.218309][T25812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2341.266060][T25812] bridge0: port 5(batadv0) entered disabled state [ 2341.306294][T25812] device batadv0 left promiscuous mode [ 2341.315362][T25812] bridge0: port 5(batadv0) entered disabled state [ 2341.879640][T25837] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.39819'. [ 2341.925176][T25833] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.39819'. [ 2342.298322][T25851] netlink: 144 bytes leftover after parsing attributes in process `syz.3.39824'. [ 2342.309766][T25851] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2342.529562][T25856] netlink: 'syz.2.39828': attribute type 4 has an invalid length. [ 2342.617524][T25861] mac80211_hwsim hwsim105 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2342.692193][T25865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2342.725146][T25865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2342.744724][T25865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2342.789729][T25865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2342.897533][T25865] bridge0: port 3(batadv0) entered disabled state [ 2342.934060][T25865] device batadv0 left promiscuous mode [ 2342.940073][T25865] bridge0: port 3(batadv0) entered disabled state [ 2343.112897][T25877] device syzkaller0 entered promiscuous mode [ 2343.374819][T25886] netlink: 'syz.4.39840': attribute type 3 has an invalid length. [ 2343.389060][T25886] netlink: 'syz.4.39840': attribute type 1 has an invalid length. [ 2343.411485][T25886] netlink: 132 bytes leftover after parsing attributes in process `syz.4.39840'. [ 2343.658600][T25900] netlink: 132 bytes leftover after parsing attributes in process `syz.3.39845'. [ 2343.709105][T25903] netlink: 60 bytes leftover after parsing attributes in process `syz.3.39845'. [ 2343.868541][T25896] netlink: 144 bytes leftover after parsing attributes in process `syz.2.39841'. [ 2343.892225][T25896] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2343.934438][T25903] netlink: 60 bytes leftover after parsing attributes in process `syz.3.39845'. [ 2344.056901][T25900] netlink: 60 bytes leftover after parsing attributes in process `syz.3.39845'. [ 2344.398407][T25921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2344.439182][T25921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2344.457658][T25921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2344.502237][T25921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2344.535013][T25927] netlink: 'syz.2.39854': attribute type 3 has an invalid length. [ 2344.557717][T25927] netlink: 'syz.2.39854': attribute type 1 has an invalid length. [ 2344.583447][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.589823][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.624812][T25921] bridge0: port 4(batadv0) entered disabled state [ 2344.726191][T25921] device batadv0 left promiscuous mode [ 2344.751092][T25921] bridge0: port 4(batadv0) entered disabled state [ 2344.927634][T25931] device syzkaller0 entered promiscuous mode [ 2346.066657][T25984] __nla_validate_parse: 1 callbacks suppressed [ 2346.066734][T25984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39875'. [ 2346.129325][T25984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39875'. [ 2346.165986][T25984] netlink: 33 bytes leftover after parsing attributes in process `syz.4.39875'. [ 2346.193385][T25984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39875'. [ 2346.216312][T25984] netlink: 33 bytes leftover after parsing attributes in process `syz.4.39875'. [ 2346.246243][T25984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39875'. [ 2346.273437][T25984] netlink: 33 bytes leftover after parsing attributes in process `syz.4.39875'. [ 2346.651970][T26000] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.39876'. [ 2346.691497][T25992] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.39876'. [ 2347.126245][T26011] netlink: 144 bytes leftover after parsing attributes in process `syz.4.39880'. [ 2347.156309][T26011] device team_slave_0 left promiscuous mode [ 2347.165651][T26011] team0: Port device team_slave_0 removed [ 2347.181421][T26011] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2349.385063][T26080] netlink: 'syz.4.39909': attribute type 10 has an invalid length. [ 2349.450847][T26080] bridge0: port 5(team0) entered disabled state [ 2349.474682][T26080] device team0 left promiscuous mode [ 2349.501297][T26080] device team_slave_1 left promiscuous mode [ 2349.508267][T26080] device wlan1 left promiscuous mode [ 2349.556377][T26080] bridge0: port 5(team0) entered disabled state [ 2349.593548][T26080] 8021q: adding VLAN 0 to HW filter on device team0 [ 2349.608950][T26080] device team0 entered promiscuous mode [ 2349.617159][T26080] device team_slave_1 entered promiscuous mode [ 2349.626933][T26080] device wlan1 entered promiscuous mode [ 2349.640210][T26080] bond0: (slave team0): Enslaving as an active interface with an up link [ 2350.489733][T26115] netlink: 'syz.4.39922': attribute type 29 has an invalid length. [ 2350.528676][T26112] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2350.549160][T26115] netlink: 'syz.4.39922': attribute type 29 has an invalid length. [ 2350.603562][T26119] netlink: 'syz.4.39922': attribute type 29 has an invalid length. [ 2351.471501][T26150] __nla_validate_parse: 14 callbacks suppressed [ 2351.471576][T26150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39938'. [ 2351.491543][T26150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39938'. [ 2351.503689][T26150] netlink: 33 bytes leftover after parsing attributes in process `syz.2.39938'. [ 2351.513470][T26150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39938'. [ 2351.524990][T26150] netlink: 33 bytes leftover after parsing attributes in process `syz.2.39938'. [ 2351.536141][T26150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39938'. [ 2351.553831][T26150] netlink: 33 bytes leftover after parsing attributes in process `syz.2.39938'. [ 2351.778818][T26164] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.39943'. [ 2351.810949][T26164] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2352.000235][T26171] sctp: [Deprecated]: syz.0.39946 (pid 26171) Use of int in maxseg socket option. [ 2352.000235][T26171] Use struct sctp_assoc_value instead [ 2352.239659][T26185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39950'. [ 2352.268293][T26185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39950'. [ 2352.483452][T26186] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2352.512792][T26197] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2352.659834][T26200] netlink: 'syz.2.39961': attribute type 29 has an invalid length. [ 2352.759250][T26200] netlink: 'syz.2.39961': attribute type 29 has an invalid length. [ 2352.768590][T26205] netlink: 'syz.2.39961': attribute type 29 has an invalid length. [ 2353.161121][T26222] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2353.178769][T26224] mac80211_hwsim hwsim74 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2353.355898][T26236] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2353.664923][T26250] netlink: 'syz.0.39977': attribute type 29 has an invalid length. [ 2353.696037][T26250] netlink: 'syz.0.39977': attribute type 29 has an invalid length. [ 2353.721462][T26255] netlink: 'syz.0.39977': attribute type 29 has an invalid length. [ 2354.073364][T26265] mac80211_hwsim hwsim98 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2354.208480][T26270] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2354.257359][T26274] device syzkaller0 entered promiscuous mode [ 2354.316048][T26274] syzkaller0: tun_net_xmit 1280 [ 2354.625295][T26290] netlink: 'syz.1.39994': attribute type 29 has an invalid length. [ 2354.664888][T26290] netlink: 'syz.1.39994': attribute type 29 has an invalid length. [ 2354.684494][T26293] netlink: 'syz.1.39994': attribute type 29 has an invalid length. [ 2354.710582][T26286] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2354.754460][T26286] CPU: 1 PID: 26286 Comm: syz.2.40002 Not tainted syzkaller #0 [ 2354.762114][T26286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2354.772368][T26286] Call Trace: [ 2354.775691][T26286] [ 2354.778657][T26286] dump_stack_lvl+0x188/0x250 [ 2354.783386][T26286] ? lockdep_hardirqs_on+0x94/0x140 [ 2354.788628][T26286] ? show_regs_print_info+0x20/0x20 [ 2354.793901][T26286] ? audit_tree_destroy_watch+0x20/0x20 [ 2354.799504][T26286] sysfs_warn_dup+0x8a/0xa0 [ 2354.804061][T26286] sysfs_do_create_link_sd+0xc0/0x110 [ 2354.809567][T26286] device_add+0x83b/0x1050 [ 2354.814037][T26286] wiphy_register+0x1e74/0x2c40 [ 2354.818951][T26286] ? cfg80211_event_work+0x40/0x40 [ 2354.824111][T26286] ? minstrel_ht_alloc+0x807/0x980 [ 2354.829273][T26286] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2354.835398][T26286] ieee80211_register_hw+0x2a03/0x3a60 [ 2354.840905][T26286] ? ieee80211_register_hw+0xac1/0x3a60 [ 2354.846508][T26286] ? ieee80211_tasklet_handler+0x20/0x20 [ 2354.852193][T26286] ? rcu_is_watching+0x11/0xa0 [ 2354.857004][T26286] ? hrtimer_init+0x10c/0x220 [ 2354.861823][T26286] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2354.867606][T26286] hwsim_new_radio_nl+0xa7d/0xc50 [ 2354.872692][T26286] genl_rcv_msg+0xd0b/0xfa0 [ 2354.877249][T26286] ? genl_bind+0x370/0x370 [ 2354.881714][T26286] ? irqentry_enter+0x33/0x50 [ 2354.886448][T26286] ? verify_lock_unused+0x140/0x140 [ 2354.891690][T26286] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2354.897724][T26286] ? verify_lock_unused+0x140/0x140 [ 2354.903056][T26286] ? lock_chain_count+0x20/0x20 [ 2354.907964][T26286] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2354.914155][T26286] ? lockdep_hardirqs_on+0x94/0x140 [ 2354.919389][T26286] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2354.925774][T26286] netlink_rcv_skb+0x1e9/0x430 [ 2354.930580][T26286] ? genl_bind+0x370/0x370 [ 2354.935035][T26286] ? netlink_ack+0xb10/0xb10 [ 2354.939673][T26286] ? down_read+0x1aa/0x2e0 [ 2354.944136][T26286] genl_rcv+0x24/0x40 [ 2354.948152][T26286] netlink_unicast+0x78f/0x940 [ 2354.952969][T26286] netlink_sendmsg+0x8ba/0xbe0 [ 2354.957788][T26286] ? netlink_getsockopt+0x570/0x570 [ 2354.963043][T26286] ? aa_sock_msg_perm+0x94/0x150 [ 2354.968018][T26286] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2354.973440][T26286] ? security_socket_sendmsg+0x7c/0xa0 [ 2354.978945][T26286] ? netlink_getsockopt+0x570/0x570 [ 2354.984193][T26286] ____sys_sendmsg+0x5be/0x8f0 [ 2354.989013][T26286] ? __sys_sendmsg_sock+0x30/0x30 [ 2354.994093][T26286] ? import_iovec+0x6f/0xa0 [ 2354.998637][T26286] ___sys_sendmsg+0x236/0x2e0 [ 2355.003359][T26286] ? __sys_sendmsg+0x290/0x290 [ 2355.008355][T26286] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2355.014664][T26286] __se_sys_sendmsg+0x1b7/0x2a0 [ 2355.019561][T26286] ? __x64_sys_sendmsg+0x80/0x80 [ 2355.024537][T26286] ? lockdep_hardirqs_on+0x94/0x140 [ 2355.029796][T26286] do_syscall_64+0x4c/0xa0 [ 2355.034250][T26286] ? clear_bhb_loop+0x30/0x80 [ 2355.038966][T26286] ? clear_bhb_loop+0x30/0x80 [ 2355.043688][T26286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2355.049616][T26286] RIP: 0033:0x7f8c9b7f2e59 [ 2355.054073][T26286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2355.073722][T26286] RSP: 002b:00007f8c99a4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2355.082181][T26286] RAX: ffffffffffffffda RBX: 00007f8c9ba7afa0 RCX: 00007f8c9b7f2e59 [ 2355.090187][T26286] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2355.098197][T26286] RBP: 00007f8c9b888e6f R08: 0000000000000000 R09: 0000000000000000 [ 2355.106242][T26286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2355.114258][T26286] R13: 00007f8c9ba7b038 R14: 00007f8c9ba7afa0 R15: 00007fff3325d648 [ 2355.122296][T26286] [ 2355.414892][T26296] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2355.868238][T26307] netlink: 'syz.3.40010': attribute type 10 has an invalid length. [ 2355.961598][T26307] bridge0: port 4(team0) entered disabled state [ 2355.987782][T26307] device team0 left promiscuous mode [ 2356.008259][T26307] device team_slave_1 left promiscuous mode [ 2356.025988][T26307] device netdevsim3 left promiscuous mode [ 2356.039144][T26307] device wlan1 left promiscuous mode [ 2356.047190][T26307] bridge0: port 4(team0) entered disabled state [ 2356.477476][T26325] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2357.649211][T26334] netlink: 'syz.3.40009': attribute type 29 has an invalid length. [ 2357.697609][T26334] netlink: 'syz.3.40009': attribute type 29 has an invalid length. [ 2357.732208][T26335] netlink: 'syz.2.40008': attribute type 39 has an invalid length. [ 2357.772160][T26339] netlink: 'syz.3.40009': attribute type 29 has an invalid length. [ 2358.697756][T26371] mac80211_hwsim hwsim103 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2358.854332][T26375] netlink: 'syz.3.40026': attribute type 39 has an invalid length. [ 2359.034343][T26391] syz.1.40044[26391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2359.034442][T26391] syz.1.40044[26391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2359.270103][T26396] device syzkaller0 entered promiscuous mode [ 2359.849775][T26418] mac80211_hwsim hwsim98 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2360.053480][T26430] syz.3.40048[26430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2360.053595][T26430] syz.3.40048[26430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2360.327530][T26437] __nla_validate_parse: 20 callbacks suppressed [ 2360.328851][T26437] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.40050'. [ 2360.464934][T26437] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2360.480280][T26437] CPU: 0 PID: 26437 Comm: syz.0.40050 Not tainted syzkaller #0 [ 2360.487896][T26437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2360.497993][T26437] Call Trace: [ 2360.501337][T26437] [ 2360.504307][T26437] dump_stack_lvl+0x188/0x250 [ 2360.509123][T26437] ? show_regs_print_info+0x20/0x20 [ 2360.514361][T26437] ? load_image+0x410/0x410 [ 2360.518923][T26437] sysfs_warn_dup+0x8a/0xa0 [ 2360.523469][T26437] sysfs_do_create_link_sd+0xc0/0x110 [ 2360.528881][T26437] device_add+0x83b/0x1050 [ 2360.533346][T26437] wiphy_register+0x1e74/0x2c40 [ 2360.538235][T26437] ? __rtnl_unlock+0xa/0xa0 [ 2360.542812][T26437] ? cfg80211_event_work+0x40/0x40 [ 2360.547974][T26437] ? minstrel_ht_alloc+0x807/0x980 [ 2360.553129][T26437] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2360.559242][T26437] ieee80211_register_hw+0x2a03/0x3a60 [ 2360.563831][T26443] netlink: 'syz.4.40053': attribute type 29 has an invalid length. [ 2360.564835][T26437] ? ieee80211_register_hw+0xac1/0x3a60 [ 2360.578313][T26437] ? ieee80211_tasklet_handler+0x20/0x20 [ 2360.584256][T26437] ? rcu_is_watching+0x11/0xa0 [ 2360.589068][T26437] ? hrtimer_init+0x10c/0x220 [ 2360.593794][T26437] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2360.599578][T26437] hwsim_new_radio_nl+0xa7d/0xc50 [ 2360.604755][T26437] genl_rcv_msg+0xd0b/0xfa0 [ 2360.609315][T26437] ? genl_bind+0x370/0x370 [ 2360.613764][T26437] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 2360.619708][T26437] ? mark_lock+0x94/0x320 [ 2360.624080][T26437] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2360.630109][T26437] ? lock_chain_count+0x20/0x20 [ 2360.635128][T26437] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2360.641333][T26437] ? lockdep_hardirqs_on+0x94/0x140 [ 2360.646593][T26437] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2360.653022][T26437] ? netlink_rcv_skb+0x152/0x430 [ 2360.658092][T26437] netlink_rcv_skb+0x1e9/0x430 [ 2360.663076][T26437] ? genl_bind+0x370/0x370 [ 2360.667537][T26437] ? netlink_ack+0xb10/0xb10 [ 2360.672186][T26437] ? down_read+0x1aa/0x2e0 [ 2360.676644][T26437] genl_rcv+0x24/0x40 [ 2360.680677][T26437] netlink_unicast+0x78f/0x940 [ 2360.685597][T26437] netlink_sendmsg+0x8ba/0xbe0 [ 2360.690426][T26437] ? netlink_getsockopt+0x570/0x570 [ 2360.695663][T26437] ? audit_tree_destroy_watch+0x20/0x20 [ 2360.701258][T26437] ? aa_sock_msg_perm+0x94/0x150 [ 2360.706239][T26437] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2360.711575][T26437] ? security_socket_sendmsg+0x7c/0xa0 [ 2360.717094][T26437] ? netlink_getsockopt+0x570/0x570 [ 2360.722336][T26437] ____sys_sendmsg+0x5be/0x8f0 [ 2360.727160][T26437] ? __sys_sendmsg_sock+0x30/0x30 [ 2360.732235][T26437] ? import_iovec+0x6f/0xa0 [ 2360.736782][T26437] ___sys_sendmsg+0x236/0x2e0 [ 2360.741512][T26437] ? __sys_sendmsg+0x290/0x290 [ 2360.746332][T26437] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2360.752634][T26437] __se_sys_sendmsg+0x1b7/0x2a0 [ 2360.757609][T26437] ? __x64_sys_sendmsg+0x80/0x80 [ 2360.762715][T26437] ? lockdep_hardirqs_on+0x94/0x140 [ 2360.768071][T26437] do_syscall_64+0x4c/0xa0 [ 2360.772570][T26437] ? clear_bhb_loop+0x30/0x80 [ 2360.777282][T26437] ? clear_bhb_loop+0x30/0x80 [ 2360.782026][T26437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2360.788139][T26437] RIP: 0033:0x7fc28a562e59 [ 2360.792607][T26437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2360.812519][T26437] RSP: 002b:00007fc28879a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2360.820981][T26437] RAX: ffffffffffffffda RBX: 00007fc28a7eb090 RCX: 00007fc28a562e59 [ 2360.829000][T26437] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2360.837015][T26437] RBP: 00007fc28a5f8e6f R08: 0000000000000000 R09: 0000000000000000 [ 2360.845054][T26437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2360.853073][T26437] R13: 00007fc28a7eb128 R14: 00007fc28a7eb090 R15: 00007ffe30875ee8 [ 2360.861192][T26437] [ 2361.142044][T26443] netlink: 'syz.4.40053': attribute type 29 has an invalid length. [ 2361.443341][T26455] netlink: 'syz.1.40055': attribute type 39 has an invalid length. [ 2361.811804][T26463] mac80211_hwsim hwsim74 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2361.855451][T26469] syz.0.40062[26469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2361.855563][T26469] syz.0.40062[26469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2362.996202][T26486] netlink: 'syz.3.40068': attribute type 2 has an invalid length. [ 2363.016200][T26487] netlink: 'syz.2.40067': attribute type 21 has an invalid length. [ 2363.096010][T26486] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.40068'. [ 2363.250483][T26494] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.40069'. [ 2363.370372][T26494] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2363.390607][T26494] CPU: 0 PID: 26494 Comm: syz.1.40069 Not tainted syzkaller #0 [ 2363.398252][T26494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2363.408346][T26494] Call Trace: [ 2363.411669][T26494] [ 2363.414628][T26494] dump_stack_lvl+0x188/0x250 [ 2363.419481][T26494] ? show_regs_print_info+0x20/0x20 [ 2363.424721][T26494] ? load_image+0x410/0x410 [ 2363.429266][T26494] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2363.435369][T26494] ? sysfs_warn_dup+0x61/0xa0 [ 2363.440098][T26494] ? kernfs_path_from_node+0x1/0xb70 [ 2363.445435][T26494] sysfs_warn_dup+0x8a/0xa0 [ 2363.450004][T26494] sysfs_do_create_link_sd+0xc0/0x110 [ 2363.455436][T26494] device_add+0x83b/0x1050 [ 2363.459901][T26494] wiphy_register+0x1e74/0x2c40 [ 2363.464969][T26494] ? cfg80211_event_work+0x40/0x40 [ 2363.470137][T26494] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2363.476245][T26494] ieee80211_register_hw+0x2a03/0x3a60 [ 2363.481733][T26494] ? ieee80211_register_hw+0xac1/0x3a60 [ 2363.487309][T26494] ? ieee80211_tasklet_handler+0x20/0x20 [ 2363.493044][T26494] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2363.499270][T26494] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2363.505079][T26494] hwsim_new_radio_nl+0xa7d/0xc50 [ 2363.510232][T26494] genl_rcv_msg+0xd0b/0xfa0 [ 2363.514756][T26494] ? genl_bind+0x370/0x370 [ 2363.519190][T26494] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2363.525185][T26494] ? verify_lock_unused+0x140/0x140 [ 2363.530394][T26494] ? rcu_is_watching+0x11/0xa0 [ 2363.535173][T26494] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2363.541348][T26494] ? lockdep_hardirqs_on+0x94/0x140 [ 2363.546556][T26494] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2363.552720][T26494] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2363.559069][T26494] netlink_rcv_skb+0x1e9/0x430 [ 2363.563846][T26494] ? genl_bind+0x370/0x370 [ 2363.568273][T26494] ? netlink_ack+0xb10/0xb10 [ 2363.572882][T26494] ? down_read+0x1aa/0x2e0 [ 2363.577316][T26494] genl_rcv+0x24/0x40 [ 2363.581329][T26494] netlink_unicast+0x78f/0x940 [ 2363.586139][T26494] netlink_sendmsg+0x8ba/0xbe0 [ 2363.590933][T26494] ? netlink_getsockopt+0x570/0x570 [ 2363.596164][T26494] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2363.602337][T26494] ? aa_sock_msg_perm+0x94/0x150 [ 2363.607299][T26494] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2363.612598][T26494] ? security_socket_sendmsg+0x7c/0xa0 [ 2363.618064][T26494] ? netlink_getsockopt+0x570/0x570 [ 2363.623284][T26494] ____sys_sendmsg+0x5be/0x8f0 [ 2363.628149][T26494] ? __sys_sendmsg_sock+0x30/0x30 [ 2363.633231][T26494] ? import_iovec+0x6f/0xa0 [ 2363.637776][T26494] ___sys_sendmsg+0x236/0x2e0 [ 2363.642628][T26494] ? __sys_sendmsg+0x290/0x290 [ 2363.647486][T26494] __se_sys_sendmsg+0x1b7/0x2a0 [ 2363.652385][T26494] ? __x64_sys_sendmsg+0x80/0x80 [ 2363.657392][T26494] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2363.663330][T26494] do_syscall_64+0x4c/0xa0 [ 2363.667789][T26494] ? clear_bhb_loop+0x30/0x80 [ 2363.672505][T26494] ? clear_bhb_loop+0x30/0x80 [ 2363.677351][T26494] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2363.683286][T26494] RIP: 0033:0x7f21df21fe59 [ 2363.687798][T26494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2363.707634][T26494] RSP: 002b:00007f21dd478028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2363.716365][T26494] RAX: ffffffffffffffda RBX: 00007f21df4a7fa0 RCX: 00007f21df21fe59 [ 2363.724378][T26494] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2363.732390][T26494] RBP: 00007f21df2b5e6f R08: 0000000000000000 R09: 0000000000000000 [ 2363.740427][T26494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2363.748431][T26494] R13: 00007f21df4a8038 R14: 00007f21df4a7fa0 R15: 00007ffc268afd28 [ 2363.756444][T26494] [ 2363.796332][T26498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40073'. [ 2363.822738][T26498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40073'. [ 2363.842420][T26498] netlink: 33 bytes leftover after parsing attributes in process `syz.4.40073'. [ 2363.852262][T26498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40073'. [ 2363.862204][T26498] netlink: 33 bytes leftover after parsing attributes in process `syz.4.40073'. [ 2363.874131][T26498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40073'. [ 2363.883725][T26498] netlink: 33 bytes leftover after parsing attributes in process `syz.4.40073'. [ 2364.524698][T26520] netlink: 'syz.1.40084': attribute type 21 has an invalid length. [ 2364.578013][T26525] device lo entered promiscuous mode [ 2365.437036][T26544] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.40092'. [ 2365.708675][T26544] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2365.724332][T26544] CPU: 1 PID: 26544 Comm: syz.4.40092 Not tainted syzkaller #0 [ 2365.731975][T26544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2365.742086][T26544] Call Trace: [ 2365.745423][T26544] [ 2365.748403][T26544] dump_stack_lvl+0x188/0x250 [ 2365.753160][T26544] ? show_regs_print_info+0x20/0x20 [ 2365.758556][T26544] ? load_image+0x410/0x410 [ 2365.763300][T26544] sysfs_warn_dup+0x8a/0xa0 [ 2365.767868][T26544] sysfs_do_create_link_sd+0xc0/0x110 [ 2365.773410][T26544] device_add+0x83b/0x1050 [ 2365.777910][T26544] wiphy_register+0x1e74/0x2c40 [ 2365.782890][T26544] ? cfg80211_event_work+0x40/0x40 [ 2365.788065][T26544] ? minstrel_ht_alloc+0x807/0x980 [ 2365.793265][T26544] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2365.799413][T26544] ieee80211_register_hw+0x2a03/0x3a60 [ 2365.804953][T26544] ? ieee80211_register_hw+0xac1/0x3a60 [ 2365.810609][T26544] ? ieee80211_tasklet_handler+0x20/0x20 [ 2365.816327][T26544] ? rcu_is_watching+0x11/0xa0 [ 2365.821239][T26544] ? hrtimer_init+0x10c/0x220 [ 2365.825996][T26544] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2365.831845][T26544] hwsim_new_radio_nl+0xa7d/0xc50 [ 2365.836988][T26544] genl_rcv_msg+0xd0b/0xfa0 [ 2365.841613][T26544] ? genl_bind+0x370/0x370 [ 2365.846143][T26544] ? perf_trace_buf_alloc+0xa4/0x300 [ 2365.851559][T26544] ? verify_lock_unused+0x140/0x140 [ 2365.856876][T26544] ? preempt_schedule_notrace+0xfc/0x120 [ 2365.862567][T26544] ? preempt_schedule_common+0xd0/0xd0 [ 2365.868093][T26544] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2365.874556][T26544] netlink_rcv_skb+0x1e9/0x430 [ 2365.879393][T26544] ? genl_bind+0x370/0x370 [ 2365.883891][T26544] ? netlink_ack+0xb10/0xb10 [ 2365.888588][T26544] ? down_read+0x1aa/0x2e0 [ 2365.893081][T26544] genl_rcv+0x24/0x40 [ 2365.897133][T26544] netlink_unicast+0x78f/0x940 [ 2365.902005][T26544] netlink_sendmsg+0x8ba/0xbe0 [ 2365.906869][T26544] ? netlink_getsockopt+0x570/0x570 [ 2365.912148][T26544] ? aa_sock_msg_perm+0x94/0x150 [ 2365.917169][T26544] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2365.922511][T26544] ? security_socket_sendmsg+0x7c/0xa0 [ 2365.928028][T26544] ? netlink_getsockopt+0x570/0x570 [ 2365.933307][T26544] ____sys_sendmsg+0x5be/0x8f0 [ 2365.938178][T26544] ? __sys_sendmsg_sock+0x30/0x30 [ 2365.943311][T26544] ? import_iovec+0x6f/0xa0 [ 2365.947896][T26544] ___sys_sendmsg+0x236/0x2e0 [ 2365.952849][T26544] ? __sys_sendmsg+0x290/0x290 [ 2365.957755][T26544] ? trace_event_raw_event_lock+0x250/0x250 [ 2365.963813][T26544] __se_sys_sendmsg+0x1b7/0x2a0 [ 2365.968738][T26544] ? __x64_sys_sendmsg+0x80/0x80 [ 2365.973734][T26544] ? lockdep_hardirqs_on+0x94/0x140 [ 2365.979168][T26544] do_syscall_64+0x4c/0xa0 [ 2365.983743][T26544] ? clear_bhb_loop+0x30/0x80 [ 2365.988482][T26544] ? clear_bhb_loop+0x30/0x80 [ 2365.993229][T26544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2365.999173][T26544] RIP: 0033:0x7f4822540e59 [ 2366.003678][T26544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2366.023353][T26544] RSP: 002b:00007f4820799028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2366.031926][T26544] RAX: ffffffffffffffda RBX: 00007f48227c8fa0 RCX: 00007f4822540e59 [ 2366.039955][T26544] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2366.047989][T26544] RBP: 00007f48225d6e6f R08: 0000000000000000 R09: 0000000000000000 [ 2366.056008][T26544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2366.064026][T26544] R13: 00007f48227c9038 R14: 00007f48227c8fa0 R15: 00007ffef1576a48 [ 2366.072194][T26544] [ 2366.283254][T26549] netlink: 'syz.0.40094': attribute type 2 has an invalid length. [ 2366.295928][T26549] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.40094'. [ 2366.962819][T26579] netlink: 'syz.4.40106': attribute type 39 has an invalid length. [ 2367.803315][T26586] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.40109'. [ 