last executing test programs: 20.070668512s ago: executing program 2 (id=37003): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8112033200fe08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 16.597195505s ago: executing program 2 (id=37016): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c46, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1b, 0xe, &(0x7f0000000700)=ANY=[], &(0x7f0000001340)='syzkaller\x00'}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/212, 0xd4}, {&(0x7f00000012c0)=""/90, 0x5a}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f0000000280)=""/209, 0xd1}], 0x7}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) 16.413431021s ago: executing program 2 (id=37008): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x10042) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 16.281479015s ago: executing program 2 (id=37013): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf35, 0x2}, 0x1224, 0x0, 0x0, 0x9, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="13030000760091"], 0xfe33) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90c24fc60", 0x14}], 0x1}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r3, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0xfb, 0x60000000, 0x0, 0x5a, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135", 0x2}, 0x50) 15.355106035s ago: executing program 2 (id=37022): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x13, 0x0, 0x0, 0xe9, 0x2f, &(0x7f0000000600)=""/47, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x9, 0x1000, 0x1ff}, 0x10, 0x23eeb, r0, 0x0, &(0x7f0000000880), &(0x7f0000000500), 0x10, 0x1}, 0x94) r2 = perf_event_open$cgroup(&(0x7f00000006c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xd, r2, 0x2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)="1400000015000b63d25a80648c0ff65038bdf737", 0x14}], 0x1}, 0x2000c884) 15.172994891s ago: executing program 2 (id=37025): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8112033200fe08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 4.797552105s ago: executing program 1 (id=37057): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) socket$kcm(0xa, 0x1, 0x106) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x3b, &(0x7f0000000100)=r1, 0x120) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x3, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$kcm(0x10, 0x100000000002, 0x4) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40) 4.109124918s ago: executing program 4 (id=37064): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 4.05996374s ago: executing program 1 (id=37065): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.027651951s ago: executing program 0 (id=37066): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa00000000000071104d00000000009500010000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffbfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) 3.893550225s ago: executing program 4 (id=37067): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 3.892519305s ago: executing program 3 (id=37077): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 3.776902679s ago: executing program 1 (id=37068): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x8, &(0x7f0000000100), 0x120) close(0x3) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8800) close(0xffffffffffffffff) r2 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x22, &(0x7f0000000100), 0x120) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1500}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 3.511154577s ago: executing program 3 (id=37069): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf35, 0x2}, 0x1224, 0x0, 0x0, 0x9, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="13030000760091"], 0xfe33) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90c24fc60", 0x14}], 0x1}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r3, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0xfb, 0x60000000, 0x0, 0x5a, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135", 0x2}, 0x50) 3.510078017s ago: executing program 0 (id=37070): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xdd, &(0x7f0000000000)=""/156}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac1414"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 3.509270557s ago: executing program 1 (id=37071): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 3.441222679s ago: executing program 4 (id=37072): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000000080)=""/81, 0x0, 0x51, 0x1, 0x5, 0x10000, @value=r0}, 0x28) close(0xffffffffffffffff) 3.371479331s ago: executing program 0 (id=37073): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c46, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1b, 0xe, &(0x7f0000000700)=ANY=[], &(0x7f0000001340)='syzkaller\x00'}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/212, 0xd4}, {&(0x7f00000012c0)=""/90, 0x5a}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f0000000280)=""/209, 0xd1}], 0x7}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) 2.957606165s ago: executing program 0 (id=37074): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYBLOB="d4e0af2ba9adf567a096e41349f16e811b4b996e0bdb576910db0dd234146ff7af3a59df101558bea2a34a84cc52ba4c2c56f5c673b83962297dd25432ff3b76f4c628c46660e9235fac6c723380eacda9ffe87d8bea49c24878d102c3bf0fd73b0ac751eb3edf738e3c085e3f5d87ef9143d690d60eeae9f57e2a8a1e367d31620594e09302c37f4a6a21bbd56303811fd795d7cc0ad50e956f43edd37347532bf06dc4e6d7f65dbf4be1541995dce00c06a64984a9b8eda70a238d67bbbbc5576be74c6632415ae8fa3ac7562eeed15209337b573358"], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="b70500000000000079108e00000000001d0a00"], 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000640)=r0, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000069043a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 2.957347045s ago: executing program 3 (id=37075): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x11300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x10}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r1, r1}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1212000000f9bd012a128748b429021627e305dd2b7a146efb44", 0x2d}, {0x0}, {&(0x7f0000000080)="2b63320c7af2d9aff0b26c4b22460e531343b1aa73752498781c9f5508d69cbd8984f2477399827b8076eac38f6e", 0x2e}, {&(0x7f0000000140)="8ce856208cafe712d68c07a19e520977f074d95590cb23b03c100eb71684e800000000000000", 0x26}], 0x4}, 0xc414) 2.921830666s ago: executing program 4 (id=37076): perf_event_open(0x0, 0x0, 0xff80000000000000, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, 0x0, 0x0) socketpair(0x0, 0x1, 0x4719, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) 2.420446613s ago: executing program 4 (id=37078): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f300"/14], 0x50) socket$kcm(0x2, 0x5, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) socket$kcm(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000180)={'geneve1\x00', @random="0b9f0712d456"}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2d, &(0x7f0000000040), 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x14, 0x29, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) 2.384558123s ago: executing program 0 (id=37079): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.292635236s ago: executing program 3 (id=37080): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa00000000000071104d00000000009500010000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffbfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) 2.241120348s ago: executing program 1 (id=37081): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2.039581765s ago: executing program 4 (id=37082): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x8, &(0x7f0000000100), 0x120) close(0x3) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8800) close(0xffffffffffffffff) r2 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x22, &(0x7f0000000100), 0x120) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1500}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.037753805s ago: executing program 0 (id=37083): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1.988627266s ago: executing program 1 (id=37084): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.958450677s ago: executing program 3 (id=37085): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xdd, &(0x7f0000000000)=""/156}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac1414"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.701437386s ago: executing program 3 (id=37086): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x19eb8, 0x4, 0x911, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000200)={r1}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xec, 0x5, 0xd, 0xc, 0x0, 0x7fffffff, 0xc0000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0xffffffffffffffff, 0x11}, 0x2, 0x9, 0x7, 0x0, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0x2004}, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) 0s ago: executing program 32 (id=37025): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8112033200fe08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): es in process `syz.4.31505'. [ 1626.085854][ T6961] device team0 entered promiscuous mode [ 1626.106727][ T6961] device team_slave_0 entered promiscuous mode [ 1626.176872][ T6961] device team_slave_1 entered promiscuous mode [ 1626.209592][ T6961] device bridge0 entered promiscuous mode [ 1626.256850][ T6961] device wlan1 entered promiscuous mode [ 1626.414521][ T6961] bridge0: port 2(team0) entered blocking state [ 1626.463010][ T6961] bridge0: port 2(team0) entered disabled state [ 1626.854513][ T6974] __nla_validate_parse: 1 callbacks suppressed [ 1626.854556][ T6974] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.31502'. [ 1626.992171][ T6961] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1627.221504][ T6989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.31519'. [ 1627.331032][ T6989] bridge0: port 2(team0) entered blocking state [ 1627.459842][ T6989] bridge0: port 2(team0) entered disabled state [ 1627.740795][ T6989] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1629.000601][ T7020] validate_nla: 8 callbacks suppressed [ 1629.000643][ T7020] netlink: 'syz.0.31520': attribute type 3 has an invalid length. [ 1629.069279][ T7020] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.31520'. [ 1629.964977][ T7063] netlink: 'syz.2.31541': attribute type 3 has an invalid length. [ 1629.997455][ T7063] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.31541'. [ 1631.554639][ T7103] netlink: 'syz.4.31558': attribute type 3 has an invalid length. [ 1631.625296][ T7103] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.31558'. [ 1631.937214][ T7108] device syzkaller0 entered promiscuous mode [ 1632.479123][ T7119] device syzkaller0 entered promiscuous mode [ 1632.997166][ T7151] netlink: 'syz.3.31575': attribute type 3 has an invalid length. [ 1633.060764][ T7151] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.31575'. [ 1634.210841][ T7193] netlink: 'syz.0.31592': attribute type 3 has an invalid length. [ 1634.245651][ T7193] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.31592'. [ 1634.346436][ T7200] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.31596'. [ 1635.662820][ T7223] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.31615'. [ 1636.323320][ T7233] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.31618'. [ 1636.400761][ T7238] netlink: 105 bytes leftover after parsing attributes in process `syz.3.31604'. [ 1636.427856][ T7233] netlink: 21192 bytes leftover after parsing attributes in process `syz.1.31618'. [ 1636.476181][ T7233] tipc: Started in network mode [ 1636.488314][ T7233] tipc: Node identity 1a, cluster identity 106 [ 1636.496828][ T7233] tipc: Node number set to 26 [ 1636.613330][ T7245] netlink: 'syz.4.31609': attribute type 3 has an invalid length. [ 1636.636073][ T7245] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.31609'. [ 1637.698480][ T7271] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.31624'. [ 1638.103039][ T7277] netlink: 105 bytes leftover after parsing attributes in process `syz.1.31627'. [ 1638.488386][ T7293] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.31633'. [ 1638.497839][ T7293] netlink: 21192 bytes leftover after parsing attributes in process `syz.3.31633'. [ 1638.511104][ T7293] tipc: Started in network mode [ 1638.516006][ T7293] tipc: Node identity 1a, cluster identity 106 [ 1638.543189][ T7293] tipc: Node number set to 26 [ 1638.928963][ T7314] netlink: 105 bytes leftover after parsing attributes in process `syz.4.31642'. [ 1639.564898][ T7322] netlink: 'syz.4.31645': attribute type 3 has an invalid length. [ 1639.608690][ T7322] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.31645'. [ 1640.760536][ T7341] netlink: 132 bytes leftover after parsing attributes in process `syz.1.31663'. [ 1640.810458][ T7343] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.31651'. [ 1640.828316][ T7343] netlink: 21192 bytes leftover after parsing attributes in process `syz.2.31651'. [ 1640.858732][ T7343] tipc: Started in network mode [ 1640.868324][ T7343] tipc: Node identity 1a, cluster identity 106 [ 1640.883766][ T7343] tipc: Node number set to 26 [ 1641.198598][ T7333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1641.413313][ T7360] netlink: 105 bytes leftover after parsing attributes in process `syz.2.31657'. [ 1643.504890][ T7410] netlink: 105 bytes leftover after parsing attributes in process `syz.0.31678'. [ 1644.472771][ T7397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1645.136341][ T7443] netlink: 'syz.3.31698': attribute type 2 has an invalid length. [ 1645.168517][ T7443] netlink: 'syz.3.31698': attribute type 7 has an invalid length. [ 1645.178682][ T7443] netlink: 208644 bytes leftover after parsing attributes in process `syz.3.31698'. [ 1645.191297][ T7446] netlink: 105 bytes leftover after parsing attributes in process `syz.1.31699'. [ 1646.598019][ T7455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1649.623708][ T7482] netlink: 144 bytes leftover after parsing attributes in process `syz.3.31710'. [ 1649.682149][ T7482] device team_slave_0 left promiscuous mode [ 1649.714405][ T7482] team0: Port device team_slave_0 removed [ 1649.725963][ T7482] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1649.860092][ T7497] netlink: 105 bytes leftover after parsing attributes in process `syz.2.31714'. [ 1650.706829][ T7519] netlink: 'syz.3.31727': attribute type 10 has an invalid length. [ 1650.810867][ T7519] netlink: 140 bytes leftover after parsing attributes in process `syz.3.31727'. [ 1650.900732][ T7519] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1650.982901][ T7527] netlink: 'syz.4.31730': attribute type 29 has an invalid length. [ 1651.015314][ T7527] netlink: 'syz.4.31730': attribute type 29 has an invalid length. [ 1651.249027][ T7541] netlink: 192444 bytes leftover after parsing attributes in process `syz.1.31737'. [ 1652.710425][ T7572] netlink: 'syz.0.31748': attribute type 29 has an invalid length. [ 1652.744752][ T7572] netlink: 'syz.0.31748': attribute type 29 has an invalid length. [ 1652.815011][ T7579] netlink: 192444 bytes leftover after parsing attributes in process `syz.4.31753'. [ 1652.873222][ T7575] netlink: 'syz.2.31752': attribute type 10 has an invalid length. [ 1652.894359][ T7575] netlink: 140 bytes leftover after parsing attributes in process `syz.2.31752'. [ 1652.996281][ T7575] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1653.652275][ T7607] netlink: 'syz.3.31766': attribute type 29 has an invalid length. [ 1653.721838][ T7607] netlink: 'syz.3.31766': attribute type 29 has an invalid length. [ 1653.736505][ T7610] netlink: 192444 bytes leftover after parsing attributes in process `syz.2.31768'. [ 1654.184247][ T7620] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.31772'. [ 1654.275254][ T7623] netlink: 'syz.1.31771': attribute type 10 has an invalid length. [ 1654.289682][ T7623] netlink: 140 bytes leftover after parsing attributes in process `syz.1.31771'. [ 1654.334018][ T7623] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1654.715221][ T7643] netlink: 'syz.2.31781': attribute type 29 has an invalid length. [ 1656.196643][ T7663] validate_nla: 1 callbacks suppressed [ 1656.196681][ T7663] netlink: 'syz.4.31789': attribute type 2 has an invalid length. [ 1656.242056][ T7663] netlink: 'syz.4.31789': attribute type 7 has an invalid length. [ 1656.276169][ T7663] netlink: 208644 bytes leftover after parsing attributes in process `syz.4.31789'. [ 1656.467146][ T7672] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.31793'. [ 1656.760473][ T7674] device syzkaller0 entered promiscuous mode [ 1657.997918][ T7694] device syzkaller0 entered promiscuous mode [ 1658.156078][ T7709] netlink: 'syz.1.31806': attribute type 2 has an invalid length. [ 1658.195914][ T7709] netlink: 'syz.1.31806': attribute type 7 has an invalid length. [ 1658.236513][ T7709] netlink: 208644 bytes leftover after parsing attributes in process `syz.1.31806'. [ 1658.493062][ T7713] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.31818'. [ 1658.508295][ T7713] netlink: 16770 bytes leftover after parsing attributes in process `syz.1.31818'. [ 1658.526571][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31818'. [ 1658.590975][ T7718] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.31809'. [ 1659.782705][ T7728] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1659.802077][ T7728] device syzkaller0 entered promiscuous mode [ 1659.911395][ T7745] netlink: 'syz.1.31819': attribute type 3 has an invalid length. [ 1659.919490][ T7745] netlink: 'syz.1.31819': attribute type 6 has an invalid length. [ 1659.927422][ T7745] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.31819'. [ 1660.052004][ T7747] netlink: 'syz.1.31821': attribute type 29 has an invalid length. [ 1660.066248][ T7747] netlink: 'syz.1.31821': attribute type 29 has an invalid length. [ 1660.110351][ T7750] device syzkaller0 entered promiscuous mode [ 1661.352046][ T7775] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.31832'. [ 1661.429766][ T7775] netlink: 16770 bytes leftover after parsing attributes in process `syz.2.31832'. [ 1661.469291][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31832'. [ 1662.372306][ T7786] netlink: 'syz.0.31836': attribute type 29 has an invalid length. [ 1662.442061][ T7786] netlink: 'syz.0.31836': attribute type 29 has an invalid length. [ 1662.461658][ T7790] netlink: 'syz.1.31839': attribute type 10 has an invalid length. [ 1662.573286][ T7790] team0: Port device virt_wifi0 added [ 1662.742135][ T7794] netlink: 'syz.0.31851': attribute type 29 has an invalid length. [ 1662.775154][ T7796] device syzkaller0 entered promiscuous mode [ 1662.801355][ T7794] netlink: 'syz.0.31851': attribute type 29 has an invalid length. [ 1663.144261][ T7807] netlink: 'syz.2.31844': attribute type 2 has an invalid length. [ 1663.171983][ T7807] netlink: 'syz.2.31844': attribute type 7 has an invalid length. [ 1663.198359][ T7807] netlink: 208644 bytes leftover after parsing attributes in process `syz.2.31844'. [ 1664.230230][ T7818] netlink: 'syz.0.31860': attribute type 2 has an invalid length. [ 1664.248584][ T7818] netlink: 'syz.0.31860': attribute type 7 has an invalid length. [ 1664.258545][ T7818] netlink: 208644 bytes leftover after parsing attributes in process `syz.0.31860'. [ 1664.282892][ T7817] device syzkaller0 entered promiscuous mode [ 1664.584569][ T7832] netlink: 'syz.0.31855': attribute type 29 has an invalid length. [ 1664.596199][ T7826] netlink: 208644 bytes leftover after parsing attributes in process `syz.2.31865'. [ 1664.727835][ T7829] device virt_wifi0 entered promiscuous mode [ 1664.775974][ T7829] team0: Port device virt_wifi0 added [ 1664.956151][ T7841] device virt_wifi0 entered promiscuous mode [ 1664.977503][ T7841] team0: Port device virt_wifi0 added [ 1666.380540][ T7875] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.31875'. [ 1668.782457][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.788892][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.850516][ T7882] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.31879'. [ 1668.865058][ T7887] netlink: 123072 bytes leftover after parsing attributes in process `syz.2.31893'. [ 1668.958658][ T7889] validate_nla: 8 callbacks suppressed [ 1668.958719][ T7889] netlink: 'syz.4.31881': attribute type 10 has an invalid length. [ 1669.043118][ T7889] device virt_wifi0 entered promiscuous mode [ 1669.070566][ T7889] team0: Port device virt_wifi0 added [ 1669.991857][ T7937] netlink: 'syz.2.31903': attribute type 29 has an invalid length. [ 1670.014248][ T7934] netlink: 'syz.0.31902': attribute type 10 has an invalid length. [ 1670.052541][ T7934] device virt_wifi0 entered promiscuous mode [ 1670.073124][ T7934] team0: Port device virt_wifi0 added [ 1670.083139][ T7937] netlink: 'syz.2.31903': attribute type 29 has an invalid length. [ 1670.335154][ T7945] netlink: 'syz.1.31919': attribute type 29 has an invalid length. [ 1670.370874][ T7945] netlink: 'syz.1.31919': attribute type 29 has an invalid length. [ 1670.408644][ T7951] netlink: 'syz.2.31921': attribute type 10 has an invalid length. [ 1670.586823][ T7961] netlink: 'syz.0.31926': attribute type 29 has an invalid length. [ 1670.604454][ T7961] netlink: 'syz.0.31926': attribute type 29 has an invalid length. [ 1670.798937][ T7973] device pim6reg1 entered promiscuous mode [ 1670.954086][ T7977] netlink: 'syz.1.31932': attribute type 29 has an invalid length. [ 1672.595891][ T8035] device pim6reg1 entered promiscuous mode [ 1675.765520][ T8063] validate_nla: 5 callbacks suppressed [ 1675.765559][ T8063] netlink: 'syz.0.31958': attribute type 10 has an invalid length. [ 1675.978431][T30205] Bluetooth: hci0: command 0x0406 tx timeout [ 1676.991980][ T8084] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.31965'. [ 1678.111911][ T8128] netlink: 'syz.3.31987': attribute type 10 has an invalid length. [ 1678.481195][ T8151] netlink: 'syz.3.32007': attribute type 10 has an invalid length. [ 1678.852614][ T8170] netlink: 'syz.1.32014': attribute type 10 has an invalid length. [ 1680.947638][ T8238] netlink: 'syz.0.32030': attribute type 1 has an invalid length. [ 1680.975663][ T8238] netlink: 'syz.0.32030': attribute type 4 has an invalid length. [ 1680.992474][ T8238] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.32030'. [ 1681.041274][ T8240] netlink: 'syz.4.32033': attribute type 1 has an invalid length. [ 1681.061094][ T8240] netlink: 'syz.4.32033': attribute type 4 has an invalid length. [ 1681.092052][ T8240] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.32033'. [ 1681.274183][ T8250] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.32039'. [ 1681.410392][ T8250] netlink: 176 bytes leftover after parsing attributes in process `syz.0.32039'. [ 1681.739741][ T8266] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.32047'. [ 1681.764244][ T8272] netlink: 'syz.2.32049': attribute type 1 has an invalid length. [ 1681.788752][ T8272] netlink: 'syz.2.32049': attribute type 4 has an invalid length. [ 1681.818452][ T8272] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.32049'. [ 1681.942849][ T8270] device syzkaller0 entered promiscuous mode [ 1681.993233][ T8277] netlink: 'syz.4.32051': attribute type 1 has an invalid length. [ 1682.007281][ T8277] netlink: 'syz.4.32051': attribute type 4 has an invalid length. [ 1682.026201][ T8277] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.32051'. [ 1682.198339][ T8284] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.32054'. [ 1682.276622][ T8288] netlink: 'syz.1.32063': attribute type 1 has an invalid length. [ 1682.303201][ T8288] netlink: 'syz.1.32063': attribute type 4 has an invalid length. [ 1682.332449][ T8288] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.32063'. [ 1682.943246][ T8309] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.32065'. [ 1684.067581][ T8320] device syzkaller0 entered promiscuous mode [ 1685.282984][ T8354] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.32078'. [ 