last executing test programs: 4.378797426s ago: executing program 1 (id=18268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x6, [@multicast, @empty, @dev, @remote, @random="b05be3fd2c4c", @multicast]}) 4.153347725s ago: executing program 1 (id=18274): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 3.895896555s ago: executing program 1 (id=18279): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.723676829s ago: executing program 1 (id=18283): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c702f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153c8df10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f2d3ce9c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac8326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce", 0xc4}, {&(0x7f00000003c0)="5c6817db84aafc4ba93b3b7b773c1f5c014e2a4405abce2e2192542afa9748dcd0a777a42e01d2f6290d970e2f9a1d422ca71d4207e563f192538f527923b0f362103e5bbeda2dca0d9d2b5e5238329691753f1860286f1aaa0786be123a788ba8d0e1205af7751df76effba5cb644966e7b7566d2960bab4c5ba6", 0x7b}, {&(0x7f0000000480)="9eb8a2c0e241fb0402ac8d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad7a3db73f4f12d0728bada715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c73e7017cf0fe0275d2d6f9531b12f12e29b903f30c3228aa9ab3a503e951207", 0xbe}, {&(0x7f0000001200)="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", 0x3ae}], 0x4, &(0x7f0000000d80)=[{0x18, 0x29, 0x4, "bf"}], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937a6", 0x13}], 0x2, 0x0, 0x0, 0x900}, 0x0) 3.575785481s ago: executing program 1 (id=18296): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000500)=@sco={0x1f, @fixed}, 0x80, 0x0}, 0x60) 3.440350302s ago: executing program 1 (id=18289): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 1.928412364s ago: executing program 2 (id=18321): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0xf00}, {0x0}, {0x0}], 0x3}, 0x60012002) 1.8590934s ago: executing program 2 (id=18311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 1.579551453s ago: executing program 2 (id=18318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x14, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa00}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffe01, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.175889785s ago: executing program 3 (id=18325): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x6, 0x8}, 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x40, &(0x7f0000000280), 0x46, 0x0, 0x0, 0x4a0f0000}, 0x0) 1.175788775s ago: executing program 4 (id=18326): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x800003ff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) 984.389091ms ago: executing program 4 (id=18327): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) 983.860891ms ago: executing program 0 (id=18337): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x6, 0x8}, 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x40, &(0x7f0000000280), 0x46, 0x0, 0x0, 0x4a0f0000}, 0x0) 983.366581ms ago: executing program 3 (id=18328): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[], 0xfefb) 895.115698ms ago: executing program 0 (id=18329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 839.254472ms ago: executing program 4 (id=18330): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0x10, 0x0, &(0x7f00000002c0)="f8ad48cc02cb29dcc8007f5b08007125", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 763.766829ms ago: executing program 3 (id=18331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x6d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 757.553279ms ago: executing program 0 (id=18332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2003, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 695.863924ms ago: executing program 4 (id=18333): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 661.908467ms ago: executing program 3 (id=18334): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kmem_cache_free\x00', r0}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 601.811152ms ago: executing program 4 (id=18335): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 535.892697ms ago: executing program 2 (id=18336): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 535.673767ms ago: executing program 0 (id=18338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 447.329305ms ago: executing program 2 (id=18339): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x800003ff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) 439.465945ms ago: executing program 3 (id=18340): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000f80)=""/110, 0x6e}, {&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f0000000340)=""/194, 0xc2}, {&(0x7f0000000200)=""/37, 0x25}], 0x5}, 0x40000002) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 273.189568ms ago: executing program 4 (id=18341): bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000, 0x180}, 0x48) 272.429329ms ago: executing program 0 (id=18342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x1, [@remote]}) 129.07096ms ago: executing program 2 (id=18343): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) 123.97699ms ago: executing program 3 (id=18344): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x13ac9d9a938af256, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 0s ago: executing program 0 (id=18345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x6d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) kernel console output (not intermixed with test programs): 'syz.0.11677': attribute type 21 has an invalid length. [ 611.071628][T28230] netlink: 'syz.3.11685': attribute type 29 has an invalid length. [ 611.088883][T28230] netlink: 'syz.3.11685': attribute type 29 has an invalid length. [ 611.246227][T28236] netlink: 'syz.2.11687': attribute type 19 has an invalid length. [ 611.273302][T28238] netlink: 'syz.3.11688': attribute type 2 has an invalid length. [ 611.297432][T28238] netlink: 51 bytes leftover after parsing attributes in process `syz.3.11688'. [ 611.734030][T28259] netlink: 'syz.2.11699': attribute type 29 has an invalid length. [ 611.764376][T28259] netlink: 'syz.2.11699': attribute type 29 has an invalid length. [ 611.831380][T28262] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11701'. [ 612.064985][T28272] netlink: 51 bytes leftover after parsing attributes in process `syz.1.11704'. [ 612.396889][T28290] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.11714'. [ 612.526047][T28298] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.11718'. [ 612.996675][T28323] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11728'. [ 613.115205][T28329] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.11733'. [ 613.224982][T28332] netlink: 830 bytes leftover after parsing attributes in process `syz.0.11734'. [ 613.259483][T28336] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11736'. [ 613.614994][T28356] netlink: 763 bytes leftover after parsing attributes in process `syz.4.11747'. [ 613.808451][T28364] netlink: 830 bytes leftover after parsing attributes in process `syz.1.11751'. [ 614.005978][T28375] validate_nla: 7 callbacks suppressed [ 614.005993][T28375] netlink: 'syz.2.11756': attribute type 1 has an invalid length. [ 614.016556][T28373] netlink: 'syz.0.11765': attribute type 10 has an invalid length. [ 614.034943][T28375] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.11756'. [ 614.039132][T28373] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11765'. [ 614.065930][T28377] netlink: 'syz.4.11757': attribute type 21 has an invalid length. [ 614.384997][T28390] netlink: 'syz.0.11773': attribute type 41 has an invalid length. [ 614.407447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 614.760079][T28405] netlink: 'syz.4.11770': attribute type 2 has an invalid length. [ 614.825887][T28409] netlink: 'syz.3.11772': attribute type 3 has an invalid length. [ 615.439614][T28439] netlink: 'syz.0.11785': attribute type 2 has an invalid length. [ 615.669119][T28448] netlink: 'syz.3.11790': attribute type 41 has an invalid length. [ 615.996935][T28464] netlink: 'syz.0.11799': attribute type 21 has an invalid length. [ 616.012281][T28464] netlink: 'syz.0.11799': attribute type 20 has an invalid length. [ 616.353279][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 617.095384][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 617.718803][T28545] __nla_validate_parse: 9 callbacks suppressed [ 617.718820][T28545] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11838'. [ 618.534734][T28584] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11854'. [ 619.158411][T28615] validate_nla: 8 callbacks suppressed [ 619.158427][T28615] netlink: 'syz.2.11870': attribute type 9 has an invalid length. [ 619.190978][T28615] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.11870'. [ 619.355214][T28620] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11872'. [ 619.594212][T28631] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11878'. [ 619.850181][T28644] netlink: 'syz.1.11884': attribute type 9 has an invalid length. [ 619.872813][T28644] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.11884'. [ 620.016510][T28653] netlink: 'syz.0.11888': attribute type 10 has an invalid length. [ 620.177840][T28662] netlink: 'syz.2.11893': attribute type 3 has an invalid length. [ 620.226651][T28662] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11893'. [ 620.693916][T28682] netlink: 'syz.4.11904': attribute type 15 has an invalid length. [ 620.776405][T28684] netlink: 'syz.3.11905': attribute type 10 has an invalid length. [ 621.290551][T28710] netlink: 'syz.1.11917': attribute type 10 has an invalid length. [ 621.742237][T28726] netlink: 'syz.0.11925': attribute type 3 has an invalid length. [ 621.783583][T28726] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11925'. [ 622.355198][T28754] netlink: 'syz.1.11940': attribute type 21 has an invalid length. [ 622.397426][T28754] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11940'. [ 622.401185][T28758] netlink: 'syz.3.11942': attribute type 3 has an invalid length. [ 622.432415][T28758] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11942'. [ 623.654039][T28815] IPv6: NLM_F_REPLACE set, but no existing node found! [ 624.193932][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.200269][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.318273][T28850] netlink: 'syz.3.11988': attribute type 2 has an invalid length. [ 624.819308][T28872] netlink: 'syz.0.11998': attribute type 1 has an invalid length. [ 624.848496][T28872] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.11998'. [ 625.211399][T28890] netlink: 'syz.0.12008': attribute type 3 has an invalid length. [ 625.262445][T28890] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.12008'. [ 625.735884][T28920] netlink: 'syz.1.12021': attribute type 2 has an invalid length. [ 625.763568][T28922] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12023'. [ 625.799130][T28920] device 0 entered promiscuous mode [ 626.185676][T28940] netlink: 'syz.4.12032': attribute type 3 has an invalid length. [ 626.186395][T28942] netlink: 'syz.3.12034': attribute type 21 has an invalid length. [ 626.217045][T28946] netlink: 'syz.1.12035': attribute type 1 has an invalid length. [ 626.232775][T28940] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12032'. [ 626.258447][T28946] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.12035'. [ 626.376500][T28950] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12038'. [ 626.921861][T28980] netlink: 'syz.0.12050': attribute type 21 has an invalid length. [ 626.962085][T28984] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12052'. [ 628.019699][T29072] netlink: 'syz.4.12071': attribute type 2 has an invalid length. [ 628.194465][T29072] device 0 entered promiscuous mode [ 628.464306][T29100] netlink: 'syz.1.12080': attribute type 3 has an invalid length. [ 628.472178][T29100] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12080'. [ 628.948932][T29116] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.12087'. [ 629.278728][T29132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12093'. [ 629.954144][T29162] __nla_validate_parse: 1 callbacks suppressed [ 629.954160][T29162] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.12120'. [ 630.012499][T29166] validate_nla: 2 callbacks suppressed [ 630.012516][T29166] netlink: 'syz.3.12110': attribute type 7 has an invalid length. [ 630.708306][T29194] netlink: 'syz.4.12127': attribute type 7 has an invalid length. [ 630.894768][T29204] netlink: 'syz.0.12140': attribute type 2 has an invalid length. [ 630.947393][T29204] device 0 entered promiscuous mode [ 631.168232][T29220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12135'. [ 631.274661][T29224] netlink: 'syz.3.12139': attribute type 3 has an invalid length. [ 631.556109][T29240] netlink: 'syz.2.12149': attribute type 29 has an invalid length. [ 631.595191][T29242] netlink: 'syz.4.12150': attribute type 2 has an invalid length. [ 631.595431][T29240] netlink: 'syz.2.12149': attribute type 29 has an invalid length. [ 631.669404][T29242] device 0 entered promiscuous mode [ 632.334468][T29282] netlink: 'syz.2.12166': attribute type 21 has an invalid length. [ 632.352656][T29282] netlink: 'syz.2.12166': attribute type 1 has an invalid length. [ 632.417395][T29286] netlink: 'syz.3.12167': attribute type 2 has an invalid length. [ 632.450461][T29286] device 0 entered promiscuous mode [ 632.614931][T29295] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12171'. [ 633.755528][T29359] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12187'. [ 633.905075][T29365] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12192'. [ 633.982254][T29369] netlink: 180 bytes leftover after parsing attributes in process `syz.1.12203'. [ 634.955522][T29424] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12218'. [ 635.176032][T29434] netlink: 180 bytes leftover after parsing attributes in process `syz.3.12222'. [ 635.712698][T29461] validate_nla: 8 callbacks suppressed [ 635.712713][T29461] netlink: 'syz.1.12237': attribute type 21 has an invalid length. [ 635.886997][T29466] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12241'. [ 636.271437][T29488] team0: Port device team_slave_0 removed [ 636.286469][T29488] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 636.434275][T29498] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12256'. [ 637.077184][T29536] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.12275'. [ 637.768434][T29570] team0: Port device team_slave_0 removed [ 637.815760][T29570] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 638.340312][T29593] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.12303'. [ 638.935791][T29608] team0: Port device team_slave_0 removed [ 638.962438][T29608] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 640.172643][T29674] netlink: 'syz.3.12342': attribute type 1 has an invalid length. [ 640.212342][T29674] netlink: 'syz.3.12342': attribute type 3 has an invalid length. [ 640.238320][T29674] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12342'. [ 640.443872][T29684] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.12347'. [ 640.467835][T29684] openvswitch: netlink: Flow actions attr not present in new flow. [ 641.217756][T29720] netlink: 'syz.2.12365': attribute type 2 has an invalid length. [ 641.252333][T29720] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12365'. [ 641.451768][T29731] netlink: 'syz.0.12369': attribute type 2 has an invalid length. [ 641.735827][T29744] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12377'. [ 641.792417][T29744] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 641.816788][T29751] netlink: 'syz.3.12380': attribute type 2 has an invalid length. [ 641.881445][T29753] netlink: 'syz.1.12381': attribute type 2 has an invalid length. [ 641.908453][T29753] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12381'. [ 641.983455][T29756] netlink: 'syz.0.12393': attribute type 30 has an invalid length. [ 642.440444][T29781] netlink: 'syz.3.12395': attribute type 2 has an invalid length. [ 