last executing test programs: 17.028275734s ago: executing program 3 (id=50760): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f0000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x6, 0xf3, 0x6, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x101c21, 0xc8, 0x94a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xc) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5b"], 0xfdef) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000}, 0x50) 16.722003824s ago: executing program 3 (id=50763): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) perf_event_open(&(0x7f00000001c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a3803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 16.585768628s ago: executing program 3 (id=50764): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4e23, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 16.387229994s ago: executing program 3 (id=50766): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x53, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.883502481s ago: executing program 3 (id=50770): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)}], 0x1}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() syz_open_procfs$namespace(r3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 15.548567111s ago: executing program 3 (id=50771): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002fc0)={&(0x7f0000002ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}]}}, 0x0, 0x26}, 0x28) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 8.631896378s ago: executing program 0 (id=50824): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) close(r1) 8.282439229s ago: executing program 0 (id=50832): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xdf, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x2000000000000}, 0x0, 0x0, 0xf61, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 8.26280482s ago: executing program 1 (id=50833): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2080) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r1 = socket$kcm(0x28, 0x5, 0x0) close(r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 8.230162341s ago: executing program 4 (id=50834): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000000c00)={&(0x7f0000000840)=@l2tp={0x2, 0x0, @multicast2, 0x5}, 0x80, 0x0}, 0xc801) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="600000004e007f049e", 0x12}, {&(0x7f0000000180)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e729f9b06f96137c89d03234f008c5681", 0x57}], 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x2, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x2df8cb643540299b, 0x1}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, 0x0, 0x0) 8.087709406s ago: executing program 0 (id=50836): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x68b, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x102) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 8.087495256s ago: executing program 2 (id=50837): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$kcm(0xf, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff41) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r3, 0x58, &(0x7f0000000600)}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0xfffffff7, 0xa6, &(0x7f0000000540)=""/166, 0x40f00, 0x18, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x1, 0x7ff, 0x9}, 0x10, 0x53ac, r2, 0x8, 0x0, &(0x7f00000003c0)=[{0x3, 0x3, 0x6, 0x3}, {0x4, 0x4, 0x10, 0x4}, {0x5, 0x4, 0x3, 0x7}, {0x1, 0x4, 0x9, 0x4}, {0x2, 0x4, 0xb, 0x5}, {0x5, 0x4, 0xc, 0x5}, {0x3, 0x5, 0xf, 0x1}, {0x3, 0x4, 0xa, 0x3}], 0x10, 0x6}, 0x94) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 8.087270706s ago: executing program 4 (id=50838): socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x3) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvmsg$kcm(r1, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 8.085360046s ago: executing program 1 (id=50839): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4e23, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.060579736s ago: executing program 2 (id=50840): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea684533dc6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0731c4b839688b22c4da2a6bc4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x22, 0x2, 0x26) r2 = socket$kcm(0x2a, 0x2, 0x0) close(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r2, r3}) r4 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) 7.850281623s ago: executing program 1 (id=50841): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fc004000"], 0x50) sendmsg$kcm(r0, 0x0, 0x24040810) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x104) r1 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x9, 0x0, 0x2, 0x58221, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffdfffa, 0x2, @perf_config_ext={0x4, 0x2}, 0x106a4f, 0x1, 0x6, 0x1, 0x2, 0xffc, 0x4, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, r1, 0x9) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xd) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) 7.812769984s ago: executing program 4 (id=50842): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x104) r0 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000000)='/proc/t/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x9, 0x0, 0x2, 0x58221, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffdfffa, 0x2, @perf_config_ext={0x4, 0x2}, 0x106a4f, 0x1, 0x6, 0x1, 0x2, 0xffc, 0x4, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, r0, 0x9) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x4, 0x6d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000}, 0x0, 0x0, 0x0, 0x0, 0x3ffff}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0x2001000a, 0xfffc, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xd) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @mcast1, 0x6}, 0x80, 0x0}, 0x48084) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) 7.807561664s ago: executing program 2 (id=50843): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x1, @remote, 'batadv_slave_1\x00'}}, 0x80, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x120) 7.689878638s ago: executing program 4 (id=50844): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) close(r1) 7.689024808s ago: executing program 0 (id=50854): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fc004000"], 0x50) sendmsg$kcm(r0, 0x0, 0x24040810) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x104) r1 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x9, 0x0, 0x2, 0x58221, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffdfffa, 0x2, @perf_config_ext={0x4, 0x2}, 0x106a4f, 0x1, 0x6, 0x1, 0x2, 0xffc, 0x4, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, r1, 0x9) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xd) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) 7.688300918s ago: executing program 1 (id=50845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x145000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x18, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@ringbuf_output], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x3b7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0xc, 0x101, 0xfa85}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10, 0x6}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x110805, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}]}}, 0x0, 0x32}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8941, &(0x7f0000000080)) socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 7.688090928s ago: executing program 2 (id=50846): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000000c00)={&(0x7f0000000840)=@l2tp={0x2, 0x0, @multicast2, 0x5}, 0x80, 0x0}, 0xc801) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="600000004e007f049e", 0x12}, {&(0x7f0000000180)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e729f9b06f96137c89d03234f008c5681", 0x57}], 0x2}, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x2, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x2df8cb643540299b, 0x1}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, 0x0, 0x0) 281.643071ms ago: executing program 32 (id=50771): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002fc0)={&(0x7f0000002ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}]}}, 0x0, 0x26}, 0x28) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 278.271971ms ago: executing program 4 (id=50848): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 277.373801ms ago: executing program 0 (id=50858): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e61, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000084) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x0, 0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, 0x0, 0x0, 0x2}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 270.446481ms ago: executing program 1 (id=50849): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1c4c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x3000, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa7, 0x7898}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.swap.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x48}, 0x40000062) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 262.371922ms ago: executing program 2 (id=50859): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x429, 0x100000001}, 0x100040, 0x0, 0x10000, 0x1, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8054) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$PROG_LOAD(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) 118.287886ms ago: executing program 4 (id=50850): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2080) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r1 = socket$kcm(0x28, 0x5, 0x0) close(r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 117.626426ms ago: executing program 0 (id=50862): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 1.57087ms ago: executing program 1 (id=50851): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$kcm(0xf, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff41) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r3, 0x58, &(0x7f0000000600)}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0xfffffff7, 0xa6, &(0x7f0000000540)=""/166, 0x40f00, 0x18, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x1, 0x7ff, 0x9}, 0x10, 0x53ac, r2, 0x8, 0x0, &(0x7f00000003c0)=[{0x3, 0x3, 0x6, 0x3}, {0x4, 0x4, 0x10, 0x4}, {0x5, 0x4, 0x3, 0x7}, {0x1, 0x4, 0x9, 0x4}, {0x2, 0x4, 0xb, 0x5}, {0x5, 0x4, 0xc, 0x5}, {0x3, 0x5, 0xf, 0x1}, {0x3, 0x4, 0xa, 0x3}], 0x10, 0x6}, 0x94) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 0s ago: executing program 2 (id=50864): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e61, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000084) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x0, 0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, 0x0, 0x0, 0x2}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ibute type 1 has an invalid length. [ 2144.971037][ T8021] device syzkaller0 entered promiscuous mode [ 2144.978201][ T8020] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.47316'. [ 2145.199103][ T8028] netlink: 60 bytes leftover after parsing attributes in process `syz.3.47319'. [ 2145.621037][ T8050] netlink: 763 bytes leftover after parsing attributes in process `syz.0.47339'. [ 2145.820184][ T8059] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.47332'. [ 2145.951477][ T8069] netlink: 'syz.0.47330': attribute type 10 has an invalid length. [ 2145.968040][ T8069] team0: Device wg1 is of different type [ 2146.110088][ T8062] delete_channel: no stack [ 2146.170161][ T8076] netlink: 'syz.1.47348': attribute type 9 has an invalid length. [ 2146.179635][ T8075] netlink: 156 bytes leftover after parsing attributes in process `syz.2.47338'. [ 2146.326154][ T8079] netlink: 'syz.1.47348': attribute type 9 has an invalid length. [ 2146.349250][ T8079] __nla_validate_parse: 1 callbacks suppressed [ 2146.349266][ T8079] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.47348'. [ 2146.538837][ T8091] netlink: 'syz.3.47344': attribute type 1 has an invalid length. [ 2146.588391][ T8091] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.47344'. [ 2146.700050][ T8099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2146.707629][ T8099] IPv6: NLM_F_CREATE should be set when creating new route [ 2146.714898][ T8099] IPv6: NLM_F_CREATE should be set when creating new route [ 2146.722225][ T8099] IPv6: NLM_F_CREATE should be set when creating new route [ 2146.783826][ T8105] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.47352'. [ 2146.809781][ T8107] netlink: 156 bytes leftover after parsing attributes in process `syz.4.47353'. [ 2146.980432][ T8118] netlink: 60 bytes leftover after parsing attributes in process `syz.4.47357'. [ 2147.191841][ T8128] netlink: 'syz.4.47360': attribute type 1 has an invalid length. [ 2147.251759][ T8128] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.47360'. [ 2147.392454][ T8140] netlink: 'syz.2.47364': attribute type 9 has an invalid length. [ 2147.425248][ T8140] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.47364'. [ 2147.488436][ T8147] netlink: 156 bytes leftover after parsing attributes in process `syz.3.47368'. [ 2147.604473][ T8145] netlink: 'syz.2.47364': attribute type 9 has an invalid length. [ 2147.623006][ T8145] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.47364'. [ 2147.659361][ T8157] netlink: 'syz.3.47371': attribute type 10 has an invalid length. [ 2147.745603][ T8150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2147.872825][ T8163] delete_channel: no stack [ 2148.094950][ T8179] netlink: 763 bytes leftover after parsing attributes in process `syz.4.47385'. [ 2148.254734][ T8191] netlink: 'syz.3.47391': attribute type 9 has an invalid length. [ 2148.317253][ T8192] netlink: 'syz.3.47391': attribute type 9 has an invalid length. [ 2148.378200][ T8193] delete_channel: no stack [ 2148.661326][ T8211] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2148.668703][ T8211] IPv6: NLM_F_CREATE should be set when creating new route [ 2148.676045][ T8211] IPv6: NLM_F_CREATE should be set when creating new route [ 2148.683281][ T8211] IPv6: NLM_F_CREATE should be set when creating new route [ 2149.509173][ T8239] netlink: 'syz.0.47410': attribute type 9 has an invalid length. [ 2149.699975][ T8241] netlink: 'syz.0.47410': attribute type 9 has an invalid length. [ 2149.964453][ T8250] netlink: 'syz.3.47426': attribute type 3 has an invalid length. [ 2150.008066][ T8252] delete_channel: no stack [ 2150.878057][ T8291] netlink: 'syz.4.47433': attribute type 10 has an invalid length. [ 2150.944833][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2150.946898][ T8295] netlink: 'syz.1.47434': attribute type 3 has an invalid length. [ 2151.429906][ T8309] device geneve1 entered promiscuous mode [ 2151.451949][ T8309] team0: Port device geneve1 added [ 2151.478113][ T8313] __nla_validate_parse: 22 callbacks suppressed [ 2151.478149][ T8313] netlink: 132 bytes leftover after parsing attributes in process `syz.4.47443'. [ 2151.532760][ T8317] netlink: 60 bytes leftover after parsing attributes in process `syz.4.47443'. [ 2151.576283][ T8317] netlink: 60 bytes leftover after parsing attributes in process `syz.4.47443'. [ 2151.607196][ T8313] netlink: 60 bytes leftover after parsing attributes in process `syz.4.47443'. [ 2151.680589][ T8321] delete_channel: no stack [ 2152.026948][ T8331] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.47448'. [ 2152.219717][ T8344] netlink: 10 bytes leftover after parsing attributes in process `syz.4.47451'. [ 2152.340810][ T8353] netlink: 156 bytes leftover after parsing attributes in process `syz.3.47453'. [ 2152.490182][ T8355] validate_nla: 2 callbacks suppressed [ 2152.490201][ T8355] netlink: 'syz.3.47456': attribute type 10 has an invalid length. [ 2152.519841][ T8358] netlink: 'syz.4.47457': attribute type 9 has an invalid length. [ 2152.538306][ T8358] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.47457'. [ 2152.572103][ T8355] team0: Port device geneve1 added [ 2152.587367][ T8359] netlink: 156 bytes leftover after parsing attributes in process `syz.0.47468'. [ 2152.672138][ T8361] netlink: 'syz.4.47457': attribute type 9 has an invalid length. [ 2152.729550][ T8361] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.47457'. [ 2152.745090][ T8365] netlink: 'syz.3.47460': attribute type 10 has an invalid length. [ 2153.273083][ T8376] netlink: 'syz.2.47462': attribute type 2 has an invalid length. [ 2153.312725][ T8376] netlink: 'syz.2.47462': attribute type 1 has an invalid length. [ 2153.384143][ T8380] netlink: 'syz.0.47464': attribute type 3 has an invalid length. [ 2154.253984][ T8412] netlink: 'syz.2.47481': attribute type 3 has an invalid length. [ 2154.807408][ T8427] netlink: 'syz.0.47497': attribute type 10 has an invalid length. [ 2155.372898][ T8445] netlink: 'syz.2.47493': attribute type 3 has an invalid length. [ 2156.251972][ T8490] team0: Port device geneve1 added [ 2156.671451][ T8516] __nla_validate_parse: 20 callbacks suppressed [ 2156.671470][ T8516] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.47525'. [ 2156.897860][ T8530] team0: Port device geneve1 added [ 2157.209947][ T8547] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.47535'. [ 2157.706481][ T8561] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.47541'. [ 2158.265161][ T8588] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.47557'. [ 2158.513348][ T8594] netlink: 180 bytes leftover after parsing attributes in process `syz.1.47559'. [ 2158.601799][ T8596] validate_nla: 9 callbacks suppressed [ 2158.602011][ T8596] netlink: 'syz.3.47558': attribute type 21 has an invalid length. [ 2158.645043][ T8590] delete_channel: no stack [ 2158.842349][ T8602] device syzkaller0 left promiscuous mode [ 2158.882605][ T8602] netlink: 144 bytes leftover after parsing attributes in process `syz.1.47562'. [ 2158.928136][ T8602] team0: Port device team_slave_0 removed [ 2158.957096][ T8602] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2159.480512][ T8637] netlink: 'syz.3.47576': attribute type 2 has an invalid length. [ 2159.512331][ T8637] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.47576'. [ 2159.712751][ T8642] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2159.886416][ T8643] delete_channel: no stack [ 2160.029421][ T8653] netlink: 'syz.2.47580': attribute type 21 has an invalid length. [ 2160.419343][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.425957][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.590262][ T8675] delete_channel: no stack [ 2160.761729][ T8694] netlink: 'syz.4.47601': attribute type 21 has an invalid length. [ 2160.819925][ T8697] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.47602'. [ 2160.844413][ T8697] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.47602'. [ 2160.899738][ T8697] netlink: 2 bytes leftover after parsing attributes in process `syz.3.47602'. [ 2160.945108][ T8696] device lo entered promiscuous mode [ 2160.957336][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2161.154210][ T8701] netlink: 'syz.1.47614': attribute type 21 has an invalid length. [ 2161.421371][ T8721] netlink: 'syz.0.47621': attribute type 21 has an invalid length. [ 2161.441758][ T8725] netlink: 'syz.2.47608': attribute type 10 has an invalid length. [ 2161.520297][ T8729] netlink: 'syz.1.47612': attribute type 3 has an invalid length. [ 2161.612973][ T8735] netlink: 'syz.2.47627': attribute type 10 has an invalid length. [ 2162.554395][ T8768] __nla_validate_parse: 3 callbacks suppressed [ 2162.554427][ T8768] netlink: 763 bytes leftover after parsing attributes in process `syz.4.47630'. [ 2162.594177][ T8772] netlink: 'syz.0.47631': attribute type 10 has an invalid length. [ 2162.626204][ T8772] netlink: 168 bytes leftover after parsing attributes in process `syz.0.47631'. [ 2163.424920][ T8807] netlink: 168 bytes leftover after parsing attributes in process `syz.3.47646'. [ 2163.494242][ T8810] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.47647'. [ 2163.510546][ T8810] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2163.519840][ T8810] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2163.655065][ T8822] netlink: 180 bytes leftover after parsing attributes in process `syz.0.47651'. [ 2164.145668][ T8838] netlink: 144 bytes leftover after parsing attributes in process `syz.3.47657'. [ 2164.205825][ T8838] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2164.312833][ T8841] validate_nla: 3 callbacks suppressed [ 2164.312870][ T8841] netlink: 'syz.2.47660': attribute type 10 has an invalid length. [ 2164.334192][ T8841] netlink: 168 bytes leftover after parsing attributes in process `syz.2.47660'. [ 2166.994950][ T8872] netlink: 'syz.1.47674': attribute type 10 has an invalid length. [ 2167.005367][ T8872] netlink: 168 bytes leftover after parsing attributes in process `syz.1.47674'. [ 2167.031677][ T8875] netlink: 763 bytes leftover after parsing attributes in process `syz.2.47675'. [ 2167.249258][ T8888] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.47679'. [ 2167.318600][ T8888] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2167.340598][ T8888] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2167.679255][ T8910] netlink: 'syz.2.47691': attribute type 3 has an invalid length. [ 2167.692831][ T8910] netlink: 'syz.2.47691': attribute type 1 has an invalid length. [ 2167.716412][ T8910] netlink: 132 bytes leftover after parsing attributes in process `syz.2.47691'. [ 2167.983411][ T8926] device syzkaller0 left promiscuous mode [ 2168.028395][ T8926] netlink: 144 bytes leftover after parsing attributes in process `syz.2.47699'. [ 2168.073406][ T8926] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2168.512268][ T8956] netlink: 'syz.3.47709': attribute type 3 has an invalid length. [ 2168.551814][ T8956] netlink: 'syz.3.47709': attribute type 1 has an invalid length. [ 2168.569610][ T8956] netlink: 132 bytes leftover after parsing attributes in process `syz.3.47709'. [ 2169.323719][ T8969] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.47725'. [ 2169.335076][ T8969] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2169.361412][ T8969] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2169.593031][ T8985] device syzkaller0 left promiscuous mode [ 2169.648541][ T8985] netlink: 144 bytes leftover after parsing attributes in process `syz.4.47714'. [ 2169.678901][ T8985] A link change request failed with some changes committed already. Interface ýÿÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 2170.505710][ T9019] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.47734'. [ 2170.561611][ T9019] netlink: 'syz.3.47734': attribute type 3 has an invalid length. [ 2170.589269][ T9019] netlink: 16770 bytes leftover after parsing attributes in process `syz.3.47734'. [ 2170.612277][ T9019] netlink: 'syz.3.47734': attribute type 1 has an invalid length. [ 2170.636211][ T9024] netlink: 'syz.4.47737': attribute type 1 has an invalid length. [ 2170.646033][ T9024] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.47737'. [ 2171.848687][ T9057] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.47750'. [ 2171.926140][ T9057] netlink: 'syz.4.47750': attribute type 3 has an invalid length. [ 2171.959750][ T9057] netlink: 16770 bytes leftover after parsing attributes in process `syz.4.47750'. [ 2171.973037][ T9057] netlink: 'syz.4.47750': attribute type 1 has an invalid length. [ 2172.160160][ T9063] netlink: 'syz.0.47751': attribute type 2 has an invalid length. [ 2172.293748][ T9068] netlink: 'syz.1.47763': attribute type 3 has an invalid length. [ 2172.321408][ T9068] netlink: 'syz.1.47763': attribute type 1 has an invalid length. [ 2172.440591][ T9078] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2172.462144][ T9078] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2173.081359][ T9099] device syzkaller0 left promiscuous mode [ 2173.168437][ T9105] netlink: 'syz.1.47767': attribute type 2 has an invalid length. [ 2173.209589][ T9105] __nla_validate_parse: 4 callbacks suppressed [ 2173.209622][ T9105] netlink: 132 bytes leftover after parsing attributes in process `syz.1.47767'. [ 2173.564114][ T9119] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.47775'. [ 2173.590134][ T9119] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2173.600123][ T9119] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2173.758089][ T9129] netlink: 144 bytes leftover after parsing attributes in process `syz.0.47779'. [ 2173.791261][ T9129] device team_slave_0 left promiscuous mode [ 2173.847772][ T9129] team0: Port device team_slave_0 removed [ 2173.858089][ T9129] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2174.131715][ T9147] netlink: 144 bytes leftover after parsing attributes in process `syz.0.47793'. [ 2174.152112][ T9147] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2175.533404][ T9205] netlink: 'syz.0.47811': attribute type 1 has an invalid length. [ 2175.602225][ T9205] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.47811'. [ 2175.977855][ T9223] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.47819'. [ 2176.008680][ T9223] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2176.070715][ T9223] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2176.642534][ T9254] device syzkaller0 entered promiscuous mode [ 2176.870836][ T9260] netlink: 'syz.2.47834': attribute type 21 has an invalid length. [ 2176.959816][ T9260] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.47834'. [ 2177.814010][ T9281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2177.840131][ T9281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2177.874403][ T9281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2177.935020][ T9281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2178.155119][ T9286] device syzkaller0 left promiscuous mode [ 2178.280652][ T9294] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.47845'. [ 2179.919813][ T9334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2179.938725][ T9334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2179.965319][ T9334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2180.016329][ T9334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2180.940291][ T9366] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.47874'. [ 2181.444990][ T9391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2181.471497][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2181.519143][ T9391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2181.550945][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2182.172274][ T9411] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.47888'. [ 2183.939159][ T9462] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.47912'. [ 2186.122085][ T9509] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.47930'. [ 2186.143897][ T9509] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2186.166883][ T9509] CPU: 0 PID: 9509 Comm: syz.0.47930 Not tainted syzkaller #0 [ 2186.174395][ T9509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2186.184500][ T9509] Call Trace: [ 2186.187810][ T9509] [ 2186.190754][ T9509] dump_stack_lvl+0x188/0x250 [ 2186.195454][ T9509] ? show_regs_print_info+0x20/0x20 [ 2186.200674][ T9509] ? load_image+0x410/0x410 [ 2186.205217][ T9509] sysfs_warn_dup+0x8a/0xa0 [ 2186.209863][ T9509] sysfs_do_create_link_sd+0xc0/0x110 [ 2186.215263][ T9509] device_add+0x83b/0x1050 [ 2186.219717][ T9509] wiphy_register+0x1e74/0x2c40 [ 2186.224730][ T9509] ? cfg80211_event_work+0x40/0x40 [ 2186.229869][ T9509] ? minstrel_ht_alloc+0x807/0x980 [ 2186.235014][ T9509] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2186.241120][ T9509] ieee80211_register_hw+0x2a03/0x3a60 [ 2186.246617][ T9509] ? ieee80211_register_hw+0xa91/0x3a60 [ 2186.252287][ T9509] ? ieee80211_tasklet_handler+0x20/0x20 [ 2186.257964][ T9509] ? rcu_is_watching+0x11/0xa0 [ 2186.262752][ T9509] ? hrtimer_init+0x10c/0x220 [ 2186.267454][ T9509] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2186.273229][ T9509] hwsim_new_radio_nl+0xa7d/0xc50 [ 2186.278491][ T9509] genl_rcv_msg+0xd0b/0xfa0 [ 2186.283178][ T9509] ? genl_bind+0x370/0x370 [ 2186.287753][ T9509] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2186.293076][ T9509] ? verify_lock_unused+0x140/0x140 [ 2186.298403][ T9509] ? dev_queue_xmit+0x20/0x20 [ 2186.303101][ T9509] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2186.309472][ T9509] netlink_rcv_skb+0x1e9/0x430 [ 2186.314262][ T9509] ? genl_bind+0x370/0x370 [ 2186.318793][ T9509] ? netlink_ack+0xb10/0xb10 [ 2186.323418][ T9509] ? down_read+0x1aa/0x2e0 [ 2186.327863][ T9509] genl_rcv+0x24/0x40 [ 2186.331958][ T9509] netlink_unicast+0x78f/0x940 [ 2186.336852][ T9509] netlink_sendmsg+0x8ba/0xbe0 [ 2186.341668][ T9509] ? netlink_getsockopt+0x570/0x570 [ 2186.346943][ T9509] ? aa_sock_msg_perm+0x94/0x150 [ 2186.352007][ T9509] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2186.357316][ T9509] ? security_socket_sendmsg+0x7c/0xa0 [ 2186.362806][ T9509] ? netlink_getsockopt+0x570/0x570 [ 2186.368158][ T9509] ____sys_sendmsg+0x5be/0x8f0 [ 2186.372963][ T9509] ? __sys_sendmsg_sock+0x30/0x30 [ 2186.378026][ T9509] ? import_iovec+0x6f/0xa0 [ 2186.382565][ T9509] ___sys_sendmsg+0x236/0x2e0 [ 2186.387294][ T9509] ? __sys_sendmsg+0x290/0x290 [ 2186.392128][ T9509] __se_sys_sendmsg+0x1b7/0x2a0 [ 2186.397003][ T9509] ? __x64_sys_sendmsg+0x80/0x80 [ 2186.402082][ T9509] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2186.408292][ T9509] ? lockdep_hardirqs_on+0x94/0x140 [ 2186.413530][ T9509] do_syscall_64+0x4c/0xa0 [ 2186.417972][ T9509] ? clear_bhb_loop+0x30/0x80 [ 2186.422696][ T9509] ? clear_bhb_loop+0x30/0x80 [ 2186.427497][ T9509] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2186.433469][ T9509] RIP: 0033:0x7f930c2c1e59 [ 2186.437906][ T9509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2186.457753][ T9509] RSP: 002b:00007f930a51b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2186.466344][ T9509] RAX: ffffffffffffffda RBX: 00007f930c53afa0 RCX: 00007f930c2c1e59 [ 2186.474486][ T9509] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2186.482483][ T9509] RBP: 00007f930c357e6f R08: 0000000000000000 R09: 0000000000000000 [ 2186.490563][ T9509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2186.498673][ T9509] R13: 00007f930c53b038 R14: 00007f930c53afa0 R15: 00007ffd2a8c3028 [ 2186.506689][ T9509] [ 2186.706187][ T9514] netlink: 168 bytes leftover after parsing attributes in process `syz.1.47934'. [ 2188.469105][ T9565] netlink: 168 bytes leftover after parsing attributes in process `syz.3.47958'. [ 2188.870792][ T9568] netlink: 'syz.0.47969': attribute type 10 has an invalid length. [ 2188.896070][ T9568] netlink: 55 bytes leftover after parsing attributes in process `syz.0.47969'. [ 2188.963925][ T9572] netlink: 'syz.0.47969': attribute type 1 has an invalid length. [ 2189.147602][ T9577] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.47962'. [ 2189.778661][ T9606] netlink: 168 bytes leftover after parsing attributes in process `syz.2.47971'. [ 2190.422381][ T9617] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.47980'. [ 2190.632858][ T9624] netlink: 'syz.4.47984': attribute type 10 has an invalid length. [ 2190.646629][ T9624] netlink: 55 bytes leftover after parsing attributes in process `syz.4.47984'. [ 2190.659433][ T9624] netlink: 'syz.4.47984': attribute type 1 has an invalid length. [ 2190.925653][ T9641] device veth1_macvtap left promiscuous mode [ 2190.963819][ T9645] device veth1_macvtap entered promiscuous mode [ 2190.976736][ T9645] device macsec0 entered promiscuous mode [ 2191.348176][ T9661] netlink: 'syz.3.48000': attribute type 10 has an invalid length. [ 2191.357016][ T9661] netlink: 55 bytes leftover after parsing attributes in process `syz.3.48000'. [ 2191.438004][ T9666] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.48001'. [ 2191.458767][ T9664] netlink: 'syz.3.48000': attribute type 1 has an invalid length. [ 2191.499007][ T9666] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2191.522290][ T9666] CPU: 1 PID: 9666 Comm: syz.1.48001 Not tainted syzkaller #0 [ 2191.529806][ T9666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2191.539881][ T9666] Call Trace: [ 2191.543183][ T9666] [ 2191.546129][ T9666] dump_stack_lvl+0x188/0x250 [ 2191.551008][ T9666] ? show_regs_print_info+0x20/0x20 [ 2191.556223][ T9666] ? load_image+0x410/0x410 [ 2191.560755][ T9666] sysfs_warn_dup+0x8a/0xa0 [ 2191.565371][ T9666] sysfs_do_create_link_sd+0xc0/0x110 [ 2191.570864][ T9666] device_add+0x83b/0x1050 [ 2191.575320][ T9666] wiphy_register+0x1e74/0x2c40 [ 2191.580211][ T9666] ? cfg80211_event_work+0x40/0x40 [ 2191.585348][ T9666] ? minstrel_ht_alloc+0x807/0x980 [ 2191.590769][ T9666] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2191.596869][ T9666] ieee80211_register_hw+0x2a03/0x3a60 [ 2191.602333][ T9666] ? ieee80211_register_hw+0xa91/0x3a60 [ 2191.607889][ T9666] ? ieee80211_tasklet_handler+0x20/0x20 [ 2191.613524][ T9666] ? rcu_is_watching+0x11/0xa0 [ 2191.618284][ T9666] ? hrtimer_init+0x10c/0x220 [ 2191.623047][ T9666] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2191.628798][ T9666] hwsim_new_radio_nl+0xa7d/0xc50 [ 2191.633927][ T9666] genl_rcv_msg+0xd0b/0xfa0 [ 2191.638544][ T9666] ? genl_bind+0x370/0x370 [ 2191.643131][ T9666] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2191.648322][ T9666] ? verify_lock_unused+0x140/0x140 [ 2191.653529][ T9666] ? dev_queue_xmit+0x20/0x20 [ 2191.658193][ T9666] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2191.664530][ T9666] netlink_rcv_skb+0x1e9/0x430 [ 2191.669293][ T9666] ? genl_bind+0x370/0x370 [ 2191.673895][ T9666] ? netlink_ack+0xb10/0xb10 [ 2191.678503][ T9666] ? down_read+0x1aa/0x2e0 [ 2191.683025][ T9666] genl_rcv+0x24/0x40 [ 2191.687233][ T9666] netlink_unicast+0x78f/0x940 [ 2191.692145][ T9666] netlink_sendmsg+0x8ba/0xbe0 [ 2191.697057][ T9666] ? netlink_getsockopt+0x570/0x570 [ 2191.702290][ T9666] ? aa_sock_msg_perm+0x94/0x150 [ 2191.707418][ T9666] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2191.713305][ T9666] ? security_socket_sendmsg+0x7c/0xa0 [ 2191.718966][ T9666] ? netlink_getsockopt+0x570/0x570 [ 2191.724329][ T9666] ____sys_sendmsg+0x5be/0x8f0 [ 2191.729115][ T9666] ? __sys_sendmsg_sock+0x30/0x30 [ 2191.734153][ T9666] ? import_iovec+0x6f/0xa0 [ 2191.738651][ T9666] ___sys_sendmsg+0x236/0x2e0 [ 2191.743328][ T9666] ? __sys_sendmsg+0x290/0x290 [ 2191.748137][ T9666] __se_sys_sendmsg+0x1b7/0x2a0 [ 2191.753001][ T9666] ? __x64_sys_sendmsg+0x80/0x80 [ 2191.757933][ T9666] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2191.763924][ T9666] ? lockdep_hardirqs_on+0x94/0x140 [ 2191.769124][ T9666] do_syscall_64+0x4c/0xa0 [ 2191.773533][ T9666] ? clear_bhb_loop+0x30/0x80 [ 2191.778204][ T9666] ? clear_bhb_loop+0x30/0x80 [ 2191.782875][ T9666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2191.788767][ T9666] RIP: 0033:0x7fb2fa791e59 [ 2191.793181][ T9666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2191.812780][ T9666] RSP: 002b:00007fb2f89eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2191.821191][ T9666] RAX: ffffffffffffffda RBX: 00007fb2faa0afa0 RCX: 00007fb2fa791e59 [ 2191.829169][ T9666] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2191.837142][ T9666] RBP: 00007fb2fa827e6f R08: 0000000000000000 R09: 0000000000000000 [ 2191.845109][ T9666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2191.853083][ T9666] R13: 00007fb2faa0b038 R14: 00007fb2faa0afa0 R15: 00007ffd487443c8 [ 2191.861063][ T9666] [ 2192.421415][ T9699] netlink: 'syz.0.48011': attribute type 3 has an invalid length. [ 2192.507067][ T9699] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.48011'. [ 2192.683565][ T9706] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.48018'. [ 2192.713545][ T9706] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2192.734284][ T9706] CPU: 1 PID: 9706 Comm: syz.4.48018 Not tainted syzkaller #0 [ 2192.741800][ T9706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2192.751961][ T9706] Call Trace: [ 2192.755257][ T9706] [ 2192.758199][ T9706] dump_stack_lvl+0x188/0x250 [ 2192.762892][ T9706] ? show_regs_print_info+0x20/0x20 [ 2192.768100][ T9706] ? load_image+0x410/0x410 [ 2192.772654][ T9706] sysfs_warn_dup+0x8a/0xa0 [ 2192.777181][ T9706] sysfs_do_create_link_sd+0xc0/0x110 [ 2192.782575][ T9706] device_add+0x83b/0x1050 [ 2192.787011][ T9706] wiphy_register+0x1e74/0x2c40 [ 2192.791897][ T9706] ? cfg80211_event_work+0x40/0x40 [ 2192.797209][ T9706] ? minstrel_ht_alloc+0x807/0x980 [ 2192.802367][ T9706] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2192.808471][ T9706] ieee80211_register_hw+0x2a03/0x3a60 [ 2192.813960][ T9706] ? ieee80211_register_hw+0xa91/0x3a60 [ 2192.819548][ T9706] ? ieee80211_tasklet_handler+0x20/0x20 [ 2192.825200][ T9706] ? rcu_is_watching+0x11/0xa0 [ 2192.829980][ T9706] ? hrtimer_init+0x10c/0x220 [ 2192.834683][ T9706] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2192.840445][ T9706] hwsim_new_radio_nl+0xa7d/0xc50 [ 2192.845512][ T9706] genl_rcv_msg+0xd0b/0xfa0 [ 2192.850046][ T9706] ? genl_bind+0x370/0x370 [ 2192.854477][ T9706] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2192.859866][ T9706] ? verify_lock_unused+0x140/0x140 [ 2192.865400][ T9706] ? dev_queue_xmit+0x20/0x20 [ 2192.870191][ T9706] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2192.876910][ T9706] netlink_rcv_skb+0x1e9/0x430 [ 2192.882253][ T9706] ? genl_bind+0x370/0x370 [ 2192.886697][ T9706] ? netlink_ack+0xb10/0xb10 [ 2192.891322][ T9706] ? down_read+0x1aa/0x2e0 [ 2192.895765][ T9706] genl_rcv+0x24/0x40 [ 2192.899765][ T9706] netlink_unicast+0x78f/0x940 [ 2192.904698][ T9706] netlink_sendmsg+0x8ba/0xbe0 [ 2192.909773][ T9706] ? netlink_getsockopt+0x570/0x570 [ 2192.915026][ T9706] ? aa_sock_msg_perm+0x94/0x150 [ 2192.920005][ T9706] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2192.925344][ T9706] ? security_socket_sendmsg+0x7c/0xa0 [ 2192.930842][ T9706] ? netlink_getsockopt+0x570/0x570 [ 2192.936169][ T9706] ____sys_sendmsg+0x5be/0x8f0 [ 2192.940974][ T9706] ? __sys_sendmsg_sock+0x30/0x30 [ 2192.946033][ T9706] ? import_iovec+0x6f/0xa0 [ 2192.950563][ T9706] ___sys_sendmsg+0x236/0x2e0 [ 2192.955270][ T9706] ? __sys_sendmsg+0x290/0x290 [ 2192.960091][ T9706] __se_sys_sendmsg+0x1b7/0x2a0 [ 2192.964970][ T9706] ? __x64_sys_sendmsg+0x80/0x80 [ 2192.969928][ T9706] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2192.975951][ T9706] ? lockdep_hardirqs_on+0x94/0x140 [ 2192.981185][ T9706] do_syscall_64+0x4c/0xa0 [ 2192.985624][ T9706] ? clear_bhb_loop+0x30/0x80 [ 2192.990334][ T9706] ? clear_bhb_loop+0x30/0x80 [ 2192.995039][ T9706] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2193.000946][ T9706] RIP: 0033:0x7f7445a70e59 [ 2193.005409][ T9706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2193.025022][ T9706] RSP: 002b:00007f7443cca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2193.033464][ T9706] RAX: ffffffffffffffda RBX: 00007f7445ce9fa0 RCX: 00007f7445a70e59 [ 2193.041462][ T9706] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2193.049452][ T9706] RBP: 00007f7445b06e6f R08: 0000000000000000 R09: 0000000000000000 [ 2193.057442][ T9706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2193.065457][ T9706] R13: 00007f7445cea038 R14: 00007f7445ce9fa0 R15: 00007ffed29505f8 [ 2193.073470][ T9706] [ 2193.751193][ T9712] netlink: 'syz.1.48029': attribute type 1 has an invalid length. [ 2193.770906][ T9712] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.48029'. [ 2194.051511][ T9728] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.48023'. [ 2194.169611][ T9733] netlink: 'syz.2.48025': attribute type 10 has an invalid length. [ 2194.208541][ T9733] device geneve0 entered promiscuous mode [ 2195.025675][ T9766] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.48040'. [ 2195.562054][ T9792] device veth1_macvtap entered promiscuous mode [ 2195.598874][ T9792] device macsec0 entered promiscuous mode [ 2195.609021][ T5956] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2195.633722][ T9797] netlink: 'syz.3.48053': attribute type 10 has an invalid length. [ 2195.667212][ T9797] device geneve0 entered promiscuous mode [ 2195.750008][ T9801] netlink: 'syz.1.48052': attribute type 3 has an invalid length. [ 2195.788836][ T9801] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.48052'. [ 2196.096334][ T9811] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.48060'. [ 2196.343757][ T9821] netlink: 'syz.1.48065': attribute type 10 has an invalid length. [ 2196.367618][ T9821] netlink: 55 bytes leftover after parsing attributes in process `syz.1.48065'. [ 2196.509406][ T9827] device veth1_macvtap left promiscuous mode [ 2196.540289][ T9826] netlink: 156 bytes leftover after parsing attributes in process `syz.2.48069'. [ 2196.567799][ T9830] device veth1_macvtap entered promiscuous mode [ 2196.577825][ T9830] device macsec0 entered promiscuous mode [ 2196.592778][ T9829] netlink: 'syz.1.48065': attribute type 1 has an invalid length. [ 2196.604292][ T9834] netlink: 'syz.3.48070': attribute type 3 has an invalid length. [ 2196.641658][ T9834] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.48070'. [ 2197.559339][ T9850] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.48077'. [ 2198.014496][ T9863] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.48092'. [ 2198.147948][ T9869] netlink: 'syz.3.48085': attribute type 10 has an invalid length. [ 2198.207723][ T9869] netlink: 168 bytes leftover after parsing attributes in process `syz.3.48085'. [ 2198.913139][ T9899] netlink: 'syz.1.48096': attribute type 10 has an invalid length. [ 2198.916549][ T9897] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.48099'. [ 2199.000121][ T9899] device geneve0 entered promiscuous mode [ 2202.004370][ T9917] device syzkaller0 entered promiscuous mode [ 2202.028415][ T9925] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.48110'. [ 2202.105574][ T9919] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.48110'. [ 2202.234109][ T9935] netlink: 'syz.2.48114': attribute type 10 has an invalid length. [ 2202.267795][ T9935] netlink: 55 bytes leftover after parsing attributes in process `syz.2.48114'. [ 2202.296601][ T9943] netlink: 'syz.2.48114': attribute type 1 has an invalid length. [ 2202.311923][ T9944] netlink: 'syz.4.48119': attribute type 3 has an invalid length. [ 2202.333556][ T9946] netlink: 'syz.0.48120': attribute type 11 has an invalid length. [ 2202.346281][ T9944] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.48119'. [ 2202.382863][ T9946] netlink: 'syz.0.48120': attribute type 1 has an invalid length. [ 2202.429201][ T9946] netlink: 'syz.0.48120': attribute type 1 has an invalid length. [ 2202.440055][ T9946] netlink: 'syz.0.48120': attribute type 2 has an invalid length. [ 2202.448792][ T9946] netlink: 198236 bytes leftover after parsing attributes in process `syz.0.48120'. [ 2202.518571][ T9956] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.48123'. [ 2202.947557][ T9981] netlink: 'syz.1.48133': attribute type 10 has an invalid length. [ 2202.956053][ T9981] netlink: 168 bytes leftover after parsing attributes in process `syz.1.48133'. [ 2203.176095][ T9987] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.48137'. [ 2203.186158][ T9987] bridge_slave_1: default FDB implementation only supports local addresses [ 2203.265072][ T9994] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2203.379841][ T9999] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.48152'. [ 2203.430249][ T9999] bridge_slave_1: default FDB implementation only supports local addresses [ 2203.688365][T10020] netlink: 'syz.2.48154': attribute type 29 has an invalid length. [ 2203.718063][T10020] netlink: 'syz.2.48154': attribute type 29 has an invalid length. [ 2203.792636][T10029] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.48154'. [ 2205.601313][T10124] bridge_slave_1: default FDB implementation only supports local addresses [ 2206.634664][T10172] bridge_slave_1: default FDB implementation only supports local addresses [ 2207.360455][T10213] validate_nla: 18 callbacks suppressed [ 2207.360474][T10213] netlink: 'syz.1.48233': attribute type 3 has an invalid length. [ 2207.385479][T10213] __nla_validate_parse: 11 callbacks suppressed [ 2207.385498][T10213] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.48233'. [ 2207.649469][T10223] netlink: 'syz.0.48246': attribute type 1 has an invalid length. [ 2207.671687][T10223] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.48246'. [ 2207.978015][T10244] netlink: 'syz.2.48255': attribute type 3 has an invalid length. [ 2207.998989][T10244] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.48255'. [ 2208.135688][T10249] netlink: 'syz.0.48257': attribute type 10 has an invalid length. [ 2208.157957][T10249] device geneve0 entered promiscuous mode [ 2208.329650][T10256] netlink: 'syz.2.48268': attribute type 3 has an invalid length. [ 2208.339885][T10256] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.48268'. [ 2208.748589][T10279] device syzkaller0 entered promiscuous mode [ 2209.057174][T10300] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.48276'. [ 2209.094917][T10299] netlink: 'syz.0.48279': attribute type 10 has an invalid length. [ 2209.122724][T10299] netlink: 168 bytes leftover after parsing attributes in process `syz.0.48279'. [ 2209.148422][T10293] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.48276'. [ 2210.847325][T10333] netlink: 'syz.4.48286': attribute type 10 has an invalid length. [ 2210.871211][T10333] device geneve0 entered promiscuous mode [ 2211.130820][T10345] netlink: 'syz.2.48295': attribute type 10 has an invalid length. [ 2211.181896][T10345] netlink: 168 bytes leftover after parsing attributes in process `syz.2.48295'. [ 2211.302031][T10358] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.48297'. [ 2213.727512][T10352] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.48297'. [ 2213.952860][T10377] netlink: 'syz.3.48310': attribute type 7 has an invalid length. [ 2213.970769][T10377] netlink: 140 bytes leftover after parsing attributes in process `syz.3.48310'. [ 2217.115437][T10391] netlink: 'syz.4.48312': attribute type 10 has an invalid length. [ 2217.125096][T10391] netlink: 168 bytes leftover after parsing attributes in process `syz.4.48312'. [ 2217.504105][T10414] netlink: 'syz.1.48323': attribute type 39 has an invalid length. [ 2217.761478][T10421] device syzkaller0 entered promiscuous mode [ 2217.852785][T10425] netlink: 'syz.2.48328': attribute type 10 has an invalid length. [ 2217.920987][T10425] netlink: 168 bytes leftover after parsing attributes in process `syz.2.48328'. [ 2218.062304][T10430] netlink: 'syz.2.48341': attribute type 10 has an invalid length. [ 2218.106230][T10430] netlink: 168 bytes leftover after parsing attributes in process `syz.2.48341'. [ 2218.245035][T10438] device syzkaller0 entered promiscuous mode [ 2221.006807][T10464] netlink: 'syz.3.48347': attribute type 10 has an invalid length. [ 2221.030127][T10464] netlink: 168 bytes leftover after parsing attributes in process `syz.3.48347'. [ 2221.161585][T10471] netlink: 'syz.0.48349': attribute type 39 has an invalid length. [ 2221.206470][T10471] device veth0_macvtap left promiscuous mode [ 2221.754473][T10496] netlink: 'syz.2.48368': attribute type 39 has an invalid length. [ 2221.858111][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.864488][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.962250][T10510] netlink: 'syz.4.48364': attribute type 10 has an invalid length. [ 2221.986108][T10510] netlink: 168 bytes leftover after parsing attributes in process `syz.4.48364'. [ 2222.005809][T10509] netlink: 'syz.3.48363': attribute type 10 has an invalid length. [ 2222.062628][T10509] team0: Port device veth1_to_bond added [ 2222.098050][T10508] delete_channel: no stack [ 2223.634131][T10518] netlink: 'syz.4.48367': attribute type 28 has an invalid length. [ 2223.646321][T10521] device syzkaller0 entered promiscuous mode [ 2223.835143][T10539] netlink: 'syz.2.48376': attribute type 10 has an invalid length. [ 2223.854027][T10539] netlink: 168 bytes leftover after parsing attributes in process `syz.2.48376'. [ 2224.072285][T10546] netlink: 'syz.3.48378': attribute type 39 has an invalid length. [ 2224.154333][T10556] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.48383'. [ 2224.214380][T10556] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2224.223271][T10556] CPU: 1 PID: 10556 Comm: syz.1.48383 Not tainted syzkaller #0 [ 2224.230853][T10556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2224.241039][T10556] Call Trace: [ 2224.244422][T10556] [ 2224.247366][T10556] dump_stack_lvl+0x188/0x250 [ 2224.252064][T10556] ? show_regs_print_info+0x20/0x20 [ 2224.257377][T10556] ? load_image+0x410/0x410 [ 2224.261951][T10556] sysfs_warn_dup+0x8a/0xa0 [ 2224.266480][T10556] sysfs_do_create_link_sd+0xc0/0x110 [ 2224.271877][T10556] device_add+0x83b/0x1050 [ 2224.276325][T10556] wiphy_register+0x1e74/0x2c40 [ 2224.281219][T10556] ? cfg80211_event_work+0x40/0x40 [ 2224.286357][T10556] ? minstrel_ht_alloc+0x807/0x980 [ 2224.291509][T10556] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2224.297987][T10556] ieee80211_register_hw+0x2a03/0x3a60 [ 2224.303485][T10556] ? ieee80211_register_hw+0xa91/0x3a60 [ 2224.309153][T10556] ? ieee80211_tasklet_handler+0x20/0x20 [ 2224.314816][T10556] ? rcu_is_watching+0x11/0xa0 [ 2224.319616][T10556] ? hrtimer_init+0x10c/0x220 [ 2224.324321][T10556] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2224.330090][T10556] hwsim_new_radio_nl+0xa7d/0xc50 [ 2224.335154][T10556] genl_rcv_msg+0xd0b/0xfa0 [ 2224.339709][T10556] ? genl_bind+0x370/0x370 [ 2224.344157][T10556] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2224.349375][T10556] ? verify_lock_unused+0x140/0x140 [ 2224.354614][T10556] ? dev_queue_xmit+0x20/0x20 [ 2224.359308][T10556] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2224.365677][T10556] netlink_rcv_skb+0x1e9/0x430 [ 2224.370460][T10556] ? genl_bind+0x370/0x370 [ 2224.374898][T10556] ? netlink_ack+0xb10/0xb10 [ 2224.379553][T10556] ? down_read+0x1aa/0x2e0 [ 2224.383997][T10556] genl_rcv+0x24/0x40 [ 2224.388002][T10556] netlink_unicast+0x78f/0x940 [ 2224.392803][T10556] netlink_sendmsg+0x8ba/0xbe0 [ 2224.397595][T10556] ? netlink_getsockopt+0x570/0x570 [ 2224.402822][T10556] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2224.408216][T10556] ? security_socket_sendmsg+0x7c/0xa0 [ 2224.413794][T10556] ? netlink_getsockopt+0x570/0x570 [ 2224.419028][T10556] ____sys_sendmsg+0x5be/0x8f0 [ 2224.423830][T10556] ? __sys_sendmsg_sock+0x30/0x30 [ 2224.428887][T10556] ? import_iovec+0x6f/0xa0 [ 2224.433414][T10556] ___sys_sendmsg+0x236/0x2e0 [ 2224.438117][T10556] ? __sys_sendmsg+0x290/0x290 [ 2224.442957][T10556] ? lock_chain_count+0x20/0x20 [ 2224.447860][T10556] __se_sys_sendmsg+0x1b7/0x2a0 [ 2224.452865][T10556] ? __x64_sys_sendmsg+0x80/0x80 [ 2224.457961][T10556] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2224.463886][T10556] do_syscall_64+0x4c/0xa0 [ 2224.468323][T10556] ? clear_bhb_loop+0x30/0x80 [ 2224.473019][T10556] ? clear_bhb_loop+0x30/0x80 [ 2224.477805][T10556] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2224.483736][T10556] RIP: 0033:0x7fb2fa791e59 [ 2224.488186][T10556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2224.507806][T10556] RSP: 002b:00007fb2f89eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2224.516245][T10556] RAX: ffffffffffffffda RBX: 00007fb2faa0afa0 RCX: 00007fb2fa791e59 [ 2224.524246][T10556] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2224.532236][T10556] RBP: 00007fb2fa827e6f R08: 0000000000000000 R09: 0000000000000000 [ 2224.540314][T10556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2224.548311][T10556] R13: 00007fb2faa0b038 R14: 00007fb2faa0afa0 R15: 00007ffd487443c8 [ 2224.556630][T10556] [ 2226.444153][T10564] device syzkaller0 entered promiscuous mode [ 2229.191588][T10574] netlink: 'syz.4.48390': attribute type 10 has an invalid length. [ 