last executing test programs: 20.249916499s ago: executing program 0 (id=38617): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x400c001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x90}, 0x2160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 19.790765478s ago: executing program 0 (id=38620): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, 0x0, 0x0}, 0x20) r5 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x0, 0x0, &(0x7f0000000e00)='syzkaller\x00', 0x1}, 0x94) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x34000, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 18.72098586s ago: executing program 0 (id=38636): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x11, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x7, 0xffeff038}, {0x6, 0x0, 0x0, 0xfffffffc}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 18.326748428s ago: executing program 0 (id=38630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000500), &(0x7f00000001c0)}, 0x20) gettid() r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1671], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24) 17.613021332s ago: executing program 0 (id=38642): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000002980), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x4080b000, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0) 16.22873388s ago: executing program 3 (id=38656): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000000020000850000008600"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000029008188040f80ec59acbc0413a181003100000002010000000000000e000a000f00000002", 0x29}], 0x1}, 0x40) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 16.2280949s ago: executing program 0 (id=38665): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) 16.041752314s ago: executing program 3 (id=38658): syz_open_procfs$namespace(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xef, 0x5, 0xd, 0x7, 0x0, 0xfffffffffffffff7, 0x7a5d4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xaaa3, 0x2, @perf_bp={0x0}, 0x2, 0x576b, 0x2, 0x8, 0xc6, 0xaed, 0x3, 0x0, 0xfffffff9, 0x0, 0x6}, 0x0, 0x100000000000000f, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, &(0x7f0000000100)) 15.77747439s ago: executing program 3 (id=38661): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000000000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x3) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a204d8c71ef2685634a8270e7123c00"/30], 0xffdd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0000000b000000020005004000000042000000", @ANYRES32, @ANYBLOB="04000000000000000000", @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000040), 0x1006, r1, 0x0, 0xd88d02a0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a90402000000000000", 0x17}], 0x1}, 0x4090) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) 15.77729732s ago: executing program 4 (id=38662): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 15.609883013s ago: executing program 1 (id=38664): r0 = gettid() perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x1008, 0x2, 0xfffffffe}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x41000, 0x60}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xc3, 0x4}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8e}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x91f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000088) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 15.609446863s ago: executing program 4 (id=38666): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x8}, 0x104002, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x45, 0x0, 0x2, 0xfffffffe}]}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)='\'\\V.\x00') socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x2}, {0x6, 0x0, 0xfe, 0x10000000}]}) 15.499316695s ago: executing program 1 (id=38667): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000002980), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x4080b000, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0) 15.379882157s ago: executing program 3 (id=38670): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xcb, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}], 0x20}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 15.23012208s ago: executing program 4 (id=38673): syz_open_procfs$namespace(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xef, 0x5, 0xd, 0x7, 0x0, 0xfffffffffffffff7, 0x7a5d4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xaaa3, 0x2, @perf_bp={0x0}, 0x2, 0x576b, 0x2, 0x8, 0xc6, 0xaed, 0x3, 0x0, 0xfffffff9, 0x0, 0x6}, 0x0, 0x100000000000000f, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, &(0x7f0000000100)) 15.155959812s ago: executing program 2 (id=38674): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, 0x0, &(0x7f0000000100)}, 0x20) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 14.980983296s ago: executing program 2 (id=38675): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000900)=@in6={0xa, 0x4e1d, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000180)}, 0x40000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1}, &(0x7f0000000500), 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x69}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1d, 0x0, 0x0, 0x8000}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 14.980322745s ago: executing program 1 (id=38685): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 14.976160116s ago: executing program 4 (id=38686): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000002980), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x4080b000, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0) 14.811961189s ago: executing program 1 (id=38676): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000300007e180000000000000000000009000000009500000200000000beaa0000000000009500000000000000a2ce73f6bb19c5601f673f533c0c743bf1a366826f82be4a42a53eaeb20819bbaacc0b8d34d5861ca8d4dd875b4f9584fbf10c67cccd279af342cb6f464f73267d89c2eb1c4efa82557fedd4cf559ca32f"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x7d, &(0x7f0000000000)=r1, 0x4) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f", 0x14}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 14.702140611s ago: executing program 2 (id=38677): perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90724fc60040011000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 12.454277227s ago: executing program 1 (id=38676): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000300007e180000000000000000000009000000009500000200000000beaa0000000000009500000000000000a2ce73f6bb19c5601f673f533c0c743bf1a366826f82be4a42a53eaeb20819bbaacc0b8d34d5861ca8d4dd875b4f9584fbf10c67cccd279af342cb6f464f73267d89c2eb1c4efa82557fedd4cf559ca32f"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x7d, &(0x7f0000000000)=r1, 0x4) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f", 0x14}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 356.059942ms ago: executing program 32 (id=38665): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) 352.885772ms ago: executing program 1 (id=38679): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000000000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x3) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a204d8c71ef2685634a8270e7123c00"/30], 0xffdd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0000000b000000020005004000000042000000", @ANYRES32, @ANYBLOB="04000000000000000000", @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000040), 0x1006, r1, 0x0, 0xd88d02a0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a90402000000000000", 0x17}], 0x1}, 0x4090) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) 352.475982ms ago: executing program 3 (id=38680): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001200)=@ethernet={0x6, @local}, 