1685.445588][ T8362] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.32081'. [ 1685.473907][ T8362] netlink: 176 bytes leftover after parsing attributes in process `syz.4.32081'. [ 1685.612597][ T8372] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.32096'. [ 1685.690669][ T8373] netlink: 176 bytes leftover after parsing attributes in process `syz.3.32096'. [ 1685.772651][ T8379] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.32089'. [ 1686.218932][ T8406] validate_nla: 2 callbacks suppressed [ 1686.218973][ T8406] netlink: 'syz.2.32102': attribute type 10 has an invalid length. [ 1686.290545][ T8406] device macvlan0 entered promiscuous mode [ 1686.450413][ T8406] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1688.315023][ T8511] __nla_validate_parse: 1 callbacks suppressed [ 1688.315043][ T8511] netlink: 2639 bytes leftover after parsing attributes in process `syz.1.32150'. [ 1689.595123][ T8565] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.32171'. [ 1690.194744][ T8602] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.32190'. [ 1690.714913][ T8635] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.32205'. [ 1690.874272][ T8643] netlink: 'syz.0.32210': attribute type 10 has an invalid length. [ 1690.913604][ T8643] device macvlan0 entered promiscuous mode [ 1691.152608][ T8643] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1691.193064][ T8653] netlink: 'syz.3.32217': attribute type 4 has an invalid length. [ 1691.211654][ T8653] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.32217'. [ 1691.483173][ T8671] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.32224'. [ 1691.696014][ T8682] netlink: 60823 bytes leftover after parsing attributes in process `syz.3.32229'. [ 1691.735155][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32229'. [ 1692.699458][ T8696] netlink: 'syz.4.32232': attribute type 10 has an invalid length. [ 1692.754722][ T8696] device macvlan0 entered promiscuous mode [ 1692.774992][ T8696] bond0: (slave macvlan0): Error -22 calling dev_set_mtu [ 1692.897194][ T8704] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.32238'. [ 1692.955772][ T8711] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.32238'. [ 1692.990577][ T8712] netlink: 'syz.2.32242': attribute type 4 has an invalid length. [ 1696.512806][ T8745] netlink: 'syz.1.32253': attribute type 10 has an invalid length. [ 1696.531140][ T8745] device macvlan0 entered promiscuous mode [ 1696.720280][ T8745] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1697.039270][ T8770] __nla_validate_parse: 2 callbacks suppressed [ 1697.039311][ T8770] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.32268'. [ 1697.464769][ T8793] netlink: 44 bytes leftover after parsing attributes in process `syz.0.32287'. [ 1697.600367][ T8796] netlink: 'syz.3.32277': attribute type 10 has an invalid length. [ 1697.645497][ T8796] device macvlan0 entered promiscuous mode [ 1698.259767][ T8796] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1698.767329][ T8814] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.32284'. [ 1699.275573][ T8837] netlink: 44 bytes leftover after parsing attributes in process `syz.4.32295'. [ 1699.318251][ T8841] netlink: 'syz.0.32296': attribute type 10 has an invalid length. [ 1700.033107][ T8851] netlink: 830 bytes leftover after parsing attributes in process `syz.1.32298'. [ 1700.199664][ T8855] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.32301'. [ 1701.460186][ T8886] netlink: 'syz.0.32312': attribute type 10 has an invalid length. [ 1701.570882][ T8891] netlink: 'syz.3.32316': attribute type 21 has an invalid length. [ 1701.598207][ T8891] netlink: 'syz.3.32316': attribute type 19 has an invalid length. [ 1701.606350][ T8891] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.32316'. [ 1707.164614][ T8969] netlink: 'syz.1.32346': attribute type 25 has an invalid length. [ 1707.218617][ T8969] netlink: 'syz.1.32346': attribute type 9 has an invalid length. [ 1713.072299][ T9070] netlink: 'syz.4.32384': attribute type 1 has an invalid length. [ 1716.911095][ T9124] netlink: 'syz.2.32406': attribute type 39 has an invalid length. [ 1717.305155][ T9140] netlink: 'syz.0.32425': attribute type 39 has an invalid length. [ 1718.627760][ T9165] netlink: 'syz.3.32436': attribute type 39 has an invalid length. [ 1719.761016][ T9182] device syzkaller0 entered promiscuous mode [ 1721.550010][ T9207] netlink: 8161 bytes leftover after parsing attributes in process `syz.2.32445'. [ 1722.044276][ T9215] netlink: 'syz.2.32448': attribute type 1 has an invalid length. [ 1726.318571][ T9264] sctp: [Deprecated]: syz.0.32468 (pid 9264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1726.318571][ T9264] Use struct sctp_sack_info instead [ 1729.157409][ T9309] sctp: [Deprecated]: syz.4.32484 (pid 9309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1729.157409][ T9309] Use struct sctp_sack_info instead [ 1729.963240][ T9326] device syzkaller0 entered promiscuous mode [ 1730.225727][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.232303][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.391765][ T9345] sctp: [Deprecated]: syz.2.32499 (pid 9345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1730.391765][ T9345] Use struct sctp_sack_info instead [ 1730.495524][ T9348] netlink: 14 bytes leftover after parsing attributes in process `syz.4.32501'. [ 1730.569661][ T9348] device hsr_slave_1 left promiscuous mode [ 1730.983246][ T9366] netlink: 132 bytes leftover after parsing attributes in process `syz.4.32506'. [ 1731.746426][ T9391] device pim6reg1 entered promiscuous mode [ 1732.817694][ T9441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.32536'. [ 1732.883418][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32536'. [ 1733.204812][ T9458] device syzkaller0 entered promiscuous mode [ 1733.225440][ T9456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.32546'. [ 1733.956650][ T9482] netlink: 'syz.4.32552': attribute type 2 has an invalid length. [ 1734.022051][ T9482] netlink: 198692 bytes leftover after parsing attributes in process `syz.4.32552'. [ 1734.064036][ T9475] device syzkaller0 entered promiscuous mode [ 1734.263829][ T9488] device syzkaller0 entered promiscuous mode [ 1734.667701][ T9516] netlink: 40 bytes leftover after parsing attributes in process `syz.1.32567'. [ 1734.741451][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32567'. [ 1734.865201][ T9519] device pim6reg1 entered promiscuous mode [ 1735.211949][ T9524] netlink: 14 bytes leftover after parsing attributes in process `syz.2.32569'. [ 1735.229125][ T9524] device hsr_slave_0 left promiscuous mode [ 1735.255099][ T9524] device hsr_slave_1 left promiscuous mode [ 1735.583362][ T9539] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.32584'. [ 1735.900847][ T9560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.32582'. [ 1735.932764][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32582'. [ 1736.072775][ T9568] netlink: 14 bytes leftover after parsing attributes in process `syz.3.32587'. [ 1736.104259][ T9568] device hsr_slave_0 left promiscuous mode [ 1736.121833][ T9568] device hsr_slave_1 left promiscuous mode [ 1736.496319][ T9576] device pim6reg1 entered promiscuous mode [ 1736.923355][ T4189] Bluetooth: hci0: Received unexpected HCI Event 00000000 [ 1736.967756][ T9598] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.32597'. [ 1737.220157][ T9604] netlink: 14 bytes leftover after parsing attributes in process `syz.1.32600'. [ 1737.261496][ T9604] device hsr_slave_0 left promiscuous mode [ 1737.335712][ T9604] device hsr_slave_1 left promiscuous mode [ 1738.052327][ T9614] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.32604'. [ 1738.751559][ T9643] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.32620'. [ 1739.747721][ T9663] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.32627'. [ 1740.226574][ T4189] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 1740.326442][ T9685] __sock_release: fasync list not empty! [ 1740.718325][ T9684] can: request_module (can-proto-0) failed. [ 1741.479830][ T9729] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.32656'. [ 1741.574583][ T9730] netlink: 'syz.0.32657': attribute type 1 has an invalid length. [ 1741.604075][ T9730] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.32657'. [ 1742.108266][ T9756] __sock_release: fasync list not empty! [ 1742.552654][ T9768] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.32672'. [ 1743.287738][ T9783] device pim6reg1 entered promiscuous mode [ 1743.898960][ T9797] can: request_module (can-proto-0) failed. [ 1744.162075][ T9812] netlink: 'syz.2.32689': attribute type 4 has an invalid length. [ 1744.539427][ T9831] device syzkaller0 entered promiscuous mode [ 1745.323692][ T9870] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 1745.463627][ T9874] device syzkaller0 entered promiscuous mode [ 1745.894391][ T9890] device pim6reg1 entered promiscuous mode [ 1746.194360][ T9906] device syzkaller0 entered promiscuous mode [ 1746.866410][ T9932] netlink: 'syz.3.32743': attribute type 21 has an invalid length. [ 1746.924158][ T9932] netlink: 132 bytes leftover after parsing attributes in process `syz.3.32743'. [ 1747.934711][ T9989] netlink: 'syz.2.32768': attribute type 9 has an invalid length. [ 1748.011990][ T9989] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.32768'. [ 1749.008270][T10013] netlink: 'syz.4.32778': attribute type 21 has an invalid length. [ 1749.026079][T10013] netlink: 132 bytes leftover after parsing attributes in process `syz.4.32778'. [ 1749.276814][T10020] netlink: 'syz.3.32781': attribute type 9 has an invalid length. [ 1749.307834][T10020] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.32781'. [ 1753.228243][T10079] Q±6ã`Ò˜: renamed from lo [ 1754.306453][T10111] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.32825'. [ 1755.371344][T10136] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.32826'. [ 1757.290055][T10182] device syzkaller0 entered promiscuous mode [ 1758.502831][T10221] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.32862'. [ 1759.519182][T10234] Q±6ã`Ò˜: renamed from lo [ 1759.741257][T10250] netlink: 63763 bytes leftover after parsing attributes in process `syz.3.32871'. [ 1760.294894][T10269] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.32878'. [ 1761.304973][T10279] device syzkaller0 entered promiscuous mode [ 1761.401604][T10297] device syzkaller0 entered promiscuous mode [ 1761.586382][T10309] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.32894'. [ 1762.121507][T10334] netlink: 63763 bytes leftover after parsing attributes in process `syz.0.32905'. [ 1762.440465][T10350] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.32910'. [ 1763.589307][T10389] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.32929'. [ 1763.722796][T10395] netlink: 152 bytes leftover after parsing attributes in process `syz.4.32932'. [ 1763.881204][T10402] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.32935'. [ 1763.985176][T10402] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1766.861296][T10440] netlink: 2639 bytes leftover after parsing attributes in process `syz.3.32952'. [ 1768.124493][T10463] tap0: tun_chr_ioctl cmd 2148553947 [ 1770.501236][T10513] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.32980'. [ 1770.566619][T10510] tap0: tun_chr_ioctl cmd 2148553947 [ 1770.580784][T10513] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1772.034477][T10549] tap0: tun_chr_ioctl cmd 2148553947 [ 1774.044582][T10616] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.33021'. [ 1774.130796][T10616] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1774.960988][T10635] tap0: tun_chr_ioctl cmd 2148553947 [ 1776.901041][T10653] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.33034'. [ 1776.988037][T10653] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1778.436819][T10690] tap0: tun_chr_ioctl cmd 2148553947 [ 1778.674107][T10697] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.33051'. [ 1778.733986][T10697] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1778.750141][T10697] CPU: 0 PID: 10697 Comm: syz.0.33051 Not tainted syzkaller #0 [ 1778.757747][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1778.767836][T10697] Call Trace: [ 1778.771234][T10697] [ 1778.774201][T10697] dump_stack_lvl+0x188/0x250 [ 1778.778931][T10697] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1778.785222][T10697] ? show_regs_print_info+0x20/0x20 [ 1778.790457][T10697] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1778.796657][T10697] sysfs_warn_dup+0x8a/0xa0 [ 1778.801194][T10697] sysfs_do_create_link_sd+0xc0/0x110 [ 1778.806778][T10697] device_add+0x7f6/0x1000 [ 1778.811242][T10697] wiphy_register+0x1e81/0x2c30 [ 1778.816156][T10697] ? cfg80211_event_work+0x40/0x40 [ 1778.821319][T10697] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1778.827607][T10697] ieee80211_register_hw+0x2aa1/0x3af0 [ 1778.833125][T10697] ? ieee80211_tasklet_handler+0x20/0x20 [ 1778.838770][T10697] ? lockdep_hardirqs_on+0x94/0x140 [ 1778.843987][T10697] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1778.850174][T10697] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1778.855937][T10697] hwsim_new_radio_nl+0xa6f/0xc40 [ 1778.860996][T10697] genl_rcv_msg+0xcea/0xf90 [ 1778.865507][T10697] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1778.871699][T10697] ? genl_bind+0x380/0x380 [ 1778.876133][T10697] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1778.882129][T10697] ? lock_chain_count+0x20/0x20 [ 1778.886999][T10697] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1778.893162][T10697] ? lockdep_hardirqs_on+0x94/0x140 [ 1778.898374][T10697] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1778.904538][T10697] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1778.911069][T10697] ? lock_acquire+0x208/0x400 [ 1778.915770][T10697] netlink_rcv_skb+0x1f5/0x440 [ 1778.920542][T10697] ? genl_bind+0x380/0x380 [ 1778.924978][T10697] ? netlink_ack+0xb50/0xb50 [ 1778.929585][T10697] ? __lock_acquire+0x7d10/0x7d10 [ 1778.934630][T10697] ? down_read+0x1aa/0x2e0 [ 1778.939238][T10697] genl_rcv+0x24/0x40 [ 1778.943247][T10697] netlink_unicast+0x774/0x920 [ 1778.948032][T10697] netlink_sendmsg+0x8ba/0xbe0 [ 1778.952818][T10697] ? netlink_getsockopt+0x570/0x570 [ 1778.958024][T10697] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1778.964186][T10697] ? aa_sock_msg_perm+0x94/0x150 [ 1778.969137][T10697] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1778.974430][T10697] ? security_socket_sendmsg+0x7c/0xa0 [ 1778.979991][T10697] ? netlink_getsockopt+0x570/0x570 [ 1778.985193][T10697] ____sys_sendmsg+0x5b7/0x8f0 [ 1778.990088][T10697] ? __sys_sendmsg_sock+0x30/0x30 [ 1778.995139][T10697] ? import_iovec+0x6f/0xa0 [ 1778.999880][T10697] ___sys_sendmsg+0x236/0x2e0 [ 1779.004602][T10697] ? __sys_sendmsg+0x2a0/0x2a0 [ 1779.009405][T10697] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1779.016057][T10697] __se_sys_sendmsg+0x1af/0x290 [ 1779.020932][T10697] ? __x64_sys_sendmsg+0x80/0x80 [ 1779.025903][T10697] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1779.031813][T10697] do_syscall_64+0x4c/0xa0 [ 1779.036270][T10697] ? clear_bhb_loop+0x30/0x80 [ 1779.041131][T10697] ? clear_bhb_loop+0x30/0x80 [ 1779.045821][T10697] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1779.051721][T10697] RIP: 0033:0x7f141e423e59 [ 1779.056149][T10697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1779.075882][T10697] RSP: 002b:00007f141c67d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1779.084307][T10697] RAX: ffffffffffffffda RBX: 00007f141e69cfa0 RCX: 00007f141e423e59 [ 1779.092284][T10697] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1779.100261][T10697] RBP: 00007f141e4b9d6f R08: 0000000000000000 R09: 0000000000000000 [ 1779.108252][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1779.116228][T10697] R13: 00007f141e69d038 R14: 00007f141e69cfa0 R15: 00007ffffed5c8b8 [ 1779.124232][T10697] [ 1780.014117][T10735] netlink: 'syz.4.33068': attribute type 10 has an invalid length. [ 1780.123269][T10735] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1783.290560][T10815] sctp: [Deprecated]: syz.0.33097 (pid 10815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1783.290560][T10815] Use struct sctp_sack_info instead [ 1783.701247][T10821] netlink: 60 bytes leftover after parsing attributes in process `syz.3.33101'. [ 1783.946686][T10831] netlink: 'syz.4.33105': attribute type 13 has an invalid length. [ 1783.960134][T10831] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.33105'. [ 1784.055045][T10837] tap0: tun_chr_ioctl cmd 2148553947 [ 1785.829232][T10846] device syzkaller0 entered promiscuous mode [ 1786.119147][T10871] netlink: 'syz.3.33119': attribute type 13 has an invalid length. [ 1786.128656][T10871] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.33119'. [ 1786.158843][T10874] sctp: [Deprecated]: syz.4.33120 (pid 10874) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1786.158843][T10874] Use struct sctp_sack_info instead [ 1786.297816][T10878] device syzkaller0 entered promiscuous mode [ 1786.506138][T10890] device syzkaller0 entered promiscuous mode [ 1786.805250][T10905] tap0: tun_chr_ioctl cmd 2148553947 [ 1788.080191][T10915] device syzkaller0 entered promiscuous mode [ 1788.460200][T10934] device syzkaller0 entered promiscuous mode [ 1788.984494][T10963] sctp: [Deprecated]: syz.3.33155 (pid 10963) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1788.984494][T10963] Use struct sctp_sack_info instead [ 1789.630947][T10965] tap0: tun_chr_ioctl cmd 2148553947 [ 1789.943497][T10969] device syzkaller0 entered promiscuous mode [ 1790.996982][T11011] device syzkaller0 entered promiscuous mode [ 1791.088773][T29983] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1791.661533][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.667932][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.117183][T11059] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1792.318778][T11067] tap0: tun_chr_ioctl cmd 2148553947 [ 1793.599752][T11099] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1793.865487][T11113] netlink: 'syz.3.33217': attribute type 10 has an invalid length. [ 1793.935912][T11113] device syz_tun entered promiscuous mode [ 1793.989435][T11113] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1795.178772][T11158] tap0: tun_chr_ioctl cmd 2148553947 [ 1796.204435][T11190] tap0: tun_chr_ioctl cmd 2148553947 [ 1796.815148][T11206] device syzkaller0 entered promiscuous mode [ 1797.515955][T11228] netlink: 132 bytes leftover after parsing attributes in process `syz.1.33277'. [ 1797.601157][T11234] netlink: 'syz.1.33277': attribute type 12 has an invalid length. [ 1797.646168][T11234] netlink: 132 bytes leftover after parsing attributes in process `syz.1.33277'. [ 1797.801375][T11228] netlink: 'syz.1.33277': attribute type 21 has an invalid length. [ 1797.839887][T11228] netlink: 156 bytes leftover after parsing attributes in process `syz.1.33277'. [ 1798.854039][T11277] netlink: 132 bytes leftover after parsing attributes in process `syz.2.33290'. [ 1798.906785][T11277] netlink: 'syz.2.33290': attribute type 12 has an invalid length. [ 1798.917683][T11277] netlink: 132 bytes leftover after parsing attributes in process `syz.2.33290'. [ 1799.173164][T11287] device syzkaller0 entered promiscuous mode [ 1799.197593][T11290] netlink: 'syz.2.33290': attribute type 21 has an invalid length. [ 1799.227105][T11290] netlink: 156 bytes leftover after parsing attributes in process `syz.2.33290'. [ 1799.735016][T11311] netlink: 'syz.3.33310': attribute type 21 has an invalid length. [ 1799.744270][T11311] netlink: 156 bytes leftover after parsing attributes in process `syz.3.33310'. [ 1800.173540][T11325] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.33305'. [ 1800.356118][T11329] netlink: 180 bytes leftover after parsing attributes in process `syz.1.33307'. [ 1800.797267][T11353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.33315'. [ 1800.920945][T11356] netlink: 'syz.0.33315': attribute type 21 has an invalid length. [ 1802.523877][T11400] netlink: 'syz.4.33334': attribute type 12 has an invalid length. [ 1802.548418][T11400] __nla_validate_parse: 3 callbacks suppressed [ 1802.548464][T11400] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33334'. [ 1802.630954][T11403] netlink: 'syz.4.33334': attribute type 21 has an invalid length. [ 1802.647041][T11403] netlink: 156 bytes leftover after parsing attributes in process `syz.4.33334'. [ 1802.784999][T11409] netlink: 180 bytes leftover after parsing attributes in process `syz.3.33338'. [ 1803.053471][T11424] netlink: 'syz.1.33344': attribute type 39 has an invalid length. [ 1804.613784][T11469] netlink: 132 bytes leftover after parsing attributes in process `syz.1.33364'. [ 1804.655992][T11469] netlink: 'syz.1.33364': attribute type 12 has an invalid length. [ 1804.675676][T11469] netlink: 132 bytes leftover after parsing attributes in process `syz.1.33364'. [ 1804.741158][T11477] netlink: 'syz.1.33364': attribute type 21 has an invalid length. [ 1804.782410][T11477] netlink: 156 bytes leftover after parsing attributes in process `syz.1.33364'. [ 1806.051325][T11512] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33382'. [ 1806.106388][T11514] netlink: 'syz.4.33382': attribute type 12 has an invalid length. [ 1806.128209][T11514] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33382'. [ 1806.180015][T11512] netlink: 'syz.4.33382': attribute type 21 has an invalid length. [ 1806.201965][T11512] netlink: 156 bytes leftover after parsing attributes in process `syz.4.33382'. [ 1807.403340][T11547] netlink: 132 bytes leftover after parsing attributes in process `syz.2.33397'. [ 1807.492970][T11547] netlink: 'syz.2.33397': attribute type 12 has an invalid length. [ 1807.570351][T11547] netlink: 132 bytes leftover after parsing attributes in process `syz.2.33397'. [ 1807.631854][T11554] netlink: 'syz.2.33397': attribute type 21 has an invalid length. [ 1807.705138][T11554] netlink: 156 bytes leftover after parsing attributes in process `syz.2.33397'. [ 1809.487724][T11615] device syzkaller0 entered promiscuous mode [ 1812.394663][T11681] netlink: 'syz.3.33448': attribute type 12 has an invalid length. [ 1812.447605][T11681] netlink: 132 bytes leftover after parsing attributes in process `syz.3.33448'. [ 1812.469442][T11678] netlink: 'syz.3.33448': attribute type 21 has an invalid length. [ 1812.526973][T11678] netlink: 156 bytes leftover after parsing attributes in process `syz.3.33448'. [ 1812.540730][T11684] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.33451'. [ 1813.284236][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33462'. [ 1814.204732][T11720] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.33467'. [ 1815.198371][T11763] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.33485'. [ 1818.101663][T11834] IPv6: pim6reg1: Disabled Multicast RS [ 1819.210091][T11863] netlink: 'syz.2.33529': attribute type 21 has an invalid length. [ 1819.238295][T11863] netlink: 'syz.2.33529': attribute type 12 has an invalid length. [ 1819.246411][T11863] netlink: 'syz.2.33529': attribute type 13 has an invalid length. [ 1819.293325][T11863] netlink: 'syz.2.33529': attribute type 14 has an invalid length. [ 1819.338240][T11863] netlink: 'syz.2.33529': attribute type 15 has an invalid length. [ 1819.381454][T11863] netlink: 'syz.2.33529': attribute type 16 has an invalid length. [ 1819.408201][T11863] netlink: 12926 bytes leftover after parsing attributes in process `syz.2.33529'. [ 1819.455845][T11872] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.33533'. [ 1823.808878][T11946] netlink: 'syz.3.33574': attribute type 3 has an invalid length. [ 1826.599409][T12019] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.33596'. [ 1826.823780][T12016] netlink: 14 bytes leftover after parsing attributes in process `syz.2.33595'. [ 1826.992720][T12016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1827.127624][T12016] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1827.548363][T12016] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1827.610971][T12016] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1827.651806][T12016] bond0 (unregistering): Released all slaves [ 1827.705110][T12054] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.33608'. [ 1829.199934][T12087] netlink: 14 bytes leftover after parsing attributes in process `syz.4.33622'. [ 1829.352439][T12087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1829.425564][T12087] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1829.502880][T12087] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1829.570063][T12087] bond0 (unregistering): Released all slaves [ 1830.017050][T12123] IPv6: pim6reg1: Disabled Multicast RS [ 1830.194515][T12130] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.33635'. [ 1830.687821][T12147] netlink: 14 bytes leftover after parsing attributes in process `syz.1.33640'. [ 1830.913043][T12147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1830.965767][T12147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1831.035704][T12147] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1831.131868][T12147] bond0 (unregistering): Released all slaves [ 1831.586903][T12172] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.33648'. [ 1832.054558][T12185] netlink: 14 bytes leftover after parsing attributes in process `syz.0.33666'. [ 1832.336690][T12185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1832.420448][T12185] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1832.464702][T12185] bond0 (unregistering): Released all slaves [ 1832.731502][T12215] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.33665'. [ 1832.782965][T12213] device syzkaller0 entered promiscuous mode [ 1833.521850][T12246] netlink: 14 bytes leftover after parsing attributes in process `syz.3.33680'. [ 1833.763076][T12246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1833.846429][T12246] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1833.935580][T12246] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1834.198576][T12246] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1834.267264][T12246] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 1834.378915][T12246] bond0 (unregistering): Released all slaves [ 1834.558210][T12264] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1834.910712][T12277] device syzkaller0 entered promiscuous mode [ 1835.595176][T12294] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.33695'. [ 1836.259889][T12306] netlink: 14 bytes leftover after parsing attributes in process `syz.3.33700'. [ 1836.477160][T12323] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.33705'. [ 1837.416742][T12338] netlink: 'syz.3.33712': attribute type 12 has an invalid length. [ 1837.461455][T12338] netlink: 'syz.3.33712': attribute type 11 has an invalid length. [ 1837.583237][T12338] netlink: 188816 bytes leftover after parsing attributes in process `syz.3.33712'. [ 1840.829361][T12380] netlink: 830 bytes leftover after parsing attributes in process `syz.2.33728'. [ 1841.079059][T12384] netlink: 'syz.2.33732': attribute type 10 has an invalid length. [ 1841.094319][T12384] netlink: 40 bytes leftover after parsing attributes in process `syz.2.33732'. [ 1841.142201][T12384] device ipvlan1 entered promiscuous mode [ 1841.297332][T12384] bridge0: port 2(ipvlan1) entered blocking state [ 1841.320082][T12384] bridge0: port 2(ipvlan1) entered disabled state [ 1841.462575][T12384] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1841.509621][T12387] netlink: 76 bytes leftover after parsing attributes in process `syz.0.33731'. [ 1844.470684][T12410] device syzkaller0 entered promiscuous mode [ 1844.657156][T12416] device syzkaller0 entered promiscuous mode [ 1844.740489][T12423] netlink: 208644 bytes leftover after parsing attributes in process `syz.1.33747'. [ 1844.763951][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33747'. [ 1844.830287][T12426] device syzkaller0 entered promiscuous mode [ 1845.169374][T12445] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.33756'. [ 1847.412056][T12468] device syzkaller0 entered promiscuous mode [ 1848.747062][T12503] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.33778'. [ 1850.611837][T12519] netlink: 208644 bytes leftover after parsing attributes in process `syz.3.33784'. [ 1850.645607][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33784'. [ 1853.110444][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.116981][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.924779][T12557] device syzkaller0 entered promiscuous mode [ 1855.256699][T12581] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.33811'. [ 1855.601472][T12602] device syzkaller0 entered promiscuous mode [ 1855.973922][T12611] netlink: 'syz.1.33825': attribute type 3 has an invalid length. [ 1857.250750][T12634] netlink: 'syz.3.33836': attribute type 1 has an invalid length. [ 1857.294179][T12634] netlink: 'syz.3.33836': attribute type 4 has an invalid length. [ 1857.326945][T12634] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.33836'. [ 1858.071859][T12653] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.33843'. [ 1858.276808][T12663] netlink: 63747 bytes leftover after parsing attributes in process `syz.2.33849'. [ 1858.301819][T12665] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.33847'. [ 1858.318817][T12665] openvswitch: netlink: Key type 4112 is out of range max 29 [ 1858.486536][T12669] netlink: 'syz.3.33850': attribute type 9 has an invalid length. [ 1858.517723][T12669] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.33850'. [ 1858.718447][T12683] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.33858'. [ 1859.438198][T12675] netlink: 'syz.3.33850': attribute type 9 has an invalid length. [ 1859.470527][T12675] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.33850'. [ 1860.056908][T12724] netlink: 63747 bytes leftover after parsing attributes in process `syz.3.33870'. [ 1860.080461][T12726] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.33872'. [ 1860.090832][T12726] openvswitch: netlink: Key type 4112 is out of range max 29 [ 1860.232944][T12731] netlink: 'syz.0.33876': attribute type 3 has an invalid length. [ 1860.319260][T12736] netlink: 'syz.4.33877': attribute type 9 has an invalid length. [ 1860.329744][T12736] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.33877'. [ 1860.878326][T12738] netlink: 'syz.4.33877': attribute type 9 has an invalid length. [ 1861.195857][T12762] netlink: 'syz.1.33899': attribute type 9 has an invalid length. [ 1862.341073][T12765] netlink: 'syz.1.33899': attribute type 9 has an invalid length. [ 1862.366621][T12772] netlink: 'syz.2.33890': attribute type 3 has an invalid length. [ 1862.394623][T12765] __nla_validate_parse: 2 callbacks suppressed [ 1862.394643][T12765] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.33899'. [ 1862.849080][T12791] netlink: 'syz.1.33896': attribute type 10 has an invalid length. [ 1863.070142][T12791] team0: Device wg1 is of different type [ 1863.081559][T12803] netlink: 'syz.4.33901': attribute type 3 has an invalid length. [ 1863.114724][T12803] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.33901'. [ 1863.226836][T12790] delete_channel: no stack [ 1863.972630][T12842] netlink: 'syz.2.33921': attribute type 3 has an invalid length. [ 1864.008368][T12842] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.33921'. [ 1864.126138][T12847] netlink: 188 bytes leftover after parsing attributes in process `syz.3.33924'. [ 1864.176097][T12849] netlink: 'syz.2.33923': attribute type 9 has an invalid length. [ 1864.215073][T12849] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.33923'. [ 1864.899185][T12852] netlink: 'syz.2.33923': attribute type 9 has an invalid length. [ 1864.943191][T12852] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.33923'. [ 1865.404856][T12873] netlink: 'syz.0.33936': attribute type 3 has an invalid length. [ 1865.416780][T12864] device syzkaller0 entered promiscuous mode [ 1865.433642][T12873] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.33936'. [ 1865.455225][T12870] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.33945'. [ 1865.479187][T12870] netlink: 'syz.2.33945': attribute type 1 has an invalid length. [ 1865.490113][T12870] netlink: 21820 bytes leftover after parsing attributes in process `syz.2.33945'. [ 1865.713771][T12882] __sock_release: fasync list not empty! [ 1865.922596][T12887] __sock_release: fasync list not empty! [ 1866.225844][T12903] netlink: 'syz.0.33949': attribute type 10 has an invalid length. [ 1866.384540][T12911] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.33951'. [ 1866.559490][T12903] device wg1 entered promiscuous mode [ 1866.567145][T12903] team0: Device wg1 is of different type [ 1866.646075][T12911] netlink: 'syz.3.33951': attribute type 1 has an invalid length. [ 1866.748458][T12902] delete_channel: no stack [ 1867.086172][T12919] device syzkaller0 entered promiscuous mode [ 1867.298550][T12932] __sock_release: fasync list not empty! [ 1867.742416][T12934] __nla_validate_parse: 1 callbacks suppressed [ 1867.742435][T12934] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.33963'. [ 1867.879448][T12940] netlink: 144 bytes leftover after parsing attributes in process `syz.3.33965'. [ 1867.917390][T12940] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1867.992319][T12944] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.33967'. [ 1868.002845][T12944] netlink: 'syz.1.33967': attribute type 1 has an invalid length. [ 1868.012353][T12944] netlink: 21820 bytes leftover after parsing attributes in process `syz.1.33967'. [ 1868.361836][T12949] netlink: 'syz.2.33968': attribute type 10 has an invalid length. [ 1868.788776][T12949] device wg1 entered promiscuous mode [ 1868.803641][T12949] team0: Device wg1 is of different type [ 1868.888636][T12964] __sock_release: fasync list not empty! [ 1868.962286][T12968] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.33975'. [ 1869.021902][T12948] delete_channel: no stack [ 1869.124606][T12976] device syzkaller0 entered promiscuous mode [ 1869.364195][T12985] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.33981'. [ 1869.549944][T12987] netlink: 'syz.3.33983': attribute type 10 has an invalid length. [ 1870.025699][T12987] device wg1 entered promiscuous mode [ 1870.075267][T12987] team0: Device wg1 is of different type [ 1870.549298][T12986] delete_channel: no stack [ 1870.595635][T12996] netlink: 144 bytes leftover after parsing attributes in process `syz.0.33986'. [ 1870.637208][T12996] device team_slave_0 left promiscuous mode [ 1870.703138][T12996] team0: Port device team_slave_0 removed [ 1870.825964][T13002] netlink: 188 bytes leftover after parsing attributes in process `syz.4.33988'. [ 1870.889002][T12996] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1870.949550][T13006] __sock_release: fasync list not empty! [ 1871.082786][T13008] netlink: 'syz.4.33992': attribute type 1 has an invalid length. [ 1871.111716][T13008] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.33992'. [ 1871.337590][T13021] netlink: 188 bytes leftover after parsing attributes in process `syz.0.34007'. [ 1871.570739][T13025] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1871.631665][T13025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1872.114260][T13047] __sock_release: fasync list not empty! [ 1872.176427][T13042] C: renamed from team_slave_0 [ 1872.215748][T13042] netlink: 'syz.1.34004': attribute type 3 has an invalid length. [ 1872.277051][T13042] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1872.400515][T13050] device team_slave_0 left promiscuous mode [ 1872.448781][T13050] team0: Port device team_slave_0 removed [ 1872.474146][T13050] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1872.963770][T13061] netlink: 'syz.1.34010': attribute type 1 has an invalid length. [ 1873.003399][T13061] __nla_validate_parse: 5 callbacks suppressed [ 1873.003435][T13061] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.34010'. [ 1873.097976][T13068] netlink: 188 bytes leftover after parsing attributes in process `syz.2.34013'. [ 1873.580356][T13075] netlink: 128 bytes leftover after parsing attributes in process `syz.3.34016'. [ 1873.623968][T13075] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1873.700687][T13075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1873.756024][T13081] netlink: 'syz.4.34018': attribute type 10 has an invalid length. [ 1873.767552][T13081] netlink: 55 bytes leftover after parsing attributes in process `syz.4.34018'. [ 1874.364009][T13101] netlink: 'syz.0.34025': attribute type 3 has an invalid length. [ 1874.382620][T13101] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.34025'. [ 1874.522943][T13100] netlink: 'syz.0.34025': attribute type 12 has an invalid length. [ 1874.547947][T13100] netlink: 132 bytes leftover after parsing attributes in process `syz.0.34025'. [ 1875.077796][T13116] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.34032'. [ 1875.323703][T13120] netlink: 128 bytes leftover after parsing attributes in process `syz.4.34034'. [ 1875.379691][T13120] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1875.452885][T13128] netlink: 'syz.0.34037': attribute type 10 has an invalid length. [ 1875.464137][T13128] netlink: 55 bytes leftover after parsing attributes in process `syz.0.34037'. [ 1876.236202][T13130] netlink: 'syz.3.34039': attribute type 10 has an invalid length. [ 1876.263277][T13130] team0: Device wg1 is of different type [ 1876.314237][T13129] delete_channel: no stack [ 1876.406228][T13140] netlink: 'syz.1.34052': attribute type 10 has an invalid length. [ 1876.452338][T13140] team0: Device wg1 is of different type [ 1876.513303][T13139] delete_channel: no stack [ 1876.656145][T13149] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.34045'. [ 1876.761949][T13151] C: renamed from team_slave_0 [ 1876.777482][T13151] netlink: 'syz.0.34056': attribute type 3 has an invalid length. [ 1876.808612][T13151] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1877.169793][T13163] netlink: 'syz.3.34050': attribute type 25 has an invalid length. [ 1877.265301][T13165] device syzkaller0 entered promiscuous mode [ 1877.487259][T13171] validate_nla: 1 callbacks suppressed [ 1877.487277][T13171] netlink: 'syz.2.34066': attribute type 25 has an invalid length. [ 1877.511253][T13171] netlink: 'syz.2.34066': attribute type 29 has an invalid length. [ 1879.099523][T13183] netlink: 'syz.1.34069': attribute type 10 has an invalid length. [ 1879.115996][T13183] __nla_validate_parse: 2 callbacks suppressed [ 1879.116036][T13183] netlink: 55 bytes leftover after parsing attributes in process `syz.1.34069'. [ 1879.359962][T13185] netlink: 'syz.2.34058': attribute type 10 has an invalid length. [ 1879.374829][T13185] team0: Device wg1 is of different type [ 1879.393657][T13184] netlink: 'syz.4.34055': attribute type 10 has an invalid length. [ 1879.410890][T13181] delete_channel: no stack [ 1879.483205][T13184] device wg1 entered promiscuous mode [ 1879.490890][T13184] team0: Device wg1 is of different type [ 1879.590443][T13194] netlink: 188 bytes leftover after parsing attributes in process `syz.0.34061'. [ 1879.614301][T13176] delete_channel: no stack [ 1879.705506][T13197] netlink: 'syz.0.34062': attribute type 1 has an invalid length. [ 1879.717992][T13197] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.34062'. [ 1879.766253][T13201] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.34063'. [ 1880.040709][T13216] netlink: 'syz.0.34074': attribute type 9 has an invalid length. [ 1880.082012][T13216] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.34074'. [ 1880.345413][T13231] netlink: 'syz.1.34078': attribute type 10 has an invalid length. [ 1880.377799][T13231] team0: Device wg1 is of different type [ 1880.420484][T13228] netlink: 'syz.3.34079': attribute type 10 has an invalid length. [ 1880.434142][T13228] netlink: 55 bytes leftover after parsing attributes in process `syz.3.34079'. [ 1880.862543][T13219] delete_channel: no stack [ 1881.265502][T13225] netlink: 'syz.0.34074': attribute type 9 has an invalid length. [ 1881.285041][T13225] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.34074'. [ 1881.481247][T13248] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.34088'. [ 1881.795006][T13253] team0: Device wg1 is of different type [ 1881.910555][T13251] delete_channel: no stack [ 1882.108592][T13270] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.34099'. [ 1882.222697][T13273] netlink: 132 bytes leftover after parsing attributes in process `syz.3.34100'. [ 1882.533040][T13278] validate_nla: 7 callbacks suppressed [ 1882.533060][T13278] netlink: 'syz.4.34102': attribute type 9 has an invalid length. [ 1882.547608][T13283] netlink: 'syz.2.34103': attribute type 10 has an invalid length. [ 1882.562321][T13283] team0: Device wg1 is of different type [ 1882.655344][T13280] delete_channel: no stack [ 1882.894878][T13297] netlink: 'syz.0.34108': attribute type 10 has an invalid length. [ 1883.151180][T13297] team0: Device wg1 is of different type [ 1883.209925][T13296] delete_channel: no stack [ 1883.377419][T13315] netlink: 'syz.0.34118': attribute type 10 has an invalid length. [ 1883.442962][T13315] team0: Device wg1 is of different type [ 1883.557794][T13314] delete_channel: no stack [ 1883.756191][T13333] netlink: 'syz.4.34128': attribute type 10 has an invalid length. [ 1883.807608][T13333] team0: Device wg1 is of different type [ 1883.938673][T13332] delete_channel: no stack [ 1884.056869][T13341] netlink: 'syz.0.34129': attribute type 3 has an invalid length. [ 1884.118391][T13351] netlink: 'syz.2.34133': attribute type 10 has an invalid length. [ 1884.136638][T13351] __nla_validate_parse: 5 callbacks suppressed [ 1884.136682][T13351] netlink: 55 bytes leftover after parsing attributes in process `syz.2.34133'. [ 1884.409674][T13348] netlink: 'syz.1.34143': attribute type 10 has an invalid length. [ 1884.424290][T13348] team0: Device wg1 is of different type [ 1884.465043][T13346] delete_channel: no stack [ 1884.798872][T13373] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.34146'. [ 1884.921251][T13377] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1884.943513][T13377] device syzkaller0 entered promiscuous mode [ 1885.168708][T13389] netlink: 'syz.4.34148': attribute type 3 has an invalid length. [ 1885.208179][T13389] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.34148'. [ 1885.367610][T13398] netlink: 'syz.0.34155': attribute type 29 has an invalid length. [ 1886.221710][T13433] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.34169'. [ 1886.753026][T13446] team0: Device wg1 is of different type [ 1887.091972][T13444] delete_channel: no stack [ 1887.422151][T13477] netlink: 55 bytes leftover after parsing attributes in process `syz.2.34196'. [ 1887.635285][T13481] validate_nla: 8 callbacks suppressed [ 1887.635327][T13481] netlink: 'syz.1.34185': attribute type 3 has an invalid length. [ 1887.719216][T13481] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.34185'. [ 1888.119498][T13493] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1888.124778][T13491] netlink: 'syz.1.34203': attribute type 3 has an invalid length. [ 1888.127567][T13493] device syzkaller0 entered promiscuous mode [ 1888.162382][T13491] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.34203'. [ 1888.628876][T13516] netlink: 'syz.3.34205': attribute type 1 has an invalid length. [ 1888.648361][T13516] netlink: 'syz.3.34205': attribute type 3 has an invalid length. [ 1888.657945][T13516] netlink: 132 bytes leftover after parsing attributes in process `syz.3.34205'. [ 1888.734947][T13522] netlink: 'syz.0.34207': attribute type 9 has an invalid length. [ 1888.751265][T13522] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.34207'. [ 1888.851784][T13527] netlink: 'syz.3.34209': attribute type 3 has an invalid length. [ 1888.913980][T13527] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.34209'. [ 1889.121596][T13525] netlink: 'syz.0.34207': attribute type 9 has an invalid length. [ 1889.141254][T13525] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.34207'. [ 1889.279103][T13533] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.34222'. [ 1889.291041][T13533] netlink: 'syz.4.34222': attribute type 1 has an invalid length. [ 1889.299465][T13533] netlink: 'syz.4.34222': attribute type 2 has an invalid length. [ 1889.307562][T13533] netlink: 'syz.4.34222': attribute type 3 has an invalid length. [ 1889.339902][T13533] netlink: 44 bytes leftover after parsing attributes in process `syz.4.34222'. [ 1889.505309][T13547] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.34228'. [ 1889.525050][T13547] netlink: 44 bytes leftover after parsing attributes in process `syz.1.34228'. [ 1889.619352][T13555] netlink: 132 bytes leftover after parsing attributes in process `syz.0.34219'. [ 1890.045867][T13565] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.34225'. [ 1890.278819][T13574] netlink: 125732 bytes leftover after parsing attributes in process `syz.0.34239'. [ 1890.453593][T13587] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.34235'. [ 1890.464363][T13587] netlink: 44 bytes leftover after parsing attributes in process `syz.3.34235'. [ 1892.815666][T13680] device syzkaller0 entered promiscuous mode [ 1893.834607][T13707] -1: renamed from syzkaller0 [ 1894.254249][T13718] __nla_validate_parse: 7 callbacks suppressed [ 1894.254269][T13718] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.34284'. [ 1895.412715][T13743] device syzkaller0 entered promiscuous mode [ 1895.445721][T13746] -1: renamed from syzkaller0 [ 1896.137023][T13777] validate_nla: 21 callbacks suppressed [ 1896.137064][T13777] netlink: 'syz.3.34310': attribute type 15 has an invalid length. [ 1896.170181][T13777] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.34310'. [ 1896.673429][T13795] device syzkaller0 entered promiscuous mode [ 1897.367579][T13818] netlink: 'syz.1.34325': attribute type 15 has an invalid length. [ 1897.380185][T13818] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.34325'. [ 1897.562529][T13822] device syzkaller0 entered promiscuous mode [ 1901.490388][T13920] netlink: 'syz.3.34365': attribute type 1 has an invalid length. [ 1901.505862][T13920] netlink: 63743 bytes leftover after parsing attributes in process `syz.3.34365'. [ 1902.221997][T13951] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.34376'. [ 1903.541003][T13973] netlink: 'syz.1.34386': attribute type 1 has an invalid length. [ 1903.560206][T13973] netlink: 63743 bytes leftover after parsing attributes in process `syz.1.34386'. [ 1903.678146][T13979] netlink: 'syz.1.34389': attribute type 1 has an invalid length. [ 1903.712987][T13979] netlink: 63763 bytes leftover after parsing attributes in process `syz.1.34389'. [ 1904.196125][T14004] netlink: 'syz.0.34402': attribute type 1 has an invalid length. [ 1904.207689][T14004] netlink: 63743 bytes leftover after parsing attributes in process `syz.0.34402'. [ 1904.731389][T14026] netlink: 'syz.2.34409': attribute type 1 has an invalid length. [ 1904.748251][T14026] netlink: 63763 bytes leftover after parsing attributes in process `syz.2.34409'. [ 1905.257345][T14056] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.34424'. [ 1905.640942][T14063] netlink: 'syz.4.34425': attribute type 1 has an invalid length. [ 1905.657931][T14063] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.34425'. [ 1906.262327][T14092] netlink: 'syz.2.34439': attribute type 153 has an invalid length. [ 1906.274748][T14092] netlink: 69544 bytes leftover after parsing attributes in process `syz.2.34439'. [ 1908.790785][T14143] netlink: 'syz.1.34460': attribute type 153 has an invalid length. [ 1908.808406][T14143] netlink: 69544 bytes leftover after parsing attributes in process `syz.1.34460'. [ 1910.186136][T14173] device sit0 entered promiscuous mode [ 1913.368476][T14181] netlink: 'syz.3.34477': attribute type 153 has an invalid length. [ 1913.376998][T14181] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.34477'. [ 1914.470723][T14214] netlink: 6 bytes