last executing test programs: 4.719976362s ago: executing program 3 (id=32656): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.617298275s ago: executing program 3 (id=32657): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0x4044454) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 4.616275095s ago: executing program 1 (id=32665): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000006, 0x0) recvmsg$kcm(r0, 0x0, 0x40010140) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b7020000feffff7fbfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d3", 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 4.378930311s ago: executing program 3 (id=32667): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000900)=r0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000010000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.336376272s ago: executing program 2 (id=32659): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa9, 0xe, 0x0, 0x0, 0x0, 0x5, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe, 0x10}, 0x226, 0xb, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 4.129558167s ago: executing program 0 (id=32660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x8, 0x80, 0x40, 0x42, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{r0}, &(0x7f0000000e00), &(0x7f0000000e40)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0xe, 0x0, &(0x7f0000000540)="000000000000bde52128000000f1", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.292833887s ago: executing program 1 (id=32661): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104101, 0x4, 0x0, 0x5, 0x5ba, 0x0, 0x201}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000041296a1180002000000030000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.287555777s ago: executing program 0 (id=32671): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) 1.052046074s ago: executing program 3 (id=32662): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 998.545645ms ago: executing program 1 (id=32663): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fd00400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x0) 913.199267ms ago: executing program 0 (id=32664): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 864.773098ms ago: executing program 2 (id=32666): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f907000000", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x408e0) 812.787949ms ago: executing program 1 (id=32668): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0xc, 0x8, 0x0, 0x8000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x8010743f, &(0x7f0000000180)) 600.830165ms ago: executing program 0 (id=32669): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 529.806336ms ago: executing program 2 (id=32678): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 493.503307ms ago: executing program 0 (id=32670): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc0000010000000000000000000000000000000000000009000000000000000100000003"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 460.782349ms ago: executing program 3 (id=32672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x74, 0x7, 0x0, 0x2000007}]}) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) 287.062242ms ago: executing program 2 (id=32673): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x2e, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000001000000000000000feffff18110000", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b703"], 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c02", 0x17}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 201.929884ms ago: executing program 2 (id=32674): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) 199.291735ms ago: executing program 0 (id=32675): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22) 95.060847ms ago: executing program 1 (id=32676): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x6}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) write$cgroup_pid(r1, &(0x7f0000002a80), 0x12) 78.188808ms ago: executing program 2 (id=32677): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f00000001c0)=r2, 0x2f) 77.735458ms ago: executing program 3 (id=32679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 0s ago: executing program 1 (id=32680): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3, 0x0, 0x0, @void, @value=0xff070000, @void, @value=0xff070000}, 0x48) kernel console output (not intermixed with test programs): 0442] netlink: 'syz.1.27447': attribute type 27 has an invalid length. [ 1400.017817][T30442] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1400.208806][T30453] netlink: 'syz.1.27451': attribute type 1 has an invalid length. [ 1400.371386][T30458] netlink: 'syz.1.27454': attribute type 33 has an invalid length. [ 1400.525444][T30464] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1400.657571][T30472] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 1400.663148][T30472] dvmrp1: persist disabled [ 1400.744671][T30474] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1400.899643][T30482] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1401.765432][T30512] __nla_validate_parse: 22 callbacks suppressed [ 1401.765451][T30512] netlink: 36 bytes leftover after parsing attributes in process `syz.1.27480'. [ 1401.817219][T30512] netlink: 6 bytes leftover after parsing attributes in process `syz.1.27480'. [ 1402.799348][T30535] netlink: 36 bytes leftover after parsing attributes in process `syz.0.27490'. [ 1402.818235][T30535] netlink: 6 bytes leftover after parsing attributes in process `syz.0.27490'. [ 1403.386614][T30562] validate_nla: 4 callbacks suppressed [ 1403.386631][T30562] netlink: 'syz.0.27499': attribute type 13 has an invalid length. [ 1403.402248][T30562] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.27499'. [ 1405.305107][T30583] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1405.328341][T30583] syzkaller1: linktype set to 773 [ 1407.197619][T30654] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1407.223496][T30654] syzkaller1: linktype set to 773 [ 1407.857577][T30678] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1407.863654][T30678] syzkaller1: linktype set to 773 [ 1408.803421][T30726] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27581'. [ 1408.822854][T30726] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27581'. [ 1408.847803][T30726] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27581'. [ 1408.864676][T30726] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27581'. [ 1410.519082][T30789] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.27612'. [ 1411.067565][T30813] netlink: 'syz.2.27624': attribute type 11 has an invalid length. [ 1411.076931][T30813] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.27624'. [ 1411.467589][T30823] netlink: 'syz.1.27636': attribute type 11 has an invalid length. [ 1411.487361][T30823] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.27636'. [ 1411.520374][T30823] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1411.537078][T30823] CPU: 1 PID: 30823 Comm: syz.1.27636 Not tainted syzkaller #0 [ 1411.544683][T30823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1411.554775][T30823] Call Trace: [ 1411.558077][T30823] [ 1411.561037][T30823] dump_stack_lvl+0x18c/0x250 [ 1411.565766][T30823] ? show_regs_print_info+0x20/0x20 [ 1411.571012][T30823] ? load_image+0x420/0x420 [ 1411.575584][T30823] sysfs_warn_dup+0x8e/0xa0 [ 1411.580220][T30823] sysfs_do_create_link_sd+0xc0/0x110 [ 1411.585645][T30823] device_add_class_symlinks+0x1cf/0x240 [ 1411.591327][T30823] device_add+0x4f9/0xc40 [ 1411.595706][T30823] wiphy_register+0x1d99/0x2ac0 [ 1411.600620][T30823] ? cfg80211_event_work+0x40/0x40 [ 1411.605786][T30823] ? minstrel_ht_alloc+0x88a/0x990 [ 1411.610952][T30823] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1411.617072][T30823] ieee80211_register_hw+0x2dd8/0x3b30 [ 1411.622594][T30823] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1411.628200][T30823] ? ieee80211_tasklet_handler+0x20/0x20 [ 1411.633975][T30823] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1411.639929][T30823] ? __debug_object_init+0xec/0x450 [ 1411.645171][T30823] ? __asan_memset+0x22/0x40 [ 1411.649835][T30823] ? __hrtimer_init+0x189/0x270 [ 1411.654727][T30823] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1411.660503][T30823] ? mac80211_hwsim_free+0x220/0x220 [ 1411.665838][T30823] ? rcu_is_watching+0x15/0xb0 [ 1411.670662][T30823] ? kstrndup+0xbd/0x140 [ 1411.674959][T30823] hwsim_new_radio_nl+0xdad/0x1a70 [ 1411.680115][T30823] ? __nla_validate+0x50/0x50 [ 1411.684862][T30823] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1411.691255][T30823] ? __nla_parse+0x40/0x50 [ 1411.695722][T30823] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1411.702103][T30823] genl_family_rcv_msg_doit+0x21a/0x310 [ 1411.707709][T30823] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1411.713657][T30823] ? bpf_lsm_capable+0x9/0x10 [ 1411.718392][T30823] ? security_capable+0x89/0xb0 [ 1411.723295][T30823] genl_rcv_msg+0x611/0x7a0 [ 1411.727849][T30823] ? genl_bind+0x360/0x360 [ 1411.732329][T30823] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1411.738709][T30823] netlink_rcv_skb+0x235/0x4c0 [ 1411.743522][T30823] ? genl_bind+0x360/0x360 [ 1411.747991][T30823] ? netlink_ack+0x1160/0x1160 [ 1411.752798][T30823] ? __lock_acquire+0x7d80/0x7d80 [ 1411.757858][T30823] ? net_generic+0x1e/0x240 [ 1411.762403][T30823] ? down_read+0x1ac/0x2e0 [ 1411.766896][T30823] genl_rcv+0x28/0x40 [ 1411.770913][T30823] netlink_unicast+0x7b1/0x930 [ 1411.775732][T30823] netlink_sendmsg+0x8d0/0xbf0 [ 1411.780540][T30823] ? netlink_getsockopt+0x590/0x590 [ 1411.785780][T30823] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1411.791361][T30823] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1411.796687][T30823] ? security_socket_sendmsg+0x80/0xa0 [ 1411.802183][T30823] ? netlink_getsockopt+0x590/0x590 [ 1411.807412][T30823] ____sys_sendmsg+0x61b/0x980 [ 1411.812218][T30823] ? __asan_memset+0x22/0x40 [ 1411.816849][T30823] ? __sys_sendmsg_sock+0x30/0x30 [ 1411.821912][T30823] ? __import_iovec+0x5f2/0x850 [ 1411.826806][T30823] ? import_iovec+0x73/0xa0 [ 1411.831350][T30823] ___sys_sendmsg+0x2a6/0x360 [ 1411.836065][T30823] ? __sys_sendmsg+0x2b0/0x2b0 [ 1411.840916][T30823] __se_sys_sendmsg+0x1d0/0x2c0 [ 1411.845808][T30823] ? __x64_sys_sendmsg+0x80/0x80 [ 1411.850800][T30823] ? lockdep_hardirqs_on+0x98/0x150 [ 1411.856052][T30823] do_syscall_64+0x55/0xb0 [ 1411.860510][T30823] ? clear_bhb_loop+0x40/0x90 [ 1411.865248][T30823] ? clear_bhb_loop+0x40/0x90 [ 1411.869978][T30823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1411.875920][T30823] RIP: 0033:0x7f451079e0d9 [ 1411.880373][T30823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1411.900018][T30823] RSP: 002b:00007f451164b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1411.908471][T30823] RAX: ffffffffffffffda RBX: 00007f4510a25fa0 RCX: 00007f451079e0d9 [ 1411.916492][T30823] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1411.924613][T30823] RBP: 00007f4510835024 R08: 0000000000000000 R09: 0000000000000000 [ 1411.932613][T30823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1411.940617][T30823] R13: 00007f4510a26038 R14: 00007f4510a25fa0 R15: 00007ffdcd2d1ba8 [ 1411.948644][T30823] [ 1412.355428][T30841] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.27634'. [ 1412.730183][T30856] netlink: 'syz.0.27642': attribute type 11 has an invalid length. [ 1412.749448][T30856] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.27642'. [ 1412.794881][T30856] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1413.590747][T30884] netlink: 'syz.3.27658': attribute type 11 has an invalid length. [ 1413.617097][T30884] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.27658'. [ 1413.640594][T30884] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1413.651540][T30884] CPU: 1 PID: 30884 Comm: syz.3.27658 Not tainted syzkaller #0 [ 1413.659137][T30884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1413.669221][T30884] Call Trace: [ 1413.672531][T30884] [ 1413.675499][T30884] dump_stack_lvl+0x18c/0x250 [ 1413.680230][T30884] ? show_regs_print_info+0x20/0x20 [ 1413.685474][T30884] ? load_image+0x420/0x420 [ 1413.690056][T30884] sysfs_warn_dup+0x8e/0xa0 [ 1413.694690][T30884] sysfs_do_create_link_sd+0xc0/0x110 [ 1413.700107][T30884] device_add_class_symlinks+0x1cf/0x240 [ 1413.705801][T30884] device_add+0x4f9/0xc40 [ 1413.710180][T30884] wiphy_register+0x1d99/0x2ac0 [ 1413.715092][T30884] ? cfg80211_event_work+0x40/0x40 [ 1413.720239][T30884] ? minstrel_ht_alloc+0x88a/0x990 [ 1413.725415][T30884] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1413.731562][T30884] ieee80211_register_hw+0x2dd8/0x3b30 [ 1413.737102][T30884] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1413.742715][T30884] ? ieee80211_tasklet_handler+0x20/0x20 [ 1413.748392][T30884] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1413.754374][T30884] ? __debug_object_init+0xec/0x450 [ 1413.759602][T30884] ? __asan_memset+0x22/0x40 [ 1413.764217][T30884] ? __hrtimer_init+0x189/0x270 [ 1413.769105][T30884] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1413.774862][T30884] ? mac80211_hwsim_free+0x220/0x220 [ 1413.780161][T30884] ? rcu_is_watching+0x15/0xb0 [ 1413.784943][T30884] ? kstrndup+0xbd/0x140 [ 1413.789211][T30884] hwsim_new_radio_nl+0xdad/0x1a70 [ 1413.794360][T30884] ? __nla_validate+0x50/0x50 [ 1413.799102][T30884] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1413.805464][T30884] ? __nla_parse+0x40/0x50 [ 1413.809907][T30884] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1413.816263][T30884] genl_family_rcv_msg_doit+0x21a/0x310 [ 1413.821835][T30884] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1413.827767][T30884] ? bpf_lsm_capable+0x9/0x10 [ 1413.832472][T30884] ? security_capable+0x89/0xb0 [ 1413.837360][T30884] genl_rcv_msg+0x611/0x7a0 [ 1413.841894][T30884] ? genl_bind+0x360/0x360 [ 1413.846330][T30884] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1413.852687][T30884] netlink_rcv_skb+0x235/0x4c0 [ 1413.857477][T30884] ? genl_bind+0x360/0x360 [ 1413.861931][T30884] ? netlink_ack+0x1160/0x1160 [ 1413.866723][T30884] ? __lock_acquire+0x7d80/0x7d80 [ 1413.871770][T30884] ? net_generic+0x1e/0x240 [ 1413.876315][T30884] ? down_read+0x1ac/0x2e0 [ 1413.880777][T30884] genl_rcv+0x28/0x40 [ 1413.884778][T30884] netlink_unicast+0x7b1/0x930 [ 1413.889578][T30884] netlink_sendmsg+0x8d0/0xbf0 [ 1413.894378][T30884] ? netlink_getsockopt+0x590/0x590 [ 1413.899601][T30884] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1413.905174][T30884] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1413.910485][T30884] ? security_socket_sendmsg+0x80/0xa0 [ 1413.915980][T30884] ? netlink_getsockopt+0x590/0x590 [ 1413.921207][T30884] ____sys_sendmsg+0x61b/0x980 [ 1413.926012][T30884] ? __asan_memset+0x22/0x40 [ 1413.930624][T30884] ? __sys_sendmsg_sock+0x30/0x30 [ 1413.935683][T30884] ? __import_iovec+0x5f2/0x850 [ 1413.940585][T30884] ? import_iovec+0x73/0xa0 [ 1413.945111][T30884] ___sys_sendmsg+0x2a6/0x360 [ 1413.949810][T30884] ? __sys_sendmsg+0x2b0/0x2b0 [ 1413.954646][T30884] __se_sys_sendmsg+0x1d0/0x2c0 [ 1413.959548][T30884] ? __x64_sys_sendmsg+0x80/0x80 [ 1413.964522][T30884] ? lockdep_hardirqs_on+0x98/0x150 [ 1413.969744][T30884] do_syscall_64+0x55/0xb0 [ 1413.974184][T30884] ? clear_bhb_loop+0x40/0x90 [ 1413.978897][T30884] ? clear_bhb_loop+0x40/0x90 [ 1413.983614][T30884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1413.989525][T30884] RIP: 0033:0x7f039539e0d9 [ 1413.993962][T30884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1414.013622][T30884] RSP: 002b:00007f039626d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1414.022067][T30884] RAX: ffffffffffffffda RBX: 00007f0395625fa0 RCX: 00007f039539e0d9 [ 1414.030054][T30884] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1414.038039][T30884] RBP: 00007f0395435024 R08: 0000000000000000 R09: 0000000000000000 [ 1414.046021][T30884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1414.054009][T30884] R13: 00007f0395626038 R14: 00007f0395625fa0 R15: 00007ffe76dd2578 [ 1414.062015][T30884] [ 1419.250344][T31079] netlink: 60 bytes leftover