2229.210334][T10574] netlink: 168 bytes leftover after parsing attributes in process `syz.4.48390'. [ 2229.432230][T10588] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.48396'. [ 2229.447740][T10588] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2229.460430][T10588] CPU: 1 PID: 10588 Comm: syz.0.48396 Not tainted syzkaller #0 [ 2229.468030][T10588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2229.478111][T10588] Call Trace: [ 2229.481418][T10588] [ 2229.484595][T10588] dump_stack_lvl+0x188/0x250 [ 2229.489301][T10588] ? show_regs_print_info+0x20/0x20 [ 2229.494523][T10588] ? load_image+0x410/0x410 [ 2229.499064][T10588] sysfs_warn_dup+0x8a/0xa0 [ 2229.503820][T10588] sysfs_do_create_link_sd+0xc0/0x110 [ 2229.509243][T10588] device_add+0x83b/0x1050 [ 2229.513706][T10588] wiphy_register+0x1e74/0x2c40 [ 2229.518596][T10588] ? cfg80211_event_work+0x40/0x40 [ 2229.523736][T10588] ? minstrel_ht_alloc+0x807/0x980 [ 2229.528991][T10588] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2229.535188][T10588] ieee80211_register_hw+0x2a03/0x3a60 [ 2229.540916][T10588] ? ieee80211_register_hw+0xa91/0x3a60 [ 2229.546519][T10588] ? ieee80211_tasklet_handler+0x20/0x20 [ 2229.552314][T10588] ? rcu_is_watching+0x11/0xa0 [ 2229.557103][T10588] ? hrtimer_init+0x10c/0x220 [ 2229.561884][T10588] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2229.567643][T10588] hwsim_new_radio_nl+0xa7d/0xc50 [ 2229.572694][T10588] genl_rcv_msg+0xd0b/0xfa0 [ 2229.577335][T10588] ? genl_bind+0x370/0x370 [ 2229.581856][T10588] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2229.587073][T10588] ? verify_lock_unused+0x140/0x140 [ 2229.592296][T10588] ? dev_queue_xmit+0x20/0x20 [ 2229.596981][T10588] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2229.603463][T10588] netlink_rcv_skb+0x1e9/0x430 [ 2229.608237][T10588] ? genl_bind+0x370/0x370 [ 2229.612664][T10588] ? netlink_ack+0xb10/0xb10 [ 2229.617450][T10588] ? down_read+0x1aa/0x2e0 [ 2229.621877][T10588] genl_rcv+0x24/0x40 [ 2229.625866][T10588] netlink_unicast+0x78f/0x940 [ 2229.630748][T10588] netlink_sendmsg+0x8ba/0xbe0 [ 2229.635616][T10588] ? netlink_getsockopt+0x570/0x570 [ 2229.640832][T10588] ? aa_sock_msg_perm+0x94/0x150 [ 2229.645780][T10588] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2229.651078][T10588] ? security_socket_sendmsg+0x7c/0xa0 [ 2229.656555][T10588] ? netlink_getsockopt+0x570/0x570 [ 2229.661767][T10588] ____sys_sendmsg+0x5be/0x8f0 [ 2229.666639][T10588] ? __sys_sendmsg_sock+0x30/0x30 [ 2229.671874][T10588] ? import_iovec+0x6f/0xa0 [ 2229.676401][T10588] ___sys_sendmsg+0x236/0x2e0 [ 2229.681097][T10588] ? __sys_sendmsg+0x290/0x290 [ 2229.686065][T10588] __se_sys_sendmsg+0x1b7/0x2a0 [ 2229.690935][T10588] ? __x64_sys_sendmsg+0x80/0x80 [ 2229.695874][T10588] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2229.701979][T10588] ? trace_sys_enter+0x1f/0x80 [ 2229.706911][T10588] do_syscall_64+0x4c/0xa0 [ 2229.711451][T10588] ? clear_bhb_loop+0x30/0x80 [ 2229.716162][T10588] ? clear_bhb_loop+0x30/0x80 [ 2229.720866][T10588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2229.726857][T10588] RIP: 0033:0x7f930c2c1e59 [ 2229.731283][T10588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2229.751418][T10588] RSP: 002b:00007f930a51b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2229.759971][T10588] RAX: ffffffffffffffda RBX: 00007f930c53afa0 RCX: 00007f930c2c1e59 [ 2229.768100][T10588] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2229.776085][T10588] RBP: 00007f930c357e6f R08: 0000000000000000 R09: 0000000000000000 [ 2229.784060][T10588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2229.792159][T10588] R13: 00007f930c53b038 R14: 00007f930c53afa0 R15: 00007ffd2a8c3028 [ 2229.800167][T10588] [ 2233.154969][T10616] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.48405'. [ 2233.251394][T10606] device syzkaller0 entered promiscuous mode [ 2234.053653][T10637] netlink: 156 bytes leftover after parsing attributes in process `syz.2.48414'. [ 2234.239503][T10652] netlink: 156 bytes leftover after parsing attributes in process `syz.4.48431'. [ 2235.230655][T10693] netlink: 156 bytes leftover after parsing attributes in process `syz.3.48439'. [ 2236.023752][T10727] netlink: 'syz.1.48462': attribute type 7 has an invalid length. [ 2236.038392][T10727] netlink: 140 bytes leftover after parsing attributes in process `syz.1.48462'. [ 2236.254618][T10741] netlink: 'syz.3.48456': attribute type 3 has an invalid length. [ 2236.276041][T10741] netlink: 'syz.3.48456': attribute type 1 has an invalid length. [ 2236.284610][T10741] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.48456'. [ 2239.320385][T10756] netlink: 'syz.1.48463': attribute type 10 has an invalid length. [ 2239.341985][T10758] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.48465'. [ 2239.422282][T10756] team0: Port device veth1_to_bond added [ 2239.442592][T10766] netlink: 'syz.4.48469': attribute type 7 has an invalid length. [ 2239.456155][T10766] netlink: 140 bytes leftover after parsing attributes in process `syz.4.48469'. [ 2239.471374][T10755] delete_channel: no stack [ 2239.828838][T10780] netlink: 'syz.2.48473': attribute type 3 has an invalid length. [ 2239.837291][T10780] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.48473'. [ 2242.647563][T10790] netlink: 128 bytes leftover after parsing attributes in process `syz.1.48476'. [ 2242.742410][T10795] netlink: 'syz.2.48480': attribute type 10 has an invalid length. [ 2242.777721][T10795] device team0 left promiscuous mode [ 2242.783071][T10795] device team_slave_1 left promiscuous mode [ 2242.790843][T10795] device wlan1 left promiscuous mode [ 2242.797545][T10795] ¥: port 1(team0) entered disabled state [ 2242.802532][T10803] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.48481'. [ 2242.844396][T10797] netlink: 'syz.4.48483': attribute type 10 has an invalid length. [ 2242.884195][T10797] team0: Port device veth1_to_bond added [ 2242.906510][T10802] netlink: 'syz.2.48480': attribute type 10 has an invalid length. [ 2242.920361][T10802] netlink: 40 bytes leftover after parsing attributes in process `syz.2.48480'. [ 2242.930552][T10796] delete_channel: no stack [ 2242.935706][T10802] device team0 entered promiscuous mode [ 2242.945586][T10802] device team_slave_1 entered promiscuous mode [ 2242.956836][T10802] device wlan1 entered promiscuous mode [ 2242.968972][T10802] 8021q: adding VLAN 0 to HW filter on device team0 [ 2243.002511][T10802] bridge0: port 2(team0) entered blocking state [ 2243.029241][T10802] bridge0: port 2(team0) entered disabled state [ 2243.037661][T10812] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.48494'. [ 2243.094417][T10811] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.48484'. [ 2243.155551][T10811] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2243.181671][T10811] CPU: 1 PID: 10811 Comm: syz.4.48484 Not tainted syzkaller #0 [ 2243.189280][T10811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2243.199522][T10811] Call Trace: [ 2243.202808][T10811] [ 2243.205748][T10811] dump_stack_lvl+0x188/0x250 [ 2243.210598][T10811] ? show_regs_print_info+0x20/0x20 [ 2243.215935][T10811] ? load_image+0x410/0x410 [ 2243.220546][T10811] sysfs_warn_dup+0x8a/0xa0 [ 2243.225110][T10811] sysfs_do_create_link_sd+0xc0/0x110 [ 2243.230512][T10811] device_add+0x83b/0x1050 [ 2243.234958][T10811] wiphy_register+0x1e74/0x2c40 [ 2243.239934][T10811] ? cfg80211_event_work+0x40/0x40 [ 2243.245060][T10811] ? minstrel_ht_alloc+0x807/0x980 [ 2243.250177][T10811] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2243.256343][T10811] ieee80211_register_hw+0x2a03/0x3a60 [ 2243.261807][T10811] ? ieee80211_register_hw+0xa91/0x3a60 [ 2243.267354][T10811] ? ieee80211_tasklet_handler+0x20/0x20 [ 2243.272989][T10811] ? rcu_is_watching+0x11/0xa0 [ 2243.277753][T10811] ? hrtimer_init+0x10c/0x220 [ 2243.282515][T10811] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2243.288338][T10811] hwsim_new_radio_nl+0xa7d/0xc50 [ 2243.293374][T10811] genl_rcv_msg+0xd0b/0xfa0 [ 2243.297886][T10811] ? genl_bind+0x370/0x370 [ 2243.302298][T10811] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 2243.308198][T10811] ? verify_lock_unused+0x140/0x140 [ 2243.313395][T10811] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 2243.319989][T10811] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2243.326508][T10811] netlink_rcv_skb+0x1e9/0x430 [ 2243.331312][T10811] ? genl_bind+0x370/0x370 [ 2243.335775][T10811] ? netlink_ack+0xb10/0xb10 [ 2243.340401][T10811] ? down_read+0x1aa/0x2e0 [ 2243.344860][T10811] genl_rcv+0x24/0x40 [ 2243.348847][T10811] netlink_unicast+0x78f/0x940 [ 2243.353662][T10811] netlink_sendmsg+0x8ba/0xbe0 [ 2243.358429][T10811] ? netlink_getsockopt+0x570/0x570 [ 2243.363825][T10811] ? __sanitizer_cov_trace_pc+0xc/0x60 [ 2243.369392][T10811] ? aa_sock_msg_perm+0x94/0x150 [ 2243.374331][T10811] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2243.379644][T10811] ? security_socket_sendmsg+0x7c/0xa0 [ 2243.385109][T10811] ? netlink_getsockopt+0x570/0x570 [ 2243.390407][T10811] ____sys_sendmsg+0x5be/0x8f0 [ 2243.395176][T10811] ? __sys_sendmsg_sock+0x30/0x30 [ 2243.400283][T10811] ? import_iovec+0x6f/0xa0 [ 2243.404779][T10811] ___sys_sendmsg+0x236/0x2e0 [ 2243.409613][T10811] ? __sys_sendmsg+0x290/0x290 [ 2243.414418][T10811] __se_sys_sendmsg+0x1b7/0x2a0 [ 2243.419287][T10811] ? __x64_sys_sendmsg+0x80/0x80 [ 2243.424222][T10811] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2243.430229][T10811] ? lockdep_hardirqs_on+0x94/0x140 [ 2243.435438][T10811] do_syscall_64+0x4c/0xa0 [ 2243.439853][T10811] ? clear_bhb_loop+0x30/0x80 [ 2243.444746][T10811] ? clear_bhb_loop+0x30/0x80 [ 2243.449434][T10811] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2243.455321][T10811] RIP: 0033:0x7f7445a70e59 [ 2243.459856][T10811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2243.479716][T10811] RSP: 002b:00007f7443cca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2243.488306][T10811] RAX: ffffffffffffffda RBX: 00007f7445ce9fa0 RCX: 00007f7445a70e59 [ 2243.496272][T10811] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2243.504329][T10811] RBP: 00007f7445b06e6f R08: 0000000000000000 R09: 0000000000000000 [ 2243.512382][T10811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2243.520348][T10811] R13: 00007f7445cea038 R14: 00007f7445ce9fa0 R15: 00007ffed29505f8 [ 2243.528368][T10811] [ 2243.541510][T10817] netlink: 'syz.2.48487': attribute type 3 has an invalid length. [ 2243.552438][T10817] netlink: 'syz.2.48487': attribute type 1 has an invalid length. [ 2243.581996][T10817] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.48487'. [ 2244.088340][T10843] netlink: 'syz.0.48497': attribute type 10 has an invalid length. [ 2244.165814][T10843] device veth1_to_bond entered promiscuous mode [ 2244.196803][T10843] team0: Port device veth1_to_bond added [ 2244.216796][T10846] netlink: 'syz.2.48499': attribute type 4 has an invalid length. [ 2244.240165][T10842] delete_channel: no stack [ 2244.247624][T10846] netlink: 152 bytes leftover after parsing attributes in process `syz.2.48499'. [ 2244.283458][T10846] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2244.333072][T10857] netlink: 'syz.0.48504': attribute type 3 has an invalid length. [ 2244.376390][T10857] netlink: 'syz.0.48504': attribute type 1 has an invalid length. [ 2244.377616][T10853] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2244.384295][T10857] __nla_validate_parse: 1 callbacks suppressed [ 2244.384319][T10857] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.48504'. [ 2244.421515][T10853] CPU: 0 PID: 10853 Comm: syz.3.48502 Not tainted syzkaller #0 [ 2244.429258][T10853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2244.439331][T10853] Call Trace: [ 2244.442623][T10853] [ 2244.445694][T10853] dump_stack_lvl+0x188/0x250 [ 2244.450415][T10853] ? show_regs_print_info+0x20/0x20 [ 2244.455716][T10853] ? load_image+0x410/0x410 [ 2244.460300][T10853] sysfs_warn_dup+0x8a/0xa0 [ 2244.465055][T10853] sysfs_do_create_link_sd+0xc0/0x110 [ 2244.470890][T10853] device_add+0x83b/0x1050 [ 2244.475332][T10853] wiphy_register+0x1e74/0x2c40 [ 2244.480251][T10853] ? cfg80211_event_work+0x40/0x40 [ 2244.485370][T10853] ? minstrel_ht_alloc+0x807/0x980 [ 2244.490544][T10853] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2244.496741][T10853] ieee80211_register_hw+0x2a03/0x3a60 [ 2244.502297][T10853] ? ieee80211_register_hw+0xa91/0x3a60 [ 2244.507860][T10853] ? ieee80211_tasklet_handler+0x20/0x20 [ 2244.513502][T10853] ? rcu_is_watching+0x11/0xa0 [ 2244.518285][T10853] ? hrtimer_init+0x10c/0x220 [ 2244.523065][T10853] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2244.528912][T10853] hwsim_new_radio_nl+0xa7d/0xc50 [ 2244.533990][T10853] genl_rcv_msg+0xd0b/0xfa0 [ 2244.538517][T10853] ? genl_bind+0x370/0x370 [ 2244.542934][T10853] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 2244.548859][T10853] ? verify_lock_unused+0x140/0x140 [ 2244.554074][T10853] ? perf_trace_lock_acquire+0xed/0x3f0 [ 2244.559657][T10853] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2244.566267][T10853] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2244.572634][T10853] netlink_rcv_skb+0x1e9/0x430 [ 2244.577416][T10853] ? genl_bind+0x370/0x370 [ 2244.581840][T10853] ? netlink_ack+0xb10/0xb10 [ 2244.586436][T10853] ? lockdep_hardirqs_on+0x94/0x140 [ 2244.591656][T10853] ? down_read+0x1aa/0x2e0 [ 2244.596226][T10853] genl_rcv+0x24/0x40 [ 2244.600222][T10853] netlink_unicast+0x78f/0x940 [ 2244.605012][T10853] netlink_sendmsg+0x8ba/0xbe0 [ 2244.609786][T10853] ? netlink_getsockopt+0x570/0x570 [ 2244.615249][T10853] ? aa_sock_msg_perm+0x94/0x150 [ 2244.620189][T10853] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2244.625472][T10853] ? security_socket_sendmsg+0x7c/0xa0 [ 2244.631021][T10853] ? netlink_getsockopt+0x570/0x570 [ 2244.636218][T10853] ____sys_sendmsg+0x5be/0x8f0 [ 2244.640995][T10853] ? __sys_sendmsg_sock+0x30/0x30 [ 2244.646026][T10853] ? import_iovec+0x6f/0xa0 [ 2244.650535][T10853] ___sys_sendmsg+0x236/0x2e0 [ 2244.655219][T10853] ? __sys_sendmsg+0x290/0x290 [ 2244.660047][T10853] __se_sys_sendmsg+0x1b7/0x2a0 [ 2244.664919][T10853] ? __x64_sys_sendmsg+0x80/0x80 [ 2244.669881][T10853] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2244.675799][T10853] do_syscall_64+0x4c/0xa0 [ 2244.680226][T10853] ? clear_bhb_loop+0x30/0x80 [ 2244.684914][T10853] ? clear_bhb_loop+0x30/0x80 [ 2244.689656][T10853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2244.695598][T10853] RIP: 0033:0x7f0fc1f2ee59 [ 2244.700038][T10853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2244.719844][T10853] RSP: 002b:00007f0fc0188028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2244.728352][T10853] RAX: ffffffffffffffda RBX: 00007f0fc21a7fa0 RCX: 00007f0fc1f2ee59 [ 2244.736320][T10853] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2244.744285][T10853] RBP: 00007f0fc1fc4e6f R08: 0000000000000000 R09: 0000000000000000 [ 2244.752250][T10853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2244.760225][T10853] R13: 00007f0fc21a8038 R14: 00007f0fc21a7fa0 R15: 00007fff62e052b8 [ 2244.768227][T10853] [ 2245.031016][T10872] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.48519'. [ 2245.121733][T10872] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2245.138845][T10872] CPU: 1 PID: 10872 Comm: syz.2.48519 Not tainted syzkaller #0 [ 2245.146452][T10872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2245.156517][T10872] Call Trace: [ 2245.159807][T10872] [ 2245.163103][T10872] dump_stack_lvl+0x188/0x250 [ 2245.167812][T10872] ? show_regs_print_info+0x20/0x20 [ 2245.173128][T10872] ? load_image+0x410/0x410 [ 2245.177687][T10872] sysfs_warn_dup+0x8a/0xa0 [ 2245.182399][T10872] sysfs_do_create_link_sd+0xc0/0x110 [ 2245.188023][T10872] device_add+0x83b/0x1050 [ 2245.192496][T10872] wiphy_register+0x1e74/0x2c40 [ 2245.197486][T10872] ? cfg80211_event_work+0x40/0x40 [ 2245.202612][T10872] ? minstrel_ht_alloc+0x807/0x980 [ 2245.207977][T10872] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2245.214083][T10872] ieee80211_register_hw+0x2a03/0x3a60 [ 2245.219571][T10872] ? ieee80211_register_hw+0xa91/0x3a60 [ 2245.225288][T10872] ? ieee80211_tasklet_handler+0x20/0x20 [ 2245.230965][T10872] ? rcu_is_watching+0x11/0xa0 [ 2245.235750][T10872] ? hrtimer_init+0x10c/0x220 [ 2245.240633][T10872] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2245.246406][T10872] hwsim_new_radio_nl+0xa7d/0xc50 [ 2245.251558][T10872] genl_rcv_msg+0xd0b/0xfa0 [ 2245.256274][T10872] ? genl_bind+0x370/0x370 [ 2245.260720][T10872] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2245.265934][T10872] ? verify_lock_unused+0x140/0x140 [ 2245.271183][T10872] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2245.276933][T10872] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 2245.283205][T10872] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2245.289589][T10872] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2245.295603][T10872] netlink_rcv_skb+0x1e9/0x430 [ 2245.300386][T10872] ? genl_bind+0x370/0x370 [ 2245.304860][T10872] ? netlink_ack+0xb10/0xb10 [ 2245.309482][T10872] ? genl_bind+0x370/0x370 [ 2245.313916][T10872] genl_rcv+0x24/0x40 [ 2245.317910][T10872] netlink_unicast+0x78f/0x940 [ 2245.322698][T10872] netlink_sendmsg+0x8ba/0xbe0 [ 2245.327492][T10872] ? netlink_getsockopt+0x570/0x570 [ 2245.332730][T10872] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2245.338041][T10872] ? security_socket_sendmsg+0x7c/0xa0 [ 2245.343546][T10872] ? netlink_getsockopt+0x570/0x570 [ 2245.348770][T10872] ____sys_sendmsg+0x5be/0x8f0 [ 2245.353587][T10872] ? __sys_sendmsg_sock+0x30/0x30 [ 2245.358661][T10872] ? import_iovec+0x6f/0xa0 [ 2245.363193][T10872] ___sys_sendmsg+0x236/0x2e0 [ 2245.367899][T10872] ? __sys_sendmsg+0x290/0x290 [ 2245.372732][T10872] __se_sys_sendmsg+0x1b7/0x2a0 [ 2245.377609][T10872] ? __x64_sys_sendmsg+0x80/0x80 [ 2245.382589][T10872] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2245.388511][T10872] do_syscall_64+0x4c/0xa0 [ 2245.392952][T10872] ? clear_bhb_loop+0x30/0x80 [ 2245.397763][T10872] ? clear_bhb_loop+0x30/0x80 [ 2245.402544][T10872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2245.408553][T10872] RIP: 0033:0x7f3d747b8e59 [ 2245.413022][T10872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2245.432623][T10872] RSP: 002b:00007f3d72a12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2245.441073][T10872] RAX: ffffffffffffffda RBX: 00007f3d74a31fa0 RCX: 00007f3d747b8e59 [ 2245.449045][T10872] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2245.457008][T10872] RBP: 00007f3d7484ee6f R08: 0000000000000000 R09: 0000000000000000 [ 2245.465083][T10872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2245.473320][T10872] R13: 00007f3d74a32038 R14: 00007f3d74a31fa0 R15: 00007ffe0ebeaa18 [ 2245.481320][T10872] [ 2248.238075][T10900] netlink: 'syz.2.48515': attribute type 10 has an invalid length. [ 2248.388060][T10900] device veth1_to_bond entered promiscuous mode [ 2248.390484][T10907] netlink: 'syz.4.48518': attribute type 3 has an invalid length. [ 2248.408929][T10900] team0: Port device veth1_to_bond added [ 2248.428298][T10898] delete_channel: no stack [ 2248.433145][T10907] netlink: 'syz.4.48518': attribute type 1 has an invalid length. [ 2248.452170][T10907] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.48518'. [ 2250.719781][T10928] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.48527'. [ 2250.753892][T10928] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2250.771616][T10928] CPU: 1 PID: 10928 Comm: syz.3.48527 Not tainted syzkaller #0 [ 2250.779327][T10928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2250.789493][T10928] Call Trace: [ 2250.792785][T10928] [ 2250.795873][T10928] dump_stack_lvl+0x188/0x250 [ 2250.800617][T10928] ? show_regs_print_info+0x20/0x20 [ 2250.805852][T10928] ? load_image+0x410/0x410 [ 2250.810467][T10928] sysfs_warn_dup+0x8a/0xa0 [ 2250.815013][T10928] sysfs_do_create_link_sd+0xc0/0x110 [ 2250.820663][T10928] device_add+0x83b/0x1050 [ 2250.825188][T10928] wiphy_register+0x1e74/0x2c40 [ 2250.830054][T10928] ? cfg80211_event_work+0x40/0x40 [ 2250.835167][T10928] ? minstrel_ht_alloc+0x807/0x980 [ 2250.840286][T10928] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2250.846529][T10928] ieee80211_register_hw+0x2a03/0x3a60 [ 2250.852204][T10928] ? ieee80211_register_hw+0xa91/0x3a60 [ 2250.857781][T10928] ? ieee80211_tasklet_handler+0x20/0x20 [ 2250.863708][T10928] ? rcu_is_watching+0x11/0xa0 [ 2250.868498][T10928] ? hrtimer_init+0x10c/0x220 [ 2250.873181][T10928] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2250.878925][T10928] hwsim_new_radio_nl+0xa7d/0xc50 [ 2250.884103][T10928] genl_rcv_msg+0xd0b/0xfa0 [ 2250.888705][T10928] ? genl_bind+0x370/0x370 [ 2250.893218][T10928] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2250.898429][T10928] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2250.904170][T10928] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 2250.910532][T10928] ? mark_lock+0x94/0x320 [ 2250.914906][T10928] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2250.921268][T10928] ? lock_chain_count+0x20/0x20 [ 2250.926269][T10928] netlink_rcv_skb+0x1e9/0x430 [ 2250.931216][T10928] ? genl_bind+0x370/0x370 [ 2250.935792][T10928] ? netlink_ack+0xb10/0xb10 [ 2250.940406][T10928] ? down_read+0x5f/0x2e0 [ 2250.944741][T10928] ? down_read+0x1aa/0x2e0 [ 2250.949161][T10928] genl_rcv+0x24/0x40 [ 2250.953164][T10928] netlink_unicast+0x78f/0x940 [ 2250.958024][T10928] netlink_sendmsg+0x8ba/0xbe0 [ 2250.962794][T10928] ? netlink_getsockopt+0x570/0x570 [ 2250.967992][T10928] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2250.974218][T10928] ? aa_sock_msg_perm+0x94/0x150 [ 2250.979385][T10928] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2250.984845][T10928] ? security_socket_sendmsg+0x7c/0xa0 [ 2250.990315][T10928] ? netlink_getsockopt+0x570/0x570 [ 2250.995528][T10928] ____sys_sendmsg+0x5be/0x8f0 [ 2251.000299][T10928] ? __sys_sendmsg_sock+0x30/0x30 [ 2251.005427][T10928] ? import_iovec+0x6f/0xa0 [ 2251.010095][T10928] ___sys_sendmsg+0x236/0x2e0 [ 2251.014983][T10928] ? __sys_sendmsg+0x290/0x290 [ 2251.019774][T10928] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2251.025945][T10928] __se_sys_sendmsg+0x1b7/0x2a0 [ 2251.030799][T10928] ? __x64_sys_sendmsg+0x80/0x80 [ 2251.035728][T10928] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2251.041716][T10928] ? lockdep_hardirqs_on+0x94/0x140 [ 2251.046918][T10928] do_syscall_64+0x4c/0xa0 [ 2251.051342][T10928] ? clear_bhb_loop+0x30/0x80 [ 2251.056019][T10928] ? clear_bhb_loop+0x30/0x80 [ 2251.060700][T10928] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2251.066607][T10928] RIP: 0033:0x7f0fc1f2ee59 [ 2251.071025][T10928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2251.090918][T10928] RSP: 002b:00007f0fc0188028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2251.099336][T10928] RAX: ffffffffffffffda RBX: 00007f0fc21a7fa0 RCX: 00007f0fc1f2ee59 [ 2251.107391][T10928] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2251.115487][T10928] RBP: 00007f0fc1fc4e6f R08: 0000000000000000 R09: 0000000000000000 [ 2251.123556][T10928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2251.131737][T10928] R13: 00007f0fc21a8038 R14: 00007f0fc21a7fa0 R15: 00007fff62e052b8 [ 2251.139787][T10928] [ 2251.171122][T10932] netlink: 128 bytes leftover after parsing attributes in process `syz.0.48529'. [ 2251.202658][T10936] netlink: 'syz.4.48534': attribute type 10 has an invalid length. [ 2251.382302][T10947] netlink: 132 bytes leftover after parsing attributes in process `syz.0.48539'. [ 2251.488354][T10954] netlink: 'syz.0.48551': attribute type 10 has an invalid length. [ 2251.534495][T10952] delete_channel: no stack [ 2251.757479][T10970] netlink: 128 bytes leftover after parsing attributes in process `syz.2.48546'. [ 2252.548052][T10977] netlink: 'syz.0.48549': attribute type 10 has an invalid length. [ 2252.582485][T10977] bridge0: port 2(team0) entered disabled state [ 2252.606376][T10977] device team0 left promiscuous mode [ 2252.623244][T10977] device team_slave_1 left promiscuous mode [ 2252.660852][T10977] device wlan1 left promiscuous mode [ 2252.693150][T10977] device virt_wifi0 left promiscuous mode [ 2252.726802][T10977] device geneve1 left promiscuous mode [ 2252.736347][T10977] device veth1_to_bond left promiscuous mode [ 2252.743362][T10977] bridge0: port 2(team0) entered disabled state [ 2252.819779][T10998] netlink: 'syz.1.48557': attribute type 10 has an invalid length. [ 2252.849042][T10994] delete_channel: no stack [ 2252.982216][T11010] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.48563'. [ 2253.028945][T11012] netlink: 'syz.3.48565': attribute type 9 has an invalid length. [ 2253.083371][T11017] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.48567'. [ 2253.126814][T24839] tipc: Subscription rejected, illegal request [ 2253.508106][T11027] netlink: 'syz.0.48581': attribute type 10 has an invalid length. [ 2253.534397][T11027] netlink: 'syz.0.48581': attribute type 10 has an invalid length. [ 2253.556181][T11027] netlink: 40 bytes leftover after parsing attributes in process `syz.0.48581'. [ 2253.586629][T11027] device team0 entered promiscuous mode [ 2253.606518][T11027] device team_slave_1 entered promiscuous mode [ 2253.648417][T11027] device wlan1 entered promiscuous mode [ 2253.663915][T11027] device virt_wifi0 entered promiscuous mode [ 2253.671437][T11027] device geneve1 entered promiscuous mode [ 2253.678804][T11027] device veth1_to_bond entered promiscuous mode [ 2253.692216][T11027] 8021q: adding VLAN 0 to HW filter on device team0 [ 2253.704586][T11027] bridge0: port 2(team0) entered blocking state [ 2253.727283][T11027] bridge0: port 2(team0) entered disabled state [ 2253.765243][T11029] netlink: 'syz.2.48571': attribute type 10 has an invalid length. [ 2253.796142][T11029] device team0 left promiscuous mode [ 2253.812304][T11029] device team_slave_1 left promiscuous mode [ 2253.834084][T11029] device wlan1 left promiscuous mode [ 