2367.837113][T26586] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2367.852121][T26586] CPU: 1 PID: 26586 Comm: syz.3.40109 Not tainted syzkaller #0 [ 2367.860007][T26586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2367.870220][T26586] Call Trace: [ 2367.873550][T26586] [ 2367.876519][T26586] dump_stack_lvl+0x188/0x250 [ 2367.881257][T26586] ? show_regs_print_info+0x20/0x20 [ 2367.886499][T26586] ? load_image+0x410/0x410 [ 2367.891074][T26586] sysfs_warn_dup+0x8a/0xa0 [ 2367.895608][T26586] sysfs_do_create_link_sd+0xc0/0x110 [ 2367.901030][T26586] device_add+0x83b/0x1050 [ 2367.905493][T26586] wiphy_register+0x1e74/0x2c40 [ 2367.910406][T26586] ? cfg80211_event_work+0x40/0x40 [ 2367.915558][T26586] ? minstrel_ht_alloc+0x807/0x980 [ 2367.920709][T26586] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2367.926818][T26586] ieee80211_register_hw+0x2a03/0x3a60 [ 2367.932330][T26586] ? ieee80211_register_hw+0xac1/0x3a60 [ 2367.937928][T26586] ? ieee80211_tasklet_handler+0x20/0x20 [ 2367.943612][T26586] ? rcu_is_watching+0x11/0xa0 [ 2367.948420][T26586] ? hrtimer_init+0x10c/0x220 [ 2367.953141][T26586] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2367.958925][T26586] hwsim_new_radio_nl+0xa7d/0xc50 [ 2367.964016][T26586] genl_rcv_msg+0xd0b/0xfa0 [ 2367.968596][T26586] ? genl_bind+0x370/0x370 [ 2367.973055][T26586] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2367.978282][T26586] ? verify_lock_unused+0x140/0x140 [ 2367.983522][T26586] ? dev_queue_xmit+0x20/0x20 [ 2367.988226][T26586] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2367.994745][T26586] netlink_rcv_skb+0x1e9/0x430 [ 2367.999534][T26586] ? genl_bind+0x370/0x370 [ 2368.004011][T26586] ? netlink_ack+0xb10/0xb10 [ 2368.008634][T26586] ? down_read+0x1aa/0x2e0 [ 2368.013075][T26586] genl_rcv+0x24/0x40 [ 2368.017107][T26586] netlink_unicast+0x78f/0x940 [ 2368.021901][T26586] netlink_sendmsg+0x8ba/0xbe0 [ 2368.026693][T26586] ? netlink_getsockopt+0x570/0x570 [ 2368.032037][T26586] ? aa_sock_msg_perm+0x94/0x150 [ 2368.037001][T26586] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2368.042411][T26586] ? security_socket_sendmsg+0x7c/0xa0 [ 2368.047898][T26586] ? netlink_getsockopt+0x570/0x570 [ 2368.053208][T26586] ____sys_sendmsg+0x5be/0x8f0 [ 2368.058009][T26586] ? __sys_sendmsg_sock+0x30/0x30 [ 2368.063093][T26586] ? import_iovec+0x6f/0xa0 [ 2368.067621][T26586] ___sys_sendmsg+0x236/0x2e0 [ 2368.072329][T26586] ? __sys_sendmsg+0x290/0x290 [ 2368.077153][T26586] __se_sys_sendmsg+0x1b7/0x2a0 [ 2368.082027][T26586] ? __x64_sys_sendmsg+0x80/0x80 [ 2368.087026][T26586] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2368.093048][T26586] ? lockdep_hardirqs_on+0x94/0x140 [ 2368.098271][T26586] do_syscall_64+0x4c/0xa0 [ 2368.102708][T26586] ? clear_bhb_loop+0x30/0x80 [ 2368.107403][T26586] ? clear_bhb_loop+0x30/0x80 [ 2368.112101][T26586] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2368.118014][T26586] RIP: 0033:0x7f3fc6996e59 [ 2368.122453][T26586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2368.142083][T26586] RSP: 002b:00007f3fc4bef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2368.150612][T26586] RAX: ffffffffffffffda RBX: 00007f3fc6c1efa0 RCX: 00007f3fc6996e59 [ 2368.158601][T26586] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2368.166621][T26586] RBP: 00007f3fc6a2ce6f R08: 0000000000000000 R09: 0000000000000000 [ 2368.174606][T26586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2368.182594][T26586] R13: 00007f3fc6c1f038 R14: 00007f3fc6c1efa0 R15: 00007ffe4ca2c348 [ 2368.190603][T26586] [ 2368.720668][T26591] netlink: 'syz.2.40112': attribute type 2 has an invalid length. [ 2368.732011][T26591] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.40112'. [ 2368.886585][T26613] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 2370.154408][T26652] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.40135'. [ 2370.266308][T26652] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2370.275603][T26652] CPU: 1 PID: 26652 Comm: syz.3.40135 Not tainted syzkaller #0 [ 2370.283218][T26652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2370.293309][T26652] Call Trace: [ 2370.296629][T26652] [ 2370.299684][T26652] dump_stack_lvl+0x188/0x250 [ 2370.304417][T26652] ? show_regs_print_info+0x20/0x20 [ 2370.309659][T26652] ? load_image+0x410/0x410 [ 2370.314223][T26652] sysfs_warn_dup+0x8a/0xa0 [ 2370.318774][T26652] sysfs_do_create_link_sd+0xc0/0x110 [ 2370.324190][T26652] device_add+0x83b/0x1050 [ 2370.328662][T26652] wiphy_register+0x1e74/0x2c40 [ 2370.333573][T26652] ? cfg80211_event_work+0x40/0x40 [ 2370.338732][T26652] ? minstrel_ht_alloc+0x807/0x980 [ 2370.343885][T26652] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2370.350040][T26652] ieee80211_register_hw+0x2a03/0x3a60 [ 2370.355548][T26652] ? ieee80211_register_hw+0xac1/0x3a60 [ 2370.361143][T26652] ? ieee80211_tasklet_handler+0x20/0x20 [ 2370.366833][T26652] ? rcu_is_watching+0x11/0xa0 [ 2370.371641][T26652] ? hrtimer_init+0x10c/0x220 [ 2370.376402][T26652] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2370.382181][T26652] hwsim_new_radio_nl+0xa7d/0xc50 [ 2370.387281][T26652] genl_rcv_msg+0xd0b/0xfa0 [ 2370.391854][T26652] ? genl_bind+0x370/0x370 [ 2370.396327][T26652] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2370.402429][T26652] ? lock_chain_count+0x20/0x20 [ 2370.407339][T26652] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2370.413541][T26652] ? lockdep_hardirqs_on+0x94/0x140 [ 2370.418784][T26652] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2370.424993][T26652] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2370.431461][T26652] ? lock_acquire+0x208/0x400 [ 2370.436197][T26652] netlink_rcv_skb+0x1e9/0x430 [ 2370.441000][T26652] ? genl_bind+0x370/0x370 [ 2370.445461][T26652] ? netlink_ack+0xb10/0xb10 [ 2370.450101][T26652] ? down_read+0x1aa/0x2e0 [ 2370.454557][T26652] genl_rcv+0x24/0x40 [ 2370.458580][T26652] netlink_unicast+0x78f/0x940 [ 2370.463393][T26652] netlink_sendmsg+0x8ba/0xbe0 [ 2370.468287][T26652] ? lockdep_hardirqs_on+0x94/0x140 [ 2370.473537][T26652] ? netlink_getsockopt+0x570/0x570 [ 2370.478790][T26652] ? netlink_getsockopt+0x570/0x570 [ 2370.484042][T26652] ____sys_sendmsg+0x5be/0x8f0 [ 2370.488853][T26652] ? __sys_sendmsg_sock+0x30/0x30 [ 2370.493922][T26652] ? import_iovec+0x6f/0xa0 [ 2370.498464][T26652] ___sys_sendmsg+0x236/0x2e0 [ 2370.503203][T26652] ? __sys_sendmsg+0x290/0x290 [ 2370.508167][T26652] __se_sys_sendmsg+0x1b7/0x2a0 [ 2370.513079][T26652] ? __x64_sys_sendmsg+0x80/0x80 [ 2370.518054][T26652] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2370.524090][T26652] ? lockdep_hardirqs_on+0x94/0x140 [ 2370.529334][T26652] do_syscall_64+0x4c/0xa0 [ 2370.533816][T26652] ? clear_bhb_loop+0x30/0x80 [ 2370.538521][T26652] ? clear_bhb_loop+0x30/0x80 [ 2370.543234][T26652] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2370.549160][T26652] RIP: 0033:0x7f3fc6996e59 [ 2370.553625][T26652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2370.573312][T26652] RSP: 002b:00007f3fc4bef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2370.581791][T26652] RAX: ffffffffffffffda RBX: 00007f3fc6c1efa0 RCX: 00007f3fc6996e59 [ 2370.589804][T26652] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2370.597814][T26652] RBP: 00007f3fc6a2ce6f R08: 0000000000000000 R09: 0000000000000000 [ 2370.605828][T26652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2370.613851][T26652] R13: 00007f3fc6c1f038 R14: 00007f3fc6c1efa0 R15: 00007ffe4ca2c348 [ 2370.621881][T26652] [ 2371.174429][T26672] device syzkaller0 entered promiscuous mode [ 2371.870406][T26701] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.40153'. [ 2371.940657][T26701] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2371.956505][T26701] CPU: 0 PID: 26701 Comm: syz.3.40153 Not tainted syzkaller #0 [ 2371.964141][T26701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2371.974242][T26701] Call Trace: [ 2371.977561][T26701] [ 2371.980560][T26701] dump_stack_lvl+0x188/0x250 [ 2371.985294][T26701] ? show_regs_print_info+0x20/0x20 [ 2371.990704][T26701] ? load_image+0x410/0x410 [ 2371.995272][T26701] sysfs_warn_dup+0x8a/0xa0 [ 2371.999823][T26701] sysfs_do_create_link_sd+0xc0/0x110 [ 2372.005247][T26701] device_add+0x83b/0x1050 [ 2372.009713][T26701] wiphy_register+0x1e74/0x2c40 [ 2372.014634][T26701] ? cfg80211_event_work+0x40/0x40 [ 2372.019799][T26701] ? minstrel_ht_alloc+0x807/0x980 [ 2372.025050][T26701] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2372.031168][T26701] ieee80211_register_hw+0x2a03/0x3a60 [ 2372.036720][T26701] ? ieee80211_register_hw+0xac1/0x3a60 [ 2372.042324][T26701] ? ieee80211_tasklet_handler+0x20/0x20 [ 2372.048015][T26701] ? rcu_is_watching+0x11/0xa0 [ 2372.052824][T26701] ? hrtimer_init+0x10c/0x220 [ 2372.057546][T26701] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2372.063325][T26701] hwsim_new_radio_nl+0xa7d/0xc50 [ 2372.068408][T26701] genl_rcv_msg+0xd0b/0xfa0 [ 2372.072971][T26701] ? genl_bind+0x370/0x370 [ 2372.077445][T26701] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2372.082809][T26701] ? verify_lock_unused+0x140/0x140 [ 2372.088084][T26701] ? dev_queue_xmit+0x20/0x20 [ 2372.092889][T26701] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2372.099285][T26701] netlink_rcv_skb+0x1e9/0x430 [ 2372.104095][T26701] ? genl_bind+0x370/0x370 [ 2372.108549][T26701] ? netlink_ack+0xb10/0xb10 [ 2372.113196][T26701] ? down_read+0x1aa/0x2e0 [ 2372.117657][T26701] genl_rcv+0x24/0x40 [ 2372.121701][T26701] netlink_unicast+0x78f/0x940 [ 2372.126616][T26701] netlink_sendmsg+0x8ba/0xbe0 [ 2372.131463][T26701] ? netlink_getsockopt+0x570/0x570 [ 2372.136701][T26701] ? aa_sock_msg_perm+0x94/0x150 [ 2372.141686][T26701] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2372.147016][T26701] ? security_socket_sendmsg+0x7c/0xa0 [ 2372.152514][T26701] ? netlink_getsockopt+0x570/0x570 [ 2372.157761][T26701] ____sys_sendmsg+0x5be/0x8f0 [ 2372.162570][T26701] ? __sys_sendmsg_sock+0x30/0x30 [ 2372.167623][T26701] ? import_iovec+0x6f/0xa0 [ 2372.172151][T26701] ___sys_sendmsg+0x236/0x2e0 [ 2372.176856][T26701] ? __sys_sendmsg+0x290/0x290 [ 2372.181712][T26701] __se_sys_sendmsg+0x1b7/0x2a0 [ 2372.186586][T26701] ? __x64_sys_sendmsg+0x80/0x80 [ 2372.191549][T26701] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2372.197569][T26701] ? lockdep_hardirqs_on+0x94/0x140 [ 2372.202819][T26701] do_syscall_64+0x4c/0xa0 [ 2372.207259][T26701] ? clear_bhb_loop+0x30/0x80 [ 2372.211962][T26701] ? clear_bhb_loop+0x30/0x80 [ 2372.216661][T26701] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2372.222573][T26701] RIP: 0033:0x7f3fc6996e59 [ 2372.227008][T26701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2372.246640][T26701] RSP: 002b:00007f3fc4bce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2372.255085][T26701] RAX: ffffffffffffffda RBX: 00007f3fc6c1f090 RCX: 00007f3fc6996e59 [ 2372.263084][T26701] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2372.271099][T26701] RBP: 00007f3fc6a2ce6f R08: 0000000000000000 R09: 0000000000000000 [ 2372.279181][T26701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2372.287171][T26701] R13: 00007f3fc6c1f128 R14: 00007f3fc6c1f090 R15: 00007ffe4ca2c348 [ 2372.295182][T26701] [ 2372.355593][T26700] netlink: 163260 bytes leftover after parsing attributes in process `syz.4.40166'. [ 2373.272247][T26735] device syzkaller0 entered promiscuous mode [ 2373.517822][T26727] delete_channel: no stack [ 2374.859528][T26780] netlink: 'syz.4.40184': attribute type 21 has an invalid length. [ 2375.146677][T26785] device syzkaller0 entered promiscuous mode [ 2375.518883][T26797] netlink: 'syz.2.40189': attribute type 10 has an invalid length. [ 2375.604017][T26804] netlink: 168 bytes leftover after parsing attributes in process `syz.3.40193'. [ 2376.040439][T26809] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2376.104447][T26809] device syzkaller0 entered promiscuous mode [ 2376.208890][T26817] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.40198'. [ 2376.724454][T26831] device syzkaller0 entered promiscuous mode [ 2376.731620][T26829] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.40211'. [ 2376.782108][T26832] netlink: 'syz.0.40200': attribute type 39 has an invalid length. [ 2377.459678][T26844] netlink: 'syz.1.40206': attribute type 10 has an invalid length. [ 2377.655733][T26847] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.40208'. [ 2378.513996][T26865] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.40215'. [ 2378.629546][T26868] netlink: 'syz.1.40216': attribute type 9 has an invalid length. [ 2378.662926][T26868] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.40216'. [ 2379.602658][T26888] netlink: 'syz.4.40223': attribute type 10 has an invalid length. [ 2380.159512][T26909] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2380.222148][T26909] device syzkaller0 entered promiscuous mode [ 2380.313536][T26913] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.40232'. [ 2381.542608][T26945] delete_channel: no stack [ 2381.610454][T26948] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2381.639428][T26948] device syzkaller0 entered promiscuous mode [ 2381.753252][T26951] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.40248'. [ 2382.006027][T26962] netlink: 'syz.0.40251': attribute type 21 has an invalid length. [ 2382.102097][T26965] device lo entered promiscuous mode [ 2382.604804][T26977] device syzkaller0 entered promiscuous mode [ 2383.524911][T26990] device syzkaller0 entered promiscuous mode [ 