leftover after parsing attributes in process `syz.0.34491'. [ 1914.498146][T14214] openvswitch: netlink: Flow actions attr not present in new flow. [ 1914.540617][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.547037][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.723766][T14222] sock: sock_set_timeout: `syz.0.34493' (pid 14222) tries to set negative timeout [ 1914.997977][T14228] netlink: 'syz.0.34496': attribute type 153 has an invalid length. [ 1915.013049][T14228] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.34496'. [ 1921.624261][T14284] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.34518'. [ 1922.473601][T14306] netlink: 'syz.4.34526': attribute type 153 has an invalid length. [ 1922.491998][T14306] netlink: 69544 bytes leftover after parsing attributes in process `syz.4.34526'. [ 1922.534554][T14311] netlink: 'syz.2.34528': attribute type 7 has an invalid length. [ 1926.057144][T14335] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.34536'. [ 1926.550018][T14366] netlink: 180 bytes leftover after parsing attributes in process `syz.1.34550'. [ 1930.346340][T14387] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.34558'. [ 1930.487488][T14391] device sit0 entered promiscuous mode [ 1930.938425][T14396] netlink: 'syz.3.34561': attribute type 10 has an invalid length. [ 1931.144902][T14406] netlink: 'syz.1.34566': attribute type 11 has an invalid length. [ 1931.172152][T14406] netlink: 198172 bytes leftover after parsing attributes in process `syz.1.34566'. [ 1931.232736][T14410] netlink: 'syz.2.34567': attribute type 10 has an invalid length. [ 1931.282863][T14410] netlink: 40 bytes leftover after parsing attributes in process `syz.2.34567'. [ 1931.315155][T14410] bridge0: port 2(team0) entered blocking state [ 1931.329608][T14410] bridge0: port 2(team0) entered disabled state [ 1931.351295][T14410] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1931.548097][T14417] netlink: 'syz.1.34572': attribute type 29 has an invalid length. [ 1931.649615][T14417] netlink: 'syz.1.34572': attribute type 29 has an invalid length. [ 1931.942551][T14440] netlink: 'syz.0.34581': attribute type 3 has an invalid length. [ 1931.963889][T14440] netlink: 'syz.0.34581': attribute type 1 has an invalid length. [ 1931.985910][T14440] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.34581'. [ 1932.315746][T14449] device syzkaller0 entered promiscuous mode [ 1932.424020][T14455] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.34586'. [ 1932.641936][T14458] device sit0 entered promiscuous mode [ 1933.248589][T14462] device syzkaller0 entered promiscuous mode [ 1933.643706][T14474] netlink: 'syz.3.34592': attribute type 10 has an invalid length. [ 1933.687929][T14474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.34592'. [ 1933.750465][T14474] bridge0: port 2(team0) entered blocking state [ 1933.772529][T14476] netlink: 'syz.4.34594': attribute type 11 has an invalid length. [ 1933.783858][T14474] bridge0: port 2(team0) entered disabled state [ 1933.835359][T14476] netlink: 198172 bytes leftover after parsing attributes in process `syz.4.34594'. [ 1933.854758][T14474] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1934.135655][T14483] netlink: 'syz.2.34596': attribute type 3 has an invalid length. [ 1934.182206][T14483] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.34596'. [ 1934.355093][T14491] device sit0 entered promiscuous mode [ 1934.525009][T14496] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.34603'. [ 1934.792071][T14506] netlink: 198172 bytes leftover after parsing attributes in process `syz.3.34607'. [ 1936.232974][T14537] device sit0 entered promiscuous mode [ 1936.654399][T14545] __nla_validate_parse: 1 callbacks suppressed [ 1936.654419][T14545] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.34623'. [ 1937.264690][T14573] device sit0 left promiscuous mode [ 1937.561101][T14576] device sit0 entered promiscuous mode [ 1938.504579][T14593] device syzkaller0 entered promiscuous mode [ 1938.513714][T14599] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.34641'. [ 1939.157711][T14602] validate_nla: 6 callbacks suppressed [ 1939.157753][T14602] netlink: 'syz.2.34644': attribute type 10 has an invalid length. [ 1939.414177][T14602] device nlmon0 entered promiscuous mode [ 1939.420700][T14602] team0: Device nlmon0 is of different type [ 1939.714658][T14624] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.34653'. [ 1939.755282][T14622] netlink: 'syz.0.34651': attribute type 10 has an invalid length. [ 1940.067711][T14634] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.34657'. [ 1940.291735][T14641] netlink: 'syz.0.34658': attribute type 29 has an invalid length. [ 1940.442945][T14641] netlink: 'syz.0.34658': attribute type 29 has an invalid length. [ 1940.857865][T14645] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.34659'. [ 1942.089391][T14672] device syzkaller0 entered promiscuous mode [ 1942.214115][T14685] netlink: 'syz.1.34670': attribute type 10 has an invalid length. [ 1942.280769][T14680] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.34673'. [ 1942.385697][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34673'. [ 1942.449294][T14690] netlink: 'syz.2.34675': attribute type 21 has an invalid length. [ 1945.916285][T14712] device sit0 left promiscuous mode [ 1946.163075][T14715] device sit0 entered promiscuous mode [ 1946.739476][T14728] netlink: 'syz.0.34690': attribute type 39 has an invalid length. [ 1946.853123][T14731] netlink: 144 bytes leftover after parsing attributes in process `syz.2.34691'. [ 1950.582318][T14764] netlink: 'syz.2.34703': attribute type 10 has an invalid length. [ 1950.605945][T14764] device hsr_slave_0 entered promiscuous mode [ 1950.627005][T14764] team0: Port device hsr_slave_0 added [ 1953.925796][T14770] device syzkaller0 entered promiscuous mode [ 1954.318214][T14783] netlink: 'syz.1.34711': attribute type 21 has an invalid length. [ 1954.737756][T14802] netlink: 'syz.3.34719': attribute type 10 has an invalid length. [ 1954.773982][T14802] device hsr_slave_0 entered promiscuous mode [ 1954.832119][T14802] team0: Port device hsr_slave_0 added [ 1955.465229][T14820] device syzkaller0 entered promiscuous mode [ 1955.543246][T14826] netlink: 'syz.3.34729': attribute type 21 has an invalid length. [ 1956.067017][T14841] Q±6ã`Ò˜: renamed from lo [ 1956.169723][T14842] netlink: 'syz.0.34734': attribute type 16 has an invalid length. [ 1956.180125][T14842] netlink: 156 bytes leftover after parsing attributes in process `syz.0.34734'. [ 1956.822224][T14864] netlink: 'syz.0.34743': attribute type 21 has an invalid length. [ 1958.608572][T14898] device sit0 left promiscuous mode [ 1958.671392][T14899] device sit0 entered promiscuous mode [ 1958.880468][T14906] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.34771'. [ 1959.841513][T14921] netlink: 'syz.1.34760': attribute type 10 has an invalid length. [ 1959.910356][T14921] team0: Device vxcan1 is of different type [ 1960.138947][T14935] netlink: 'syz.2.34777': attribute type 16 has an invalid length. [ 1960.157377][T14935] netlink: 156 bytes leftover after parsing attributes in process `syz.2.34777'. [ 1960.331914][T14947] netlink: 'syz.2.34766': attribute type 2 has an invalid length. [ 1960.370674][T14947] netlink: 'syz.2.34766': attribute type 11 has an invalid length. [ 1960.389284][T14947] netlink: 198172 bytes leftover after parsing attributes in process `syz.2.34766'. [ 1960.858127][T14973] Q±6ã`Ò˜: renamed from lo [ 1961.029143][T14976] netlink: 'syz.1.34781': attribute type 16 has an invalid length. [ 1961.044090][T14976] netlink: 156 bytes leftover after parsing attributes in process `syz.1.34781'. [ 1961.609929][T15005] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.34791'. [ 1961.917800][T15017] Q±6ã`Ò˜: renamed from lo [ 1962.344826][T15021] netlink: 'syz.3.34796': attribute type 16 has an invalid length. [ 1962.398294][T15021] netlink: 156 bytes leftover after parsing attributes in process `syz.3.34796'. [ 1962.671220][T15049] netlink: 'syz.2.34805': attribute type 10 has an invalid length. [ 1962.700312][T15049] device vxcan1 entered promiscuous mode [ 1962.706660][T15049] team0: Device vxcan1 is of different type [ 1962.807055][T15050] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.34806'. [ 1963.785055][T15093] netlink: 'syz.4.34817': attribute type 16 has an invalid length. [ 1963.827561][T15093] netlink: 156 bytes leftover after parsing attributes in process `syz.4.34817'. [ 1963.863388][T15091] netlink: 'syz.0.34822': attribute type 10 has an invalid length. [ 1964.054740][T15091] device vxcan1 entered promiscuous mode [ 1964.090080][T15091] team0: Device vxcan1 is of different type [ 1964.912405][T15128] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.34834'. [ 1968.123479][T15181] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.34854'. [ 1974.644731][T15319] device syzkaller0 entered promiscuous mode [ 1974.674750][T15319] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1975.173427][T15329] device syzkaller0 entered promiscuous mode [ 1975.981644][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.988212][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.104411][T15341] device syzkaller0 entered promiscuous mode [ 1976.428190][T15347] netlink: 'syz.0.34930': attribute type 1 has an invalid length. [ 1979.782920][T15371] netlink: 'syz.2.34931': attribute type 10 has an invalid length. [ 1979.887902][T15370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1980.272806][T15390] netlink: 'syz.4.34938': attribute type 2 has an invalid length. [ 1980.290381][T15390] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.34938'. [ 1980.693579][T15400] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.34941'. [ 1980.893472][T15408] netlink: 'syz.0.34947': attribute type 10 has an invalid length. [ 1981.083936][T15407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1981.694997][T15432] netlink: 'syz.0.34957': attribute type 2 has an invalid length. [ 1981.714769][T15432] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.34957'. [ 1981.975413][T15446] netlink: 'syz.2.34974': attribute type 2 has an invalid length. [ 1982.005060][T15446] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.34974'. [ 1982.426318][T15462] netlink: 'syz.1.34969': attribute type 10 has an invalid length. [ 1982.560810][T15462] team0: Port device wlan1 added [ 1982.678148][T15461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1982.962738][T15473] netlink: 'syz.4.34985': attribute type 10 has an invalid length. [ 1983.107897][T15470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1984.166549][T15505] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.34988'. [ 1996.756116][T15768] device syzkaller0 entered promiscuous mode [ 1996.954316][T15782] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.35097'. [ 1996.980135][T15782] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1997.024622][T15782] CPU: 1 PID: 15782 Comm: syz.1.35097 Not tainted syzkaller #0 [ 1997.032232][T15782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1997.042560][T15782] Call Trace: [ 1997.045885][T15782] [ 1997.048924][T15782] dump_stack_lvl+0x188/0x250 [ 1997.053763][T15782] ? show_regs_print_info+0x20/0x20 [ 1997.059004][T15782] ? load_image+0x400/0x400 [ 1997.063564][T15782] sysfs_warn_dup+0x8a/0xa0 [ 1997.068097][T15782] sysfs_do_create_link_sd+0xc0/0x110 [ 1997.073499][T15782] device_add+0x7f6/0x1000 [ 1997.077976][T15782] wiphy_register+0x1e81/0x2c30 [ 1997.082900][T15782] ? cfg80211_event_work+0x40/0x40 [ 1997.088051][T15782] ? minstrel_ht_alloc+0x808/0x980 [ 1997.093380][T15782] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1997.099492][T15782] ieee80211_register_hw+0x2aa1/0x3af0 [ 1997.105054][T15782] ? ieee80211_tasklet_handler+0x20/0x20 [ 1997.110727][T15782] ? rcu_is_watching+0x11/0xa0 [ 1997.115522][T15782] ? memset+0x1e/0x40 [ 1997.119540][T15782] ? hrtimer_init+0x10c/0x220 [ 1997.124258][T15782] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1997.130049][T15782] hwsim_new_radio_nl+0xa6f/0xc40 [ 1997.135136][T15782] genl_rcv_msg+0xcea/0xf90 [ 1997.139668][T15782] ? lock_chain_count+0x20/0x20 [ 1997.144571][T15782] ? genl_bind+0x380/0x380 [ 1997.149055][T15782] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1997.154830][T15782] ? verify_lock_unused+0x140/0x140 [ 1997.160052][T15782] ? perf_trace_lock_acquire+0x340/0x3e0 [ 1997.165738][T15782] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1997.172373][T15782] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1997.178944][T15782] netlink_rcv_skb+0x1f5/0x440 [ 1997.183734][T15782] ? genl_bind+0x380/0x380 [ 1997.188189][T15782] ? netlink_ack+0xb50/0xb50 [ 1997.192812][T15782] ? __lock_acquire+0x7d10/0x7d10 [ 1997.197903][T15782] ? down_read+0x1aa/0x2e0 [ 1997.202360][T15782] genl_rcv+0x24/0x40 [ 1997.206459][T15782] netlink_unicast+0x774/0x920 [ 1997.211267][T15782] netlink_sendmsg+0x8ba/0xbe0 [ 1997.216076][T15782] ? netlink_getsockopt+0x570/0x570 [ 1997.221302][T15782] ? aa_sock_msg_perm+0x94/0x150 [ 1997.226270][T15782] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1997.231576][T15782] ? security_socket_sendmsg+0x7c/0xa0 [ 1997.237187][T15782] ? netlink_getsockopt+0x570/0x570 [ 1997.242429][T15782] ____sys_sendmsg+0x5b7/0x8f0 [ 1997.247249][T15782] ? __sys_sendmsg_sock+0x30/0x30 [ 1997.252328][T15782] ? import_iovec+0x6f/0xa0 [ 1997.256874][T15782] ___sys_sendmsg+0x236/0x2e0 [ 1997.261609][T15782] ? __sys_sendmsg+0x2a0/0x2a0 [ 1997.266426][T15782] ? percpu_counter_add_batch+0x13b/0x160 [ 1997.272236][T15782] __se_sys_sendmsg+0x1af/0x290 [ 1997.277123][T15782] ? __x64_sys_sendmsg+0x80/0x80 [ 1997.282083][T15782] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1997.288121][T15782] ? lockdep_hardirqs_on+0x94/0x140 [ 1997.293447][T15782] do_syscall_64+0x4c/0xa0 [ 1997.297900][T15782] ? clear_bhb_loop+0x30/0x80 [ 1997.302607][T15782] ? clear_bhb_loop+0x30/0x80 [ 1997.307311][T15782] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1997.313239][T15782] RIP: 0033:0x7f8ecc3a0e59 [ 1997.317824][T15782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1997.337476][T15782] RSP: 002b:00007f8eca5fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1997.345925][T15782] RAX: ffffffffffffffda RBX: 00007f8ecc619fa0 RCX: 00007f8ecc3a0e59 [ 1997.353917][T15782] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1997.362002][T15782] RBP: 00007f8ecc436d6f R08: 0000000000000000 R09: 0000000000000000 [ 1997.370106][T15782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1997.378099][T15782] R13: 00007f8ecc61a038 R14: 00007f8ecc619fa0 R15: 00007ffe47f5a7b8 [ 1997.386235][T15782] [ 1998.133528][T15803] device  entered promiscuous mode [ 1999.031365][T15817] device syzkaller0 entered promiscuous mode [ 2000.571918][T15871] device syzkaller0 entered promiscuous mode [ 2000.609921][T15881] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2000.617258][T15881] IPv6: NLM_F_CREATE should be set when creating new route [ 2000.624663][T15881] IPv6: NLM_F_CREATE should be set when creating new route [ 2000.631976][T15881] IPv6: NLM_F_CREATE should be set when creating new route [ 2001.515317][T15908] netlink: 'syz.0.35144': attribute type 29 has an invalid length. [ 2001.538923][T15908] netlink: 'syz.0.35144': attribute type 29 has an invalid length. [ 2001.588713][T15908] netlink: 'syz.0.35144': attribute type 29 has an invalid length. [ 2001.646527][T15908] netlink: 'syz.0.35144': attribute type 4 has an invalid length. [ 2001.686431][T15908] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.35144'. [ 2002.039876][T15922] device syzkaller0 entered promiscuous mode [ 2002.104661][T15931] device syzkaller0 entered promiscuous mode [ 2003.642230][T15947] device syzkaller0 entered promiscuous mode [ 2004.241188][T15975] device syzkaller0 entered promiscuous mode [ 2004.982938][T15992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2004.990450][T15992] IPv6: NLM_F_CREATE should be set when creating new route [ 2004.997801][T15992] IPv6: NLM_F_CREATE should be set when creating new route [ 2005.005176][T15992] IPv6: NLM_F_CREATE should be set when creating new route [ 2006.032926][T16031] netlink: 'syz.4.35181': attribute type 10 has an invalid length. [ 2006.074501][T16029] netlink: 'syz.2.35186': attribute type 3 has an invalid length. [ 2006.602975][T16046] device syzkaller0 entered promiscuous mode [ 2007.648739][T16069] netlink: 'syz.2.35201': attribute type 10 has an invalid length. [ 2007.700402][T16068] netlink: 'syz.4.35199': attribute type 3 has an invalid length. [ 2008.064296][T16086] device syzkaller0 entered promiscuous mode [ 2009.225900][T16104] netlink: 'syz.3.35216': attribute type 3 has an invalid length. [ 2011.309396][T16155] netlink: 'syz.3.35240': attribute type 1 has an invalid length. [ 2011.317272][T16155] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.35240'. [ 2011.382402][T16153] netlink: 'syz.1.35236': attribute type 3 has an invalid length. [ 2012.800968][T16196] netlink: 'syz.1.35254': attribute type 1 has an invalid length. [ 2012.839013][T16196] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.35254'. [ 2013.192300][T16203] netlink: 128 bytes leftover after parsing attributes in process `syz.2.35258'. [ 2013.279732][T16203] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2015.374097][T16251] netlink: 128 bytes leftover after parsing attributes in process `syz.0.35291'. [ 2015.440107][T16251] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2018.510789][T16294] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.35295'. [ 2018.522797][T16294] bridge_slave_1: default FDB implementation only supports local addresses [ 2019.574007][T16338] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.35317'. [ 2021.399909][T16380] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.35335'. [ 2021.421699][T16380] netlink: 8446 bytes leftover after parsing attributes in process `syz.2.35335'. [ 2021.677265][T16386] netlink: 14 bytes leftover after parsing attributes in process `syz.4.35337'. [ 2023.753366][T16418] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.35348'. [ 2023.779342][T16418] bridge_slave_1: default FDB implementation only supports local addresses [ 2024.334689][T16432] netlink: 14 bytes leftover after parsing attributes in process `syz.0.35353'. [ 2024.447304][T16432] device hsr_slave_0 left promiscuous mode [ 2024.470678][T16432] device hsr_slave_1 left promiscuous mode [ 2024.669401][T16437] netlink: 'syz.1.35356': attribute type 3 has an invalid length. [ 2024.720225][T16437] netlink: 'syz.1.35356': attribute type 1 has an invalid length. [ 2024.800501][T16437] netlink: 'syz.1.35356': attribute type 6 has an invalid length. [ 2024.827699][T16437] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.35356'. [ 2025.106615][T16448] netlink: 'syz.4.35362': attribute type 10 has an invalid length. [ 2026.143270][T16453] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.35364'. [ 2026.774520][T16476] netlink: 'syz.2.35375': attribute type 3 has an invalid length. [ 2026.818082][T16476] netlink: 'syz.2.35375': attribute type 1 has an invalid length. [ 2026.842222][T16480] netlink: 168 bytes leftover after parsing attributes in process `syz.1.35376'. [ 2026.859495][T16476] netlink: 'syz.2.35375': attribute type 6 has an invalid length. [ 2026.915061][T16476] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.35375'. [ 2026.935966][T16482] netlink: 'syz.0.35377': attribute type 10 has an invalid length. [ 2028.208675][T16495] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.35381'. [ 2028.225858][T16495] bridge_slave_1: default FDB implementation only supports local addresses [ 2028.247366][T16500] netlink: 'syz.1.35383': attribute type 10 has an invalid length. [ 2028.279783][T16500] device geneve0 entered promiscuous mode [ 2028.605616][T16505] netlink: 14 bytes leftover after parsing attributes in process `syz.2.35386'. [ 2028.791675][T16516] netlink: 'syz.0.35390': attribute type 3 has an invalid length. [ 2028.831124][T16516] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.35390'. [ 2029.734273][T16525] netlink: 168 bytes leftover after parsing attributes in process `syz.3.35395'. [ 2031.068316][T16545] delete_channel: no stack [ 2031.285471][T16561] validate_nla: 3 callbacks suppressed [ 2031.285508][T16561] netlink: 'syz.4.35409': attribute type 10 has an invalid length. [ 2031.341302][T16561] device geneve0 entered promiscuous mode [ 2031.476635][T16569] device sit0 left promiscuous mode [ 2031.771249][T16572] device sit0 entered promiscuous mode [ 2032.007161][T16584] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.35417'. [ 2032.113298][T16587] netlink: 'syz.1.35419': attribute type 25 has an invalid length. [ 2032.227625][T16584] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2032.269749][T16584] CPU: 1 PID: 16584 Comm: syz.2.35417 Not tainted syzkaller #0 [ 2032.277363][T16584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2032.287471][T16584] Call Trace: [ 2032.290781][T16584] [ 2032.293737][T16584] dump_stack_lvl+0x188/0x250 [ 2032.298458][T16584] ? show_regs_print_info+0x20/0x20 [ 2032.303691][T16584] ? load_image+0x400/0x400 [ 2032.308240][T16584] sysfs_warn_dup+0x8a/0xa0 [ 2032.312771][T16584] sysfs_do_create_link_sd+0xc0/0x110 [ 2032.318174][T16584] device_add+0x7f6/0x1000 [ 2032.322647][T16584] wiphy_register+0x1e81/0x2c30 [ 2032.327557][T16584] ? cfg80211_event_work+0x40/0x40 [ 2032.332797][T16584] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2032.339473][T16584] ieee80211_register_hw+0x2aa1/0x3af0 [ 2032.345097][T16584] ? ieee80211_tasklet_handler+0x20/0x20 [ 2032.350775][T16584] ? rcu_is_watching+0x11/0xa0 [ 2032.355582][T16584] ? memset+0x1e/0x40 [ 2032.359586][T16584] ? hrtimer_init+0x10c/0x220 [ 2032.364309][T16584] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2032.370085][T16584] hwsim_new_radio_nl+0xa6f/0xc40 [ 2032.375161][T16584] genl_rcv_msg+0xcea/0xf90 [ 2032.379710][T16584] ? genl_bind+0x380/0x380 [ 2032.384251][T16584] ? mark_lock+0x94/0x320 [ 2032.388687][T16584] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2032.394701][T16584] ? lock_chain_count+0x20/0x20 [ 2032.399595][T16584] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2032.405791][T16584] ? lockdep_hardirqs_on+0x94/0x140 [ 2032.411017][T16584] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2032.417567][T16584] netlink_rcv_skb+0x1f5/0x440 [ 2032.422357][T16584] ? genl_bind+0x380/0x380 [ 2032.426802][T16584] ? netlink_ack+0xb50/0xb50 [ 2032.431429][T16584] ? __lock_acquire+0x7d10/0x7d10 [ 2032.436494][T16584] ? down_read+0x1aa/0x2e0 [ 2032.440948][T16584] genl_rcv+0x24/0x40 [ 2032.444963][T16584] netlink_unicast+0x774/0x920 [ 2032.449800][T16584] netlink_sendmsg+0x8ba/0xbe0 [ 2032.454607][T16584] ? lockdep_hardirqs_on+0x94/0x140 [ 2032.459857][T16584] ? netlink_getsockopt+0x570/0x570 [ 2032.465101][T16584] ? bpf_lsm_socket_accept+0x10/0x10 [ 2032.470422][T16584] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2032.475744][T16584] ? security_socket_sendmsg+0x7c/0xa0 [ 2032.481239][T16584] ? netlink_getsockopt+0x570/0x570 [ 2032.486468][T16584] ____sys_sendmsg+0x5b7/0x8f0 [ 2032.491277][T16584] ? __sys_sendmsg_sock+0x30/0x30 [ 2032.496427][T16584] ? import_iovec+0x6f/0xa0 [ 2032.500946][T16584] ___sys_sendmsg+0x236/0x2e0 [ 2032.505646][T16584] ? __sys_sendmsg+0x2a0/0x2a0 [ 2032.510436][T16584] ? ktime_get_real_ts64+0x440/0x440 [ 2032.515766][T16584] __se_sys_sendmsg+0x1af/0x290 [ 2032.520627][T16584] ? __x64_sys_sendmsg+0x80/0x80 [ 2032.525665][T16584] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2032.531672][T16584] ? lockdep_hardirqs_on+0x94/0x140 [ 2032.536880][T16584] do_syscall_64+0x4c/0xa0 [ 2032.541299][T16584] ? clear_bhb_loop+0x30/0x80 [ 2032.545980][T16584] ? clear_bhb_loop+0x30/0x80 [ 2032.550666][T16584] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2032.556560][T16584] RIP: 0033:0x7fb316cdde59 [ 2032.560978][T16584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2032.580587][T16584] RSP: 002b:00007fb314f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2032.589007][T16584] RAX: ffffffffffffffda