2253.850325][T11029] device veth1_to_bond left promiscuous mode [ 2253.885078][T11029] bridge0: port 2(team0) entered disabled state [ 2253.911312][T11038] netlink: 'syz.3.48575': attribute type 2 has an invalid length. [ 2253.929879][T11038] netlink: 132 bytes leftover after parsing attributes in process `syz.3.48575'. [ 2254.170214][T11054] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.48584'. [ 2254.224738][T11054] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2254.234515][T11054] CPU: 0 PID: 11054 Comm: syz.4.48584 Not tainted syzkaller #0 [ 2254.242199][T11054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2254.252358][T11054] Call Trace: [ 2254.255653][T11054] [ 2254.258709][T11054] dump_stack_lvl+0x188/0x250 [ 2254.263869][T11054] ? show_regs_print_info+0x20/0x20 [ 2254.269178][T11054] ? load_image+0x410/0x410 [ 2254.273722][T11054] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2254.279892][T11054] ? sysfs_warn_dup+0x61/0xa0 [ 2254.284589][T11054] ? kernfs_path_from_node+0x1/0xb70 [ 2254.289984][T11054] sysfs_warn_dup+0x8a/0xa0 [ 2254.294508][T11054] sysfs_do_create_link_sd+0xc0/0x110 [ 2254.299947][T11054] device_add+0x83b/0x1050 [ 2254.304449][T11054] wiphy_register+0x1e74/0x2c40 [ 2254.309326][T11054] ? cfg80211_event_work+0x40/0x40 [ 2254.314444][T11054] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2254.320695][T11054] ieee80211_register_hw+0x2a03/0x3a60 [ 2254.326385][T11054] ? ieee80211_register_hw+0xa91/0x3a60 [ 2254.332085][T11054] ? ieee80211_tasklet_handler+0x20/0x20 [ 2254.337734][T11054] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2254.344097][T11054] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2254.349849][T11054] hwsim_new_radio_nl+0xa7d/0xc50 [ 2254.354885][T11054] genl_rcv_msg+0xd0b/0xfa0 [ 2254.359393][T11054] ? genl_bind+0x370/0x370 [ 2254.363813][T11054] ? __dev_queue_xmit+0x1b6b/0x2e50 [ 2254.369006][T11054] ? verify_lock_unused+0x140/0x140 [ 2254.374212][T11054] ? perf_trace_lock+0xe4/0x390 [ 2254.379059][T11054] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2254.385660][T11054] netlink_rcv_skb+0x1e9/0x430 [ 2254.390509][T11054] ? genl_bind+0x370/0x370 [ 2254.395023][T11054] ? netlink_ack+0xb10/0xb10 [ 2254.399615][T11054] ? down_read+0x1aa/0x2e0 [ 2254.404033][T11054] genl_rcv+0x24/0x40 [ 2254.408065][T11054] netlink_unicast+0x78f/0x940 [ 2254.412918][T11054] netlink_sendmsg+0x8ba/0xbe0 [ 2254.417689][T11054] ? netlink_getsockopt+0x570/0x570 [ 2254.422981][T11054] ? aa_sock_msg_perm+0x94/0x150 [ 2254.427914][T11054] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2254.433355][T11054] ? security_socket_sendmsg+0x7c/0xa0 [ 2254.438836][T11054] ? netlink_getsockopt+0x570/0x570 [ 2254.444180][T11054] ____sys_sendmsg+0x5be/0x8f0 [ 2254.448959][T11054] ? __sys_sendmsg_sock+0x30/0x30 [ 2254.453984][T11054] ? import_iovec+0x6f/0xa0 [ 2254.458490][T11054] ___sys_sendmsg+0x236/0x2e0 [ 2254.463271][T11054] ? __sys_sendmsg+0x290/0x290 [ 2254.468507][T11054] __se_sys_sendmsg+0x1b7/0x2a0 [ 2254.473447][T11054] ? __x64_sys_sendmsg+0x80/0x80 [ 2254.478383][T11054] ? lockdep_hardirqs_on+0x94/0x140 [ 2254.483591][T11054] do_syscall_64+0x4c/0xa0 [ 2254.488011][T11054] ? clear_bhb_loop+0x30/0x80 [ 2254.492724][T11054] ? clear_bhb_loop+0x30/0x80 [ 2254.497408][T11054] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2254.503581][T11054] RIP: 0033:0x7f7445a70e59 [ 2254.508035][T11054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2254.527668][T11054] RSP: 002b:00007f7443cca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2254.536216][T11054] RAX: ffffffffffffffda RBX: 00007f7445ce9fa0 RCX: 00007f7445a70e59 [ 2254.544310][T11054] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2254.552303][T11054] RBP: 00007f7445b06e6f R08: 0000000000000000 R09: 0000000000000000 [ 2254.560460][T11054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2254.568590][T11054] R13: 00007f7445cea038 R14: 00007f7445ce9fa0 R15: 00007ffed29505f8 [ 2254.576723][T11054] [ 2254.597192][T26967] tipc: Subscription rejected, illegal request [ 2254.679025][T11063] netlink: 'syz.3.48588': attribute type 10 has an invalid length. [ 2254.752747][T11063] netlink: 'syz.3.48588': attribute type 10 has an invalid length. [ 2254.771292][T11063] netlink: 40 bytes leftover after parsing attributes in process `syz.3.48588'. [ 2254.791135][T11063] device team0 entered promiscuous mode [ 2254.816394][T11063] device team_slave_1 entered promiscuous mode [ 2254.833699][T11063] device macvlan1 entered promiscuous mode [ 2254.844387][T11063] device wlan1 entered promiscuous mode [ 2254.868540][T11063] device virt_wifi0 entered promiscuous mode [ 2254.892730][T11063] device hsr_slave_0 entered promiscuous mode [ 2254.903408][T11063] device geneve1 entered promiscuous mode [ 2254.925837][T11063] device veth1_to_bond entered promiscuous mode [ 2254.960926][T11063] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2254.995280][T11065] netlink: 'syz.1.48587': attribute type 9 has an invalid length. [ 2255.643258][T11097] netlink: 'syz.0.48602': attribute type 9 has an invalid length. [ 2255.736060][T26967] tipc: Subscription rejected, illegal request [ 2255.764857][T11095] netlink: 'syz.3.48599': attribute type 4 has an invalid length. [ 2255.774307][T11095] __nla_validate_parse: 1 callbacks suppressed [ 2255.774344][T11095] netlink: 152 bytes leftover after parsing attributes in process `syz.3.48599'. [ 2255.792783][T11095] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2255.821134][T11101] netlink: 'syz.1.48601': attribute type 10 has an invalid length. [ 2255.906221][T11104] netlink: 40 bytes leftover after parsing attributes in process `syz.1.48601'. [ 2255.915586][T11104] device team0 entered promiscuous mode [ 2255.947746][T11104] device team_slave_1 entered promiscuous mode [ 2256.015847][T11104] device wlan1 entered promiscuous mode [ 2256.021789][T11104] device hsr_slave_0 entered promiscuous mode [ 2256.046098][T11104] device geneve1 entered promiscuous mode [ 2256.062581][T11104] device veth1_to_bond entered promiscuous mode [ 2256.099568][T11104] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2256.293761][T11108] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.48605'. [ 2256.469300][T11111] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.48604'. [ 2256.561808][T11111] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2256.570987][T11111] CPU: 1 PID: 11111 Comm: syz.4.48604 Not tainted syzkaller #0 [ 2256.578762][T11111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2256.588953][T11111] Call Trace: [ 2256.592258][T11111] [ 2256.595211][T11111] dump_stack_lvl+0x188/0x250 [ 2256.599936][T11111] ? show_regs_print_info+0x20/0x20 [ 2256.605259][T11111] ? load_image+0x410/0x410 [ 2256.609839][T11111] sysfs_warn_dup+0x8a/0xa0 [ 2256.614382][T11111] sysfs_do_create_link_sd+0xc0/0x110 [ 2256.619781][T11111] device_add+0x83b/0x1050 [ 2256.624446][T11111] wiphy_register+0x1e74/0x2c40 [ 2256.629363][T11111] ? cfg80211_event_work+0x40/0x40 [ 2256.634613][T11111] ? minstrel_ht_alloc+0x807/0x980 [ 2256.639774][T11111] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2256.645873][T11111] ieee80211_register_hw+0x2a03/0x3a60 [ 2256.651440][T11111] ? ieee80211_register_hw+0xa91/0x3a60 [ 2256.657024][T11111] ? ieee80211_tasklet_handler+0x20/0x20 [ 2256.662847][T11111] ? rcu_is_watching+0x11/0xa0 [ 2256.667691][T11111] ? hrtimer_init+0x10c/0x220 [ 2256.672508][T11111] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2256.678269][T11111] hwsim_new_radio_nl+0xa7d/0xc50 [ 2256.683339][T11111] genl_rcv_msg+0xd0b/0xfa0 [ 2256.688008][T11111] ? genl_bind+0x370/0x370 [ 2256.692499][T11111] ? verify_lock_unused+0x140/0x140 [ 2256.697728][T11111] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 2256.703820][T11111] ? perf_trace_lock+0x301/0x390 [ 2256.708767][T11111] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2256.715113][T11111] netlink_rcv_skb+0x1e9/0x430 [ 2256.719881][T11111] ? genl_bind+0x370/0x370 [ 2256.724304][T11111] ? netlink_ack+0xb10/0xb10 [ 2256.728901][T11111] ? down_read+0x1aa/0x2e0 [ 2256.733322][T11111] genl_rcv+0x24/0x40 [ 2256.737301][T11111] netlink_unicast+0x78f/0x940 [ 2256.742183][T11111] netlink_sendmsg+0x8ba/0xbe0 [ 2256.747150][T11111] ? netlink_getsockopt+0x570/0x570 [ 2256.752615][T11111] ? aa_sock_msg_perm+0x94/0x150 [ 2256.757593][T11111] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2256.763029][T11111] ? security_socket_sendmsg+0x7c/0xa0 [ 2256.768533][T11111] ? netlink_getsockopt+0x570/0x570 [ 2256.773774][T11111] ____sys_sendmsg+0x5be/0x8f0 [ 2256.778695][T11111] ? __sys_sendmsg_sock+0x30/0x30 [ 2256.784030][T11111] ? import_iovec+0x6f/0xa0 [ 2256.788569][T11111] ___sys_sendmsg+0x236/0x2e0 [ 2256.793425][T11111] ? __sys_sendmsg+0x290/0x290 [ 2256.798660][T11111] ? trace_event_raw_event_lock+0x250/0x250 [ 2256.804863][T11111] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2256.811157][T11111] __se_sys_sendmsg+0x1b7/0x2a0 [ 2256.816033][T11111] ? __x64_sys_sendmsg+0x80/0x80 [ 2256.821082][T11111] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2256.827138][T11111] do_syscall_64+0x4c/0xa0 [ 2256.831591][T11111] ? clear_bhb_loop+0x30/0x80 [ 2256.836263][T11111] ? clear_bhb_loop+0x30/0x80 [ 2256.840946][T11111] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2256.846966][T11111] RIP: 0033:0x7f7445a70e59 [ 2256.851563][T11111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2256.871559][T11111] RSP: 002b:00007f7443cca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2256.879988][T11111] RAX: ffffffffffffffda RBX: 00007f7445ce9fa0 RCX: 00007f7445a70e59 [ 2256.888282][T11111] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2256.896348][T11111] RBP: 00007f7445b06e6f R08: 0000000000000000 R09: 0000000000000000 [ 2256.904409][T11111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2256.912404][T11111] R13: 00007f7445cea038 R14: 00007f7445ce9fa0 R15: 00007ffed29505f8 [ 2256.921046][T11111] [ 2257.245132][T11132] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.48622'. [ 2257.320334][T11133] netlink: 128 bytes leftover after parsing attributes in process `syz.3.48612'. [ 2257.331601][T11132] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2257.344492][T11132] CPU: 1 PID: 11132 Comm: syz.0.48622 Not tainted syzkaller #0 [ 2257.352191][T11132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2257.362267][T11132] Call Trace: [ 2257.365569][T11132] [ 2257.368519][T11132] dump_stack_lvl+0x188/0x250 [ 2257.373244][T11132] ? show_regs_print_info+0x20/0x20 [ 2257.378467][T11132] ? load_image+0x410/0x410 [ 2257.383146][T11132] sysfs_warn_dup+0x8a/0xa0 [ 2257.387705][T11132] sysfs_do_create_link_sd+0xc0/0x110 [ 2257.393213][T11132] device_add+0x83b/0x1050 [ 2257.397762][T11132] wiphy_register+0x1e74/0x2c40 [ 2257.402927][T11132] ? cfg80211_event_work+0x40/0x40 [ 2257.408138][T11132] ? minstrel_ht_alloc+0x807/0x980 [ 2257.413278][T11132] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2257.419393][T11132] ieee80211_register_hw+0x2a03/0x3a60 [ 2257.424880][T11132] ? ieee80211_register_hw+0xa91/0x3a60 [ 2257.430544][T11132] ? ieee80211_tasklet_handler+0x20/0x20 [ 2257.436187][T11132] ? lockdep_hardirqs_on+0x94/0x140 [ 2257.441516][T11132] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2257.448066][T11132] ? rcu_is_watching+0x11/0xa0 [ 2257.452855][T11132] ? hrtimer_init+0x10c/0x220 [ 2257.457563][T11132] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2257.463325][T11132] hwsim_new_radio_nl+0xa7d/0xc50 [ 2257.468416][T11132] genl_rcv_msg+0xd0b/0xfa0 [ 2257.472959][T11132] ? genl_bind+0x370/0x370 [ 2257.477430][T11132] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2257.483552][T11132] ? lock_chain_count+0x20/0x20 [ 2257.488538][T11132] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2257.494859][T11132] ? lockdep_hardirqs_on+0x94/0x140 [ 2257.500282][T11132] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2257.506577][T11132] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2257.513026][T11132] ? lock_acquire+0x208/0x400 [ 2257.517895][T11132] netlink_rcv_skb+0x1e9/0x430 [ 2257.522676][T11132] ? genl_bind+0x370/0x370 [ 2257.527203][T11132] ? netlink_ack+0xb10/0xb10 [ 2257.531809][T11132] ? down_read+0x1aa/0x2e0 [ 2257.536329][T11132] genl_rcv+0x24/0x40 [ 2257.540445][T11132] netlink_unicast+0x78f/0x940 [ 2257.545311][T11132] netlink_sendmsg+0x8ba/0xbe0 [ 2257.550087][T11132] ? netlink_getsockopt+0x570/0x570 [ 2257.555291][T11132] ? aa_sock_msg_perm+0x94/0x150 [ 2257.560252][T11132] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2257.565629][T11132] ? security_socket_sendmsg+0x7c/0xa0 [ 2257.571092][T11132] ? netlink_getsockopt+0x570/0x570 [ 2257.576295][T11132] ____sys_sendmsg+0x5be/0x8f0 [ 2257.581087][T11132] ? __sys_sendmsg_sock+0x30/0x30 [ 2257.586140][T11132] ? import_iovec+0x6f/0xa0 [ 2257.590653][T11132] ___sys_sendmsg+0x236/0x2e0 [ 2257.595357][T11132] ? __sys_sendmsg+0x290/0x290 [ 2257.600140][T11132] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2257.606410][T11132] __se_sys_sendmsg+0x1b7/0x2a0 [ 2257.611351][T11132] ? __x64_sys_sendmsg+0x80/0x80 [ 2257.616391][T11132] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2257.622516][T11132] do_syscall_64+0x4c/0xa0 [ 2257.626937][T11132] ? clear_bhb_loop+0x30/0x80 [ 2257.631615][T11132] ? clear_bhb_loop+0x30/0x80 [ 2257.636574][T11132] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2257.642634][T11132] RIP: 0033:0x7f930c2c1e59 [ 2257.647073][T11132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2257.667142][T11132] RSP: 002b:00007f930a51b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2257.675582][T11132] RAX: ffffffffffffffda RBX: 00007f930c53afa0 RCX: 00007f930c2c1e59 [ 2257.683561][T11132] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2257.691629][T11132] RBP: 00007f930c357e6f R08: 0000000000000000 R09: 0000000000000000 [ 2257.699879][T11132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2257.708286][T11132] R13: 00007f930c53b038 R14: 00007f930c53afa0 R15: 00007ffd2a8c3028 [ 2257.716301][T11132] [ 2257.821599][T11136] netlink: 152 bytes leftover after parsing attributes in process `syz.4.48615'. [ 2257.831744][T11136] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2257.849799][T24839] tipc: Subscription rejected, illegal request [ 2258.069149][T26967] tipc: Subscription rejected, illegal request [ 2258.839361][T11149] validate_nla: 2 callbacks suppressed [ 2258.839383][T11149] netlink: 'syz.4.48617': attribute type 9 has an invalid length. [ 2259.049815][T11169] netlink: 'syz.0.48626': attribute type 2 has an invalid length. [ 2259.060435][T24839] tipc: Subscription rejected, illegal request [ 2259.088576][T11169] netlink: 132 bytes leftover after parsing attributes in process `syz.0.48626'. [ 2259.994733][T11187] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.48635'. [ 2260.085646][T11190] netlink: 'syz.0.48632': attribute type 4 has an invalid length. [ 2260.098949][T11190] netlink: 152 bytes leftover after parsing attributes in process `syz.0.48632'. [ 2260.119904][T11190] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2260.241098][T11197] netlink: 'syz.4.48639': attribute type 10 has an invalid length. [ 2260.289582][T11198] netlink: 'syz.2.48638': attribute type 9 has an invalid length. [ 2260.348833][T11197] netlink: 'syz.4.48639': attribute type 10 has an invalid length. [ 2260.386747][T11197] device team0 entered promiscuous mode [ 2260.392450][T11197] device team_slave_1 entered promiscuous mode [ 2260.420186][T11197] device wlan1 entered promiscuous mode [ 2260.442705][T11197] device hsr_slave_0 entered promiscuous mode [ 2260.480963][T11197] device geneve1 entered promiscuous mode [ 2260.511465][T11197] device veth1_to_bond entered promiscuous mode [ 2260.548743][T11197] 8021q: adding VLAN 0 to HW filter on device team0 [ 2260.591915][T11197] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2260.636198][T11207] C: renamed from team_slave_0 [ 2260.817724][T11215] netlink: 'syz.4.48646': attribute type 2 has an invalid length. [ 2260.853642][T11215] __nla_validate_parse: 3 callbacks suppressed [ 2260.853662][T11215] netlink: 132 bytes leftover after parsing attributes in process `syz.4.48646'. [ 2261.865035][T11230] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.48653'. [ 2262.083210][T11242] netlink: 'syz.1.48655': attribute type 4 has an invalid length. [ 2262.093291][T11242] netlink: 152 bytes leftover after parsing attributes in process `syz.1.48655'. [ 2262.102739][T11242] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2262.874292][T11248] netlink: set zone limit has 8 unknown bytes [ 2265.011215][T11295] netlink: set zone limit has 8 unknown bytes [ 2265.034610][T11301] netlink: 128 bytes leftover after parsing attributes in process `syz.0.48683'. [ 2266.055723][T11323] netlink: 156 bytes leftover after parsing attributes in process `syz.0.48689'. [ 2266.515346][T11345] netlink: 'syz.3.48700': attribute type 4 has an invalid length. [ 2266.537725][T11345] netlink: 152 bytes leftover after parsing attributes in process `syz.3.48700'. [ 2266.554333][T11347] netlink: set zone limit has 8 unknown bytes [ 2266.568172][T11345] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2267.021172][T11363] netlink: 156 bytes leftover after parsing attributes in process `syz.1.48705'. [ 2267.437475][T11380] netlink: set zone limit has 8 unknown bytes [ 2267.503280][T11377] netlink: 'syz.0.48713': attribute type 4 has an invalid length. [ 2267.525247][T11377] netlink: 152 bytes leftover after parsing attributes in process `syz.0.48713'. [ 2267.561689][T11377] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2267.732578][T11386] sctp: [Deprecated]: syz.0.48716 (pid 11386) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2267.732578][T11386] Use struct sctp_sack_info instead [ 2268.039035][T11397] netlink: 156 bytes leftover after parsing attributes in process `syz.4.48719'. [ 2268.508302][T11411] netlink: 'syz.2.48726': attribute type 4 has an invalid length. [ 2268.522283][T11411] netlink: 152 bytes leftover after parsing attributes in process `syz.2.48726'. [ 2268.535706][T11411] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2269.321076][T11452] netlink: 'syz.0.48742': attribute type 4 has an invalid length. [ 2269.348565][T11452] netlink: 152 bytes leftover after parsing attributes in process `syz.0.48742'. [ 2269.407773][T11452] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2270.333366][T11503] netlink: 'syz.1.48761': attribute type 4 has an invalid length. [ 2270.346036][T11503] netlink: 152 bytes leftover after parsing attributes in process `syz.1.48761'. [ 2270.365606][T11503] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2274.919260][T11574] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.48784'. [ 2274.985139][T11574] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.48784'. [ 2276.163817][T11620] netlink: set zone limit has 8 unknown bytes [ 2276.298719][T11623] netlink: 703 bytes leftover after parsing attributes in process `syz.1.48805'. [ 2277.454725][T11683] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.48831'. [ 2277.527769][T11683] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.48831'. [ 2277.814385][T11697] netlink: 'syz.4.48838': attribute type 2 has an invalid length. [ 2277.822967][T11697] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.48838'. [ 2277.933159][T11700] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.48850'. [ 2277.970771][T11700] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.48850'. [ 2278.075721][T11716] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 2278.088929][T11718] mac80211_hwsim hwsim141 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2278.104232][ T5956] wlan1: Created IBSS using preconfigured BSSID 00:00:00:08:00:00 [ 2278.123784][ T5956] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 2278.158338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2279.353750][T11748] netlink: 'syz.1.48859': attribute type 2 has an invalid length. [ 2279.364378][T11748] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.48859'. [ 2279.830717][T11751] netlink: 60 bytes leftover after parsing attributes in process `syz.3.48860'. [ 2280.060041][T11764] netlink: set zone limit has 8 unknown bytes [ 2280.154888][T11774] mac80211_hwsim hwsim136 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2280.179509][T11773] netlink: 703 bytes leftover after parsing attributes in process `syz.0.48883'. [ 2280.667007][T11786] netlink: 'syz.0.48879': attribute type 2 has an invalid length. [ 2280.678159][T11786] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.48879'. [ 2281.114022][T11788] device lo left promiscuous mode [ 2281.142873][T11794] device lo entered promiscuous mode [ 2281.157954][T11794] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2281.284501][T11800] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.48885'. [ 2281.407840][T11815] mac80211_hwsim hwsim132 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2281.452623][T11820] netlink: 60 bytes leftover after parsing attributes in process `syz.1.48890'. [ 2281.678230][T11829] netlink: 'syz.3.48897': attribute type 2 has an invalid length. [ 2281.689122][T11829] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.48897'. [ 2281.733373][T11839] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.48902'. [ 2281.955374][T11851] mac80211_hwsim hwsim138 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2282.035556][T11854] netlink: 60 bytes leftover after parsing attributes in process `syz.2.48910'. [ 2282.446826][T11873] netlink: 'syz.1.48918': attribute type 1 has an invalid length. [ 2282.456640][T11873] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.48918'. [ 2283.118717][T11893] netlink: 60 bytes leftover after parsing attributes in process `syz.4.48924'. [ 2283.274965][T11904] netlink: 'syz.3.48927': attribute type 26 has an invalid length. [ 2283.299063][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.305525][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.313682][T11904] netlink: 54695 bytes leftover after parsing attributes in process `syz.3.48927'. [ 2283.802534][T11932] mac80211_hwsim hwsim113 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2283.902423][T11939] netlink: 'syz.3.48958': attribute type 10 has an invalid length. [ 2283.917616][T11939] device team0 left promiscuous mode [ 2283.927156][T11939] device team_slave_1 left promiscuous mode [ 2283.939233][T11939] device macvlan1 left promiscuous mode [ 2283.945253][T11939] device wlan1 left promiscuous mode [ 2283.951640][T11939] device virt_wifi0 left promiscuous mode [ 2283.958053][T11939] device hsr_slave_0 left promiscuous mode [ 2283.963989][T11939] device geneve1 left promiscuous mode [ 2283.970095][T11939] device veth1_to_bond left promiscuous mode [ 2283.987658][T11939] team0: Cannot enslave team device to itself [ 2283.994145][T11942] netlink: 'syz.1.48957': attribute type 39 has an invalid length. [ 2284.123643][T11942] device hsr_slave_0 left promiscuous mode [ 2284.142784][T11953] netlink: 'syz.2.48946': attribute type 2 has an invalid length. [ 2284.150567][T11942] team0: Port device hsr_slave_0 removed [ 2284.267370][T11960] netlink: 'syz.4.48952': attribute type 26 has an invalid length. [ 2284.767258][T11994] netlink: 'syz.2.48969': attribute type 26 has an invalid length. [ 2285.519651][T12025] __nla_validate_parse: 8 callbacks suppressed [ 2285.519686][T12025] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.48993'. [ 2286.123487][T12052] netlink: 'syz.3.48994': attribute type 1 has an invalid length. [ 2286.136533][T12050] netlink: 'syz.1.49005': attribute type 10 has an invalid length. [ 2286.155290][T12052] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.48994'. [ 2286.195342][T12050] device team0 left promiscuous mode [ 2286.221877][T12050] device team_slave_1 left promiscuous mode [ 2286.246164][T12050] device wlan1 left promiscuous mode [ 2286.252229][T12050] device geneve1 left promiscuous mode [ 2286.265780][T12050] device veth1_to_bond left promiscuous mode [ 2286.289499][T12050] team0: Cannot enslave team device to itself [ 2286.426208][T12058] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.48996'. [ 2286.635558][T12063] netlink: 'syz.1.49000': attribute type 10 has an invalid length. [ 2286.669134][T12063] team0: Device vxcan1 is of different type [ 2286.966538][T12081] netlink: 15750 bytes leftover after parsing attributes in process `syz.2.49006'. [ 2287.086229][T12091] netlink: 'syz.0.49010': attribute type 1 has an invalid length. [ 2287.118261][T12093] device team0 left promiscuous mode [ 2287.132853][T12093] device team_slave_1 left promiscuous mode [ 2287.135464][T12091] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.49010'. [ 2287.146083][T12093] device wlan1 left promiscuous mode [ 2287.172637][T12093] device hsr_slave_0 left promiscuous mode [ 2287.183140][T12093] device geneve1 left promiscuous mode [ 2287.189473][T12093] device veth1_to_bond left promiscuous mode [ 2287.202865][T12093] team0: Cannot enslave team device to itself [ 2287.470905][T12108] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.49017'. [ 2287.734083][T12125] netlink: 15750 bytes leftover after parsing attributes in process `syz.4.49025'. [ 2290.395042][T12164] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.49037'. [ 2290.588258][T12174] validate_nla: 1 callbacks suppressed [ 2290.588278][T12174] netlink: 'syz.4.49041': attribute type 10 has an invalid length. [ 2290.606192][T12174] team0: Device vxcan1 is of different type [ 2291.007314][T12190] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.49051'. [ 2291.031747][T12190] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2291.042521][T12190] CPU: 1 PID: 12190 Comm: syz.3.49051 Not tainted syzkaller #0 [ 2291.050165][T12190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2291.060417][T12190] Call Trace: [ 2291.063713][T12190] [ 2291.066663][T12190] dump_stack_lvl+0x188/0x250 [ 2291.071544][T12190] ? show_regs_print_info+0x20/0x20 [ 2291.076929][T12190] ? load_image+0x410/0x410 [ 2291.081526][T12190] sysfs_warn_dup+0x8a/0xa0 [ 2291.086155][T12190] sysfs_do_create_link_sd+0xc0/0x110 [ 2291.091575][T12190] device_add+0x83b/0x1050 [ 2291.096011][T12190] wiphy_register+0x1e74/0x2c40 [ 2291.101152][T12190] ? cfg80211_event_work+0x40/0x40 [ 2291.106346][T12190] ? minstrel_ht_alloc+0x807/0x980 [ 2291.111479][T12190] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2291.117557][T12190] ieee80211_register_hw+0x2a03/0x3a60 [ 2291.123040][T12190] ? ieee80211_register_hw+0xa91/0x3a60 [ 2291.128609][T12190] ? ieee80211_tasklet_handler+0x20/0x20 [ 2291.134243][T12190] ? rcu_is_watching+0x11/0xa0 [ 2291.139016][T12190] ? hrtimer_init+0x10c/0x220 [ 2291.143694][T12190] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2291.149541][T12190] hwsim_new_radio_nl+0xa7d/0xc50 [ 2291.154773][T12190] genl_rcv_msg+0xd0b/0xfa0 [ 2291.159375][T12190] ? genl_bind+0x370/0x370 [ 2291.163804][T12190] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2291.169027][T12190] ? verify_lock_unused+0x140/0x140 [ 2291.174411][T12190] ? dev_queue_xmit+0x20/0x20 [ 2291.179543][T12190] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2291.185959][T12190] netlink_rcv_skb+0x1e9/0x430 [ 2291.190881][T12190] ? genl_bind+0x370/0x370 [ 2291.195318][T12190] ? netlink_ack+0xb10/0xb10 [ 2291.199933][T12190] ? down_read+0x1aa/0x2e0 [ 2291.204405][T12190] genl_rcv+0x24/0x40 [ 2291.208754][T12190] netlink_unicast+0x78f/0x940 [ 2291.213692][T12190] netlink_sendmsg+0x8ba/0xbe0 [ 2291.218733][T12190] ? netlink_getsockopt+0x570/0x570 [ 2291.224180][T12190] ? aa_sock_msg_perm+0x94/0x150 [ 2291.229158][T12190] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2291.234467][T12190] ? security_socket_sendmsg+0x7c/0xa0 [ 2291.239937][T12190] ? netlink_getsockopt+0x570/0x570 [ 2291.245173][T12190] ____sys_sendmsg+0x5be/0x8f0 [ 2291.249960][T12190] ? __sys_sendmsg_sock+0x30/0x30 [ 2291.254996][T12190] ? import_iovec+0x6f/0xa0 [ 2291.259500][T12190] ___sys_sendmsg+0x236/0x2e0 [ 2291.264190][T12190] ? __sys_sendmsg+0x290/0x290 [ 2291.268960][T12190] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2291.275341][T12190] __se_sys_sendmsg+0x1b7/0x2a0 [ 2291.280215][T12190] ? __x64_sys_sendmsg+0x80/0x80 [ 2291.285183][T12190] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2291.291320][T12190] do_syscall_64+0x4c/0xa0 [ 2291.295755][T12190] ? clear_bhb_loop+0x30/0x80 [ 2291.300515][T12190] ? clear_bhb_loop+0x30/0x80 [ 2291.305209][T12190] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2291.312786][T12190] RIP: 0033:0x7f0fc1f2ee59 [ 2291.317295][T12190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2291.336900][T12190] RSP: 002b:00007f0fc0188028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2291.345329][T12190] RAX: ffffffffffffffda RBX: 00007f0fc21a7fa0 RCX: 00007f0fc1f2ee59 [ 2291.353429][T12190] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2291.361410][T12190] RBP: 00007f0fc1fc4e6f R08: 0000000000000000 R09: 0000000000000000 [ 2291.369383][T12190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2291.377356][T12190] R13: 00007f0fc21a8038 R14: 00007f0fc21a7fa0 R15: 00007fff62e052b8 [ 2291.385703][T12190] [ 2291.427477][T12192] netlink: 'syz.0.49052': attribute type 10 has an invalid length. [ 2291.435831][T12192] netlink: 55 bytes leftover after parsing attributes in process `syz.0.49052'. [ 2291.456264][T12192] device virt_wifi0 left promiscuous mode [ 2291.462901][T12192] team0: Port device virt_wifi0 removed [ 2291.702368][T12208] netlink: 'syz.0.49058': attribute type 39 has an invalid length. [ 2291.807294][T12208] device hsr_slave_0 left promiscuous mode [ 2291.982821][T12212] device syzkaller0 entered promiscuous mode [ 2292.214194][T12219] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.49063'. [ 2292.792297][T12245] netlink: 15750 bytes leftover after parsing attributes in process `syz.1.49072'. [ 2292.900756][T12252] netlink: 'syz.3.49075': attribute type 39 has an invalid length. [ 2293.319449][T12252] team0: Port device hsr_slave_0 removed [ 2293.453617][T12260] netlink: 'syz.1.49080': attribute type 4 has an invalid length. [ 2293.470902][T12260] netlink: 'syz.1.49080': attribute type 26 has an invalid length. [ 2293.480179][T12260] netlink: 60759 bytes leftover after parsing attributes in process `syz.1.49080'. [ 2293.657716][T12267] netlink: 156 bytes leftover after parsing attributes in process `syz.1.49085'. [ 2294.560805][T12286] netlink: 'syz.0.49092': attribute type 10 has an invalid length. [ 2294.632869][T12286] device vxcan0 entered promiscuous mode [ 2294.657468][T12286] team0: Device vxcan0 is of different type [ 2294.716138][T12295] device syzkaller0 left promiscuous mode [ 2294.745025][T12293] netlink: 'syz.2.49094': attribute type 39 has an invalid length. [ 2295.036164][T12293] device hsr_slave_0 left promiscuous mode [ 2295.566869][T12308] netlink: 'syz.2.49102': attribute type 10 has an invalid length. [ 2295.669402][T12308] team0: Device vxcan1 is of different type [ 2297.851144][T12333] netlink: 'syz.2.49112': attribute type 4 has an invalid length. [ 2297.854305][T12329] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.49109'. [ 2297.880501][T12333] netlink: 'syz.2.49112': attribute type 26 has an invalid length. [ 2297.900800][T12333] netlink: 60759 bytes leftover after parsing attributes in process `syz.2.49112'. [ 2298.343376][T12349] netlink: 'syz.3.49116': attribute type 10 has an invalid length. [ 2298.474666][T12349] team0: Device vxcan1 is of different type [ 2298.849093][T12369] netlink: 'syz.4.49120': attribute type 39 has an invalid length. [ 2298.930953][T12372] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.49123'. [ 2298.990147][T12369] team0: Port device hsr_slave_0 removed [ 2299.029712][T12376] netlink: 'syz.2.49124': attribute type 10 has an invalid length. [ 2299.065470][T12376] team0: Device vxcan0 is of different type [ 2299.198353][T12386] netlink: 'syz.0.49128': attribute type 4 has an invalid length. [ 2299.198379][T12382] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.49129'. [ 2299.217137][T12386] netlink: 'syz.0.49128': attribute type 26 has an invalid length. [ 2299.225213][T12386] netlink: 60759 bytes leftover after parsing attributes in process `syz.0.49128'. [ 2299.499849][T12379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2299.609831][T12399] netlink: 'syz.2.49146': attribute type 39 has an invalid length. [ 2299.624713][T12393] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.49145'. [ 2300.120253][T12405] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.49150'. [ 2300.388475][T12423] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.49143'. [ 2300.449443][T12425] netlink: 'syz.4.49148': attribute type 10 has an invalid length. [ 2300.471678][T12425] team0: Device vxcan0 is of different type [ 2300.589268][T12429] netlink: 'syz.2.49151': attribute type 39 has an invalid length. [ 2301.465656][T12466] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.49163'. [ 2302.133183][T12488] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.49171'. [ 2303.328171][T12524] __nla_validate_parse: 3 callbacks suppressed [ 2303.328215][T12524] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.49198'. [ 2303.446463][T12524] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2303.473593][T12524] CPU: 1 PID: 12524 Comm: syz.0.49198 Not tainted syzkaller #0 [ 2303.481184][T12524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2303.491262][T12524] Call Trace: [ 2303.494545][T12524] [ 2303.497500][T12524] dump_stack_lvl+0x188/0x250 [ 2303.502208][T12524] ? show_regs_print_info+0x20/0x20 [ 2303.507525][T12524] ? load_image+0x410/0x410 [ 2303.512143][T12524] sysfs_warn_dup+0x8a/0xa0 [ 2303.516659][T12524] sysfs_do_create_link_sd+0xc0/0x110 [ 2303.522055][T12524] device_add+0x83b/0x1050 [ 2303.526608][T12524] wiphy_register+0x1e74/0x2c40 [ 2303.531493][T12524] ? cfg80211_event_work+0x40/0x40 [ 2303.536600][T12524] ? minstrel_ht_alloc+0x807/0x980 [ 2303.541710][T12524] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2303.547777][T12524] ieee80211_register_hw+0x2a03/0x3a60 [ 2303.553238][T12524] ? ieee80211_register_hw+0xa91/0x3a60 [ 2303.558784][T12524] ? ieee80211_tasklet_handler+0x20/0x20 [ 2303.564417][T12524] ? rcu_is_watching+0x11/0xa0 [ 2303.569192][T12524] ? hrtimer_init+0x10c/0x220 [ 2303.573876][T12524] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2303.579698][T12524] hwsim_new_radio_nl+0xa7d/0xc50 [ 2303.584731][T12524] genl_rcv_msg+0xd0b/0xfa0 [ 2303.589238][T12524] ? genl_bind+0x370/0x370 [ 2303.593655][T12524] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2303.598849][T12524] ? verify_lock_unused+0x140/0x140 [ 2303.604097][T12524] ? mark_lock+0x94/0x320 [ 2303.608527][T12524] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2303.614517][T12524] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2303.620868][T12524] ? lock_chain_count+0x20/0x20 [ 2303.625724][T12524] netlink_rcv_skb+0x1e9/0x430 [ 2303.630486][T12524] ? genl_bind+0x370/0x370 [ 2303.634905][T12524] ? netlink_ack+0xb10/0xb10 [ 2303.639491][T12524] ? preempt_count_add+0xa2/0x190 [ 2303.644514][T12524] ? down_read+0x1aa/0x2e0 [ 2303.648923][T12524] genl_rcv+0x24/0x40 [ 2303.652901][T12524] netlink_unicast+0x78f/0x940 [ 2303.657676][T12524] netlink_sendmsg+0x8ba/0xbe0 [ 2303.662441][T12524] ? netlink_getsockopt+0x570/0x570 [ 2303.667645][T12524] ? aa_sock_msg_perm+0x94/0x150 [ 2303.672591][T12524] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2303.677871][T12524] ? security_socket_sendmsg+0x7c/0xa0 [ 2303.683333][T12524] ? netlink_getsockopt+0x570/0x570 [ 2303.688539][T12524] ____sys_sendmsg+0x5be/0x8f0 [ 2303.693309][T12524] ? __sys_sendmsg_sock+0x30/0x30 [ 2303.698334][T12524] ? import_iovec+0x6f/0xa0 [ 2303.702851][T12524] ___sys_sendmsg+0x236/0x2e0 [ 2303.707545][T12524] ? __sys_sendmsg+0x290/0x290 [ 2303.712324][T12524] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2303.718737][T12524] __se_sys_sendmsg+0x1b7/0x2a0 [ 2303.723696][T12524] ? __x64_sys_sendmsg+0x80/0x80 [ 2303.728643][T12524] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2303.734675][T12524] ? lockdep_hardirqs_on+0x94/0x140 [ 2303.739897][T12524] do_syscall_64+0x4c/0xa0 [ 2303.744324][T12524] ? clear_bhb_loop+0x30/0x80 [ 2303.749013][T12524] ? clear_bhb_loop+0x30/0x80 [ 2303.753731][T12524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2303.759648][T12524] RIP: 0033:0x7f930c2c1e59 [ 2303.764088][T12524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2303.783887][T12524] RSP: 002b:00007f930a51b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2303.792344][T12524] RAX: ffffffffffffffda RBX: 00007f930c53afa0 RCX: 00007f930c2c1e59 [ 2303.800423][T12524] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2303.808513][T12524] RBP: 00007f930c357e6f R08: 0000000000000000 R09: 0000000000000000 [ 2303.816490][T12524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2303.824464][T12524] R13: 00007f930c53b038 R14: 00007f930c53afa0 R15: 00007ffd2a8c3028 [ 2303.832463][T12524] [ 2303.924767][T12536] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 2305.214041][T12578] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.49208'. [ 2305.257742][T12578] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2305.286415][T12578] CPU: 0 PID: 12578 Comm: syz.2.49208 Not tainted syzkaller #0 [ 2305.294146][T12578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2305.304240][T12578] Call Trace: [ 2305.307534][T12578] [ 2305.310507][T12578] dump_stack_lvl+0x188/0x250 [ 2305.315208][T12578] ? show_regs_print_info+0x20/0x20 [ 2305.320431][T12578] ? load_image+0x410/0x410 [ 2305.324965][T12578] sysfs_warn_dup+0x8a/0xa0 [ 2305.329573][T12578] sysfs_do_create_link_sd+0xc0/0x110 [ 2305.334975][T12578] device_add+0x83b/0x1050 [ 2305.339420][T12578] wiphy_register+0x1e74/0x2c40 [ 2305.344304][T12578] ? cfg80211_event_work+0x40/0x40 [ 2305.349478][T12578] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2305.355658][T12578] ieee80211_register_hw+0x2a03/0x3a60 [ 2305.361224][T12578] ? ieee80211_register_hw+0xa91/0x3a60 [ 2305.366790][T12578] ? ieee80211_tasklet_handler+0x20/0x20 [ 2305.372447][T12578] ? rcu_is_watching+0x11/0xa0 [ 2305.377328][T12578] ? hrtimer_init+0x10c/0x220 [ 2305.382048][T12578] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2305.387803][T12578] hwsim_new_radio_nl+0xa7d/0xc50 [ 2305.392841][T12578] genl_rcv_msg+0xd0b/0xfa0 [ 2305.397363][T12578] ? genl_bind+0x370/0x370 [ 2305.401796][T12578] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2305.407001][T12578] ? verify_lock_unused+0x140/0x140 [ 2305.412219][T12578] ? dev_queue_xmit+0x20/0x20 [ 2305.416899][T12578] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2305.423441][T12578] netlink_rcv_skb+0x1e9/0x430 [ 2305.428216][T12578] ? genl_bind+0x370/0x370 [ 2305.432633][T12578] ? netlink_ack+0xb10/0xb10 [ 2305.437244][T12578] ? down_read+0x1aa/0x2e0 [ 2305.441667][T12578] genl_rcv+0x24/0x40 [ 2305.445652][T12578] netlink_unicast+0x78f/0x940 [ 2305.450427][T12578] netlink_sendmsg+0x8ba/0xbe0 [ 2305.455200][T12578] ? netlink_getsockopt+0x570/0x570 [ 2305.460404][T12578] ? aa_sock_msg_perm+0x94/0x150 [ 2305.465355][T12578] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2305.470643][T12578] ? security_socket_sendmsg+0x7c/0xa0 [ 2305.476101][T12578] ? netlink_getsockopt+0x570/0x570 [ 2305.481301][T12578] ____sys_sendmsg+0x5be/0x8f0 [ 2305.486092][T12578] ? __sys_sendmsg_sock+0x30/0x30 [ 2305.491136][T12578] ? import_iovec+0x6f/0xa0 [ 2305.495646][T12578] ___sys_sendmsg+0x236/0x2e0 [ 2305.500355][T12578] ? __sys_sendmsg+0x290/0x290 [ 2305.505136][T12578] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2305.511412][T12578] __se_sys_sendmsg+0x1b7/0x2a0 [ 2305.516271][T12578] ? __x64_sys_sendmsg+0x80/0x80 [ 2305.521297][T12578] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2305.527296][T12578] ? lockdep_hardirqs_on+0x94/0x140 [ 2305.532542][T12578] do_syscall_64+0x4c/0xa0 [ 2305.536959][T12578] ? clear_bhb_loop+0x30/0x80 [ 2305.541636][T12578] ? clear_bhb_loop+0x30/0x80 [ 2305.546331][T12578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2305.552231][T12578] RIP: 0033:0x7f3d747b8e59 [ 2305.556653][T12578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2305.576361][T12578] RSP: 002b:00007f3d72a12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2305.584964][T12578] RAX: ffffffffffffffda RBX: 00007f3d74a31fa0 RCX: 00007f3d747b8e59 [ 2305.593031][T12578] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2305.601006][T12578] RBP: 00007f3d7484ee6f R08: 0000000000000000 R09: 0000000000000000 [ 2305.608978][T12578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2305.617211][T12578] R13: 00007f3d74a32038 R14: 00007f3d74a31fa0 R15: 00007ffe0ebeaa18 [ 2305.625204][T12578] [ 2305.725140][T12583] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.49211'. [ 2306.185856][T12599] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.49217'. [ 2306.268119][T12599] openvswitch: netlink: IP tunnel dst address not specified [ 2306.787941][T12616] netlink: 'syz.1.49222': attribute type 3 has an invalid length. [ 2306.834816][T12616] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.49222'. [ 2307.113528][T12627] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.49226'. [ 2307.400220][T12635] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.49230'. [ 2307.468541][T12635] openvswitch: netlink: IP tunnel dst address not specified [ 2307.709670][T12646] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.49235'. [ 2308.179550][T12660] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.49239'. [ 2308.233479][T12660] netlink: del zone limit has 8 unknown bytes [ 2308.334761][T12667] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.49241'. [ 2308.669047][T12690] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.49248'. [ 2308.717676][T12690] openvswitch: netlink: IP tunnel dst address not specified [ 2308.772038][T12696] netlink: 'syz.0.49251': attribute type 3 has an invalid length. [ 2308.828812][T12700] IPv6: pim6reg1: Disabled Multicast RS [ 2308.886458][T12696] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.49251'. [ 2309.381966][T12715] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.49255'. [ 2309.999632][T12728] netlink: 'syz.2.49261': attribute type 39 has an invalid length. [ 2310.139965][T12741] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.49263'. [ 2310.170180][T12741] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.49263'. [ 2310.448370][T12752] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.49266'. [ 2310.564781][T12752] openvswitch: netlink: IP tunnel dst address not specified [ 2310.681822][T12760] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.49270'. [ 2310.741684][T12760] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2310.780260][T12760] CPU: 0 PID: 12760 Comm: syz.1.49270 Not tainted syzkaller #0 [ 2310.787888][T12760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2310.798312][T12760] Call Trace: [ 2310.801609][T12760] [ 2310.804554][T12760] dump_stack_lvl+0x188/0x250 [ 2310.809619][T12760] ? show_regs_print_info+0x20/0x20 [ 2310.814955][T12760] ? load_image+0x410/0x410 [ 2310.819500][T12760] sysfs_warn_dup+0x8a/0xa0 [ 2310.824030][T12760] sysfs_do_create_link_sd+0xc0/0x110 [ 2310.829443][T12760] device_add+0x83b/0x1050 [ 2310.834007][T12760] wiphy_register+0x1e74/0x2c40 [ 2310.838918][T12760] ? cfg80211_event_work+0x40/0x40 [ 2310.844228][T12760] ? minstrel_ht_alloc+0x807/0x980 [ 2310.849382][T12760] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2310.855489][T12760] ieee80211_register_hw+0x2a03/0x3a60 [ 2310.860979][T12760] ? ieee80211_register_hw+0xa91/0x3a60 [ 2310.866553][T12760] ? ieee80211_tasklet_handler+0x20/0x20 [ 2310.872203][T12760] ? rcu_is_watching+0x11/0xa0 [ 2310.876975][T12760] ? hrtimer_init+0x10c/0x220 [ 2310.881880][T12760] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2310.887652][T12760] hwsim_new_radio_nl+0xa7d/0xc50 [ 2310.892740][T12760] genl_rcv_msg+0xd0b/0xfa0 [ 2310.897264][T12760] ? genl_bind+0x370/0x370 [ 2310.901698][T12760] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2310.906904][T12760] ? verify_lock_unused+0x140/0x140 [ 2310.912149][T12760] ? dev_queue_xmit+0x20/0x20 [ 2310.916825][T12760] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2310.923183][T12760] netlink_rcv_skb+0x1e9/0x430 [ 2310.927957][T12760] ? genl_bind+0x370/0x370 [ 2310.932375][T12760] ? netlink_ack+0xb10/0xb10 [ 2310.936965][T12760] ? down_read+0x1aa/0x2e0 [ 2310.941398][T12760] genl_rcv+0x24/0x40 [ 2310.945409][T12760] netlink_unicast+0x78f/0x940 [ 2310.950197][T12760] netlink_sendmsg+0x8ba/0xbe0 [ 2310.955009][T12760] ? netlink_getsockopt+0x570/0x570 [ 2310.960241][T12760] ? aa_sock_msg_perm+0x94/0x150 [ 2310.965197][T12760] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2310.970484][T12760] ? security_socket_sendmsg+0x7c/0xa0 [ 2310.975945][T12760] ? netlink_getsockopt+0x570/0x570 [ 2310.981164][T12760] ____sys_sendmsg+0x5be/0x8f0 [ 2310.985937][T12760] ? __sys_sendmsg_sock+0x30/0x30 [ 2310.990974][T12760] ? import_iovec+0x6f/0xa0 [ 2310.995480][T12760] ___sys_sendmsg+0x236/0x2e0 [ 2311.000172][T12760] ? __sys_sendmsg+0x290/0x290 [ 2311.004942][T12760] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2311.011213][T12760] __se_sys_sendmsg+0x1b7/0x2a0 [ 2311.016063][T12760] ? __x64_sys_sendmsg+0x80/0x80 [ 2311.021315][T12760] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2311.027226][T12760] do_syscall_64+0x4c/0xa0 [ 2311.031694][T12760] ? clear_bhb_loop+0x30/0x80 [ 2311.036376][T12760] ? clear_bhb_loop+0x30/0x80 [ 2311.041090][T12760] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2311.046989][T12760] RIP: 0033:0x7fb2fa791e59 [ 2311.051405][T12760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2311.071004][T12760] RSP: 002b:00007fb2f89eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2311.079417][T12760] RAX: ffffffffffffffda RBX: 00007fb2faa0afa0 RCX: 00007fb2fa791e59 [ 2311.087386][T12760] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2311.095361][T12760] RBP: 00007fb2fa827e6f R08: 0000000000000000 R09: 0000000000000000 [ 2311.103591][T12760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2311.111555][T12760] R13: 00007fb2faa0b038 R14: 00007fb2faa0afa0 R15: 00007ffd487443c8 [ 2311.119526][T12760] [ 2311.206411][T12749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2311.603167][T12771] device veth1_macvtap left promiscuous mode [ 2311.646065][T12771] device macsec0 left promiscuous mode [ 2311.752713][T12782] netlink: 'syz.2.49278': attribute type 3 has an invalid length. [ 2311.771593][T12771] device veth1_macvtap entered promiscuous mode [ 2311.786090][T12782] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.49278'. [ 2311.824549][T12771] device macsec0 entered promiscuous mode [ 2311.879979][ T5956] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2312.803289][T12814] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.49288'. [ 2312.866370][T12814] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.49288'. [ 2313.041715][T12824] netlink: 'syz.4.49292': attribute type 3 has an invalid length. [ 2313.057041][T12820] device veth1_macvtap left promiscuous mode [ 2313.063696][T12820] device macsec0 left promiscuous mode [ 2313.142964][T12828] device veth1_macvtap entered promiscuous mode [ 2313.209691][T12828] device macsec0 entered promiscuous mode [ 2313.225445][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2313.936784][T12843] __nla_validate_parse: 1 callbacks suppressed [ 2313.936831][T12843] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.49296'. [ 2313.980760][T12843] openvswitch: netlink: IP tunnel dst address not specified [ 2314.487758][T12867] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.49305'. [ 2314.524667][T12867] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.49305'. [ 2314.536540][T12866] netlink: 14 bytes leftover after parsing attributes in process `syz.4.49311'. [ 2315.903336][T12912] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.49327'. [ 2315.952781][T12912] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2315.975860][T12912] CPU: 1 PID: 12912 Comm: syz.4.49327 Not tainted syzkaller #0 [ 2315.983457][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2315.993525][T12912] Call Trace: [ 2315.996821][T12912] [ 2315.999772][T12912] dump_stack_lvl+0x188/0x250 [ 2316.004477][T12912] ? show_regs_print_info+0x20/0x20 [ 2316.009781][T12912] ? load_image+0x410/0x410 [ 2316.014334][T12912] sysfs_warn_dup+0x8a/0xa0 [ 2316.018860][T12912] sysfs_do_create_link_sd+0xc0/0x110 [ 2316.024261][T12912] device_add+0x83b/0x1050 [ 2316.028706][T12912] wiphy_register+0x1e74/0x2c40 [ 2316.033603][T12912] ? cfg80211_event_work+0x40/0x40 [ 2316.038745][T12912] ? minstrel_ht_alloc+0x807/0x980 [ 2316.043944][T12912] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2316.050004][T12912] ieee80211_register_hw+0x2a03/0x3a60 [ 2316.055635][T12912] ? ieee80211_register_hw+0xa91/0x3a60 [ 2316.061225][T12912] ? ieee80211_tasklet_handler+0x20/0x20 [ 2316.067081][T12912] ? rcu_is_watching+0x11/0xa0 [ 2316.071939][T12912] ? hrtimer_init+0x10c/0x220 [ 2316.076638][T12912] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2316.082416][T12912] hwsim_new_radio_nl+0xa7d/0xc50 [ 2316.087496][T12912] genl_rcv_msg+0xd0b/0xfa0 [ 2316.092155][T12912] ? genl_bind+0x370/0x370 [ 2316.096613][T12912] ? verify_lock_unused+0x140/0x140 [ 2316.101845][T12912] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 2316.108571][T12912] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2316.114951][T12912] netlink_rcv_skb+0x1e9/0x430 [ 2316.119729][T12912] ? genl_bind+0x370/0x370 [ 2316.124202][T12912] ? netlink_ack+0xb10/0xb10 [ 2316.128945][T12912] ? down_read+0x1aa/0x2e0 [ 2316.133391][T12912] genl_rcv+0x24/0x40 [ 2316.137390][T12912] netlink_unicast+0x78f/0x940 [ 2316.142177][T12912] netlink_sendmsg+0x8ba/0xbe0 [ 2316.146975][T12912] ? netlink_getsockopt+0x570/0x570 [ 2316.152195][T12912] ? aa_sock_msg_perm+0x94/0x150 [ 2316.157153][T12912] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2316.162456][T12912] ? security_socket_sendmsg+0x7c/0xa0 [ 2316.167931][T12912] ? netlink_getsockopt+0x570/0x570 [ 2316.173347][T12912] ____sys_sendmsg+0x5be/0x8f0 [ 2316.178141][T12912] ? __sys_sendmsg_sock+0x30/0x30 [ 2316.183340][T12912] ? import_iovec+0x6f/0xa0 [ 2316.187894][T12912] ___sys_sendmsg+0x236/0x2e0 [ 2316.192787][T12912] ? __sys_sendmsg+0x290/0x290 [ 2316.197603][T12912] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2316.204003][T12912] __se_sys_sendmsg+0x1b7/0x2a0 [ 2316.208895][T12912] ? __x64_sys_sendmsg+0x80/0x80 [ 2316.213895][T12912] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2316.220202][T12912] ? lockdep_hardirqs_on+0x94/0x140 [ 2316.225616][T12912] do_syscall_64+0x4c/0xa0 [ 2316.230744][T12912] ? clear_bhb_loop+0x30/0x80 [ 2316.235460][T12912] ? clear_bhb_loop+0x30/0x80 [ 2316.240164][T12912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2316.246616][T12912] RIP: 0033:0x7f7445a70e59 [ 2316.251045][T12912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2316.270668][T12912] RSP: 002b:00007f7443cca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2316.279107][T12912] RAX: ffffffffffffffda RBX: 00007f7445ce9fa0 RCX: 00007f7445a70e59 [ 2316.287274][T12912] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2316.295377][T12912] RBP: 00007f7445b06e6f R08: 0000000000000000 R09: 0000000000000000 [ 2316.303452][T12912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2316.311450][T12912] R13: 00007f7445cea038 R14: 00007f7445ce9fa0 R15: 00007ffed29505f8 [ 2316.319467][T12912] [ 2316.451308][T12922] netlink: 'syz.3.49330': attribute type 3 has an invalid length. [ 2316.497272][T12922] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.49330'. [ 2316.511843][T12926] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.49344'. [ 2316.540418][T12926] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2316.576437][T12926] CPU: 0 PID: 12926 Comm: syz.4.49344 Not tainted syzkaller #0 [ 2316.584059][T12926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2316.594743][T12926] Call