642.502856][T29781] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12395'. [ 642.546967][T29787] netlink: 'syz.1.12396': attribute type 2 has an invalid length. [ 642.696694][T29793] netlink: 'syz.3.12399': attribute type 30 has an invalid length. [ 643.594384][T29818] netlink: 'syz.0.12413': attribute type 2 has an invalid length. [ 643.786748][T29827] netlink: 'syz.4.12418': attribute type 27 has an invalid length. [ 643.810595][T29827] netlink: 164 bytes leftover after parsing attributes in process `syz.4.12418'. [ 644.354846][T29859] netlink: 164 bytes leftover after parsing attributes in process `syz.0.12435'. [ 645.004170][T29891] netlink: 164 bytes leftover after parsing attributes in process `syz.1.12451'. [ 645.689338][T29923] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12468'. [ 645.748402][T29923] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 646.323319][T29941] validate_nla: 3 callbacks suppressed [ 646.323343][T29941] netlink: 'syz.2.12476': attribute type 3 has an invalid length. [ 646.402439][T29941] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12476'. [ 646.588965][T29957] netlink: 'syz.2.12483': attribute type 40 has an invalid length. [ 646.948388][T29975] netlink: 'syz.4.12493': attribute type 3 has an invalid length. [ 646.980014][T29975] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12493'. [ 647.676980][T29991] netlink: 'syz.3.12511': attribute type 4 has an invalid length. [ 647.725638][T29991] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12511'. [ 647.762167][T29991] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 647.810755][T29995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 648.302281][T30019] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12514'. [ 648.477810][T30025] netlink: 'syz.4.12517': attribute type 40 has an invalid length. [ 649.102084][T30049] mac80211_hwsim hwsim5 wlan1: refused to change device tx_queue_len [ 649.229535][T30054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 649.506384][T30066] netlink: 'syz.2.12539': attribute type 4 has an invalid length. [ 649.528949][T30066] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12539'. [ 649.580904][T30066] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 649.870905][T30088] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12549'. [ 649.894243][T30087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.699101][T30118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12561'. [ 650.765247][T30118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 651.440174][T30143] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 651.683058][T30154] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12578'. [ 651.962682][T30169] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.12590'. [ 652.220244][T30177] netlink: 'syz.3.12593': attribute type 1 has an invalid length. [ 652.266178][T30177] netlink: 131736 bytes leftover after parsing attributes in process `syz.3.12593'. [ 652.495710][T30183] netlink: 'syz.2.12596': attribute type 12 has an invalid length. [ 653.398642][T30221] netlink: 'syz.1.12612': attribute type 11 has an invalid length. [ 653.462899][T30221] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12612'. [ 653.845242][T30241] netlink: 'syz.3.12625': attribute type 12 has an invalid length. [ 654.453173][T30257] netlink: 'syz.3.12633': attribute type 6 has an invalid length. [ 654.461043][T30257] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.12633'. [ 654.540802][T30261] netlink: 'syz.2.12634': attribute type 11 has an invalid length. [ 654.575574][T30261] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12634'. [ 654.756421][T30270] netlink: 'syz.0.12636': attribute type 1 has an invalid length. [ 654.794057][T30270] netlink: 131736 bytes leftover after parsing attributes in process `syz.0.12636'. [ 655.318090][T30297] netlink: 'syz.0.12652': attribute type 11 has an invalid length. [ 655.330138][T30297] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12652'. [ 656.797967][T30350] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12679'. [ 656.999526][T30353] delete_channel: no stack [ 657.200148][T30363] delete_channel: no stack [ 658.251603][T30398] delete_channel: no stack [ 658.506472][T30407] netlink: 180 bytes leftover after parsing attributes in process `syz.0.12704'. [ 658.787888][T30414] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12708'. [ 659.422399][T30429] netlink: 'syz.3.12716': attribute type 21 has an invalid length. [ 659.462444][T30429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 659.469691][T30429] IPv6: NLM_F_CREATE should be set when creating new route [ 659.477145][T30429] IPv6: NLM_F_CREATE should be set when creating new route [ 659.811052][T30449] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 660.008564][T30457] netlink: 'syz.2.12730': attribute type 21 has an invalid length. [ 660.055991][T30462] netlink: 'syz.0.12734': attribute type 1 has an invalid length. [ 660.082400][T30462] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12734'. [ 660.135799][T30465] netlink: 188 bytes leftover after parsing attributes in process `syz.3.12735'. [ 660.490338][T30484] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 660.541267][T30489] netlink: 'syz.0.12747': attribute type 21 has an invalid length. [ 660.689523][T30499] netlink: 'syz.3.12751': attribute type 1 has an invalid length. [ 660.697544][T30499] netlink: 144 bytes leftover after parsing attributes in process `syz.3.12751'. [ 660.706327][T30496] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12750'. [ 661.189626][T30523] netlink: 'syz.4.12762': attribute type 21 has an invalid length. [ 661.210369][T30524] netlink: 'syz.0.12772': attribute type 11 has an invalid length. [ 661.434320][T30535] netlink: 188 bytes leftover after parsing attributes in process `syz.1.12767'. [ 661.759947][T30549] netlink: 'syz.0.12776': attribute type 21 has an invalid length. [ 661.812367][T30549] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12776'. [ 661.988084][T30554] netlink: 'syz.1.12779': attribute type 11 has an invalid length. [ 662.575882][T30570] netlink: 188 bytes leftover after parsing attributes in process `syz.2.12784'. [ 662.741347][T30577] netlink: 'syz.1.12787': attribute type 6 has an invalid length. [ 662.776261][T30577] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.12787'. [ 663.149352][T30597] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.12799'. [ 663.165684][T30601] netlink: 188 bytes leftover after parsing attributes in process `syz.4.12802'. [ 663.349992][T30609] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12804'. [ 663.376796][T30613] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.12806'. [ 663.981808][T30641] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12819'. [ 664.009702][T30643] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12820'. [ 664.632157][T30678] validate_nla: 7 callbacks suppressed [ 664.632174][T30678] netlink: 'syz.2.12837': attribute type 28 has an invalid length. [ 664.663247][T30678] netlink: 'syz.2.12837': attribute type 29 has an invalid length. [ 664.671221][T30678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12837'. [ 665.626454][T30731] netlink: 'syz.0.12864': attribute type 7 has an invalid length. [ 666.400706][T30773] netlink: 'syz.3.12885': attribute type 1 has an invalid length. [ 666.416389][T30773] netlink: 'syz.3.12885': attribute type 3 has an invalid length. [ 667.255174][T30817] netlink: 'syz.3.12907': attribute type 7 has an invalid length. [ 667.594026][T30830] __nla_validate_parse: 5 callbacks suppressed [ 667.594041][T30830] netlink: 830 bytes leftover after parsing attributes in process `syz.3.12913'. [ 667.847183][T30841] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.12930'. [ 668.037979][T30848] netlink: 'syz.4.12921': attribute type 7 has an invalid length. [ 668.064004][T30853] netlink: 'syz.3.12935': attribute type 10 has an invalid length. [ 668.169515][T30853] wlan1: mtu less than device minimum [ 668.190782][T30853] team0: Device wlan1 failed to change mtu [ 668.195802][T30853] bond0: (slave team0): Error -22 calling dev_set_mtu [ 668.372421][T30866] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12932'. [ 668.521626][T30875] netlink: 'syz.1.12934': attribute type 1 has an invalid length. [ 668.531116][T30875] netlink: 'syz.1.12934': attribute type 3 has an invalid length. [ 668.545638][T30875] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12934'. [ 669.647708][T30935] netlink: 'syz.1.12975': attribute type 10 has an invalid length. [ 669.738635][T30935] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.765027][T30935] bond0: (slave team0): Enslaving as an active interface with an up link [ 670.686404][T30980] netlink: 'syz.4.12987': attribute type 10 has an invalid length. [ 670.730592][T30980] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.773382][T30980] bond0: (slave team0): Enslaving as an active interface with an up link [ 670.924573][T30990] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12992'. [ 672.175832][T31021] netlink: 'syz.2.13004': attribute type 10 has an invalid length. [ 672.214963][T31021] wlan1: mtu less than device minimum [ 672.220388][T31021] team0: Device wlan1 failed to change mtu [ 672.255734][T31021] bond0: (slave team0): Error -22 calling dev_set_mtu [ 672.278472][T31018] netlink: 'syz.3.13006': attribute type 7 has an invalid length. [ 672.685337][T31042] netlink: 830 bytes leftover after parsing attributes in process `syz.4.13016'. [ 672.909916][T31048] netlink: 'syz.2.13019': attribute type 29 has an invalid length. [ 672.933564][T31048] netlink: 'syz.2.13019': attribute type 3 has an invalid length. [ 672.961862][T31048] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13019'. [ 673.467060][T31068] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13031'. [ 673.565734][T31072] sctp: [Deprecated]: syz.1.13033 (pid 31072) Use of int in max_burst socket option deprecated. [ 673.565734][T31072] Use struct sctp_assoc_value instead [ 674.528681][T31087] netlink: 'syz.0.13036': attribute type 10 has an invalid length. [ 674.590100][T31087] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.630896][T31087] bond0: (slave team0): Enslaving as an active interface with an up link [ 674.966555][T31102] netlink: 'syz.3.13047': attribute type 21 has an invalid length. [ 675.002517][T31102] netlink: 'syz.3.13047': attribute type 6 has an invalid length. [ 675.037266][T31102] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13047'. [ 675.049219][T31104] netlink: 4079 bytes leftover after parsing attributes in process `syz.0.13048'. [ 675.091628][T31108] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 675.279232][T31117] netlink: 'syz.0.13054': attribute type 11 has an invalid length. [ 675.310135][T31117] netlink: 140 bytes leftover after parsing attributes in process `syz.0.13054'. [ 675.915763][T31151] netlink: 'syz.4.13070': attribute type 11 has an invalid length. [ 675.963037][T31151] netlink: 140 bytes leftover after parsing attributes in process `syz.4.13070'. [ 675.982863][T31154] netlink: 763 bytes leftover after parsing attributes in process `syz.1.13071'. [ 676.434709][T31173] netlink: 'syz.2.13079': attribute type 21 has an invalid length. [ 676.467759][T31173] netlink: 'syz.2.13079': attribute type 6 has an invalid length. [ 676.476785][T31176] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.13081'. [ 676.492529][T31173] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13079'. [ 676.583268][T31180] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 676.688111][T31184] netlink: 'syz.2.13086': attribute type 11 has an invalid length. [ 677.241630][T31214] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 677.579838][T31232] netlink: 'syz.3.13108': attribute type 1 has an invalid length. [ 677.721042][T31240] __nla_validate_parse: 5 callbacks suppressed [ 677.721058][T31240] netlink: 172 bytes leftover after parsing attributes in process `syz.2.13114'. [ 679.137927][T31309] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.13147'. [ 680.011966][T31349] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.13166'. [ 680.274810][T31358] netlink: 'syz.3.13172': attribute type 21 has an invalid length. [ 680.310542][T31358] netlink: 'syz.3.13172': attribute type 1 has an invalid length. [ 680.487390][T31365] netlink: 'syz.3.13175': attribute type 7 has an invalid length. [ 680.506501][T31365] netlink: 140 bytes leftover after parsing attributes in process `syz.3.13175'. [ 680.739136][T31383] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.13184'. [ 681.200283][T31407] netlink: 'syz.4.13195': attribute type 7 has an invalid length. [ 681.213696][T31407] netlink: 140 bytes leftover after parsing attributes in process `syz.4.13195'. [ 681.780062][T31436] netlink: 'syz.2.13210': attribute type 7 has an invalid length. [ 681.798900][T31436] netlink: 140 bytes leftover after parsing attributes in process `syz.2.13210'. [ 681.882084][T31440] netlink: 'syz.4.13211': attribute type 27 has an invalid length. [ 681.914585][T31440] netlink: 164 bytes leftover after parsing attributes in process `syz.4.13211'. [ 682.226828][T31450] netlink: 'syz.4.13217': attribute type 21 has an invalid length. [ 682.236179][T31450] netlink: 'syz.4.13217': attribute type 1 has an invalid length. [ 682.610244][T31464] netlink: 'syz.0.13233': attribute type 7 has an invalid length. [ 682.641391][T31464] netlink: 140 bytes leftover after parsing attributes in process `syz.0.13233'. [ 682.755214][T31467] delete_channel: no stack [ 682.774467][T31470] netlink: 'syz.1.13224': attribute type 27 has an invalid length. [ 682.808062][T31470] netlink: 164 bytes leftover after parsing attributes in process `syz.1.13224'. [ 682.988083][T31478] netlink: 164 bytes leftover after parsing attributes in process `syz.2.13242'. [ 683.829237][T31525] netlink: 156 bytes leftover after parsing attributes in process `syz.4.13253'. [ 683.838918][T31525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13253'. [ 684.440544][T31553] netlink: 188 bytes leftover after parsing attributes in process `syz.0.13267'. [ 685.091749][T31578] netlink: 188 bytes leftover after parsing attributes in process `syz.3.13279'. [ 685.218502][T31581] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13280'. [ 685.221983][T31582] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13281'. [ 685.294521][T31581] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13280'. [ 685.427051][T31587] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13283'. [ 685.504482][T31592] validate_nla: 7 callbacks suppressed [ 685.504500][T31592] netlink: 'syz.1.13286': attribute type 21 has an invalid length. [ 685.644771][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.651258][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.406363][T31631] netlink: 'syz.2.13302': attribute type 10 has an invalid length. [ 686.482149][T31631] team0: Port device wlan1 removed [ 686.974567][T31649] device lo entered promiscuous mode [ 687.552805][T31670] netlink: 'syz.3.13323': attribute type 10 has an invalid length. [ 687.762958][T31683] device lo entered promiscuous mode [ 688.092254][T31694] __nla_validate_parse: 8 callbacks suppressed [ 688.127106][T31694] netlink: 188 bytes leftover after parsing attributes in process `syz.0.13346'. [ 688.201151][T31694] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 688.308073][T31704] netlink: 'syz.4.13340': attribute type 10 has an invalid length. [ 688.366887][T31704] device geneve0 entered promiscuous mode [ 688.436920][T31704] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 688.758505][T31712] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13347'. [ 688.794958][T31716] device lo entered promiscuous mode [ 688.921152][T31719] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13358'. [ 688.984515][T31723] netlink: 'syz.4.13349': attribute type 5 has an invalid length. [ 689.301496][T31736] netlink: 188 bytes leftover after parsing attributes in process `syz.2.13357'. [ 689.336724][T31736] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 689.352707][T31738] netlink: 'syz.0.13356': attribute type 10 has an