after parsing attributes in process `syz.3.27745'. [ 1419.277276][T31079] netlink: 60 bytes leftover after parsing attributes in process `syz.3.27745'. [ 1419.286757][T31071] netlink: 60 bytes leftover after parsing attributes in process `syz.3.27745'. [ 1419.340199][T31076] netlink: 60 bytes leftover after parsing attributes in process `syz.3.27745'. [ 1419.832758][T31099] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.27765'. [ 1420.831479][T31156] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.27792'. [ 1420.965344][T31165] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27784'. [ 1421.001986][T31165] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27784'. [ 1421.011699][T31159] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27784'. [ 1421.021110][T31162] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27784'. [ 1423.192520][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.200687][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.556881][T31328] netlink: 'syz.3.27862': attribute type 29 has an invalid length. [ 1425.566228][T31328] netlink: 'syz.3.27862': attribute type 29 has an invalid length. [ 1425.575919][T31328] netlink: 'syz.3.27862': attribute type 29 has an invalid length. [ 1425.586841][T31328] netlink: 'syz.3.27862': attribute type 29 has an invalid length. [ 1426.020101][T31353] netlink: 'syz.2.27875': attribute type 29 has an invalid length. [ 1426.028668][T31353] netlink: 'syz.2.27875': attribute type 29 has an invalid length. [ 1426.038809][T31353] netlink: 'syz.2.27875': attribute type 29 has an invalid length. [ 1426.049130][T31353] netlink: 'syz.2.27875': attribute type 29 has an invalid length. [ 1428.015914][T31421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1428.297102][T31437] netlink: 'syz.1.27913': attribute type 29 has an invalid length. [ 1428.305544][T31437] netlink: 'syz.1.27913': attribute type 29 has an invalid length. [ 1429.406885][T31493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.075758][T31518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.779051][T31563] validate_nla: 6 callbacks suppressed [ 1430.779066][T31563] netlink: 'syz.0.27976': attribute type 10 has an invalid length. [ 1430.811374][T31563] __nla_validate_parse: 3 callbacks suppressed [ 1430.811388][T31563] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.27976'. [ 1430.944284][T31571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27980'. [ 1431.102019][T31580] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1431.667182][T31606] netlink: 60 bytes leftover after parsing attributes in process `syz.3.27996'. [ 1431.687189][T31606] netlink: 60 bytes leftover after parsing attributes in process `syz.3.27996'. [ 1431.706697][T31606] netlink: 60 bytes leftover after parsing attributes in process `syz.3.27996'. [ 1431.718293][T31606] netlink: 60 bytes leftover after parsing attributes in process `syz.3.27996'. [ 1431.785937][T31615] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27997'. [ 1431.795288][T31615] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27997'. [ 1431.806291][T31607] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27997'. [ 1431.828253][T31610] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27997'. [ 1432.086123][T31629] netlink: 'syz.3.28015': attribute type 10 has an invalid length. [ 1432.640972][T31658] netlink: 'syz.1.28021': attribute type 10 has an invalid length. [ 1433.181619][T31679] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1433.605507][T31699] netlink: 'syz.1.28040': attribute type 3 has an invalid length. [ 1433.810209][T31710] netlink: 'syz.0.28047': attribute type 21 has an invalid length. [ 1433.828135][T31710] netlink: 'syz.0.28047': attribute type 1 has an invalid length. [ 1433.846196][T31710] netlink: 'syz.0.28047': attribute type 2 has an invalid length. [ 1434.823040][T31746] netlink: 'syz.2.28065': attribute type 3 has an invalid length. [ 1435.148629][T31764] netlink: 'syz.1.28074': attribute type 21 has an invalid length. [ 1435.156710][T31764] netlink: 'syz.1.28074': attribute type 1 has an invalid length. [ 1435.539091][T31775] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1435.613707][T31781] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 1436.176135][T31805] validate_nla: 5 callbacks suppressed [ 1436.176172][T31805] netlink: 'syz.3.28091': attribute type 3 has an invalid length. [ 1436.207249][T31805] __nla_validate_parse: 21 callbacks suppressed [ 1436.207296][T31805] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.28091'. [ 1436.279496][T31811] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 1436.285366][T31811] pim6reg0: ignored: set checksum disabled [ 1436.536802][T31826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28103'. [ 1436.590084][T31830] netlink: 135056 bytes leftover after parsing attributes in process `syz.0.28105'. [ 1436.607383][T31830] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 1437.038271][T31855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28118'. [ 1437.488679][T31879] netlink: 60 bytes leftover after parsing attributes in process `syz.0.28130'. [ 1437.499565][T31879] netlink: 60 bytes leftover after parsing attributes in process `syz.0.28130'. [ 1437.518117][T31879] netlink: 60 bytes leftover after parsing attributes in process `syz.0.28130'. [ 1437.533164][T31879] netlink: 60 bytes leftover after parsing attributes in process `syz.0.28130'. [ 1438.557045][T31924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28151'. [ 1438.760491][T31926] netlink: 148 bytes leftover after parsing attributes in process `syz.1.28152'. [ 1446.238930][T32042] __nla_validate_parse: 22 callbacks suppressed [ 1446.238946][T32042] netlink: 60 bytes leftover after parsing attributes in process `syz.2.28209'. [ 1446.276758][T32042] netlink: 60 bytes leftover after parsing attributes in process `syz.2.28209'. [ 1446.290122][T32042] netlink: 60 bytes leftover after parsing attributes in process `syz.2.28209'. [ 1446.301643][T32042] netlink: 60 bytes leftover after parsing attributes in process `syz.2.28209'. [ 1446.671653][T32064] netlink: 176 bytes leftover after parsing attributes in process `syz.0.28221'. [ 1447.344348][T32103] tap1: tun_chr_ioctl cmd 2147767511 [ 1447.350083][T32101] netlink: 'syz.0.28240': attribute type 27 has an invalid length. [ 1447.711601][T32124] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.28250'. [ 1447.806670][T32130] netlink: 60 bytes leftover after parsing attributes in process `syz.3.28252'. [ 1447.816076][T32130] netlink: 60 bytes leftover after parsing attributes in process `syz.3.28252'. [ 1447.828784][T32130] netlink: 60 bytes leftover after parsing attributes in process `syz.3.28252'. [ 1447.855630][T32130] netlink: 60 bytes leftover after parsing attributes in process `syz.3.28252'. [ 1449.021442][T32179] netlink: 'syz.3.28277': attribute type 27 has an invalid length. [ 1449.343402][T32199] tap1: tun_chr_ioctl cmd 2147767511 [ 1449.483547][T32207] netlink: 'syz.2.28290': attribute type 27 has an invalid length. [ 1449.918348][T32229] tap2: tun_chr_ioctl cmd 2147767511 [ 1450.064457][T32234] netlink: 'syz.1.28301': attribute type 27 has an invalid length. [ 1450.535057][T32255] tap1: tun_chr_ioctl cmd 2147767511 [ 1450.813282][T32264] netlink: 'syz.0.28319': attribute type 1 has an invalid length. [ 1451.112307][T32276] netlink: 'syz.3.28332': attribute type 1 has an invalid length. [ 1451.514579][T32293] __nla_validate_parse: 13 callbacks suppressed [ 1451.514596][T32293] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.28331'. [ 1451.602756][T32293] netlink: 'syz.2.28331': attribute type 2 has an invalid length. [ 1452.135578][T32302] netlink: 'syz.2.28336': attribute type 1 has an invalid length. [ 1452.152216][T32302] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.28336'. [ 1452.344716][T32316] netlink: 132 bytes leftover after parsing attributes in process `syz.3.28342'. [ 1452.412769][T32318] wlan0: mtu greater than device maximum [ 1452.674713][T32332] netlink: 'syz.1.28349': attribute type 1 has an invalid length. [ 1452.685767][T32332] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.28349'. [ 1452.816016][T32337] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.28353'. [ 1452.867283][T32342] wlan0: mtu greater than device maximum [ 1452.878252][T32340] netlink: 132 bytes leftover after parsing attributes in process `syz.2.28355'. [ 1453.371736][T32371] netlink: 132 bytes leftover after parsing attributes in process `syz.1.28371'. [ 1453.576574][T32383] netlink: 132 bytes leftover after parsing attributes in process `syz.0.28384'. [ 1454.751187][T32447] IPv6: NLM_F_CREATE should be specified when creating new route [ 1455.338253][T32482] pim6reg1: entered promiscuous mode [ 1455.356983][T32482] pim6reg1: entered allmulticast mode [ 1455.808059][T32504] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.28437'. [ 1455.977437][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1456.032100][T32514] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.28439'. [ 1456.129583][T32517] netlink: 'syz.3.28444': attribute type 10 has an invalid length. [ 1456.650723][T32545] __nla_validate_parse: 3 callbacks suppressed [ 1456.650741][T32545] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.28463'. [ 1456.670558][T32545] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.28463'. [ 1456.710226][T32551] netlink: 'syz.1.28457': attribute type 10 has an invalid length. [ 1456.727008][T32551] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.28457'. [ 1457.092128][T32571] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.28467'. [ 1457.321532][T32578] netlink: 'syz.2.28470': attribute type 10 has an invalid length. [ 1457.335333][T32578] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.28470'. [ 1457.636240][T32589] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.28472'. [ 1457.667050][T32589] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.28472'. [ 1460.625897][ T9796] tipc: Subscription rejected, illegal request [ 1460.887217][T32735] netlink: 15478 bytes leftover after parsing attributes in process `syz.1.28537'. [ 1462.049676][T32764] netlink: 15478 bytes leftover after parsing attributes in process `syz.2.28548'. [ 1463.121534][ T327] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.28563'. [ 1464.756732][ T386] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.28589'. [ 1465.469254][ T403] netlink: 'syz.1.28605': attribute type 4 has an invalid length. [ 1465.481925][ T403] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.28605'. [ 1465.984785][ T416] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.28602'. [ 1466.494947][ T438] netlink: 'syz.2.28613': attribute type 4 has an invalid length. [ 1466.504880][ T438] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.28613'. [ 1467.332082][ T465] netlink: 'syz.0.28627': attribute type 29 has an invalid length. [ 1467.340899][ T465] netlink: 'syz.0.28627': attribute type 29 has an invalid length. [ 1467.360260][ T465] netlink: 'syz.0.28627': attribute type 29 has an invalid length. [ 1467.397203][ T465] netlink: 'syz.0.28627': attribute type 29 has an invalid length. [ 1467.419016][ T465] netlink: 'syz.0.28627': attribute type 29 has an invalid length. [ 1467.471877][ T468] netlink: 'syz.3.28629': attribute type 4 has an invalid length. [ 1467.487508][ T468] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.28629'. [ 1467.874272][ T489] netlink: 'syz.0.28638': attribute type 3 has an invalid length. [ 1467.908072][ T489] netlink: 'syz.0.28638': attribute type 4 has an invalid length. [ 1467.936139][ T489] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.28638'. [ 1468.554449][ T522] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.28653'. [ 1468.723989][ T528] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.28664'. [ 1470.336877][ T597] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.28690'. [ 1472.514895][ T681] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.28730'. [ 1472.728853][ T686] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.28740'. [ 1473.103879][ T705] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1473.197444][ T707] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.28742'. [ 1473.266823][ T712] validate_nla: 33 callbacks suppressed [ 1473.266837][ T712] netlink: 'syz.1.28745': attribute type 10 has an invalid length. [ 1473.281514][ T712] netlink: 152 bytes leftover after parsing attributes in process `syz.1.28745'. [ 1474.175234][ T741] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1474.960336][ T773] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1475.144743][ T782] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.28776'. [ 1475.380252][ T790] netlink: 'syz.3.28780': attribute type 8 has an invalid length. [ 1475.388627][ T790] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.28780'. [ 1475.431099][ T792] netlink: 144 bytes leftover after parsing attributes in process `syz.1.28781'. [ 1477.582392][ T856] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.28811'. [ 1480.000071][ T869] netlink: 'syz.1.28823': attribute type 8 has an invalid length. [ 1480.008658][ T869] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.28823'. [ 1480.783683][ T920] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.28843'. [ 1480.817900][ T920] netlink: 6328 bytes leftover after parsing attributes in process `syz.1.28843'. [ 1482.701987][ T990] netlink: 'syz.2.28861': attribute type 2 has an invalid length. [ 1482.722486][ T990] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.28861'. [ 1484.411300][ T1063] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.28885'. [ 1484.628742][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.636577][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.840093][ T1083] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.28893'. [ 1484.857164][ T1083] netlink: 'syz.1.28893': attribute type 1 has an invalid length. [ 1485.035560][ T1093] netlink: 'syz.0.28898': attribute type 46 has an invalid length. [ 1485.044251][ T1093] netlink: 55 bytes leftover after parsing attributes in process `syz.0.28898'. [ 1485.537978][ T1113] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.28904'. [ 1485.669471][ T1119] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.28907'. [ 1486.202228][ T1143] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.28918'. [ 1486.585471][ T1161] netlink: 'syz.2.28929': attribute type 33 has an invalid length. [ 1486.608937][ T1161] netlink: 128 bytes leftover after parsing attributes in process `syz.2.28929'. [ 1487.345633][ T1174] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.28934'. [ 1487.388354][ T1174] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1487.396343][ T1174] CPU: 1 PID: 1174 Comm: syz.2.28934 Not tainted syzkaller #0 [ 1487.403855][ T1174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1487.413957][ T1174] Call Trace: [ 1487.417270][ T1174] [ 1487.420231][ T1174] dump_stack_lvl+0x18c/0x250 [ 1487.424955][ T1174] ? show_regs_print_info+0x20/0x20 [ 1487.430213][ T1174] ? load_image+0x420/0x420 [ 1487.434779][ T1174] sysfs_warn_dup+0x8e/0xa0 [ 1487.439326][ T1174] sysfs_do_create_link_sd+0xc0/0x110 [ 1487.444741][ T1174] device_add_class_symlinks+0x1cf/0x240 [ 1487.450425][ T1174] device_add+0x4f9/0xc40 [ 1487.454831][ T1174] wiphy_register+0x1d99/0x2ac0 [ 1487.459736][ T1174] ? cfg80211_event_work+0x40/0x40 [ 1487.464879][ T1174] ? minstrel_ht_alloc+0x88a/0x990 [ 1487.470015][ T1174] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1487.476135][ T1174] ieee80211_register_hw+0x2dd8/0x3b30 [ 1487.481628][ T1174] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1487.487221][ T1174] ? ieee80211_tasklet_handler+0x20/0x20 [ 1487.492866][ T1174] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1487.498802][ T1174] ? __debug_object_init+0xec/0x450 [ 1487.504036][ T1174] ? __asan_memset+0x22/0x40 [ 1487.508672][ T1174] ? __hrtimer_init+0x189/0x270 [ 1487.513552][ T1174] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1487.519318][ T1174] ? mac80211_hwsim_free+0x220/0x220 [ 1487.524619][ T1174] ? rcu_is_watching+0x15/0xb0 [ 1487.529400][ T1174] ? kstrndup+0xbd/0x140 [ 1487.533676][ T1174] hwsim_new_radio_nl+0xdad/0x1a70 [ 1487.538820][ T1174] ? __nla_validate+0x50/0x50 [ 1487.543543][ T1174] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1487.549911][ T1174] ? __nla_parse+0x40/0x50 [ 1487.554366][ T1174] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1487.560733][ T1174] genl_family_rcv_msg_doit+0x21a/0x310 [ 1487.566301][ T1174] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1487.572214][ T1174] ? bpf_lsm_capable+0x9/0x10 [ 1487.576913][ T1174] ? security_capable+0x89/0xb0 [ 1487.581799][ T1174] genl_rcv_msg+0x611/0x7a0 [ 1487.586336][ T1174] ? genl_bind+0x360/0x360 [ 1487.590777][ T1174] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1487.597140][ T1174] netlink_rcv_skb+0x235/0x4c0 [ 1487.601911][ T1174] ? genl_bind+0x360/0x360 [ 1487.606343][ T1174] ? netlink_ack+0x1160/0x1160 [ 1487.611140][ T1174] ? __lock_acquire+0x7d80/0x7d80 [ 1487.616189][ T1174] ? net_generic+0x1e/0x240 [ 1487.620732][ T1174] ? down_read+0x1ac/0x2e0 [ 1487.625185][ T1174] genl_rcv+0x28/0x40 [ 1487.629181][ T1174] netlink_unicast+0x7b1/0x930 [ 1487.633978][ T1174] netlink_sendmsg+0x8d0/0xbf0 [ 1487.638769][ T1174] ? netlink_getsockopt+0x590/0x590 [ 1487.643991][ T1174] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1487.649562][ T1174] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1487.654862][ T1174] ? security_socket_sendmsg+0x80/0xa0 [ 1487.660347][ T1174] ? netlink_getsockopt+0x590/0x590 [ 1487.665596][ T1174] ____sys_sendmsg+0x61b/0x980 [ 1487.670391][ T1174] ? __asan_memset+0x22/0x40 [ 1487.675013][ T1174] ? __sys_sendmsg_sock+0x30/0x30 [ 1487.680050][ T1174] ? __import_iovec+0x5f2/0x850 [ 1487.684931][ T1174] ? import_iovec+0x73/0xa0 [ 1487.689463][ T1174] ___sys_sendmsg+0x2a6/0x360 [ 1487.694173][ T1174] ? __sys_sendmsg+0x2b0/0x2b0 [ 1487.699005][ T1174] __se_sys_sendmsg+0x1d0/0x2c0 [ 1487.703882][ T1174] ? __x64_sys_sendmsg+0x80/0x80 [ 1487.708854][ T1174] ? lockdep_hardirqs_on+0x98/0x150 [ 1487.714083][ T1174] do_syscall_64+0x55/0xb0 [ 1487.718519][ T1174] ? clear_bhb_loop+0x40/0x90 [ 1487.723226][ T1174] ? clear_bhb_loop+0x40/0x90 [ 1487.727928][ T1174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1487.733868][ T1174] RIP: 0033:0x7f5670f9e0d9 [ 1487.738302][ T1174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.757931][ T1174] RSP: 002b:00007f5671e41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1487.766368][ T1174] RAX: ffffffffffffffda RBX: 00007f5671225fa0 RCX: 00007f5670f9e0d9 [ 1487.774384][ T1174] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1487.782372][ T1174] RBP: 00007f5671035024 R08: 0000000000000000 R09: 0000000000000000 [ 1487.790365][ T1174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1487.798353][ T1174] R13: 00007f5671226038 R14: 00007f5671225fa0 R15: 00007fffdfdad088 [ 1487.806348][ T1174] [ 1488.597835][ T1213] netlink: 'syz.1.28949': attribute type 46 has an invalid length. [ 1488.605826][ T1213] netlink: 55 bytes leftover after parsing attributes in process `syz.1.28949'. [ 1489.004039][ T1238] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.28960'. [ 1489.236465][ T1244] netlink: 'syz.3.28962': attribute type 46 has an invalid length. [ 1489.257118][ T1244] netlink: 55 bytes leftover after parsing attributes in process `syz.3.28962'. [ 1489.583891][ T1260] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.28970'. [ 1489.623728][ T1263] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.28969'. [ 1489.874177][ T1277] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.28975'. [ 1489.901561][ T1277] netlink: 'syz.2.28975': attribute type 1 has an invalid length. [ 1490.087945][ T1287] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.28986'. [ 1490.157035][ T1287] netlink: 'syz.0.28986': attribute type 1 has an invalid length. [ 1490.286128][ T1297] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.28982'. [ 1490.369325][ T1299] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.28984'. [ 1490.975928][ T1326] netlink: 'syz.3.28995': attribute type 33 has an invalid length. [ 1490.995562][ T1326] netlink: 128 bytes leftover after parsing attributes in process `syz.3.28995'. [ 1494.789706][ T1364] __nla_validate_parse: 1 callbacks suppressed [ 1494.789723][ T1364] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.29010'. [ 1495.453259][ T1396] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.29023'. [ 1495.832551][ T1409] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.29030'. [ 1501.821392][ T1512] netlink: 152 bytes leftover after parsing attributes in process `syz.2.29077'. [ 1503.181641][ T1534] netlink: 'syz.3.29086': attribute type 33 has an invalid length. [ 1503.204615][ T1534] netlink: 128 bytes leftover after parsing attributes in process `syz.3.29086'. [ 1506.530213][ T1577] netlink: 'syz.3.29108': attribute type 21 has an invalid length. [ 1506.539887][ T1577] netlink: 'syz.3.29108': attribute type 6 has an invalid length. [ 1506.548263][ T1577] netlink: 132 bytes leftover after parsing attributes in process `syz.3.29108'. [ 1509.719294][ T1619] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.29129'. [ 1509.927474][ T1628] netlink: 'syz.1.29133': attribute type 29 has an invalid length. [ 1509.945407][ T1628] netlink: 'syz.1.29133': attribute type 29 has an invalid length. [ 1509.959037][ T1628] netlink: 'syz.1.29133': attribute type 29 has an invalid length. [ 1509.970070][ T1628] netlink: 'syz.1.29133': attribute type 29 has an invalid length. [ 1509.980599][ T1628] netlink: 'syz.1.29133': attribute type 29 has an invalid length. [ 1510.400941][ T1652] netlink: 'syz.1.29144': attribute type 1 has an invalid length. [ 1510.419420][ T1652] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.29144'. [ 1510.572945][ T1658] netlink: 6 bytes leftover after parsing attributes in process `syz.1.29147'. [ 1510.598569][ T1658] openvswitch: netlink: Flow actions attr not present in new flow. [ 1510.824397][ T1672] netlink: 6 bytes leftover after parsing attributes in process `syz.0.29161'. [ 1510.849073][ T1672] openvswitch: netlink: Flow actions attr not present in new flow. [ 1511.489107][ T1707] netlink: 'syz.2.29170': attribute type 1 has an invalid length. [ 1511.506995][ T1707] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.29170'. [ 1511.859966][ T1729] netlink: 'syz.2.29181': attribute type 3 has an invalid length. [ 1511.877076][ T1729] netlink: 'syz.2.29181': attribute type 6 has an invalid length. [ 1511.895153][ T1729] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.29181'. [ 1512.850120][ T1785] netlink: 'syz.0.29210': attribute type 25 has an invalid length. [ 1513.217945][ T1809] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.29222'. [ 1513.981524][ T1841] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.29236'. [ 1514.006525][ T1841] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1515.061222][ T1866] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.29248'. [ 1515.670756][ T1895] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.29261'. [ 1515.974250][ T1912] netlink: 64 bytes leftover after parsing attributes in process `syz.3.29270'. [ 1516.291071][ T1926] netlink: 64 bytes leftover after parsing attributes in process `syz.0.29284'. [ 1516.307840][ T1924] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.29275'. [ 1517.084347][ T1954] netlink: 64 bytes leftover after parsing attributes in process `syz.1.29289'. [ 1517.551215][ T1978] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.29302'. [ 1518.333682][ T2005] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.29314'. [ 1518.363567][ T2005] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1520.038699][ T2040] netlink: set zone limit has 8 unknown bytes [ 1520.166364][ T2042] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.29333'. [ 1520.236694][ T2046] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.29335'. [ 1520.837644][ T2068] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.29340'. [ 1520.867146][ T2068] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1520.950083][ T2070] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.29343'. [ 1521.484535][ T2096] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.29359'. [ 1524.176476][ T2143] pimreg1: tun_chr_ioctl cmd 2147767517 [ 1524.790574][ T2161] validate_nla: 1 callbacks suppressed [ 1524.790591][ T2161] netlink: 'syz.0.29387': attribute type 21 has an invalid length. [ 1524.805990][ T2161] netlink: 'syz.0.29387': attribute type 1 has an invalid length. [ 1524.815029][ T2161] netlink: 16090 bytes leftover after parsing attributes in process `syz.0.29387'. [ 1525.148087][ T2167] netlink: 'syz.1.29390': attribute type 9 has an invalid length. [ 1525.170421][ T2167] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.29390'. [ 1526.536388][ T2188] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.29397'. [ 1526.674955][ T2200] netlink: 'syz.1.29403': attribute type 9 has an invalid length. [ 1526.683506][ T2200] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.29403'. [ 1526.739432][ T2202] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.29404'. [ 1526.767136][ T2202] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 1526.802815][ T2206] netlink: 'syz.1.29403': attribute type 9 has an invalid length. [ 1526.815691][ T2206] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.29403'. [ 1527.237988][ T2224] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.29413'. [ 1527.659717][ T2241] netlink: 'syz.0.29419': attribute type 9 has an invalid length. [ 1527.677346][ T2241] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.29419'. [ 1527.677736][ T2240] netlink: 'syz.3.29420': attribute type 2 has an invalid length. [ 1527.839482][ T2242] netlink: 'syz.0.29419': attribute type 9 has an invalid length. [ 1527.858276][ T2242] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.29419'. [ 1528.011775][ T2248] netlink: 'syz.3.29424': attribute type 9 has an invalid length. [ 1528.019863][ T2248] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.29424'. [ 1528.072685][ T2250] pimreg1: tun_chr_ioctl cmd 2147767517 [ 1528.148184][ T2253] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.29425'. [ 1528.441226][ T2267] netlink: 'syz.1.29433': attribute type 29 has an invalid length. [ 1529.973646][ T2308] validate_nla: 9 callbacks suppressed [ 1529.973665][ T2308] netlink: 'syz.3.29449': attribute type 9 has an invalid length. [ 1530.089605][ T2309] netlink: 'syz.3.29449': attribute type 9 has an invalid length. [ 1531.476014][ T2341] netlink: 'syz.2.29462': attribute type 9 has an invalid length. [ 1531.485613][ T2341] __nla_validate_parse: 2 callbacks suppressed [ 1531.485626][ T2341] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.29462'. [ 1531.605746][ T2342] netlink: 'syz.2.29462': attribute type 9 has an invalid length. [ 1531.642862][ T2342] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.29462'. [ 1532.729252][ T2385] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.29481'. [ 1533.181472][ T2401] netlink: 'syz.1.29489': attribute type 2 has an invalid length. [ 1533.189700][ T2401] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.29489'. [ 1535.959249][ T2403] netlink: 'syz.2.29491': attribute type 19 has an invalid length. [ 1535.975142][ T2403] netlink: 156 bytes leftover after parsing attributes in process `syz.2.29491'. [ 1536.040892][ T2405] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.29490'. [ 1537.350823][ T2480] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.29520'. [ 1537.811262][ T2514] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.29533'. [ 1538.378476][ T2548] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.29547'. [ 1539.036182][ T2594] netlink: 'syz.0.29564': attribute type 19 has an invalid length. [ 1539.046053][ T2594] netlink: 156 bytes leftover after parsing attributes in process `syz.0.29564'. [ 1539.608450][ T2625] netlink: 'syz.1.29578': attribute type 19 has an invalid length. [ 1539.616475][ T2625] netlink: 156 bytes leftover after parsing attributes in process `syz.1.29578'. [ 1539.637318][ T2627] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.29579'. [ 1543.374975][ T2675] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.29593'. [ 1543.914977][ T2699] netlink: 176 bytes leftover after parsing attributes in process `syz.0.29608'. [ 1544.253120][ T2718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29615'. [ 1544.767917][ T2746] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.29626'. [ 1545.342542][ T2775] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.29638'. [ 1545.766368][ T2805] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.29651'. [ 1546.064274][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.073070][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.197152][ T2840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29659'. [ 1546.656818][ T2863] netlink: 'syz.3.29669': attribute type 39 has an invalid length. [ 1548.392935][T28230] Bluetooth: hci3: unexpected event 0x30 length: 151 > 3 [ 1551.386511][ T3004] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.29734'. [ 1551.639143][ T3010] netlink: 'syz.2.29745': attribute type 11 has an invalid length. [ 1551.647958][ T3010] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.29745'. [ 1551.669378][ T3010] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1551.679705][ T3010] CPU: 1 PID: 3010 Comm: syz.2.29745 Not tainted syzkaller #0 [ 1551.687244][ T3010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1551.697348][ T3010] Call Trace: [ 1551.700671][ T3010] [ 1551.703653][ T3010] dump_stack_lvl+0x18c/0x250 [ 1551.708403][ T3010] ? show_regs_print_info+0x20/0x20 [ 1551.713660][ T3010] ? load_image+0x420/0x420 [ 1551.718250][ T3010] sysfs_warn_dup+0x8e/0xa0 [ 1551.722814][ T3010] sysfs_do_create_link_sd+0xc0/0x110 [ 1551.728245][ T3010] device_add_class_symlinks+0x1cf/0x240 [ 1551.733952][ T3010] device_add+0x4f9/0xc40 [ 1551.738344][ T3010] wiphy_register+0x1d99/0x2ac0 [ 1551.743314][ T3010] ? cfg80211_event_work+0x40/0x40 [ 1551.748480][ T3010] ? minstrel_ht_alloc+0x88a/0x990 [ 1551.753673][ T3010] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1551.759814][ T3010] ieee80211_register_hw+0x2dd8/0x3b30 [ 1551.765338][ T3010] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1551.770962][ T3010] ? ieee80211_tasklet_handler+0x20/0x20 [ 1551.776625][ T3010] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1551.782564][ T3010] ? __debug_object_init+0xec/0x450 [ 1551.787804][ T3010] ? __asan_memset+0x22/0x40 [ 1551.792431][ T3010] ? __hrtimer_init+0x189/0x270 [ 1551.797318][ T3010] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1551.803089][ T3010] ? mac80211_hwsim_free+0x220/0x220 [ 1551.808405][ T3010] ? rcu_is_watching+0x15/0xb0 [ 1551.813217][ T3010] ? kstrndup+0xbd/0x140 [ 1551.817509][ T3010] hwsim_new_radio_nl+0xdad/0x1a70 [ 1551.822654][ T3010] ? __nla_validate+0x50/0x50 [ 1551.827381][ T3010] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1551.833761][ T3010] ? __nla_parse+0x40/0x50 [ 1551.838216][ T3010] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1551.844602][ T3010] genl_family_rcv_msg_doit+0x21a/0x310 [ 1551.850212][ T3010] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1551.856145][ T3010] ? bpf_lsm_capable+0x9/0x10 [ 1551.860863][ T3010] ? security_capable+0x89/0xb0 [ 1551.865770][ T3010] genl_rcv_msg+0x611/0x7a0 [ 1551.870328][ T3010] ? genl_bind+0x360/0x360 [ 1551.874773][ T3010] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1551.881223][ T3010] netlink_rcv_skb+0x235/0x4c0 [ 1551.886714][ T3010] ? genl_bind+0x360/0x360 [ 1551.891184][ T3010] ? netlink_ack+0x1160/0x1160 [ 1551.896002][ T3010] ? __lock_acquire+0x7d80/0x7d80 [ 1551.901068][ T3010] ? net_generic+0x1e/0x240 [ 1551.905616][ T3010] ? down_read+0x1ac/0x2e0 [ 1551.910080][ T3010] genl_rcv+0x28/0x40 [ 1551.914093][ T3010] netlink_unicast+0x7b1/0x930 [ 1551.918912][ T3010] netlink_sendmsg+0x8d0/0xbf0 [ 1551.923722][ T3010] ? netlink_getsockopt+0x590/0x590 [ 1551.928957][ T3010] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1551.934531][ T3010] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1551.939846][ T3010] ? security_socket_sendmsg+0x80/0xa0 [ 1551.945334][ T3010] ? netlink_getsockopt+0x590/0x590 [ 1551.950576][ T3010] ____sys_sendmsg+0x61b/0x980 [ 1551.955385][ T3010] ? __asan_memset+0x22/0x40 [ 1551.960007][ T3010] ? __sys_sendmsg_sock+0x30/0x30 [ 1551.965057][ T3010] ? __import_iovec+0x5f2/0x850 [ 1551.969953][ T3010] ? import_iovec+0x73/0xa0 [ 1551.974492][ T3010] ___sys_sendmsg+0x2a6/0x360 [ 1551.979231][ T3010] ? __sys_sendmsg+0x2b0/0x2b0 [ 1551.984073][ T3010] __se_sys_sendmsg+0x1d0/0x2c0 [ 1551.988960][ T3010] ? perf_trace_preemptirq_template+0x269/0x330 [ 1551.995244][ T3010] ? __x64_sys_sendmsg+0x80/0x80 [ 1552.000229][ T3010] ? lockdep_hardirqs_on+0x98/0x150 [ 1552.005469][ T3010] do_syscall_64+0x55/0xb0 [ 1552.009912][ T3010] ? clear_bhb_loop+0x40/0x90 [ 1552.014618][ T3010] ? clear_bhb_loop+0x40/0x90 [ 1552.019341][ T3010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1552.025283][ T3010] RIP: 0033:0x7f5670f9e0d9 [ 1552.029729][ T3010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1552.049456][ T3010] RSP: 002b:00007f5671e41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1552.057910][ T3010] RAX: ffffffffffffffda RBX: 00007f5671225fa0 RCX: 00007f5670f9e0d9 [ 1552.065914][ T3010] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1552.073918][ T3010] RBP: 00007f5671035024 R08: 0000000000000000 R09: 0000000000000000 [ 1552.081928][ T3010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1552.089929][ T3010] R13: 00007f5671226038 R14: 00007f5671225fa0 R15: 00007fffdfdad088 [ 1552.097951][ T3010] [ 1552.981460][ T3042] netlink: 'syz.0.29750': attribute type 11 has an invalid length. [ 1552.998352][ T3042] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.29750'. [ 1553.064144][ T3042] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1553.073726][ T3042] CPU: 0 PID: 3042 Comm: syz.0.29750 Not tainted syzkaller #0 [ 1553.081296][ T3042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1553.091388][ T3042] Call Trace: [ 1553.094707][ T3042] [ 1553.097681][ T3042] dump_stack_lvl+0x18c/0x250 [ 1553.102420][ T3042] ? show_regs_print_info+0x20/0x20 [ 1553.107683][ T3042] ? load_image+0x420/0x420 [ 1553.112270][ T3042] sysfs_warn_dup+0x8e/0xa0 [ 1553.116824][ T3042] sysfs_do_create_link_sd+0xc0/0x110 [ 1553.122255][ T3042] device_add_class_symlinks+0x1cf/0x240 [ 1553.127952][ T3042] device_add+0x4f9/0xc40 [ 1553.132345][ T3042] wiphy_register+0x1d99/0x2ac0 [ 1553.137285][ T3042] ? cfg80211_event_work+0x40/0x40 [ 1553.142455][ T3042] ? minstrel_ht_alloc+0x88a/0x990 [ 1553.147656][ T3042] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1553.153792][ T3042] ieee80211_register_hw+0x2dd8/0x3b30 [ 1553.159327][ T3042] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1553.164947][ T3042] ? ieee80211_tasklet_handler+0x20/0x20 [ 1553.166161][ T3046] netlink: 44 bytes leftover after parsing attributes in process `syz.1.29753'. [ 1553.170609][ T3042] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1553.170709][ T3042] ? __debug_object_init+0xec/0x450 [ 1553.190884][ T3042] ? __asan_memset+0x22/0x40 [ 1553.195522][ T3042] ? __hrtimer_init+0x189/0x270 [ 1553.200402][ T3042] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1553.206164][ T3042] ? mac80211_hwsim_free+0x220/0x220 [ 1553.211475][ T3042] ? rcu_is_watching+0x15/0xb0 [ 1553.216275][ T3042] ? kstrndup+0xbd/0x140 [ 1553.220566][ T3042] hwsim_new_radio_nl+0xdad/0x1a70 [ 1553.225717][ T3042] ? __nla_validate+0x50/0x50 [ 1553.230440][ T3042] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1553.236827][ T3042] ? __nla_parse+0x40/0x50 [ 1553.241277][ T3042] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1553.247634][ T3042] genl_family_rcv_msg_doit+0x21a/0x310 [ 1553.253213][ T3042] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1553.259141][ T3042] ? bpf_lsm_capable+0x9/0x10 [ 1553.263845][ T3042] ? security_capable+0x89/0xb0 [ 1553.268744][ T3042] genl_rcv_msg+0x611/0x7a0 [ 1553.273281][ T3042] ? genl_bind+0x360/0x360 [ 1553.277722][ T3042] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1553.284079][ T3042] ? ref_tracker_free+0x686/0x830 [ 1553.289126][ T3042] ? __kasan_kmalloc_large+0x8b/0xa0 [ 1553.294450][ T3042] netlink_rcv_skb+0x235/0x4c0 [ 1553.299262][ T3042] ? genl_bind+0x360/0x360 [ 1553.303795][ T3042] ? netlink_ack+0x1160/0x1160 [ 1553.308593][ T3042] ? __lock_acquire+0x7d80/0x7d80 [ 1553.313652][ T3042] ? down_read+0x1ac/0x2e0 [ 1553.318103][ T3042] genl_rcv+0x28/0x40 [ 1553.322110][ T3042] netlink_unicast+0x7b1/0x930 [ 1553.326925][ T3042] netlink_sendmsg+0x8d0/0xbf0 [ 1553.331721][ T3042] ? netlink_getsockopt+0x590/0x590 [ 1553.336953][ T3042] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1553.342527][ T3042] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1553.347861][ T3042] ? security_socket_sendmsg+0x80/0xa0 [ 1553.353342][ T3042] ? netlink_getsockopt+0x590/0x590 [ 1553.358571][ T3042] ____sys_sendmsg+0x61b/0x980 [ 1553.363369][ T3042] ? __asan_memset+0x22/0x40 [ 1553.368079][ T3042] ? __sys_sendmsg_sock+0x30/0x30 [ 1553.373125][ T3042] ? __import_iovec+0x5f2/0x850 [ 1553.378040][ T3042] ? import_iovec+0x73/0xa0 [ 1553.382571][ T3042] ___sys_sendmsg+0x2a6/0x360 [ 1553.387282][ T3042] ? __sys_sendmsg+0x2b0/0x2b0 [ 1553.392145][ T3042] __se_sys_sendmsg+0x1d0/0x2c0 [ 1553.397024][ T3042] ? perf_trace_preemptirq_template+0x269/0x330 [ 1553.403300][ T3042] ? __x64_sys_sendmsg+0x80/0x80 [ 1553.408283][ T3042] ? lockdep_hardirqs_on+0x98/0x150 [ 1553.413518][ T3042] do_syscall_64+0x55/0xb0 [ 1553.417990][ T3042] ? clear_bhb_loop+0x40/0x90 [ 1553.422695][ T3042] ? clear_bhb_loop+0x40/0x90 [ 1553.427412][ T3042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1553.433334][ T3042] RIP: 0033:0x7f984c59e0d9 [ 1553.437774][ T3042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1553.457404][ T3042] RSP: 002b:00007f984d4f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1553.465847][ T3042] RAX: ffffffffffffffda RBX: 00007f984c825fa0 RCX: 00007f984c59e0d9 [ 1553.473852][ T3042] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1553.481847][ T3042] RBP: 00007f984c635024 R08: 0000000000000000 R09: 0000000000000000 [ 1553.489841][ T3042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1553.497833][ T3042] R13: 00007f984c826038 R14: 00007f984c825fa0 R15: 00007ffdf79d29b8 [ 1553.505847][ T3042] [ 1553.705048][ T3051] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.29755'. [ 1554.063436][ T3067] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.29763'. [ 1554.131353][ T3069] netlink: 'syz.1.29764': attribute type 11 has an invalid length. [ 1554.146836][ T3069] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.29764'. [ 1554.161180][ T3069] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1554.169384][ T3069] CPU: 1 PID: 3069 Comm: syz.1.29764 Not tainted syzkaller #0 [ 1554.176922][ T3069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1554.187037][ T3069] Call Trace: [ 1554.190370][ T3069] [ 1554.193359][ T3069] dump_stack_lvl+0x18c/0x250 [ 1554.198109][ T3069] ? show_regs_print_info+0x20/0x20 [ 1554.203382][ T3069] ? load_image+0x420/0x420 [ 1554.207990][ T3069] sysfs_warn_dup+0x8e/0xa0 [ 1554.212565][ T3069] sysfs_do_create_link_sd+0xc0/0x110 [ 1554.218011][ T3069] device_add_class_symlinks+0x1cf/0x240 [ 1554.223727][ T3069] device_add+0x4f9/0xc40 [ 1554.228135][ T3069] wiphy_register+0x1d99/0x2ac0 [ 1554.233065][ T3069] ? cfg80211_event_work+0x40/0x40 [ 1554.238228][ T3069] ? minstrel_ht_alloc+0x88a/0x990 [ 1554.243406][ T3069] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1554.249522][ T3069] ieee80211_register_hw+0x2dd8/0x3b30 [ 1554.255036][ T3069] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1554.260632][ T3069] ? ieee80211_tasklet_handler+0x20/0x20 [ 1554.266304][ T3069] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1554.272245][ T3069] ? __debug_object_init+0xec/0x450 [ 1554.277491][ T3069] ? __asan_memset+0x22/0x40 [ 1554.282122][ T3069] ? __hrtimer_init+0x189/0x270 [ 1554.287013][ T3069] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1554.292791][ T3069] ? mac80211_hwsim_free+0x220/0x220 [ 1554.298116][ T3069] ? rcu_is_watching+0x15/0xb0 [ 1554.302930][ T3069] ? kstrndup+0xbd/0x140 [ 1554.307251][ T3069] hwsim_new_radio_nl+0xdad/0x1a70 [ 1554.312408][ T3069] ? __nla_validate+0x50/0x50 [ 1554.317140][ T3069] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1554.323517][ T3069] ? __nla_parse+0x40/0x50 [ 1554.327986][ T3069] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1554.334365][ T3069] genl_family_rcv_msg_doit+0x21a/0x310 [ 1554.339954][ T3069] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1554.345899][ T3069] ? bpf_lsm_capable+0x9/0x10 [ 1554.350624][ T3069] ? security_capable+0x89/0xb0 [ 1554.355520][ T3069] genl_rcv_msg+0x611/0x7a0 [ 1554.360066][ T3069] ? genl_bind+0x360/0x360 [ 1554.364518][ T3069] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1554.370934][ T3069] netlink_rcv_skb+0x235/0x4c0 [ 1554.375743][ T3069] ? genl_bind+0x360/0x360 [ 1554.380196][ T3069] ? netlink_ack+0x1160/0x1160 [ 1554.385011][ T3069] ? __lock_acquire+0x7d80/0x7d80 [ 1554.390083][ T3069] ? net_generic+0x1e/0x240 [ 1554.394633][ T3069] ? down_read+0x1ac/0x2e0 [ 1554.399098][ T3069] genl_rcv+0x28/0x40 [ 1554.403128][ T3069] netlink_unicast+0x7b1/0x930 [ 1554.407976][ T3069] netlink_sendmsg+0x8d0/0xbf0 [ 1554.412788][ T3069] ? netlink_getsockopt+0x590/0x590 [ 1554.418021][ T3069] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1554.423609][ T3069] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1554.428937][ T3069] ? security_socket_sendmsg+0x80/0xa0 [ 1554.434437][ T3069] ? netlink_getsockopt+0x590/0x590 [ 1554.439679][ T3069] ____sys_sendmsg+0x61b/0x980 [ 1554.444491][ T3069] ? __asan_memset+0x22/0x40 [ 1554.449130][ T3069] ? __sys_sendmsg_sock+0x30/0x30 [ 1554.454187][ T3069] ? __import_iovec+0x5f2/0x850 [ 1554.459090][ T3069] ? import_iovec+0x73/0xa0 [ 1554.463637][ T3069] ___sys_sendmsg+0x2a6/0x360 [ 1554.468361][ T3069] ? __sys_sendmsg+0x2b0/0x2b0 [ 1554.473218][ T3069] __se_sys_sendmsg+0x1d0/0x2c0 [ 1554.478112][ T3069] ? perf_trace_preemptirq_template+0x269/0x330 [ 1554.484407][ T3069] ? __x64_sys_sendmsg+0x80/0x80 [ 1554.489408][ T3069] ? lockdep_hardirqs_on+0x98/0x150 [ 1554.494647][ T3069] do_syscall_64+0x55/0xb0 [ 1554.499096][ T3069] ? clear_bhb_loop+0x40/0x90 [ 1554.503808][ T3069] ? clear_bhb_loop+0x40/0x90 [ 1554.508528][ T3069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1554.514464][ T3069] RIP: 0033:0x7f451079e0d9 [ 1554.518924][ T3069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1554.538579][ T3069] RSP: 002b:00007f451164b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1554.547067][ T3069] RAX: ffffffffffffffda RBX: 00007f4510a25fa0 RCX: 00007f451079e0d9 [ 1554.555079][ T3069] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1554.563081][ T3069] RBP: 00007f4510835024 R08: 0000000000000000 R09: 0000000000000000 [ 1554.571176][ T3069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1554.579182][ T3069] R13: 00007f4510a26038 R14: 00007f4510a25fa0 R15: 00007ffdcd2d1ba8 [ 1554.587212][ T3069] [ 1555.293576][ T3097] syzkaller0: entered promiscuous mode [ 1555.300723][ T3097] syzkaller0: entered allmulticast mode [ 1555.312960][ T3104] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.29779'. [ 1557.175234][ T3111] netlink: 'syz.3.29781': attribute type 11 has an invalid length. [ 1557.197369][ T3111] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.29781'. [ 1557.231714][ T3111] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1557.243798][ T3111] CPU: 0 PID: 3111 Comm: syz.3.29781 Not tainted syzkaller #0 [ 1557.251332][ T3111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1557.261438][ T3111] Call Trace: [ 1557.264768][ T3111] [ 1557.267748][ T3111] dump_stack_lvl+0x18c/0x250 [ 1557.272495][ T3111] ? show_regs_print_info+0x20/0x20 [ 1557.277742][ T3111] ? load_image+0x420/0x420 [ 1557.282322][ T3111] sysfs_warn_dup+0x8e/0xa0 [ 1557.286881][ T3111] sysfs_do_create_link_sd+0xc0/0x110 [ 1557.292309][ T3111] device_add_class_symlinks+0x1cf/0x240 [ 1557.298006][ T3111] device_add+0x4f9/0xc40 [ 1557.302394][ T3111] wiphy_register+0x1d99/0x2ac0 [ 1557.307324][ T3111] ? cfg80211_event_work+0x40/0x40 [ 1557.312488][ T3111] ? minstrel_ht_alloc+0x88a/0x990 [ 1557.317668][ T3111] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1557.323799][ T3111] ieee80211_register_hw+0x2dd8/0x3b30 [ 1557.329324][ T3111] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1557.334930][ T3111] ? ieee80211_tasklet_handler+0x20/0x20 [ 1557.340610][ T3111] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1557.346571][ T3111] ? __debug_object_init+0xec/0x450 [ 1557.351832][ T3111] ? __asan_memset+0x22/0x40 [ 1557.356498][ T3111] ? __hrtimer_init+0x189/0x270 [ 1557.361407][ T3111] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1557.367216][ T3111] ? mac80211_hwsim_free+0x220/0x220 [ 1557.372553][ T3111] ? rcu_is_watching+0x15/0xb0 [ 1557.377373][ T3111] ? kstrndup+0xbd/0x140 [ 1557.381691][ T3111] hwsim_new_radio_nl+0xdad/0x1a70 [ 1557.386864][ T3111] ? __nla_validate+0x50/0x50 [ 1557.391618][ T3111] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1557.398026][ T3111] ? __nla_parse+0x40/0x50 [ 1557.402517][ T3111] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1557.408922][ T3111] genl_family_rcv_msg_doit+0x21a/0x310 [ 1557.414530][ T3111] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1557.420505][ T3111] ? bpf_lsm_capable+0x9/0x10 [ 1557.425247][ T3111] ? security_capable+0x89/0xb0 [ 1557.430157][ T3111] genl_rcv_msg+0x611/0x7a0 [ 1557.434731][ T3111] ? genl_bind+0x360/0x360 [ 1557.439199][ T3111] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1557.445601][ T3111] netlink_rcv_skb+0x235/0x4c0 [ 1557.450421][ T3111] ? genl_bind+0x360/0x360 [ 1557.454889][ T3111] ? netlink_ack+0x1160/0x1160 [ 1557.459757][ T3111] ? __lock_acquire+0x7d80/0x7d80 [ 1557.464838][ T3111] ? net_generic+0x1e/0x240 [ 1557.469405][ T3111] ? down_read+0x1ac/0x2e0 [ 1557.473885][ T3111] genl_rcv+0x28/0x40 [ 1557.477920][ T3111] netlink_unicast+0x7b1/0x930 [ 1557.482764][ T3111] netlink_sendmsg+0x8d0/0xbf0 [ 1557.487593][ T3111] ? netlink_getsockopt+0x590/0x590 [ 1557.492842][ T3111] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1557.498441][ T3111] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1557.503782][ T3111] ? security_socket_sendmsg+0x80/0xa0 [ 1557.509292][ T3111] ? netlink_getsockopt+0x590/0x590 [ 1557.514551][ T3111] ____sys_sendmsg+0x61b/0x980 [ 1557.519377][ T3111] ? __asan_memset+0x22/0x40 [ 1557.524024][ T3111] ? __sys_sendmsg_sock+0x30/0x30 [ 1557.529110][ T3111] ? __import_iovec+0x5f2/0x850 [ 1557.534042][ T3111] ? import_iovec+0x73/0xa0 [ 1557.538606][ T3111] ___sys_sendmsg+0x2a6/0x360 [ 1557.543348][ T3111] ? __sys_sendmsg+0x2b0/0x2b0 [ 1557.548273][ T3111] __se_sys_sendmsg+0x1d0/0x2c0 [ 1557.553189][ T3111] ? perf_trace_preemptirq_template+0x269/0x330 [ 1557.559493][ T3111] ? __x64_sys_sendmsg+0x80/0x80 [ 1557.564511][ T3111] ? lockdep_hardirqs_on+0x98/0x150 [ 1557.569774][ T3111] do_syscall_64+0x55/0xb0 [ 1557.574239][ T3111] ? clear_bhb_loop+0x40/0x90 [ 1557.578964][ T3111] ? clear_bhb_loop+0x40/0x90 [ 1557.583696][ T3111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1557.589631][ T3111] RIP: 0033:0x7f039539e0d9 [ 1557.594093][ T3111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.613754][ T3111] RSP: 002b:00007f039626d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1557.622218][ T3111] RAX: ffffffffffffffda RBX: 00007f0395625fa0 RCX: 00007f039539e0d9 [ 1557.630236][ T3111] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1557.638247][ T3111] RBP: 00007f0395435024 R08: 0000000000000000 R09: 0000000000000000 [ 1557.646250][ T3111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1557.654258][ T3111] R13: 00007f0395626038 R14: 00007f0395625fa0 R15: 00007ffe76dd2578 [ 1557.662358][ T3111] [ 1558.915656][ T3124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29787'. [ 1565.197843][ T3295] netlink: 64771 bytes leftover after parsing attributes in process `syz.1.29868'. [ 1567.106440][ T3331] syzkaller0: entered promiscuous mode [ 1567.112294][ T3331] syzkaller0: entered allmulticast mode [ 1571.911462][ T3430] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.29926'. [ 1571.950339][ T3430] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1572.378704][ T3453] netlink: 'syz.1.29933': attribute type 46 has an invalid length. [ 1572.407832][ T3453] netlink: 'syz.1.29933': attribute type 46 has an invalid length. [ 1573.074689][ T3491] netlink: 44 bytes leftover after parsing attributes in process `syz.3.29952'. [ 1573.463062][ T3506] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.29958'. [ 1573.492009][ T3506] netlink: 6260 bytes leftover after parsing attributes in process `syz.3.29958'. [ 1573.521600][ T3506] netlink: 65 bytes leftover after parsing attributes in process `syz.3.29958'. [ 1573.541631][ T3508] netlink: 206468 bytes leftover after parsing attributes in process `syz.2.29960'. [ 1573.564262][ T3508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29960'. [ 1575.515545][ T3535] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.29981'. [ 1575.530488][ T3535] netlink: 6260 bytes leftover after parsing attributes in process `syz.0.29981'. [ 1575.547749][ T3535] netlink: 65 bytes leftover after parsing attributes in process `syz.0.29981'. [ 1579.038510][ T3565] __nla_validate_parse: 3 callbacks suppressed [ 1579.038526][ T3565] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.29986'. [ 1579.069301][ T3565] netlink: 6260 bytes leftover after parsing attributes in process `syz.2.29986'. [ 1579.097959][ T3565] netlink: 65 bytes leftover after parsing attributes in process `syz.2.29986'. [ 1579.135237][ T3568] netlink: 'syz.1.29988': attribute type 22 has an invalid length. [ 1579.679532][ T3580] pim6reg1: entered promiscuous mode [ 1579.684900][ T3580] pim6reg1: entered allmulticast mode [ 1579.921543][ T3592] netlink: 'syz.0.29999': attribute type 22 has an invalid length. [ 1583.061737][ T3611] pim6reg1: entered promiscuous mode [ 1583.067221][ T3611] pim6reg1: entered allmulticast mode [ 1583.166341][ T3613] netlink: 'syz.3.30009': attribute type 22 has an invalid length. [ 1583.357255][ T3621] netlink: 'syz.1.30012': attribute type 2 has an invalid length. [ 1583.365140][ T3621] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.30012'. [ 1583.397941][ T3623] syz.2.30013[3623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1583.398244][ T3623] syz.2.30013[3623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1586.919950][ T3643] pim6reg1: entered promiscuous mode [ 1586.945455][ T3643] pim6reg1: entered allmulticast mode [ 1587.304583][ T3659] sctp: [Deprecated]: syz.1.30028 (pid 3659) Use of int in maxseg socket option. [ 1587.304583][ T3659] Use struct sctp_assoc_value instead [ 1587.711484][ T3682] netlink: 196 bytes leftover after parsing attributes in process `syz.3.30039'. [ 1587.749021][ T3683] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30040'. [ 1588.012078][ T3699] netlink: 'syz.3.30047': attribute type 10 has an invalid length. [ 1588.024184][ T3699] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.30047'. [ 1588.249527][ T3704] netlink: 'syz.1.30048': attribute type 11 has an invalid length. [ 1588.378701][ T3709] sctp: [Deprecated]: syz.2.30050 (pid 3709) Use of int in maxseg socket option. [ 1588.378701][ T3709] Use struct sctp_assoc_value instead [ 1588.846780][ T3729] netlink: 'syz.2.30058': attribute type 10 has an invalid length. [ 1588.868494][ T3729] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.30058'. [ 1589.125085][ T3738] netlink: 'syz.2.30061': attribute type 11 has an invalid length. [ 1589.327149][ T3742] sctp: [Deprecated]: syz.3.30062 (pid 3742) Use of int in maxseg socket option. [ 1589.327149][ T3742] Use struct sctp_assoc_value instead [ 1589.501059][ T3745] netlink: 'syz.0.30072': attribute type 11 has an invalid length. [ 1590.061431][ T3767] netlink: 'syz.1.30069': attribute type 10 has an invalid length. [ 1590.079951][ T3767] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.30069'. [ 1592.825001][ T3851] netlink: 'syz.2.30105': attribute type 27 has an invalid length. [ 1592.870830][ T3851] netlink: 'syz.2.30105': attribute type 28 has an invalid length. [ 1592.903536][ T3851] netlink: 'syz.2.30105': attribute type 29 has an invalid length. [ 1592.934998][ T3851] netlink: 'syz.2.30105': attribute type 30 has an invalid length. [ 1593.161502][ T3859] netlink: 132 bytes leftover after parsing attributes in process `syz.0.30116'. [ 1595.978477][ T36] wlan1: Trigger new scan to find an IBSS to join [ 1598.066002][ T3903] ref_ctr_offset mismatch. inode: 0x9412 offset: 0x0 ref_ctr_offset(old): 0x8c ref_ctr_offset(new): 0x0 [ 1598.105241][ T3905] validate_nla: 15 callbacks suppressed [ 1598.105255][ T3905] netlink: 'syz.0.30127': attribute type 12 has an invalid length. [ 1598.127607][ T3905] netlink: 132 bytes leftover after parsing attributes in process `syz.0.30127'. [ 1598.819835][ T3930] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.30136'. [ 1599.244491][ T3945] netlink: 168 bytes leftover after parsing attributes in process `syz.3.30145'. [ 1599.279982][ T3947] netlink: 703 bytes leftover after parsing attributes in process `syz.0.30146'. [ 1599.452412][ T3957] netlink: 'syz.0.30151': attribute type 9 has an invalid length. [ 1599.477902][ T3957] netlink: 399 bytes leftover after parsing attributes in process `syz.0.30151'. [ 1599.990295][ T36] wlan1: Trigger new scan to find an IBSS to join [ 1600.863041][ T4014] netlink: 'syz.2.30184': attribute type 21 has an invalid length. [ 1600.947432][ T3603] wlan1: Creating new IBSS network, BSSID e6:75:99:4d:e0:f6 [ 1601.178372][ T4028] netlink: 703 bytes leftover after parsing attributes in process `syz.3.30180'. [ 1601.617830][ T4046] netlink: 'syz.0.30188': attribute type 21 has an invalid length. [ 1601.627182][ T4046] IPv6: NLM_F_CREATE should be specified when creating new route [ 1601.803213][ T4053] C: renamed from team_slave_0 [ 1601.840008][ T4053] netlink: 'syz.3.30192': attribute type 1 has an invalid length. [ 1601.855231][ T4053] netlink: 'syz.3.30192': attribute type 4 has an invalid length. [ 1601.876735][ T4053] netlink: 100 bytes leftover after parsing attributes in process `syz.3.30192'. [ 1601.896212][ T4053] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1601.930966][ T4057] netlink: 703 bytes leftover after parsing attributes in process `syz.1.30193'. [ 1602.434834][ T4070] tap1: tun_chr_ioctl cmd 2147767507 [ 1602.441055][ T4070] tap1: tun_chr_ioctl cmd 2147767507 [ 1603.015223][ T4084] netlink: 703 bytes leftover after parsing attributes in process `syz.2.30205'. [ 1603.249564][ T4098] netlink: 'syz.3.30212': attribute type 3 has an invalid length. [ 1603.257677][ T4098] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.30212'. [ 1603.978999][ T4133] netlink: 'syz.0.30229': attribute type 25 has an invalid length. [ 1604.018173][ T4133] netlink: 'syz.0.30229': attribute type 28 has an invalid length. [ 1605.941780][ T4188] sctp: [Deprecated]: syz.2.30255 (pid 4188) Use of int in maxseg socket option. [ 1605.941780][ T4188] Use struct sctp_assoc_value instead [ 1607.460238][ T4281] netlink: 'syz.2.30302': attribute type 1 has an invalid length. [ 1607.469525][ T4281] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.30302'. [ 1607.500113][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.506513][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.840659][ T4294] : renamed from veth1 (while UP) [ 1607.922117][ T4300] sctp: [Deprecated]: syz.1.30319 (pid 4300) Use of int in maxseg socket option. [ 1607.922117][ T4300] Use struct sctp_assoc_value instead [ 1609.627432][T28230] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1609.648618][ T4385] sctp: [Deprecated]: syz.0.30358 (pid 4385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1609.648618][ T4385] Use struct sctp_sack_info instead [ 1610.765937][ T4416] netlink: 'syz.1.30363': attribute type 21 has an invalid length. [ 1610.847439][ T4419] : renamed from veth1 (while UP) [ 1610.975621][ T4426] : renamed from veth1 (while UP) [ 1611.368983][ T4450] netlink: 'syz.3.30379': attribute type 21 has an invalid length. [ 1611.526415][ T4461] netlink: 'syz.3.30392': attribute type 3 has an invalid length. [ 1611.751398][T28230] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 1611.861259][ T4478] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.30391'. [ 1611.887249][ T4481] netlink: 'syz.3.30394': attribute type 21 has an invalid length. [ 1611.947851][ T4483] netlink: 'syz.0.30396': attribute type 3 has an invalid length. [ 1612.118371][T28230] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 1612.323001][ T4508] netlink: 'syz.1.30408': attribute type 21 has an invalid length. [ 1612.458817][ T4511] netlink: 'syz.2.30409': attribute type 3 has an invalid length. [ 1612.693512][T28230] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1612.934730][ T4533] netlink: 'syz.3.30419': attribute type 21 has an invalid length. [ 1614.038992][ T4574] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.30435'. [ 1614.552987][ T4598] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.30449'. [ 1615.197811][ T4624] netlink: 10 bytes leftover after parsing attributes in process `syz.1.30468'. [ 1616.449913][ T4671] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.30479'. [ 1618.268316][ T4720] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.30501'. [ 1622.004926][ T4748] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.30515'. [ 1622.472001][T28230] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 1622.832848][ T4776] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.30528'. [ 1622.898559][ T4775] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30530'. [ 1623.199604][T28230] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1626.621717][ T4885] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.30578'. [ 1626.669534][ T4885] openvswitch: netlink: Key type 29 is not supported [ 1626.691492][ T4887] netlink: zone id is out of range [ 1626.706746][ T4887] netlink: set zone limit has 8 unknown bytes [ 1626.858747][ T4893] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.30582'. [ 1627.664901][ T4934] netlink: 'syz.1.30601': attribute type 4 has an invalid length. [ 1627.677088][ T4934] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.30601'. [ 1628.330745][ T4959] netlink: 132 bytes leftover after parsing attributes in process `syz.1.30609'. [ 1630.998501][T23286] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1637.468631][ T5039] netlink: 'syz.3.30644': attribute type 3 has an invalid length. [ 1637.478729][ T5039] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.30644'. [ 1637.588122][ T5046] netlink: 'syz.3.30648': attribute type 10 has an invalid length. [ 1637.606497][ T5046] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.30648'. [ 1637.853948][T28230] Bluetooth: hci0: unexpected event 0x03 length: 151 > 11 [ 1639.147935][ T5067] netlink: 'syz.1.30656': attribute type 3 has an invalid length. [ 1639.177601][ T5067] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.30656'. [ 1639.438791][ T5076] netlink: 'syz.0.30658': attribute type 10 has an invalid length. [ 1639.469512][ T5076] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.30658'. [ 1640.227108][ T5103] netlink: 'syz.0.30672': attribute type 13 has an invalid length. [ 1640.235151][ T5103] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.30672'. [ 1640.483136][ T5108] netlink: 'syz.0.30667': attribute type 3 has an invalid length. [ 1640.491875][ T5108] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.30667'. [ 1641.237243][T28230] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11 [ 1641.890843][ T5146] netlink: 14 bytes leftover after parsing attributes in process `syz.0.30692'. [ 1641.940806][ T5146] netlink: get zone limit has 4 unknown bytes [ 1642.769406][ T5174] netlink: 14 bytes leftover after parsing attributes in process `syz.2.30697'. [ 1642.841836][ T5174] netlink: get zone limit has 4 unknown bytes [ 1643.728163][ T5201] netlink: 14 bytes leftover after parsing attributes in process `syz.1.30710'. [ 1643.747337][ T5201] netlink: get zone limit has 4 unknown bytes [ 1644.480453][ T5245] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.30730'. [ 1644.919286][ T5270] netlink: 1772 bytes leftover after parsing attributes in process `syz.1.30743'. [ 1645.138334][ T5283] netlink: 188 bytes leftover after parsing attributes in process `syz.3.30758'. [ 1645.381969][ T5297] netlink: 1772 bytes leftover after parsing attributes in process `syz.3.30755'. [ 1645.486980][ T5305] netlink: 'syz.1.30767': attribute type 1 has an invalid length. [ 1645.495094][ T5305] netlink: 'syz.1.30767': attribute type 2 has an invalid length. [ 1645.509874][ T5305] netlink: 'syz.1.30767': attribute type 2 has an invalid length. [ 1645.535077][ T5305] netlink: 'syz.1.30767': attribute type 3 has an invalid length. [ 1645.549793][ T5305] netlink: 'syz.1.30767': attribute type 4 has an invalid length. [ 1645.568483][ T5305] netlink: 'syz.1.30767': attribute type 5 has an invalid length. [ 1645.588823][ T5305] netlink: 'syz.1.30767': attribute type 6 has an invalid length. [ 1645.608527][ T5305] netlink: 'syz.1.30767': attribute type 7 has an invalid length. [ 1645.622310][ T5305] netlink: 'syz.1.30767': attribute type 9 has an invalid length. [ 1645.646199][ T5305] netlink: 'syz.1.30767': attribute type 10 has an invalid length. [ 1645.666159][ T5305] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.30767'. [ 1646.227331][ T5323] netlink: 156 bytes leftover after parsing attributes in process `syz.1.30769'. [ 1646.745942][ T5335] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.30774'. [ 1646.779200][ T5337] netlink: 152 bytes leftover after parsing attributes in process `syz.3.30775'. [ 1647.789807][ T5380] __nla_validate_parse: 1 callbacks suppressed [ 1647.789824][ T5380] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.30802'. [ 1648.683300][ T5401] netlink: 152 bytes leftover after parsing attributes in process `syz.0.30801'. [ 1648.780778][ T5409] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.30806'. [ 1648.864373][ T5417] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.30809'. [ 1648.983910][ T5422] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.30815'. [ 1649.351903][ T5434] netlink: 152 bytes leftover after parsing attributes in process `syz.0.30819'. [ 1649.471447][ T5443] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.30820'. [ 1649.504607][ T5442] cgroup: fork rejected by pids controller in /syz3 [ 1649.631443][ T5448] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.30823'. [ 1650.004806][ T5459] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.30827'. [ 1650.147972][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.278013][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.344043][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.488393][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.079733][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1651.088483][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1651.099291][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1651.122059][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1651.131187][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1651.140781][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1651.561627][ T5503] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.30840'. [ 1652.063971][ T5510] validate_nla: 48 callbacks suppressed [ 1652.063990][ T5510] netlink: 'syz.2.30843': attribute type 10 has an invalid length. [ 1652.166166][ T5486] chnl_net:caif_netlink_parms(): no params data found [ 1652.545162][ T5486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1652.554834][ T5486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1652.562101][ T5486] bridge_slave_0: entered allmulticast mode [ 1652.569625][ T5486] bridge_slave_0: entered promiscuous mode [ 1652.607564][ T5532] cgroup: fork rejected by pids controller in /syz2 [ 1652.614631][ T5486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1652.627019][ T5486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.634260][ T5486] bridge_slave_1: entered allmulticast mode [ 1652.651393][ T5486] bridge_slave_1: entered promiscuous mode [ 