RBX: 00007fb316f56fa0 RCX: 00007fb316cdde59 [ 2032.596979][T16584] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2032.604962][T16584] RBP: 00007fb316d73d6f R08: 0000000000000000 R09: 0000000000000000 [ 2032.612933][T16584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2032.620907][T16584] R13: 00007fb316f57038 R14: 00007fb316f56fa0 R15: 00007ffc58ace498 [ 2032.628896][T16584] [ 2032.980315][T16608] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.35427'. [ 2033.290444][T16627] device sit0 left promiscuous mode [ 2033.371089][T16630] device sit0 entered promiscuous mode [ 2034.623306][T16654] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.35449'. [ 2034.748761][T16665] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.35453'. [ 2036.037093][T16712] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.35470'. [ 2036.682373][T16737] netlink: 'syz.4.35479': attribute type 29 has an invalid length. [ 2036.713131][T16737] netlink: 'syz.4.35479': attribute type 29 has an invalid length. [ 2036.766695][T16731] netlink: 'syz.4.35479': attribute type 29 has an invalid length. [ 2036.922230][T16731] netlink: 'syz.4.35479': attribute type 1 has an invalid length. [ 2036.934789][T16731] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.35479'. [ 2037.076496][T16752] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.35484'. [ 2037.096006][T16754] device sit0 left promiscuous mode [ 2037.211824][T16758] device sit0 entered promiscuous mode [ 2037.332951][T16769] netlink: 'syz.3.35488': attribute type 10 has an invalid length. [ 2037.355958][T16769] device geneve0 entered promiscuous mode [ 2037.420889][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.427231][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.521233][T16774] device sit0 left promiscuous mode [ 2037.763041][T16779] device sit0 entered promiscuous mode [ 2038.357291][T16792] netlink: 'syz.2.35499': attribute type 3 has an invalid length. [ 2038.387143][T16792] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.35499'. [ 2038.720453][T16800] netlink: 'syz.0.35501': attribute type 29 has an invalid length. [ 2038.815405][T16806] netlink: 'syz.0.35501': attribute type 1 has an invalid length. [ 2038.820691][T16800] netlink: 'syz.0.35501': attribute type 29 has an invalid length. [ 2038.903411][T16806] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.35501'. [ 2039.021068][T16803] netlink: 'syz.0.35501': attribute type 29 has an invalid length. [ 2039.104427][T16807] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.35504'. [ 2039.135869][T16811] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.35505'. [ 2039.627679][T16807] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2039.651955][T16807] CPU: 0 PID: 16807 Comm: syz.3.35504 Not tainted syzkaller #0 [ 2039.659579][T16807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2039.669699][T16807] Call Trace: [ 2039.673026][T16807] [ 2039.676084][T16807] dump_stack_lvl+0x188/0x250 [ 2039.680815][T16807] ? show_regs_print_info+0x20/0x20 [ 2039.686064][T16807] ? load_image+0x400/0x400 [ 2039.690676][T16807] sysfs_warn_dup+0x8a/0xa0 [ 2039.695231][T16807] sysfs_do_create_link_sd+0xc0/0x110 [ 2039.700655][T16807] device_add+0x7f6/0x1000 [ 2039.705163][T16807] wiphy_register+0x1e81/0x2c30 [ 2039.710129][T16807] ? cfg80211_event_work+0x40/0x40 [ 2039.715373][T16807] ? minstrel_ht_alloc+0x808/0x980 [ 2039.720555][T16807] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2039.726703][T16807] ieee80211_register_hw+0x2aa1/0x3af0 [ 2039.732287][T16807] ? ieee80211_tasklet_handler+0x20/0x20 [ 2039.737966][T16807] ? lockdep_hardirqs_on+0x94/0x140 [ 2039.743223][T16807] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2039.749492][T16807] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2039.755331][T16807] hwsim_new_radio_nl+0xa6f/0xc40 [ 2039.760458][T16807] genl_rcv_msg+0xcea/0xf90 [ 2039.765051][T16807] ? genl_bind+0x380/0x380 [ 2039.769537][T16807] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 2039.774862][T16807] ? verify_lock_unused+0x140/0x140 [ 2039.780163][T16807] ? dev_queue_xmit+0x20/0x20 [ 2039.784881][T16807] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2039.791495][T16807] netlink_rcv_skb+0x1f5/0x440 [ 2039.796309][T16807] ? genl_bind+0x380/0x380 [ 2039.800777][T16807] ? netlink_ack+0xb50/0xb50 [ 2039.805419][T16807] ? __lock_acquire+0x7d10/0x7d10 [ 2039.810489][T16807] ? down_read+0x1aa/0x2e0 [ 2039.814939][T16807] genl_rcv+0x24/0x40 [ 2039.818940][T16807] netlink_unicast+0x774/0x920 [ 2039.823757][T16807] netlink_sendmsg+0x8ba/0xbe0 [ 2039.828558][T16807] ? lockdep_hardirqs_on+0x94/0x140 [ 2039.833789][T16807] ? netlink_getsockopt+0x570/0x570 [ 2039.839037][T16807] ? netlink_getsockopt+0x570/0x570 [ 2039.844336][T16807] ____sys_sendmsg+0x5b7/0x8f0 [ 2039.849167][T16807] ? __sys_sendmsg_sock+0x30/0x30 [ 2039.854246][T16807] ? import_iovec+0x6f/0xa0 [ 2039.858786][T16807] ___sys_sendmsg+0x236/0x2e0 [ 2039.863511][T16807] ? __sys_sendmsg+0x2a0/0x2a0 [ 2039.868325][T16807] ? rcu_is_watching+0x11/0xa0 [ 2039.873172][T16807] __se_sys_sendmsg+0x1af/0x290 [ 2039.878053][T16807] ? __x64_sys_sendmsg+0x80/0x80 [ 2039.883004][T16807] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2039.889038][T16807] ? lockdep_hardirqs_on+0x94/0x140 [ 2039.894349][T16807] do_syscall_64+0x4c/0xa0 [ 2039.898792][T16807] ? clear_bhb_loop+0x30/0x80 [ 2039.903521][T16807] ? clear_bhb_loop+0x30/0x80 [ 2039.908218][T16807] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2039.914129][T16807] RIP: 0033:0x7fe78b04de59 [ 2039.918566][T16807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2039.938201][T16807] RSP: 002b:00007fe7892a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2039.946653][T16807] RAX: ffffffffffffffda RBX: 00007fe78b2c6fa0 RCX: 00007fe78b04de59 [ 2039.954654][T16807] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2039.962657][T16807] RBP: 00007fe78b0e3d6f R08: 0000000000000000 R09: 0000000000000000 [ 2039.970639][T16807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2039.978622][T16807] R13: 00007fe78b2c7038 R14: 00007fe78b2c6fa0 R15: 00007ffc79a85b98 [ 2039.986762][T16807] [ 2040.369788][T16833] device team0 left promiscuous mode [ 2040.375144][T16833] device team_slave_1 left promiscuous mode [ 2040.388358][T16833] device bridge0 left promiscuous mode [ 2040.394245][T16833] device wlan1 left promiscuous mode [ 2040.399914][T16833] device virt_wifi0 left promiscuous mode [ 2040.405942][T16833] device hsr_slave_0 left promiscuous mode [ 2040.669771][T16846] device geneve0 entered promiscuous mode [ 2041.119975][T16848] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.35520'. [ 2041.185649][T16859] device sit0 left promiscuous mode [ 2041.441910][T16862] device sit0 entered promiscuous mode [ 2041.805235][T16879] validate_nla: 6 callbacks suppressed [ 2041.805253][T16879] netlink: 'syz.4.35531': attribute type 10 has an invalid length. [ 2042.263160][T16879] device team0 left promiscuous mode [ 2042.308363][T16879] device team_slave_0 left promiscuous mode [ 2042.322630][T16879] device team_slave_1 left promiscuous mode [ 2042.357562][T16879] device bridge0 left promiscuous mode [ 2042.389884][T16879] device wlan1 left promiscuous mode [ 2042.413537][T16879] device virt_wifi0 left promiscuous mode [ 2042.734273][T16893] netlink: 'syz.0.35536': attribute type 3 has an invalid length. [ 2042.747656][T16893] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.35536'. [ 2042.856317][T16895] device sit0 left promiscuous mode [ 2042.980582][T16904] device sit0 entered promiscuous mode [ 2043.794458][T16921] device sit0 left promiscuous mode [ 2044.301337][T16925] device sit0 entered promiscuous mode [ 2044.497395][T16939] netlink: 'syz.4.35552': attribute type 3 has an invalid length. [ 2044.507812][T16939] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.35552'. [ 2044.580212][T16935] netlink: 'syz.3.35550': attribute type 10 has an invalid length. [ 2044.592449][T16935] device team0 left promiscuous mode [ 2044.609500][T16935] device team_slave_1 left promiscuous mode [ 2044.625823][T16935] device bridge0 left promiscuous mode [ 2044.643984][T16935] device wlan1 left promiscuous mode [ 2044.650987][T16935] device virt_wifi0 left promiscuous mode [ 2044.656983][T16935] device hsr_slave_0 left promiscuous mode [ 2044.963631][T16944] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.35554'. [ 2045.079756][T16960] netlink: 10 bytes leftover after parsing attributes in process `syz.0.35560'. [ 2045.228451][T16944] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2045.265504][T16944] CPU: 1 PID: 16944 Comm: syz.1.35554 Not tainted syzkaller #0 [ 2045.273211][T16944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2045.283296][T16944] Call Trace: [ 2045.286621][T16944] [ 2045.289589][T16944] dump_stack_lvl+0x188/0x250 [ 2045.294327][T16944] ? show_regs_print_info+0x20/0x20 [ 2045.299676][T16944] ? load_image+0x400/0x400 [ 2045.304261][T16944] sysfs_warn_dup+0x8a/0xa0 [ 2045.308805][T16944] sysfs_do_create_link_sd+0xc0/0x110 [ 2045.314209][T16944] device_add+0x7f6/0x1000 [ 2045.318697][T16944] wiphy_register+0x1e81/0x2c30 [ 2045.323804][T16944] ? cfg80211_event_work+0x40/0x40 [ 2045.328946][T16944] ? minstrel_ht_alloc+0x808/0x980 [ 2045.334137][T16944] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2045.340273][T16944] ieee80211_register_hw+0x2aa1/0x3af0 [ 2045.345824][T16944] ? ieee80211_tasklet_handler+0x20/0x20 [ 2045.351489][T16944] ? rcu_is_watching+0x11/0xa0 [ 2045.356279][T16944] ? memset+0x1e/0x40 [ 2045.360271][T16944] ? hrtimer_init+0x10c/0x220 [ 2045.364969][T16944] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2045.370768][T16944] hwsim_new_radio_nl+0xa6f/0xc40 [ 2045.375878][T16944] genl_rcv_msg+0xcea/0xf90 [ 2045.380442][T16944] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2045.386644][T16944] ? genl_bind+0x380/0x380 [ 2045.391165][T16944] ? swake_up_one+0x6d/0x130 [ 2045.395836][T16944] ? verify_lock_unused+0x140/0x140 [ 2045.401162][T16944] ? rcu_preempt_deferred_qs_irqrestore+0x88b/0xc30 [ 2045.407804][T16944] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2045.414358][T16944] netlink_rcv_skb+0x1f5/0x440 [ 2045.419141][T16944] ? genl_bind+0x380/0x380 [ 2045.423638][T16944] ? netlink_ack+0xb50/0xb50 [ 2045.428254][T16944] ? __lock_acquire+0x7d10/0x7d10 [ 2045.433518][T16944] ? down_read+0x1aa/0x2e0 [ 2045.438019][T16944] genl_rcv+0x24/0x40 [ 2045.442074][T16944] netlink_unicast+0x774/0x920 [ 2045.447161][T16944] netlink_sendmsg+0x8ba/0xbe0 [ 2045.451982][T16944] ? netlink_getsockopt+0x570/0x570 [ 2045.457205][T16944] ? aa_sock_msg_perm+0x94/0x150 [ 2045.462157][T16944] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2045.467456][T16944] ? security_socket_sendmsg+0x7c/0xa0 [ 2045.472995][T16944] ? netlink_getsockopt+0x570/0x570 [ 2045.478224][T16944] ____sys_sendmsg+0x5b7/0x8f0 [ 2045.483049][T16944] ? __sys_sendmsg_sock+0x30/0x30 [ 2045.488136][T16944] ? import_iovec+0x6f/0xa0 [ 2045.492675][T16944] ___sys_sendmsg+0x236/0x2e0 [ 2045.497399][T16944] ? __sys_sendmsg+0x2a0/0x2a0 [ 2045.502442][T16944] __se_sys_sendmsg+0x1af/0x290 [ 2045.507377][T16944] ? __x64_sys_sendmsg+0x80/0x80 [ 2045.512516][T16944] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2045.518711][T16944] do_syscall_64+0x4c/0xa0 [ 2045.523188][T16944] ? clear_bhb_loop+0x30/0x80 [ 2045.527913][T16944] ? clear_bhb_loop+0x30/0x80 [ 2045.532655][T16944] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2045.538685][T16944] RIP: 0033:0x7f8ecc3a0e59 [ 2045.543266][T16944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2045.562950][T16944] RSP: 002b:00007f8eca5fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2045.571398][T16944] RAX: ffffffffffffffda RBX: 00007f8ecc619fa0 RCX: 00007f8ecc3a0e59 [ 2045.579424][T16944] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2045.587417][T16944] RBP: 00007f8ecc436d6f R08: 0000000000000000 R09: 0000000000000000 [ 2045.595395][T16944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2045.603369][T16944] R13: 00007f8ecc61a038 R14: 00007f8ecc619fa0 R15: 00007ffe47f5a7b8 [ 2045.611382][T16944] [ 2045.961503][T16969] netlink: 'syz.0.35566': attribute type 10 has an invalid length. [ 2045.971684][T16969] netlink: 55 bytes leftover after parsing attributes in process `syz.0.35566'. [ 2045.985871][T16969] netlink: 'syz.0.35566': attribute type 1 has an invalid length. [ 2046.051878][T16973] netlink: 'syz.1.35564': attribute type 29 has an invalid length. [ 2046.107696][T16973] netlink: 'syz.1.35564': attribute type 29 has an invalid length. [ 2046.139580][T16974] netlink: 'syz.1.35564': attribute type 29 has an invalid length. [ 2046.230925][T16973] netlink: 'syz.1.35564': attribute type 1 has an invalid length. [ 2046.239322][T16973] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.35564'. [ 2046.393352][T16987] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.35569'. [ 2046.505996][T16995] device sit0 left promiscuous mode [ 2046.651169][T16995] device sit0 entered promiscuous mode [ 2047.108608][T17012] device sit0 left promiscuous mode [ 2047.165461][T17016] validate_nla: 1 callbacks suppressed [ 2047.165489][T17016] netlink: 'syz.2.35581': attribute type 29 has an invalid length. [ 2047.202806][T17017] device sit0 entered promiscuous mode [ 2047.320957][T17023] netlink: 'syz.2.35581': attribute type 1 has an invalid length. [ 2047.348099][T17023] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.35581'. [ 2047.387715][T17019] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.401940][T17016] netlink: 'syz.2.35581': attribute type 29 has an invalid length. [ 2047.427728][T17021] netlink: 'syz.2.35581': attribute type 29 has an invalid length. [ 2047.517000][T17028] netlink: 10 bytes leftover after parsing attributes in process `syz.4.35588'. [ 2047.655465][T17031] netlink: 'syz.1.35587': attribute type 3 has an invalid length. [ 2047.690990][T17031] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.35587'. [ 2048.199371][T17048] device sit0 left promiscuous mode [ 2048.275510][T17050] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.35606'. [ 2048.325202][T17048] device sit0 entered promiscuous mode [ 2048.452869][T17050] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2048.468524][T17050] CPU: 1 PID: 17050 Comm: syz.0.35606 Not tainted syzkaller #0 [ 2048.476324][T17050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2048.486422][T17050] Call Trace: [ 2048.489738][T17050] [ 2048.492699][T17050] dump_stack_lvl+0x188/0x250 [ 2048.497413][T17050] ? show_regs_print_info+0x20/0x20 [ 2048.502733][T17050] ? load_image+0x400/0x400 [ 2048.507290][T17050] sysfs_warn_dup+0x8a/0xa0 [ 2048.511831][T17050] sysfs_do_create_link_sd+0xc0/0x110 [ 2048.517258][T17050] device_add+0x7f6/0x1000 [ 2048.521724][T17050] wiphy_register+0x1e81/0x2c30 [ 2048.526638][T17050] ? cfg80211_event_work+0x40/0x40 [ 2048.531783][T17050] ? minstrel_ht_alloc+0x808/0x980 [ 2048.536948][T17050] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2048.543229][T17050] ieee80211_register_hw+0x2aa1/0x3af0 [ 2048.548738][T17050] ? ieee80211_tasklet_handler+0x20/0x20 [ 2048.554410][T17050] ? rcu_is_watching+0x11/0xa0 [ 2048.559200][T17050] ? memset+0x1e/0x40 [ 2048.563196][T17050] ? hrtimer_init+0x10c/0x220 [ 2048.567889][T17050] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2048.573653][T17050] hwsim_new_radio_nl+0xa6f/0xc40 [ 2048.578741][T17050] genl_rcv_msg+0xcea/0xf90 [ 2048.583292][T17050] ? genl_bind+0x380/0x380 [ 2048.587747][T17050] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 2048.592972][T17050] ? verify_lock_unused+0x140/0x140 [ 2048.598223][T17050] ? dev_queue_xmit+0x20/0x20 [ 2048.602924][T17050] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2048.609472][T17050] netlink_rcv_skb+0x1f5/0x440 [ 2048.614262][T17050] ? genl_bind+0x380/0x380 [ 2048.618715][T17050] ? netlink_ack+0xb50/0xb50 [ 2048.623376][T17050] ? __lock_acquire+0x7d10/0x7d10 [ 2048.628432][T17050] ? down_read+0x1aa/0x2e0 [ 2048.632881][T17050] genl_rcv+0x24/0x40 [ 2048.636889][T17050] netlink_unicast+0x774/0x920 [ 2048.641686][T17050] netlink_sendmsg+0x8ba/0xbe0 [ 2048.646660][T17050] ? netlink_getsockopt+0x570/0x570 [ 2048.651896][T17050] ? aa_sock_msg_perm+0x94/0x150 [ 2048.656859][T17050] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2048.662178][T17050] ? security_socket_sendmsg+0x7c/0xa0 [ 2048.667666][T17050] ? netlink_getsockopt+0x570/0x570 [ 2048.672893][T17050] ____sys_sendmsg+0x5b7/0x8f0 [ 2048.677731][T17050] ? __sys_sendmsg_sock+0x30/0x30 [ 2048.682894][T17050] ? import_iovec+0x6f/0xa0 [ 2048.687430][T17050] ___sys_sendmsg+0x236/0x2e0 [ 2048.692140][T17050] ? __sys_sendmsg+0x2a0/0x2a0 [ 2048.696946][T17050] ? ktime_get_real_ts64+0x440/0x440 [ 2048.702286][T17050] __se_sys_sendmsg+0x1af/0x290 [ 2048.707176][T17050] ? __x64_sys_sendmsg+0x80/0x80 [ 2048.712148][T17050] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2048.718185][T17050] ? lockdep_hardirqs_on+0x94/0x140 [ 2048.723504][T17050] do_syscall_64+0x4c/0xa0 [ 2048.727946][T17050] ? clear_bhb_loop+0x30/0x80 [ 2048.732656][T17050] ? clear_bhb_loop+0x30/0x80 [ 2048.737449][T17050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2048.743375][T17050] RIP: 0033:0x7f141e423e59 [ 2048.747821][T17050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2048.767455][T17050] RSP: 002b:00007f141c67d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2048.775998][T17050] RAX: ffffffffffffffda RBX: 00007f141e69cfa0 RCX: 00007f141e423e59 [ 2048.783992][T17050] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2048.792073][T17050] RBP: 00007f141e4b9d6f R08: 0000000000000000 R09: 0000000000000000 [ 2048.800159][T17050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2048.808155][T17050] R13: 00007f141e69d038 R14: 00007f141e69cfa0 R15: 00007ffffed5c8b8 [ 2048.816180][T17050] [ 2049.125431][T17067] netlink: 'syz.3.35602': attribute type 29 has an invalid length. [ 2049.209985][T17067] netlink: 'syz.3.35602': attribute type 29 has an invalid length. [ 2049.246034][T17065] netlink: 'syz.3.35602': attribute type 29 has an invalid length. [ 2049.270443][T17070] netlink: 'syz.3.35602': attribute type 1 has an invalid length. [ 2049.315408][T17070] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.35602'. [ 2049.330236][T17073] netlink: 10 bytes leftover after parsing attributes in process `syz.1.35604'. [ 2049.474446][T17076] netlink: 'syz.0.35607': attribute type 3 has an invalid length. [ 2049.485094][T17076] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.35607'. [ 2049.530730][T17082] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.35609'. [ 2049.759144][T17087] device veth0_macvtap left promiscuous mode [ 2049.899767][T17097] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2050.219689][T17106] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2050.227756][T17106] CPU: 0 PID: 17106 Comm: syz.4.35618 Not tainted syzkaller #0 [ 2050.235338][T17106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2050.245510][T17106] Call Trace: [ 2050.248814][T17106] [ 2050.251861][T17106] dump_stack_lvl+0x188/0x250 [ 2050.256600][T17106] ? show_regs_print_info+0x20/0x20 [ 2050.261838][T17106] ? load_image+0x400/0x400 [ 2050.266404][T17106] sysfs_warn_dup+0x8a/0xa0 [ 2050.270949][T17106] sysfs_do_create_link_sd+0xc0/0x110 [ 2050.276444][T17106] device_add+0x7f6/0x1000 [ 2050.280906][T17106] wiphy_register+0x1e81/0x2c30 [ 2050.285816][T17106] ? cfg80211_event_work+0x40/0x40 [ 2050.290967][T17106] ? minstrel_ht_alloc+0x808/0x980 [ 2050.296129][T17106] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2050.302246][T17106] ieee80211_register_hw+0x2aa1/0x3af0 [ 2050.307860][T17106] ? ieee80211_tasklet_handler+0x20/0x20 [ 2050.313534][T17106] ? rcu_is_watching+0x11/0xa0 [ 2050.318338][T17106] ? memset+0x1e/0x40 [ 2050.322349][T17106] ? hrtimer_init+0x10c/0x220 [ 2050.327067][T17106] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2050.332851][T17106] hwsim_new_radio_nl+0xa6f/0xc40 [ 2050.337930][T17106] genl_rcv_msg+0xcea/0xf90 [ 2050.342488][T17106] ? genl_bind+0x380/0x380 [ 2050.346947][T17106] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 2050.352179][T17106] ? verify_lock_unused+0x140/0x140 [ 2050.357641][T17106] ? kmalloc_large_node+0xf2/0x190 [ 2050.362874][T17106] ? dev_queue_xmit+0x20/0x20 [ 2050.367576][T17106] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2050.374227][T17106] netlink_rcv_skb+0x1f5/0x440 [ 2050.379021][T17106] ? genl_bind+0x380/0x380 [ 2050.383473][T17106] ? netlink_ack+0xb50/0xb50 [ 2050.388092][T17106] ? __lock_acquire+0x7d10/0x7d10 [ 2050.393162][T17106] ? down_read+0x1aa/0x2e0 [ 2050.397609][T17106] genl_rcv+0x24/0x40 [ 2050.401626][T17106] netlink_unicast+0x774/0x920 [ 2050.406427][T17106] netlink_sendmsg+0x8ba/0xbe0 [ 2050.411237][T17106] ? netlink_getsockopt+0x570/0x570 [ 2050.416469][T17106] ? aa_sock_msg_perm+0x94/0x150 [ 2050.421435][T17106] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2050.426765][T17106] ? security_socket_sendmsg+0x7c/0xa0 [ 2050.432246][T17106] ? netlink_getsockopt+0x570/0x570 [ 2050.437575][T17106] ____sys_sendmsg+0x5b7/0x8f0 [ 2050.442373][T17106] ? __sys_sendmsg_sock+0x30/0x30 [ 2050.447437][T17106] ? import_iovec+0x6f/0xa0 [ 2050.451978][T17106] ___sys_sendmsg+0x236/0x2e0 [ 2050.456697][T17106] ? __sys_sendmsg+0x2a0/0x2a0 [ 2050.461581][T17106] ? percpu_counter_add_batch+0x13b/0x160 [ 2050.467356][T17106] __se_sys_sendmsg+0x1af/0x290 [ 2050.472245][T17106] ? __x64_sys_sendmsg+0x80/0x80 [ 2050.477205][T17106] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2050.483237][T17106] ? lockdep_hardirqs_on+0x94/0x140 [ 2050.488475][T17106] do_syscall_64+0x4c/0xa0 [ 2050.492915][T17106] ? clear_bhb_loop+0x30/0x80 [ 2050.497611][T17106] ? clear_bhb_loop+0x30/0x80 [ 2050.502313][T17106] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2050.508227][T17106] RIP: 0033:0x7f4e5a233e59 [ 2050.512664][T17106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2050.532334][T17106] RSP: 002b:00007f4e5846c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2050.540788][T17106] RAX: ffffffffffffffda RBX: 00007f4e5a4ad090 RCX: 00007f4e5a233e59 [ 2050.548789][T17106] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2050.556778][T17106] RBP: 00007f4e5a2c9d6f R08: 0000000000000000 R09: 0000000000000000 [ 2050.564769][T17106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2050.572757][T17106] R13: 00007f4e5a4ad128 R14: 00007f4e5a4ad090 R15: 00007ffc25900488 [ 2050.580776][T17106] [ 2050.985567][T17131] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2051.917691][T17152] __nla_validate_parse: 5 callbacks suppressed [ 2051.917734][T17152] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.35636'. [ 2052.276359][T17160] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.35640'. [ 2052.340187][T17160] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2052.370839][T17160] CPU: 0 PID: 17160 Comm: syz.3.35640 Not tainted syzkaller #0 [ 2052.378445][T17160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2052.388519][T17160] Call Trace: [ 2052.391811][T17160] [ 2052.394760][T17160] dump_stack_lvl+0x188/0x250 [ 2052.399469][T17160] ? show_regs_print_info+0x20/0x20 [ 2052.404686][T17160] ? load_image+0x400/0x400 [ 2052.409230][T17160] sysfs_warn_dup+0x8a/0xa0 [ 2052.413758][T17160] sysfs_do_create_link_sd+0xc0/0x110 [ 2052.419155][T17160] device_add+0x7f6/0x1000 [ 2052.423619][T17160] wiphy_register+0x1e81/0x2c30 [ 2052.428520][T17160] ? cfg80211_event_work+0x40/0x40 [ 2052.433845][T17160] ? minstrel_ht_alloc+0x808/0x980 [ 2052.438999][T17160] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2052.445118][T17160] ieee80211_register_hw+0x2aa1/0x3af0 [ 2052.450745][T17160] ? ieee80211_tasklet_handler+0x20/0x20 [ 2052.456425][T17160] ? rcu_is_watching+0x11/0xa0 [ 2052.461221][T17160] ? memset+0x1e/0x40 [ 2052.465413][T17160] ? hrtimer_init+0x10c/0x220 [ 2052.470126][T17160] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2052.475902][T17160] hwsim_new_radio_nl+0xa6f/0xc40 [ 2052.480966][T17160] genl_rcv_msg+0xcea/0xf90 [ 2052.485513][T17160] ? genl_bind+0x380/0x380 [ 2052.489962][T17160] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2052.495973][T17160] ? lock_chain_count+0x20/0x20 [ 2052.500862][T17160] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2052.507054][T17160] ? lockdep_hardirqs_on+0x94/0x140 [ 2052.512288][T17160] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2052.518478][T17160] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2052.525030][T17160] ? lock_acquire+0x208/0x400 [ 2052.529861][T17160] netlink_rcv_skb+0x1f5/0x440 [ 2052.534765][T17160] ? genl_bind+0x380/0x380 [ 2052.539223][T17160] ? netlink_ack+0xb50/0xb50 [ 2052.543847][T17160] ? __lock_acquire+0x7d10/0x7d10 [ 2052.548909][T17160] ? down_read+0x1aa/0x2e0 [ 2052.553357][T17160] genl_rcv+0x24/0x40 [ 2052.557375][T17160] netlink_unicast+0x774/0x920 [ 2052.562180][T17160] netlink_sendmsg+0x8ba/0xbe0 [ 2052.567081][T17160] ? netlink_getsockopt+0x570/0x570 [ 2052.572315][T17160] ? aa_sock_msg_perm+0x94/0x150 [ 2052.577291][T17160] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2052.582608][T17160] ? security_socket_sendmsg+0x7c/0xa0 [ 2052.588104][T17160] ? netlink_getsockopt+0x570/0x570 [ 2052.593340][T17160] ____sys_sendmsg+0x5b7/0x8f0 [ 2052.598148][T17160] ? __sys_sendmsg_sock+0x30/0x30 [ 2052.603218][T17160] ? import_iovec+0x6f/0xa0 [ 2052.607753][T17160] ___sys_sendmsg+0x236/0x2e0 [ 2052.612644][T17160] ? __sys_sendmsg+0x2a0/0x2a0 [ 2052.617483][T17160] __se_sys_sendmsg+0x1af/0x290 [ 2052.622366][T17160] ? __x64_sys_sendmsg+0x80/0x80 [ 2052.627329][T17160] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2052.633438][T17160] ? lockdep_hardirqs_on+0x94/0x140 [ 2052.638674][T17160] do_syscall_64+0x4c/0xa0 [ 2052.643115][T17160] ? clear_bhb_loop+0x30/0x80 [ 2052.647830][T17160] ? clear_bhb_loop+0x30/0x80 [ 2052.652543][T17160] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2052.658462][T17160] RIP: 0033:0x7fe78b04de59 [ 2052.662907][T17160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2052.682542][T17160] RSP: 002b:00007fe7892a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2052.691001][T17160] RAX: ffffffffffffffda RBX: 00007fe78b2c6fa0 RCX: 00007fe78b04de59 [ 2052.699012][T17160] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2052.707023][T17160] RBP: 00007fe78b0e3d6f R08: 0000000000000000 R09: 0000000000000000 [ 2052.715109][T17160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2052.723112][T17160] R13: 00007fe78b2c7038 R14: 00007fe78b2c6fa0 R15: 00007ffc79a85b98 [ 2052.731138][T17160] [ 2053.160014][T17172] netlink: 10 bytes leftover after parsing attributes in process `syz.2.35646'. [ 2053.363679][T17179] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.35649'. [ 2054.395714][T17208] netlink: 10 bytes leftover after parsing attributes in process `syz.4.35661'. [ 2054.478951][T17210] device sit0 left promiscuous mode [ 2054.560540][T17213] device sit0 entered promiscuous mode [ 2054.806396][T17221] device syzkaller0 left promiscuous mode [ 2055.444040][T17247] netlink: 10 bytes leftover after parsing attributes in process `syz.2.35675'. [ 2055.553690][T17251] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.35677'. [ 2055.587121][T17251] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.35677'. [ 2055.672402][T17256] device sit0 left promiscuous mode [ 2055.801722][T17259] device sit0 entered promiscuous mode [ 2056.632141][T17292] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.35694'. [ 2056.677073][T17292] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.35694'. [ 2056.839976][T17303] device syzkaller0 left promiscuous mode [ 2056.934253][T17311] netlink: 144 bytes leftover after parsing attributes in process `syz.1.35699'. [ 2056.963945][T17311] team0: Port device C removed [ 2056.969994][T17311] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2057.133903][T17315] validate_nla: 8 callbacks suppressed [ 2057.133924][T17315] netlink: 'syz.4.35703': attribute type 39 has an invalid length. [ 2057.182936][T17315] device veth0_macvtap left promiscuous mode [ 2057.271102][T17320] device sit0 left promiscuous mode [ 2057.474879][T17324] device sit0 entered promiscuous mode [ 2058.139782][T17327] netlink: 10 bytes leftover after parsing attributes in process `syz.2.35707'. [ 2059.864596][T17376] netlink: 'syz.1.35725': attribute type 1 has an invalid length. [ 2059.875307][T17376] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.35725'. [ 2059.902595][T17375] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.35725'. [ 2059.921072][T17359] netlink: 144 bytes leftover after parsing attributes in process `syz.0.35715'. [ 2059.930492][T17359] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2059.946006][T17366] netlink: 'syz.2.35722': attribute type 39 has an invalid length. [ 2059.955544][T17366] device veth0_macvtap left promiscuous mode [ 2059.973325][T17365] netlink: 'syz.3.35721': attribute type 10 has an invalid length. [ 2059.983323][T17365] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.992375][T17365] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2060.001807][T17365] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2060.024874][T17365] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2060.039932][T17365] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2060.049051][T17365] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2060.060383][T17365] team0: Port device geneve1 added [ 2060.179378][T17375] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2060.190909][T17375] CPU: 1 PID: 17375 Comm: syz.1.35725 Not tainted syzkaller #0 [ 2060.198619][T17375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2060.208720][T17375] Call Trace: [ 2060.212146][T17375] [ 2060.215217][T17375] dump_stack_lvl+0x188/0x250 [ 2060.219961][T17375] ? show_regs_print_info+0x20/0x20 [ 2060.225209][T17375] ? load_image+0x400/0x400 [ 2060.229770][T17375] sysfs_warn_dup+0x8a/0xa0 [ 2060.234308][T17375] sysfs_do_create_link_sd+0xc0/0x110 [ 2060.239806][T17375] device_add+0x7f6/0x1000 [ 2060.244253][T17375] wiphy_register+0x1e81/0x2c30 [ 2060.249343][T17375] ? cfg80211_event_work+0x40/0x40 [ 2060.254515][T17375] ? minstrel_ht_alloc+0x808/0x980 [ 2060.259852][T17375] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2060.265958][T17375] ieee80211_register_hw+0x2aa1/0x3af0 [ 2060.271462][T17375] ? ieee80211_tasklet_handler+0x20/0x20 [ 2060.277332][T17375] ? rcu_is_watching+0x11/0xa0 [ 2060.282148][T17375] ? memset+0x1e/0x40 [ 2060.286145][T17375] ? hrtimer_init+0x10c/0x220 [ 2060.290858][T17375] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2060.296650][T17375] hwsim_new_radio_nl+0xa6f/0xc40 [ 2060.301727][T17375] genl_rcv_msg+0xcea/0xf90 [ 2060.306274][T17375] ? genl_bind+0x380/0x380 [ 2060.310729][T17375] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 2060.315974][T17375] ? verify_lock_unused+0x140/0x140 [ 2060.321191][T17375] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2060.326953][T17375] ? perf_trace_lock+0x301/0x390 [ 2060.331925][T17375] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2060.338574][T17375] netlink_rcv_skb+0x1f5/0x440 [ 2060.343373][T17375] ? genl_bind+0x380/0x380 [ 2060.347981][T17375] ? netlink_ack+0xb50/0xb50 [ 2060.352608][T17375] ? __lock_acquire+0x7d10/0x7d10 [ 2060.357666][T17375] ? down_read+0x1aa/0x2e0 [ 2060.362114][T17375] genl_rcv+0x24/0x40 [ 2060.366101][T17375] netlink_unicast+0x774/0x920 [ 2060.370905][T17375] netlink_sendmsg+0x8ba/0xbe0 [ 2060.375696][T17375] ? netlink_getsockopt+0x570/0x570 [ 2060.380902][T17375] ? __sanitizer_cov_trace_pc+0x55/0x60 [ 2060.386503][T17375] ? aa_sock_msg_perm+0x94/0x150 [ 2060.391479][T17375] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2060.396795][T17375] ? security_socket_sendmsg+0x7c/0xa0 [ 2060.402278][T17375] ? netlink_getsockopt+0x570/0x570 [ 2060.407509][T17375] ____sys_sendmsg+0x5b7/0x8f0 [ 2060.412368][T17375] ? __sys_sendmsg_sock+0x30/0x30 [ 2060.417427][T17375] ? import_iovec+0x6f/0xa0 [ 2060.421960][T17375] ___sys_sendmsg+0x236/0x2e0 [ 2060.426681][T17375] ? __sys_sendmsg+0x2a0/0x2a0 [ 2060.431470][T17375] ? trace_event_raw_event_lock+0x270/0x270 [ 2060.437406][T17375] __se_sys_sendmsg+0x1af/0x290 [ 2060.442281][T17375] ? __x64_sys_sendmsg+0x80/0x80 [ 2060.447350][T17375] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2060.453258][T17375] do_syscall_64+0x4c/0xa0 [ 2060.457682][T17375] ? clear_bhb_loop+0x30/0x80 [ 2060.462457][T17375] ? clear_bhb_loop+0x30/0x80 [ 2060.467150][T17375] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2060.473136][T17375] RIP: 0033:0x7f8ecc3a0e59 [ 2060.477561][T17375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2060.497195][T17375] RSP: 002b:00007f8eca5fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2060.505650][T17375] RAX: ffffffffffffffda RBX: 00007f8ecc619fa0 RCX: 00007f8ecc3a0e59 [ 2060.513725][T17375] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2060.521808][T17375] RBP: 00007f8ecc436d6f R08: 0000000000000000 R09: 0000000000000000 [ 2060.529833][T17375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2060.537913][T17375] R13: 00007f8ecc61a038 R14: 00007f8ecc619fa0 R15: 00007ffe47f5a7b8 [ 2060.545933][T17375] [ 2060.930531][T17396] netlink: 763 bytes leftover after parsing attributes in process `syz.2.35733'. [ 2061.101895][T17402] netlink: 'syz.3.35736': attribute type 1 has an invalid length. [ 2061.161006][T17402] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.35736'. [ 2061.670314][T17424] netlink: 'syz.0.35741': attribute type 1 has an invalid length. [ 2061.763471][T17424] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.35741'. [ 2061.780376][T17419] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.35741'. [ 2061.920223][T17419] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2061.972972][T17419] CPU: 1 PID: 17419 Comm: syz.0.35741 Not tainted syzkaller #0 [ 2061.980714][T17419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2061.990905][T17419] Call Trace: [ 2061.994414][T17419] [ 2061.997395][T17419] dump_stack_lvl+0x188/0x250 [ 2062.002168][T17419] ? show_regs_print_info+0x20/0x20 [ 2062.007448][T17419] ? load_image+0x400/0x400 [ 2062.012029][T17419] sysfs_warn_dup+0x8a/0xa0 [ 2062.016581][T17419] sysfs_do_create_link_sd+0xc0/0x110 [ 2062.022013][T17419] device_add+0x7f6/0x1000 [ 2062.026514][T17419] wiphy_register+0x1e81/0x2c30 [ 2062.031463][T17419] ? cfg80211_event_work+0x40/0x40 [ 2062.036624][T17419] ? minstrel_ht_alloc+0x808/0x980 [ 2062.041801][T17419] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2062.047943][T17419] ieee80211_register_hw+0x2aa1/0x3af0 [ 2062.053501][T17419] ? ieee80211_tasklet_handler+0x20/0x20 [ 2062.059478][T17419] ? rcu_is_watching+0x11/0xa0 [ 2062.064289][T17419] ? memset+0x1e/0x40 [ 2062.068343][T17419] ? hrtimer_init+0x10c/0x220 [ 2062.073084][T17419] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2062.078901][T17419] hwsim_new_radio_nl+0xa6f/0xc40 [ 2062.083994][T17419] genl_rcv_msg+0xcea/0xf90 [ 2062.088546][T17419] ? genl_bind+0x380/0x380 [ 2062.093011][T17419] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 2062.098234][T17419] ? verify_lock_unused+0x140/0x140 [ 2062.103465][T17419] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2062.109211][T17419] ? perf_trace_lock+0x301/0x390 [ 2062.114173][T17419] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2062.120721][T17419] netlink_rcv_skb+0x1f5/0x440 [ 2062.125503][T17419] ? genl_bind+0x380/0x380 [ 2062.130025][T17419] ? netlink_ack+0xb50/0xb50 [ 2062.134632][T17419] ? __lock_acquire+0x7d10/0x7d10 [ 2062.139859][T17419] ? down_read+0x1aa/0x2e0 [ 2062.144384][T17419] genl_rcv+0x24/0x40 [ 2062.148409][T17419] netlink_unicast+0x774/0x920 [ 2062.153202][T17419] netlink_sendmsg+0x8ba/0xbe0 [ 2062.157998][T17419] ? netlink_getsockopt+0x570/0x570 [ 2062.163221][T17419] ? perf_trace_preemptirq_template+0x2bc/0x360 [ 2062.169531][T17419] ? aa_sock_msg_perm+0x94/0x150 [ 2062.174481][T17419] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2062.179777][T17419] ? security_socket_sendmsg+0x7c/0xa0 [ 2062.185251][T17419] ? netlink_getsockopt+0x570/0x570 [ 2062.190459][T17419] ____sys_sendmsg+0x5b7/0x8f0 [ 2062.195270][T17419] ? __sys_sendmsg_sock+0x30/0x30 [ 2062.200361][T17419] ? import_iovec+0x6f/0xa0 [ 2062.204901][T17419] ___sys_sendmsg+0x236/0x2e0 [ 2062.209620][T17419] ? __sys_sendmsg+0x2a0/0x2a0 [ 2062.214562][T17419] __se_sys_sendmsg+0x1af/0x290 [ 2062.219435][T17419] ? __x64_sys_sendmsg+0x80/0x80 [ 2062.224379][T17419] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2062.230416][T17419] ? lockdep_hardirqs_on+0x94/0x140 [ 2062.235651][T17419] do_syscall_64+0x4c/0xa0 [ 2062.240091][T17419] ? clear_bhb_loop+0x30/0x80 [ 2062.244797][T17419] ? clear_bhb_loop+0x30/0x80 [ 2062.249497][T17419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2062.255411][T17419] RIP: 0033:0x7f141e423e59 [ 2062.259838][T17419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2062.279630][T17419] RSP: 002b:00007f141c67d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2062.288062][T17419] RAX: ffffffffffffffda RBX: 00007f141e69cfa0 RCX: 00007f141e423e59 [ 2062.296041][T17419] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2062.304024][T17419] RBP: 00007f141e4b9d6f R08: 0000000000000000 R09: 0000000000000000 [ 2062.312004][T17419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2062.319990][T17419] R13: 00007f141e69d038 R14: 00007f141e69cfa0 R15: 00007ffffed5c8b8 [ 2062.328048][T17419] [ 2062.450267][T17436] netlink: 10 bytes leftover after parsing attributes in process `syz.4.35745'. [ 2062.630386][T17440] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.35748'. [ 2062.680237][T17440] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.35748'. [ 2064.047633][T17485] device syzkaller0 left promiscuous mode [ 2064.182718][T17490] netlink: 'syz.0.35761': attribute type 7 has an invalid length. [ 2064.194469][T17490] netlink: 'syz.0.35761': attribute type 1 has an invalid length. [ 2064.197874][T17489] IPv6: Can't replace route, no match found [ 2064.202836][T17490] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.35761'. [ 2064.385993][T17492] netlink: 'syz.4.35762': attribute type 10 has an invalid length. [ 2064.508941][T17492] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.524747][T17492] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.534696][T17492] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.642984][T17492] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2064.671369][T17492] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2064.681019][T17492] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2064.720189][T17492] team0: Port device geneve1 added [ 2064.827737][T17504] netlink: 'syz.3.35769': attribute type 39 has an invalid length. [ 2065.640439][T17504] device veth0_macvtap left promiscuous mode [ 2065.839907][T17515] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.35774'. [ 2066.322856][T17531] netlink: 'syz.1.35778': attribute type 7 has an invalid length. [ 2066.404205][T17531] netlink: 'syz.1.35778': attribute type 1 has an invalid length. [ 2066.470766][T17531] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.35778'. [ 2066.975849][T17542] IPv6: Can't replace route, no match found [ 2067.276863][T17549] device bridge_slave_0 left promiscuous mode [ 2067.293995][T17549] bridge0: port 1(bridge_slave_0) entered disabled state [ 2067.443141][T17549] team0: Port device bridge0 removed [ 2067.522356][T17555] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.35789'. [ 2067.553323][T17555] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.35789'. [ 2067.587701][T17555] netlink: 2 bytes leftover after parsing attributes in process `syz.2.35789'. [ 2067.778020][T17566] netlink: 'syz.1.35793': attribute type 21 has an invalid length. [ 2068.152368][T17585] netlink: 'syz.2.35797': attribute type 10 has an invalid length. [ 2068.184744][T17585] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2068.228387][T17585] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2068.237637][T17585] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2068.246726][T17585] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2068.319700][T17585] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.359105][T17587] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.35799'. [ 2068.370993][T17585] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.411615][T17585] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.440136][T17585] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.620970][T17585] team0: Port device geneve1 added [ 2069.413807][T17610] netlink: 763 bytes leftover after parsing attributes in process `syz.1.35808'. [ 2069.513253][T17611] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.35819'. [ 2069.673849][T17616] netlink: 'syz.4.35810': attribute type 21 has an invalid length. [ 2070.054902][T17623] device bridge_slave_1 left promiscuous mode [ 2070.121999][T17623] bridge0: port 2(bridge_slave_1) entered disabled state [ 2070.203350][T17623] device bridge_slave_0 left promiscuous mode [ 2070.228674][T17623] bridge0: port 1(bridge_slave_0) entered disabled state [ 2070.316606][T17623] device bridge0 left promiscuous mode [ 2070.360374][T17623] team0: Port device bridge0 removed [ 2070.684401][T17637] IPv6: Can't replace route, no match found [ 2071.493221][T17656] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.35818'. [ 2071.540611][T17656] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.35818'. [ 2071.567492][T17656] netlink: 2 bytes leftover after parsing attributes in process `syz.1.35818'. [ 2071.754950][T17663] netlink: 163260 bytes leftover after parsing attributes in process `syz.4.35824'. [ 2072.553958][T17685] device bridge_slave_0 left promiscuous mode [ 2072.571230][T17685] bridge0: port 1(bridge_slave_0) entered disabled state [ 2072.661906][T17685] team0: Port device bridge0 removed [ 2073.298149][T17705] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.35839'. [ 2073.307906][T17705] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.35839'. [ 2073.365058][T17705] netlink: 2 bytes leftover after parsing attributes in process `syz.0.35839'. [ 2073.390563][T17713] netlink: 'syz.4.35843': attribute type 10 has an invalid length. [ 2073.404507][T17713] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2073.414682][T17713] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2073.434664][T17713] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2073.469599][T17712] device syzkaller0 entered promiscuous mode [ 2074.004491][T17738] netlink: 'syz.0.35863': attribute type 3 has an invalid length. [ 2074.046970][T17738] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.35863'. [ 2074.868169][T17773] netlink: 'syz.4.35868': attribute type 3 has an invalid length. [ 2074.928354][T17773] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.35868'. [ 2076.737711][T17828] netlink: 'syz.1.35883': attribute type 3 has an invalid length. [ 2076.802804][T17828] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.35883'. [ 2077.237629][T17833] netlink: 'syz.0.35888': attribute type 3 has an invalid length. [ 2077.353547][T17833] netlink: 'syz.0.35888': attribute type 1 has an invalid length. [ 2077.381854][T17841] netlink: 'syz.1.35890': attribute type 10 has an invalid length. [ 2077.407617][T17833] netlink: 132 bytes leftover after parsing attributes in process `syz.0.35888'. [ 2077.419903][T17841] netlink: 168 bytes leftover after parsing attributes in process `syz.1.35890'. [ 2078.657408][T17871] netlink: 'syz.0.35899': attribute type 10 has an invalid length. [ 2078.725083][T17877] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.35904'. [ 2078.736810][T17877] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 2078.739586][T17871] device geneve1 entered promiscuous mode [ 2078.761167][T17871] team0: Port device geneve1 added [ 2084.806185][T17994] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.35943'. [ 2084.852683][T17994] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 2087.855131][T18004] netlink: 'syz.3.35946': attribute type 3 has an invalid length. [ 2087.889879][T18004] netlink: 'syz.3.35946': attribute type 1 has an invalid length. [ 2087.905330][T18004] netlink: 132 bytes leftover after parsing attributes in process `syz.3.35946'. [ 2088.016650][T18015] netlink: 'syz.4.35949': attribute type 2 has an invalid length. [ 2088.086272][T18015] netlink: 'syz.4.35949': attribute type 11 has an invalid length. [ 2088.129489][T18015] netlink: 198172 bytes leftover after parsing attributes in process `syz.4.35949'. [ 2091.975848][T18054] netlink: 'syz.4.35965': attribute type 3 has an invalid length. [ 2091.999530][T18054] netlink: 'syz.4.35965': attribute type 1 has an invalid length. [ 2092.014437][T18056] device syzkaller0 entered promiscuous mode [ 2092.022858][T18054] netlink: 132 bytes leftover after parsing attributes in process `syz.4.35965'. [ 2092.076466][T18056] device syzkaller0 left promiscuous mode [ 2092.111921][T18056] device syzkaller0 entered promiscuous mode [ 2092.452913][T18079] netlink: 'syz.4.35977': attribute type 10 has an invalid length. [ 2092.461956][T18079] netlink: 168 bytes leftover after parsing attributes in process `syz.4.35977'. [ 2092.644993][T18088] netlink: 132 bytes leftover after parsing attributes in process `syz.3.35980'. [ 2092.661179][T18088] netlink: 60 bytes leftover after parsing attributes in process `syz.3.35980'. [ 2092.681927][T18088] netlink: 60 bytes leftover after parsing attributes in process `syz.3.35980'. [ 2092.701743][T18088] netlink: 60 bytes leftover after parsing attributes in process `syz.3.35980'. [ 2095.733723][T18097] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.35982'. [ 2095.753571][T18090] delete_channel: no stack [ 2095.779830][T18097] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2096.051811][T18113] netlink: 'syz.3.35991': attribute type 10 has an invalid length. [ 2096.078598][T18113] netlink: 168 bytes leftover after parsing attributes in process `syz.3.35991'. [ 2096.145711][T18117] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.36002'. [ 2096.174705][T18117] netlink: 'syz.1.36002': attribute type 3 has an invalid length. [ 2096.209855][T18117] netlink: 16770 bytes leftover after parsing attributes in process `syz.1.36002'. [ 2096.248855][T18117] netlink: 'syz.1.36002': attribute type 1 has an invalid length. [ 2097.027973][T18139] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2097.287360][T18158] netlink: 'syz.2.36010': attribute type 10 has an invalid length. [ 2097.307038][T18158] __nla_validate_parse: 1 callbacks suppressed [ 2097.307083][T18158] netlink: 168 bytes leftover after parsing attributes in process `syz.2.36010'. [ 2097.656002][T18177] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.36018'. [ 2097.702959][T18177] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2097.707818][T18174] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.36016'. [ 2097.728699][T18174] netlink: 'syz.3.36016': attribute type 3 has an invalid length. [ 2097.737696][T18174] netlink: 16770 bytes leftover after parsing attributes in process `syz.3.36016'. [ 2097.752695][T18174] netlink: 'syz.3.36016': attribute type 1 has an invalid length. [ 2098.267010][T18187] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.36032'. [ 2098.293139][T18187] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2098.735777][T18206] netlink: 'syz.0.36028': attribute type 10 has an invalid length. [ 2098.744635][T18206] netlink: 168 bytes leftover after parsing attributes in process `syz.0.36028'. [ 2098.869995][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.876473][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.221601][T18223] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.36035'. [ 2099.231260][T18223] netlink: 'syz.4.36035': attribute type 3 has an invalid length. [ 2099.241293][T18223] netlink: 16770 bytes leftover after parsing attributes in process `syz.4.36035'. [ 2099.254558][T18223] netlink: 'syz.4.36035': attribute type 1 has an invalid length. [ 2099.348091][T18230] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.36037'. [ 2099.357581][T18230] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2099.866704][T18246] netlink: 'syz.4.36045': attribute type 10 has