0x80, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="b800000000000000880000000300000082bced2ef1914e60643bf106faca0001ac102a710bccc90b1279321ca4c2b8fb60a6d4ba1929c7d1f4171cf44d3f7d7784d71b939d707daba3e960c5f648b662ef9e92bf02680cad3626bd4e182030cc2cc75f12ca21e4129f2da1200de516e94ee948bbf910180ea851b13a7644097701a02562fcfd0b6ccaad551b6a4668c558e8689be4503ea5d9"], 0xb8}, 0x20040010) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{0x0}, {&(0x7f0000002840)}], 0x2}, 0x9cdc2384016f48f8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c0001"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0}, 0xfc00) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) 344.921102ms ago: executing program 4 (id=38681): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x4ec07d2f}, 0x0, 0x2, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000000c0)='./file0\x00', r1}, 0x18) r2 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[], 0x5) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) 344.315862ms ago: executing program 2 (id=38690): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x29, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000000100)=@in6={0xa, 0x4e23, 0x0, @loopback={0xffffff7f00000000}}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x1, 0x2, 0x0, 0xb}, {0x2, 0x5, 0xa}, {0x2, 0x4, 0x10008}], 0x10, 0x800}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002110000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 259.653614ms ago: executing program 3 (id=38682): sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="365e4e92c32ad880a6d33aaad447788d30188897", 0x14}], 0x1}, 0x40000) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x102) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 197.939655ms ago: executing program 2 (id=38683): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80040000000, 0x10005}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x1}, {0x10000002, 0x10}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 11.997089ms ago: executing program 2 (id=38684): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x6, r0, 0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x6, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8531}, 0x0, 0x2, r0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006", 0x23}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 4 (id=38687): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde0"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffffffffffff24, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffece}, 0x48) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbcc, 0xb0000}, 0x10806, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) kernel console output (not intermixed with test programs): ice syzkaller0 entered promiscuous mode [ 2016.108738][T17979] netlink: 'syz.2.36253': attribute type 3 has an invalid length. [ 2016.186451][T17979] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.36253'. [ 2016.339162][T17972] netlink: 'syz.2.36253': attribute type 3 has an invalid length. [ 2016.357154][T17972] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.36253'. [ 2016.497274][T17985] device syzkaller0 entered promiscuous mode [ 2018.349663][T18030] netlink: 'syz.3.36272': attribute type 3 has an invalid length. [ 2018.431602][T18027] netlink: 'syz.3.36272': attribute type 3 has an invalid length. [ 2018.487230][T18030] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.36272'. [ 2018.530824][T18027] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.36272'. [ 2019.710009][T18050] device syzkaller0 entered promiscuous mode [ 2019.741718][T18055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36283'. [ 2021.241941][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36298'. [ 2021.972835][T18110] netlink: 'syz.3.36305': attribute type 3 has an invalid length. [ 2021.990180][T18110] netlink: 152 bytes leftover after parsing attributes in process `syz.3.36305'. [ 2022.613533][T18122] device syzkaller0 entered promiscuous mode [ 2022.848461][T18138] netlink: 'syz.3.36316': attribute type 3 has an invalid length. [ 2022.911079][T18138] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.36316'. [ 2024.523322][T18182] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.36334'. [ 2024.555028][T18182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36334'. [ 2025.663291][T18228] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.36355'. [ 2025.687635][T18228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36355'. [ 2026.014337][T18238] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.36367'. [ 2026.134854][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36367'. [ 2026.512899][T18256] device syzkaller0 entered promiscuous mode [ 2027.165522][T18286] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.36377'. [ 2027.232209][T18286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36377'. [ 2029.032246][T18357] netlink: 3 bytes leftover after parsing attributes in process `syz.2.36410'. [ 2029.723004][T18384] device syzkaller0 entered promiscuous mode [ 2030.188569][T18406] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.36429'. [ 2030.215746][T18406] netlink: 16770 bytes leftover after parsing attributes in process `syz.0.36429'. [ 2030.242734][T18406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36429'. [ 2030.353801][T18412] netlink: 14 bytes leftover after parsing attributes in process `syz.1.36434'. [ 2031.104062][T18437] netlink: 'syz.2.36441': attribute type 3 has an invalid length. [ 2031.137283][T18437] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.36441'. [ 2031.618719][T18448] device syzkaller0 entered promiscuous mode [ 2031.978426][T18462] netlink: 3 bytes leftover after parsing attributes in process `syz.1.36452'. [ 2032.317873][T18476] netlink: 'syz.1.36458': attribute type 3 has an invalid length. [ 2032.340163][T18476] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.36458'. [ 2032.926975][T18494] netlink: 'syz.4.36467': attribute type 2 has an invalid length. [ 2032.945333][T18494] netlink: 'syz.4.36467': attribute type 8 has an invalid length. [ 2032.978671][T18494] netlink: 132 bytes leftover after parsing attributes in process `syz.4.36467'. [ 2033.497187][T18505] netlink: 3 bytes leftover after parsing attributes in process `syz.4.36471'. [ 2034.474202][T18540] netlink: 3 bytes leftover after parsing attributes in process `syz.3.36486'. [ 2036.416181][T18575] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2036.492392][T18579] device syzkaller0 entered promiscuous mode [ 2036.518026][T18578] netlink: 3 bytes leftover after parsing attributes in process `syz.0.36500'. [ 2036.560877][T18574] netlink: 'syz.3.36511': attribute type 2 has an invalid length. [ 2036.577726][T18574] netlink: 'syz.3.36511': attribute type 8 has an invalid length. [ 2036.604731][T18574] netlink: 132 bytes leftover after parsing attributes in process `syz.3.36511'. [ 2037.518443][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.524928][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 2041.986130][T18617] device syzkaller0 entered promiscuous mode [ 2042.412589][T18644] netlink: 'syz.0.36527': attribute type 2 has an invalid length. [ 2042.449157][T18644] netlink: 'syz.0.36527': attribute type 8 has an invalid length. [ 2042.465687][T18644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.36527'. [ 2045.846093][T18673] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2045.909979][T18673] device syzkaller0 entered promiscuous mode [ 2046.885192][T18686] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.36545'. [ 2046.924835][T18686] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2047.084190][T18696] netlink: 'syz.0.36550': attribute type 21 has an invalid length. [ 2048.252999][T18717] netlink: 144 bytes leftover after parsing attributes in process `syz.1.36557'. [ 2048.284641][T18717] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2048.845272][T18752] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.36571'. [ 2048.869043][T18752] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.36571'. [ 2049.612304][T18778] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.36579'. [ 