invalid length. [ 689.361386][T31738] device geneve0 entered promiscuous mode [ 689.382144][T31738] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 689.449817][T31740] netlink: 'syz.1.13360': attribute type 10 has an invalid length. [ 689.506248][T31746] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13363'. [ 689.880918][T31760] netlink: 'syz.3.13370': attribute type 21 has an invalid length. [ 689.926397][T31760] netlink: 'syz.3.13370': attribute type 5 has an invalid length. [ 690.062527][T31770] device lo entered promiscuous mode [ 690.162126][T31772] netlink: 'syz.3.13374': attribute type 5 has an invalid length. [ 690.700719][T31795] validate_nla: 2 callbacks suppressed [ 690.700735][T31795] netlink: 'syz.0.13386': attribute type 21 has an invalid length. [ 690.756903][T31795] netlink: 'syz.0.13386': attribute type 5 has an invalid length. [ 690.904235][T31804] netlink: 'syz.2.13390': attribute type 10 has an invalid length. [ 690.941099][T31804] device geneve0 entered promiscuous mode [ 690.969131][T31807] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.13393'. [ 690.986749][T31804] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 691.001576][T31810] netlink: 'syz.3.13394': attribute type 21 has an invalid length. [ 691.627463][T31835] netlink: 'syz.3.13406': attribute type 7 has an invalid length. [ 691.684757][T31838] netlink: 'syz.4.13408': attribute type 21 has an invalid length. [ 691.741989][T31840] netlink: 'syz.0.13409': attribute type 13 has an invalid length. [ 691.783026][T31840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13409'. [ 691.816817][T31842] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.13410'. [ 691.819419][T31840] device bond0 entered promiscuous mode [ 691.868967][T31840] device bond_slave_0 entered promiscuous mode [ 691.906649][T31840] device bond_slave_1 entered promiscuous mode [ 691.933304][T31840] device bridge_slave_1 entered promiscuous mode [ 691.953737][T31840] device team0 entered promiscuous mode [ 691.973863][T31840] device team_slave_1 entered promiscuous mode [ 691.997777][T31840] device geneve1 entered promiscuous mode [ 692.018713][T31840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.096714][T31840] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 692.394557][T31858] netlink: 'syz.4.13418': attribute type 21 has an invalid length. [ 692.447156][T31858] netlink: 'syz.4.13418': attribute type 5 has an invalid length. [ 692.491999][T31864] netlink: 26 bytes leftover after parsing attributes in process `syz.2.13420'. [ 692.647962][T31873] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.13424'. [ 693.140880][T31900] netlink: 'syz.0.13436': attribute type 2 has an invalid length. [ 693.185749][T31900] __nla_validate_parse: 1 callbacks suppressed [ 693.185765][T31900] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13436'. [ 693.227977][T31904] netlink: 26 bytes leftover after parsing attributes in process `syz.3.13438'. [ 693.774668][T31933] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13455'. [ 693.906488][T31941] netlink: 144 bytes leftover after parsing attributes in process `syz.2.13459'. [ 694.677091][T31982] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.13486'. [ 695.295268][T32014] delete_channel: no stack [ 695.626925][T32036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13505'. [ 695.638182][T32036] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13505'. [ 695.680446][T32040] netlink: 134728 bytes leftover after parsing attributes in process `syz.2.13507'. [ 695.841155][T32046] validate_nla: 11 callbacks suppressed [ 695.841172][T32046] netlink: 'syz.2.13511': attribute type 2 has an invalid length. [ 695.922768][T32046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13511'. [ 695.955895][T32053] netlink: 'syz.4.13515': attribute type 4 has an invalid length. [ 696.304648][T32072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13523'. [ 696.339937][T32075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.379988][T32075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.415944][T32075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.449209][T32082] netlink: 'syz.3.13528': attribute type 2 has an invalid length. [ 696.457298][T32075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.485847][T32075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.515645][T32075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.546711][T32075] device batadv_slave_1 entered promiscuous mode [ 697.047892][T32106] netlink: 'syz.1.13541': attribute type 2 has an invalid length. [ 697.237476][T32114] netlink: 'syz.1.13544': attribute type 28 has an invalid length. [ 697.266168][T32114] netlink: 'syz.1.13544': attribute type 29 has an invalid length. [ 697.549485][T32130] netlink: 'syz.4.13550': attribute type 4 has an invalid length. [ 698.562540][T32182] __nla_validate_parse: 8 callbacks suppressed [ 698.562556][T32182] netlink: 180 bytes leftover after parsing attributes in process `syz.1.13577'. [ 698.587627][T32186] netlink: 'syz.3.13579': attribute type 28 has an invalid length. [ 698.614646][T32189] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 698.626956][T32186] netlink: 'syz.3.13579': attribute type 29 has an invalid length. [ 698.646292][T32186] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13579'. [ 699.051174][T32213] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13594'. [ 699.164044][T32215] netlink: 'syz.4.13596': attribute type 10 has an invalid length. [ 699.192706][T32215] team0: Device bond0 is already an upper device of the team interface [ 699.722992][T32249] netlink: 830 bytes leftover after parsing attributes in process `syz.1.13609'. [ 699.836374][T32253] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 700.021823][T32265] bond0: (slave team0): Releasing backup interface [ 700.063074][T32265] team0: Cannot enslave team device to itself [ 700.492816][T32290] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 700.568532][T32294] device bond0 left promiscuous mode [ 700.612548][T32294] device bond_slave_0 left promiscuous mode [ 700.620343][T32294] device bond_slave_1 left promiscuous mode [ 700.641052][T32294] device bridge_slave_1 left promiscuous mode [ 700.648243][T32294] device team0 left promiscuous mode [ 700.662135][T32294] device team_slave_1 left promiscuous mode [ 700.668787][T32294] device geneve1 left promiscuous mode [ 700.686628][T32294] team0: Device bond0 is already an upper device of the team interface [ 700.702537][T32302] team0: Cannot enslave team device to itself [ 701.277514][T32331] validate_nla: 5 callbacks suppressed [ 701.277529][T32331] netlink: 'syz.0.13651': attribute type 10 has an invalid length. [ 702.287468][T32381] netlink: 'syz.3.13676': attribute type 10 has an invalid length. [ 702.329242][T32381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.360002][T32381] team0: Port device bond0 added [ 703.207709][T32429] netlink: 'syz.1.13700': attribute type 21 has an invalid length. [ 703.438884][T32443] netlink: 'syz.0.13716': attribute type 3 has an invalid length. [ 703.469698][T32443] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13716'. [ 703.919640][T32465] netlink: 'syz.2.13717': attribute type 10 has an invalid length. [ 703.968696][T32465] device bond_slave_0 entered promiscuous mode [ 703.975225][T32465] device bond_slave_1 entered promiscuous mode [ 703.981459][T32465] device netdevsim0 entered promiscuous mode [ 704.027239][T32465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.058433][T32465] team0: Port device bond0 added [ 704.104746][T32476] netlink: 'syz.0.13721': attribute type 10 has an invalid length. [ 704.401156][T32488] netlink: 'syz.2.13728': attribute type 21 has an invalid length. [ 704.698461][T32503] netlink: 'syz.4.13735': attribute type 3 has an invalid length. [ 704.704735][T32504] netlink: 'syz.1.13736': attribute type 10 has an invalid length. [ 704.723881][T32503] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.13735'. [ 704.733716][T32504] team0: Device bond0 is already an upper device of the team interface [ 704.754317][T32506] netlink: 'syz.2.13737': attribute type 21 has an invalid length. [ 705.011781][T32517] delete_channel: no stack [ 705.070616][T32523] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 705.109679][T32523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 705.526807][T32548] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13757'. [ 705.686464][T32554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13760'. [ 706.541088][T32595] delete_channel: no stack [ 706.582719][T32599] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 706.598647][T32599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 706.747338][T32608] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13788'. [ 707.034672][T32623] netlink: 'syz.2.13796': attribute type 11 has an invalid length. [ 707.044394][T32624] validate_nla: 4 callbacks suppressed [ 707.044409][T32624] netlink: 'syz.4.13795': attribute type 22 has an invalid length. [ 707.069795][T32624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13795'. [ 707.103379][T32623] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13796'. [ 707.146177][T32622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.346926][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 707.380703][T32635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 707.474314][T32642] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13805'. [ 707.916709][T32667] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 707.949161][T32667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.061190][T32677] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13823'. [ 708.547319][T32698] netlink: 'syz.0.13831': attribute type 22 has an invalid length. [ 708.576226][T32698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13831'. [ 708.959639][T32717] netlink: 'syz.3.13842': attribute type 2 has an invalid length. [ 708.982357][T32717] netlink: 'syz.3.13842': attribute type 8 has an invalid length. [ 709.000463][T32717] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13842'. [ 709.158600][T32723] netlink: 'syz.2.13845': attribute type 19 has an invalid length. [ 709.389790][T32733] netlink: 'syz.3.13850': attribute type 11 has an invalid length. [ 709.431468][T32732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.781382][T32757] netlink: 'syz.3.13861': attribute type 4 has an invalid length. [ 709.805059][T32759] __nla_validate_parse: 3 callbacks suppressed [ 709.805075][T32759] netlink: 22 bytes leftover after parsing attributes in process `syz.2.13872'. [ 709.842358][T32757] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.13861'. [ 710.353819][ T316] netlink: 'syz.0.13874': attribute type 2 has an invalid length. [ 710.371067][ T316] netlink: 'syz.0.13874': attribute type 8 has an invalid length. [ 710.382460][ T316] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13874'. [ 710.406756][ T320] netlink: 'syz.1.13877': attribute type 19 has an invalid length. [ 710.420616][ T320] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13877'. [ 710.619640][ T328] netlink: 'syz.1.13881': attribute type 4 has an invalid length. [ 710.692455][ T328] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.13881'. [ 711.170975][ T351] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13891'. [ 712.150873][ T407] validate_nla: 5 callbacks suppressed [ 712.150889][ T407] netlink: 'syz.4.13919': attribute type 19 has an invalid length. [ 712.334935][ T415] netlink: 'syz.4.13924': attribute type 10 has an invalid length. [ 712.352854][ T415] netlink: 55 bytes leftover after parsing attributes in process `syz.4.13924'. [ 712.657038][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 712.910041][ T443] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13938'. [ 713.454718][ T473] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13953'. [ 713.639069][ T481] netlink: 'syz.0.13959': attribute type 21 has an invalid length. [ 713.654260][ T481] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13959'. [ 713.711587][ T487] netlink: 'syz.4.13960': attribute type 6 has an invalid length. [ 714.869634][ T545] netlink: 'syz.3.13989': attribute type 10 has an invalid length. [ 714.898028][ T545] __nla_validate_parse: 4 callbacks suppressed [ 714.898043][ T545] netlink: 55 bytes leftover after parsing attributes in process `syz.3.13989'. [ 715.435478][ T553] netlink: 'syz.2.13992': attribute type 21 has an invalid length. [ 715.447082][ T553] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13992'. [ 715.600892][ T569] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.13999'. [ 715.839665][ T585] netlink: 'syz.4.14008': attribute type 7 has an invalid length. [ 715.937913][ T590] netlink: 'syz.0.14010': attribute type 3 has an invalid length. [ 715.972462][ T590] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.14010'. [ 716.073669][ T596] netlink: 'syz.3.14014': attribute type 21 has an invalid length. [ 716.119584][ T596] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14014'. [ 716.142576][ T598] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.14025'. [ 716.170844][ T599] netlink: 'syz.2.14016': attribute type 10 has an invalid length. [ 716.233504][ T599] netlink: 55 bytes leftover after parsing attributes in process `syz.2.14016'. [ 716.547174][ T621] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14027'. [ 717.378800][ T661] validate_nla: 2 callbacks suppressed [ 717.378817][ T661] netlink: 'syz.1.14046': attribute type 7 has an invalid length. [ 717.420632][ T663] netlink: 'syz.0.14047': attribute type 10 has an invalid length. [ 717.428763][ T663] netlink: 55 bytes leftover after parsing attributes in process `syz.0.14047'. [ 717.846054][ T677] netlink: 5 bytes leftover after parsing attributes in process `syz.3.14052'. [ 717.855326][ T677] netlink: 'syz.3.14052': attribute type 1 has an invalid length. [ 718.103349][ T669] netlink: 'syz.1.14058': attribute type 4 has an invalid length. [ 718.152106][ T687] netlink: 'syz.2.14057': attribute type 3 has an invalid length. [ 718.766857][ T715] netlink: 'syz.3.14073': attribute type 4 has an invalid length. [ 718.795750][ T719] netlink: 'syz.1.14075': attribute type 21 has an invalid length. [ 719.103197][ T732] netlink: 'syz.1.14082': attribute type 1 has an invalid length. [ 720.078657][ T782] __nla_validate_parse: 4 callbacks suppressed [ 720.078673][ T782] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.14105'. [ 720.191141][ T788] delete_channel: no stack [ 720.656522][ T802] device virt_wifi0 entered promiscuous mode [ 720.969997][ T809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14118'. [ 721.011723][ T812] netlink: 'syz.1.14117': attribute type 10 has an invalid length. [ 721.073602][ T812] netlink: 55 bytes leftover after parsing attributes in process `syz.1.14117'. [ 721.477458][ T828] delete_channel: no stack [ 721.557640][ T816] netlink: 'syz.4.14120': attribute type 21 has an invalid length. [ 721.711466][ T840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14134'. [ 721.871689][ T846] device netdevsim0 entered promiscuous mode [ 722.054629][ T858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14142'. [ 722.391936][ T874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14150'. [ 722.421310][ T877] device netdevsim0 entered promiscuous mode [ 723.064743][ T927] netlink: 763 bytes leftover after parsing attributes in process `syz.0.14167'. [ 723.448597][ T945] validate_nla: 1 callbacks suppressed [ 723.448613][ T945] netlink: 'syz.2.14178': attribute type 10 has an invalid length. [ 723.488570][ T945] netlink: 55 bytes leftover after parsing attributes in process `syz.2.14178'. [ 724.445393][ T997] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.14202'. [ 724.482557][ T997] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 724.915681][ T1024] netlink: 'syz.4.14212': attribute type 10 has an invalid length. [ 724.944503][ T1024] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14212'. [ 725.328015][ T1050] __nla_validate_parse: 1 callbacks suppressed [ 725.328033][ T1050] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.14221'. [ 