an invalid length. [ 2099.905633][T18246] netlink: 40 bytes leftover after parsing attributes in process `syz.4.36045'. [ 2099.934572][T18246] device team0 entered promiscuous mode [ 2099.958602][T18246] device team_slave_0 entered promiscuous mode [ 2100.084893][T18246] device team_slave_1 entered promiscuous mode [ 2100.127659][T18246] device wlan1 entered promiscuous mode [ 2100.197267][T18246] device virt_wifi0 entered promiscuous mode [ 2100.205701][T18246] device geneve1 entered promiscuous mode [ 2100.391778][T18246] 8021q: adding VLAN 0 to HW filter on device team0 [ 2100.756058][T18246] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2100.873102][T18269] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2101.206137][T18274] netlink: 'syz.2.36053': attribute type 3 has an invalid length. [ 2101.221580][T18274] netlink: 'syz.2.36053': attribute type 1 has an invalid length. [ 2101.806868][T18301] delete_channel: no stack [ 2101.915210][T18307] netlink: 'syz.3.36066': attribute type 10 has an invalid length. [ 2101.960262][T18307] device team0 entered promiscuous mode [ 2101.982625][T18307] device team_slave_1 entered promiscuous mode [ 2102.016532][T18307] device wlan1 entered promiscuous mode [ 2102.051186][T18307] device virt_wifi0 entered promiscuous mode [ 2102.060656][T18316] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2102.063796][T18307] device hsr_slave_0 entered promiscuous mode [ 2102.112772][T18307] device geneve1 entered promiscuous mode [ 2102.217517][T18307] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2102.265333][T18306] netlink: 'syz.0.36077': attribute type 10 has an invalid length. [ 2102.335308][T18306] __nla_validate_parse: 5 callbacks suppressed [ 2102.335613][T18306] netlink: 168 bytes leftover after parsing attributes in process `syz.0.36077'. [ 2102.503914][T18327] netlink: 180 bytes leftover after parsing attributes in process `syz.0.36072'. [ 2103.021480][T18343] delete_channel: no stack [ 2103.099610][T18347] mac80211_hwsim hwsim104 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2103.183306][T18351] netlink: 'syz.3.36084': attribute type 10 has an invalid length. [ 2103.203247][T18351] netlink: 168 bytes leftover after parsing attributes in process `syz.3.36084'. [ 2103.356846][T18354] netlink: 'syz.0.36085': attribute type 10 has an invalid length. [ 2103.408600][T18354] netlink: 40 bytes leftover after parsing attributes in process `syz.0.36085'. [ 2103.687979][T18354] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2104.273140][T18380] delete_channel: no stack [ 2104.373972][T18389] netlink: 'syz.3.36098': attribute type 10 has an invalid length. [ 2104.404308][T18389] netlink: 168 bytes leftover after parsing attributes in process `syz.3.36098'. [ 2104.531788][T18393] netlink: 14 bytes leftover after parsing attributes in process `syz.1.36099'. [ 2106.278962][T18424] netlink: 'syz.0.36110': attribute type 21 has an invalid length. [ 2106.430667][T18424] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.36110'. [ 2106.567071][T18431] netlink: 'syz.1.36113': attribute type 10 has an invalid length. [ 2106.633117][T18431] netlink: 168 bytes leftover after parsing attributes in process `syz.1.36113'. [ 2107.910275][T18470] netlink: 'syz.1.36127': attribute type 10 has an invalid length. [ 2107.928334][T18470] netlink: 168 bytes leftover after parsing attributes in process `syz.1.36127'. [ 2107.970215][T18469] netlink: 'syz.4.36125': attribute type 21 has an invalid length. [ 2107.992873][T18469] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.36125'. [ 2111.115315][T18493] netlink: 180 bytes leftover after parsing attributes in process `syz.3.36134'. [ 2111.282583][T18501] netlink: 'syz.2.36136': attribute type 10 has an invalid length. [ 2111.330062][T18501] netlink: 40 bytes leftover after parsing attributes in process `syz.2.36136'. [ 2111.436489][T18501] device team0 entered promiscuous mode [ 2111.450104][T18501] device team_slave_1 entered promiscuous mode [ 2111.545544][T18501] device bridge0 entered promiscuous mode [ 2111.564527][T18501] device wlan1 entered promiscuous mode [ 2111.587798][T18501] device virt_wifi0 entered promiscuous mode [ 2111.633606][T18501] device hsr_slave_0 entered promiscuous mode [ 2111.667897][T18515] netlink: 'syz.3.36142': attribute type 29 has an invalid length. [ 2111.711794][T18501] device geneve1 entered promiscuous mode [ 2111.734584][T18501] 8021q: adding VLAN 0 to HW filter on device team0 [ 2111.881693][T18501] bridge0: port 2(team0) entered blocking state [ 2111.916965][T18501] bridge0: port 2(team0) entered disabled state [ 2111.933044][T18501] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2112.279919][T18530] netlink: 'syz.4.36147': attribute type 3 has an invalid length. [ 2112.317536][T18530] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.36147'. [ 2112.484441][T18543] netlink: 'syz.1.36152': attribute type 21 has an invalid length. [ 2112.508204][T18543] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.36152'. [ 2112.724673][T18549] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.36157'. [ 2113.013155][T18551] netlink: 'syz.2.36159': attribute type 10 has an invalid length. [ 2113.058663][T18551] device team0 left promiscuous mode [ 2113.068244][T18551] device team_slave_1 left promiscuous mode [ 2113.074465][T18551] device bridge0 left promiscuous mode [ 2113.081667][T18551] device wlan1 left promiscuous mode [ 2113.087129][T18551] device virt_wifi0 left promiscuous mode [ 2113.093090][T18551] device hsr_slave_0 left promiscuous mode [ 2113.099180][T18551] device geneve1 left promiscuous mode [ 2113.114130][T18551] team0: Cannot enslave team device to itself [ 2113.130080][T18553] netlink: 'syz.1.36158': attribute type 10 has an invalid length. [ 2113.142404][T18557] netlink: 'syz.0.36160': attribute type 29 has an invalid length. [ 2113.156022][T18553] netlink: 40 bytes leftover after parsing attributes in process `syz.1.36158'. [ 2113.194065][T18553] device team0 entered promiscuous mode [ 2113.261604][T18553] device team_slave_1 entered promiscuous mode [ 2113.382629][T18553] device virt_wifi0 entered promiscuous mode [ 2113.411089][T18553] device wlan1 entered promiscuous mode [ 2113.469861][T18562] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.36163'. [ 2113.599097][T18553] bridge0: port 3(team0) entered blocking state [ 2113.617151][T18553] bridge0: port 3(team0) entered disabled state [ 2113.630275][T18553] bridge0: port 3(team0) entered blocking state [ 2113.637174][T18553] bridge0: port 3(team0) entered forwarding state [ 2114.425093][T18566] netlink: 'syz.2.36164': attribute type 3 has an invalid length. [ 2114.484479][T18566] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.36164'. [ 2115.695504][T18597] netlink: 'syz.4.36177': attribute type 10 has an invalid length. [ 2115.731508][T18597] netlink: 40 bytes leftover after parsing attributes in process `syz.4.36177'. [ 2115.957511][T18597] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2116.152605][T18603] netlink: 'syz.2.36178': attribute type 29 has an invalid length. [ 2116.832597][T18622] netlink: 'syz.0.36187': attribute type 4 has an invalid length. [ 2116.885219][T18622] netlink: 152 bytes leftover after parsing attributes in process `syz.0.36187'. [ 2116.956954][T18622] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2116.996549][T18618] netlink: 'syz.3.36184': attribute type 3 has an invalid length. [ 2117.010188][T18618] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.36184'. [ 2117.342912][T18635] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.36190'. [ 2119.338461][T18643] netlink: 'syz.1.36194': attribute type 10 has an invalid length. [ 2119.346549][T18643] netlink: 40 bytes leftover after parsing attributes in process `syz.1.36194'. [ 2119.446830][T18652] netlink: 'syz.1.36195': attribute type 29 has an invalid length. [ 2121.966111][T18671] netlink: 'syz.2.36204': attribute type 10 has an invalid length. [ 2122.052054][T18671] team0: Device wg1 is of different type [ 2122.235273][T18674] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.36205'. [ 2122.287447][T18662] netlink: 'syz.1.36202': attribute type 3 has an invalid length. [ 2122.365151][T18662] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.36202'. [ 2122.441406][T18670] delete_channel: no stack [ 2122.508683][T18680] netlink: 'syz.0.36208': attribute type 10 has an invalid length. [ 2122.519428][T18680] device team0 left promiscuous mode [ 2122.524762][T18680] device team_slave_1 left promiscuous mode [ 2122.531325][T18680] device wlan1 left promiscuous mode [ 2122.537566][T18680] device virt_wifi0 left promiscuous mode [ 2122.544726][T18680] device geneve1 left promiscuous mode [ 2122.627155][T18680] team0: Cannot enslave team device to itself [ 2122.709571][T18685] netlink: 'syz.3.36210': attribute type 4 has an invalid length. [ 2122.724647][T18685] netlink: 152 bytes leftover after parsing attributes in process `syz.3.36210'. [ 2122.834036][T18685] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2125.516835][T18708] netlink: 'syz.4.36215': attribute type 29 has an invalid length. [ 2125.702935][T18718] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.36221'. [ 2125.837166][T18722] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.36227'. [ 2125.880383][T18724] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.36228'. [ 2125.891244][T18724] netlink: zone id is out of range [ 2125.896406][T18724] netlink: zone id is out of range [ 2125.902410][T18724] netlink: zone id is out of range [ 2125.907572][T18724] netlink: zone id is out of range [ 2125.928505][T18724] netlink: zone id is out of range [ 2125.953611][T18724] netlink: zone id is out of range [ 2125.988245][T18724] netlink: zone id is out of range [ 2126.008163][T18724] netlink: zone id is out of range [ 2126.024631][T18724] netlink: zone id is out of range [ 2126.307570][T18728] netlink: 'syz.0.36222': attribute type 3 has an invalid length. [ 2126.319334][T18728] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.36222'. [ 2126.381354][T18740] netlink: 'syz.4.36233': attribute type 10 has an invalid length. [ 2126.452639][T18740] team0: Device wg1 is of different type [ 2126.715557][T18739] delete_channel: no stack [ 2126.749913][T18749] netlink: 128 bytes leftover after parsing attributes in process `syz.2.36237'. [ 2126.783105][T18753] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.36240'. [ 2126.997815][T18764] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.36244'. [ 2127.017062][T18766] netlink: 'syz.3.36246': attribute type 28 has an invalid length. [ 2127.135526][T18772] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.36248'. [ 2127.375371][T18786] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.36254'. [ 2127.386151][T18784] netlink: 'syz.3.36253': attribute type 10 has an invalid length. [ 2127.440992][T18784] team0: Device wg1 is of different type [ 2127.597389][T18783] delete_channel: no stack [ 2128.396108][T18804] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.36260'. [ 2128.470787][T18804] net_ratelimit: 169 callbacks suppressed [ 2128.470809][T18804] netlink: zone id is out of range [ 2128.518118][T18804] netlink: zone id is out of range [ 2128.529587][T18804] netlink: zone id is out of range [ 2128.566794][T18804] netlink: zone id is out of range [ 2128.584926][T18804] netlink: zone id is out of range [ 2128.601100][T18804] netlink: zone id is out of range [ 2128.617641][T18804] netlink: zone id is out of range [ 2128.627749][T18813] netlink: 'syz.4.36262': attribute type 28 has an invalid length. [ 2128.637137][T18804] netlink: zone id is out of range [ 2128.643269][T18804] netlink: zone id is out of range [ 2128.690182][T18804] netlink: zone id is out of range [ 2128.996972][T18832] netlink: 'syz.1.36270': attribute type 10 has an invalid length. [ 2129.098982][T18832] device wg1 entered promiscuous mode [ 2129.118539][T18832] team0: Device wg1 is of different type [ 2129.220462][T18831] delete_channel: no stack [ 2129.416674][T18847] netlink: 'syz.1.36278': attribute type 28 has an invalid length. [ 2132.094280][T18875] netlink: 'syz.0.36289': attribute type 10 has an invalid length. [ 2132.126739][T18875] team0: Device wg1 is of different type [ 2132.268994][T18872] delete_channel: no stack [ 2132.379589][T18886] netlink: 'syz.1.36293': attribute type 2 has an invalid length. [ 2132.401621][T18886] __nla_validate_parse: 5 callbacks suppressed [ 2132.401832][T18886] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.36293'. [ 2132.977189][T18917] netlink: 128 bytes leftover after parsing attributes in process `syz.3.36304'. [ 2133.246523][T18935] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.36311'. [ 2133.292558][T18931] netlink: 'syz.0.36309': attribute type 2 has an invalid length. [ 2133.356741][T18931] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.36309'. [ 2133.436449][T18929] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.36311'. [ 2133.711564][T18957] device syzkaller0 left promiscuous mode [ 2133.730429][T18955] device syzkaller0 entered promiscuous mode [ 2134.038321][T18969] netlink: 'syz.4.36328': attribute type 10 has an invalid length. [ 2134.085841][T18969] team0: Device wg1 is of different type [ 2134.280295][T18968] delete_channel: no stack [ 2134.576500][T18975] netlink: 'syz.4.36329': attribute type 2 has an invalid length. [ 2134.658318][T18975] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.36329'. [ 2134.944739][T18989] device syzkaller0 left promiscuous mode [ 2135.137135][T18996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2135.489717][T19005] netlink: 156 bytes leftover after parsing attributes in process `syz.4.36343'. [ 2135.672111][T19014] netlink: 'syz.2.36346': attribute type 2 has an invalid length. [ 2135.695991][T19014] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.36346'. [ 2135.757830][T19018] netlink: 'syz.4.36349': attribute type 26 has an invalid length. [ 2135.766215][T19018] netlink: 54695 bytes leftover after parsing attributes in process `syz.4.36349'. [ 2136.166726][T19029] device syzkaller0 entered promiscuous mode [ 2136.557243][T19039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2137.024285][T19050] netlink: 'syz.4.36360': attribute type 10 has an invalid length. [ 2137.105479][T19050] team0: Device wg1 is of different type [ 2137.386946][T19049] delete_channel: no stack [ 2137.665626][T19073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2137.756197][T19076] netlink: 156 bytes leftover after parsing attributes in process `syz.2.36371'. [ 2137.889391][T19080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2138.632693][T19108] netlink: 'syz.1.36379': attribute type 10 has an invalid length. [ 2138.685688][T19108] team0: Device wg1 is of different type [ 2138.903439][T19104] device syzkaller0 entered promiscuous mode [ 2138.994810][T19105] delete_channel: no stack [ 2140.089352][T19151] netlink: 'syz.3.36399': attribute type 10 has an invalid length. [ 2140.247653][T19151] team0: Device wg1 is of different type [ 2140.318714][T19147] delete_channel: no stack [ 2140.473354][T19160] device syzkaller0 entered promiscuous mode [ 2140.662393][T19168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2141.843359][T19199] device syzkaller0 entered promiscuous mode [ 2142.703152][T19215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2143.759048][T19244] netlink: 'syz.0.36431': attribute type 10 has an invalid length. [ 2143.782962][T19244] team0: Device vxcan0 is of different type [ 2144.045196][T19254] device syzkaller0 entered promiscuous mode [ 2144.255872][T19263] netlink: 156 bytes leftover after parsing attributes in process `syz.4.36441'. [ 2144.511499][T19267] netlink: 'syz.3.36443': attribute type 1 has an invalid length. [ 2144.603402][T19267] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.36443'. [ 2144.909369][T19278] netlink: 'syz.4.36448': attribute type 10 has an invalid length. [ 2144.954233][T19278] device vxcan0 entered promiscuous mode [ 2144.964060][T19278] team0: Device vxcan0 is of different type [ 2145.337707][T19288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2145.825996][T19311] netlink: 'syz.2.36457': attribute type 1 has an invalid length. [ 2145.834709][T19311] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.36457'. [ 2146.134582][T19326] netlink: 'syz.3.36464': attribute type 10 has an invalid length. [ 2146.156655][T19326] device vxcan0 entered promiscuous mode [ 2146.163265][T19326] team0: Device vxcan0 is of different type [ 2146.211874][T19329] device syzkaller0 entered promiscuous mode [ 2146.594211][T19336] delete_channel: no stack [ 2146.889382][T19348] netlink: 'syz.4.36470': attribute type 1 has an invalid length. [ 2146.934159][T19348] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.36470'. [ 2150.564163][T19407] device syzkaller0 entered promiscuous mode [ 2150.774212][T19423] netlink: 156 bytes leftover after parsing attributes in process `syz.3.36495'. [ 2151.214418][T19450] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.36510'. [ 2152.706371][T19472] device syzkaller0 entered promiscuous mode [ 2155.335922][T19475] netlink: 156 bytes leftover after parsing attributes in process `syz.1.36517'. [ 2155.803105][T19501] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.36526'. [ 2157.974323][T19532] netlink: 'syz.0.36536': attribute type 3 has an invalid length. [ 2157.993640][T19532] netlink: 'syz.0.36536': attribute type 1 has an invalid length. [ 2158.013728][T19534] mac80211_hwsim hwsim104 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2158.015113][T19532] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.36536'. [ 2160.178707][T19584] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2160.301259][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.308843][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.542894][T19593] netlink: 'syz.4.36559': attribute type 3 has an invalid length. [ 2160.552927][T19593] netlink: 'syz.4.36559': attribute type 1 has an invalid length. [ 2160.561092][T19593] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.36559'. [ 2164.016369][T19621] mac80211_hwsim hwsim125 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2164.303300][T19631] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.36585'. [ 2165.049562][T19649] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.36579'. [ 2165.481979][T19664] netlink: 703 bytes leftover after parsing attributes in process `syz.0.36587'. [ 2165.520218][T19667] mac80211_hwsim hwsim100 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2165.774281][T19674] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.36592'. [ 2166.856932][T19698] mac80211_hwsim hwsim102 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2167.027340][T19701] netlink: 703 bytes leftover after parsing attributes in process `syz.4.36600'. [ 2167.225141][T19709] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.36604'. [ 2167.707846][T19720] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.36608'. [ 2168.327235][T19732] mac80211_hwsim hwsim102 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2168.991625][T19744] mac80211_hwsim hwsim102 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2169.065840][T19745] netlink: 703 bytes leftover after parsing attributes in process `syz.1.36616'. [ 2169.355933][T19754] mac80211_hwsim hwsim104 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2169.593301][T19770] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.36622'. [ 2172.528375][T19776] netlink: 'syz.3.36625': attribute type 3 has an invalid length. [ 2172.598319][T19776] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.36625'. [ 2172.601766][T19781] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.36627'. [ 2172.915095][T19787] netlink: 'syz.4.36642': attribute type 3 has an invalid length. [ 2172.967264][T19787] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.36642'. [ 2173.366504][T19796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2173.373874][T19796] IPv6: NLM_F_CREATE should be set when creating new route [ 2173.643129][T19807] mac80211_hwsim hwsim92 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2174.850981][T19832] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.36649'. [ 2175.740617][T19859] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.36660'. [ 2175.750870][T19859] net_ratelimit: 168 callbacks suppressed [ 2175.750907][T19859] openvswitch: netlink: IP tunnel dst address not specified [ 2176.097405][T19864] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.36662'. [ 2176.600277][T19883] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2176.607575][T19883] IPv6: NLM_F_CREATE should be set when creating new route [ 2176.614869][T19883] IPv6: NLM_F_CREATE should be set when creating new route [ 2176.622136][T19883] IPv6: NLM_F_CREATE should be set when creating new route [ 2177.132139][T19898] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.36675'. [ 2177.209628][T19898] openvswitch: netlink: IP tunnel dst address not specified [ 2177.671165][T19911] mac80211_hwsim hwsim104 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2178.803537][T19936] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.36688'. [ 2178.898501][T19936] openvswitch: netlink: IP tunnel dst address not specified [ 2180.396597][T19954] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.36697'. [ 2183.263151][T19979] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.36703'. [ 2183.315249][T19979] openvswitch: netlink: IP tunnel dst address not specified [ 2183.555325][T19986] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.36717'. [ 2184.176021][T19993] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.36709'. [ 2185.437486][T20002] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.36711'. [ 2187.132286][T20025] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.36730'. [ 2187.548549][T20027] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.36718'. [ 2187.574837][T20027] openvswitch: netlink: IP tunnel dst address not specified [ 2188.071920][T20042] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.36727'. [ 2188.594074][T20054] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.36731'. [ 2189.259123][T20074] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.36739'. [ 2189.328048][T20074] openvswitch: netlink: IP tunnel dst address not specified [ 2189.406281][T20076] netlink: 'syz.3.36741': attribute type 1 has an invalid length. [ 2189.449654][T20076] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.36741'. [ 2192.321574][T20096] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.36746'. [ 2193.097170][T20119] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.36753'. [ 2193.193650][T20119] openvswitch: netlink: IP tunnel dst address not specified [ 2200.724575][T20162] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.36765'. [ 2204.473952][T20205] netlink: 168 bytes leftover after parsing attributes in process `syz.0.36783'. [ 2207.175094][T20245] netlink: 'syz.0.36809': attribute type 10 has an invalid length. [ 2207.257557][T20245] team0: Port device veth1_to_bond added [ 2207.342120][T20244] delete_channel: no stack [ 2207.554419][T20254] netlink: 168 bytes leftover after parsing attributes in process `syz.4.36800'. [ 2207.614786][T20254] C: renamed from team_slave_0 [ 2215.761698][T20324] netlink: 'syz.3.36825': attribute type 3 has an invalid length. [ 2215.809728][T20324] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.36825'. [ 2215.854040][T20325] netlink: 'syz.3.36825': attribute type 3 has an invalid length. [ 2215.885608][T20325] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.36825'. [ 2219.484074][T20378] netlink: 'syz.1.36844': attribute type 10 has an invalid length. [ 2219.595098][T20378] device veth1_to_bond entered promiscuous mode [ 2219.608994][T20378] team0: Port device veth1_to_bond added [ 2219.644352][T20377] delete_channel: no stack [ 2221.891651][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.898507][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.500829][T20422] netlink: 'syz.2.36858': attribute