2383.920815][T26994] netlink: 'syz.4.40266': attribute type 39 has an invalid length. [ 2384.236596][T27010] netlink: 142652 bytes leftover after parsing attributes in process `syz.1.40275'. [ 2384.923526][T27016] device syzkaller0 entered promiscuous mode [ 2385.203137][T27033] device syzkaller0 entered promiscuous mode [ 2385.849404][T27050] netlink: 'syz.2.40290': attribute type 39 has an invalid length. [ 2386.920248][T27070] delete_channel: no stack [ 2387.256841][T27084] device syzkaller0 entered promiscuous mode [ 2387.303683][T27086] netlink: 'syz.0.40304': attribute type 1 has an invalid length. [ 2387.316917][T27086] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.40304'. [ 2387.371380][T27088] netlink: 'syz.1.40306': attribute type 3 has an invalid length. [ 2387.379286][T27088] netlink: 'syz.1.40306': attribute type 1 has an invalid length. [ 2387.488780][T27088] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.40306'. [ 2388.752006][T27106] delete_channel: no stack [ 2389.185961][T27124] device syzkaller0 entered promiscuous mode [ 2389.591926][T27132] netlink: 'syz.1.40322': attribute type 1 has an invalid length. [ 2389.655263][T27132] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.40322'. [ 2390.473460][T27139] delete_channel: no stack [ 2390.487479][T27150] netlink: 'syz.4.40332': attribute type 10 has an invalid length. [ 2390.558953][T27157] netlink: 'syz.4.40332': attribute type 10 has an invalid length. [ 2390.597375][T27159] netlink: 142652 bytes leftover after parsing attributes in process `syz.3.40336'. [ 2390.621071][T27157] netlink: 40 bytes leftover after parsing attributes in process `syz.4.40332'. [ 2390.632501][T27157] 8021q: adding VLAN 0 to HW filter on device team0 [ 2390.671652][T27157] bond0: (slave team0): Releasing backup interface [ 2390.703716][T27157] bridge0: port 3(team0) entered blocking state [ 2390.710244][T27157] bridge0: port 3(team0) entered disabled state [ 2390.958487][T27174] netlink: 'syz.0.40342': attribute type 3 has an invalid length. [ 2390.983633][T27171] netlink: 'syz.2.40341': attribute type 39 has an invalid length. [ 2391.002742][T27174] netlink: 'syz.0.40342': attribute type 1 has an invalid length. [ 2391.024112][T27174] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.40342'. [ 2393.023279][T27186] netlink: 168 bytes leftover after parsing attributes in process `syz.3.40346'. [ 2393.033729][T27186] C: renamed from team_slave_0 [ 2393.163310][T27195] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.40352'. [ 2394.340208][T27214] device syzkaller0 entered promiscuous mode [ 2394.355707][T27217] netlink: 'syz.4.40358': attribute type 3 has an invalid length. [ 2394.380255][T27222] netlink: 'syz.1.40360': attribute type 10 has an invalid length. [ 2394.391469][T27217] netlink: 'syz.4.40358': attribute type 1 has an invalid length. [ 2394.399365][T27217] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.40358'. [ 2394.465105][T27222] bridge0: port 4(team0) entered disabled state [ 2394.497138][T27222] device team0 left promiscuous mode [ 2394.507472][T27222] device team_slave_1 left promiscuous mode [ 2394.514749][T27222] device netdevsim3 left promiscuous mode [ 2394.521641][T27222] device wlan1 left promiscuous mode [ 2394.528714][T27222] bridge0: port 4(team0) entered disabled state [ 2394.549584][T27222] 8021q: adding VLAN 0 to HW filter on device team0 [ 2394.560275][T27222] bond0: (slave team0): Enslaving as an active interface with an up link [ 2394.571028][T27224] netlink: 'syz.1.40360': attribute type 10 has an invalid length. [ 2394.587843][T27224] netlink: 40 bytes leftover after parsing attributes in process `syz.1.40360'. [ 2394.597292][T27224] device team0 entered promiscuous mode [ 2394.603016][T27224] device team_slave_1 entered promiscuous mode [ 2394.609553][T27224] device netdevsim3 entered promiscuous mode [ 2394.616367][T27224] device wlan1 entered promiscuous mode [ 2394.623253][T27224] bond0: (slave team0): Releasing backup interface [ 2394.639085][T27224] bridge0: port 4(team0) entered blocking state [ 2394.645536][T27224] bridge0: port 4(team0) entered disabled state [ 2394.797203][T27236] netlink: 'syz.0.40370': attribute type 39 has an invalid length. [ 2394.911654][T27238] netlink: 'syz.3.40371': attribute type 3 has an invalid length. [ 2394.958768][T27238] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.40371'. [ 2396.269926][T27266] device syzkaller0 entered promiscuous mode [ 2396.950626][T27303] netlink: 'syz.3.40398': attribute type 10 has an invalid length. [ 2397.057700][T27303] netlink: 'syz.3.40398': attribute type 10 has an invalid length. [ 2397.082297][T27303] netlink: 40 bytes leftover after parsing attributes in process `syz.3.40398'. [ 2397.106490][T27303] device team0 entered promiscuous mode [ 2397.115599][T27303] device team_slave_1 entered promiscuous mode [ 2397.124365][T27303] device netdevsim3 entered promiscuous mode [ 2397.132850][T27303] device wlan1 entered promiscuous mode [ 2397.223795][T27303] 8021q: adding VLAN 0 to HW filter on device team0 [ 2397.321091][T27303] bridge0: port 4(team0) entered blocking state [ 2397.339848][T27303] bridge0: port 4(team0) entered disabled state [ 2397.408500][T27303] bridge0: port 4(team0) entered blocking state [ 2397.415278][T27303] bridge0: port 4(team0) entered forwarding state [ 2397.858352][T27319] netlink: 'syz.2.40414': attribute type 10 has an invalid length. [ 2397.886547][T27319] netlink: 'syz.2.40414': attribute type 10 has an invalid length. [ 2397.915178][T27319] netlink: 40 bytes leftover after parsing attributes in process `syz.2.40414'. [ 2397.956579][T27321] device syzkaller0 entered promiscuous mode [ 2399.287034][T27327] netlink: 54695 bytes leftover after parsing attributes in process `syz.2.40408'. [ 2402.257094][T27375] device syzkaller0 entered promiscuous mode [ 2403.187399][T27386] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.40428'. [ 2403.402549][T27399] validate_nla: 1 callbacks suppressed [ 2403.402568][T27399] netlink: 'syz.0.40440': attribute type 39 has an invalid length. [ 2403.605426][T27400] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.40434'. [ 2404.312964][T27432] device syzkaller0 entered promiscuous mode [ 2404.579069][T27438] netlink: 'syz.3.40454': attribute type 39 has an invalid length. [ 2406.032812][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.039151][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2407.335772][T27487] netlink: 'syz.0.40469': attribute type 10 has an invalid length. [ 2407.457047][T27489] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.40473'. [ 2407.517132][T27487] bridge0: port 5(team0) entered disabled state [ 2407.575347][T27487] device team0 left promiscuous mode [ 2407.595774][T27487] device team_slave_1 left promiscuous mode [ 2407.625609][T27487] device netdevsim3 left promiscuous mode [ 2407.654024][T27487] device wlan1 left promiscuous mode [ 2407.688750][T27487] bridge0: port 5(team0) entered disabled state [ 2407.761038][T27487] 8021q: adding VLAN 0 to HW filter on device team0 [ 2407.780493][T27493] netlink: 'syz.1.40477': attribute type 3 has an invalid length. [ 2407.815332][T27487] device team0 entered promiscuous mode [ 2407.828438][T27493] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.40477'. [ 2407.841929][T27487] device team_slave_1 entered promiscuous mode [ 2407.872392][T27487] device netdevsim3 entered promiscuous mode [ 2407.900039][T27487] device wlan1 entered promiscuous mode [ 2407.941301][T27487] bond0: (slave team0): Enslaving as an active interface with an up link [ 2407.979881][T27488] netlink: 'syz.0.40469': attribute type 10 has an invalid length. [ 2408.025788][T27488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.40469'. [ 2408.063451][T27488] bond0: (slave team0): Releasing backup interface [ 2408.112840][T27488] bridge0: port 4(team0) entered blocking state [ 2408.130839][T27488] bridge0: port 4(team0) entered disabled state [ 2408.317177][T27507] netlink: 'syz.3.40480': attribute type 4 has an invalid length. [ 2408.350786][T27507] netlink: 'syz.3.40480': attribute type 26 has an invalid length. [ 2408.368194][T27507] netlink: 60759 bytes leftover after parsing attributes in process `syz.3.40480'. [ 2409.004754][T27499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2409.116455][T27520] device syzkaller0 entered promiscuous mode [ 2409.285452][T27524] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.40488'. [ 2409.407411][T27531] netlink: 'syz.4.40492': attribute type 10 has an invalid length. [ 2409.469307][T27531] device team0 left promiscuous mode [ 2409.492971][T27531] device team_slave_1 left promiscuous mode [ 2409.527860][T27531] device wlan1 left promiscuous mode [ 2409.631244][T27537] netlink: set zone limit has 8 unknown bytes [ 2409.702119][T27531] bridge0: port 3(team0) entered disabled state [ 2410.233147][T27531] 8021q: adding VLAN 0 to HW filter on device team0 [ 2410.260376][T27531] device team0 entered promiscuous mode [ 2410.266316][T27531] device team_slave_1 entered promiscuous mode [ 2410.273565][T27531] device wlan1 entered promiscuous mode [ 2410.283360][T27531] bond0: (slave team0): Enslaving as an active interface with an up link [ 2410.292183][T27536] netlink: 'syz.4.40492': attribute type 10 has an invalid length. [ 2410.300376][T27536] netlink: 40 bytes leftover after parsing attributes in process `syz.4.40492'. [ 2410.341363][T27536] bond0: (slave team0): Releasing backup interface [ 2410.369441][T27536] bridge0: port 3(team0) entered blocking state [ 2410.390889][T27536] bridge0: port 3(team0) entered disabled state [ 2410.915653][T27546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2411.071658][T27558] netlink: 'syz.0.40502': attribute type 4 has an invalid length. [ 2411.079834][T27558] netlink: 'syz.0.40502': attribute type 26 has an invalid length. [ 2411.088306][T27558] netlink: 60759 bytes leftover after parsing attributes in process `syz.0.40502'. [ 2411.500880][T27578] netlink: 'syz.1.40509': attribute type 10 has an invalid length. [ 2411.672853][T27578] device vxcan0 entered promiscuous mode [ 2411.678699][T27578] team0: Device vxcan0 is of different type [ 2411.949547][T27579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2412.069103][T27593] device syzkaller0 entered promiscuous mode [ 2413.014697][T27620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2415.010837][T27657] netlink: 'syz.4.40542': attribute type 10 has an invalid length. [ 2415.043235][T27657] device vxcan0 entered promiscuous mode [ 2415.059402][T27657] team0: Device vxcan0 is of different type [ 2415.079386][T27654] netlink: 703 bytes leftover after parsing attributes in process `syz.0.40544'. [ 2415.273699][T27671] device syzkaller0 entered promiscuous mode [ 2415.819733][T27676] netlink: set zone limit has 8 unknown bytes [ 2416.810886][T27711] device syzkaller0 entered promiscuous mode [ 2418.666253][T27730] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.40574'. [ 2418.784758][T27724] netlink: set zone limit has 8 unknown bytes [ 2419.044482][T27745] device syzkaller0 entered promiscuous mode [ 2419.065946][T27749] netlink: 164 bytes leftover after parsing attributes in process `syz.0.40581'. [ 2419.086083][T27752] netlink: 'syz.3.40582': attribute type 9 has an invalid length. [ 2419.344387][T27760] device lo left promiscuous mode [ 2419.379342][T27760] device lo entered promiscuous mode [ 2419.467068][T27764] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.40588'. [ 2419.584691][T27767] netlink: set zone limit has 8 unknown bytes [ 2419.664984][T27769] netlink: 703 bytes leftover after parsing attributes in process `syz.2.40590'. [ 2419.788752][T27781] netlink: 164 bytes leftover after parsing attributes in process `syz.1.40595'. [ 2419.829505][T27778] bridge0: port 3(bond0) entered disabled state [ 2419.836128][T27778] bridge0: port 2(bridge_slave_1) entered disabled state [ 2419.843342][T27778] bridge0: port 1(bridge_slave_0) entered disabled state [ 2419.879887][T27783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2419.962524][T27788] netlink: 'syz.4.40597': attribute type 9 has an invalid length. [ 2420.162738][T27794] device syzkaller0 entered promiscuous mode [ 2420.439970][T27800] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.40604'. [ 2420.609733][T27805] netlink: set zone limit has 8 unknown bytes [ 2420.619010][T27811] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.40607'. [ 2420.710456][T27803] netlink: 'syz.0.40613': attribute type 10 has an invalid length. [ 2420.721487][T27803] netlink: 40 bytes leftover after parsing attributes in process `syz.0.40613'. [ 2420.756822][T27803] 8021q: adding VLAN 0 to HW filter on device team0 [ 2421.165460][T27826] bridge0: port 4(team0) entered disabled state [ 2421.171906][T27826] bridge0: port 3(veth1_to_hsr) entered disabled state [ 2421.178915][T27826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2421.186277][T27826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2421.236632][T27813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2421.302397][T27831] netlink: 'syz.1.40616': attribute type 9 has an invalid length. [ 2421.407945][T27840] netlink: 'syz.2.40620': attribute type 9 has an invalid length. [ 2421.621457][T27844] netlink: 156 bytes leftover after parsing attributes in process `syz.3.40622'. [ 2421.951480][T27849] netlink: set zone limit has 8 unknown bytes [ 2422.238492][T27851] netlink: 'syz.4.40625': attribute type 10 has an invalid length. [ 2422.269689][T27851] netlink: 40 bytes leftover