1652.695363][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1652.727290][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1652.736155][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1652.746357][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1652.757146][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1652.767603][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1652.851769][ T5486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1652.913265][ T5486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1653.089589][ T5486] team0: Port device team_slave_0 added [ 1653.136403][ T5486] team0: Port device team_slave_1 added [ 1653.177057][T28230] Bluetooth: hci0: command tx timeout [ 1653.329408][ T5486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1653.336498][ T5486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1653.367802][ T5486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1653.427487][ T5486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1653.434476][ T5486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1653.471891][ T5486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1653.614857][ T5486] hsr_slave_0: entered promiscuous mode [ 1653.647438][ T5486] hsr_slave_1: entered promiscuous mode [ 1653.666945][ T5486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1653.674583][ T5486] Cannot create hsr debugfs directory [ 1653.706563][ T5537] chnl_net:caif_netlink_parms(): no params data found [ 1654.063729][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1654.072463][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1654.084644][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1654.093094][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1654.101134][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1654.110733][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1654.303313][ T49] veth1_vlan: left promiscuous mode [ 1654.308853][ T49] : left promiscuous mode [ 1654.861407][ T51] Bluetooth: hci1: command tx timeout [ 1655.174472][ T5537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1655.185363][ T5537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1655.200778][ T5537] bridge_slave_0: entered allmulticast mode [ 1655.209578][ T5537] bridge_slave_0: entered promiscuous mode [ 1655.244551][ T5537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.252580][ T5537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.257323][ T51] Bluetooth: hci0: command tx timeout [ 1655.261128][ T5537] bridge_slave_1: entered allmulticast mode [ 1655.280542][ T5537] bridge_slave_1: entered promiscuous mode [ 1655.342259][ T5537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1655.354949][ T5537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1655.453098][ T5537] team0: Port device team_slave_0 added [ 1655.475614][ T5537] team0: Port device team_slave_1 added [ 1655.564210][ T5537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1655.571687][ T5537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1655.598501][ T5537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1655.611124][ T5537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1655.618414][ T5537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1655.644751][ T5537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1655.764049][ T5537] hsr_slave_0: entered promiscuous mode [ 1655.770793][ T5537] hsr_slave_1: entered promiscuous mode [ 1655.777684][ T5537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1655.785277][ T5537] Cannot create hsr debugfs directory [ 1655.954660][T23284] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.000377][ T5571] chnl_net:caif_netlink_parms(): no params data found [ 1656.053440][T23284] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.081615][ T5486] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1656.117725][ T5486] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1656.129789][ T5486] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1656.156287][ T5537] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.192211][T23284] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.212094][ T5486] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1656.219549][ T51] Bluetooth: hci3: command tx timeout [ 1656.263531][ T5537] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.294698][T23284] netdevsim netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.340262][ T5537] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.355622][ T5571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.363088][ T5571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.370588][ T5571] bridge_slave_0: entered allmulticast mode [ 1656.378795][ T5571] bridge_slave_0: entered promiscuous mode [ 1656.396248][ T5571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.407393][ T5571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.414652][ T5571] bridge_slave_1: entered allmulticast mode [ 1656.423236][ T5571] bridge_slave_1: entered promiscuous mode [ 1656.454084][ T5571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1656.466263][ T5571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1656.493582][ T5537] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.552075][ T5571] team0: Port device team_slave_0 added [ 1656.601640][ T5571] team0: Port device team_slave_1 added [ 1656.692231][ T5571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1656.702895][ T5571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1656.736141][ T5571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1656.749233][ T5571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1656.756307][ T5571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1656.787135][ T5571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1656.937313][ T51] Bluetooth: hci1: command tx timeout [ 1656.946173][ T5537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1657.064731][ T5571] hsr_slave_0: entered promiscuous mode [ 1657.073081][ T5571] hsr_slave_1: entered promiscuous mode [ 1657.080721][ T5571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1657.091236][ T5571] Cannot create hsr debugfs directory [ 1657.102834][ T5486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1657.110797][ T5537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1657.180044][ T5537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1657.191701][ T5537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1657.337459][ T51] Bluetooth: hci0: command tx timeout [ 1657.375711][ T5486] 8021q: adding VLAN 0 to HW filter on device team0 [ 1657.424084][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1657.431307][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1657.531314][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1657.538593][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1657.987711][ T5537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1658.070618][ T5537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1658.122654][T25981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.129842][T25981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1658.226291][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1658.233550][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1658.298946][ T51] Bluetooth: hci3: command tx timeout [ 1658.411885][ T5537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1658.529158][ T5571] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1658.552073][ T5571] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1658.598418][ T5571] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1658.626117][ T5571] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1658.680510][ T5486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1658.844619][ T5486] veth0_vlan: entered promiscuous mode [ 1658.938376][ T5486] veth1_vlan: entered promiscuous mode [ 1658.991850][ T5537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1659.018355][ T51] Bluetooth: hci1: command tx timeout [ 1659.047815][ T5571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1659.170287][ T5571] 8021q: adding VLAN 0 to HW filter on device team0 [ 1659.190822][ T5486] veth0_macvtap: entered promiscuous mode [ 1659.241526][ T5486] veth1_macvtap: entered promiscuous mode [ 1659.266363][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.273574][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1659.362000][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.369205][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1659.402311][ T5537] veth0_vlan: entered promiscuous mode [ 1659.414957][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1659.417298][ T51] Bluetooth: hci0: command tx timeout [ 1659.434602][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.454625][ T5486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1659.483211][ T5537] veth1_vlan: entered promiscuous mode [ 1659.522831][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1659.534577][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.548591][ T5486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1659.582242][ T5486] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.591394][ T5486] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.601884][ T5486] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.611369][ T5486] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.761023][ T5537] veth0_macvtap: entered promiscuous mode [ 1659.842067][ T5537] veth1_macvtap: entered promiscuous mode [ 1659.910552][ T9796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1659.925291][ T9796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1660.014493][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1660.026646][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.043236][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1660.054408][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.066405][ T5537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1660.082573][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.090743][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1660.101929][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.103145][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1660.114766][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1660.130814][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.142686][ T5537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1660.173111][T23284] hsr_slave_0: left promiscuous mode [ 1660.180319][T23284] hsr_slave_1: left promiscuous mode [ 1660.186696][T23284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1660.196236][T23284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1660.204476][T23284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1660.212217][T23284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1660.221188][T23284] bridge_slave_1: left allmulticast mode [ 1660.227131][T23284] bridge_slave_1: left promiscuous mode [ 1660.233684][T23284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.243895][T23284] bridge_slave_0: left promiscuous mode [ 1660.249926][T23284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.277476][T23284] veth1_macvtap: left promiscuous mode [ 1660.283041][T23284] veth0_macvtap: left promiscuous mode [ 1660.289581][T23284] veth1_vlan: left promiscuous mode [ 1660.294865][T23284] veth0_vlan: left promiscuous mode [ 1660.377297][ T51] Bluetooth: hci3: command tx timeout [ 1661.097234][ T51] Bluetooth: hci1: command tx timeout [ 1661.283799][T23284] team0 (unregistering): Port device team_slave_1 removed [ 1661.324498][T23284] team0 (unregistering): Port device team_slave_0 removed [ 1661.364608][T23284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1661.402479][T23284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1661.661834][T23284] bond0 (unregistering): Released all slaves [ 1661.778338][ T5537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.787155][ T5537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.795881][ T5537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.805540][ T5537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.894503][ T5571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1661.929591][ T5668] netlink: 'syz.3.30830': attribute type 5 has an invalid length. [ 1662.027928][ T9796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1662.035812][ T9796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1662.155521][T23286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1662.181314][T23286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1662.198549][ T5571] veth0_vlan: entered promiscuous mode [ 1662.258065][ T5571] veth1_vlan: entered promiscuous mode [ 1662.335624][ T5571] veth0_macvtap: entered promiscuous mode [ 1662.352519][ T5571] veth1_macvtap: entered promiscuous mode [ 1662.409481][ T5571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1662.430783][ T5571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.451310][ T5571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1662.458274][ T51] Bluetooth: hci3: command tx timeout [ 1662.478408][ T5571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.492205][ T5571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1662.529273][ T5571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1662.555818][ T5571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.570639][ T5571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1662.583639][ T5571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.608927][ T5571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1662.619565][ T5685] __nla_validate_parse: 1 callbacks suppressed [ 1662.619580][ T5685] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.30860'. [ 1662.648787][ T5571] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.667653][ T5571] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.676407][ T5571] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.713504][ T5571] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.889436][T25187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1662.916730][T25187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1662.967232][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1662.975106][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1663.549622][ T5719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1663.974269][ T5736] netlink: 'syz.2.30884': attribute type 2 has an invalid length. [ 1664.007122][ T5736] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.30884'. [ 1664.124394][ T5739] sock: sock_timestamping_bind_phc: sock not bind to device [ 1664.288740][ T5742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1664.631631][ T5758] sock: sock_timestamping_bind_phc: sock not bind to device [ 1664.641967][ T5760] netlink: 'syz.1.30894': attribute type 2 has an invalid length. [ 1664.666047][ T5760] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.30894'. [ 1664.848761][ T5767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1665.212186][ T5785] sock: sock_timestamping_bind_phc: sock not bind to device [ 1665.453205][ T5796] netlink: 'syz.3.30909': attribute type 2 has an invalid length. [ 1665.473313][ T5796] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.30909'. [ 1666.828589][ T5841] netlink: 'syz.0.30928': attribute type 10 has an invalid length. [ 1666.852353][ T5841] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.30928'. [ 1668.953271][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.962654][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.311115][ T5906] C: renamed from team_slave_0 (while UP) [ 1669.348795][ T5906] netlink: 'syz.0.30966': attribute type 3 has an invalid length. [ 1669.356780][ T5906] netlink: 'syz.0.30966': attribute type 1 has an invalid length. [ 1669.365841][ T5906] netlink: 116 bytes leftover after parsing attributes in process `syz.0.30966'. [ 1670.091702][ T5937] C: renamed from team_slave_0 (while UP) [ 1670.123661][ T5937] netlink: 'syz.3.30974': attribute type 3 has an invalid length. [ 1670.149965][ T5937] netlink: 'syz.3.30974': attribute type 1 has an invalid length. [ 1670.164047][ T5937] netlink: 116 bytes leftover after parsing attributes in process `syz.3.30974'. [ 1672.839989][ T6006] netlink: 'syz.3.31006': attribute type 27 has an invalid length. [ 1672.862054][ T6006] netlink: 'syz.3.31006': attribute