Trace: [ 2316.598161][T12926] [ 2316.601105][T12926] dump_stack_lvl+0x188/0x250 [ 2316.605815][T12926] ? show_regs_print_info+0x20/0x20 [ 2316.611031][T12926] ? load_image+0x410/0x410 [ 2316.615543][T12926] sysfs_warn_dup+0x8a/0xa0 [ 2316.620173][T12926] sysfs_do_create_link_sd+0xc0/0x110 [ 2316.625645][T12926] device_add+0x83b/0x1050 [ 2316.630173][T12926] wiphy_register+0x1e74/0x2c40 [ 2316.635153][T12926] ? cfg80211_event_work+0x40/0x40 [ 2316.640421][T12926] ? minstrel_ht_alloc+0x807/0x980 [ 2316.645697][T12926] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2316.651798][T12926] ieee80211_register_hw+0x2a03/0x3a60 [ 2316.657890][T12926] ? ieee80211_register_hw+0xa91/0x3a60 [ 2316.663451][T12926] ? ieee80211_tasklet_handler+0x20/0x20 [ 2316.669105][T12926] ? rcu_is_watching+0x11/0xa0 [ 2316.674045][T12926] ? hrtimer_init+0x10c/0x220 [ 2316.678920][T12926] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2316.684759][T12926] hwsim_new_radio_nl+0xa7d/0xc50 [ 2316.689818][T12926] genl_rcv_msg+0xd0b/0xfa0 [ 2316.694413][T12926] ? genl_bind+0x370/0x370 [ 2316.698851][T12926] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2316.704075][T12926] ? verify_lock_unused+0x140/0x140 [ 2316.709321][T12926] ? dev_queue_xmit+0x20/0x20 [ 2316.714019][T12926] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2316.720359][T12926] netlink_rcv_skb+0x1e9/0x430 [ 2316.725122][T12926] ? genl_bind+0x370/0x370 [ 2316.729647][T12926] ? netlink_ack+0xb10/0xb10 [ 2316.734241][T12926] ? down_read+0x1aa/0x2e0 [ 2316.738836][T12926] genl_rcv+0x24/0x40 [ 2316.742853][T12926] netlink_unicast+0x78f/0x940 [ 2316.747658][T12926] netlink_sendmsg+0x8ba/0xbe0 [ 2316.752685][T12926] ? netlink_getsockopt+0x570/0x570 [ 2316.757905][T12926] ? aa_sock_msg_perm+0x94/0x150 [ 2316.762839][T12926] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2316.768130][T12926] ? security_socket_sendmsg+0x7c/0xa0 [ 2316.773595][T12926] ? netlink_getsockopt+0x570/0x570 [ 2316.778801][T12926] ____sys_sendmsg+0x5be/0x8f0 [ 2316.783575][T12926] ? __sys_sendmsg_sock+0x30/0x30 [ 2316.788783][T12926] ? import_iovec+0x6f/0xa0 [ 2316.793289][T12926] ___sys_sendmsg+0x236/0x2e0 [ 2316.797972][T12926] ? __sys_sendmsg+0x290/0x290 [ 2316.802745][T12926] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2316.809103][T12926] __se_sys_sendmsg+0x1b7/0x2a0 [ 2316.813958][T12926] ? __x64_sys_sendmsg+0x80/0x80 [ 2316.818903][T12926] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2316.824926][T12926] ? lockdep_hardirqs_on+0x94/0x140 [ 2316.830132][T12926] do_syscall_64+0x4c/0xa0 [ 2316.834547][T12926] ? clear_bhb_loop+0x30/0x80 [ 2316.839219][T12926] ? clear_bhb_loop+0x30/0x80 [ 2316.843895][T12926] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2316.849793][T12926] RIP: 0033:0x7f7445a70e59 [ 2316.854299][T12926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2316.873919][T12926] RSP: 002b:00007f7443cca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2316.882421][T12926] RAX: ffffffffffffffda RBX: 00007f7445ce9fa0 RCX: 00007f7445a70e59 [ 2316.890495][T12926] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2316.898586][T12926] RBP: 00007f7445b06e6f R08: 0000000000000000 R09: 0000000000000000 [ 2316.906577][T12926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2316.914677][T12926] R13: 00007f7445cea038 R14: 00007f7445ce9fa0 R15: 00007ffed29505f8 [ 2316.922753][T12926] [ 2317.008385][T12930] netlink: 14 bytes leftover after parsing attributes in process `syz.1.49332'. [ 2317.109624][T12933] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.49333'. [ 2317.131498][T12933] netlink: 20624 bytes leftover after parsing attributes in process `syz.2.49333'. [ 2317.151983][T12933] tipc: Started in network mode [ 2317.165178][T12933] tipc: Node identity d, cluster identity 46 [ 2317.180845][T12933] tipc: Node number set to 13 [ 2317.283126][T12931] delete_channel: no stack [ 2317.858521][T12965] netlink: 'syz.1.49349': attribute type 39 has an invalid length. [ 2317.992474][T12967] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2318.011385][T12967] CPU: 0 PID: 12967 Comm: syz.4.49350 Not tainted syzkaller #0 [ 2318.019158][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2318.029236][T12967] Call Trace: [ 2318.032529][T12967] [ 2318.035470][T12967] dump_stack_lvl+0x188/0x250 [ 2318.040177][T12967] ? show_regs_print_info+0x20/0x20 [ 2318.045478][T12967] ? load_image+0x410/0x410 [ 2318.050058][T12967] sysfs_warn_dup+0x8a/0xa0 [ 2318.054575][T12967] sysfs_do_create_link_sd+0xc0/0x110 [ 2318.059945][T12967] device_add+0x83b/0x1050 [ 2318.064493][T12967] wiphy_register+0x1e74/0x2c40 [ 2318.069513][T12967] ? cfg80211_event_work+0x40/0x40 [ 2318.074639][T12967] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2318.080891][T12967] ? rtnl_unlock+0x5/0x10 [ 2318.085225][T12967] ieee80211_register_hw+0x2a03/0x3a60 [ 2318.090716][T12967] ? ieee80211_register_hw+0xa91/0x3a60 [ 2318.096447][T12967] ? ieee80211_tasklet_handler+0x20/0x20 [ 2318.102125][T12967] ? rcu_is_watching+0x11/0xa0 [ 2318.106973][T12967] ? hrtimer_init+0x10c/0x220 [ 2318.111710][T12967] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2318.117552][T12967] hwsim_new_radio_nl+0xa7d/0xc50 [ 2318.122670][T12967] genl_rcv_msg+0xd0b/0xfa0 [ 2318.127189][T12967] ? genl_bind+0x370/0x370 [ 2318.131613][T12967] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 2318.137514][T12967] ? verify_lock_unused+0x140/0x140 [ 2318.142888][T12967] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 2318.149482][T12967] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2318.155922][T12967] netlink_rcv_skb+0x1e9/0x430 [ 2318.160685][T12967] ? genl_bind+0x370/0x370 [ 2318.165091][T12967] ? netlink_ack+0xb10/0xb10 [ 2318.169678][T12967] ? down_read+0x1aa/0x2e0 [ 2318.174199][T12967] genl_rcv+0x24/0x40 [ 2318.178176][T12967] netlink_unicast+0x78f/0x940 [ 2318.182942][T12967] netlink_sendmsg+0x8ba/0xbe0 [ 2318.187703][T12967] ? netlink_getsockopt+0x570/0x570 [ 2318.193163][T12967] ? aa_sock_msg_perm+0x94/0x150 [ 2318.198196][T12967] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2318.203570][T12967] ? security_socket_sendmsg+0x7c/0xa0 [ 2318.209285][T12967] ? netlink_getsockopt+0x570/0x570 [ 2318.214487][T12967] ____sys_sendmsg+0x5be/0x8f0 [ 2318.219266][T12967] ? __sys_sendmsg_sock+0x30/0x30 [ 2318.224295][T12967] ? import_iovec+0x6f/0xa0 [ 2318.228885][T12967] ___sys_sendmsg+0x236/0x2e0 [ 2318.233569][T12967] ? __sys_sendmsg+0x290/0x290 [ 2318.238357][T12967] __se_sys_sendmsg+0x1b7/0x2a0 [ 2318.243206][T12967] ? __x64_sys_sendmsg+0x80/0x80 [ 2318.248140][T12967] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2318.254125][T12967] ? lockdep_hardirqs_on+0x94/0x140 [ 2318.259319][T12967] do_syscall_64+0x4c/0xa0 [ 2318.263726][T12967] ? clear_bhb_loop+0x30/0x80 [ 2318.268482][T12967] ? clear_bhb_loop+0x30/0x80 [ 2318.273160][T12967] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2318.279052][T12967] RIP: 0033:0x7f7445a70e59 [ 2318.283475][T12967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2318.303204][T12967] RSP: 002b:00007f7443cca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2318.311627][T12967] RAX: ffffffffffffffda RBX: 00007f7445ce9fa0 RCX: 00007f7445a70e59 [ 2318.319673][T12967] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2318.327644][T12967] RBP: 00007f7445b06e6f R08: 0000000000000000 R09: 0000000000000000 [ 2318.335623][T12967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2318.343587][T12967] R13: 00007f7445cea038 R14: 00007f7445ce9fa0 R15: 00007ffed29505f8 [ 2318.351565][T12967] [ 2319.180424][T13010] netlink: 'syz.1.49365': attribute type 3 has an invalid length. [ 2319.201835][T13010] __nla_validate_parse: 1 callbacks suppressed [ 2319.201882][T13010] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.49365'. [ 2319.225639][T13012] netlink: 'syz.0.49366': attribute type 39 has an invalid length. [ 2319.318904][T13018] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.49368'. [ 2319.338557][T13018] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2319.346952][T13018] CPU: 1 PID: 13018 Comm: syz.3.49368 Not tainted syzkaller #0 [ 2319.354541][T13018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2319.364840][T13018] Call Trace: [ 2319.368146][T13018] [ 2319.371102][T13018] dump_stack_lvl+0x188/0x250 [ 2319.375812][T13018] ? show_regs_print_info+0x20/0x20 [ 2319.381043][T13018] ? load_image+0x410/0x410 [ 2319.385672][T13018] sysfs_warn_dup+0x8a/0xa0 [ 2319.390398][T13018] sysfs_do_create_link_sd+0xc0/0x110 [ 2319.395798][T13018] device_add+0x83b/0x1050 [ 2319.400236][T13018] wiphy_register+0x1e74/0x2c40 [ 2319.405110][T13018] ? cfg80211_event_work+0x40/0x40 [ 2319.410227][T13018] ? minstrel_ht_alloc+0x807/0x980 [ 2319.415367][T13018] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2319.421445][T13018] ieee80211_register_hw+0x2a03/0x3a60 [ 2319.426996][T13018] ? ieee80211_register_hw+0xa91/0x3a60 [ 2319.432547][T13018] ? ieee80211_tasklet_handler+0x20/0x20 [ 2319.438268][T13018] ? hrtimer_init+0x76/0x220 [ 2319.442951][T13018] ? __sanitizer_cov_trace_const_cmp4+0x13/0x80 [ 2319.449189][T13018] ? hrtimer_init+0x10c/0x220 [ 2319.453866][T13018] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2319.459644][T13018] hwsim_new_radio_nl+0xa7d/0xc50 [ 2319.464690][T13018] genl_rcv_msg+0xd0b/0xfa0 [ 2319.469201][T13018] ? genl_bind+0x370/0x370 [ 2319.473621][T13018] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2319.478828][T13018] ? verify_lock_unused+0x140/0x140 [ 2319.484059][T13018] ? dev_queue_xmit+0x20/0x20 [ 2319.488729][T13018] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2319.495065][T13018] netlink_rcv_skb+0x1e9/0x430 [ 2319.499826][T13018] ? genl_bind+0x370/0x370 [ 2319.504239][T13018] ? netlink_ack+0xb10/0xb10 [ 2319.508830][T13018] ? down_read+0x1aa/0x2e0 [ 2319.513246][T13018] genl_rcv+0x24/0x40 [ 2319.517219][T13018] netlink_unicast+0x78f/0x940 [ 2319.521983][T13018] netlink_sendmsg+0x8ba/0xbe0 [ 2319.526861][T13018] ? netlink_getsockopt+0x570/0x570 [ 2319.532057][T13018] ? aa_sock_msg_perm+0x94/0x150 [ 2319.537085][T13018] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2319.542364][T13018] ? security_socket_sendmsg+0x7c/0xa0 [ 2319.547817][T13018] ? netlink_getsockopt+0x570/0x570 [ 2319.553011][T13018] ____sys_sendmsg+0x5be/0x8f0 [ 2319.557778][T13018] ? __sys_sendmsg_sock+0x30/0x30 [ 2319.563096][T13018] ? import_iovec+0x6f/0xa0 [ 2319.567697][T13018] ___sys_sendmsg+0x236/0x2e0 [ 2319.572467][T13018] ? __sys_sendmsg+0x290/0x290 [ 2319.577238][T13018] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2319.583502][T13018] __se_sys_sendmsg+0x1b7/0x2a0 [ 2319.588353][T13018] ? __x64_sys_sendmsg+0x80/0x80 [ 2319.593283][T13018] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2319.599381][T13018] ? lockdep_hardirqs_on+0x94/0x140 [ 2319.604636][T13018] do_syscall_64+0x4c/0xa0 [ 2319.609057][T13018] ? clear_bhb_loop+0x30/0x80 [ 2319.613729][T13018] ? clear_bhb_loop+0x30/0x80 [ 2319.618407][T13018] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2319.624470][T13018] RIP: 0033:0x7f0fc1f2ee59 [ 2319.628971][T13018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2319.648683][T13018] RSP: 002b:00007f0fc0188028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2319.657103][T13018] RAX: ffffffffffffffda RBX: 00007f0fc21a7fa0 RCX: 00007f0fc1f2ee59 [ 2319.665579][T13018] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2319.673681][T13018] RBP: 00007f0fc1fc4e6f R08: 0000000000000000 R09: 0000000000000000 [ 2319.681767][T13018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2319.689909][T13018] R13: 00007f0fc21a8038 R14: 00007f0fc21a7fa0 R15: 00007fff62e052b8 [ 2319.697922][T13018] [ 2320.724527][T13063] ¥: port 1(erspan0) entered blocking state [ 2320.736701][T13063] ¥: port 1(erspan0) entered disabled state [ 2320.778548][T13063] device erspan0 entered promiscuous mode [ 2320.899852][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49389'. [ 2320.930338][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49389'. [ 2320.951269][T13068] netlink: 33 bytes leftover after parsing attributes in process `syz.0.49389'. [ 2320.968603][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49389'. [ 2320.997418][T13068] netlink: 33 bytes leftover after parsing attributes in process `syz.0.49389'. [ 2321.013523][T13073] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.49390'. [ 2321.034740][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49389'. [ 2321.045444][T13068] netlink: 33 bytes leftover after parsing attributes in process `syz.0.49389'. [ 2321.108686][T13072] delete_channel: no stack [ 2321.297649][T13081] netlink: 'syz.1.49394': attribute type 3 has an invalid length. [ 2321.459645][T13091] netlink: 'syz.0.49408': attribute type 3 has an invalid length. [ 2321.725837][T13106] netlink: 'syz.0.49413': attribute type 3 has an invalid length. [ 2321.877362][T13109] delete_channel: no stack [ 2322.500969][T13129] netlink: 'syz.2.49411': attribute type 10 has an invalid length. [ 2323.531633][T13152] netlink: 'syz.4.49422': attribute type 3 has an invalid length. [ 2324.693531][T13206] netlink: 'syz.1.49442': attribute type 3 has an invalid length. [ 2324.704268][T13206] __nla_validate_parse: 17 callbacks suppressed [ 2324.704295][T13206] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.49442'. [ 2324.961677][T13226] netlink: 132 bytes leftover after parsing attributes in process `syz.1.49451'. [ 2325.203610][T13233] netlink: 188 bytes leftover after parsing attributes in process `syz.0.49454'. [ 2325.911640][T13256] ¥: port 1(erspan0) entered blocking state [ 2325.927152][T13256] ¥: port 1(erspan0) entered disabled state [ 2325.954007][T13256] device erspan0 entered promiscuous mode [ 2326.160036][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49462'. [ 2326.183175][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49462'. [ 2326.246218][T13261] netlink: 33 bytes leftover after parsing attributes in process `syz.1.49462'. [ 2326.264193][T13267] netlink: 'syz.3.49464': attribute type 3 has an invalid length. [ 2326.281425][T13267] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.49464'. [ 2326.296928][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49462'. [ 2326.322671][T13261] netlink: 33 bytes leftover after parsing attributes in process `syz.1.49462'. [ 2326.347479][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49462'. [ 2326.755435][T13278] netlink: 'syz.1.49472': attribute type 9 has an invalid length. [ 2326.768286][T13276] delete_channel: no stack [ 2326.950956][T13284] netlink: 'syz.0.49473': attribute type 28 has an invalid length. [ 2327.384589][T13310] ¥: port 1(erspan0) entered blocking state [ 2327.408294][T13310] ¥: port 1(erspan0) entered disabled state [ 2327.422544][T13310] device erspan0 entered promiscuous mode [ 2327.504855][T13313] delete_channel: no stack [ 2330.182397][T13349] __nla_validate_parse: 7 callbacks suppressed [ 2330.182419][T13349] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.49502'. [ 2331.000790][T13347] delete_channel: no stack [ 2333.178492][T13349] netlink: 20624 bytes leftover after parsing attributes in process `syz.2.49502'. [ 2333.624359][T13372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2333.827984][T13378] netlink: 'syz.0.49518': attribute type 3 has an invalid length. [ 2333.874099][T13378] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.49518'. [ 2334.080123][T13386] netlink: 'syz.3.49520': attribute type 10 has an invalid length. [ 2334.154550][T13391] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.49522'. [ 2334.209753][T13386] team0 (unregistering): Port device team_slave_1 removed [ 2334.312521][T13386] team0 (unregistering): Port device macvlan1 removed [ 2334.402235][T13386] team0 (unregistering): Port device wlan1 removed [ 2334.570442][T13386] team0 (unregistering): Port device virt_wifi0 removed [ 2334.608894][T13386] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2334.624949][T13386] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2334.651478][T13386] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2334.719271][T13386] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2334.778811][T13386] team0 (unregistering): Port device geneve1 removed [ 2334.849011][T13386] team0 (unregistering): Port device veth1_to_bond removed [ 2334.943088][T13389] delete_channel: no stack [ 2334.975286][T13391] netlink: 20624 bytes leftover after parsing attributes in process `syz.1.49522'. [ 2335.517547][T13423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2335.568755][T13426] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.49535'. [ 2335.616821][T13426] netlink: 'syz.0.49535': attribute type 16 has an invalid length. [ 2335.656037][T13426] netlink: 'syz.0.49535': attribute type 21 has an invalid length. [ 2335.664154][T13426] netlink: 'syz.0.49535': attribute type 25 has an invalid length. [ 2335.706377][T13426] netlink: 'syz.0.49535': attribute type 27 has an invalid length. [ 2335.721948][T13426] netlink: 'syz.0.49535': attribute type 28 has an invalid length. [ 2335.746417][T13426] netlink: 'syz.0.49535': attribute type 29 has an invalid length. [ 2335.776038][T13426] netlink: 'syz.0.49535': attribute type 30 has an invalid length. [ 2336.547752][T13462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2336.712278][T13466] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.49551'. [ 2336.752734][T13466] netlink: 'syz.2.49551': attribute type 16 has an invalid length. [ 2338.047098][T13505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2338.438384][T13518] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.49568'. [ 2339.319902][T13562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2339.565668][T13573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2339.896971][T13580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2339.932500][T13586] validate_nla: 13 callbacks suppressed [ 2339.932521][T13586] netlink: 'syz.0.49588': attribute type 10 has an invalid length. [ 2339.946544][T26967] wlan1: Trigger new scan to find an IBSS to join [ 2339.955473][T13586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.49588'. [ 2339.965315][T13586] device dummy0 entered promiscuous mode [ 2339.973457][T13586] bridge0: port 3(dummy0) entered blocking state [ 2339.980926][T13586] bridge0: port 3(dummy0) entered disabled state [ 2339.990785][T13586] bridge0: port 3(dummy0) entered blocking state [ 2339.997460][T13586] bridge0: port 3(dummy0) entered listening state [ 2340.570069][T13598] device syzkaller0 entered promiscuous mode [ 2340.983915][T13613] netlink: 152 bytes leftover after parsing attributes in process `syz.3.49602'. [ 2341.070776][T13617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2341.210323][T13624] netlink: 'syz.4.49608': attribute type 10 has an invalid length. [ 2341.329193][T13624] team0 (unregistering): Port device team_slave_1 removed [ 2341.343148][T13624] team0 (unregistering): Port device wlan1 removed [ 2341.352549][T13624] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2341.364779][T13624] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2341.374641][T13624] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2341.407518][T13624] team0 (unregistering): Port device geneve1 removed [ 2341.445038][T13624] team0 (unregistering): Port device veth1_to_bond removed [ 2342.027858][ C0] bridge0: port 3(dummy0) entered learning state [ 2342.085625][T13652] device veth1_macvtap left promiscuous mode [ 2342.102448][T13652] device macsec0 left promiscuous mode [ 2342.208701][T13658] device veth1_macvtap entered promiscuous mode [ 2342.241249][T13658] device macsec0 entered promiscuous mode [ 2342.976152][T26967] wlan1: Trigger new scan to find an IBSS to join [ 2343.876138][T26967] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 2344.096032][ C0] bridge0: port 3(dummy0) entered forwarding state [ 2344.102631][ C0] bridge0: topology change detected, propagating [ 2344.461648][T13681] netlink: 'syz.2.49632': attribute type 15 has an invalid length. [ 2344.480471][T13683] netlink: 'syz.0.49629': attribute type 10 has an invalid length. [ 2344.509741][T13683] bridge0: port 2(team0) entered disabled state [ 2344.530037][T13683] bridge0: port 2(team0) entered disabled state [ 2344.550393][T13683] device team_slave_1 left promiscuous mode [ 2344.603263][T13683] team0 (unregistering): Port device team_slave_1 removed [ 2344.629722][T13683] device wlan1 left promiscuous mode [ 2344.734068][T13683] team0 (unregistering): Port device wlan1 removed [ 2344.745269][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.746647][T13683] device geneve1 left promiscuous mode [ 2344.751876][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.808069][T13683] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.826194][T13683] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.843963][T13683] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.900437][T13683] team0 (unregistering): Port device geneve1 removed [ 2344.916531][T13683] device veth1_to_bond left promiscuous mode [ 2344.927918][T13683] team0 (unregistering): Port device veth1_to_bond removed [ 2345.028570][T13685] netlink: 152 bytes leftover after parsing attributes in process `syz.4.49631'. [ 2345.092508][T13691] netlink: 'syz.2.49634': attribute type 10 has an invalid length. [ 2345.108765][T13691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.49634'. [ 2345.130060][T13696] netlink: 'syz.3.49636': attribute type 3 has an invalid length. [ 2345.163204][T13697] netlink: 'syz.3.49636': attribute type 10 has an invalid length. [ 2345.186506][T13696] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.49636'. [ 2345.484646][T13712] device veth1_macvtap left promiscuous mode [ 2345.532568][T13712] device macsec0 left promiscuous mode [ 2345.577511][T13714] device veth1_macvtap entered promiscuous mode [ 2345.599404][T13714] device macsec0 entered promiscuous mode [ 2345.784907][T13725] netlink: 152 bytes leftover after parsing attributes in process `syz.1.49649'. [ 2345.912201][T13734] netlink: 'syz.1.49652': attribute type 10 has an invalid length. [ 2345.969454][T13734] team0 (unregistering): Port device team_slave_1 removed [ 2345.997693][T13734] team0 (unregistering): Port device wlan1 removed [ 2346.019504][T13734] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2346.044773][T13734] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2346.060830][T13734] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2346.120812][T13734] team0 (unregistering): Port device geneve1 removed [ 2346.142184][T13734] team0 (unregistering): Port device veth1_to_bond removed [ 2346.851027][T13769] netlink: 152 bytes leftover after parsing attributes in process `syz.0.49665'. [ 2349.175215][T13806] netlink: 152 bytes leftover after parsing attributes in process `syz.2.49680'. [ 2349.432587][T13820] netlink: 152 bytes leftover after parsing attributes in process `syz.2.49695'. [ 2350.284597][T13846] IPv6: Can't replace route, no match found [ 2350.495501][T13850] netlink: 152 bytes leftover after parsing attributes in process `syz.2.49699'. [ 2350.730416][T13859] netlink: 'syz.3.49701': attribute type 10 has an invalid length. [ 2350.769478][T13859] netlink: 40 bytes leftover after parsing attributes in process `syz.3.49701'. [ 2350.809762][T13859] device dummy0 entered promiscuous mode [ 2350.844914][T13859] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 2352.066193][T13885] netlink: 152 bytes leftover after parsing attributes in process `syz.0.49712'. [ 2352.739194][T13898] device veth1_macvtap left promiscuous mode [ 2352.745369][T13898] device macsec0 left promiscuous mode [ 2352.836894][T13900] device veth1_macvtap entered promiscuous mode [ 2352.843273][T13900] device macsec0 entered promiscuous mode [ 2352.908354][T13900] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2352.926663][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2354.794520][T13950] netlink: 'syz.0.49738': attribute type 2 has an invalid length. [ 2354.803194][T13950] netlink: 'syz.0.49738': attribute type 8 has an invalid length. [ 2354.811723][T13950] netlink: 132 bytes leftover after parsing attributes in process `syz.0.49738'. [ 2356.798722][T13990] netlink: 'syz.1.49757': attribute type 1 has an invalid length. [ 2356.845102][T13990] netlink: 'syz.1.49757': attribute type 4 has an invalid length. [ 2356.886154][T13990] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.49757'. [ 2357.886792][T14007] netlink: 152 bytes leftover after parsing attributes in process `syz.4.49765'. [ 2361.673898][T14037] netlink: 152 bytes leftover after parsing attributes in process `syz.2.49777'. [ 2362.103567][T14046] delete_channel: no stack [ 2362.103911][T14047] netlink: 'syz.2.49781': attribute type 2 has an invalid length. [ 2362.129939][T14046] delete_channel: no stack [ 2362.200236][T14047] netlink: 'syz.2.49781': attribute type 8 has an invalid length. [ 2362.266133][T14047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.49781'. [ 2362.428774][T14057] netlink: 'syz.3.49784': attribute type 10 has an invalid length. [ 2362.891086][T14065] netlink: 'syz.1.49796': attribute type 2 has an invalid length. [ 2362.948358][T14065] netlink: 'syz.1.49796': attribute type 8 has an invalid length. [ 2363.016077][T14065] netlink: 132 bytes leftover after parsing attributes in process `syz.1.49796'. [ 2363.502302][T14082] netlink: 14 bytes leftover after parsing attributes in process `syz.0.49792'. [ 2363.884719][T14085] delete_channel: no stack [ 2363.896574][T14085] delete_channel: no stack [ 2364.547403][T14099] netlink: 'syz.2.49798': attribute type 10 has an invalid length. [ 2364.577601][T14104] netlink: 'syz.4.49803': attribute type 10 has an invalid length. [ 2364.595658][T14104] netlink: 40 bytes leftover after parsing attributes in process `syz.4.49803'. [ 2365.798542][T14128] delete_channel: no stack [ 2365.803343][T14128] delete_channel: no stack [ 2366.225077][T14147] netlink: 152 bytes leftover after parsing attributes in process `syz.2.49815'. [ 