after parsing attributes in process `syz.4.40625'. [ 2422.335733][T27851] bridge0: port 3(team0) entered blocking state [ 2422.342367][T27851] bridge0: port 3(team0) entered listening state [ 2422.401775][T27851] 8021q: adding VLAN 0 to HW filter on device team0 [ 2423.862283][T27867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2425.304324][T27869] bridge0: port 3(team0) entered disabled state [ 2425.310828][T27869] bridge0: port 4(bond0) entered disabled state [ 2425.317330][T27869] bridge0: port 2(bridge_slave_1) entered disabled state [ 2425.324529][T27869] bridge0: port 1(bridge_slave_0) entered disabled state [ 2425.334045][T27869] device bridge0 left promiscuous mode [ 2425.364429][T27875] netlink: 'syz.0.40633': attribute type 9 has an invalid length. [ 2425.816512][T27893] netlink: set zone limit has 8 unknown bytes [ 2426.011445][T27902] netlink: 'syz.1.40641': attribute type 10 has an invalid length. [ 2426.021728][T27902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.40641'. [ 2426.046596][T27902] bridge0: port 4(team0) entered blocking state [ 2426.053011][T27902] bridge0: port 4(team0) entered forwarding state [ 2426.067875][T27902] 8021q: adding VLAN 0 to HW filter on device team0 [ 2426.082135][T27911] netlink: 156 bytes leftover after parsing attributes in process `syz.2.40648'. [ 2426.153088][T27914] netlink: 'syz.3.40649': attribute type 9 has an invalid length. [ 2426.441058][T27927] device syzkaller0 entered promiscuous mode [ 2426.860384][T27949] netlink: 'syz.2.40661': attribute type 10 has an invalid length. [ 2426.873822][T27949] netlink: 40 bytes leftover after parsing attributes in process `syz.2.40661'. [ 2426.901123][T27953] netlink: 156 bytes leftover after parsing attributes in process `syz.0.40663'. [ 2427.042662][T27962] netlink: 'syz.0.40667': attribute type 9 has an invalid length. [ 2427.497751][T27984] netlink: 156 bytes leftover after parsing attributes in process `syz.1.40679'. [ 2427.591875][T27983] netlink: 'syz.3.40678': attribute type 10 has an invalid length. [ 2427.599922][T27983] netlink: 40 bytes leftover after parsing attributes in process `syz.3.40678'. [ 2428.665582][T28000] netlink: 'syz.3.40685': attribute type 41 has an invalid length. [ 2428.711177][T28000] netlink: 'syz.3.40685': attribute type 4 has an invalid length. [ 2428.719891][T28000] netlink: 152 bytes leftover after parsing attributes in process `syz.3.40685'. [ 2428.957036][T28010] netlink: 'syz.2.40699': attribute type 3 has an invalid length. [ 2428.999183][T28010] netlink: 132 bytes leftover after parsing attributes in process `syz.2.40699'. [ 2429.095396][T28018] netlink: 'syz.1.40689': attribute type 9 has an invalid length. [ 2429.375478][T28029] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.40693'. [ 2429.669277][T28034] netlink: 156 bytes leftover after parsing attributes in process `syz.4.40695'. [ 2430.728129][T28075] netlink: 'syz.4.40712': attribute type 9 has an invalid length. [ 2431.564445][T28100] device syzkaller0 entered promiscuous mode [ 2431.880309][T28107] __nla_validate_parse: 1 callbacks suppressed [ 2431.880346][T28107] netlink: 63579 bytes leftover after parsing attributes in process `syz.4.40728'. [ 2432.211364][T28117] device syzkaller0 entered promiscuous mode [ 2432.476253][T28135] netlink: 164 bytes leftover after parsing attributes in process `syz.2.40738'. [ 2432.936267][T28158] netlink: 'syz.0.40746': attribute type 10 has an invalid length. [ 2432.945066][T28158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.40746'. [ 2433.173955][T28168] device syzkaller0 entered promiscuous mode [ 2433.632768][T28187] netlink: 'syz.2.40759': attribute type 41 has an invalid length. [ 2433.652013][T28187] netlink: 'syz.2.40759': attribute type 4 has an invalid length. [ 2433.660148][T28187] netlink: 152 bytes leftover after parsing attributes in process `syz.2.40759'. [ 2435.873901][T28217] netlink: 'syz.0.40780': attribute type 10 has an invalid length. [ 2435.882552][T28217] netlink: 40 bytes leftover after parsing attributes in process `syz.0.40780'. [ 2436.116089][T28229] device syzkaller0 entered promiscuous mode [ 2436.266097][T28237] netlink: 'syz.4.40775': attribute type 41 has an invalid length. [ 2436.274218][T28237] netlink: 'syz.4.40775': attribute type 4 has an invalid length. [ 2436.282682][T28237] netlink: 152 bytes leftover after parsing attributes in process `syz.4.40775'. [ 2436.554175][T28258] netlink: 'syz.3.40788': attribute type 10 has an invalid length. [ 2436.571490][T28258] netlink: 40 bytes leftover after parsing attributes in process `syz.3.40788'. [ 2436.752013][T28269] netlink: 'syz.3.40793': attribute type 21 has an invalid length. [ 2436.766262][T28269] netlink: 100 bytes leftover after parsing attributes in process `syz.3.40793'. [ 2437.376449][T28277] device syzkaller0 entered promiscuous mode [ 2437.390296][T28279] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2437.397690][T28279] IPv6: NLM_F_CREATE should be set when creating new route [ 2437.405037][T28279] IPv6: NLM_F_CREATE should be set when creating new route [ 2437.412428][T28279] IPv6: NLM_F_CREATE should be set when creating new route [ 2437.439667][T28281] netlink: 'syz.0.40796': attribute type 41 has an invalid length. [ 2437.456479][T28281] netlink: 'syz.0.40796': attribute type 4 has an invalid length. [ 2437.468917][T28281] netlink: 152 bytes leftover after parsing attributes in process `syz.0.40796'. [ 2437.584580][T28286] netlink: 830 bytes leftover after parsing attributes in process `syz.4.40810'. [ 2438.419416][T28297] netlink: 'syz.0.40804': attribute type 10 has an invalid length. [ 2438.515137][T28297] netlink: 40 bytes leftover after parsing attributes in process `syz.0.40804'. [ 2438.772407][T28308] device syzkaller0 entered promiscuous mode [ 2439.435492][T28315] device syzkaller0 entered promiscuous mode [ 2439.491816][T28318] netlink: 'syz.1.40812': attribute type 41 has an invalid length. [ 2439.499926][T28318] netlink: 'syz.1.40812': attribute type 4 has an invalid length. [ 2439.530997][T28318] netlink: 152 bytes leftover after parsing attributes in process `syz.1.40812'. [ 2439.656509][T28326] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.40816'. [ 2439.732191][T28328] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.40820'. [ 2439.825452][T28338] mac80211_hwsim hwsim105 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2440.042399][T28347] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.40828'. [ 2440.363566][T28357] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.40832'. [ 2440.412815][T28354] device syzkaller0 entered promiscuous mode [ 2440.619790][T28362] device syzkaller0 entered promiscuous mode [ 2440.635200][T28366] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.40836'. [ 2440.647702][T28370] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.40844'. [ 2442.174276][T28437] netlink: set zone limit has 8 unknown bytes [ 2444.648381][T28444] __nla_validate_parse: 4 callbacks suppressed [ 2444.648420][T28444] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.40880'. [ 2444.796148][T28448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2444.803470][T28448] IPv6: NLM_F_CREATE should be set when creating new route [ 2444.810831][T28448] IPv6: NLM_F_CREATE should be set when creating new route [ 2444.818079][T28448] IPv6: NLM_F_CREATE should be set when creating new route [ 2445.106226][T28463] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.40874'. [ 2445.150985][T28467] netlink: 830 bytes leftover after parsing attributes in process `syz.2.40878'. [ 2448.337216][T28495] netlink: 'syz.2.40890': attribute type 10 has an invalid length. [ 2448.356002][T28495] netlink: 40 bytes leftover after parsing attributes in process `syz.2.40890'. [ 2448.409767][T28502] mac80211_hwsim hwsim98 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2448.518019][T28510] netlink: 830 bytes leftover after parsing attributes in process `syz.0.40898'. [ 2448.637075][T28516] netlink: 830 bytes leftover after parsing attributes in process `syz.2.40900'. [ 2451.657227][T28530] netlink: 830 bytes leftover after parsing attributes in process `syz.1.40915'. [ 2451.884770][T28539] netlink: 'syz.2.40909': attribute type 10 has an invalid length. [ 2451.894043][T28539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.40909'. [ 2451.912730][T28549] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.40912'. [ 2452.060090][T28557] device syzkaller0 entered promiscuous mode [ 2455.206568][T28572] netlink: 'syz.0.40923': attribute type 6 has an invalid length. [ 2455.460061][T28581] netlink: 'syz.4.40928': attribute type 10 has an invalid length. [ 2455.470901][T28581] netlink: 40 bytes leftover after parsing attributes in process `syz.4.40928'. [ 2455.573002][T28586] device syzkaller0 entered promiscuous mode [ 2455.874632][T28597] netlink: 'syz.3.40934': attribute type 4 has an invalid length. [ 2455.889749][T28597] netlink: 152 bytes leftover after parsing attributes in process `syz.3.40934'. [ 2456.282669][T28597] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2456.454486][T28623] netlink: 'syz.1.40953': attribute type 6 has an invalid length. [ 2457.057294][T28657] netlink: 830 bytes leftover after parsing attributes in process `syz.3.40958'. [ 2457.179998][T28667] netlink: 'syz.2.40957': attribute type 4 has an invalid length. [ 2457.212294][T28667] netlink: 152 bytes leftover after parsing attributes in process `syz.2.40957'. [ 2457.250840][T28667] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2457.274172][T28665] mac80211_hwsim hwsim103 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2457.606405][T28688] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.40978'. [ 2457.620322][T28688] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2457.649129][T28690] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.40967'. [ 2457.682191][T28687] device syzkaller0 entered promiscuous mode [ 2457.974249][T28706] device syzkaller0 entered promiscuous mode [ 2458.083976][T28709] netlink: 'syz.0.40975': attribute type 4 has an invalid length. [ 2458.100874][T28709] netlink: 152 bytes leftover after parsing attributes in process `syz.0.40975'. [ 2458.110383][T28709] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2458.425488][T28730] device syzkaller0 entered promiscuous mode [ 2458.738925][T28744] device syzkaller0 entered promiscuous mode [ 2458.825222][T28753] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.40995'. [ 2458.842326][T28753] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2459.009580][T28765] netlink: 'syz.1.40999': attribute type 4 has an invalid length. [ 2459.034490][T28765] netlink: 152 bytes leftover after parsing attributes in process `syz.1.40999'. [ 2459.053675][T28765] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2459.117459][T28767] netlink: 'syz.2.41001': attribute type 3 has an invalid length. [ 2459.146798][T28767] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.41001'. [ 2459.307909][T28773] syzkaller0: create flow: hash 1193766374 index 1 [ 2459.318805][T28773] syzkaller0: delete flow: hash 1193766374 index 1 [ 2460.256105][T28813] netlink: 'syz.3.41018': attribute type 3 has an invalid length. [ 2460.276955][T28813] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.41018'. [ 2460.532280][T28824] device syzkaller0 entered promiscuous mode [ 2461.218435][T28857] netlink: 'syz.1.41035': attribute type 3 has an invalid length. [ 2461.226855][T28857] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.41035'. [ 2463.118173][T28890] netlink: 'syz.4.41050': attribute type 3 has an invalid length. [ 2463.131400][T28890] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.41050'. [ 2463.504580][T28919] netlink: 40 bytes leftover after parsing attributes in process `syz.4.41058'. [ 2463.529346][T28919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.41058'. [ 2463.838680][T28941] netlink: 'syz.0.41069': attribute type 3 has an invalid length. [ 2463.848125][T28941] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.41069'. [ 2463.963761][T28944] sock: sock_timestamping_bind_phc: sock not bind to device [ 2464.059521][T28951] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.41075'. [ 2466.724958][T28996] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.41086'. [ 2467.571169][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.577647][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2469.980798][T29011] netlink: 'syz.4.41093': attribute type 4 has an invalid length. [ 2470.251244][T29011] netlink: 152 bytes leftover after parsing attributes in process `syz.4.41093'. [ 2470.260433][T29011] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2470.674614][T29021] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.41101'. [ 2470.764185][T29025] netlink: 76 bytes leftover after parsing attributes in process `syz.3.41103'. [ 2472.317075][T29059] netlink: 188 bytes leftover after parsing attributes in process `syz.3.41115'. [ 2472.346574][T29058] netlink: 'syz.1.41114': attribute type 39 has an invalid length. [ 2472.560095][T29064] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.41117'. [ 2472.613747][T29066] netlink: 76 bytes leftover after parsing attributes in process `syz.0.41129'. [ 2472.709767][T29070] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.41120'. [ 2473.732978][T29098] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.41132'. [ 2473.998128][T29108] netlink: 76 bytes leftover after parsing attributes in process `syz.4.41136'. [ 2476.927736][T29155] netlink: 