type 25 has an invalid length. [ 1679.872842][ T6098] netlink: 144 bytes leftover after parsing attributes in process `syz.2.31047'. [ 1679.968016][ T6098] team0: Port device team_slave_0 removed [ 1679.974618][ T6098] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1680.266647][ T6106] netlink: 'syz.0.31051': attribute type 3 has an invalid length. [ 1680.283419][ T6106] netlink: 'syz.0.31051': attribute type 4 has an invalid length. [ 1680.316051][ T6106] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.31051'. [ 1681.891757][ T6134] netlink: 144 bytes leftover after parsing attributes in process `syz.0.31061'. [ 1682.016197][ T6134] team0: Port device C removed [ 1682.020265][ T6137] netlink: 'syz.2.31062': attribute type 3 has an invalid length. [ 1682.039835][ T6137] netlink: 'syz.2.31062': attribute type 4 has an invalid length. [ 1682.060615][ T6137] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.31062'. [ 1682.071322][ T6134] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1684.433216][ T6172] netlink: 'syz.1.31074': attribute type 3 has an invalid length. [ 1684.497064][ T6172] netlink: 'syz.1.31074': attribute type 4 has an invalid length. [ 1684.526949][ T6172] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.31074'. [ 1690.993209][ T6224] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.31100'. [ 1691.812553][ T6251] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.31114'. [ 1692.498394][ T6280] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.31127'. [ 1692.731136][ T6291] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 1693.125127][ T6304] netlink: 'syz.2.31139': attribute type 9 has an invalid length. [ 1693.143404][ T6304] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.31139'. [ 1693.579281][ T6317] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.31145'. [ 1694.431708][ T6335] netlink: 'syz.1.31153': attribute type 9 has an invalid length. [ 1694.442633][ T6335] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.31153'. [ 1694.463345][ T6336] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.31154'. [ 1698.291006][ T6362] netlink: 'syz.3.31164': attribute type 9 has an invalid length. [ 1698.302359][ T6362] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.31164'. [ 1698.319547][ T6361] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.31165'. [ 1698.564225][ T6373] netlink: 60 bytes leftover after parsing attributes in process `syz.0.31178'. [ 1699.965882][ T6392] netlink: 'syz.0.31179': attribute type 9 has an invalid length. [ 1700.023158][ T6392] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.31179'. [ 1700.616095][ T6398] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.31180'. [ 1701.338893][ T6429] C: renamed from team_slave_0 [ 1701.348326][ T6429] netlink: 'syz.2.31197': attribute type 3 has an invalid length. [ 1701.356326][ T6429] netlink: 116 bytes leftover after parsing attributes in process `syz.2.31197'. [ 1701.376316][ T6429] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1705.129030][ T6564] netlink: 64 bytes leftover after parsing attributes in process `syz.2.31262'. [ 1705.269818][ T6569] netlink: 'syz.3.31264': attribute type 3 has an invalid length. [ 1705.287397][ T6569] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.31264'. [ 1705.825762][ T6590] netlink: 'syz.0.31275': attribute type 3 has an invalid length. [ 1705.834640][ T6590] netlink: 132 bytes leftover after parsing attributes in process `syz.0.31275'. [ 1705.973734][ T6596] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.31278'. [ 1706.006905][ T6596] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.31278'. [ 1706.026640][ T6596] tc_dump_action: action bad kind [ 1706.520397][ T6616] netlink: 'syz.3.31287': attribute type 3 has an invalid length. [ 1706.528766][ T6616] netlink: 132 bytes leftover after parsing attributes in process `syz.3.31287'. [ 1706.754473][ T6622] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.31292'. [ 1706.776138][ T6622] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.31292'. [ 1706.795902][ T6622] tc_dump_action: action bad kind [ 1707.280458][ T6644] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.31303'. [ 1707.294881][ T6644] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.31303'. [ 1707.314871][ T6644] tc_dump_action: action bad kind [ 1708.103425][ T6679] netlink: 'syz.0.31319': attribute type 5 has an invalid length. [ 1708.678310][ T6701] netlink: 'syz.2.31331': attribute type 5 has an invalid length. [ 1709.449019][ T6734] netlink: 'syz.3.31345': attribute type 5 has an invalid length. [ 1711.490040][ T6842] netlink: 'syz.0.31404': attribute type 10 has an invalid length. [ 1711.697160][ T6853] netlink: 'syz.2.31410': attribute type 10 has an invalid length. [ 1712.190626][ T6878] netlink: 'syz.3.31413': attribute type 10 has an invalid length. [ 1712.298919][ T6884] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.31416'. [ 1712.767874][ T6909] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.31429'. [ 1713.188353][ T6933] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.31440'. [ 1713.253619][ T6935] netlink: 1772 bytes leftover after parsing attributes in process `syz.1.31441'. [ 1713.537851][ T6951] netlink: 60 bytes leftover after parsing attributes in process `syz.3.31447'. [ 1713.965364][ T6968] netlink: 'syz.3.31455': attribute type 9 has an invalid length. [ 1713.994582][ T6968] netlink: 7 bytes leftover after parsing attributes in process `syz.3.31455'. [ 1718.728702][ T7035] bridge0: port 3(batadv0) entered blocking state [ 1718.736441][ T7035] bridge0: port 3(batadv0) entered disabled state [ 1718.743588][ T7035] batadv0: entered allmulticast mode [ 1718.751552][ T7035] batadv0: entered promiscuous mode [ 1718.759266][ T7035] bridge0: port 3(batadv0) entered blocking state [ 1718.766099][ T7035] bridge0: port 3(batadv0) entered forwarding state [ 1719.025393][ T7049] bridge0: port 3(batadv0) entered blocking state [ 1719.034721][ T7049] bridge0: port 3(batadv0) entered disabled state [ 1719.041600][ T7049] batadv0: entered allmulticast mode [ 1719.048286][ T7049] batadv0: entered promiscuous mode [ 1719.054199][ T7049] bridge0: port 3(batadv0) entered blocking state [ 1719.060810][ T7049] bridge0: port 3(batadv0) entered forwarding state [ 1719.078632][ T3603] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1719.088337][ T3603] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1719.098322][ T3603] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1719.107791][ T3603] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1719.313037][ T7059] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.31506'. [ 1720.286204][ T7080] bridge0: port 3(batadv0) entered blocking state [ 1720.294880][ T7080] bridge0: port 3(batadv0) entered disabled state [ 1720.301819][ T7080] batadv0: entered allmulticast mode [ 1720.315848][ T7080] batadv0: entered promiscuous mode [ 1720.323872][ T7080] bridge0: port 3(batadv0) entered blocking state [ 1720.330581][ T7080] bridge0: port 3(batadv0) entered forwarding state [ 1720.658905][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1720.668279][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1720.856458][ T7103] netlink: 'syz.0.31518': attribute type 9 has an invalid length. [ 1721.127055][ T7117] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.31526'. [ 1721.146345][ T7117] netlink: zone id is out of range [ 1721.161909][ T7117] netlink: zone id is out of range [ 1721.174159][ T7117] netlink: zone id is out of range [ 1721.185040][ T7117] netlink: zone id is out of range [ 1721.194768][ T7117] netlink: zone id is out of range [ 1721.200438][ T7117] netlink: zone id is out of range [ 1721.205801][ T7117] netlink: zone id is out of range [ 1721.218641][ T7117] netlink: zone id is out of range [ 1721.225052][ T7117] netlink: zone id is out of range [ 1721.236097][ T7117] netlink: zone id is out of range [ 1721.330640][ T7121] netlink: 'syz.3.31528': attribute type 153 has an invalid length. [ 1721.348714][ T7121] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.31528'. [ 1721.479101][ T7129] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.31532'. [ 1725.251740][ T7167] netlink: 'syz.2.31547': attribute type 1 has an invalid length. [ 1725.269662][ T7167] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.31547'. [ 1728.722863][ T7192] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.31558'. [ 1728.747155][ T7192] net_ratelimit: 331 callbacks suppressed [ 1728.747171][ T7192] netlink: zone id is out of range [ 1728.783923][ T7192] netlink: zone id is out of range [ 1728.804200][ T7192] netlink: zone id is out of range [ 1728.817067][ T7192] netlink: zone id is out of range [ 1728.826267][ T7192] netlink: zone id is out of range [ 1728.850045][ T7192] netlink: zone id is out of range [ 1728.855305][ T7192] netlink: zone id is out of range [ 1728.863002][ T7192] netlink: zone id is out of range [ 1728.872623][ T7192] netlink: zone id is out of range [ 1728.878139][ T7192] netlink: zone id is out of range [ 1728.905379][ T7198] netlink: 'syz.3.31561': attribute type 1 has an invalid length. [ 1728.916992][ T7198] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.31561'. [ 1730.278939][ T7248] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.31585'. [ 1730.388669][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.399155][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.836329][ T7352] netlink: 14 bytes leftover after parsing attributes in process `syz.0.31630'. [ 1734.458966][ T7382] netlink: 14 bytes leftover after parsing attributes in process `syz.1.31645'. [ 1735.117170][ T7406] IPv6: NLM_F_CREATE should be specified when creating new route [ 1735.125225][ T7406] netlink: 1 bytes leftover after parsing attributes in process `syz.2.31656'. [ 1735.414646][ T7412] netlink: 14 bytes leftover after parsing attributes in process `syz.3.31658'. [ 1735.853361][ T7418] netlink: 'syz.3.31662': attribute type 3 has an invalid length. [ 1735.861841][ T7418] netlink: 'syz.3.31662': attribute type 6 has an invalid length. [ 1735.876117][ T7418] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.31662'. [ 1736.534162][ T7448] netlink: 'syz.0.31676': attribute type 3 has an invalid length. [ 1736.546926][ T7448] netlink: 'syz.0.31676': attribute type 6 has an invalid length. [ 1736.560475][ T7448] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.31676'. [ 1737.282807][ T7474] netlink: 'syz.1.31689': attribute type 3 has an invalid length. [ 1737.293838][ T7474] netlink: 'syz.1.31689': attribute type 6 has an invalid length. [ 1737.302418][ T7474] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.31689'. [ 1738.624900][ T7511] netlink: 'syz.3.31705': attribute type 7 has an invalid length. [ 1738.935910][ T7523] pim6reg1: entered promiscuous mode [ 1738.953745][ T7523] pim6reg1: entered allmulticast mode [ 1740.582662][ T7565] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.31731'. [ 1742.353127][ T7606] netlink: 'syz.1.31748': attribute type 7 has an invalid length. [ 1742.438741][ T7608] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.31749'. [ 1742.662393][ T7618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1742.887323][ T7628] netlink: 'syz.2.31759': attribute type 1 has an invalid length. [ 1742.907541][ T7628] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.31759'. [ 1742.965327][ T7630] netlink: 'syz.0.31760': attribute type 13 has an invalid length. [ 1742.975897][ T7630] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.31760'. [ 1743.472644][ T7642] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.31763'. [ 1745.361512][ T7677] netlink: 'syz.1.31782': attribute type 13 has an invalid length. [ 1745.380323][ T7677] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.31782'. [ 1746.211880][ T7698] netlink: 'syz.2.31793': attribute type 13 has an invalid length. [ 1746.230626][ T7698] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.31793'. [ 1747.954889][ T7730] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.31807'. [ 1747.966714][ T7730] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.31807'. [ 1747.982358][ T7730] netlink: 6 bytes leftover after parsing attributes in process `syz.0.31807'. [ 1748.011165][ T7730] tc_dump_action: action bad kind [ 1749.541051][ T7762] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.31820'. [ 1749.598121][ T7762] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.31820'. [ 1749.628417][ T7762] netlink: 6 bytes leftover after parsing attributes in process `syz.2.31820'. [ 1749.642734][ T7762] tc_dump_action: action bad kind [ 1757.548020][ T7882] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.31874'. [ 1757.885997][ T7895] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.31882'. [ 1757.958598][ T7897] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.31883'. [ 1758.408513][ T7917] netlink: 14 bytes leftover after parsing attributes in process `syz.1.31893'. [ 1758.653566][ T7931] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.31900'. [ 1759.029389][ T7947] netlink: 14 bytes leftover after parsing attributes in process `syz.0.31908'. [ 1759.588766][ T7977] netlink: 14 bytes leftover after parsing attributes in process `syz.3.31922'. [ 1759.621062][ T7975] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.31921'. [ 1760.244539][ T8005] netlink: 14 bytes leftover after parsing attributes in process `syz.2.31933'. [ 1760.345945][ T8008] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.31934'. [ 1760.751796][ T8028] netlink: 'syz.0.31946': attribute type 21 has an invalid length. [ 1761.061867][ T8046] netlink: 'syz.2.31961': attribute type 21 has an invalid length. [ 1761.431893][ T8058] can: request_module (can-proto-0) failed. [ 1764.829894][ T8099] __nla_validate_parse: 2 callbacks suppressed [ 1764.829923][ T8099] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.31972'. [ 1765.103293][ T8108] can: request_module (can-proto-0) failed. [ 1765.301248][ T8122] netlink: 'syz.3.31981': attribute type 17 has an invalid length. [ 1766.051378][ T8155] netlink: 'syz.2.31997': attribute type 4 has an invalid length. [ 1766.061661][ T8155] netlink: 152 bytes leftover after parsing attributes in process `syz.2.31997'. [ 1766.532128][ T8171] netlink: 'syz.0.32005': attribute type 17 has an invalid length. [ 1766.600617][ T8173] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.32006'. [ 1767.032624][ T8192] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.32015'. [ 1768.313618][ T8241] netlink: 'syz.0.32037': attribute type 4 has an invalid length. [ 1768.326997][ T8241] netlink: 152 bytes leftover after parsing attributes in process `syz.0.32037'. [ 1768.771366][ T8254] netlink: 703 bytes leftover after parsing attributes in process `syz.3.32046'. [ 1768.881462][ T8261] netlink: 'syz.1.32055': attribute type 3 has an invalid length. [ 1768.895704][ T8261] netlink: 'syz.1.32055': attribute type 1 has an invalid length. [ 1768.903649][ T8261] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.32055'. [ 1770.168366][T23286] tipc: Subscription rejected, illegal request [ 1770.263244][ T8300] netlink: 'syz.3.32064': attribute type 4 has an invalid length. [ 1770.271735][ T8300] netlink: 152 bytes leftover after parsing attributes in process `syz.3.32064'. [ 1771.084162][T23286] tipc: Subscription rejected, illegal request [ 1772.103372][T23286] tipc: Subscription rejected, illegal request [ 1772.227964][ T8356] syzkaller0: entered promiscuous mode [ 1772.233669][ T8356] syzkaller0: entered allmulticast mode [ 1772.310117][ T8360] syz.1.32093[8360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1772.310248][ T8360] syz.1.32093[8360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1773.432838][T28230] Bluetooth: hci0: command 0x0406 tx timeout [ 1773.679330][ T8396] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.32109'. [ 1773.872682][ T8406] syz.0.32112[8406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1773.872824][ T8406] syz.0.32112[8406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1774.570133][ T8431] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.32123'. [ 1775.863920][ T8454] net_ratelimit: 331 callbacks suppressed [ 