725.908336][ T1071] netlink: 'syz.1.14232': attribute type 21 has an invalid length. [ 725.938854][ T1071] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14232'. [ 725.959454][ T1075] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.14233'. [ 725.984406][ T1075] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 726.225252][ T1092] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.14251'. [ 726.292347][ T1092] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 726.439623][ T1098] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.14255'. [ 727.231991][ T1137] netlink: 3 bytes leftover after parsing attributes in process `syz.4.14261'. [ 727.955117][ T1164] netlink: 'syz.4.14278': attribute type 19 has an invalid length. [ 728.245706][ T1176] netlink: 168 bytes leftover after parsing attributes in process `syz.2.14293'. [ 728.610427][ T1195] netlink: 'syz.2.14291': attribute type 21 has an invalid length. [ 729.140200][ T1219] netlink: 'syz.1.14302': attribute type 19 has an invalid length. [ 729.492611][ T1235] netlink: 'syz.1.14311': attribute type 21 has an invalid length. [ 729.560447][ T1240] netlink: 168 bytes leftover after parsing attributes in process `syz.4.14314'. [ 729.880809][ T1257] netlink: 'syz.2.14319': attribute type 19 has an invalid length. [ 729.906059][ T1259] netlink: 'syz.1.14321': attribute type 15 has an invalid length. [ 729.922348][ T1259] netlink: 140 bytes leftover after parsing attributes in process `syz.1.14321'. [ 730.219335][ T1272] netlink: 'syz.3.14326': attribute type 21 has an invalid length. [ 730.238432][ T1277] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14337'. [ 730.348395][ T1283] netlink: 168 bytes leftover after parsing attributes in process `syz.3.14329'. [ 730.618986][ T1293] netlink: 'syz.2.14336': attribute type 15 has an invalid length. [ 730.657955][ T1293] netlink: 140 bytes leftover after parsing attributes in process `syz.2.14336'. [ 731.164450][ T1316] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14346'. [ 731.377360][ T1328] netlink: 'syz.0.14351': attribute type 15 has an invalid length. [ 731.413877][ T1328] netlink: 140 bytes leftover after parsing attributes in process `syz.0.14351'. [ 732.323661][ T1383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 734.230832][ T1442] netlink: 'syz.1.14410': attribute type 5 has an invalid length. [ 734.265327][ T1442] netlink: 168 bytes leftover after parsing attributes in process `syz.1.14410'. [ 734.402231][ T1451] delete_channel: no stack [ 734.763371][ T1467] netlink: 'syz.2.14419': attribute type 3 has an invalid length. [ 734.798996][ T1467] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.14419'. [ 735.456843][ T1495] netlink: 'syz.1.14435': attribute type 21 has an invalid length. [ 735.513395][ T1495] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14435'. [ 735.528561][ T1499] netlink: 'syz.0.14437': attribute type 3 has an invalid length. [ 735.536937][ T1499] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.14437'. [ 735.832756][ T1509] netlink: 'syz.1.14441': attribute type 3 has an invalid length. [ 735.840617][ T1509] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.14441'. [ 736.103516][ T1522] netlink: 'syz.3.14447': attribute type 2 has an invalid length. [ 736.142760][ T1522] netlink: 'syz.3.14447': attribute type 8 has an invalid length. [ 736.150612][ T1522] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14447'. [ 736.634985][ T1541] netlink: 'syz.3.14458': attribute type 3 has an invalid length. [ 736.658081][ T1541] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.14458'. [ 737.196932][ T1565] netlink: 'syz.2.14470': attribute type 49 has an invalid length. [ 738.380826][ T1623] netlink: 'syz.2.14498': attribute type 10 has an invalid length. [ 738.413374][ T1623] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14498'. [ 739.124275][ T1666] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14515'. [ 739.126662][ T1663] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14518'. [ 739.137048][ T1665] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.14517'. [ 739.335209][ T1671] validate_nla: 9 callbacks suppressed [ 739.335226][ T1671] netlink: 'syz.1.14520': attribute type 10 has an invalid length. [ 739.362495][ T1671] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14520'. [ 739.396380][ T1671] netlink: 'syz.1.14520': attribute type 10 has an invalid length. [ 739.509986][ T1679] netlink: 'syz.3.14526': attribute type 21 has an invalid length. [ 739.546224][ T1679] netlink: 'syz.3.14526': attribute type 11 has an invalid length. [ 739.639865][ T1687] netlink: 'syz.2.14529': attribute type 13 has an invalid length. [ 739.895908][ T1703] netlink: 'syz.2.14538': attribute type 2 has an invalid length. [ 740.150947][ T1713] netlink: 'syz.2.14542': attribute type 21 has an invalid length. [ 740.176055][ T1713] IPv6: NLM_F_CREATE should be specified when creating new route [ 740.194140][ T1713] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 740.201443][ T1713] IPv6: NLM_F_CREATE should be set when creating new route [ 740.208772][ T1713] IPv6: NLM_F_CREATE should be set when creating new route [ 740.216029][ T1713] IPv6: NLM_F_CREATE should be set when creating new route [ 740.480601][ T1729] netlink: 'syz.4.14549': attribute type 21 has an invalid length. [ 740.506157][ T1729] netlink: 'syz.4.14549': attribute type 11 has an invalid length. [ 740.702662][ T1740] netlink: 'syz.2.14554': attribute type 2 has an invalid length. [ 740.775412][ T1740] __nla_validate_parse: 2 callbacks suppressed [ 740.775427][ T1740] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.14554'. [ 740.910423][ T1753] netlink: 164 bytes leftover after parsing attributes in process `syz.4.14572'. [ 741.115461][ T1764] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 741.162530][ T1764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 741.277905][ T1770] netlink: 10 bytes leftover after parsing attributes in process `syz.2.14568'. [ 741.580021][ T1788] IPv6: NLM_F_CREATE should be specified when creating new route [ 741.625474][ T1788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 741.632788][ T1788] IPv6: NLM_F_CREATE should be set when creating new route [ 741.640048][ T1788] IPv6: NLM_F_CREATE should be set when creating new route [ 741.647318][ T1788] IPv6: NLM_F_CREATE should be set when creating new route [ 742.150140][ T1819] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.14593'. [ 742.335115][ T1830] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14600'. [ 742.844084][ T1857] netlink: 10 bytes leftover after parsing attributes in process `syz.0.14612'. [ 743.143924][ T1876] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 743.172671][ T1876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 743.584406][ T1898] netlink: 10 bytes leftover after parsing attributes in process `syz.1.14632'. [ 743.939691][ T1913] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.14640'. [ 744.003280][ T1911] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 744.016719][ T1911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.034008][ T1915] netlink: 56 bytes leftover after parsing attributes in process `syz.1.14641'. [ 744.436194][ T1929] validate_nla: 8 callbacks suppressed [ 744.436209][ T1929] netlink: 'syz.4.14660': attribute type 1 has an invalid length. [ 744.485141][ T1929] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.14660'. [ 744.598764][ T1933] netlink: 'syz.2.14652': attribute type 29 has an invalid length. [ 744.854158][ T1943] netlink: 'syz.1.14655': attribute type 10 has an invalid length. [ 745.578210][ T1971] netlink: 'syz.1.14670': attribute type 2 has an invalid length. [ 745.612335][ T1971] netlink: 'syz.1.14670': attribute type 8 has an invalid length. [ 745.891126][ T1985] __nla_validate_parse: 3 callbacks suppressed [ 745.891142][ T1985] netlink: 144 bytes leftover after parsing attributes in process `syz.2.14678'. [ 746.396552][ T2003] netlink: 'syz.0.14687': attribute type 21 has an invalid length. [ 746.638978][ T2015] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14693'. [ 746.770053][ T2019] netlink: 'syz.4.14695': attribute type 2 has an invalid length. [ 746.808766][ T2019] netlink: 'syz.4.14695': attribute type 8 has an invalid length. [ 746.864415][ T2019] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14695'. [ 747.074442][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.080774][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.264702][ T2037] netlink: 'syz.1.14703': attribute type 21 has an invalid length. [ 747.488976][ T2049] netlink: 144 bytes leftover after parsing attributes in process `syz.0.14708'. [ 747.757061][ T2059] netlink: 'syz.1.14713': attribute type 2 has an invalid length. [ 747.812499][ T2059] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14713'. [ 748.733453][ T2097] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.14732'. [ 749.058104][ T2110] netlink: 100 bytes leftover after parsing attributes in process `syz.1.14739'. [ 749.216373][ T2118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14743'. [ 749.580654][ T2139] validate_nla: 4 callbacks suppressed [ 749.580670][ T2139] netlink: 'syz.3.14755': attribute type 21 has an invalid length. [ 749.612487][ T2139] netlink: 'syz.3.14755': attribute type 1 has an invalid length. [ 749.620554][ T2139] netlink: 100 bytes leftover after parsing attributes in process `syz.3.14755'. [ 749.985449][ T2153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14762'. [ 750.012101][ T2157] netlink: 'syz.3.14764': attribute type 23 has an invalid length. [ 750.019533][ T2159] netlink: 'syz.4.14765': attribute type 3 has an invalid length. [ 750.044472][ T2159] netlink: 'syz.4.14765': attribute type 1 has an invalid length. [ 750.545434][ T2171] netlink: 'syz.4.14772': attribute type 10 has an invalid length. [ 751.032767][ T2171] bond0: (slave geneve0): Releasing backup interface [ 751.254198][ T2184] netlink: 'syz.1.14777': attribute type 23 has an invalid length. [ 751.268332][ T2187] __nla_validate_parse: 1 callbacks suppressed [ 751.268347][ T2187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14776'. [ 751.719772][ T2206] netlink: 180 bytes leftover after parsing attributes in process `syz.3.14789'. [ 751.904371][ T2213] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.14792'. [ 751.914184][ T2213] netlink: zone id is out of range [ 751.919659][ T2213] netlink: get zone limit has 8 unknown bytes [ 751.985123][ T2218] netlink: 'syz.4.14793': attribute type 23 has an invalid length. [ 752.582743][ T2236] netlink: 'syz.2.14813': attribute type 10 has an invalid length. [ 753.062801][ T2236] bond0: (slave geneve0): Releasing backup interface [ 753.082215][ T2246] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.14806'. [ 753.106304][ T2246] netlink: zone id is out of range [ 753.111673][ T2246] netlink: get zone limit has 8 unknown bytes [ 753.761509][ T2267] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14818'. [ 753.793026][ T2267] device bond_slave_0 left promiscuous mode [ 753.799512][ T2267] device bond_slave_1 left promiscuous mode [ 753.865422][ T2267] device netdevsim0 left promiscuous mode [ 753.995580][ T2276] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.14822'. [ 754.006317][ T2276] netlink: zone id is out of range [ 754.012189][ T2276] netlink: get zone limit has 8 unknown bytes [ 754.416929][ T2267] team0: Port device bond0 removed [ 754.423711][ T2267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.461488][ T2267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.495442][ T2267] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 754.510239][ T2267] bond0 (unregistering): Released all slaves [ 754.550097][ T2278] netlink: 'syz.3.14821': attribute type 10 has an invalid length. [ 754.633474][ T2282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14825'. [ 754.647973][ T2282] netlink: 'syz.0.14825': attribute type 3 has an invalid length. [ 754.675546][ T2282] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14825'. [ 754.958010][ T2302] netlink: 'syz.3.14844': attribute type 21 has an invalid length. [ 754.982396][ T2302] netlink: 'syz.3.14844': attribute type 4 has an invalid length. [ 755.017531][ T2302] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14844'. [ 755.074494][ T2308] netlink: 'syz.1.14835': attribute type 21 has an invalid length. [ 755.122827][ T2308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14835'. [ 755.239675][ T2314] netlink: 'syz.0.14838': attribute type 21 has an invalid length. [ 755.411904][ T2324] netlink: 'syz.3.14846': attribute type 9 has an invalid length. [ 755.540411][ T2330] netlink: 'syz.3.14848': attribute type 21 has an invalid length. [ 755.549748][ T2330] netlink: 'syz.3.14848': attribute type 3 has an invalid length. [ 755.600507][ T2335] netlink: 'syz.0.14850': attribute type 21 has an invalid length. [ 755.624748][ T2335] netlink: 'syz.0.14850': attribute type 4 has an invalid length. [ 756.315747][ T2376] __nla_validate_parse: 7 callbacks suppressed [ 756.315762][ T2376] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14879'. [ 756.607971][ T2376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.645312][ T2376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.660460][ T2376] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 756.679234][ T2376] bond0 (unregistering): (slave team0): Releasing backup interface [ 756.720262][ T2376] bond0 (unregistering): Released all slaves [ 756.738475][ T2380] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14868'. [ 757.366558][ T2433] netlink: 176 bytes leftover after parsing attributes in process `syz.1.14887'. [ 757.535031][ T2443] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14893'. [ 757.714915][ T2443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.739631][ T2443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.755479][ T2443] bond0 (unregistering): Released all slaves [ 758.144783][ T2480] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14907'. [ 758.890681][ T2531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14931'. [ 758.952498][ T2531] device lo left promiscuous mode [ 758.958536][ T2531] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 758.998367][ T2531] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 759.019375][ T2531] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 759.043194][ T2531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 759.315601][ T2555] netlink: 164 bytes leftover after parsing attributes in process `syz.2.14940'. [ 759.351771][ T2557] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14941'. [ 759.722376][ T2587] validate_nla: 17 callbacks suppressed [ 759.722390][ T2587] netlink: 'syz.3.14960': attribute type 10 has an invalid length. [ 759.782423][ T2587] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14960'. [ 759.812558][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 759.831721][ T2587] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 759.856210][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 759.908073][ T2587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 759.959010][ T2597] netlink: 'syz.4.14956': attribute type 21 has an invalid length. [ 760.009453][ T2597] netlink: 164 bytes leftover after parsing attributes in process `syz.4.14956'. [ 760.597196][ T2640] netlink: 'syz.0.14974': attribute type 21 has an invalid length. [ 760.615780][ T2640] netlink: 'syz.0.14974': attribute type 1 has an invalid length. [ 760.766349][ T2656] netlink: 'syz.3.14977': attribute type 21 has an invalid length. [ 761.176224][ T2683] netlink: 'syz.2.14991': attribute type 21 has an invalid length. [ 761.188585][ T2683] netlink: 'syz.2.14991': attribute type 1 has an invalid length. [ 761.843606][ T2720] __nla_validate_parse: 4 callbacks suppressed [ 761.843622][ T2720] netlink: 177648 bytes leftover after parsing attributes in process `syz.4.15005'. [ 762.745029][ T2770] netlink: 'syz.0.15030': attribute type 49 has an invalid length. [ 762.866849][ T2780] netlink: 'syz.2.15032': attribute type 19 has an invalid length. [ 762.910436][ T2780] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15032'. [ 763.241059][ T2800] netlink: 'syz.0.15039': attribute type 23 has an invalid length. [ 763.545911][ T2824] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.15048'. [ 763.648262][ T2832] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.15050'. [ 763.843144][ T2844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15065'. [ 764.388621][ T2869] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.15066'. [ 764.447945][ T2873] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.15068'. [ 764.870541][ T2890] netlink: 10 bytes leftover after parsing attributes in process `syz.4.15079'. [ 764.888275][ T2893] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.15080'. [ 765.470205][ T2917] validate_nla: 5 callbacks suppressed [ 765.470221][ T2917] netlink: 'syz.1.15101': attribute type 39 has an invalid length. [ 765.626588][ T2921] netlink: 10 bytes leftover after parsing attributes in process `syz.3.15093'. [ 766.555675][ T2967] tc_dump_action: action bad kind [ 767.294589][ T2994] __nla_validate_parse: 5 callbacks suppressed [ 767.294605][ T2994] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15130'. [ 767.377318][ T2994] tc_dump_action: action bad kind [ 767.538227][ T3008] netlink: 10 bytes leftover after parsing attributes in process `syz.0.15135'. [ 767.568546][ T3006] netlink: 830 bytes leftover after parsing attributes in process `syz.2.15136'. [ 768.213886][ T3033] netlink: 6 bytes leftover after parsing attributes in process `syz.0.15148'. [ 768.236162][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 768.257330][ T3033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 768.286447][ T3032] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15149'. [ 768.301183][ T3032] tc_dump_action: action bad kind [ 768.494585][ T3040] netlink: 830 bytes leftover after parsing attributes in process `syz.4.15152'. [ 768.694914][ T3046] netlink: 'syz.1.15156': attribute type 3 has an invalid length. [ 768.733259][ T3046] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15156'. [ 769.025947][ T3064] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.15165'. [ 769.154708][ T3070] netlink: 763 bytes leftover after parsing attributes in process `syz.0.15168'. [ 769.380875][ T3080] netlink: 'syz.2.15174': attribute type 3 has an invalid length. [ 769.409438][ T3080] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.15174'. [ 769.738718][ T3100] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 769.775329][ T3100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 769.794177][ T3104] debugfs: Directory '.!A5‚Á7>7H€' with parent 'ieee80211' already present! [ 769.922858][ T3110] netlink: 'syz.3.15188': attribute type 4 has an invalid length. [ 770.513739][ T3144] debugfs: Directory '.!A5‚Á7>7H€' with parent 'ieee80211' already present! [ 770.554822][ T3148] netlink: 'syz.1.15205': attribute type 4 has an invalid length. [ 771.015611][ T3172] netlink: 'syz.1.15216': attribute type 1 has an invalid length. [ 771.117072][ T3178] netlink: 'syz.4.15219': attribute type 4 has an invalid length. [ 771.163179][ T3180] netlink: 'syz.2.15220': attribute type 9 has an invalid length. [ 771.308613][ T3188] netlink: 'syz.1.15225': attribute type 46 has an invalid length. [ 773.001878][ T3263] __nla_validate_parse: 10 callbacks suppressed [ 773.001897][ T3263] netlink: 6 bytes leftover after parsing attributes in process `syz.3.15270'. [ 773.058270][ T3263] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 773.092009][ T3263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 773.291478][ T3271] netlink: 'syz.2.15262': attribute type 46 has an invalid length. [ 773.360799][ T3277] netlink: 'syz.0.15266': attribute type 1 has an invalid length. [ 773.389187][ T3277] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15266'. [ 773.795962][ T3299] netlink: 52 bytes leftover after parsing attributes in process `syz.4.15278'. [ 773.818796][ T3299] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 773.946578][ T3305] netlink: 'syz.4.15279': attribute type 46 has an invalid length. [ 774.087591][ T3309] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15281'. [ 774.103446][ T3309] tc_dump_action: action bad kind [ 774.985700][ T3353] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.15302'. [ 775.207895][ T3369] netlink: 'syz.1.15309': attribute type 21 has an invalid length. [ 775.236494][ T3369] netlink: 144 bytes leftover after parsing attributes in process `syz.1.15309'. [ 775.463137][ T3386] netlink: 'syz.0.15313': attribute type 16 has an invalid length. [ 775.471091][ T3386] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15313'. [ 775.528052][ T3388] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.15317'. [ 775.724199][ T3397] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15321'. [ 775.772648][ T3397] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 776.050193][ T3420] netlink: 'syz.4.15331': attribute type 16 has an invalid length. [ 776.060054][ T3420] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15331'. [ 776.519422][ T3444] netlink: 'syz.1.15344': attribute type 16 has an invalid length. [ 777.410293][ T3493] ref_ctr_offset mismatch. inode: 0x3c4f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 777.494482][ T3498] netlink: 'syz.4.15371': attribute type 21 has an invalid length. [ 778.399088][ T3531] __nla_validate_parse: 4 callbacks suppressed [ 778.399105][ T3531] netlink: 166 bytes leftover after parsing attributes in process `syz.3.15387'. [ 778.710154][ T3546] netlink: 'syz.2.15395': attribute type 2 has an invalid length. [ 778.736435][ T3546] netlink: 'syz.2.15395': attribute type 1 has an invalid length. [ 778.746165][ T3546] netlink: 'syz.2.15395': attribute type 4 has an invalid length. [ 778.762411][ T3546] netlink: 208312 bytes leftover after parsing attributes in process `syz.2.15395'. [ 778.981440][ T3552] ref_ctr_offset mismatch. inode: 0x3bd1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 779.265055][ T3570] netlink: 'syz.4.15406': attribute type 2 has an invalid length. [ 779.293797][ T3570] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15406'. [ 779.492974][ T3580] netlink: 'syz.3.15421': attribute type 2 has an invalid length. [ 779.500846][ T3580] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15421'. [ 779.646929][ T3587] ref_ctr_offset mismatch. inode: 0x3bdd offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 779.660979][ T3589] netlink: 763 bytes leftover after parsing attributes in process `syz.2.15415'. [ 780.357888][ T3621] netlink: 'syz.0.15428': attribute type 2 has an invalid length. [ 780.372358][ T3621] netlink: 'syz.0.15428': attribute type 1 has an invalid length. [ 780.393690][ T3621] netlink: 208312 bytes leftover after parsing attributes in process `syz.0.15428'. [ 780.536045][ T3628] ref_ctr_offset mismatch. inode: 0x3c4a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 781.471764][ T3653] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.15454'. [ 781.683059][ T3663] ref_ctr_offset mismatch. inode: 0x3ce8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 781.875716][ T3672] validate_nla: 1 callbacks suppressed [ 781.875731][ T3672] netlink: 'syz.3.15451': attribute type 21 has an invalid length. [ 781.928697][ T3672] netlink: 'syz.3.15451': attribute type 6 has an invalid length. [ 781.944339][ T3672] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15451'. [ 782.063029][ T3681] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.15458'. [ 782.605478][ T3706] netlink: 'syz.4.15470': attribute type 21 has an invalid length. [ 782.607150][ T3709] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.15472'. [ 782.653890][ T3706] netlink: 'syz.4.15470': attribute type 6 has an invalid length. [ 782.985334][ T3721] netlink: 'syz.0.15487': attribute type 21 has an invalid length. [ 783.031596][ T3721] netlink: 'syz.0.15487': attribute type 6 has an invalid length. [ 783.611662][ T3746] __nla_validate_parse: 2 callbacks suppressed [ 783.611678][ T3746] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15489'. [ 783.720987][ T3749] netlink: 'syz.2.15492': attribute type 21 has an invalid length. [ 783.790612][ T3757] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15503'. [ 783.865101][ T3749] netlink: 'syz.2.15492': attribute type 6 has an invalid length. [ 783.885284][ T3749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15492'. [ 784.319014][ T3772] netlink: 168 bytes leftover after parsing attributes in process `syz.1.15500'. [ 785.181960][ T3793] netlink: 'syz.1.15509': attribute type 21 has an invalid length. [ 785.190499][ T3793] netlink: 'syz.1.15509': attribute type 6 has an invalid length. [ 785.226828][ T3793] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15509'. [ 785.839683][ T3822] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.15525'. [ 785.898969][ T3826] netlink: 168 bytes leftover after parsing attributes in process `syz.2.15524'. [ 785.953982][ T3828] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15527'. [ 786.227585][ T3840] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15543'. [ 786.293973][ T3845] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15535'. [ 787.004575][ T3867] validate_nla: 5 callbacks suppressed [ 787.004591][ T3867] netlink: 'syz.1.15548': attribute type 13 has an invalid length. [ 787.974201][ T3900] netlink: 'syz.2.15564': attribute type 13 has an invalid length. [ 790.037411][ T3986] netlink: 'syz.1.15612': attribute type 3 has an invalid length. [ 790.082772][ T3986] __nla_validate_parse: 4 callbacks suppressed [ 790.082787][ T3986] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15612'. [ 791.444464][ T4063] netlink: 'syz.3.15647': attribute type 3 has an invalid length. [ 791.452598][ T4063] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.15647'. [ 792.083479][ T4099] netlink: 'syz.2.15654': attribute type 3 has an invalid length. [ 792.093380][ T4099] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.15654'. [ 795.023494][ T4224] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 795.925094][ T4262] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 796.558992][ T4303] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 797.134951][ T4327] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.15756'. [ 797.185794][ T4329] netlink: 'syz.1.15757': attribute type 3 has an invalid length. [ 797.195933][ T4329] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15757'. [ 797.367660][ T4338] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 798.291763][ T4377] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15774'. [ 798.336714][ T4382] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 798.878856][ T4398] netlink: 'syz.3.15785': attribute type 3 has an invalid length. [ 798.936319][ T4398] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.15785'. [ 801.161616][ T4530] netlink: 'syz.0.15835': attribute type 2 has an invalid length. [ 801.898238][ T4568] netlink: 'syz.4.15853': attribute type 3 has an invalid length. [ 801.908135][ T4568] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.15853'. [ 802.346270][ T4595] netlink: 'syz.4.15863': attribute type 2 has an invalid length. [ 803.067103][ T4637] netlink: 'syz.1.15880': attribute type 2 has an invalid length. [ 803.192817][ T4645] netlink: 'syz.0.15885': attribute type 21 has an invalid length. [ 803.850500][ T4672] netlink: 'syz.0.15895': attribute type 3 has an invalid length. [ 803.859890][ T4672] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.15895'. [ 804.140966][ T4680] netlink: 'syz.2.15901': attribute type 21 has an invalid length. [ 804.751060][ T4713] netlink: 'syz.3.15919': attribute type 21 has an invalid length. [ 805.010382][ T4723] netlink: 'syz.2.15922': attribute type 12 has an invalid length. [ 805.092974][ T4723] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15922'. [ 805.314055][ T4733] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.15929'. [ 805.372036][ T4733] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 808.310403][ T4846] netlink: 'syz.0.15982': attribute type 12 has an invalid length. [ 808.328096][ T4846] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15982'. [ 808.514620][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.521180][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.793014][ T4865] netlink: 'syz.3.15989': attribute type 1 has an invalid length. [ 809.359457][ T4890] netlink: 'syz.1.16000': attribute type 3 has an invalid length. [ 809.394488][ T4890] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.16000'. [ 809.456661][ T4893] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.16002'. [ 809.500824][ T4893] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 809.563520][ T4893] CPU: 0 PID: 4893 Comm: syz.2.16002 Not tainted 6.1.147-syzkaller #0 [ 809.571736][ T4893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 809.581825][ T4893] Call Trace: [ 809.585141][ T4893] [ 809.588104][ T4893] dump_stack_lvl+0x168/0x22e [ 809.592823][ T4893] ? show_regs_print_info+0x12/0x12 [ 809.598054][ T4893] ? load_image+0x3b0/0x3b0 [ 809.602615][ T4893] sysfs_warn_dup+0x8a/0xa0 [ 809.607155][ T4893] sysfs_do_create_link_sd+0xc0/0x110 [ 809.612559][ T4893] device_add+0x7ed/0xfb0 [ 809.616933][ T4893] wiphy_register+0x1e68/0x2bd0 [ 809.621934][ T4893] ? cfg80211_event_work+0x40/0x40 [ 809.627071][ T4893] ? minstrel_ht_alloc+0x894/0xa20 [ 809.632229][ T4893] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 809.638339][ T4893] ieee80211_register_hw+0x2c29/0x38c0 [ 809.643832][ T4893] ? ieee80211_register_hw+0xeb1/0x38c0 [ 809.649378][ T4893] ? ieee80211_register_hw+0xeb1/0x38c0 [ 809.654933][ T4893] ? ieee80211_tasklet_handler+0x20/0x20 [ 809.660578][ T4893] ? memset+0x1e/0x40 [ 809.664562][ T4893] ? __hrtimer_init+0x186/0x270 [ 809.669414][ T4893] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 809.675162][ T4893] hwsim_new_radio_nl+0xafa/0xce0 [ 809.680207][ T4893] genl_family_rcv_msg_doit+0x22e/0x320 [ 809.685759][ T4893] ? end_current_label_crit_section+0x170/0x170 [ 809.692021][ T4893] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 809.697924][ T4893] ? bpf_lsm_capable+0x5/0x10 [ 809.702598][ T4893] ? security_capable+0x85/0xb0 [ 809.707453][ T4893] genl_rcv_msg+0x5f2/0x780 [ 809.711970][ T4893] ? genl_bind+0x350/0x350 [ 809.716386][ T4893] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 809.722733][ T4893] netlink_rcv_skb+0x1de/0x420 [ 809.727496][ T4893] ? genl_bind+0x350/0x350 [ 809.731950][ T4893] ? netlink_ack+0x1100/0x1100 [ 809.736729][ T4893] ? down_read+0x1a8/0x2d0 [ 809.741146][ T4893] genl_rcv+0x24/0x40 [ 809.745129][ T4893] netlink_unicast+0x74d/0x8d0 [ 809.749906][ T4893] netlink_sendmsg+0x89e/0xbc0 [ 809.754677][ T4893] ? netlink_getsockopt+0x540/0x540 [ 809.759875][ T4893] ? aa_sock_msg_perm+0x94/0x150 [ 809.764814][ T4893] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 809.770092][ T4893] ? security_socket_sendmsg+0x7c/0xa0 [ 809.775555][ T4893] ? netlink_getsockopt+0x540/0x540 [ 809.780748][ T4893] ____sys_sendmsg+0x59b/0x970 [ 809.785529][ T4893] ? __sys_sendmsg_sock+0x30/0x30 [ 809.790553][ T4893] ? __import_iovec+0x315/0x500 [ 809.795416][ T4893] ? import_iovec+0x6f/0xa0 [ 809.800013][ T4893] ___sys_sendmsg+0x21c/0x290 [ 809.804694][ T4893] ? __sys_sendmsg+0x270/0x270 [ 809.809514][ T4893] ? __fdget+0x17c/0x200 [ 809.813764][ T4893] __se_sys_sendmsg+0x19e/0x270 [ 809.818613][ T4893] ? __se_sys_futex+0x14a/0x440 [ 809.823464][ T4893] ? __x64_sys_sendmsg+0x80/0x80 [ 809.828417][ T4893] ? lockdep_hardirqs_on+0x94/0x140 [ 809.833616][ T4893] do_syscall_64+0x4c/0xa0 [ 809.838027][ T4893] ? clear_bhb_loop+0x60/0xb0 [ 809.842694][ T4893] ? clear_bhb_loop+0x60/0xb0 [ 809.847422][ T4893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 809.853315][ T4893] RIP: 0033:0x7f13a298ebe9 [ 809.857738][ T4893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.877430][ T4893] RSP: 002b:00007f13a3742038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.885851][ T4893] RAX: ffffffffffffffda RBX: 00007f13a2bb5fa0 RCX: 00007f13a298ebe9 [ 809.893820][ T4893] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 