type 10 has an invalid length. [ 2222.603023][T20422] team0: Port device veth1_to_bond added [ 2222.637671][T20426] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.36871'. [ 2222.640143][T20421] delete_channel: no stack [ 2222.706544][T20426] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2222.738322][T20426] CPU: 0 PID: 20426 Comm: syz.3.36871 Not tainted syzkaller #0 [ 2222.745939][T20426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2222.756020][T20426] Call Trace: [ 2222.759315][T20426] [ 2222.762261][T20426] dump_stack_lvl+0x188/0x250 [ 2222.766997][T20426] ? show_regs_print_info+0x20/0x20 [ 2222.772215][T20426] ? load_image+0x400/0x400 [ 2222.776841][T20426] sysfs_warn_dup+0x8a/0xa0 [ 2222.781366][T20426] sysfs_do_create_link_sd+0xc0/0x110 [ 2222.786768][T20426] device_add+0x7f6/0x1000 [ 2222.791220][T20426] wiphy_register+0x1e81/0x2c30 [ 2222.796128][T20426] ? cfg80211_event_work+0x40/0x40 [ 2222.801275][T20426] ? minstrel_ht_alloc+0x808/0x980 [ 2222.806435][T20426] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2222.812552][T20426] ieee80211_register_hw+0x2aa1/0x3af0 [ 2222.818066][T20426] ? ieee80211_tasklet_handler+0x20/0x20 [ 2222.823739][T20426] ? rcu_is_watching+0x11/0xa0 [ 2222.828546][T20426] ? memset+0x1e/0x40 [ 2222.832559][T20426] ? hrtimer_init+0x10c/0x220 [ 2222.837275][T20426] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2222.843054][T20426] hwsim_new_radio_nl+0xa6f/0xc40 [ 2222.848135][T20426] genl_rcv_msg+0xcea/0xf90 [ 2222.852682][T20426] ? genl_bind+0x380/0x380 [ 2222.857137][T20426] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2222.863146][T20426] ? lock_chain_count+0x20/0x20 [ 2222.868031][T20426] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2222.874230][T20426] ? lockdep_hardirqs_on+0x94/0x140 [ 2222.879463][T20426] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2222.885648][T20426] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2222.892293][T20426] ? lock_acquire+0x208/0x400 [ 2222.897007][T20426] netlink_rcv_skb+0x1f5/0x440 [ 2222.901794][T20426] ? genl_bind+0x380/0x380 [ 2222.906238][T20426] ? netlink_ack+0xb50/0xb50 [ 2222.910851][T20426] ? __lock_acquire+0x7d10/0x7d10 [ 2222.915917][T20426] ? down_read+0x1aa/0x2e0 [ 2222.920365][T20426] genl_rcv+0x24/0x40 [ 2222.924372][T20426] netlink_unicast+0x774/0x920 [ 2222.929174][T20426] netlink_sendmsg+0x8ba/0xbe0 [ 2222.933976][T20426] ? netlink_getsockopt+0x570/0x570 [ 2222.939235][T20426] ? aa_sock_msg_perm+0x94/0x150 [ 2222.944206][T20426] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2222.949514][T20426] ? security_socket_sendmsg+0x7c/0xa0 [ 2222.954999][T20426] ? netlink_getsockopt+0x570/0x570 [ 2222.960220][T20426] ____sys_sendmsg+0x5b7/0x8f0 [ 2222.965032][T20426] ? __sys_sendmsg_sock+0x30/0x30 [ 2222.970097][T20426] ? ___sys_sendmsg+0x21b/0x2e0 [ 2222.974987][T20426] ___sys_sendmsg+0x236/0x2e0 [ 2222.979705][T20426] ? __sys_sendmsg+0x2a0/0x2a0 [ 2222.984519][T20426] ? ktime_get_real_ts64+0x440/0x440 [ 2222.989867][T20426] __se_sys_sendmsg+0x1af/0x290 [ 2222.994764][T20426] ? __x64_sys_sendmsg+0x80/0x80 [ 2222.999767][T20426] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2223.005705][T20426] do_syscall_64+0x4c/0xa0 [ 2223.010160][T20426] ? clear_bhb_loop+0x30/0x80 [ 2223.014867][T20426] ? clear_bhb_loop+0x30/0x80 [ 2223.019576][T20426] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2223.025503][T20426] RIP: 0033:0x7fe78b04de59 [ 2223.029941][T20426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2223.049577][T20426] RSP: 002b:00007fe7892a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2223.058040][T20426] RAX: ffffffffffffffda RBX: 00007fe78b2c6fa0 RCX: 00007fe78b04de59 [ 2223.066220][T20426] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2223.074227][T20426] RBP: 00007fe78b0e3d6f R08: 0000000000000000 R09: 0000000000000000 [ 2223.082323][T20426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2223.090326][T20426] R13: 00007fe78b2c7038 R14: 00007fe78b2c6fa0 R15: 00007ffc79a85b98 [ 2223.098439][T20426] [ 2226.217389][T20487] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.36880'. [ 2226.380891][T20487] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2226.449924][T20487] CPU: 1 PID: 20487 Comm: syz.0.36880 Not tainted syzkaller #0 [ 2226.457530][T20487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2226.467621][T20487] Call Trace: [ 2226.470927][T20487] [ 2226.473884][T20487] dump_stack_lvl+0x188/0x250 [ 2226.478605][T20487] ? show_regs_print_info+0x20/0x20 [ 2226.483833][T20487] ? load_image+0x400/0x400 [ 2226.488384][T20487] sysfs_warn_dup+0x8a/0xa0 [ 2226.492919][T20487] sysfs_do_create_link_sd+0xc0/0x110 [ 2226.498415][T20487] device_add+0x7f6/0x1000 [ 2226.502880][T20487] wiphy_register+0x1e81/0x2c30 [ 2226.507911][T20487] ? cfg80211_event_work+0x40/0x40 [ 2226.513264][T20487] ? minstrel_ht_alloc+0x808/0x980 [ 2226.518423][T20487] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2226.524874][T20487] ieee80211_register_hw+0x2aa1/0x3af0 [ 2226.530379][T20487] ? ieee80211_tasklet_handler+0x20/0x20 [ 2226.536044][T20487] ? rcu_is_watching+0x11/0xa0 [ 2226.540832][T20487] ? memset+0x1e/0x40 [ 2226.544836][T20487] ? hrtimer_init+0x10c/0x220 [ 2226.549540][T20487] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2226.555311][T20487] hwsim_new_radio_nl+0xa6f/0xc40 [ 2226.560375][T20487] genl_rcv_msg+0xcea/0xf90 [ 2226.564921][T20487] ? genl_bind+0x380/0x380 [ 2226.569379][T20487] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 2226.574606][T20487] ? verify_lock_unused+0x140/0x140 [ 2226.579839][T20487] ? kmalloc_large_node+0xf2/0x190 [ 2226.584971][T20487] ? dev_queue_xmit+0x20/0x20 [ 2226.589668][T20487] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2226.596220][T20487] netlink_rcv_skb+0x1f5/0x440 [ 2226.601016][T20487] ? genl_bind+0x380/0x380 [ 2226.605628][T20487] ? netlink_ack+0xb50/0xb50 [ 2226.610235][T20487] ? __lock_acquire+0x7d10/0x7d10 [ 2226.615305][T20487] ? down_read+0x1aa/0x2e0 [ 2226.619747][T20487] genl_rcv+0x24/0x40 [ 2226.623749][T20487] netlink_unicast+0x774/0x920 [ 2226.628541][T20487] netlink_sendmsg+0x8ba/0xbe0 [ 2226.633336][T20487] ? netlink_getsockopt+0x570/0x570 [ 2226.638559][T20487] ? aa_sock_msg_perm+0x94/0x150 [ 2226.643527][T20487] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2226.648842][T20487] ? security_socket_sendmsg+0x7c/0xa0 [ 2226.654331][T20487] ? netlink_getsockopt+0x570/0x570 [ 2226.659543][T20487] ____sys_sendmsg+0x5b7/0x8f0 [ 2226.664343][T20487] ? __sys_sendmsg_sock+0x30/0x30 [ 2226.669396][T20487] ? import_iovec+0x6f/0xa0 [ 2226.673931][T20487] ___sys_sendmsg+0x236/0x2e0 [ 2226.678640][T20487] ? __sys_sendmsg+0x2a0/0x2a0 [ 2226.683447][T20487] ? percpu_counter_add_batch+0x13b/0x160 [ 2226.689232][T20487] __se_sys_sendmsg+0x1af/0x290 [ 2226.694123][T20487] ? __x64_sys_sendmsg+0x80/0x80 [ 2226.699083][T20487] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2226.705205][T20487] ? lockdep_hardirqs_on+0x94/0x140 [ 2226.710427][T20487] do_syscall_64+0x4c/0xa0 [ 2226.714873][T20487] ? clear_bhb_loop+0x30/0x80 [ 2226.719565][T20487] ? clear_bhb_loop+0x30/0x80 [ 2226.724271][T20487] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2226.730202][T20487] RIP: 0033:0x7f141e423e59 [ 2226.734643][T20487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2226.754370][T20487] RSP: 002b:00007f141c65c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2226.762847][T20487] RAX: ffffffffffffffda RBX: 00007f141e69d090 RCX: 00007f141e423e59 [ 2226.771275][T20487] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2226.779279][T20487] RBP: 00007f141e4b9d6f R08: 0000000000000000 R09: 0000000000000000 [ 2226.787283][T20487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2226.795275][T20487] R13: 00007f141e69d128 R14: 00007f141e69d090 R15: 00007ffffed5c8b8 [ 2226.803292][T20487] [ 2227.204466][T20495] netlink: 'syz.3.36893': attribute type 10 has an invalid length. [ 2227.312722][T20495] device veth1_to_bond entered promiscuous mode [ 2227.373508][T20495] team0: Port device veth1_to_bond added [ 2227.458840][T20489] delete_channel: no stack [ 2236.686016][T20625] netlink: 'syz.1.36930': attribute type 19 has an invalid length. [ 2236.726267][T20625] netlink: 156 bytes leftover after parsing attributes in process `syz.1.36930'. [ 2237.139619][T20635] netlink: 'syz.2.36945': attribute type 19 has an invalid length. [ 2237.169295][T20635] netlink: 156 bytes leftover after parsing attributes in process `syz.2.36945'. [ 2237.615687][T20644] netlink: 'syz.0.36948': attribute type 19 has an invalid length. [ 2237.710919][T20644] netlink: 156 bytes leftover after parsing attributes in process `syz.0.36948'. [ 2239.075836][T20670] IPv6: Can't replace route, no match found [ 2241.050389][T20700] netlink: 'syz.2.36956': attribute type 9 has an invalid length. [ 2241.120836][T20700] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.36956'. [ 2241.161866][T20701] netlink: 763 bytes leftover after parsing attributes in process `syz.0.36968'. [ 2241.756318][T20723] netlink: 'syz.1.36963': attribute type 2 has an invalid length. [ 2241.773580][T20723] netlink: 'syz.1.36963': attribute type 8 has an invalid length. [ 2241.820521][T20723] netlink: 132 bytes leftover after parsing attributes in process `syz.1.36963'. [ 2243.153810][T20750] netlink: 'syz.3.36974': attribute type 9 has an invalid length. [ 2243.231157][T20750] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.36974'. [ 2243.492093][T20763] netlink: 'syz.0.36978': attribute type 2 has an invalid length. [ 2243.535317][T20763] netlink: 'syz.0.36978': attribute type 8 has an invalid length. [ 2243.577482][T20763] netlink: 132 bytes leftover after parsing attributes in process `syz.0.36978'. [ 2245.414482][T20800] netlink: 'syz.4.36992': attribute type 9 has an invalid length. [ 2245.433658][T20800] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.36992'. [ 2246.402625][T20804] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 2246.402912][T20810] netlink: 'syz.3.36996': attribute type 2 has an invalid length. [ 2246.420242][T20804] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 2246.458274][T20804] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2246.468938][T20810] netlink: 'syz.3.36996': attribute type 8 has an invalid length. [ 2246.476887][T20810] netlink: 132 bytes leftover after parsing attributes in process `syz.3.36996'. [ 2248.392000][T20834] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.37016'. [ 2248.779287][T20852] netlink: 763 bytes leftover after parsing attributes in process `syz.2.37013'. [ 2249.776387][T20877] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.37023'. [ 2250.960783][T20898] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.37031'. [ 2254.875423][T20924] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.37039'. [ 2255.700569][T20935] netlink: 'syz.0.37044': attribute type 3 has an invalid length. [ 2255.748517][T20935] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.37044'. [ 2257.941575][T20939] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.37046'. [ 2258.097085][T20939] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2258.356481][T20939] CPU: 1 PID: 20939 Comm: syz.4.37046 Not tainted syzkaller #0 [ 2258.364361][T20939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2258.374453][T20939] Call Trace: [ 2258.377794][T20939] [ 2258.380780][T20939] dump_stack_lvl+0x188/0x250 [ 2258.385542][T20939] ? show_regs_print_info+0x20/0x20 [ 2258.390778][T20939] ? load_image+0x400/0x400 [ 2258.395339][T20939] sysfs_warn_dup+0x8a/0xa0 [ 2258.399880][T20939] sysfs_do_create_link_sd+0xc0/0x110 [ 2258.405293][T20939] device_add+0x7f6/0x1000 [ 2258.409758][T20939] wiphy_register+0x1e81/0x2c30 [ 2258.414666][T20939] ? cfg80211_event_work+0x40/0x40 [ 2258.419808][T20939] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2258.426012][T20939] ? rtnl_unlock+0x5/0x10 [ 2258.430443][T20939] ieee80211_register_hw+0x2aa1/0x3af0 [ 2258.436220][T20939] ? ieee80211_tasklet_handler+0x20/0x20 [ 2258.441889][T20939] ? rcu_is_watching+0x11/0xa0 [ 2258.446686][T20939] ? memset+0x1e/0x40 [ 2258.450786][T20939] ? hrtimer_init+0x10c/0x220 [ 2258.455505][T20939] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2258.461472][T20939] hwsim_new_radio_nl+0xa6f/0xc40 [ 2258.466565][T20939] genl_rcv_msg+0xcea/0xf90 [ 2258.471093][T20939] ? lock_chain_count+0x20/0x20 [ 2258.475991][T20939] ? genl_bind+0x380/0x380 [ 2258.480441][T20939] ? lock_chain_count+0x20/0x20 [ 2258.485323][T20939] ? rcu_is_watching+0x11/0xa0 [ 2258.490116][T20939] ? verify_lock_unused+0x140/0x140 [ 2258.495353][T20939] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2258.501543][T20939] ? lockdep_hardirqs_on+0x94/0x140 [ 2258.506776][T20939] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2258.512982][T20939] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2258.519543][T20939] netlink_rcv_skb+0x1f5/0x440 [ 2258.524352][T20939] ? genl_bind+0x380/0x380 [ 2258.528828][T20939] ? netlink_ack+0xb50/0xb50 [ 2258.533468][T20939] ? __lock_acquire+0x7d10/0x7d10 [ 2258.538538][T20939] ? down_read+0x1aa/0x2e0 [ 2258.542998][T20939] genl_rcv+0x24/0x40 [ 2258.547020][T20939] netlink_unicast+0x774/0x920 [ 2258.551830][T20939] netlink_sendmsg+0x8ba/0xbe0 [ 2258.556642][T20939] ? lockdep_hardirqs_on+0x94/0x140 [ 2258.561881][T20939] ? netlink_getsockopt+0x570/0x570 [ 2258.567117][T20939] ? ____sys_sendmsg+0x52d/0x8f0 [ 2258.572093][T20939] ? netlink_getsockopt+0x570/0x570 [ 2258.577322][T20939] ____sys_sendmsg+0x5b7/0x8f0 [ 2258.582163][T20939] ? __sys_sendmsg_sock+0x30/0x30 [ 2258.587244][T20939] ? import_iovec+0x6f/0xa0 [ 2258.591790][T20939] ___sys_sendmsg+0x236/0x2e0 [ 2258.596517][T20939] ? __sys_sendmsg+0x2a0/0x2a0 [ 2258.601332][T20939] ? ktime_get_real_ts64+0x440/0x440 [ 2258.606680][T20939] __se_sys_sendmsg+0x1af/0x290 [ 2258.611583][T20939] ? __x64_sys_sendmsg+0x80/0x80 [ 2258.616571][T20939] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2258.622631][T20939] do_syscall_64+0x4c/0xa0 [ 2258.627179][T20939] ? clear_bhb_loop+0x30/0x80 [ 2258.631976][T20939] ? clear_bhb_loop+0x30/0x80 [ 2258.636701][T20939] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2258.642629][T20939] RIP: 0033:0x7f4e5a233e59 [ 2258.647089][T20939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2258.666727][T20939] RSP: 002b:00007f4e5848d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2258.675253][T20939] RAX: ffffffffffffffda RBX: 00007f4e5a4acfa0 RCX: 00007f4e5a233e59 [ 2258.683242][T20939] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2258.691485][T20939] RBP: 00007f4e5a2c9d6f R08: 0000000000000000 R09: 0000000000000000 [ 2258.699463][T20939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2258.707522][T20939] R13: 00007f4e5a4ad038 R14: 00007f4e5a4acfa0 R15: 00007ffc25900488 [ 2258.715510][T20939] [ 2259.487325][T20962] netlink: 132 bytes leftover after parsing attributes in process `syz.0.37062'. [ 2259.604192][T20963] netlink: 763 bytes leftover after parsing attributes in process `syz.1.37050'. [ 2259.845145][T20967] netlink: 14 bytes leftover after parsing attributes in process `syz.4.37054'. [ 2260.813912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2261.296031][T20996] netlink: 132 bytes leftover after parsing attributes in process `syz.1.37068'. [ 2261.721690][T21003] netlink: 763 bytes leftover after parsing attributes in process `syz.3.37069'. [ 2261.766653][T21009] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.37073'. [ 2262.102663][T21013] netlink: 14 bytes leftover after parsing attributes in process `syz.3.37075'. [ 2263.053164][T21032] netlink: 132 bytes leftover after parsing attributes in process `syz.4.37082'. [ 2265.433866][T21046] chnl_net:caif_netlink_parms(): no params data found [ 2265.497544][T21046] bridge0: port 1(bridge_slave_0) entered blocking state [ 2265.507522][T21046] bridge0: port 1(bridge_slave_0) entered disabled state [ 2265.516428][T21046] device bridge_slave_0 entered promiscuous mode [ 2265.529564][T21046] bridge0: port 2(bridge_slave_1) entered blocking state [ 2265.536699][T21046] bridge0: port 2(bridge_slave_1) entered disabled state [ 2265.547766][T21046] device bridge_slave_1 entered promiscuous mode [ 2265.576156][T21046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2265.592626][T21046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2265.626575][T21046] team0: Port device team_slave_0 added [ 2265.639511][T21046] team0: Port device team_slave_1 added [ 2265.665173][T21046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2265.673485][T21046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2265.702233][T21046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2265.715167][T21046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2265.724837][T21046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2265.754787][T21046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2265.790606][T21046] device hsr_slave_0 entered promiscuous mode [ 2265.797472][T21046] device hsr_slave_1 entered promiscuous mode [ 2265.952183][T21057] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.37088'. [ 2265.993012][T21046] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2266.071320][T21046] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2266.126435][T21063] netlink: 14 bytes leftover after parsing attributes in process `syz.0.37091'. [ 2266.322996][T21046] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2266.349497][T21046] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2266.457634][T21046] bridge0: port 2(bridge_slave_1) entered blocking state [ 2266.464796][T21046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2266.472250][T21046] bridge0: port 1(bridge_slave_0) entered blocking state [ 2266.479368][T21046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2266.493389][T19504] bridge0: port 1(bridge_slave_0) entered disabled state [ 2266.515816][T19504] bridge0: port 2(bridge_slave_1) entered disabled state [ 2266.817642][T21046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2266.860209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2266.878666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2266.900433][T21046] 8021q: adding VLAN 0 to HW filter on device team0 [ 2266.921360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2266.930189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2266.939546][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 2266.946586][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2266.954370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2266.964173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2266.972976][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 2266.980095][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2266.989104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2267.001383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2267.017836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2267.033839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2267.044676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2267.061860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2267.072414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2267.085178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2267.096077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2267.112108][T21046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2267.128065][T21046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2267.136316][T30278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2267.148782][T30278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2267.283384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2267.291628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2267.304498][T21046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2267.338354][T21175] Bluetooth: hci5: command 0x0409 tx timeout [ 2267.421108][T30278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2267.431526][T30278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2267.451373][T30278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2267.460250][T30278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2267.470292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2267.478745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2267.495557][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2267.508694][T21046] device veth0_vlan entered promiscuous mode [ 2267.521577][T21046] device veth1_vlan entered promiscuous mode [ 2267.542773][T30278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2267.552990][T30278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2267.567787][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2267.582585][T21046] device veth0_macvtap entered promiscuous mode [ 2267.593322][T21046] device veth1_macvtap entered promiscuous mode [ 2267.607501][T21046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.618242][T21046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.629768][T21046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2267.637340][ T830] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2267.645886][ T830] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2267.655040][ T830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2267.664234][ T830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2267.675471][T21046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.686028][T21046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.697420][T21046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2267.705455][T19504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2267.714902][T19504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2267.726499][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2267.742363][T21046] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.751546][T21046] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.761242][T21046] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.770228][T21046] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.839071][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2267.857494][T30278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2267.874060][T30278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2267.882434][T30278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2267.907396][T19504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2267.918213][T19504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2267.931569][T20812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2268.052779][ T144] tipc: Left network mode [ 2269.419513][T19803] Bluetooth: hci5: command 0x041b tx timeout [ 2269.535226][ T144] team0: Port device wlan1 removed [ 2269.670286][ T144] device bridge_slave_0 left promiscuous mode [ 2269.676565][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 2269.693768][ T144] device veth1_macvtap left promiscuous mode [ 2269.863226][ T144] team0 (unregistering): Port device geneve1 removed [ 2269.887060][ T144] team0 (unregistering): Port device virt_wifi0 removed [ 2269.910898][ T144] team0 (unregistering): Port device hsr_slave_0 removed [ 2269.933367][ T144] team0 (unregistering): Port device team_slave_1 removed [ 2269.955330][ T144] team0 (unregistering): Port device veth1_to_bond removed [ 2270.005801][ T144] team0 (unregistering): Port device bridge0 removed [ 2271.498057][T19803] Bluetooth: hci5: command 0x040f tx timeout [ 2273.578271][T21175] Bluetooth: hci5: command 0x0419 tx timeout [ 2283.190715][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.197061][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.619522][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.625869][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 2387.658291][T13781] Bluetooth: hci5: command 0x0406 tx timeout [ 2406.069419][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.075742][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.509526][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.515975][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 2528.939413][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.945741][ T1433] ieee802154 phy1 wpan1: encryption failed: -22