2366.863971][T14162] device syzkaller0 left promiscuous mode [ 2367.252923][T14169] delete_channel: no stack [ 2367.289539][T14169] delete_channel: no stack [ 2367.849600][T14192] netlink: 152 bytes leftover after parsing attributes in process `syz.3.49834'. [ 2368.121869][T14194] netlink: 'syz.3.49836': attribute type 13 has an invalid length. [ 2368.154249][T14194] netlink: 172 bytes leftover after parsing attributes in process `syz.3.49836'. [ 2372.289387][T14229] delete_channel: no stack [ 2372.293940][T14229] delete_channel: no stack [ 2372.976749][T14259] netlink: 'syz.2.49859': attribute type 10 has an invalid length. [ 2373.073422][T14259] team0: Device wg1 is of different type [ 2373.682568][T14272] netlink: 'syz.0.49865': attribute type 19 has an invalid length. [ 2373.707530][T14272] netlink: 156 bytes leftover after parsing attributes in process `syz.0.49865'. [ 2373.961802][T14289] netlink: 'syz.0.49874': attribute type 10 has an invalid length. [ 2374.060605][T14292] netlink: 142652 bytes leftover after parsing attributes in process `syz.1.49876'. [ 2374.511760][T14304] netlink: 'syz.0.49880': attribute type 27 has an invalid length. [ 2374.520256][T14304] netlink: 'syz.0.49880': attribute type 3 has an invalid length. [ 2374.532589][T14304] netlink: 132 bytes leftover after parsing attributes in process `syz.0.49880'. [ 2376.081755][T14367] netlink: 'syz.4.49905': attribute type 19 has an invalid length. [ 2376.097890][T14367] netlink: 156 bytes leftover after parsing attributes in process `syz.4.49905'. [ 2377.137876][T14400] netlink: 'syz.3.49920': attribute type 10 has an invalid length. [ 2377.474717][T14413] netlink: 'syz.3.49925': attribute type 19 has an invalid length. [ 2377.513114][T14413] netlink: 156 bytes leftover after parsing attributes in process `syz.3.49925'. [ 2378.361905][T14443] netlink: 'syz.4.49935': attribute type 10 has an invalid length. [ 2379.135385][T14465] netlink: 'syz.1.49941': attribute type 19 has an invalid length. [ 2379.162552][T14465] netlink: 156 bytes leftover after parsing attributes in process `syz.1.49941'. [ 2380.098449][T14497] netlink: 'syz.1.49954': attribute type 10 has an invalid length. [ 2381.829502][T14532] netlink: 'syz.1.49969': attribute type 4 has an invalid length. [ 2381.846850][T14532] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.49969'. [ 2381.878983][T14535] netlink: 'syz.1.49969': attribute type 17 has an invalid length. [ 2381.910435][T14535] netlink: 148 bytes leftover after parsing attributes in process `syz.1.49969'. [ 2383.327853][T14581] netlink: 'syz.2.49998': attribute type 29 has an invalid length. [ 2383.355641][T14583] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.49999'. [ 2383.379723][T14581] netlink: 'syz.2.49998': attribute type 29 has an invalid length. [ 2383.621547][T14601] netlink: 'syz.2.49992': attribute type 12 has an invalid length. [ 2383.761431][T14609] netlink: 14538 bytes leftover after parsing attributes in process `syz.0.50000'. [ 2383.919397][T14618] device syzkaller0 left promiscuous mode [ 2383.969908][T14621] netlink: 'syz.3.50006': attribute type 29 has an invalid length. [ 2384.003932][T14621] netlink: 'syz.3.50006': attribute type 29 has an invalid length. [ 2384.049411][T14625] netlink: 'syz.2.50015': attribute type 27 has an invalid length. [ 2384.078265][T14625] netlink: 132 bytes leftover after parsing attributes in process `syz.2.50015'. [ 2384.333488][T14638] validate_nla: 1 callbacks suppressed [ 2384.333521][T14638] netlink: 'syz.3.50012': attribute type 12 has an invalid length. [ 2385.121646][T14659] netlink: 'syz.3.50021': attribute type 27 has an invalid length. [ 2385.156369][T14659] netlink: 'syz.3.50021': attribute type 3 has an invalid length. [ 2385.164784][T14659] netlink: 132 bytes leftover after parsing attributes in process `syz.3.50021'. [ 2385.300189][T14672] netlink: 'syz.4.50026': attribute type 12 has an invalid length. [ 2385.375110][T14674] netlink: 'syz.0.50027': attribute type 4 has an invalid length. [ 2385.423674][T14674] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.50027'. [ 2385.465013][T14678] netlink: 'syz.0.50027': attribute type 17 has an invalid length. [ 2385.504421][T14678] netlink: 148 bytes leftover after parsing attributes in process `syz.0.50027'. [ 2386.341113][T14699] netlink: 132 bytes leftover after parsing attributes in process `syz.4.50036'. [ 2386.415617][T14699] netlink: 'syz.4.50036': attribute type 10 has an invalid length. [ 2386.436587][T14699] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.50036'. [ 2386.510745][T14699] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2386.617035][T14708] netlink: 14538 bytes leftover after parsing attributes in process `syz.1.50039'. [ 2387.643163][T14738] netlink: 'syz.3.50051': attribute type 10 has an invalid length. [ 2387.854056][T14743] netlink: 14538 bytes leftover after parsing attributes in process `syz.2.50052'. [ 2389.422054][T14781] netlink: 'syz.2.50066': attribute type 10 has an invalid length. [ 2389.623214][T14792] netlink: 'syz.0.50073': attribute type 4 has an invalid length. [ 2389.647176][T14792] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.50073'. [ 2389.774071][T14796] netlink: 'syz.3.50075': attribute type 39 has an invalid length. [ 2389.976049][T14800] netlink: 'syz.2.50077': attribute type 10 has an invalid length. [ 2391.555895][T14847] netlink: 'syz.0.50094': attribute type 10 has an invalid length. [ 2391.913662][T14850] netlink: 2259 bytes leftover after parsing attributes in process `syz.4.50098'. [ 2391.990618][T14853] netlink: 'syz.0.50099': attribute type 10 has an invalid length. [ 2392.296499][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2393.755732][T14914] netlink: 'syz.3.50121': attribute type 10 has an invalid length. [ 2393.978439][T14920] netlink: 'syz.1.50123': attribute type 21 has an invalid length. [ 2393.999159][T14926] netlink: 'syz.2.50126': attribute type 4 has an invalid length. [ 2394.136108][T14926] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.50126'. [ 2394.790117][T14954] netlink: 'syz.4.50135': attribute type 10 has an invalid length. [ 2395.097229][T14968] netlink: 'syz.4.50137': attribute type 10 has an invalid length. [ 2395.403864][T14975] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.50154'. [ 2395.444552][T14975] netlink: 'syz.0.50154': attribute type 10 has an invalid length. [ 2395.501569][T14982] netlink: 'syz.4.50142': attribute type 4 has an invalid length. [ 2395.514549][T14982] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.50142'. [ 2395.719999][T15002] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.50155'. [ 2395.730137][T15002] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2395.739774][T15002] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2395.773930][T15001] netlink: 'syz.1.50153': attribute type 10 has an invalid length. [ 2395.927358][T15001] syz.1.50153 (15001) used greatest stack depth: 18416 bytes left [ 2396.037646][T15009] netlink: 'syz.1.50158': attribute type 10 has an invalid length. [ 2397.049844][T15048] netlink: 'syz.0.50175': attribute type 10 has an invalid length. [ 2397.407511][T15060] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.50179'. [ 2397.834981][T15085] netlink: 'syz.2.50188': attribute type 10 has an invalid length. [ 2397.844362][T15089] netlink: 'syz.3.50191': attribute type 1 has an invalid length. [ 2397.853223][T15089] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.50191'. [ 2398.076857][T15107] netlink: 'syz.1.50199': attribute type 4 has an invalid length. [ 2398.085792][T15107] netlink: 152 bytes leftover after parsing attributes in process `syz.1.50199'. [ 2399.522708][T15161] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.50218'. [ 2400.163153][T15170] netlink: 'syz.0.50224': attribute type 10 has an invalid length. [ 2400.198228][T15175] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.50227'. [ 2400.258488][T15175] netlink: 'syz.2.50227': attribute type 10 has an invalid length. [ 2401.079978][T15219] netlink: 'syz.3.50242': attribute type 29 has an invalid length. [ 2401.128593][T15219] netlink: 'syz.3.50242': attribute type 29 has an invalid length. [ 2401.203422][T15219] netlink: 'syz.3.50242': attribute type 29 has an invalid length. [ 2401.276263][T15221] netlink: 'syz.3.50242': attribute type 1 has an invalid length. [ 2401.322054][T15221] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.50242'. [ 2401.733437][T15234] netlink: 'syz.4.50250': attribute type 3 has an invalid length. [ 2401.776111][T15234] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.50250'. [ 2401.863713][T15239] netlink: 'syz.3.50253': attribute type 1 has an invalid length. [ 2401.878656][T15239] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.50253'. [ 2402.508803][T15268] netlink: 3 bytes leftover after parsing attributes in process `syz.4.50264'. [ 2402.675489][T15273] netlink: 'syz.0.50266': attribute type 1 has an invalid length. [ 2402.720185][T15273] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.50266'. [ 2403.195463][T15284] netlink: 132 bytes leftover after parsing attributes in process `syz.0.50270'. [ 2403.414322][T15295] netlink: 'syz.0.50284': attribute type 3 has an invalid length. [ 2403.423007][T15295] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.50284'. [ 2403.494534][T15292] netlink: 76 bytes leftover after parsing attributes in process `syz.2.50275'. [ 2403.631467][T15300] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.50288'. [ 2403.768906][T15307] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.50280'. [ 2403.778415][T15310] netlink: 3 bytes leftover after parsing attributes in process `syz.1.50279'. [ 2403.806788][T15312] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.50280'. [ 2404.013469][T15307] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.50280'. [ 2405.384195][T15363] validate_nla: 5 callbacks suppressed [ 2405.384230][T15363] netlink: 'syz.2.50301': attribute type 2 has an invalid length. [ 2405.551343][T15371] netlink: 'syz.1.50303': attribute type 3 has an invalid length. [ 2406.087009][T15390] netlink: 'syz.3.50312': attribute type 10 has an invalid length. [ 2406.164678][T15395] netlink: 'syz.4.50309': attribute type 15 has an invalid length. [ 2406.178262][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.184850][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.209902][T15395] netlink: 'syz.4.50309': attribute type 4 has an invalid length. [ 2406.227356][T15395] netlink: 'syz.4.50309': attribute type 5 has an invalid length. [ 2406.241298][T15395] netlink: 'syz.4.50309': attribute type 6 has an invalid length. [ 2406.249866][T15395] netlink: 'syz.4.50309': attribute type 7 has an invalid length. [ 2406.260766][T15395] netlink: 'syz.4.50309': attribute type 11 has an invalid length. [ 2406.276769][T15395] netlink: 'syz.4.50309': attribute type 15 has an invalid length. [ 2407.545095][T15440] __nla_validate_parse: 9 callbacks suppressed [ 2407.545113][T15440] netlink: 132 bytes leftover after parsing attributes in process `syz.3.50328'. [ 2407.973363][T15454] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.50333'. [ 2408.083831][T15460] netlink: 132 bytes leftover after parsing attributes in process `syz.4.50347'. [ 2409.157705][T15497] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.50350'. [ 2410.804948][T15542] netlink: 144 bytes leftover after parsing attributes in process `syz.1.50370'. [ 2410.816365][T15542] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2411.320245][T15552] netlink: 144 bytes leftover after parsing attributes in process `syz.2.50385'. [ 2411.359322][T15552] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2411.518037][T15561] validate_nla: 12 callbacks suppressed [ 2411.518079][T15561] netlink: 'syz.3.50377': attribute type 3 has an invalid length. [ 2411.557670][T15563] netlink: 'syz.2.50378': attribute type 15 has an invalid length. [ 2411.568381][T15565] netlink: 'syz.3.50377': attribute type 9 has an invalid length. [ 2411.574892][T15563] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.50378'. [ 2411.601793][T15563] netlink: 'syz.2.50378': attribute type 4 has an invalid length. [ 2411.602043][T15565] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.50377'. [ 2411.615999][T15561] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.50377'. [ 2411.629395][T15563] netlink: 'syz.2.50378': attribute type 5 has an invalid length. [ 2411.651046][T15563] netlink: 'syz.2.50378': attribute type 6 has an invalid length. [ 2411.676054][T15563] netlink: 'syz.2.50378': attribute type 7 has an invalid length. [ 2411.686272][T15563] netlink: 'syz.2.50378': attribute type 11 has an invalid length. [ 2411.716061][T15563] netlink: 'syz.2.50378': attribute type 15 has an invalid length. [ 2411.736069][T15563] netlink: 'syz.2.50378': attribute type 16 has an invalid length. [ 2411.744598][T15563] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.50378'. [ 2412.838920][T15602] netlink: set zone limit has 8 unknown bytes [ 2414.040636][T15626] __nla_validate_parse: 2 callbacks suppressed [ 2414.040669][T15626] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.50404'. [ 2414.137731][T15629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2414.145224][T15629] IPv6: NLM_F_CREATE should be set when creating new route [ 2414.152618][T15629] IPv6: NLM_F_CREATE should be set when creating new route [ 2414.160142][T15629] IPv6: NLM_F_CREATE should be set when creating new route [ 2414.507087][T15655] sctp: [Deprecated]: syz.4.50420 (pid 15655) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2414.507087][T15655] Use struct sctp_sack_info instead [ 2414.671798][T15661] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.50422'. [ 2415.259836][T15689] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.50435'. [ 2415.370167][T15697] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.50438'. [ 2415.550728][T15703] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.50449'. [ 2416.070197][T15735] netlink: set zone limit has 8 unknown bytes [ 2416.104477][T15734] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.50453'. [ 2416.771533][T15747] validate_nla: 19 callbacks suppressed [ 2416.771593][T15747] netlink: 'syz.1.50456': attribute type 2 has an invalid length. [ 2416.806287][T15747] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.50456'. [ 2417.163139][T15762] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.50459'. [ 2417.719638][T15776] netlink: 'syz.0.50464': attribute type 20 has an invalid length. [ 2417.784086][T15783] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.50470'. [ 2417.831564][T15783] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2417.853046][T15783] CPU: 1 PID: 15783 Comm: syz.1.50470 Not tainted syzkaller #0 [ 2417.860885][T15783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2417.871088][T15783] Call Trace: [ 2417.874403][T15783] [ 2417.877345][T15783] dump_stack_lvl+0x188/0x250 [ 2417.882091][T15783] ? show_regs_print_info+0x20/0x20 [ 2417.887509][T15783] ? load_image+0x410/0x410 [ 2417.892097][T15783] sysfs_warn_dup+0x8a/0xa0 [ 2417.896633][T15783] sysfs_do_create_link_sd+0xc0/0x110 [ 2417.902064][T15783] device_add+0x83b/0x1050 [ 2417.906658][T15783] wiphy_register+0x1e74/0x2c40 [ 2417.911578][T15783] ? cfg80211_event_work+0x40/0x40 [ 2417.917175][T15783] ? minstrel_ht_alloc+0x807/0x980 [ 2417.922421][T15783] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2417.928536][T15783] ieee80211_register_hw+0x2a03/0x3a60 [ 2417.934028][T15783] ? ieee80211_register_hw+0xa91/0x3a60 [ 2417.939881][T15783] ? ieee80211_tasklet_handler+0x20/0x20 [ 2417.945579][T15783] ? rcu_is_watching+0x11/0xa0 [ 2417.950456][T15783] ? hrtimer_init+0x10c/0x220 [ 2417.955164][T15783] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2417.961109][T15783] hwsim_new_radio_nl+0xa7d/0xc50 [ 2417.966186][T15783] genl_rcv_msg+0xd0b/0xfa0 [ 2417.971051][T15783] ? genl_bind+0x370/0x370 [ 2417.975528][T15783] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2417.980753][T15783] ? verify_lock_unused+0x140/0x140 [ 2417.986008][T15783] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2417.991775][T15783] ? perf_trace_lock+0x301/0x390 [ 2417.996747][T15783] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2418.003133][T15783] netlink_rcv_skb+0x1e9/0x430 [ 2418.007989][T15783] ? genl_bind+0x370/0x370 [ 2418.012432][T15783] ? netlink_ack+0xb10/0xb10 [ 2418.017182][T15783] ? down_read+0x1aa/0x2e0 [ 2418.021643][T15783] genl_rcv+0x24/0x40 [ 2418.025652][T15783] netlink_unicast+0x78f/0x940 [ 2418.030472][T15783] netlink_sendmsg+0x8ba/0xbe0 [ 2418.035310][T15783] ? netlink_getsockopt+0x570/0x570 [ 2418.040562][T15783] ? aa_sock_msg_perm+0x94/0x150 [ 2418.045528][T15783] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2418.050930][T15783] ? security_socket_sendmsg+0x7c/0xa0 [ 2418.056411][T15783] ? netlink_getsockopt+0x570/0x570 [ 2418.061787][T15783] ____sys_sendmsg+0x5be/0x8f0 [ 2418.066721][T15783] ? __sys_sendmsg_sock+0x30/0x30 [ 2418.071933][T15783] ? import_iovec+0x6f/0xa0 [ 2418.076580][T15783] ___sys_sendmsg+0x236/0x2e0 [ 2418.081317][T15783] ? __sys_sendmsg+0x290/0x290 [ 2418.086251][T15783] ? trace_event_raw_event_lock+0x250/0x250 [ 2418.092185][T15783] ? __might_fault+0xb3/0x110 [ 2418.097167][T15783] __se_sys_sendmsg+0x1b7/0x2a0 [ 2418.102182][T15783] ? __x64_sys_sendmsg+0x80/0x80 [ 2418.107380][T15783] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2418.113449][T15783] ? lockdep_hardirqs_on+0x94/0x140 [ 2418.118716][T15783] do_syscall_64+0x4c/0xa0 [ 2418.123154][T15783] ? clear_bhb_loop+0x30/0x80 [ 2418.128108][T15783] ? clear_bhb_loop+0x30/0x80 [ 2418.132805][T15783] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2418.138720][T15783] RIP: 0033:0x7fb2fa791e59 [ 2418.143246][T15783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2418.163347][T15783] RSP: 002b:00007fb2f89eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2418.172501][T15783] RAX: ffffffffffffffda RBX: 00007fb2faa0afa0 RCX: 00007fb2fa791e59 [ 2418.180508][T15783] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2418.188509][T15783] RBP: 00007fb2fa827e6f R08: 0000000000000000 R09: 0000000000000000 [ 2418.196507][T15783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2418.204510][T15783] R13: 00007fb2faa0b038 R14: 00007fb2faa0afa0 R15: 00007ffd487443c8 [ 2418.212553][T15783] [ 2418.488446][T15793] device syzkaller0 left promiscuous mode [ 2419.154939][T15823] netlink: 144 bytes leftover after parsing attributes in process `syz.1.50490'. [ 2420.191439][T15854] netlink: 'syz.3.50511': attribute type 28 has an invalid length. [ 2421.628652][T15904] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.50523'. [ 2421.639002][T15908] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2421.673858][T15904] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2421.708509][T15904] CPU: 0 PID: 15904 Comm: syz.4.50523 Not tainted syzkaller #0 [ 2421.716121][T15904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2421.726204][T15904] Call Trace: [ 2421.729495][T15904] [ 2421.732438][T15904] dump_stack_lvl+0x188/0x250 [ 2421.737130][T15904] ? show_regs_print_info+0x20/0x20 [ 2421.742373][T15904] ? load_image+0x410/0x410 [ 2421.746918][T15904] sysfs_warn_dup+0x8a/0xa0 [ 2421.751443][T15904] sysfs_do_create_link_sd+0xc0/0x110 [ 2421.756831][T15904] device_add+0x83b/0x1050 [ 2421.761274][T15904] wiphy_register+0x1e74/0x2c40 [ 2421.766393][T15904] ? cfg80211_event_work+0x40/0x40 [ 2421.771614][T15904] ? minstrel_ht_alloc+0x807/0x980 [ 2421.776745][T15904] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2421.783055][T15904] ieee80211_register_hw+0x2a03/0x3a60 [ 2421.788574][T15904] ? ieee80211_register_hw+0xa91/0x3a60 [ 2421.794173][T15904] ? ieee80211_tasklet_handler+0x20/0x20 [ 2421.799932][T15904] ? rcu_is_watching+0x11/0xa0 [ 2421.804721][T15904] ? hrtimer_init+0x10c/0x220 [ 2421.809416][T15904] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2421.815200][T15904] hwsim_new_radio_nl+0xa7d/0xc50 [ 2421.820355][T15904] genl_rcv_msg+0xd0b/0xfa0 [ 2421.824887][T15904] ? genl_bind+0x370/0x370 [ 2421.829330][T15904] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2421.834533][T15904] ? verify_lock_unused+0x140/0x140 [ 2421.839754][T15904] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2421.845486][T15904] ? perf_trace_lock+0x301/0x390 [ 2421.850461][T15904] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2421.856848][T15904] netlink_rcv_skb+0x1e9/0x430 [ 2421.861638][T15904] ? genl_bind+0x370/0x370 [ 2421.866067][T15904] ? netlink_ack+0xb10/0xb10 [ 2421.870672][T15904] ? down_read+0x1aa/0x2e0 [ 2421.875103][T15904] genl_rcv+0x24/0x40 [ 2421.879086][T15904] netlink_unicast+0x78f/0x940 [ 2421.883872][T15904] netlink_sendmsg+0x8ba/0xbe0 [ 2421.888659][T15904] ? netlink_getsockopt+0x570/0x570 [ 2421.893913][T15904] ? aa_sock_msg_perm+0x94/0x150 [ 2421.898874][T15904] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2421.904194][T15904] ? security_socket_sendmsg+0x7c/0xa0 [ 2421.909707][T15904] ? netlink_getsockopt+0x570/0x570 [ 2421.914934][T15904] ____sys_sendmsg+0x5be/0x8f0 [ 2421.919719][T15904] ? __sys_sendmsg_sock+0x30/0x30 [ 2421.924819][T15904] ? import_iovec+0x6f/0xa0 [ 2421.929349][T15904] ___sys_sendmsg+0x236/0x2e0 [ 2421.934048][T15904] ? __sys_sendmsg+0x290/0x290 [ 2421.938835][T15904] ? trace_event_raw_event_lock+0x250/0x250 [ 2421.944768][T15904] ? __might_fault+0xb3/0x110 [ 2421.949617][T15904] __se_sys_sendmsg+0x1b7/0x2a0 [ 2421.954493][T15904] ? __x64_sys_sendmsg+0x80/0x80 [ 2421.959438][T15904] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2421.965479][T15904] ? lockdep_hardirqs_on+0x94/0x140 [ 2421.970777][T15904] do_syscall_64+0x4c/0xa0 [ 2421.975341][T15904] ? clear_bhb_loop+0x30/0x80 [ 2421.980036][T15904] ? clear_bhb_loop+0x30/0x80 [ 2421.984731][T15904] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2421.990632][T15904] RIP: 0033:0x7f7445a70e59 [ 2421.995054][T15904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2422.014757][T15904] RSP: 002b:00007f7443cca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2422.023437][T15904] RAX: ffffffffffffffda RBX: 00007f7445ce9fa0 RCX: 00007f7445a70e59 [ 2422.031501][T15904] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2422.039585][T15904] RBP: 00007f7445b06e6f R08: 0000000000000000 R09: 0000000000000000 [ 2422.047758][T15904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2422.055768][T15904] R13: 00007f7445cea038 R14: 00007f7445ce9fa0 R15: 00007ffed29505f8 [ 2422.063812][T15904] [ 2422.753628][T15944] device syzkaller0 left promiscuous mode [ 2422.761568][T15944] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2423.141973][T15966] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.50546'. [ 2423.217592][T15966] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2423.225665][T15966] CPU: 1 PID: 15966 Comm: syz.2.50546 Not tainted syzkaller #0 [ 2423.233248][T15966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2423.243343][T15966] Call Trace: [ 2423.246678][T15966] [ 2423.249640][T15966] dump_stack_lvl+0x188/0x250 [ 2423.254361][T15966] ? show_regs_print_info+0x20/0x20 [ 2423.259595][T15966] ? load_image+0x410/0x410 [ 2423.264301][T15966] sysfs_warn_dup+0x8a/0xa0 [ 2423.268863][T15966] sysfs_do_create_link_sd+0xc0/0x110 [ 2423.274274][T15966] device_add+0x83b/0x1050 [ 2423.278929][T15966] wiphy_register+0x1e74/0x2c40 [ 2423.283833][T15966] ? cfg80211_event_work+0x40/0x40 [ 2423.289490][T15966] ? minstrel_ht_alloc+0x807/0x980 [ 2423.294737][T15966] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2423.301126][T15966] ieee80211_register_hw+0x2a03/0x3a60 [ 2423.306660][T15966] ? ieee80211_register_hw+0xa91/0x3a60 [ 2423.312234][T15966] ? ieee80211_tasklet_handler+0x20/0x20 [ 2423.317882][T15966] ? rcu_is_watching+0x11/0xa0 [ 2423.322863][T15966] ? hrtimer_init+0x10c/0x220 [ 2423.327560][T15966] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2423.333304][T15966] hwsim_new_radio_nl+0xa7d/0xc50 [ 2423.338371][T15966] genl_rcv_msg+0xd0b/0xfa0 [ 2423.342949][T15966] ? genl_bind+0x370/0x370 [ 2423.347529][T15966] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2423.352753][T15966] ? verify_lock_unused+0x140/0x140 [ 2423.357979][T15966] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2423.363749][T15966] ? perf_trace_lock+0x301/0x390 [ 2423.368729][T15966] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2423.375122][T15966] netlink_rcv_skb+0x1e9/0x430 [ 2423.379917][T15966] ? genl_bind+0x370/0x370 [ 2423.384365][T15966] ? netlink_ack+0xb10/0xb10 [ 2423.389003][T15966] ? down_read+0x1aa/0x2e0 [ 2423.393451][T15966] genl_rcv+0x24/0x40 [ 2423.397457][T15966] netlink_unicast+0x78f/0x940 [ 2423.402285][T15966] netlink_sendmsg+0x8ba/0xbe0 [ 2423.407104][T15966] ? netlink_getsockopt+0x570/0x570 [ 2423.412340][T15966] ? aa_sock_msg_perm+0x94/0x150 [ 2423.417449][T15966] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2423.422952][T15966] ? security_socket_sendmsg+0x7c/0xa0 [ 2423.428434][T15966] ? netlink_getsockopt+0x570/0x570 [ 2423.433813][T15966] ____sys_sendmsg+0x5be/0x8f0 [ 2423.438631][T15966] ? __sys_sendmsg_sock+0x30/0x30 [ 2423.443850][T15966] ? import_iovec+0x6f/0xa0 [ 2423.448403][T15966] ___sys_sendmsg+0x236/0x2e0 [ 2423.453121][T15966] ? __sys_sendmsg+0x290/0x290 [ 2423.457938][T15966] ? trace_event_raw_event_lock+0x250/0x250 [ 2423.463878][T15966] ? __might_fault+0xb3/0x110 [ 2423.468630][T15966] __se_sys_sendmsg+0x1b7/0x2a0 [ 2423.473510][T15966] ? __x64_sys_sendmsg+0x80/0x80 [ 2423.478467][T15966] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2423.484672][T15966] ? lockdep_hardirqs_on+0x94/0x140 [ 2423.489914][T15966] do_syscall_64+0x4c/0xa0 [ 2423.494369][T15966] ? clear_bhb_loop+0x30/0x80 [ 2423.499088][T15966] ? clear_bhb_loop+0x30/0x80 [ 2423.503807][T15966] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2423.509827][T15966] RIP: 0033:0x7f3d747b8e59 [ 2423.514274][T15966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2423.533908][T15966] RSP: 002b:00007f3d72a12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2423.542348][T15966] RAX: ffffffffffffffda RBX: 00007f3d74a31fa0 RCX: 00007f3d747b8e59 [ 2423.550429][T15966] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2423.558449][T15966] RBP: 00007f3d7484ee6f R08: 0000000000000000 R09: 0000000000000000 [ 2423.566631][T15966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2423.574633][T15966] R13: 00007f3d74a32038 R14: 00007f3d74a31fa0 R15: 00007ffe0ebeaa18 [ 2423.582771][T15966] [ 2423.793793][T15971] netlink: 'syz.0.50549': attribute type 28 has an invalid length. [ 2424.786138][T16008] netlink: 'syz.1.50562': attribute type 28 has an invalid length. [ 2425.209677][T16016] netlink: 144 bytes leftover after parsing attributes in process `syz.2.50578'. [ 2426.333441][T16042] netlink: 'syz.4.50574': attribute type 10 has an invalid length. [ 2428.167991][T16091] device syzkaller0 left promiscuous mode [ 2428.174775][T16089] netlink: 'syz.1.50606': attribute type 10 has an invalid length. [ 2428.752417][T16127] netlink: 'syz.0.50611': attribute type 3 has an invalid length. [ 2428.781062][T16127] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.50611'. [ 2428.839745][T16130] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.50615'. [ 2428.947642][T16137] netlink: 'syz.2.50618': attribute type 10 has an invalid length. [ 2429.408646][T16153] netlink: 'syz.0.50633': attribute type 10 has an invalid length. [ 2429.471224][T16153] netlink: 156 bytes leftover after parsing attributes in process `syz.0.50633'. [ 2429.833170][T16172] netlink: 132 bytes leftover after parsing attributes in process `syz.3.50629'. [ 2430.363326][T16200] netlink: 'syz.1.50643': attribute type 7 has an invalid length. [ 2430.392226][T16200] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.50643'. [ 2430.819172][T16229] netlink: 'syz.3.50654': attribute type 10 has an invalid length. [ 2433.162632][T16283] device syzkaller0 entered promiscuous mode [ 2433.483661][T16299] netlink: 60 bytes leftover after parsing attributes in process `syz.4.50679'. [ 2433.671164][T16306] netlink: 'syz.4.50682': attribute type 7 has an invalid length. [ 2433.696157][T16306] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.50682'. [ 2433.991250][T16328] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.50690'. [ 2434.277426][T16341] netlink: 132 bytes leftover after parsing attributes in process `syz.2.50703'. [ 2434.460160][T16348] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.50695'. [ 2434.571188][T16352] netlink: 'syz.2.50696': attribute type 10 has an invalid length. [ 2434.669054][T16352] netlink: 156 bytes leftover after parsing attributes in process `syz.2.50696'. [ 2435.056624][T16329] chnl_net:caif_netlink_parms(): no params data found [ 2435.262139][T16329] bridge0: port 1(bridge_slave_0) entered blocking state [ 2435.319074][T16329] bridge0: port 1(bridge_slave_0) entered disabled state [ 2435.346837][T16329] device bridge_slave_0 entered promiscuous mode [ 2435.375353][T16329] bridge0: port 2(bridge_slave_1) entered blocking state [ 2435.392941][T16382] sctp: [Deprecated]: syz.4.50704 (pid 16382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2435.392941][T16382] Use struct sctp_sack_info instead [ 2435.417496][T16329] bridge0: port 2(bridge_slave_1) entered disabled state [ 2435.433909][T16329] device bridge_slave_1 entered promiscuous mode [ 2435.461571][T16383] netlink: 'syz.2.50702': attribute type 7 has an invalid length. [ 2435.482763][T16383] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.50702'. [ 2435.489820][T16329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2435.519593][T16329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2435.548999][T16385] netlink: 14524 bytes leftover after parsing attributes in process `syz.3.50705'. [ 2435.590859][T16329] team0: Port device team_slave_0 added [ 2435.605420][T16329] team0: Port device team_slave_1 added [ 2435.632447][T16329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2435.639803][T16329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2435.667328][T16329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2435.680515][T16329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2435.693586][T16329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2435.720204][T16329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2435.759458][T16329] device hsr_slave_0 entered promiscuous mode [ 2435.766984][T16329] device hsr_slave_1 entered promiscuous mode [ 2436.128638][T16392] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.50709'. [ 2436.177010][T12457] Bluetooth: hci0: command 0x0409 tx timeout [ 2436.217559][T16394] netlink: 132 bytes leftover after parsing attributes in process `syz.4.50708'. [ 2436.265246][T16397] device syzkaller0 entered promiscuous mode [ 2436.511215][T16399] netlink: 76 bytes leftover after parsing attributes in process `syz.3.50711'. [ 2436.569466][T16329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2436.618467][T16329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2436.665044][T16329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2436.721463][T16329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2437.052215][T16329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2437.094153][ T5956] tipc: Left network mode [ 2437.129062][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2437.162043][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2437.192930][T16329] 8021q: adding VLAN 0 to HW filter on device team0 [ 2437.368738][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2437.400387][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2437.452305][T30785] bridge0: port 1(bridge_slave_0) entered blocking state [ 2437.459484][T30785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2437.476038][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2437.487613][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2437.496689][T30785] bridge0: port 2(bridge_slave_1) entered blocking state [ 2437.503772][T30785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2437.512680][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2437.533778][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2437.544194][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2437.565849][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2437.577264][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2437.659093][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2437.668146][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2437.677555][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2437.689004][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2437.698308][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2437.708603][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2437.719236][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2437.732409][T16329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2437.855308][T16435] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.50723'. [ 2438.088867][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2438.097270][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2438.121687][T16329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2438.147705][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2438.161303][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2438.195369][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2438.214871][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2438.237380][T16329] device veth0_vlan entered promiscuous mode [ 2438.256494][T27647] Bluetooth: hci0: command 0x041b tx timeout [ 2438.264074][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2438.274674][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2438.289429][T16329] device veth1_vlan entered promiscuous mode [ 2438.321863][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2438.336833][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2438.345704][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2438.357317][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2438.369218][T16329] device veth0_macvtap entered promiscuous mode [ 2438.411135][T16329] device veth1_macvtap entered promiscuous mode [ 2438.439774][T16329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2438.448736][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2438.460458][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2438.470117][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2438.480236][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2438.493009][T16329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2438.520128][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2438.534729][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2438.548875][T16329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.558412][T16329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.569751][T16329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.579149][T16329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.700965][T24839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2438.714165][T24839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2438.745703][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2438.788413][T26967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2438.797623][T26967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2438.805661][T24839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2439.207258][T16457] netlink: 132 bytes leftover after parsing attributes in process `syz.0.50728'. [ 2439.648151][T16471] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.50736'. [ 2440.039011][ T5956] device hsr_slave_1 left promiscuous mode [ 2440.055679][ T5956] bridge0: port 3(dummy0) entered disabled state [ 2440.090107][ T5956] device bridge_slave_0 left promiscuous mode [ 2440.101481][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 2440.115463][ T5956] device veth1_vlan left promiscuous mode [ 2440.122152][ T5956] device veth0_vlan left promiscuous mode [ 2440.336275][T27647] Bluetooth: hci0: command 0x040f tx timeout [ 2442.306644][T16523] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.50752'. [ 2442.416265][T29056] Bluetooth: hci0: command 0x0419 tx timeout [ 2446.534895][T16563] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.50767'. [ 2446.553766][T16553] chnl_net:caif_netlink_parms(): no params data found [ 2446.702817][T16553] bridge0: port 1(bridge_slave_0) entered blocking state [ 2446.726047][T16553] bridge0: port 1(bridge_slave_0) entered disabled state [ 2446.739023][T16553] device bridge_slave_0 entered promiscuous mode [ 2446.757916][T16553] bridge0: port 2(bridge_slave_1) entered blocking state [ 2446.765367][T16553] bridge0: port 2(bridge_slave_1) entered disabled state [ 2446.775763][T16553] device bridge_slave_1 entered promiscuous mode [ 2446.956412][T16553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2446.990637][T16553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2447.100790][T16553] team0: Port device team_slave_0 added [ 2447.186890][T16553] team0: Port device team_slave_1 added [ 2447.229270][T16553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2447.256030][T16553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2447.317536][T16553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2447.353323][T16553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2447.386261][T16553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2447.486077][T16553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2447.709727][T16553] device hsr_slave_0 entered promiscuous mode [ 2447.727208][T16553] device hsr_slave_1 entered promiscuous mode [ 2447.736024][T16553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2447.743790][T16553] Cannot create hsr debugfs directory [ 2448.176079][T18791] Bluetooth: hci4: command 0x0409 tx timeout [ 2448.519955][T16588] netlink: 76 bytes leftover after parsing attributes in process `syz.0.50777'. [ 2448.630177][T16591] netlink: 'syz.0.50779': attribute type 1 has an invalid length. [ 2448.676062][T16591] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.50779'. [ 2448.722586][T16553] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2448.766787][T16553] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2448.799751][T16553] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2448.821707][T16553] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2449.004659][T16553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2449.099897][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2449.118330][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2449.136442][T16553] 8021q: adding VLAN 0 to HW filter on device team0 [ 2449.184469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2449.195558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2449.205643][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 2449.212824][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2449.241131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2449.258088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2449.278271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2449.295518][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 2449.302727][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2449.402561][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2449.421737][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2449.458976][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2449.492516][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2449.530744][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2449.569092][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2449.598005][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2449.646314][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2449.676435][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2449.710194][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2449.726941][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2449.758256][T16553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2450.263042][ T4386] Bluetooth: hci4: command 0x041b tx timeout [ 2450.281448][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2450.303221][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2450.350012][T16553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2450.933973][T16632] netlink: 'syz.2.50791': attribute type 1 has an invalid length. [ 2450.966648][T16632] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.50791'. [ 2451.009894][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2451.044878][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2451.104427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2451.133100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2451.167934][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2451.188579][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2451.216640][T16553] device veth0_vlan entered promiscuous mode [ 2451.242979][T16553] device veth1_vlan entered promiscuous mode [ 2451.332090][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2451.362855][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2451.397697][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2451.426045][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2451.460618][T16553] device veth0_macvtap entered promiscuous mode [ 2451.520131][T16553] device veth1_macvtap entered promiscuous mode [ 2451.543254][T16553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2451.554218][T16553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2451.578965][T16553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2451.589297][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2451.599128][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2451.609149][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2451.628542][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2451.647969][T16553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2451.691206][T16553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2451.705465][T16553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2451.714308][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2451.723772][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2451.746969][T16553] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2451.755813][T16553] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2451.776208][T16553] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2451.788843][T16553] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2451.912566][T30773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2451.934498][T30773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2451.943979][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2451.976099][T30773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2451.994872][T30773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2452.008936][T30773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2452.310061][T16663] device syzkaller0 entered promiscuous mode [ 2452.338416][ T6699] Bluetooth: hci4: command 0x040f tx timeout [ 2452.422236][T16671] netlink: 14524 bytes leftover after parsing attributes in process `syz.1.50803'. [ 2452.641402][T16681] netlink: 76 bytes leftover after parsing attributes in process `syz.1.50808'. [ 2453.022783][T16690] device syzkaller0 entered promiscuous mode [ 2453.241223][T16699] device syzkaller0 entered promiscuous mode [ 2453.266703][T16700] netlink: 'syz.0.50817': attribute type 10 has an invalid length. [ 2453.382475][T16705] netlink: 'syz.0.50817': attribute type 9 has an invalid length. [ 2453.408394][T16705] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.50817'. [ 2453.432077][T16700] team0: Port device geneve1 added [ 2453.818881][T16716] netlink: 76 bytes leftover after parsing attributes in process `syz.2.50822'. [ 2454.418400][T16741] netlink: 'syz.1.50833': attribute type 1 has an invalid length. [ 2454.428581][T31781] Bluetooth: hci4: command 0x0419 tx timeout [ 2454.440058][T16741] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.50833'. [ 2454.452347][T16743] netlink: 76 bytes leftover after parsing attributes in process `syz.4.50834'. [ 2454.601216][T16754] delete_channel: no stack [ 2454.614859][T16749] device syzkaller0 entered promiscuous mode [ 2455.011519][T16770] netlink: 76 bytes leftover after parsing attributes in process `syz.2.50846'. [ 2462.576057][T16788] netlink: 'syz.4.50850': attribute type 1 has an invalid length. [ 2462.584172][T16788] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.50850'. [ 2462.776815][T16789] chnl_net:caif_netlink_parms(): no params data found [ 2462.842043][T16789] bridge0: port 1(bridge_slave_0) entered blocking state [ 2462.850433][T16789] bridge0: port 1(bridge_slave_0) entered disabled state [ 2462.859109][T16789] device bridge_slave_0 entered promiscuous mode [ 2462.868304][T16789] bridge0: port 2(bridge_slave_1) entered blocking state [ 2462.875411][T16789] bridge0: port 2(bridge_slave_1) entered disabled state [ 2462.883978][T16789] device bridge_slave_1 entered promiscuous mode [ 2462.903137][T16789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2462.915025][T16789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2462.937915][T16789] team0: Port device team_slave_0 added [ 2462.945524][T16789] team0: Port device team_slave_1 added [ 2462.962852][T16789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2462.970075][T16789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2462.997312][T16789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2463.010018][T16789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2463.017271][T16789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2463.043887][T16789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2463.070998][T16789] device hsr_slave_0 entered promiscuous mode [ 2463.077726][T16789] device hsr_slave_1 entered promiscuous mode [ 2463.084712][T16789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2463.092642][T16789] Cannot create hsr debugfs directory [ 2463.175342][T16789] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2463.186444][T16789] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2463.195354][T16789] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2463.205010][T16789] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2463.225410][T16789] bridge0: port 2(bridge_slave_1) entered blocking state [ 2463.233050][T16789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2463.240600][T16789] bridge0: port 1(bridge_slave_0) entered blocking state [ 2463.247792][T16789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2463.290702][T16789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2463.304002][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2463.313450][T30785] bridge0: port 1(bridge_slave_0) entered disabled state [ 2463.321914][T30785] bridge0: port 2(bridge_slave_1) entered disabled state [ 2463.330482][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2463.344467][T16789] 8021q: adding VLAN 0 to HW filter on device team0 [ 2463.357276][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2463.365745][T30785] bridge0: port 1(bridge_slave_0) entered blocking state [ 2463.373266][T30785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2463.387185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2463.395692][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 2463.403076][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2463.424803][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2463.433705][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2463.449056][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2463.462472][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2463.474341][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2463.488444][T16789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2463.568855][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2463.577180][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2463.590961][T16789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2463.696553][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2463.720028][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2463.729317][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2463.737519][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2463.748757][T16789] device veth0_vlan entered promiscuous mode [ 2463.761201][T16789] device veth1_vlan entered promiscuous mode [ 2463.783156][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2463.791922][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2463.804345][T16789] device veth0_macvtap entered promiscuous mode [ 2463.814000][T16789] device veth1_macvtap entered promiscuous mode [ 2463.832680][T16789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2463.844680][T16789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2463.855449][T16789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2463.866137][T16789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2463.879393][T16789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2463.888361][T30773] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2463.897578][T30773] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2463.906049][T30773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2463.914829][T30773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2463.927870][T16789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2463.938578][T16789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2463.948711][T16789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2463.960094][T16789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2463.971766][T16789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2463.980027][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2463.990349][T30785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2464.004233][T16789] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2464.013140][T16789] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2464.022619][T16789] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2464.032984][T16789] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2464.093966][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2464.109322][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2464.117658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2464.135306][T26967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2464.143562][T26967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2464.154427][T26967] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2464.521465][T16832] netlink: 76 bytes leftover after parsing attributes in process `syz.5.50861'. [ 2464.571162][T16833] netlink: 'syz.4.50863': attribute type 10 has an invalid length. [ 2464.645860][T16833] team0: Port device geneve1 added [ 2464.656044][T29057] Bluetooth: hci5: command 0x0409 tx timeout [ 2464.720696][T16833] netlink: 'syz.4.50863': attribute type 9 has an invalid length. [ 2464.730407][T16833] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.50863'. [ 2466.736120][ T6699] Bluetooth: hci5: command 0x041b tx timeout [ 2467.618766][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.625447][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.816105][T19200] Bluetooth: hci5: command 0x040f tx timeout [ 2470.906151][T12457] Bluetooth: hci5: command 0x0419 tx timeout [ 2529.057468][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.064265][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2556.736305][T31781] Bluetooth: hci0: command 0x0406 tx timeout [ 2572.096132][T29057] Bluetooth: hci4: command 0x0406 tx timeout [ 2587.456145][T31781] Bluetooth: hci5: command 0x0406 tx timeout [ 2590.497604][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.503899][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.938906][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.945257][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.377293][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.383618][ T1422] ieee802154 phy1 wpan1: encryption failed: -22