76 bytes leftover after parsing attributes in process `syz.2.41150'. [ 2480.423216][T29233] netlink: 188 bytes leftover after parsing attributes in process `syz.1.41180'. [ 2482.399696][T29235] netlink: 'syz.4.41181': attribute type 39 has an invalid length. [ 2485.837103][T29265] netlink: 'syz.3.41197': attribute type 39 has an invalid length. [ 2485.933309][T29267] netlink: 188 bytes leftover after parsing attributes in process `syz.4.41196'. [ 2486.006723][T29270] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.41190'. [ 2487.143685][T29303] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.41210'. [ 2487.185571][T29305] netlink: 188 bytes leftover after parsing attributes in process `syz.0.41209'. [ 2487.518416][T29314] netlink: 'syz.0.41214': attribute type 39 has an invalid length. [ 2488.094421][T29340] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.41223'. [ 2488.167268][T29344] netlink: 188 bytes leftover after parsing attributes in process `syz.2.41225'. [ 2488.679575][T29363] netlink: 'syz.2.41233': attribute type 39 has an invalid length. [ 2489.547633][T29391] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.41238'. [ 2489.828525][T29396] netlink: 'syz.1.41247': attribute type 10 has an invalid length. [ 2489.881074][T29396] netlink: 55 bytes leftover after parsing attributes in process `syz.1.41247'. [ 2490.474716][T29424] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.41261'. [ 2490.519393][T29424] netlink: 'syz.1.41261': attribute type 16 has an invalid length. [ 2490.538669][T29424] netlink: 'syz.1.41261': attribute type 21 has an invalid length. [ 2490.552633][T29424] netlink: 'syz.1.41261': attribute type 25 has an invalid length. [ 2490.568925][T29424] netlink: 'syz.1.41261': attribute type 27 has an invalid length. [ 2490.586666][T29424] netlink: 'syz.1.41261': attribute type 28 has an invalid length. [ 2490.613737][T29424] netlink: 'syz.1.41261': attribute type 29 has an invalid length. [ 2490.632889][T29424] netlink: 'syz.1.41261': attribute type 30 has an invalid length. [ 2490.651139][T29426] netlink: 152 bytes leftover after parsing attributes in process `syz.3.41262'. [ 2492.016144][T29449] : port 1(erspan0) entered blocking state [ 2492.041028][T29449] : port 1(erspan0) entered disabled state [ 2492.056761][T29449] device erspan0 entered promiscuous mode [ 2495.507291][T29488] netlink: 152 bytes leftover after parsing attributes in process `syz.1.41290'. [ 2496.099807][T29524] netlink: 152 bytes leftover after parsing attributes in process `syz.4.41304'. [ 2496.295743][T29535] : port 1(erspan0) entered blocking state [ 2496.305400][T29535] : port 1(erspan0) entered disabled state [ 2496.319252][T29535] device erspan0 entered promiscuous mode [ 2496.416409][T29541] sock: sock_set_timeout: `syz.4.41312' (pid 29541) tries to set negative timeout [ 2496.440501][T29541] netlink: 'syz.4.41312': attribute type 10 has an invalid length. [ 2496.474391][T29541] team0: Device wg1 is of different type [ 2496.550983][T29540] delete_channel: no stack [ 2497.768852][T29605] : port 1(erspan0) entered blocking state [ 2497.781524][T29605] : port 1(erspan0) entered disabled state [ 2497.803676][T29605] device erspan0 entered promiscuous mode [ 2499.591010][T29648] netlink: 'syz.3.41356': attribute type 9 has an invalid length. [ 2499.603063][T29648] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.41356'. [ 2499.694657][T29654] sock: sock_set_timeout: `syz.0.41360' (pid 29654) tries to set negative timeout [ 2499.813965][T29654] netlink: 'syz.0.41360': attribute type 10 has an invalid length. [ 2499.871585][T29654] team0: Device wg1 is of different type [ 2500.049646][T29653] delete_channel: no stack [ 2501.025850][T29698] sock: sock_set_timeout: `syz.3.41376' (pid 29698) tries to set negative timeout [ 2501.095704][T29698] netlink: 'syz.3.41376': attribute type 10 has an invalid length. [ 2501.334857][T29698] device wg1 entered promiscuous mode [ 2501.360123][T29698] team0: Device wg1 is of different type [ 2501.591329][T29696] delete_channel: no stack [ 2503.025830][T29767] sock: sock_set_timeout: `syz.2.41397' (pid 29767) tries to set negative timeout [ 2503.109362][T29769] netlink: 'syz.2.41397': attribute type 10 has an invalid length. [ 2503.201257][T29764] delete_channel: no stack [ 2504.939182][T29782] netlink: 'syz.2.41403': attribute type 9 has an invalid length. [ 2505.008545][T29782] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.41403'. [ 2508.403358][T29844] netlink: 'syz.4.41422': attribute type 9 has an invalid length. [ 2508.461147][T29844] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.41422'. [ 2513.359329][T29912] netlink: 'syz.1.41447': attribute type 10 has an invalid length. [ 2514.138094][T29930] device syzkaller0 entered promiscuous mode [ 2514.559658][T29950] netlink: 'syz.1.41460': attribute type 2 has an invalid length. [ 2514.658694][T29954] netlink: 'syz.3.41463': attribute type 9 has an invalid length. [ 2514.677089][T29954] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.41463'. [ 2515.148544][T29973] device syzkaller0 entered promiscuous mode [ 2515.229278][T29979] netlink: 'syz.3.41471': attribute type 10 has an invalid length. [ 2516.263216][T30000] netlink: 'syz.3.41481': attribute type 2 has an invalid length. [ 2516.284160][T29999] netlink: 'syz.0.41480': attribute type 9 has an invalid length. [ 2516.320766][T29999] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.41480'. [ 2516.638083][T30014] device syzkaller0 entered promiscuous mode [ 2516.810574][T30020] netlink: 'syz.0.41489': attribute type 10 has an invalid length. [ 2517.779762][T30038] netlink: 'syz.1.41506': attribute type 10 has an invalid length. [ 2517.810275][T30038] device netdevsim0 left promiscuous mode [ 2517.838867][T30038] bond0: (slave netdevsim0): Releasing backup interface [ 2522.228772][T30095] netlink: 'syz.3.41517': attribute type 10 has an invalid length. [ 2522.298608][T30095] device vxcan1 entered promiscuous mode [ 2522.301499][T30096] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.41525'. [ 2522.333516][T30095] team0: Device vxcan1 is of different type [ 2522.342896][T30096] netlink: del zone limit has 8 unknown bytes [ 2522.472492][T30104] netlink: 'syz.4.41522': attribute type 39 has an invalid length. [ 2522.494632][T30110] netlink: 'syz.1.41526': attribute type 3 has an invalid length. [ 2522.533669][T30110] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.41526'. [ 2522.585273][T30110] netlink: 'syz.1.41526': attribute type 10 has an invalid length. [ 2525.745860][T30135] netlink: 'syz.0.41545': attribute type 3 has an invalid length. [ 2525.764542][T30135] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.41545'. [ 2525.780023][T30135] netlink: 'syz.0.41545': attribute type 10 has an invalid length. [ 2526.040675][T30150] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.41538'. [ 2526.085663][T30153] netlink: 132 bytes leftover after parsing attributes in process `syz.2.41542'. [ 2526.113535][T30150] netlink: del zone limit has 8 unknown bytes [ 2527.880781][T30165] netlink: 'syz.2.41546': attribute type 10 has an invalid length. [ 2528.904628][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.911001][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2531.033375][T30183] netlink: 'syz.4.41553': attribute type 3 has an invalid length. [ 2531.056348][T30183] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.41553'. [ 2531.083385][T30178] netlink: 6 bytes leftover after parsing attributes in process `syz.0.41550'. [ 2531.104171][T30178] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2531.155524][T30178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2531.174904][T30186] netlink: 'syz.4.41553': attribute type 10 has an invalid length. [ 2531.187765][T30187] netlink: 'syz.2.41555': attribute type 10 has an invalid length. [ 2531.208636][T30187] bond0: (slave netdevsim0): Releasing backup interface [ 2531.219493][T30187] device netdevsim0 left promiscuous mode [ 2531.310303][T30192] netlink: 'syz.0.41557': attribute type 39 has an invalid length. [ 2532.464299][T30217] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.41576'. [ 2532.577574][T30217] netlink: 'syz.4.41576': attribute type 1 has an invalid length. [ 2532.591814][T30217] netlink: 16520 bytes leftover after parsing attributes in process `syz.4.41576'. [ 2535.501506][T30228] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.41568'. [ 2535.525872][T30233] netlink: 'syz.3.41569': attribute type 3 has an invalid length. [ 2535.547796][T30228] netlink: del zone limit has 8 unknown bytes [ 2535.556607][T30233] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.41569'. [ 2535.588354][T30234] device syzkaller0 entered promiscuous mode [ 2535.597570][T30235] netlink: 'syz.3.41569': attribute type 10 has an invalid length. [ 2535.645013][T30235] device virt_wifi0 entered promiscuous mode [ 2535.673921][T30235] team0: Port device virt_wifi0 added [ 2535.692450][T30241] netlink: 'syz.0.41570': attribute type 10 has an invalid length. [ 2535.998871][T30256] netlink: 'syz.3.41578': attribute type 10 has an invalid length. [ 2536.020890][T30256] device netdevsim0 left promiscuous mode [ 2536.517921][T30274] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.41586'. [ 2536.550427][T30274] netlink: del zone limit has 8 unknown bytes [ 2536.586271][T30275] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.41587'. [ 2536.622078][T30275] netlink: 20624 bytes leftover after parsing attributes in process `syz.4.41587'. [ 2536.663752][T30272] delete_channel: no stack [ 2536.740439][T30279] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.41590'. [ 2536.752656][T30281] netlink: 'syz.1.41588': attribute type 10 has an invalid length. [ 2536.793883][T30281] device vxcan1 entered promiscuous mode [ 2536.801338][T30281] team0: Device vxcan1 is of different type [ 2536.829205][T30279] netlink: 'syz.0.41590': attribute type 1 has an invalid length. [ 2536.850979][T30279] netlink: 16520 bytes leftover after parsing attributes in process `syz.0.41590'. [ 2536.938269][T30291] netlink: 'syz.2.41591': attribute type 3 has an invalid length. [ 2537.001411][T30291] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.41591'. [ 2537.187512][T30297] netlink: 'syz.2.41591': attribute type 10 has an invalid length. [ 2537.266946][T30302] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2537.326106][T30302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2537.870880][T30319] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.41600'. [ 2537.901865][T30323] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.41606'. [ 2537.910802][T30319] netlink: del zone limit has 8 unknown bytes [ 2537.921312][T30327] netlink: 'syz.4.41604': attribute type 10 has an invalid length. [ 2537.952644][T30323] netlink: 'syz.3.41606': attribute type 1 has an invalid length. [ 2537.971515][T30323] netlink: 16520 bytes leftover after parsing attributes in process `syz.3.41606'. [ 2538.692124][T30361] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.41619'. [ 2540.298505][T30417] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2540.429781][T30417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2541.074850][T30427] device syzkaller0 entered promiscuous mode [ 2541.113682][T30429] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2541.163377][T30429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2541.325236][T30439] validate_nla: 2 callbacks suppressed [ 2541.325274][T30439] netlink: 'syz.3.41641': attribute type 39 has an invalid length. [ 2541.658795][T30448] __nla_validate_parse: 3 callbacks suppressed [ 2541.658815][T30448] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.41648'. [ 2541.710966][T30448] netlink: 20624 bytes leftover after parsing attributes in process `syz.1.41648'. [ 2541.792239][T30447] delete_channel: no stack [ 2542.865962][T30467] netlink: 188 bytes leftover after parsing attributes in process `syz.0.41660'. [ 2543.086551][T30483] netlink: 'syz.2.41666': attribute type 39 has an invalid length. [ 2544.186090][T30516] netlink: 132 bytes leftover after parsing attributes in process `syz.1.41682'. [ 2544.720784][T30525] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2544.799977][T30525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2544.983039][T30539] netlink: 'syz.4.41693': attribute type 15 has an invalid length. [ 2546.194391][T30579] netlink: 144 bytes leftover after parsing attributes in process `syz.3.41708'. [ 2546.682901][T30599] netlink: 'syz.2.41718': attribute type 10 has an invalid length. [ 2546.692404][T30599] netlink: 156 bytes leftover after parsing attributes in process `syz.2.41718'. [ 2546.849946][T30604] netlink: 'syz.4.41720': attribute type 4 has an invalid length. [ 2546.858395][T30604] netlink: 152 bytes leftover after parsing attributes in process `syz.4.41720'. [ 2546.902198][T30604] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2547.198126][T30615] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.41735'. [ 2547.348823][T30622] netlink: 'syz.3.41727': attribute type 15 has an invalid length. [ 2547.387379][T30619] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2547.573436][T30629] netlink: 14538 bytes leftover after parsing attributes in process `syz.2.41732'. [ 2547.731496][T30632] netlink: 188 bytes leftover after parsing attributes in process `syz.1.41733'. [ 2547.785145][T30640] IPv6: Can't replace route, no match found [ 2547.852323][T30644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41737'. [ 2547.978540][T30652] IPv6: Can't replace route, no match found [ 2548.108115][T30655] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2548.133435][T30657] netlink: 'syz.0.41743': attribute type 15 has an invalid length. [ 2548.296245][T30667] netlink: 14538 bytes leftover after parsing attributes in process `syz.0.41749'. [ 2548.384174][T30670] netlink: 188 bytes leftover after parsing attributes in process `syz.3.41750'. [ 2548.789860][T30684] netlink: 208644 bytes leftover after parsing attributes in process `syz.3.41756'. [ 2548.826776][T30684] netlink: 'syz.3.41756': attribute type 1 has an invalid length. [ 2549.099755][T30691] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2549.140141][T30691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2549.373197][T30699] netlink: 14538 bytes leftover after parsing attributes in process `syz.3.41764'. [ 2549.723402][T30709] netlink: 'syz.1.41769': attribute type 4 has an invalid length. [ 2549.813301][T30709] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2550.071228][T30720] netlink: 'syz.1.41773': attribute type 15 has an invalid length. [ 2550.096561][T30722] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2550.128517][T30720] netlink: 'syz.1.41773': attribute type 4 has an invalid length. [ 2550.160907][T30720] netlink: 'syz.1.41773': attribute type 5 has an invalid length. [ 2550.169044][T30720] netlink: 'syz.1.41773': attribute type 6 has an invalid length. [ 2551.631399][T30777] delete_channel: no stack [ 2551.776047][T30782] IPv6: Can't replace route, no match found [ 2552.381981][T30800] __nla_validate_parse: 9 callbacks suppressed [ 2552.385805][T30800] netlink: 208644 bytes leftover after parsing attributes in process `syz.1.41804'. [ 2552.452314][T30800] validate_nla: 27 callbacks suppressed [ 2552.452508][T30800] netlink: 'syz.1.41804': attribute type 1 has an invalid length. [ 2552.866133][T30805] netlink: 188 bytes leftover after parsing attributes in process `syz.1.41806'. [ 2552.923661][T30807] netlink: 'syz.3.41807': attribute type 15 has an invalid length. [ 2552.950804][T30807] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.41807'. [ 2552.976192][T30811] netlink: 'syz.2.41811': attribute type 3 has an invalid length. [ 2553.000508][T30811] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.41811'. [ 2553.039547][T30814] netlink: 'syz.3.41807': attribute type 4 has an invalid length. [ 2553.082087][T30814] netlink: 'syz.3.41807': attribute type 5 has an invalid length. [ 2553.099136][T30814] netlink: 'syz.3.41807': attribute type 6 has an invalid length. [ 2553.117483][T30814] netlink: 'syz.3.41807': attribute type 7 has an invalid length. [ 2553.135856][T30814] netlink: 'syz.3.41807': attribute type 11 has an invalid length. [ 2553.161045][T30814] netlink: 'syz.3.41807': attribute type 15 has an invalid length. [ 2553.178200][T30814] netlink: 'syz.3.41807': attribute type 16 has an invalid length. [ 2553.197908][T30814] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.41807'. [ 2553.253865][T30816] IPv6: Can't replace route, no match found [ 2554.391112][T30841] delete_channel: no stack [ 2554.771223][T30851] netlink: 188 bytes leftover after parsing attributes in process `syz.3.41824'. [ 2555.472350][T30879] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.41833'. [ 2555.820878][T30884] delete_channel: no stack [ 2556.198618][T30895] netlink: 132 bytes leftover after parsing attributes in process `syz.4.41839'. [ 2556.276066][T30898] netlink: 132 bytes leftover after parsing attributes in process `syz.4.41839'. [ 2556.681321][T30908] netlink: 188 bytes leftover after parsing attributes in process `syz.4.41844'. [ 2557.501703][T30938] validate_nla: 12 callbacks suppressed [ 2557.501746][T30938] netlink: 'syz.0.41854': attribute type 2 has an invalid length. [ 2557.597088][T30938] netlink: 'syz.0.41854': attribute type 8 has an invalid length. [ 2557.633132][T30938] __nla_validate_parse: 1 callbacks suppressed [ 2557.633171][T30938] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41854'. [ 2557.766204][T30937] netlink: 36 bytes leftover after parsing attributes in process `syz.1.41853'. [ 2557.813538][T30937] netlink: 'syz.1.41853': attribute type 1 has an invalid length. [ 2557.855393][T30937] netlink: 6 bytes leftover after parsing attributes in process `syz.1.41853'. [ 2557.867613][T30944] netlink: 'syz.0.41854': attribute type 2 has an invalid length. [ 2557.902736][T30944] netlink: 'syz.0.41854': attribute type 8 has an invalid length. [ 2557.963091][T30944] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41854'. [ 2558.374530][T30952] netlink: 'syz.2.41870': attribute type 2 has an invalid length. [ 2558.394269][T30952] netlink: 'syz.2.41870': attribute type 8 has an invalid length. [ 2558.432357][T30952] netlink: 132 bytes leftover after parsing attributes in process `syz.2.41870'. [ 2558.483215][T30958] netlink: 'syz.2.41870': attribute type 2 has an invalid length. [ 2558.540849][T30958] netlink: 'syz.2.41870': attribute type 8 has an invalid length. [ 2558.559592][T30958] netlink: 132 bytes leftover after parsing attributes in process `syz.2.41870'. [ 2558.810073][T30970] netlink: 'syz.0.41862': attribute type 3 has an invalid length. [ 2558.841978][T30970] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.41862'. [ 2559.404281][T30982] netlink: 208644 bytes leftover after parsing attributes in process `syz.0.41864'. [ 2559.552995][T30987] IPv6: Can't replace route, no match found [ 2559.734652][T30990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41873'. [ 2561.022577][T31022] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.41881'. [ 2566.210424][T31108] device syzkaller0 entered promiscuous mode [ 2567.759470][T31157] netlink: 132 bytes leftover after parsing attributes in process `syz.1.41933'. [ 2568.279105][T31167] validate_nla: 2 callbacks suppressed [ 2568.279142][T31167] netlink: 'syz.4.41939': attribute type 4 has an invalid length. [ 2568.300834][T31167] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.41939'. [ 2569.744381][T31203] netlink: 'syz.3.41954': attribute type 4 has an invalid length. [ 2569.775242][T31203] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.41954'. [ 2570.606327][T31237] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41967'. [ 2570.859394][T31242] netlink: 132 bytes leftover after parsing attributes in process `syz.4.41982'. [ 2570.878464][T31245] netlink: 'syz.1.41970': attribute type 4 has an invalid length. [ 2570.892983][T31245] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.41970'. [ 2571.205110][T31254] netlink: 'syz.3.41973': attribute type 1 has an invalid length. [ 2571.265411][T31254] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.41973'. [ 2573.398385][T31290] netlink: 132 bytes leftover after parsing attributes in process `syz.3.41986'. [ 2573.977760][T31295] netlink: 'syz.0.41987': attribute type 4 has an invalid length. [ 2574.010846][T31295] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.41987'. [ 2574.309663][T31303] netlink: 'syz.2.41991': attribute type 1 has an invalid length. [ 2574.340834][T31303] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.41991'. [ 2574.914732][T31328] netlink: 132 bytes leftover after parsing attributes in process `syz.2.42001'. [ 2575.218616][T31335] netlink: 'syz.2.42003': attribute type 4 has an invalid length. [ 2575.264780][T31335] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.42003'. [ 2575.318438][T31332] netlink: 132 bytes leftover after parsing attributes in process `syz.0.42015'. [ 2575.744516][T31356] netlink: 'syz.1.42011': attribute type 1 has an invalid length. [ 2575.813880][T31356] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.42011'. [ 2580.545862][T31406] netlink: 132 bytes leftover after parsing attributes in process `syz.1.42030'. [ 2582.754791][T31433] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2582.762274][T31433] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2585.315676][T31452] device syzkaller0 entered promiscuous mode [ 2585.619264][T31462] bridge0: port 3(team0) entered disabled state [ 2585.629804][T31462] bridge0: port 4(bond0) entered disabled state [ 2585.639178][T31462] device bridge_slave_1 left promiscuous mode [ 2585.645558][T31462] bridge0: port 2(bridge_slave_1) entered disabled state [ 2585.655919][T31462] device bridge_slave_0 left promiscuous mode [ 2585.662344][T31462] bridge0: port 1(bridge_slave_0) entered disabled state [ 2586.852010][T31487] device syzkaller0 entered promiscuous mode [ 2587.150104][T31503] device syzkaller0 entered promiscuous mode [ 2588.589203][T31537] netlink: 132 bytes leftover after parsing attributes in process `syz.0.42075'. [ 2589.086889][T31547] device syzkaller0 entered promiscuous mode [ 2589.326244][T31554] device syzkaller0 entered promiscuous mode [ 2589.940326][T31566] netlink: 132 bytes leftover after parsing attributes in process `syz.2.42089'. [ 2590.343207][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.349580][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.449718][T31586] bridge0: port 4(team0) entered disabled state [ 2590.464827][T31586] bridge0: port 3(bond0) entered disabled state [ 2590.502601][T31586] device bridge_slave_1 left promiscuous mode [ 2590.515393][T31586] bridge0: port 2(bridge_slave_1) entered disabled state [ 2590.536164][T31586] device bridge_slave_0 left promiscuous mode [ 2590.542645][T31586] bridge0: port 1(bridge_slave_0) entered disabled state [ 2590.598059][T31593] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.42093'. [ 2594.231582][T31614] netlink: 'syz.0.42101': attribute type 10 has an invalid length. [ 2594.239632][T31614] netlink: 40 bytes leftover after parsing attributes in process `syz.0.42101'. [ 2594.261510][T31614] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2594.432635][T31634] netlink: 'syz.1.42105': attribute type 20 has an invalid length. [ 2594.536617][T31640] netlink: 'syz.4.42111': attribute type 7 has an invalid length. [ 2594.552140][T31642] netlink: 'syz.0.42112': attribute type 10 has an invalid length. [ 2594.560811][T31640] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.42111'. [ 2594.593593][T31642] device bond0 left promiscuous mode [ 2594.600121][T31642] device bond_slave_0 left promiscuous mode [ 2594.606322][T31642] device bond_slave_1 left promiscuous mode [ 2594.622902][T31642] device netdevsim0 left promiscuous mode [ 2594.916380][T31658] netlink: 148 bytes leftover after parsing attributes in process `syz.1.42120'. [ 2595.139252][T31671] netlink: 'syz.4.42125': attribute type 10 has an invalid length. [ 2595.148943][T31671] netlink: 40 bytes leftover after parsing attributes in process `syz.4.42125'. [ 2595.167895][T31671] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2595.274452][T31674] netlink: 'syz.3.42126': attribute type 20 has an invalid length. [ 2595.859409][T31702] netlink: 'syz.1.42137': attribute type 10 has an invalid length. [ 2595.877966][T31702] netlink: 40 bytes leftover after parsing attributes in process `syz.1.42137'. [ 2596.005928][T31712] netlink: 132 bytes leftover after parsing attributes in process `syz.3.42141'. [ 2596.052920][T31711] netlink: 'syz.2.42140': attribute type 20 has an invalid length. [ 2596.297009][T31725] device syzkaller0 entered promiscuous mode [ 2596.310998][T31725] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2597.044340][T31746] netlink: 'syz.4.42154': attribute type 20 has an invalid length. [ 2597.218678][T31750] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.42155'. [ 2597.242019][T31752] netlink: 'syz.1.42157': attribute type 10 has an invalid length. [ 2597.429618][T31760] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.42169'. [ 2611.235636][T31790] netlink: 'syz.2.42170': attribute type 10 has an invalid length. [ 2611.248802][T31790] device bond0 left promiscuous mode [ 2611.256823][T31790] device bond_slave_0 left promiscuous mode [ 2611.277298][T31790] device bond_slave_1 left promiscuous mode [ 2611.311092][T31790] device bridge_slave_1 left promiscuous mode [ 2611.958343][T31797] chnl_net:caif_netlink_parms(): no params data found [ 2612.108461][T31810] device syzkaller0 entered promiscuous mode [ 2612.131133][T31810] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2612.494270][T31797] bridge0: port 1(bridge_slave_0) entered blocking state [ 2612.504964][T31797] bridge0: port 1(bridge_slave_0) entered disabled state [ 2612.514956][T31797] device bridge_slave_0 entered promiscuous mode [ 2612.532599][T31797] bridge0: port 2(bridge_slave_1) entered blocking state [ 2612.560895][T31797] bridge0: port 2(bridge_slave_1) entered disabled state [ 2612.569010][T31797] device bridge_slave_1 entered promiscuous mode [ 2612.632715][T31797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2612.654785][T31797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2612.722564][T31797] team0: Port device team_slave_0 added [ 2612.741706][T31797] team0: Port device team_slave_1 added [ 2612.768640][T31797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2612.775815][T31797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2612.803505][T31797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2612.815541][T31814] chnl_net:caif_netlink_parms(): no params data found [ 2612.834118][T31797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2612.843566][T31797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2612.871228][T31797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2612.942963][T31797] device hsr_slave_0 entered promiscuous mode [ 