1775.863942][ T8454] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1775.879460][ T8454] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1775.888753][ T8454] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1775.898045][ T8454] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1775.907342][ T8454] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1775.916541][ T8454] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1775.925869][ T8454] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1775.935144][ T8454] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1775.944527][ T8454] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1775.953881][ T8454] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1776.504460][ T8463] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.32137'. [ 1778.101410][ T8538] netlink: 'syz.0.32169': attribute type 39 has an invalid length. [ 1778.536997][ T8464] Bluetooth: hci1: command 0x0406 tx timeout [ 1778.543703][ T8464] Bluetooth: hci3: command 0x0406 tx timeout [ 1779.730699][ T8587] netlink: 'syz.1.32190': attribute type 39 has an invalid length. [ 1779.797306][ T8592] netlink: 'syz.3.32191': attribute type 22 has an invalid length. [ 1780.650390][ T8618] netlink: 'syz.2.32204': attribute type 22 has an invalid length. [ 1780.723346][ T8623] netlink: 'syz.3.32206': attribute type 39 has an invalid length. [ 1781.356007][ T8637] netlink: 'syz.2.32220': attribute type 39 has an invalid length. [ 1781.844375][ T8658] netlink: 'syz.0.32217': attribute type 22 has an invalid length. [ 1782.700801][ T8677] netlink: 'syz.3.32230': attribute type 39 has an invalid length. [ 1782.972203][ T8684] net_ratelimit: 9977 callbacks suppressed [ 1782.972227][ T8684] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1787.433876][ T8728] netlink: 'syz.2.32253': attribute type 10 has an invalid length. [ 1787.505081][ T8728] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 1791.866049][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.872623][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.229327][ T8843] netlink: 156 bytes leftover after parsing attributes in process `syz.2.32305'. [ 1796.592230][ T8884] netlink: 156 bytes leftover after parsing attributes in process `syz.0.32322'. [ 1797.420429][ T8908] netlink: 156 bytes leftover after parsing attributes in process `syz.3.32337'. [ 1798.012970][ T8924] netlink: 'syz.0.32351': attribute type 10 has an invalid length. [ 1798.749775][ T8924] macvlan0: entered promiscuous mode [ 1798.756452][ T8924] macvlan0: entered allmulticast mode [ 1798.795550][ T8924] veth1_vlan: entered allmulticast mode [ 1798.826558][ T8924] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1799.314297][ T8943] netlink: 156 bytes leftover after parsing attributes in process `syz.1.32349'. [ 1799.386358][ T8945] sock: sock_timestamping_bind_phc: sock not bind to device [ 1800.003030][ T8960] veth1_macvtap: left promiscuous mode [ 1800.025565][ T8961] veth1_macvtap: entered promiscuous mode [ 1800.037174][ T8961] macsec0: entered promiscuous mode [ 1800.044774][ T8961] macsec0: entered allmulticast mode [ 1800.050937][ T8961] veth1_macvtap: entered allmulticast mode [ 1800.141679][ T8968] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.32363'. [ 1800.359840][ T8977] netlink: 'syz.3.32368': attribute type 3 has an invalid length. [ 1802.443707][ T9011] sock: sock_timestamping_bind_phc: sock not bind to device [ 1805.198460][ T9064] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.32402'. [ 1806.190882][ T9088] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.32414'. [ 1806.715424][ T9105] netlink: 'syz.2.32425': attribute type 3 has an invalid length. [ 1806.820976][ T9111] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.32434'. [ 1808.500752][ T9136] netlink: 'syz.3.32437': attribute type 10 has an invalid length. [ 1808.520890][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1808.535170][ T9136] bridge_slave_1: left allmulticast mode [ 1808.541415][ T9136] bridge_slave_1: left promiscuous mode [ 1808.548714][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1809.386372][ T9150] syzkaller0: entered promiscuous mode [ 1809.402368][ T9150] syzkaller0: entered allmulticast mode [ 1812.069253][ T9168] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.32452'. [ 1813.200440][ T9192] syzkaller0: entered promiscuous mode [ 1813.216843][ T9192] syzkaller0: entered allmulticast mode [ 1813.279979][ T9199] netlink: 10 bytes leftover after parsing attributes in process `syz.0.32456'. [ 1817.525873][ T9272] syzkaller0: entered promiscuous mode [ 1817.545047][ T9272] syzkaller0: entered allmulticast mode [ 1819.105236][ T9300] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.32510'. [ 1820.644380][ T9312] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.32516'. [ 1821.453658][ T9337] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.32534'. [ 1821.503008][ T9335] syzkaller0: entered promiscuous mode [ 1821.509323][ T9335] syzkaller0: entered allmulticast mode [ 1821.645090][ T9344] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.32530'. [ 1823.968644][ T51] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1824.021569][ T9367] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.32542'. [ 1824.149702][ T9373] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.32543'. [ 1824.376983][ T51] Bluetooth: hci0: Malformed LE Event: 0x1d [ 1824.615999][ T9390] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.32553'. [ 1824.824216][ T51] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1825.195919][ T51] Bluetooth: hci3: Malformed LE Event: 0x1d [ 1826.069964][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1826.349350][ T51] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1826.866995][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1827.044727][ T9446] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.32575'. [ 1827.439210][ T9454] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.32579'. [ 1827.449847][ T9454] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1827.548465][ T9456] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.32581'. [ 1828.378078][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1829.524454][ T9492] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.32593'. [ 1829.558594][ T9492] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 1829.910424][ T9505] netlink: 'syz.0.32601': attribute type 6 has an invalid length. [ 1829.938060][ T9505] netlink: 168 bytes leftover after parsing attributes in process `syz.0.32601'. [ 1832.476975][ T9538] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.32612'. [ 1832.728309][ T9544] netlink: 'syz.3.32615': attribute type 6 has an invalid length. [ 1832.764672][ T9544] netlink: 168 bytes leftover after parsing attributes in process `syz.3.32615'. [ 1833.502729][ T9564] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.32626'. [ 1833.529895][ T9564] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 1833.754859][ T9569] netlink: 'syz.2.32628': attribute type 6 has an invalid length. [ 1833.800911][ T9569] netlink: 168 bytes leftover after parsing attributes in process `syz.2.32628'. [ 1834.264482][ T9584] netlink: 132 bytes leftover after parsing attributes in process `syz.2.32634'. [ 1834.465860][ T9595] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.32637'. [ 1834.641505][ T9597] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.32648'. [ 1835.993018][ T9618] netlink: 132 bytes leftover after parsing attributes in process `syz.0.32647'. [ 1839.954622][ T9650] netlink: 132 bytes leftover after parsing attributes in process `syz.1.32661'. [ 1840.887674][ T9675] netlink: 15119 bytes leftover after parsing attributes in process `syz.2.32673'. [ 1841.152518][ T9686] [ 1841.154930][ T9686] ====================================================== [ 1841.161995][ T9686] WARNING: possible circular locking dependency detected [ 1841.169055][ T9686] syzkaller #0 Not tainted [ 1841.173505][ T9686] ------------------------------------------------------ [ 1841.180561][ T9686] syz.2.32677/9686 is trying to acquire lock: [ 1841.186658][ T9686] ffff88805fc38a38 (&trie->lock){-...}-{2:2}, at: trie_delete_elem+0x94/0x630 [ 1841.195605][ T9686] [ 1841.195605][ T9686] but task is already holding lock: [ 1841.203004][ T9686] ffff8880b8f37de8 (stock_lock){-.-.}-{2:2}, at: mod_objcg_state+0x101/0x8c0 [ 1841.211858][ T9686] [ 1841.211858][ T9686] which lock already depends on the new lock. [ 1841.211858][ T9686] [ 1841.222323][ T9686] [ 1841.222323][ T9686] the existing dependency chain (in reverse order) is: [ 1841.231373][ T9686] [ 1841.231373][ T9686] -> #1 (stock_lock){-.-.}-{2:2}: [ 1841.238664][ T9686] obj_cgroup_charge+0x10a/0x630 [ 1841.244173][ T9686] slab_pre_alloc_hook+0x2e2/0x300 [ 1841.249863][ T9686] __kmem_cache_alloc_node+0x53/0x250 [ 1841.255797][ T9686] __kmalloc_node+0xa6/0x240 [ 1841.260950][ T9686] bpf_map_kmalloc_node+0xbc/0x1b0 [ 1841.266617][ T9686] trie_update_elem+0x172/0xd60 [ 1841.272019][ T9686] bpf_map_update_value+0x64b/0x710 [ 1841.277765][ T9686] generic_map_update_batch+0x5de/0x800 [ 1841.283855][ T9686] bpf_map_do_batch+0x3f2/0x600 [ 1841.289272][ T9686] __sys_bpf+0x381/0x890 [ 1841.294058][ T9686] __x64_sys_bpf+0x7c/0x90 [ 1841.299023][ T9686] do_syscall_64+0x55/0xb0 [ 1841.303990][ T9686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1841.310429][ T9686] [ 1841.310429][ T9686] -> #0 (&trie->lock){-...}-{2:2}: [ 1841.317757][ T9686] __lock_acquire+0x37ef/0x7d80 [ 1841.323242][ T9686] lock_acquire+0x19e/0x420 [ 1841.328292][ T9686] _raw_spin_lock_irqsave+0xb4/0x100 [ 1841.334131][ T9686] trie_delete_elem+0x94/0x630 [ 1841.339451][ T9686] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 1841.345452][ T9686] trace_call_bpf+0x333/0x6c0 [ 1841.350697][ T9686] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 1841.356792][ T9686] perf_trace_lock_acquire+0x342/0x400 [ 1841.362798][ T9686] lock_acquire+0x3ef/0x420 [ 1841.367849][ T9686] mod_objcg_mlstate+0xad/0x320 [ 1841.373254][ T9686] mod_objcg_state+0x44b/0x8c0 [ 1841.378565][ T9686] slab_post_alloc_hook+0x358/0x4d0 [ 1841.384314][ T9686] kmem_cache_alloc+0x17e/0x2c0 [ 1841.389721][ T9686] alloc_empty_file+0x9e/0x1d0 [ 1841.395030][ T9686] alloc_file+0x5b/0x600 [ 1841.399819][ T9686] alloc_file_pseudo+0x184/0x210 [ 1841.405316][ T9686] anon_inode_getfd+0xca/0x1c0 [ 1841.410684][ T9686] bpf_prog_load+0x1234/0x1610 [ 1841.415997][ T9686] __sys_bpf+0x5ba/0x890 [ 1841.420787][ T9686] __x64_sys_bpf+0x7c/0x90 [ 1841.425747][ T9686] do_syscall_64+0x55/0xb0 [ 1841.430722][ T9686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1841.437162][ T9686] [ 1841.437162][ T9686] other info that might help us debug this: [ 1841.437162][ T9686] [ 1841.447403][ T9686] Possible unsafe locking scenario: [ 1841.447403][ T9686] [ 1841.454865][ T9686] CPU0 CPU1 [ 1841.460244][ T9686] ---- ---- [ 1841.465621][ T9686] lock(stock_lock); [ 1841.469631][ T9686] lock(&trie->lock); [ 1841.476358][ T9686] lock(stock_lock); [ 1841.482890][ T9686] lock(&trie->lock); [ 1841.486990][ T9686] [ 1841.486990][ T9686] *** DEADLOCK *** [ 1841.486990][ T9686] [ 1841.495147][ T9686] 2 locks held by syz.2.32677/9686: [ 1841.500369][ T9686] #0: ffff8880b8f37de8 (stock_lock){-.-.}-{2:2}, at: mod_objcg_state+0x101/0x8c0 [ 1841.509638][ T9686] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: trace_call_bpf+0xc3/0x6c0 [ 1841.518982][ T9686] [ 1841.518982][ T9686] stack backtrace: [ 1841.524888][ T9686] CPU: 1 PID: 9686 Comm: syz.2.32677 Not tainted syzkaller #0 [ 1841.532461][ T9686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1841.542545][ T9686] Call Trace: [ 1841.545847][ T9686] [ 1841.548801][ T9686] dump_stack_lvl+0x18c/0x250 [ 1841.553510][ T9686] ? load_image+0x420/0x420 [ 1841.558049][ T9686] ? show_regs_print_info+0x20/0x20 [ 1841.563279][ T9686] ? print_circular_bug+0x12b/0x1a0 [ 1841.568512][ T9686] check_noncircular+0x2fc/0x400 [ 1841.573482][ T9686] ? print_deadlock_bug+0x5d0/0x5d0 [ 1841.578707][ T9686] ? lockdep_lock+0xf5/0x230 [ 1841.583353][ T9686] ? _find_first_zero_bit+0xd6/0x100 [ 1841.588709][ T9686] __lock_acquire+0x37ef/0x7d80 [ 1841.593598][ T9686] ? perf_trace_buf_alloc+0x131/0x290 [ 1841.598999][ T9686] ? verify_lock_unused+0x140/0x140 [ 1841.604224][ T9686] ? perf_trace_lock_acquire+0x1a7/0x400 [ 1841.609893][ T9686] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1841.616521][ T9686] lock_acquire+0x19e/0x420 [ 1841.621056][ T9686] ? trie_delete_elem+0x94/0x630 [ 1841.626032][ T9686] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1841.632740][ T9686] ? read_lock_is_recursive+0x20/0x20 [ 1841.638152][ T9686] _raw_spin_lock_irqsave+0xb4/0x100 [ 1841.643474][ T9686] ? trie_delete_elem+0x94/0x630 [ 1841.648443][ T9686] ? _raw_spin_lock+0x40/0x40 [ 1841.653156][ T9686] ? __rwlock_init+0x150/0x150 [ 1841.657957][ T9686] trie_delete_elem+0x94/0x630 [ 1841.662766][ T9686] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 1841.668250][ T9686] trace_call_bpf+0x333/0x6c0 [ 1841.672946][ T9686] ? trace_call_bpf+0xc3/0x6c0 [ 1841.677738][ T9686] ? trace_call_bpf+0xc3/0x6c0 [ 1841.682525][ T9686] ? __lock_acquire+0x7d80/0x7d80 [ 1841.687576][ T9686] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 1841.693669][ T9686] ? mark_lock+0x94/0x320 [ 1841.698030][ T9686] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 1841.703607][ T9686] perf_trace_lock_acquire+0x342/0x400 [ 1841.709096][ T9686] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1841.715743][ T9686] ? verify_lock_unused+0x140/0x140 [ 1841.720970][ T9686] ? perf_trace_lock_acquire+0x342/0x400 [ 1841.726632][ T9686] lock_acquire+0x3ef/0x420 [ 1841.731160][ T9686] ? mod_objcg_mlstate+0x8c/0x320 [ 1841.736211][ T9686] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1841.742825][ T9686] ? read_lock_is_recursive+0x20/0x20 [ 1841.748253][ T9686] mod_objcg_mlstate+0xad/0x320 [ 1841.753131][ T9686] ? mod_objcg_mlstate+0x8c/0x320 [ 1841.758181][ T9686] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1841.765405][ T9686] ? mod_objcg_mlstate+0x8c/0x320 [ 1841.770459][ T9686] ? drain_obj_stock+0x3a0/0x3a0 [ 1841.775427][ T9686] mod_objcg_state+0x44b/0x8c0 [ 1841.780220][ T9686] ? mod_objcg_state+0x101/0x8c0 [ 1841.785185][ T9686] ? __memcg_kmem_uncharge_page+0x290/0x290 [ 1841.791110][ T9686] slab_post_alloc_hook+0x358/0x4d0 [ 1841.796342][ T9686] ? d_instantiate+0x6f/0x90 [ 1841.800952][ T9686] kmem_cache_alloc+0x17e/0x2c0 [ 1841.805836][ T9686] ? alloc_empty_file+0x9e/0x1d0 [ 1841.810799][ T9686] alloc_empty_file+0x9e/0x1d0 [ 1841.815608][ T9686] alloc_file+0x5b/0x600 [ 1841.819899][ T9686] alloc_file_pseudo+0x184/0x210 [ 1841.824865][ T9686] ? fput+0x1a0/0x1a0 [ 1841.828879][ T9686] ? _raw_spin_unlock+0x28/0x40 [ 1841.833867][ T9686] anon_inode_getfd+0xca/0x1c0 [ 1841.838680][ T9686] bpf_prog_load+0x1234/0x1610 [ 1841.843480][ T9686] ? map_freeze+0x420/0x420 [ 1841.848017][ T9686] ? __might_fault+0xaa/0x120 [ 1841.852720][ T9686] ? __might_fault+0xc6/0x120 [ 1841.857424][ T9686] ? __might_fault+0xaa/0x120 [ 1841.862127][ T9686] ? bpf_lsm_bpf+0x9/0x10 [ 1841.866484][ T9686] ? security_bpf+0x7e/0xa0 [ 1841.871041][ T9686] __sys_bpf+0x5ba/0x890 [ 1841.875316][ T9686] ? bpf_link_show_fdinfo+0x390/0x390 [ 1841.880725][ T9686] ? lock_chain_count+0x20/0x20 [ 1841.885604][ T9686] __x64_sys_bpf+0x7c/0x90 [ 1841.890048][ T9686] do_syscall_64+0x55/0xb0 [ 1841.894496][ T9686] ? clear_bhb_loop+0x40/0x90 [ 1841.899202][ T9686] ? clear_bhb_loop+0x40/0x90 [ 1841.903918][ T9686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1841.909839][ T9686] RIP: 0033:0x7fd96e79e0d9 [ 1841.914286][ T9686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1841.933921][ T9686] RSP: 002b:00007fd96f6cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1841.942450][ T9686] RAX: ffffffffffffffda RBX: 00007fd96ea25fa0 RCX: 00007fd96e79e0d9 [ 1841.950445][ T9686] RDX: 0000000000000094 RSI: 00002000000018c0 RDI: 0000000000000005 [ 1841.958436][ T9686] RBP: 00007fd96e835024 R08: 0000000000000000 R09: 0000000000000000 [ 1841.966428][ T9686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1841.974437][ T9686] R13: 00007fd96ea26038 R14: 00007fd96ea25fa0 R15: 00007ffdbc43dec8 [ 1841.982444][ T9686]