2049.654136][T18778] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2049.790286][T18786] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.36584'. [ 2049.800838][T18786] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.36584'. [ 2050.241021][T18812] netlink: 'syz.4.36594': attribute type 21 has an invalid length. [ 2050.498413][T18819] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.36595'. [ 2050.514891][T18819] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2050.621893][T18829] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.36598'. [ 2050.641727][T18829] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.36598'. [ 2050.965624][T18836] netlink: 'syz.1.36611': attribute type 21 has an invalid length. [ 2051.394748][T18844] device bridge_slave_1 left promiscuous mode [ 2051.419847][T18844] bridge0: port 2(bridge_slave_1) entered disabled state [ 2051.559439][T18844] device bridge_slave_0 left promiscuous mode [ 2051.628570][T18844] bridge0: port 1(bridge_slave_0) entered disabled state [ 2052.045803][T18877] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.36613'. [ 2052.056169][T18877] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2052.831867][T18888] netlink: 'syz.2.36618': attribute type 21 has an invalid length. [ 2052.866230][T18890] device team_slave_0 left promiscuous mode [ 2052.894571][T18890] team0: Port device team_slave_0 removed [ 2052.928444][T18890] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2053.429838][T18901] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2053.503077][T18901] device syzkaller0 entered promiscuous mode [ 2053.757757][T18920] __nla_validate_parse: 1 callbacks suppressed [ 2053.757785][T18920] netlink: 163260 bytes leftover after parsing attributes in process `syz.4.36628'. [ 2053.770566][T18918] bridge0: port 4(team0) entered disabled state [ 2053.782864][T18918] device bridge_slave_1 left promiscuous mode [ 2053.790051][T18918] bridge0: port 2(bridge_slave_1) entered disabled state [ 2053.800103][T18918] device bridge_slave_0 left promiscuous mode [ 2053.808564][T18918] bridge0: port 1(bridge_slave_0) entered disabled state [ 2054.005629][T18924] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2054.011165][T18925] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.36642'. [ 2054.023152][T18924] device syzkaller0 entered promiscuous mode [ 2054.050978][T18929] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.36629'. [ 2054.075678][T18929] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2054.205303][T18936] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 2054.901110][T18956] netlink: 'syz.4.36644': attribute type 10 has an invalid length. [ 2054.956045][T18956] bridge0: port 2(bridge_slave_1) entered disabled state [ 2055.010274][T18962] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.36646'. [ 2055.035987][T18956] device bridge_slave_1 left promiscuous mode [ 2055.044870][T18962] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2055.076289][T18956] bridge0: port 2(bridge_slave_1) entered disabled state [ 2055.412042][T18972] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 2055.586592][T18974] delete_channel: no stack [ 2056.151939][T18985] netlink: 'syz.2.36664': attribute type 10 has an invalid length. [ 2056.204561][T18985] netlink: 'syz.2.36664': attribute type 10 has an invalid length. [ 2056.213002][T18985] netlink: 40 bytes leftover after parsing attributes in process `syz.2.36664'. [ 2056.237708][T18985] device team0 entered promiscuous mode [ 2056.244737][T18985] device team_slave_0 entered promiscuous mode [ 2056.266651][T18985] device team_slave_1 entered promiscuous mode [ 2056.347701][T18985] 8021q: adding VLAN 0 to HW filter on device team0 [ 2056.507953][T18985] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2056.604780][T18991] netlink: 'syz.3.36654': attribute type 21 has an invalid length. [ 2057.162480][T19011] mac80211_hwsim hwsim73 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2057.362519][T19014] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2057.463281][T19014] device syzkaller0 entered promiscuous mode [ 2058.103400][T19030] netlink: 'syz.0.36671': attribute type 21 has an invalid length. [ 2058.132499][T19032] bridge0: port 3(team0) entered disabled state [ 2058.144225][T19032] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.419024][T19034] bridge0: port 3(team0) entered disabled state [ 2058.446125][T19034] device bridge_slave_0 left promiscuous mode [ 2058.452565][T19034] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.527821][T19044] netlink: 'syz.1.36674': attribute type 10 has an invalid length. [ 2058.552791][T19046] netlink: 'syz.1.36674': attribute type 10 has an invalid length. [ 2058.561262][T19046] netlink: 40 bytes leftover after parsing attributes in process `syz.1.36674'. [ 2058.809963][T19056] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2058.879103][T19059] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.36679'. [ 2059.049899][T19059] netlink: 'syz.1.36679': attribute type 3 has an invalid length. [ 2059.060331][T19059] netlink: 16770 bytes leftover after parsing attributes in process `syz.1.36679'. [ 2059.084778][T19059] netlink: 'syz.1.36679': attribute type 1 has an invalid length. [ 2059.103182][T19060] netlink: 144 bytes leftover after parsing attributes in process `syz.0.36677'. [ 2059.177843][T19060] team0: Port device team_slave_0 removed [ 2059.203574][T19060] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2059.230131][T19068] netlink: 'syz.1.36684': attribute type 10 has an invalid length. [ 2059.239497][T19068] netlink: 55 bytes leftover after parsing attributes in process `syz.1.36684'. [ 2059.297975][T19068] netlink: 'syz.1.36684': attribute type 1 has an invalid length. [ 2059.887302][T19092] netlink: 168 bytes leftover after parsing attributes in process `syz.1.36693'. [ 2059.940365][T19088] delete_channel: no stack [ 2060.589046][T19110] netlink: 144 bytes leftover after parsing attributes in process `syz.3.36698'. [ 2060.604350][T19110] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2060.688747][T19116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.36699'. [ 2060.716214][T19116] device team0 entered promiscuous mode [ 2060.721824][T19116] device team_slave_1 entered promiscuous mode [ 2060.732745][T19116] device wlan1 entered promiscuous mode [ 2060.801310][T19116] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2060.898569][T19121] netlink: 55 bytes leftover after parsing attributes in process `syz.0.36702'. [ 2061.266977][T19132] delete_channel: no stack [ 2061.396926][T19140] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 2061.546564][T19142] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.36712'. [ 2061.557612][T19142] validate_nla: 4 callbacks suppressed [ 2061.557645][T19142] netlink: 'syz.0.36712': attribute type 3 has an invalid length. [ 2061.583304][T19142] netlink: 16770 bytes leftover after parsing attributes in process `syz.0.36712'. [ 2061.601671][T19142] netlink: 'syz.0.36712': attribute type 1 has an invalid length. [ 2061.666165][T19150] netlink: 'syz.4.36717': attribute type 10 has an invalid length. [ 2061.699112][T19148] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2061.741590][T19148] device syzkaller0 entered promiscuous mode [ 2061.762094][T19150] netlink: 'syz.4.36717': attribute type 1 has an invalid length. [ 2062.238897][T19164] syz.4.36724[19164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2062.238990][T19164] syz.4.36724[19164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2062.742943][T19176] netlink: 'syz.2.36728': attribute type 3 has an invalid length. [ 2062.769786][T19176] netlink: 'syz.2.36728': attribute type 1 has an invalid length. [ 2063.167564][T19200] netlink: 'syz.4.36739': attribute type 2 has an invalid length. [ 2063.184641][T19200] netlink: 'syz.4.36739': attribute type 11 has an invalid length. [ 2063.382384][T19207] netlink: 'syz.4.36752': attribute type 29 has an invalid length. [ 2063.477193][T19205] device