2612.949921][T31797] device hsr_slave_1 entered promiscuous mode [ 2612.961578][T31797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2612.969337][T31797] Cannot create hsr debugfs directory [ 2613.044290][T31814] bridge0: port 1(bridge_slave_0) entered blocking state [ 2613.060783][T31814] bridge0: port 1(bridge_slave_0) entered disabled state [ 2613.069959][T31814] device bridge_slave_0 entered promiscuous mode [ 2613.092891][T31814] bridge0: port 2(bridge_slave_1) entered blocking state [ 2613.099995][T31814] bridge0: port 2(bridge_slave_1) entered disabled state [ 2613.108652][T31814] device bridge_slave_1 entered promiscuous mode [ 2613.183487][T31814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2613.205554][T31814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2613.258096][T31814] team0: Port device team_slave_0 added [ 2613.277168][T31814] team0: Port device team_slave_1 added [ 2613.318194][T31797] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2613.332627][T31814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2613.339614][T31814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2613.368470][T31814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2613.380570][T31797] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2613.401471][T31814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2613.408635][T31814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2613.438269][T31814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2613.450748][T31797] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2613.467413][T31797] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2613.507853][T31814] device hsr_slave_0 entered promiscuous mode [ 2613.515075][T31814] device hsr_slave_1 entered promiscuous mode [ 2613.524682][T31814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2613.532761][T31814] Cannot create hsr debugfs directory [ 2613.540774][T28123] Bluetooth: hci5: command 0x0409 tx timeout [ 2613.661003][T31814] device netdevsim3 left promiscuous mode [ 2613.682917][T31814] team0: Port device netdevsim3 removed [ 2613.690090][T31814] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2613.745748][T31797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2613.769776][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2613.781902][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2613.793000][T31797] 8021q: adding VLAN 0 to HW filter on device team0 [ 2613.808861][T31814] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2613.825450][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2613.841357][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2613.860832][T31622] bridge0: port 1(bridge_slave_0) entered blocking state [ 2613.867922][T31622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2613.892982][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2613.902000][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2613.913902][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2613.923686][T31622] bridge0: port 2(bridge_slave_1) entered blocking state [ 2613.930913][T31622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2613.943182][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2613.953860][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2613.974654][T31814] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2613.992678][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2614.004139][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2614.012977][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2614.022806][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2614.040231][T31797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2614.051417][T31797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2614.072989][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2614.082763][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2614.091537][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2614.100262][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2614.110144][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2614.118708][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2614.236042][T31814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2614.260140][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2614.268384][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2614.271049][T17689] Bluetooth: hci4: command 0x0409 tx timeout [ 2614.276839][T31814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2614.298217][T31797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2614.307581][T31814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2614.317694][T31814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2614.475134][T31814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2614.507682][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2614.516031][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2614.531531][T31814] 8021q: adding VLAN 0 to HW filter on device team0 [ 2614.545779][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2614.555236][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2614.566519][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2614.576327][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2614.585580][T16746] bridge0: port 1(bridge_slave_0) entered blocking state [ 2614.592719][T16746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2614.603959][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2614.632984][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2614.644161][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2614.661446][T31622] bridge0: port 2(bridge_slave_1) entered blocking state [ 2614.668917][T31622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2614.681571][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2614.703853][T31797] device veth0_vlan entered promiscuous mode [ 2614.722346][ T9716] tipc: Left network mode [ 2614.727522][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2614.737077][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2614.746315][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2614.756142][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2614.766214][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2614.779508][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2614.796570][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2614.806329][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2614.815193][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2614.823924][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2614.833609][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2614.841967][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2614.853666][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2614.862529][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2614.903587][T31797] device veth1_vlan entered promiscuous mode [ 2614.914284][T31814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2614.940698][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2614.952230][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2614.963205][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2614.972827][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2614.991791][T31797] device veth0_macvtap entered promiscuous mode [ 2615.038192][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2615.048824][T31797] device veth1_macvtap entered promiscuous mode [ 2615.074077][T31797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2615.082361][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2615.092266][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2615.106899][T31797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2615.125414][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2615.136041][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2615.149397][T31797] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2615.159100][T31797] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2615.171494][T31797] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2615.180418][T31797] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2615.219462][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2615.227662][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2615.260306][T31814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2615.313296][T31622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2615.322794][T25066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2615.332258][T31622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2615.341307][T25066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2615.374774][T25066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2615.405168][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2615.413951][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2615.429679][ T9716] device erspan0 left promiscuous mode [ 2615.435344][ T9716] : port 1(erspan0) entered disabled state [ 2615.449923][ T6964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2615.451287][T31814] device veth0_vlan entered promiscuous mode [ 2615.463957][ T6964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2615.473742][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2615.483069][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2615.493050][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2615.517079][T31814] device veth1_vlan entered promiscuous mode [ 2615.541086][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2615.550466][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2615.562077][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2615.571227][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2615.584460][T31814] device veth0_macvtap entered promiscuous mode [ 2615.621366][T11103] Bluetooth: hci5: command 0x041b tx timeout [ 2615.636685][T31814] device veth1_macvtap entered promiscuous mode [ 2615.645563][T31851] netlink: 'syz.5.42167': attribute type 20 has an invalid length. [ 2615.664919][T31814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2615.676280][T31814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2615.688906][T31814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2615.698700][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2615.715060][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2615.730271][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2615.751101][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2615.763717][T31814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2615.774772][T31814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2615.788115][T31814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2615.797209][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2615.808703][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2615.826973][T31814] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2615.835963][T31814] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2615.844901][T31814] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2615.854095][T31814] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2615.927123][T25066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2615.935247][T25066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2615.954957][T31622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2615.996859][T31622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2616.004871][T31622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2616.014580][T25066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2616.343198][T12346] Bluetooth: hci4: command 0x041b tx timeout [ 2616.356176][ T9716] device wlan1 left promiscuous mode [ 2616.367273][ T9716] team0: Port device wlan1 removed [ 2616.480960][ T9716] bridge0: port 4(team0) entered disabled state [ 2616.488275][ T9716] device veth1_to_hsr left promiscuous mode [ 2616.494505][ T9716] bridge0: port 3(veth1_to_hsr) entered disabled state [ 2616.503431][ T9716] device bridge_slave_1 left promiscuous mode [ 2616.509661][ T9716] bridge0: port 2(bridge_slave_1) entered disabled state [ 2616.519498][ T9716] device bridge_slave_0 left promiscuous mode [ 2616.525819][ T9716] bridge0: port 1(bridge_slave_0) entered disabled state [ 2616.536417][ T9716] device veth1_macvtap left promiscuous mode [ 2616.876087][ T9716] device virt_wifi0 left promiscuous mode [ 2616.883795][ T9716] team0 (unregistering): Port device virt_wifi0 removed [ 2616.921623][ T9716] device team_slave_1 left promiscuous mode [ 2616.928411][ T9716] team0 (unregistering): Port device team_slave_1 removed [ 2617.700778][T11103] Bluetooth: hci5: command 0x040f tx timeout [ 2618.420837][T12346] Bluetooth: hci4: command 0x040f tx timeout [ 2619.781074][T11103] Bluetooth: hci5: command 0x0419 tx timeout [ 2620.501001][T17692] Bluetooth: hci4: command 0x0419 tx timeout [ 2651.792298][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.798638][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.222448][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.228780][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2735.781107][ T6579] Bluetooth: hci5: command 0x0406 tx timeout [ 2735.787194][ T6579] Bluetooth: hci4: command 0x0406 tx timeout [ 2774.662390][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.668717][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.112170][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.118475][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2897.542197][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.548541][ T1422] ieee802154 phy1 wpan1: encryption failed: -22