809.901793][ T4893] RBP: 00007f13a2a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 809.909777][ T4893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.917765][ T4893] R13: 00007f13a2bb6038 R14: 00007f13a2bb5fa0 R15: 00007ffdd4f94748 [ 809.925762][ T4893] [ 810.913504][ T4928] netlink: 'syz.3.16019': attribute type 3 has an invalid length. [ 810.941719][ T4928] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.16019'. [ 811.305676][ T4943] netlink: 'syz.3.16027': attribute type 3 has an invalid length. [ 811.332048][ T4943] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.16027'. [ 812.068886][ T4961] netlink: 'syz.4.16037': attribute type 1 has an invalid length. [ 812.471236][ T4973] netlink: 'syz.0.16043': attribute type 3 has an invalid length. [ 812.523762][ T4973] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.16043'. [ 812.733346][ T4988] netlink: 'syz.0.16048': attribute type 3 has an invalid length. [ 812.761541][ T4988] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.16048'. [ 813.893769][ T5022] netlink: 'syz.4.16064': attribute type 3 has an invalid length. [ 813.912487][ T5022] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.16064'. [ 814.680172][ T5053] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.16077'. [ 814.702927][ T5055] netlink: 'syz.2.16078': attribute type 3 has an invalid length. [ 814.718760][ T5055] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.16078'. [ 816.335441][ T5132] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.16117'. [ 817.610475][ T5172] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.16134'. [ 819.375694][ T5243] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.16168'. [ 820.250953][ T5276] netlink: 'syz.0.16185': attribute type 1 has an invalid length. [ 820.288029][ T5276] netlink: 5 bytes leftover after parsing attributes in process `syz.0.16185'. [ 820.339149][ T5274] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.16193'. [ 820.355082][ T5274] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 821.556118][ T5305] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16199'. [ 822.541098][ T5338] netlink: 'syz.3.16223': attribute type 1 has an invalid length. [ 822.591176][ T5338] netlink: 5 bytes leftover after parsing attributes in process `syz.3.16223'. [ 824.196235][ T5382] netlink: 'syz.2.16230': attribute type 1 has an invalid length. [ 824.245771][ T5382] netlink: 5 bytes leftover after parsing attributes in process `syz.2.16230'. [ 824.309681][ T5389] netlink: 'syz.4.16233': attribute type 6 has an invalid length. [ 824.352451][ T5389] netlink: 164 bytes leftover after parsing attributes in process `syz.4.16233'. [ 826.370866][ T5440] netlink: 'syz.3.16258': attribute type 6 has an invalid length. [ 826.406803][ T5440] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16258'. [ 828.185095][ T5479] netlink: 'syz.0.16276': attribute type 6 has an invalid length. [ 828.212382][ T5479] netlink: 164 bytes leftover after parsing attributes in process `syz.0.16276'. [ 829.441298][ T5514] netlink: 'syz.2.16293': attribute type 6 has an invalid length. [ 829.512315][ T5514] netlink: 164 bytes leftover after parsing attributes in process `syz.2.16293'. [ 831.443142][ T5584] netlink: 'syz.1.16335': attribute type 10 has an invalid length. [ 831.452358][ T5584] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16335'. [ 833.556182][ T5647] netlink: 'syz.1.16363': attribute type 2 has an invalid length. [ 833.578487][ T5647] device 1 entered promiscuous mode [ 833.727805][ T5656] IPv6: Can't replace route, no match found [ 833.977334][ T5664] netlink: 'syz.0.16358': attribute type 17 has an invalid length. [ 833.992148][ T5664] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16358'. [ 834.053613][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 834.107334][ T5664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 834.781325][ T5684] netlink: 'syz.4.16370': attribute type 2 has an invalid length. [ 834.835447][ T5684] device 1 entered promiscuous mode [ 836.541177][ T5723] netlink: 'syz.0.16384': attribute type 2 has an invalid length. [ 836.577489][ T5723] device 0 entered promiscuous mode [ 839.303342][ T5817] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.16432'. [ 840.564957][ T5855] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.16448'. [ 841.575818][ T5892] wlan1: mtu greater than device maximum [ 841.740398][ T5898] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.16470'. [ 842.027317][ T5914] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.16487'. [ 846.009396][ T6040] wlan1: mtu greater than device maximum [ 846.678791][ T6072] wlan1: mtu greater than device maximum [ 847.296656][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16561'. [ 847.673119][ T6111] netlink: 'syz.1.16569': attribute type 1 has an invalid length. [ 848.826820][ T6156] netlink: 'syz.0.16597': attribute type 33 has an invalid length. [ 848.872277][ T6156] netlink: 164 bytes leftover after parsing attributes in process `syz.0.16597'. [ 849.729927][ T6181] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.16601'. [ 849.922544][ T6187] netlink: 'syz.2.16604': attribute type 33 has an invalid length. [ 849.995042][ T6187] netlink: 164 bytes leftover after parsing attributes in process `syz.2.16604'. [ 850.168651][ T6199] netlink: 'syz.3.16621': attribute type 33 has an invalid length. [ 850.202380][ T6199] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16621'. [ 850.591850][ T6219] syz.1.16618[6219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 850.591949][ T6219] syz.1.16618[6219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 850.918978][ T6237] netlink: 'syz.1.16628': attribute type 33 has an invalid length. [ 850.966008][ T6237] netlink: 164 bytes leftover after parsing attributes in process `syz.1.16628'. [ 850.988074][ T6239] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16632'. [ 851.160885][ T6246] netlink: 'syz.0.16633': attribute type 29 has an invalid length. [ 851.192838][ T6246] netlink: 'syz.0.16633': attribute type 29 has an invalid length. [ 851.243600][ T6253] netlink: 'syz.0.16633': attribute type 29 has an invalid length. [ 851.374100][ T6259] syz.4.16638[6259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 851.374197][ T6259] syz.4.16638[6259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 852.129854][ T6290] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.16651'. [ 852.191172][ T6293] syz.2.16654[6293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 852.191266][ T6293] syz.2.16654[6293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 853.126588][ T6324] syz.3.16667[6324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 853.151295][ T6329] netlink: 'syz.4.16668': attribute type 29 has an invalid length. [ 853.179273][ T6324] syz.3.16667[6324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 853.179653][ T6329] netlink: 'syz.4.16668': attribute type 29 has an invalid length. [ 853.206625][ T6332] netlink: 'syz.4.16668': attribute type 29 has an invalid length. [ 854.281761][ T6356] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.16682'. [ 854.421223][ T6363] netlink: 'syz.2.16684': attribute type 29 has an invalid length. [ 854.447356][ T6363] netlink: 'syz.2.16684': attribute type 29 has an invalid length. [ 854.528910][ T6368] netlink: 'syz.2.16684': attribute type 29 has an invalid length. [ 855.169702][ T6398] netlink: 'syz.4.16700': attribute type 30 has an invalid length. [ 855.620947][ T6407] netlink: 'syz.1.16702': attribute type 29 has an invalid length. [ 855.651594][ T6407] netlink: 'syz.1.16702': attribute type 29 has an invalid length. [ 855.705265][ T6408] netlink: 'syz.1.16702': attribute type 29 has an invalid length. [ 856.030579][ T6418] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16710'. [ 856.594170][ T6446] sock: sock_set_timeout: `syz.1.16719' (pid 6446) tries to set negative timeout [ 856.772006][ T6452] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16724'. [ 857.036563][ T6461] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16738'. [ 858.425208][ T6522] validate_nla: 5 callbacks suppressed [ 858.425225][ T6522] netlink: 'syz.1.16756': attribute type 3 has an invalid length. [ 858.468336][ T6522] netlink: 'syz.1.16756': attribute type 1 has an invalid length. [ 858.487596][ T6522] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.16756'. [ 858.539891][ T6525] netlink: 'syz.4.16758': attribute type 21 has an invalid length. [ 860.458042][ T6609] netlink: 'syz.2.16794': attribute type 3 has an invalid length. [ 860.470697][ T6609] netlink: 'syz.2.16794': attribute type 1 has an invalid length. [ 860.482918][ T6609] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.16794'. [ 860.750254][ T6616] netlink: 'syz.1.16800': attribute type 21 has an invalid length. [ 860.796209][ T6616] netlink: 'syz.1.16800': attribute type 4 has an invalid length. [ 861.118510][ T6633] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.16807'. [ 861.145671][ T6633] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.16807'. [ 861.157157][ T6633] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.16807'. [ 862.353416][ T6697] netlink: 'syz.3.16835': attribute type 21 has an invalid length. [ 862.408618][ T6697] netlink: 'syz.3.16835': attribute type 4 has an invalid length. [ 862.640510][ T6710] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.16843'. [ 862.719115][ T6716] netlink: 17861 bytes leftover after parsing attributes in process `syz.1.16846'. [ 862.735795][ T6710] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.16843'. [ 862.783358][ T6714] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.16843'. [ 863.209109][ T6745] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16857'. [ 863.532856][ T6758] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.16864'. [ 865.526629][ T6833] netlink: 'syz.4.16897': attribute type 21 has an invalid length. [ 865.561910][ T6833] netlink: 'syz.4.16897': attribute type 1 has an invalid length. [ 865.582527][ T6833] __nla_validate_parse: 3 callbacks suppressed [ 865.582543][ T6833] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.16897'. [ 866.046341][ T6844] netlink: 17861 bytes leftover after parsing attributes in process `syz.3.16902'. [ 866.564433][ T6865] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16914'. [ 866.588532][ T6865] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16914'. [ 866.614168][ T6868] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16914'. [ 868.398820][ T6939] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16949'. [ 868.422607][ T6939] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16949'. [ 868.444207][ T6939] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16949'. [ 868.548179][ T6943] netlink: 'syz.0.16962': attribute type 21 has an invalid length. [ 868.582393][ T6943] netlink: 'syz.0.16962': attribute type 1 has an invalid length. [ 868.590371][ T6943] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.16962'. [ 868.714189][ T6948] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16953'. [ 868.844531][ T6951] netlink: 'syz.0.16955': attribute type 2 has an invalid length. [ 869.954233][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.960611][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.867908][ T7018] __nla_validate_parse: 1 callbacks suppressed [ 870.867925][ T7018] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16988'. [ 870.919467][ T7018] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16988'. [ 870.977656][ T7021] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16988'. [ 871.803971][ T7047] netlink: 'syz.3.17000': attribute type 2 has an invalid length. [ 871.805153][ T7046] netlink: 168 bytes leftover after parsing attributes in process `syz.1.16999'. [ 871.832435][ T7047] netlink: 10 bytes leftover after parsing attributes in process `syz.3.17000'. [ 872.751111][ T7082] netlink: 'syz.2.17014': attribute type 2 has an invalid length. [ 872.794849][ T7082] netlink: 10 bytes leftover after parsing attributes in process `syz.2.17014'. [ 875.217407][ T7150] netlink: 'syz.2.17051': attribute type 29 has an invalid length. [ 875.253206][ T7150] netlink: 'syz.2.17051': attribute type 29 has an invalid length. [ 875.277353][ T7153] netlink: 'syz.2.17051': attribute type 29 has an invalid length. [ 876.090986][ T7187] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.17067'. [ 876.552652][ T7204] netlink: 10 bytes leftover after parsing attributes in process `syz.0.17078'. [ 877.010019][ T7219] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.17084'. [ 877.575708][ T7237] netlink: 10 bytes leftover after parsing attributes in process `syz.1.17093'. [ 878.052092][ T7255] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.17100'. [ 878.310578][ T7266] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17107'. [ 880.056629][ T7305] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.17125'. [ 880.440262][ T7324] netlink: 156 bytes leftover after parsing attributes in process `syz.0.17135'. [ 880.651440][ T7335] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.17139'. [ 881.669264][ T7367] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.17154'. [ 882.404198][ T7398] netlink: 'syz.1.17168': attribute type 2 has an invalid length. [ 882.442349][ T7398] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17168'. [ 883.591939][ T7432] netlink: 'syz.3.17183': attribute type 3 has an invalid length. [ 883.650797][ T7432] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.17183'. [ 886.382084][ T7536] netlink: 'syz.1.17232': attribute type 3 has an invalid length. [ 886.413506][ T7536] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.17232'. [ 886.906114][ T7553] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 887.380534][ T7566] netlink: 'syz.4.17246': attribute type 3 has an invalid length. [ 887.406749][ T7566] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.17246'. [ 887.836741][ T7582] netlink: 'syz.4.17253': attribute type 4 has an invalid length. [ 887.862554][ T7582] netlink: 140 bytes leftover after parsing attributes in process `syz.4.17253'. [ 888.246243][ T7598] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.17261'. [ 888.332746][ T7598] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 888.386695][ T7598] CPU: 1 PID: 7598 Comm: syz.2.17261 Not tainted 6.1.147-syzkaller #0 [ 888.394910][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 888.404987][ T7598] Call Trace: [ 888.408286][ T7598] [ 888.411229][ T7598] dump_stack_lvl+0x168/0x22e [ 888.415940][ T7598] ? show_regs_print_info+0x12/0x12 [ 888.421172][ T7598] ? load_image+0x3b0/0x3b0 [ 888.425733][ T7598] sysfs_warn_dup+0x8a/0xa0 [ 888.430367][ T7598] sysfs_do_create_link_sd+0xc0/0x110 [ 888.435781][ T7598] device_add+0x7ed/0xfb0 [ 888.440161][ T7598] wiphy_register+0x1e68/0x2bd0 [ 888.445084][ T7598] ? cfg80211_event_work+0x40/0x40 [ 888.450222][ T7598] ? minstrel_ht_alloc+0x894/0xa20 [ 888.455367][ T7598] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 888.461451][ T7598] ieee80211_register_hw+0x2c29/0x38c0 [ 888.466931][ T7598] ? ieee80211_register_hw+0xeb1/0x38c0 [ 888.472492][ T7598] ? ieee80211_register_hw+0xeb1/0x38c0 [ 888.478043][ T7598] ? ieee80211_tasklet_handler+0x20/0x20 [ 888.483697][ T7598] ? memset+0x1e/0x40 [ 888.487683][ T7598] ? __hrtimer_init+0x186/0x270 [ 888.492537][ T7598] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 888.498282][ T7598] hwsim_new_radio_nl+0xafa/0xce0 [ 888.503355][ T7598] genl_family_rcv_msg_doit+0x22e/0x320 [ 888.508916][ T7598] ? end_current_label_crit_section+0x170/0x170 [ 888.515166][ T7598] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 888.521080][ T7598] ? bpf_lsm_capable+0x5/0x10 [ 888.525761][ T7598] ? security_capable+0x85/0xb0 [ 888.530629][ T7598] genl_rcv_msg+0x5f2/0x780 [ 888.535164][ T7598] ? genl_bind+0x350/0x350 [ 888.539589][ T7598] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 888.545947][ T7598] netlink_rcv_skb+0x1de/0x420 [ 888.550715][ T7598] ? genl_bind+0x350/0x350 [ 888.555139][ T7598] ? netlink_ack+0x1100/0x1100 [ 888.559920][ T7598] ? down_read+0x1a8/0x2d0 [ 888.564341][ T7598] genl_rcv+0x24/0x40 [ 888.568333][ T7598] netlink_unicast+0x74d/0x8d0 [ 888.573109][ T7598] netlink_sendmsg+0x89e/0xbc0 [ 888.577884][ T7598] ? netlink_getsockopt+0x540/0x540 [ 888.583082][ T7598] ? aa_sock_msg_perm+0x94/0x150 [ 888.588025][ T7598] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 888.593303][ T7598] ? security_socket_sendmsg+0x7c/0xa0 [ 888.598759][ T7598] ? netlink_getsockopt+0x540/0x540 [ 888.603958][ T7598] ____sys_sendmsg+0x59b/0x970 [ 888.608738][ T7598] ? __sys_sendmsg_sock+0x30/0x30 [ 888.613757][ T7598] ? __import_iovec+0x315/0x500 [ 888.618617][ T7598] ? import_iovec+0x6f/0xa0 [ 888.623126][ T7598] ___sys_sendmsg+0x21c/0x290 [ 888.627808][ T7598] ? __sys_sendmsg+0x270/0x270 [ 888.632623][ T7598] ? __fdget+0x17c/0x200 [ 888.636870][ T7598] __se_sys_sendmsg+0x19e/0x270 [ 888.641724][ T7598] ? __x64_sys_sendmsg+0x80/0x80 [ 888.646682][ T7598] ? lockdep_hardirqs_on+0x94/0x140 [ 888.651881][ T7598] do_syscall_64+0x4c/0xa0 [ 888.656298][ T7598] ? clear_bhb_loop+0x60/0xb0 [ 888.660964][ T7598] ? clear_bhb_loop+0x60/0xb0 [ 888.665636][ T7598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 888.671529][ T7598] RIP: 0033:0x7f13a298ebe9 [ 888.675944][ T7598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.695545][ T7598] RSP: 002b:00007f13a3742038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 888.703958][ T7598] RAX: ffffffffffffffda RBX: 00007f13a2bb5fa0 RCX: 00007f13a298ebe9 [ 888.711927][ T7598] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 888.719893][ T7598] RBP: 00007f13a2a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 888.727860][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.735822][ T7598] R13: 00007f13a2bb6038 R14: 00007f13a2bb5fa0 R15: 00007ffdd4f94748 [ 888.743811][ T7598] [ 889.889271][ T7631] netlink: 10 bytes leftover after parsing attributes in process `syz.4.17275'. [ 890.025002][ T7637] netlink: 'syz.2.17278': attribute type 4 has an invalid length. [ 890.072707][ T7637] netlink: 140 bytes leftover after parsing attributes in process `syz.2.17278'. [ 890.665423][ T7663] netlink: 10 bytes leftover after parsing attributes in process `syz.3.17292'. [ 890.756073][ T7666] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.17293'. [ 890.825997][ T7666] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 890.901594][ T7666] CPU: 1 PID: 7666 Comm: syz.4.17293 Not tainted 6.1.147-syzkaller #0 [ 890.909821][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 890.919923][ T7666] Call Trace: [ 890.923237][ T7666] [ 890.926183][ T7666] dump_stack_lvl+0x168/0x22e [ 890.930892][ T7666] ? show_regs_print_info+0x12/0x12 [ 890.936121][ T7666] ? load_image+0x3b0/0x3b0 [ 890.940682][ T7666] sysfs_warn_dup+0x8a/0xa0 [ 890.945218][ T7666] sysfs_do_create_link_sd+0xc0/0x110 [ 890.950621][ T7666] device_add+0x7ed/0xfb0 [ 890.954998][ T7666] wiphy_register+0x1e68/0x2bd0 [ 890.959913][ T7666] ? cfg80211_event_work+0x40/0x40 [ 890.965052][ T7666] ? minstrel_ht_alloc+0x894/0xa20 [ 890.970205][ T7666] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 890.976311][ T7666] ieee80211_register_hw+0x2c29/0x38c0 [ 890.981815][ T7666] ? ieee80211_register_hw+0xeb1/0x38c0 [ 890.987554][ T7666] ? ieee80211_register_hw+0xeb1/0x38c0 [ 890.993112][ T7666] ? ieee80211_tasklet_handler+0x20/0x20 [ 890.998756][ T7666] ? memset+0x1e/0x40 [ 891.002740][ T7666] ? __hrtimer_init+0x186/0x270 [ 891.007603][ T7666] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 891.013347][ T7666] hwsim_new_radio_nl+0xafa/0xce0 [ 891.018389][ T7666] genl_family_rcv_msg_doit+0x22e/0x320 [ 891.023941][ T7666] ? end_current_label_crit_section+0x170/0x170 [ 891.030189][ T7666] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 891.036095][ T7666] ? bpf_lsm_capable+0x5/0x10 [ 891.040769][ T7666] ? security_capable+0x85/0xb0 [ 891.045659][ T7666] genl_rcv_msg+0x5f2/0x780 [ 891.050177][ T7666] ? genl_bind+0x350/0x350 [ 891.054606][ T7666] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 891.060997][ T7666] netlink_rcv_skb+0x1de/0x420 [ 891.065772][ T7666] ? genl_bind+0x350/0x350 [ 891.070196][ T7666] ? netlink_ack+0x1100/0x1100 [ 891.074987][ T7666] ? down_read+0x1a8/0x2d0 [ 891.079411][ T7666] genl_rcv+0x24/0x40 [ 891.083393][ T7666] netlink_unicast+0x74d/0x8d0 [ 891.088170][ T7666] netlink_sendmsg+0x89e/0xbc0 [ 891.092950][ T7666] ? netlink_getsockopt+0x540/0x540 [ 891.098149][ T7666] ? aa_sock_msg_perm+0x94/0x150 [ 891.103090][ T7666] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 891.108378][ T7666] ? security_socket_sendmsg+0x7c/0xa0 [ 891.113842][ T7666] ? netlink_getsockopt+0x540/0x540 [ 891.119044][ T7666] ____sys_sendmsg+0x59b/0x970 [ 891.123817][ T7666] ? __sys_sendmsg_sock+0x30/0x30 [ 891.128836][ T7666] ? __import_iovec+0x315/0x500 [ 891.133700][ T7666] ? import_iovec+0x6f/0xa0 [ 891.138210][ T7666] ___sys_sendmsg+0x21c/0x290 [ 891.142897][ T7666] ? __sys_sendmsg+0x270/0x270 [ 891.147715][ T7666] ? __fdget+0x17c/0x200 [ 891.151962][ T7666] __se_sys_sendmsg+0x19e/0x270 [ 891.156825][ T7666] ? __x64_sys_sendmsg+0x80/0x80 [ 891.161788][ T7666] ? lockdep_hardirqs_on+0x94/0x140 [ 891.166991][ T7666] do_syscall_64+0x4c/0xa0 [ 891.171407][ T7666] ? clear_bhb_loop+0x60/0xb0 [ 891.176079][ T7666] ? clear_bhb_loop+0x60/0xb0 [ 891.180756][ T7666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.186650][ T7666] RIP: 0033:0x7f124578ebe9 [ 891.191066][ T7666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.210667][ T7666] RSP: 002b:00007f12465e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 891.219176][ T7666] RAX: ffffffffffffffda RBX: 00007f12459b5fa0 RCX: 00007f124578ebe9 [ 891.227142][ T7666] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 891.235109][ T7666] RBP: 00007f1245811e19 R08: 0000000000000000 R09: 0000000000000000 [ 891.243079][ T7666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.251041][ T7666] R13: 00007f12459b6038 R14: 00007f12459b5fa0 R15: 00007fff074f6af8 [ 891.259028][ T7666] [ 891.413453][ T7676] netlink: 'syz.3.17297': attribute type 4 has an invalid length. [ 891.421666][ T7676] netlink: 140 bytes leftover after parsing attributes in process `syz.3.17297'. [ 891.863074][ T7695] netlink: 10 bytes leftover after parsing attributes in process `syz.2.17307'. [ 893.023257][ T7735] netlink: 10 bytes leftover after parsing attributes in process `syz.1.17322'. [ 893.719404][ T7773] netlink: 10 bytes leftover after parsing attributes in process `syz.0.17342'. [ 893.794505][ T7777] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.17344'. [ 893.837713][ T7777] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 893.859236][ T7777] CPU: 0 PID: 7777 Comm: syz.1.17344 Not tainted 6.1.147-syzkaller #0 [ 893.867458][ T7777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 893.877556][ T7777] Call Trace: [ 893.880867][ T7777] [ 893.883824][ T7777] dump_stack_lvl+0x168/0x22e [ 893.888550][ T7777] ? show_regs_print_info+0x12/0x12 [ 893.893773][ T7777] ? load_image+0x3b0/0x3b0 [ 893.898328][ T7777] sysfs_warn_dup+0x8a/0xa0 [ 893.902862][ T7777] sysfs_do_create_link_sd+0xc0/0x110 [ 893.908276][ T7777] device_add+0x7ed/0xfb0 [ 893.912650][ T7777] wiphy_register+0x1e68/0x2bd0 [ 893.917581][ T7777] ? cfg80211_event_work+0x40/0x40 [ 893.922725][ T7777] ? minstrel_ht_alloc+0x894/0xa20 [ 893.927877][ T7777] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 893.934020][ T7777] ieee80211_register_hw+0x2c29/0x38c0 [ 893.939538][ T7777] ? ieee80211_register_hw+0xeb1/0x38c0 [ 893.945115][ T7777] ? ieee80211_register_hw+0xeb1/0x38c0 [ 893.950709][ T7777] ? ieee80211_tasklet_handler+0x20/0x20 [ 893.956387][ T7777] ? memset+0x1e/0x40 [ 893.960397][ T7777] ? __hrtimer_init+0x186/0x270 [ 893.965280][ T7777] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 893.971504][ T7777] hwsim_new_radio_nl+0xafa/0xce0 [ 893.976598][ T7777] genl_family_rcv_msg_doit+0x22e/0x320 [ 893.982173][ T7777] ? end_current_label_crit_section+0x170/0x170 [ 893.988452][ T7777] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 893.994397][ T7777] ? bpf_lsm_capable+0x5/0x10 [ 893.999084][ T7777] ? security_capable+0x85/0xb0 [ 894.003954][ T7777] genl_rcv_msg+0x5f2/0x780 [ 894.008479][ T7777] ? genl_bind+0x350/0x350 [ 894.012911][ T7777] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 894.019266][ T7777] netlink_rcv_skb+0x1de/0x420 [ 894.024035][ T7777] ? genl_bind+0x350/0x350 [ 894.028453][ T7777] ? netlink_ack+0x1100/0x1100 [ 894.033232][ T7777] ? down_read+0x1a8/0x2d0 [ 894.037653][ T7777] genl_rcv+0x24/0x40 [ 894.041632][ T7777] netlink_unicast+0x74d/0x8d0 [ 894.046409][ T7777] netlink_sendmsg+0x89e/0xbc0 [ 894.051184][ T7777] ? netlink_getsockopt+0x540/0x540 [ 894.056378][ T7777] ? aa_sock_msg_perm+0x94/0x150 [ 894.061337][ T7777] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 894.066628][ T7777] ? security_socket_sendmsg+0x7c/0xa0 [ 894.072098][ T7777] ? netlink_getsockopt+0x540/0x540 [ 894.077304][ T7777] ____sys_sendmsg+0x59b/0x970 [ 894.082082][ T7777] ? __sys_sendmsg_sock+0x30/0x30 [ 894.087107][ T7777] ? __import_iovec+0x315/0x500 [ 894.091973][ T7777] ? import_iovec+0x6f/0xa0 [ 894.096482][ T7777] ___sys_sendmsg+0x21c/0x290 [ 894.101190][ T7777] ? __sys_sendmsg+0x270/0x270 [ 894.106008][ T7777] ? __fdget+0x17c/0x200 [ 894.110255][ T7777] __se_sys_sendmsg+0x19e/0x270 [ 894.115107][ T7777] ? __se_sys_futex+0x14a/0x440 [ 894.119962][ T7777] ? __x64_sys_sendmsg+0x80/0x80 [ 894.124921][ T7777] ? lockdep_hardirqs_on+0x94/0x140 [ 894.130123][ T7777] do_syscall_64+0x4c/0xa0 [ 894.134534][ T7777] ? clear_bhb_loop+0x60/0xb0 [ 894.139201][ T7777] ? clear_bhb_loop+0x60/0xb0 [ 894.143874][ T7777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 894.149768][ T7777] RIP: 0033:0x7ff7f3d8ebe9 [ 894.154209][ T7777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.173828][ T7777] RSP: 002b:00007ff7f4b0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.182253][ T7777] RAX: ffffffffffffffda RBX: 00007ff7f3fb5fa0 RCX: 00007ff7f3d8ebe9 [ 894.190231][ T7777] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 894.198210][ T7777] RBP: 00007ff7f3e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 894.206179][ T7777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 894.214145][ T7777] R13: 00007ff7f3fb6038 R14: 00007ff7f3fb5fa0 R15: 00007fffad7d7028 [ 894.222134][ T7777] [ 894.624575][ T7801] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.17364'. [ 894.834068][ T7813] netlink: 10 bytes leftover after parsing attributes in process `syz.0.17359'. [ 894.836806][ T7812] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17357'. [ 894.867515][ T7812] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17357'. [ 894.909193][ T7816] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17357'. [ 896.270695][ T7878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17390'. [ 896.335162][ T7880] netlink: 'syz.2.17391': attribute type 29 has an invalid length. [ 896.377249][ T7880] netlink: 'syz.2.17391': attribute type 29 has an invalid length. [ 896.412520][ T7882] netlink: 'syz.2.17391': attribute type 29 has an invalid length. [ 896.517413][ T7887] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.17396'. [ 896.603035][ T7887] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 896.634620][ T7887] CPU: 1 PID: 7887 Comm: syz.0.17396 Not tainted 6.1.147-syzkaller #0 [ 896.642843][ T7887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 896.652930][ T7887] Call Trace: [ 896.656230][ T7887] [ 896.659187][ T7887] dump_stack_lvl+0x168/0x22e [ 896.663907][ T7887] ? show_regs_print_info+0x12/0x12 [ 896.669138][ T7887] ? load_image+0x3b0/0x3b0 [ 896.673700][ T7887] sysfs_warn_dup+0x8a/0xa0 [ 896.678228][ T7887] sysfs_do_create_link_sd+0xc0/0x110 [ 896.683632][ T7887] device_add+0x7ed/0xfb0 [ 896.688010][ T7887] wiphy_register+0x1e68/0x2bd0 [ 896.692924][ T7887] ? cfg80211_event_work+0x40/0x40 [ 896.698068][ T7887] ? minstrel_ht_alloc+0x894/0xa20 [ 896.703222][ T7887] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 896.709311][ T7887] ieee80211_register_hw+0x2c29/0x38c0 [ 896.714778][ T7887] ? ieee80211_register_hw+0xeb1/0x38c0 [ 896.720316][ T7887] ? ieee80211_register_hw+0xeb1/0x38c0 [ 896.725891][ T7887] ? ieee80211_tasklet_handler+0x20/0x20 [ 896.731550][ T7887] ? memset+0x1e/0x40 [ 896.735532][ T7887] ? __hrtimer_init+0x186/0x270 [ 896.740385][ T7887] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 896.746153][ T7887] hwsim_new_radio_nl+0xafa/0xce0 [ 896.751242][ T7887] genl_family_rcv_msg_doit+0x22e/0x320 [ 896.756907][ T7887] ? end_current_label_crit_section+0x170/0x170 [ 896.763189][ T7887] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 896.769284][ T7887] ? bpf_lsm_capable+0x5/0x10 [ 896.773971][ T7887] ? security_capable+0x85/0xb0 [ 896.778831][ T7887] genl_rcv_msg+0x5f2/0x780 [ 896.783365][ T7887] ? genl_bind+0x350/0x350 [ 896.787797][ T7887] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 896.794401][ T7887] netlink_rcv_skb+0x1de/0x420 [ 896.799163][ T7887] ? genl_bind+0x350/0x350 [ 896.803595][ T7887] ? netlink_ack+0x1100/0x1100 [ 896.808385][ T7887] ? down_read+0x1a8/0x2d0 [ 896.812800][ T7887] genl_rcv+0x24/0x40 [ 896.816775][ T7887] netlink_unicast+0x74d/0x8d0 [ 896.821546][ T7887] netlink_sendmsg+0x89e/0xbc0 [ 896.826333][ T7887] ? netlink_getsockopt+0x540/0x540 [ 896.831549][ T7887] ? aa_sock_msg_perm+0x94/0x150 [ 896.836492][ T7887] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 896.841777][ T7887] ? security_socket_sendmsg+0x7c/0xa0 [ 896.847244][ T7887] ? netlink_getsockopt+0x540/0x540 [ 896.852444][ T7887] ____sys_sendmsg+0x59b/0x970 [ 896.857226][ T7887] ? __sys_sendmsg_sock+0x30/0x30 [ 896.862257][ T7887] ? __import_iovec+0x315/0x500 [ 896.867150][ T7887] ? import_iovec+0x6f/0xa0 [ 896.871660][ T7887] ___sys_sendmsg+0x21c/0x290 [ 896.876350][ T7887] ? __sys_sendmsg+0x270/0x270 [ 896.881167][ T7887] ? __fdget+0x17c/0x200 [ 896.885432][ T7887] __se_sys_sendmsg+0x19e/0x270 [ 896.890301][ T7887] ? __se_sys_futex+0x14a/0x440 [ 896.895156][ T7887] ? __x64_sys_sendmsg+0x80/0x80 [ 896.900111][ T7887] ? lockdep_hardirqs_on+0x94/0x140 [ 896.905418][ T7887] do_syscall_64+0x4c/0xa0 [ 896.909845][ T7887] ? clear_bhb_loop+0x60/0xb0 [ 896.914528][ T7887] ? clear_bhb_loop+0x60/0xb0 [ 896.919226][ T7887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 896.925133][ T7887] RIP: 0033:0x7f8016d8ebe9 [ 896.929560][ T7887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.949163][ T7887] RSP: 002b:00007f8017c8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 896.957579][ T7887] RAX: ffffffffffffffda RBX: 00007f8016fb5fa0 RCX: 00007f8016d8ebe9 [ 896.965578][ T7887] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 896.973587][ T7887] RBP: 00007f8016e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 896.981588][ T7887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.989646][ T7887] R13: 00007f8016fb6038 R14: 00007f8016fb5fa0 R15: 00007ffc17561808 [ 896.997722][ T7887] [ 897.691116][ T7922] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 898.070674][ T7939] __nla_validate_parse: 5 callbacks suppressed [ 898.070691][ T7939] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17417'. [ 899.100972][ T7983] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.17440'. [ 899.195910][ T7989] netlink: 'syz.2.17441': attribute type 2 has an invalid length. [ 900.675118][ T8028] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17460'. [ 900.824900][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 900.889052][ T8031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 901.130375][ T8046] netlink: 'syz.1.17469': attribute type 1 has an invalid length. [ 901.178501][ T8046] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.17469'. [ 901.452648][ T8061] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17478'. [ 901.960927][ T8091] netlink: 'syz.3.17489': attribute type 1 has an invalid length. [ 902.012469][ T8091] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.17489'. [ 903.494756][ T8155] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 903.508112][ T8155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 904.948799][ T8210] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.17552'. [ 905.349752][ T8232] netlink: 'syz.2.17562': attribute type 2 has an invalid length. [ 905.370311][ T8232] netlink: 'syz.2.17562': attribute type 1 has an invalid length. [ 905.400794][ T8232] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17562'. [ 906.068171][ T8267] netlink: 'syz.1.17580': attribute type 2 has an invalid length. [ 906.133185][ T8267] netlink: 'syz.1.17580': attribute type 1 has an invalid length. [ 906.151730][ T8270] netlink: 14 bytes leftover after parsing attributes in process `syz.0.17582'. [ 906.172676][ T8267] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17580'. [ 906.173650][ T8271] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17581'. [ 906.340739][ T8279] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.17584'. [ 906.807003][ T8303] netlink: 14 bytes leftover after parsing attributes in process `syz.1.17596'. [ 906.938985][ T8307] netlink: 'syz.0.17598': attribute type 2 has an invalid length. [ 906.962023][ T8307] netlink: 'syz.0.17598': attribute type 1 has an invalid length. [ 907.018022][ T8307] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17598'. [ 907.702124][ T8343] netlink: 'syz.2.17617': attribute type 17 has an invalid length. [ 907.722894][ T8343] netlink: 'syz.2.17617': attribute type 16 has an invalid length. [ 907.730837][ T8343] netlink: 152 bytes leftover after parsing attributes in process `syz.2.17617'. [ 908.494990][ T8380] netlink: 'syz.0.17636': attribute type 7 has an invalid length. [ 910.583665][ T8471] netlink: 'syz.2.17681': attribute type 21 has an invalid length. [ 910.608728][ T8471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 910.616034][ T8471] IPv6: NLM_F_CREATE should be set when creating new route [ 910.623394][ T8471] IPv6: NLM_F_CREATE should be set when creating new route [ 910.630642][ T8471] IPv6: NLM_F_CREATE should be set when creating new route [ 910.697861][ T8476] netlink: 'syz.3.17682': attribute type 17 has an invalid length. [ 910.733761][ T8476] netlink: 'syz.3.17682': attribute type 16 has an invalid length. [ 910.741898][ T8476] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17682'. [ 911.277499][ T8498] netlink: 'syz.1.17692': attribute type 39 has an invalid length. [ 911.506503][ T8507] netlink: 'syz.1.17697': attribute type 21 has an invalid length. [ 911.515206][ T8507] netlink: 176 bytes leftover after parsing attributes in process `syz.1.17697'. [ 912.276710][ T8536] netlink: 'syz.3.17721': attribute type 21 has an invalid length. [ 912.293279][ T8536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 912.300578][ T8536] IPv6: NLM_F_CREATE should be set when creating new route [ 912.307948][ T8536] IPv6: NLM_F_CREATE should be set when creating new route [ 912.315240][ T8536] IPv6: NLM_F_CREATE should be set when creating new route [ 912.459537][ T8548] netlink: 'syz.2.17715': attribute type 21 has an invalid length. [ 912.509610][ T8548] netlink: 176 bytes leftover after parsing attributes in process `syz.2.17715'. [ 914.066862][ T8579] netlink: 'syz.1.17729': attribute type 21 has an invalid length. [ 914.092388][ T8579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 914.100124][ T8579] IPv6: NLM_F_CREATE should be set when creating new route [ 914.107519][ T8579] IPv6: NLM_F_CREATE should be set when creating new route [ 914.114836][ T8579] IPv6: NLM_F_CREATE should be set when creating new route [ 917.135740][ T8670] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.17772'. [ 921.273082][ T8782] netlink: 'syz.4.17826': attribute type 2 has an invalid length. [ 921.322290][ T8782] netlink: 'syz.4.17826': attribute type 1 has an invalid length. [ 921.477377][ T8782] netlink: 152 bytes leftover after parsing attributes in process `syz.4.17826'. [ 922.992987][ T8826] netlink: 'syz.0.17846': attribute type 2 has an invalid length. [ 923.041932][ T8826] netlink: 'syz.0.17846': attribute type 1 has an invalid length. [ 923.054314][ T8826] netlink: 152 bytes leftover after parsing attributes in process `syz.0.17846'. [ 924.003167][ T8860] netlink: 'syz.1.17864': attribute type 2 has an invalid length. [ 924.023576][ T8860] netlink: 'syz.1.17864': attribute type 1 has an invalid length. [ 924.048819][ T8860] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17864'. [ 925.737840][ T8906] netlink: 'syz.0.17882': attribute type 2 has an invalid length. [ 925.766240][ T8906] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.17882'. [ 927.696407][ T8969] netlink: 'syz.4.17911': attribute type 2 has an invalid length. [ 927.736610][ T8969] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.17911'. [ 931.394247][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.401089][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.514457][ T9108] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.17977'. [ 934.580711][ T9115] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.17977'. [ 938.323709][ T9213] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18026'. [ 938.372874][ T9219] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.18026'. [ 938.564686][ T9228] IPv6: NLM_F_CREATE should be specified when creating new route [ 938.660969][ T9236] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.18036'. [ 938.824409][ T9239] netlink: 'syz.0.18038': attribute type 21 has an invalid length. [ 938.876935][ T9239] netlink: 'syz.0.18038': attribute type 1 has an invalid length. [ 940.292902][ T9277] netlink: 'syz.1.18058': attribute type 21 has an invalid length. [ 940.300861][ T9277] netlink: 'syz.1.18058': attribute type 1 has an invalid length. [ 940.478130][ T9283] netlink: 'syz.0.18061': attribute type 12 has an invalid length. [ 940.486990][ T9283] netlink: 172 bytes leftover after parsing attributes in process `syz.0.18061'. [ 941.141659][ T9300] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.18070'. [ 941.313453][ T9304] netlink: 'syz.3.18073': attribute type 29 has an invalid length. [ 941.362757][ T9304] netlink: 'syz.3.18073': attribute type 29 has an invalid length. [ 941.419364][ T9307] netlink: 'syz.3.18073': attribute type 29 has an invalid length. [ 941.649457][ T9313] netlink: 'syz.3.18076': attribute type 12 has an invalid length. [ 941.671727][ T9313] netlink: 172 bytes leftover after parsing attributes in process `syz.3.18076'. [ 943.012560][ T9341] netlink: 'syz.1.18088': attribute type 12 has an invalid length. [ 943.020687][ T9341] netlink: 172 bytes leftover after parsing attributes in process `syz.1.18088'. [ 947.236295][ T9460] netlink: 'syz.1.18144': attribute type 1 has an invalid length. [ 947.259335][ T9460] netlink: 'syz.1.18144': attribute type 1 has an invalid length. [ 947.285967][ T9460] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.18144'. [ 949.455171][ T9512] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.18172'. [ 951.423462][ T9569] netlink: 'syz.3.18197': attribute type 8 has an invalid length. [ 951.446584][ T9569] netlink: 'syz.3.18197': attribute type 1 has an invalid length. [ 951.466653][ T9569] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.18197'. [ 953.195662][ T9616] netlink: 'syz.3.18221': attribute type 29 has an invalid length. [ 953.296937][ T9616] netlink: 'syz.3.18221': attribute type 29 has an invalid length. [ 953.318486][ T9618] netlink: 'syz.3.18221': attribute type 29 has an invalid length. [ 953.516443][ T9625] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.18225'. [ 954.145484][ T9644] netlink: 'syz.3.18235': attribute type 21 has an invalid length. [ 954.510306][ T9656] netlink: 'syz.4.18238': attribute type 29 has an invalid length. [ 954.549572][ T9656] netlink: 'syz.4.18238': attribute type 29 has an invalid length. [ 954.582990][ T9658] netlink: 'syz.4.18238': attribute type 29 has an invalid length. [ 954.839514][ T9673] netlink: 'syz.4.18249': attribute type 21 has an invalid length. [ 955.149531][ T9690] netlink: 'syz.0.18267': attribute type 21 has an invalid length. [ 955.370489][ T9702] netlink: 'syz.1.18260': attribute type 29 has an invalid length. [ 955.779527][ T9722] netlink: 128 bytes leftover after parsing attributes in process `syz.1.18274'. [ 955.791858][ T9722] netlink: 3 bytes leftover after parsing attributes in process `syz.1.18274'. [ 957.686376][ T9783] netlink: 128 bytes leftover after parsing attributes in process `syz.4.18306'. [ 957.718360][ T9783] netlink: 3 bytes leftover after parsing attributes in process `syz.4.18306'. [ 959.208220][ T9845] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.18333'. [ 959.576030][ T9859] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18340'. [ 959.591334][ T9859] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18340'. [ 959.607979][ T9858] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18340'. [ 959.986367][ T9869] ------------[ cut here ]------------ [ 959.991877][ T9869] WARNING: CPU: 0 PID: 9869 at kernel/events/core.c:6578 perf_pending_task+0x358/0x470 [ 960.001622][ T9869] Modules linked in: [ 960.005570][ T9869] CPU: 0 PID: 9869 Comm: syz.2.18343 Not tainted 6.1.147-syzkaller #0 [ 960.013781][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 960.023979][ T9869] RIP: 0010:perf_pending_task+0x358/0x470 [ 960.029809][ T9869] Code: ff 84 db 75 14 e8 18 d6 da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 04 d6 da ff e8 d7 8f 5a ff eb e5 e8 f8 d5 da ff <0f> 0b e9 f3 fe ff ff e8 ec d5 da ff 48 c7 c7 b0 03 bc 8c 4c 89 f6 [ 960.049489][ T9869] RSP: 0018:ffffc9001079f920 EFLAGS: 00010293 [ 960.055611][ T9869] RAX: ffffffff81a5f0e8 RBX: ffff88801773cc58 RCX: ffff88802f5a3b80 [ 960.063635][ T9869] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 960.071620][ T9869] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1005eb48b1 [ 960.079849][ T9869] R10: ffffed1005eb48b1 R11: 1ffff11005eb48b0 R12: ffff88802f5a3b80 [ 960.087875][ T9869] R13: ffff888025164160 R14: ffff88801773ca20 R15: 1ffff11002ee7944 [ 960.095898][ T9869] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 960.104925][ T9869] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 960.111526][ T9869] CR2: 00007f13a2bb7dac CR3: 0000000056af0000 CR4: 00000000003506f0 [ 960.119578][ T9869] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 960.127608][ T9869] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 960.135656][ T9869] Call Trace: [ 960.138948][ T9869] [ 960.141897][ T9869] task_work_run+0x1ca/0x250 [ 960.146554][ T9869] ? task_work_cancel+0x230/0x230 [ 960.151596][ T9869] ? do_raw_spin_unlock+0x11d/0x230 [ 960.156861][ T9869] do_exit+0x93e/0x2400 [ 960.161070][ T9869] ? put_task_struct+0x80/0x80 [ 960.165949][ T9869] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 960.171968][ T9869] ? lock_chain_count+0x20/0x20 [ 960.176884][ T9869] ? _raw_spin_lock_irq+0xab/0xe0 [ 960.182114][ T9869] do_group_exit+0x217/0x2d0 [ 960.186759][ T9869] ? lockdep_hardirqs_on+0x94/0x140 [ 960.192039][ T9869] get_signal+0x1272/0x1350 [ 960.196736][ T9869] arch_do_signal_or_restart+0xb0/0x1230 [ 960.202433][ T9869] ? do_futex+0x310/0x320 [ 960.206776][ T9869] ? __might_sleep+0xd0/0xd0 [ 960.211375][ T9869] ? __ia32_sys_get_robust_list+0x80/0x80 [ 960.217145][ T9869] ? get_sigframe_size+0x10/0x10 [ 960.222100][ T9869] ? blkcg_maybe_throttle_current+0x19f/0xa60 [ 960.228256][ T9869] ? exit_to_user_mode_loop+0x3b/0x110 [ 960.233770][ T9869] exit_to_user_mode_loop+0x70/0x110 [ 960.239070][ T9869] exit_to_user_mode_prepare+0xb1/0x140 [ 960.244663][ T9869] syscall_exit_to_user_mode+0x16/0x40 [ 960.250143][ T9869] do_syscall_64+0x58/0xa0 [ 960.254694][ T9869] ? clear_bhb_loop+0x60/0xb0 [ 960.259381][ T9869] ? clear_bhb_loop+0x60/0xb0 [ 960.264104][ T9869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 960.270017][ T9869] RIP: 0033:0x7f13a298ebe9 [ 960.274483][ T9869] Code: Unable to access opcode bytes at 0x7f13a298ebbf. [ 960.281510][ T9869] RSP: 002b:00007f13a37420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 960.290199][ T9869] RAX: fffffffffffffe00 RBX: 00007f13a2bb5fa8 RCX: 00007f13a298ebe9 [ 960.298237][ T9869] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f13a2bb5fa8 [ 960.306253][ T9869] RBP: 00007f13a2bb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 960.314311][ T9869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 960.322329][ T9869] R13: 00007f13a2bb6038 R14: 00007ffdd4f94660 R15: 00007ffdd4f94748 [ 960.330325][ T9869] [ 960.333414][ T9869] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 960.340694][ T9869] CPU: 0 PID: 9869 Comm: syz.2.18343 Not tainted 6.1.147-syzkaller #0 [ 960.348857][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 960.358921][ T9869] Call Trace: [ 960.362208][ T9869] [ 960.365134][ T9869] dump_stack_lvl+0x168/0x22e [ 960.369797][ T9869] ? memcpy+0x3c/0x60 [ 960.373822][ T9869] ? show_regs_print_info+0x12/0x12 [ 960.379005][ T9869] ? load_image+0x3b0/0x3b0 [ 960.383498][ T9869] panic+0x2c9/0x710 [ 960.387382][ T9869] ? bpf_jit_dump+0xd0/0xd0 [ 960.391873][ T9869] __warn+0x2f8/0x4f0 [ 960.395843][ T9869] ? perf_pending_task+0x358/0x470 [ 960.400970][ T9869] ? perf_pending_task+0x358/0x470 [ 960.406078][ T9869] report_bug+0x2ba/0x4f0 [ 960.410391][ T9869] ? perf_pending_task+0x358/0x470 [ 960.415496][ T9869] handle_bug+0x3a/0x70 [ 960.419648][ T9869] exc_invalid_op+0x16/0x40 [ 960.424136][ T9869] asm_exc_invalid_op+0x16/0x20 [ 960.428974][ T9869] RIP: 0010:perf_pending_task+0x358/0x470 [ 960.434679][ T9869] Code: ff 84 db 75 14 e8 18 d6 da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 04 d6 da ff e8 d7 8f 5a ff eb e5 e8 f8 d5 da ff <0f> 0b e9 f3 fe ff ff e8 ec d5 da ff 48 c7 c7 b0 03 bc 8c 4c 89 f6 [ 960.454280][ T9869] RSP: 0018:ffffc9001079f920 EFLAGS: 00010293 [ 960.460337][ T9869] RAX: ffffffff81a5f0e8 RBX: ffff88801773cc58 RCX: ffff88802f5a3b80 [ 960.468294][ T9869] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 960.476253][ T9869] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1005eb48b1 [ 960.484208][ T9869] R10: ffffed1005eb48b1 R11: 1ffff11005eb48b0 R12: ffff88802f5a3b80 [ 960.492168][ T9869] R13: ffff888025164160 R14: ffff88801773ca20 R15: 1ffff11002ee7944 [ 960.500130][ T9869] ? perf_pending_task+0x358/0x470 [ 960.505236][ T9869] task_work_run+0x1ca/0x250 [ 960.509814][ T9869] ? task_work_cancel+0x230/0x230 [ 960.514824][ T9869] ? do_raw_spin_unlock+0x11d/0x230 [ 960.520014][ T9869] do_exit+0x93e/0x2400 [ 960.524161][ T9869] ? put_task_struct+0x80/0x80 [ 960.528913][ T9869] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 960.534890][ T9869] ? lock_chain_count+0x20/0x20 [ 960.539731][ T9869] ? _raw_spin_lock_irq+0xab/0xe0 [ 960.544744][ T9869] do_group_exit+0x217/0x2d0 [ 960.549319][ T9869] ? lockdep_hardirqs_on+0x94/0x140 [ 960.554503][ T9869] get_signal+0x1272/0x1350 [ 960.559004][ T9869] arch_do_signal_or_restart+0xb0/0x1230 [ 960.564623][ T9869] ? do_futex+0x310/0x320 [ 960.568964][ T9869] ? __might_sleep+0xd0/0xd0 [ 960.573544][ T9869] ? __ia32_sys_get_robust_list+0x80/0x80 [ 960.579250][ T9869] ? get_sigframe_size+0x10/0x10 [ 960.584173][ T9869] ? blkcg_maybe_throttle_current+0x19f/0xa60 [ 960.590238][ T9869] ? exit_to_user_mode_loop+0x3b/0x110 [ 960.595685][ T9869] exit_to_user_mode_loop+0x70/0x110 [ 960.600960][ T9869] exit_to_user_mode_prepare+0xb1/0x140 [ 960.606491][ T9869] syscall_exit_to_user_mode+0x16/0x40 [ 960.611938][ T9869] do_syscall_64+0x58/0xa0 [ 960.616343][ T9869] ? clear_bhb_loop+0x60/0xb0 [ 960.621005][ T9869] ? clear_bhb_loop+0x60/0xb0 [ 960.625665][ T9869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 960.631545][ T9869] RIP: 0033:0x7f13a298ebe9 [ 960.635942][ T9869] Code: Unable to access opcode bytes at 0x7f13a298ebbf. [ 960.642940][ T9869] RSP: 002b:00007f13a37420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 960.651337][ T9869] RAX: fffffffffffffe00 RBX: 00007f13a2bb5fa8 RCX: 00007f13a298ebe9 [ 960.659295][ T9869] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f13a2bb5fa8 [ 960.667247][ T9869] RBP: 00007f13a2bb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 960.675200][ T9869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 960.683152][ T9869] R13: 00007f13a2bb6038 R14: 00007ffdd4f94660 R15: 00007ffdd4f94748 [ 960.691122][ T9869] [ 960.694379][ T9869] Kernel Offset: disabled [ 960.698689][ T9869] Rebooting in 86400 seconds..