team_slave_0 left promiscuous mode [ 2063.483732][T19216] netlink: 'syz.4.36752': attribute type 1 has an invalid length. [ 2063.508801][T19205] team0: Port device team_slave_0 removed [ 2063.519846][T19205] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2063.666403][T19218] tap1: tun_chr_ioctl cmd 1074025675 [ 2063.687820][T19218] tap1: persist enabled [ 2063.913256][T19231] syz.1.36751[19231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2063.913361][T19231] syz.1.36751[19231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2066.011035][T19253] __nla_validate_parse: 7 callbacks suppressed [ 2066.011053][T19253] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.36762'. [ 2066.222517][T19266] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.36760'. [ 2066.414926][T19274] netlink: 198172 bytes leftover after parsing attributes in process `syz.1.36769'. [ 2066.505348][T19279] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 2067.228795][T19307] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.36781'. [ 2067.384287][T19311] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2067.400973][T19317] validate_nla: 8 callbacks suppressed [ 2067.400992][T19317] netlink: 'syz.3.36785': attribute type 2 has an invalid length. [ 2067.431801][T19317] netlink: 'syz.3.36785': attribute type 11 has an invalid length. [ 2067.442009][T19311] device syzkaller0 entered promiscuous mode [ 2067.448968][T19317] netlink: 198172 bytes leftover after parsing attributes in process `syz.3.36785'. [ 2070.049465][T19350] netlink: 'syz.2.36804': attribute type 2 has an invalid length. [ 2070.079235][T19350] netlink: 'syz.2.36804': attribute type 11 has an invalid length. [ 2070.087735][T19350] netlink: 198172 bytes leftover after parsing attributes in process `syz.2.36804'. [ 2070.358571][T19363] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.36808'. [ 2070.380173][T19352] device syzkaller0 entered promiscuous mode [ 2070.642441][T19365] netlink: 156 bytes leftover after parsing attributes in process `syz.2.36809'. [ 2071.019879][T19372] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2071.165816][T19375] netlink: 'syz.4.36813': attribute type 10 has an invalid length. [ 2072.965204][T19414] device syzkaller0 entered promiscuous mode [ 2073.034160][T19416] mac80211_hwsim hwsim61 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2073.044051][T25187] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 2073.052215][T25187] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2073.066902][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2073.530739][T19436] netlink: 'syz.2.36837': attribute type 10 has an invalid length. [ 2073.894243][T19452] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.36839'. [ 2073.932911][T19444] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.36839'. [ 2074.326673][T19466] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.36856'. [ 2074.360080][T19464] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2074.393356][T19460] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.36856'. [ 2074.537710][T19472] netlink: 132 bytes leftover after parsing attributes in process `syz.4.36851'. [ 2074.577250][T19472] netlink: 60 bytes leftover after parsing attributes in process `syz.4.36851'. [ 2074.608232][T19472] netlink: 60 bytes leftover after parsing attributes in process `syz.4.36851'. [ 2074.638033][T19472] netlink: 60 bytes leftover after parsing attributes in process `syz.4.36851'. [ 2075.608574][T19484] netlink: 'syz.3.36854': attribute type 10 has an invalid length. [ 2075.856439][T19495] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.36867'. [ 2075.903328][T19489] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.36867'. [ 2076.288895][T19515] netlink: 'syz.0.36869': attribute type 10 has an invalid length. [ 2077.253097][T19523] device syzkaller0 entered promiscuous mode [ 2077.716056][T19548] device syzkaller0 entered promiscuous mode [ 2078.997863][T19609] __nla_validate_parse: 6 callbacks suppressed [ 2078.997882][T19609] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.36904'. [ 2079.037662][T19599] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.36904'. [ 2079.055528][T19611] netlink: 132 bytes leftover after parsing attributes in process `syz.3.36907'. [ 2079.088716][T19611] netlink: 60 bytes leftover after parsing attributes in process `syz.3.36907'. [ 2079.116366][T19611] netlink: 60 bytes leftover after parsing attributes in process `syz.3.36907'. [ 2079.158635][T19616] netlink: 60 bytes leftover after parsing attributes in process `syz.3.36907'. [ 2080.440011][T19627] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.36924'. [ 2081.738734][T19683] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.36936'. [ 2081.759359][T19680] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.36936'. [ 2082.041857][T19700] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.36944'. [ 2085.074732][T19812] __nla_validate_parse: 8 callbacks suppressed [ 2085.074751][T19812] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.36987'. [ 2085.159633][T19809] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.36987'. [ 2085.828009][T19826] netlink: 'syz.3.36993': attribute type 2 has an invalid length. [ 2085.893705][T19826] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.36993'. [ 2087.330469][T19858] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.37004'. [ 2087.375712][T19853] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.37004'. [ 2088.066484][T19882] netlink: 'syz.1.37018': attribute type 2 has an invalid length. [ 2088.074372][T19882] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.37018'. [ 2088.561663][T19897] device syzkaller0 entered promiscuous mode [ 2088.810028][T19911] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.37027'. [ 2089.541075][T19931] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.37035'. [ 2089.778612][T19930] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.37035'. [ 2091.140265][T19960] netlink: 'syz.0.37053': attribute type 10 has an invalid length. [ 2091.169970][T19960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.37053'. [ 2091.402495][T19970] netlink: 'syz.0.37048': attribute type 29 has an invalid length. [ 2091.551809][T19970] netlink: 'syz.0.37048': attribute type 29 has an invalid length. [ 2091.575681][T19973] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.37047'. [ 2091.595188][T19971] netlink: 'syz.0.37048': attribute type 29 has an invalid length. [ 2091.618081][T19969] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.37047'. [ 2091.883906][T19982] device syzkaller0 entered promiscuous mode [ 2092.960136][T20002] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.37060'. [ 2092.978964][T20000] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2093.058019][T20002] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2093.084575][T20002] CPU: 0 PID: 20002 Comm: syz.1.37060 Not tainted syzkaller #0 [ 2093.092186][T20002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2093.102271][T20002] Call Trace: [ 2093.105579][T20002] [ 2093.108546][T20002] dump_stack_lvl+0x188/0x250 [ 2093.113265][T20002] ? show_regs_print_info+0x20/0x20 [ 2093.118510][T20002] ? load_image+0x410/0x410 [ 2093.123070][T20002] sysfs_warn_dup+0x8a/0xa0 [ 2093.127611][T20002] sysfs_do_create_link_sd+0xc0/0x110 [ 2093.133010][T20002] device_add+0x83b/0x1050 [ 2093.137441][T20002] wiphy_register+0x1e74/0x2c40 [ 2093.142396][T20002] ? cfg80211_event_work+0x40/0x40 [ 2093.147533][T20002] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2093.153713][T20002] ieee80211_register_hw+0x2a03/0x3a60 [ 2093.159188][T20002] ? ieee80211_register_hw+0xac1/0x3a60 [ 2093.164757][T20002] ? ieee80211_tasklet_handler+0x20/0x20 [ 2093.170404][T20002] ? rcu_is_watching+0x11/0xa0 [ 2093.175176][T20002] ? hrtimer_init+0x10c/0x220 [ 2093.179867][T20002] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2093.185604][T20002] hwsim_new_radio_nl+0xa7d/0xc50 [ 2093.190646][T20002] genl_rcv_msg+0xd0b/0xfa0 [ 2093.195164][T20002] ? genl_bind+0x370/0x370 [ 2093.199590][T20002] ? mark_lock+0x94/0x320 [ 2093.203924][T20002] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2093.209914][T20002] ? lock_chain_count+0x20/0x20 [ 2093.214773][T20002] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2093.220956][T20002] ? lockdep_hardirqs_on+0x94/0x140 [ 2093.226157][T20002] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2093.232588][T20002] netlink_rcv_skb+0x1e9/0x430 [ 2093.237368][T20002] ? genl_bind+0x370/0x370 [ 2093.241820][T20002] ? netlink_ack+0xb10/0xb10 [ 2093.246508][T20002] ? down_read+0x1aa/0x2e0 [ 2093.250930][T20002] genl_rcv+0x24/0x40 [ 2093.254914][T20002] netlink_unicast+0x78f/0x940 [ 2093.259689][T20002] netlink_sendmsg+0x8ba/0xbe0 [ 2093.264552][T20002] ? netlink_getsockopt+0x570/0x570 [ 2093.269778][T20002] ? aa_sock_msg_perm+0x94/0x150 [ 2093.274720][T20002] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2093.280006][T20002] ? security_socket_sendmsg+0x7c/0xa0 [ 2093.285487][T20002] ? netlink_getsockopt+0x570/0x570 [ 2093.290690][T20002] ____sys_sendmsg+0x5be/0x8f0 [ 2093.295467][T20002] ? __sys_sendmsg_sock+0x30/0x30 [ 2093.300501][T20002] ? import_iovec+0x6f/0xa0 [ 2093.305183][T20002] ___sys_sendmsg+0x236/0x2e0 [ 2093.309872][T20002] ? __sys_sendmsg+0x290/0x290 [ 2093.314672][T20002] __se_sys_sendmsg+0x1b7/0x2a0 [ 2093.319525][T20002] ? __x64_sys_sendmsg+0x80/0x80 [ 2093.324459][T20002] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2093.330454][T20002] ? lockdep_hardirqs_on+0x94/0x140 [ 2093.335656][T20002] do_syscall_64+0x4c/0xa0 [ 2093.340069][T20002] ? clear_bhb_loop+0x30/0x80 [ 2093.344744][T20002] ? clear_bhb_loop+0x30/0x80 [ 2093.349423][T20002] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2093.355492][T20002] RIP: 0033:0x7f0d21230e59 [ 2093.359913][T20002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2093.379518][T20002] RSP: 002b:00007f0d1f489028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2093.387939][T20002] RAX: ffffffffffffffda RBX: 00007f0d214b8fa0 RCX: 00007f0d21230e59 [ 2093.395913][T20002] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2093.403881][T20002] RBP: 00007f0d212c6e6f R08: 0000000000000000 R09: 0000000000000000 [ 2093.412023][T20002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2093.420015][T20002] R13: 00007f0d214b9038 R14: 00007f0d214b8fa0 R15: 00007ffda499fa78 [ 2093.428003][T20002] [ 2093.554708][T20010] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.37063'. [ 2093.584652][T20010] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.37063'. [ 2093.604590][T20010] netlink: 2 bytes leftover after parsing attributes in process `syz.3.37063'. [ 2093.897404][T20025] netlink: 'syz.0.37071': attribute type 39 has an invalid length. [ 2094.309348][T20035] netlink: 'syz.4.37075': attribute type 3 has an invalid length. [ 2094.318005][T20035] netlink: 'syz.4.37075': attribute type 1 has an invalid length. [ 2094.327627][T20035] netlink: 132 bytes leftover after parsing attributes in process `syz.4.37075'. [ 2094.876297][T20044] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2095.034535][T20054] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.37082'. [ 2095.222809][T20054] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2095.234704][T20054] CPU: 1 PID: 20054 Comm: syz.4.37082 Not tainted syzkaller #0 [ 2095.242305][T20054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2095.252392][T20054] Call Trace: [ 2095.255699][T20054] [ 2095.258650][T20054] dump_stack_lvl+0x188/0x250 [ 2095.263359][T20054] ? show_regs_print_info+0x20/0x20 [ 2095.268575][T20054] ? load_image+0x410/0x410 [ 2095.273105][T20054] sysfs_warn_dup+0x8a/0xa0 [ 2095.277611][T20054] sysfs_do_create_link_sd+0xc0/0x110 [ 2095.282985][T20054] device_add+0x83b/0x1050 [ 2095.287407][T20054] wiphy_register+0x1e74/0x2c40 [ 2095.292263][T20054] ? lock_chain_count+0x20/0x20 [ 2095.297130][T20054] ? cfg80211_event_work+0x40/0x40 [ 2095.302250][T20054] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2095.308323][T20054] ieee80211_register_hw+0x2a03/0x3a60 [ 2095.313785][T20054] ? ieee80211_register_hw+0xac1/0x3a60 [ 2095.319338][T20054] ? ieee80211_tasklet_handler+0x20/0x20 [ 2095.324980][T20054] ? rcu_is_watching+0x11/0xa0 [ 2095.329746][T20054] ? hrtimer_init+0x10c/0x220 [ 2095.334435][T20054] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2095.340178][T20054] hwsim_new_radio_nl+0xa7d/0xc50 [ 2095.345214][T20054] genl_rcv_msg+0xd0b/0xfa0 [ 2095.349736][T20054] ? genl_bind+0x370/0x370 [ 2095.354162][T20054] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2095.359407][T20054] ? verify_lock_unused+0x140/0x140 [ 2095.364714][T20054] ? dev_queue_xmit+0x20/0x20 [ 2095.369395][T20054] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2095.375736][T20054] netlink_rcv_skb+0x1e9/0x430 [ 2095.380502][T20054] ? genl_bind+0x370/0x370 [ 2095.384925][T20054] ? netlink_ack+0xb10/0xb10 [ 2095.389526][T20054] ? down_read+0x1aa/0x2e0 [ 2095.393952][T20054] genl_rcv+0x24/0x40 [ 2095.398022][T20054] netlink_unicast+0x78f/0x940 [ 2095.402797][T20054] netlink_sendmsg+0x8ba/0xbe0 [ 2095.407574][T20054] ? netlink_getsockopt+0x570/0x570 [ 2095.412787][T20054] ? aa_sock_msg_perm+0x94/0x150 [ 2095.417724][T20054] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2095.423028][T20054] ? security_socket_sendmsg+0x7c/0xa0 [ 2095.428497][T20054] ? netlink_getsockopt+0x570/0x570 [ 2095.433698][T20054] ____sys_sendmsg+0x5be/0x8f0 [ 2095.438494][T20054] ? __sys_sendmsg_sock+0x30/0x30 [ 2095.443532][T20054] ? import_iovec+0x6f/0xa0 [ 2095.448041][T20054] ___sys_sendmsg+0x236/0x2e0 [ 2095.452730][T20054] ? __sys_sendmsg+0x290/0x290 [ 2095.457507][T20054] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2095.463771][T20054] __se_sys_sendmsg+0x1b7/0x2a0 [ 2095.468627][T20054] ? __x64_sys_sendmsg+0x80/0x80 [ 2095.473563][T20054] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2095.479557][T20054] ? lockdep_hardirqs_on+0x94/0x140 [ 2095.484762][T20054] do_syscall_64+0x4c/0xa0 [ 2095.489175][T20054] ? clear_bhb_loop+0x30/0x80 [ 2095.493852][T20054] ? clear_bhb_loop+0x30/0x80 [ 2095.498537][T20054] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2095.504442][T20054] RIP: 0033:0x7f27c6f89e59 [ 2095.508859][T20054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2095.528466][T20054] RSP: 002b:00007f27c51e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2095.536885][T20054] RAX: ffffffffffffffda RBX: 00007f27c7211fa0 RCX: 00007f27c6f89e59 [ 2095.544865][T20054] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2095.552856][T20054] RBP: 00007f27c701fe6f R08: 0000000000000000 R09: 0000000000000000 [ 2095.560924][T20054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2095.568984][T20054] R13: 00007f27c7212038 R14: 00007f27c7211fa0 R15: 00007ffda66b17d8 [ 2095.576976][T20054] [ 2097.350043][T20062] device syzkaller0 entered promiscuous mode [ 2097.393406][T20069] netlink: 'syz.0.37087': attribute type 3 has an invalid length. [ 2097.421752][T20069] netlink: 'syz.0.37087': attribute type 1 has an invalid length. [ 2097.471144][T20069] netlink: 132 bytes leftover after parsing attributes in process `syz.0.37087'. [ 2097.704870][T20077] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.37091'. [ 2097.725385][T20077] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.37091'. [ 2097.745865][T20077] netlink: 2 bytes leftover after parsing attributes in process `syz.2.37091'. [ 2098.293711][T20109] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.37105'. [ 2098.324729][T20109] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.37105'. [ 2098.375546][T20109] netlink: 2 bytes leftover after parsing attributes in process `syz.0.37105'. [ 2098.709280][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37112'. [ 2098.795726][T20130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37112'. [ 2098.818318][T20130] netlink: 33 bytes leftover after parsing attributes in process `syz.4.37112'. [ 2098.921963][T20132] netlink: 'syz.2.37114': attribute type 39 has an invalid length. [ 2098.956536][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.962902][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.053349][T20142] netlink: 'syz.1.37118': attribute type 3 has an invalid length. [ 2099.074727][T20142] netlink: 'syz.1.37118': attribute type 1 has an invalid length. [ 2099.315850][T20152] device syzkaller0 entered promiscuous mode [ 2099.978316][T20181] netlink: 'syz.2.37133': attribute type 3 has an invalid length. [ 2099.991384][T20181] netlink: 'syz.2.37133': attribute type 1 has an invalid length. [ 2100.280956][T20193] device syzkaller0 entered promiscuous mode [ 2100.345489][T20195] device syzkaller0 entered promiscuous mode [ 2100.490119][T20202] device syzkaller0 entered promiscuous mode [ 2100.961052][T20223] device syzkaller0 entered promiscuous mode [ 2101.274099][T20235] device syzkaller0 entered promiscuous mode [ 2101.501333][T20238] netlink: 'syz.4.37162': attribute type 3 has an invalid length. [ 2101.716372][T20246] device syzkaller0 entered promiscuous mode [ 2101.765768][T20255] netlink: 'syz.1.37167': attribute type 10 has an invalid length. [ 2102.029886][T20266] device syzkaller0 entered promiscuous mode [ 2102.598018][T20286] __nla_validate_parse: 32 callbacks suppressed [ 2102.598056][T20286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37176'. [ 2102.631400][T20286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37176'. [ 2102.657251][T20286] netlink: 33 bytes leftover after parsing attributes in process `syz.0.37176'. [ 2102.690121][T20286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37176'. [ 2102.715949][T20286] netlink: 33 bytes leftover after parsing attributes in process `syz.0.37176'. [ 2102.747294][T20286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37176'. [ 2102.768554][T20286] netlink: 33 bytes leftover after parsing attributes in process `syz.0.37176'. [ 2102.842382][T20294] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.37179'. [ 2102.855681][T20292] netlink: 'syz.4.37180': attribute type 39 has an invalid length. [ 2102.906226][T20294] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2102.926876][T20294] CPU: 1 PID: 20294 Comm: syz.3.37179 Not tainted syzkaller #0 [ 2102.934568][T20294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2102.944681][T20294] Call Trace: [ 2102.948000][T20294] [ 2102.950969][T20294] dump_stack_lvl+0x188/0x250 [ 2102.955664][T20294] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2102.962004][T20294] ? show_regs_print_info+0x20/0x20 [ 2102.967215][T20294] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2102.973480][T20294] sysfs_warn_dup+0x8a/0xa0 [ 2102.978003][T20294] sysfs_do_create_link_sd+0xc0/0x110 [ 2102.983402][T20294] device_add+0x83b/0x1050 [ 2102.987820][T20294] wiphy_register+0x1e74/0x2c40 [ 2102.992685][T20294] ? cfg80211_event_work+0x40/0x40 [ 2102.997801][T20294] ? minstrel_ht_alloc+0x807/0x980 [ 2103.002937][T20294] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2103.009007][T20294] ieee80211_register_hw+0x2a03/0x3a60 [ 2103.014482][T20294] ? ieee80211_register_hw+0xac1/0x3a60 [ 2103.020055][T20294] ? ieee80211_tasklet_handler+0x20/0x20 [ 2103.025760][T20294] ? rcu_is_watching+0x11/0xa0 [ 2103.030593][T20294] ? hrtimer_init+0x10c/0x220 [ 2103.035386][T20294] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2103.041141][T20294] hwsim_new_radio_nl+0xa7d/0xc50 [ 2103.046194][T20294] genl_rcv_msg+0xd0b/0xfa0 [ 2103.050795][T20294] ? genl_bind+0x370/0x370 [ 2103.055224][T20294] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2103.061208][T20294] ? lock_chain_count+0x20/0x20 [ 2103.066088][T20294] ? mark_lock+0x94/0x320 [ 2103.070438][T20294] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2103.076785][T20294] ? lock_chain_count+0x20/0x20 [ 2103.081671][T20294] netlink_rcv_skb+0x1e9/0x430 [ 2103.086447][T20294] ? genl_bind+0x370/0x370 [ 2103.090896][T20294] ? netlink_ack+0xb10/0xb10 [ 2103.095515][T20294] ? down_read+0x5f/0x2e0 [ 2103.099964][T20294] ? down_read+0x1aa/0x2e0 [ 2103.104424][T20294] genl_rcv+0x24/0x40 [ 2103.108425][T20294] netlink_unicast+0x78f/0x940 [ 2103.113193][T20294] netlink_sendmsg+0x8ba/0xbe0 [ 2103.117982][T20294] ? lockdep_hardirqs_on+0x94/0x140 [ 2103.123201][T20294] ? netlink_getsockopt+0x570/0x570 [ 2103.128416][T20294] ? netlink_getsockopt+0x570/0x570 [ 2103.133631][T20294] ____sys_sendmsg+0x5be/0x8f0 [ 2103.138408][T20294] ? __sys_sendmsg_sock+0x30/0x30 [ 2103.143445][T20294] ? import_iovec+0x6f/0xa0 [ 2103.147952][T20294] ___sys_sendmsg+0x236/0x2e0 [ 2103.152641][T20294] ? __sys_sendmsg+0x290/0x290 [ 2103.157405][T20294] ? trace_event_raw_event_lock+0x250/0x250 [ 2103.163292][T20294] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2103.169553][T20294] __se_sys_sendmsg+0x1b7/0x2a0 [ 2103.174405][T20294] ? __x64_sys_sendmsg+0x80/0x80 [ 2103.179371][T20294] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2103.185375][T20294] ? lockdep_hardirqs_on+0x94/0x140 [ 2103.190595][T20294] do_syscall_64+0x4c/0xa0 [ 2103.195022][T20294] ? clear_bhb_loop+0x30/0x80 [ 2103.199694][T20294] ? clear_bhb_loop+0x30/0x80 [ 2103.204375][T20294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2103.210303][T20294] RIP: 0033:0x7f3e9f6aae59 [ 2103.214717][T20294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2103.234342][T20294] RSP: 002b:00007f3e9d903028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2103.242764][T20294] RAX: ffffffffffffffda RBX: 00007f3e9f932fa0 RCX: 00007f3e9f6aae59 [ 2103.250748][T20294] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2103.258801][T20294] RBP: 00007f3e9f740e6f R08: 0000000000000000 R09: 0000000000000000 [ 2103.267027][T20294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2103.275002][T20294] R13: 00007f3e9f933038 R14: 00007f3e9f932fa0 R15: 00007fff0e14f2a8 [ 2103.283014][T20294] [ 2103.598560][T20320] syz.1.37192[20320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2103.598784][T20320] syz.1.37192[20320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2103.716487][T20323] device syzkaller0 entered promiscuous mode [ 2103.821110][T20331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37196'. [ 2103.863520][T20331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37196'. [ 2104.183854][T20347] netlink: 'syz.2.37203': attribute type 10 has an invalid length. [ 2104.195954][T20349] netlink: 'syz.3.37204': attribute type 39 has an invalid length. [ 2104.316943][T20353] device syzkaller0 entered promiscuous mode [ 2105.199600][T20398] device syzkaller0 entered promiscuous mode [ 2105.252644][T20393] netlink: 'syz.4.37219': attribute type 10 has an invalid length. [ 2105.359238][T20393] team0: Device hsr_slave_0 failed to register rx_handler [ 2105.405762][T20400] netlink: 'syz.1.37222': attribute type 10 has an invalid length. [ 2105.426268][T20399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2105.654723][T20407] netlink: 'syz.1.37223': attribute type 39 has an invalid length. [ 2106.064027][T20420] device syzkaller0 entered promiscuous mode [ 2106.542530][T20433] netlink: 'syz.1.37236': attribute type 3 has an invalid length. [ 2106.706026][T20438] device syzkaller0 entered promiscuous mode [ 2107.350540][T20466] device syzkaller0 entered promiscuous mode [ 2107.632183][T20477] __nla_validate_parse: 14 callbacks suppressed [ 2107.632317][T20477] netlink: 184920 bytes leftover after parsing attributes in process `syz.4.37254'. [ 2107.716685][T20477] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 2108.080728][T20490] delete_channel: no stack [ 2108.380124][T20507] device syzkaller0 entered promiscuous mode [ 2108.419745][T20504] netlink: 'syz.1.37274': attribute type 39 has an invalid length. [ 2108.497046][T20511] netlink: 164 bytes leftover after parsing attributes in process `syz.0.37267'. [ 2109.340188][T20540] netlink: 'syz.0.37277': attribute type 10 has an invalid length. [ 2109.768213][T20553] netlink: 'syz.3.37281': attribute type 10 has an invalid length. [ 2110.083603][T24950] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 2110.132292][T24950] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2110.201693][T20553] device wlan1 entered promiscuous mode [ 2110.269665][T20553] team0: Port device wlan1 added [ 2110.388622][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2110.402485][T20544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2110.643831][T20570] netlink: 'syz.4.37288': attribute type 9 has an invalid length. [ 2112.215856][T20602] netlink: 'syz.1.37299': attribute type 39 has an invalid length. [ 2112.795088][T20625] netlink: 'syz.0.37308': attribute type 26 has an invalid length. [ 2112.803247][T20625] netlink: 54695 bytes leftover after parsing attributes in process `syz.0.37308'. [ 2113.466696][T20638] netlink: 164 bytes leftover after parsing attributes in process `syz.1.37313'. [ 2113.913469][T20651] netlink: 703 bytes leftover after parsing attributes in process `syz.4.37318'. [ 2114.699256][T20669] netlink: 'syz.0.37334': attribute type 9 has an invalid length. [ 2115.216694][T20683] netlink: 164 bytes leftover after parsing attributes in process `syz.2.37328'. [ 2115.295235][T20685] netlink: 'syz.3.37331': attribute type 10 has an invalid length. [ 2115.318385][T20685] device team0 left promiscuous mode [ 2115.341466][T20685] device team_slave_1 left promiscuous mode [ 2115.356818][T20685] device wlan1 left promiscuous mode [ 2115.460047][T20689] netlink: 'syz.2.37332': attribute type 3 has an invalid length. [ 2115.512633][T20689] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.37332'. [ 2115.521636][T20690] netlink: 'syz.3.37331': attribute type 10 has an invalid length. [ 2115.574869][T20690] netlink: 40 bytes leftover after parsing attributes in process `syz.3.37331'. [ 2115.604651][T20690] device team0 entered promiscuous mode [ 2115.631076][T20690] device team_slave_1 entered promiscuous mode [ 2115.646002][T20690] device wlan1 entered promiscuous mode [ 2115.661434][T20690] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2115.725759][T20688] netlink: 'syz.1.37333': attribute type 4 has an invalid length. [ 2115.737458][T20688] netlink: 152 bytes leftover after parsing attributes in process `syz.1.37333'. [ 2116.094162][T20688] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2116.500531][T20724] netlink: 164 bytes leftover after parsing attributes in process `syz.4.37346'. [ 2116.527864][T20725] netlink: 'syz.2.37347': attribute type 9 has an invalid length. [ 2117.749428][T20760] netlink: 'syz.1.37370': attribute type 9 has an invalid length. [ 2117.899532][T20759] netlink: 703 bytes leftover after parsing attributes in process `syz.0.37361'. [ 2118.037602][T20771] netlink: 'syz.4.37363': attribute type 3 has an invalid length. [ 2118.064813][T20771] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.37363'. [ 2118.318597][T20779] netlink: 'syz.0.37379': attribute type 3 has an invalid length. [ 2118.354745][T20779] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.37379'. [ 2118.365772][T20783] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.37369'. [ 2118.561666][T20793] netlink: 'syz.2.37371': attribute type 10 has an invalid length. [ 2118.803982][T20793] device team0 left promiscuous mode [ 2118.816586][T20793] device team_slave_1 left promiscuous mode [ 2118.907580][T20798] netlink: 40 bytes leftover after parsing attributes in process `syz.2.37371'. [ 2118.964617][T20798] device team0 entered promiscuous mode [ 2118.970296][T20798] device team_slave_1 entered promiscuous mode [ 2119.013143][T20798] 8021q: adding VLAN 0 to HW filter on device team0 [ 2119.085557][T20798] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2119.179736][T20803] netlink: 703 bytes leftover after parsing attributes in process `syz.1.37377'. [ 2120.014770][T20828] validate_nla: 1 callbacks suppressed [ 2120.014810][T20828] netlink: 'syz.1.37385': attribute type 3 has an invalid length. [ 2120.048171][T20828] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.37385'. [ 2120.229841][T20831] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.37386'. [ 2120.309817][T20839] netlink: 'syz.0.37400': attribute type 10 has an invalid length. [ 2120.449450][T20839] device team0 left promiscuous mode [ 2120.514613][T20839] device team_slave_1 left promiscuous mode [ 2120.522555][T20839] device wlan1 left promiscuous mode [ 2120.686457][T20843] netlink: 'syz.0.37400': attribute type 10 has an invalid length. [ 2120.718883][T20843] netlink: 40 bytes leftover after parsing attributes in process `syz.0.37400'. [ 2120.775894][T20843] device team0 entered promiscuous mode [ 2120.796683][T20843] device team_slave_1 entered promiscuous mode [ 2120.819694][T20843] device wlan1 entered promiscuous mode [ 2120.877445][T20843] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2120.910241][T20845] netlink: 703 bytes leftover after parsing attributes in process `syz.3.37391'. [ 2121.150855][T20861] netlink: 'syz.0.37395': attribute type 4 has an invalid length. [ 2121.203153][T20861] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2122.206979][T20882] netlink: 'syz.3.37401': attribute type 3 has an invalid length. [ 2122.625263][T20900] netlink: 'syz.1.37407': attribute type 10 has an invalid length. [ 2122.668355][T20900] netlink: 'syz.1.37407': attribute type 10 has an invalid length. [ 2123.445689][T20921] netlink: 'syz.0.37418': attribute type 3 has an invalid length. [ 2123.453755][T20921] __nla_validate_parse: 5 callbacks suppressed [ 2123.453792][T20921] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.37418'. [ 2124.490123][T20935] netlink: 164 bytes leftover after parsing attributes in process `syz.3.37423'. [ 2126.362458][T20971] netlink: 'syz.1.37435': attribute type 3 has an invalid length. [ 2126.414515][T20971] netlink: 'syz.1.37435': attribute type 6 has an invalid length. [ 2126.438796][T20971] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.37435'. [ 2127.365519][T20998] IPv6: Can't replace route, no match found [ 2127.461169][T21001] netlink: 164 bytes leftover after parsing attributes in process `syz.3.37446'. [ 2128.867932][T21044] IPv6: Can't replace route, no match found [ 2129.215329][T21061] netlink: 'syz.3.37468': attribute type 3 has an invalid length. [ 2129.223292][T21061] netlink: 'syz.3.37468': attribute type 6 has an invalid length. [ 2129.231741][T21061] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.37468'. [ 2129.676251][T21086] IPv6: Can't replace route, no match found [ 2130.444484][T21110] netlink: 'syz.1.37486': attribute type 4 has an invalid length. [ 2130.452459][T21110] netlink: 'syz.1.37486': attribute type 26 has an invalid length. [ 2130.466054][T21110] netlink: 60759 bytes leftover after parsing attributes in process `syz.1.37486'. [ 2131.447850][T21125] : port 1(team0) entered blocking state [ 2131.464104][T21125] : port 1(team0) entered disabled state [ 2132.469212][T21150] netlink: 'syz.1.37511': attribute type 3 has an invalid length. [ 2132.492072][T21150] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.37511'. [ 2132.758796][T21165] netlink: 'syz.3.37505': attribute type 2 has an invalid length. [ 2133.502237][T21175] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.37510'. [ 2133.629662][T21185] netlink: 142652 bytes leftover after parsing attributes in process `syz.4.37515'. [ 2133.685673][T21187] netlink: 'syz.3.37519': attribute type 10 has an invalid length. [ 2133.767347][T21187] device vxcan0 entered promiscuous mode [ 2133.779697][T21187] team0: Device vxcan0 is of different type [ 2133.836807][T21185] tipc: Started in network mode [ 2133.848432][T21185] tipc: Node identity b, cluster identity 6 [ 2133.882041][T21185] tipc: Node number set to 11 [ 2135.080317][T21214] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.37528'. [ 2136.150751][T21255] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.37545'. [ 2136.312875][T21267] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.37550'. [ 2136.570010][T21274] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.37553'. [ 2137.139917][T21304] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.37561'. [ 2137.218529][T21311] netlink: 63579 bytes leftover after parsing attributes in process `syz.1.37566'. [ 2137.655183][T21339] netlink: 'syz.2.37580': attribute type 2 has an invalid length. [ 2140.839129][T21385] netlink: 'syz.1.37595': attribute type 2 has an invalid length. [ 2140.940976][T21389] netlink: 156 bytes leftover after parsing attributes in process `syz.2.37609'. [ 2140.964691][T21390] netlink: 168 bytes leftover after parsing attributes in process `syz.3.37610'. [ 2140.973829][T21390] C: renamed from team_slave_0 [ 2141.115299][T21400] device syzkaller0 entered promiscuous mode [ 2141.444817][T21422] netlink: set zone limit has 8 unknown bytes [ 2141.653671][T21432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2141.661022][T21432] IPv6: NLM_F_CREATE should be set when creating new route [ 2142.251546][T21438] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 2142.570574][T21451] netlink: 'syz.1.37632': attribute type 10 has an invalid length. [ 2142.579206][T21451] netlink: 40 bytes leftover after parsing attributes in process `syz.1.37632'. [ 2142.816643][T21464] netlink: 156 bytes leftover after parsing attributes in process `syz.1.37624'. [ 2143.289771][T21483] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.37630'. [ 2143.441462][T21488] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 2144.013236][T21511] netlink: 156 bytes leftover after parsing attributes in process `syz.0.37643'. [ 2144.044999][T21516] netlink: set zone limit has 8 unknown bytes [ 2144.768280][T21528] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.37650'. [ 2144.825172][T21522] netlink: 'syz.3.37647': attribute type 10 has an invalid length. [ 2144.836420][T21522] netlink: 40 bytes leftover after parsing attributes in process `syz.3.37647'. [ 2144.883072][T21522] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2145.076365][T21543] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.37663'. [ 2146.119946][T21564] netlink: set zone limit has 8 unknown bytes [ 2146.590169][T21580] netlink: 'syz.4.37669': attribute type 1 has an invalid length. [ 2146.633374][T21580] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.37669'. [ 2146.793292][T21588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2146.800602][T21588] IPv6: NLM_F_CREATE should be set when creating new route [ 2148.880712][T21623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2148.888112][T21623] IPv6: NLM_F_CREATE should be set when creating new route [ 2149.325592][T21635] device wlan0 left promiscuous mode [ 2149.662640][T21643] device syzkaller0 entered promiscuous mode [ 2152.951748][T21676] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2155.700864][T21689] netlink: 'syz.1.37708': attribute type 3 has an invalid length. [ 2155.720822][T21689] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.37708'. [ 2155.726512][T21695] device syzkaller0 entered promiscuous mode [ 2157.017441][T21727] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.37721'. [ 2157.224109][T21741] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.37728'. [ 2157.419344][T21751] netlink: 830 bytes leftover after parsing attributes in process `syz.4.37733'. [ 2157.502692][T21759] netlink: 'syz.2.37737': attribute type 3 has an invalid length. [ 2157.522271][T21759] netlink: 'syz.2.37737': attribute type 1 has an invalid length. [ 2157.532552][T21759] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.37737'. [ 2157.632248][T21766] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2157.641370][T21768] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.37741'. [ 2157.752954][T21770] netlink: 'syz.4.37742': attribute type 10 has an invalid length. [ 2157.771650][T21770] netlink: 40 bytes leftover after parsing attributes in process `syz.4.37742'. [ 2157.783776][T21770] : port 1(team0) entered disabled state [ 2157.808548][T21770] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2157.904734][T21776] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.37745'. [ 2158.140425][T21786] netlink: 830 bytes leftover after parsing attributes in process `syz.1.37751'. [ 2158.193363][T21793] netlink: 'syz.3.37753': attribute type 3 has an invalid length. [ 2158.202042][T21793] netlink: 'syz.3.37753': attribute type 1 has an invalid length. [ 2158.206999][T21790] mac80211_hwsim hwsim73 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2158.212031][T21793] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.37753'. [ 2158.649393][T21802] netlink: 'syz.0.37756': attribute type 10 has an invalid length. [ 2158.678115][T21802] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2158.901162][T21826] netlink: 'syz.0.37766': attribute type 3 has an invalid length. [ 2158.919469][T21826] netlink: 'syz.0.37766': attribute type 1 has an invalid length. [ 2159.171926][T21832] device syzkaller0 entered promiscuous mode [ 2159.670242][T21851] netlink: 'syz.2.37776': attribute type 10 has an invalid length. [ 2159.687771][T21851] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2160.440550][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.446966][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.925655][T21891] validate_nla: 2 callbacks suppressed [ 2160.925689][T21891] netlink: 'syz.3.37805': attribute type 10 has an invalid length. [ 2160.986948][T21891] device team0 left promiscuous mode [ 2160.992421][T21891] device team_slave_1 left promiscuous mode [ 2161.018000][T21891] device wlan1 left promiscuous mode [ 2161.040336][T21888] netlink: 'syz.0.37793': attribute type 10 has an invalid length. [ 2161.053119][T21888] __nla_validate_parse: 9 callbacks suppressed [ 2161.053145][T21888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.37793'. [ 2161.070374][T21888] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2161.086061][T21897] netlink: 'syz.3.37805': attribute type 10 has an invalid length. [ 2161.094627][T21897] netlink: 40 bytes leftover after parsing attributes in process `syz.3.37805'. [ 2161.106599][T21897] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2161.200861][T21904] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.37798'. [ 2161.257319][T21906] device wlan0 left promiscuous mode [ 2161.415805][T21913] netlink: 'syz.0.37802': attribute type 3 has an invalid length. [ 2161.427581][T21913] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.37802'. [ 2161.448259][T21911] device syzkaller0 entered promiscuous mode [ 2161.827788][T21930] netlink: 'syz.4.37812': attribute type 10 has an invalid length. [ 2161.848359][T21930] device team0 left promiscuous mode [ 2161.857857][T21930] device team_slave_1 left promiscuous mode [ 2161.912398][T21937] netlink: 'syz.4.37812': attribute type 10 has an invalid length. [ 2161.914845][T18276] wlan1: Trigger new scan to find an IBSS to join [ 2161.952307][T21937] netlink: 40 bytes leftover after parsing attributes in process `syz.4.37812'. [ 2161.990813][T21937] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2162.032158][T21941] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2162.046158][T21945] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2162.065520][T21945] device syzkaller0 entered promiscuous mode [ 2162.169732][T21951] netlink: 'syz.4.37818': attribute type 3 has an invalid length. [ 2162.195337][T21951] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.37818'. [ 2162.277505][T21959] device syzkaller0 entered promiscuous mode [ 2162.903902][T21984] device syzkaller0 entered promiscuous mode [ 2163.018328][T21990] netlink: 'syz.3.37835': attribute type 3 has an invalid length. [ 2163.051751][T21990] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.37835'. [ 2163.762577][T22007] device syzkaller0 entered promiscuous mode [ 2163.781986][T22011] netlink: 'syz.0.37843': attribute type 10 has an invalid length. [ 2163.823368][T22011] device team0 left promiscuous mode [ 2163.835293][T22011] device team_slave_1 left promiscuous mode [ 2163.847510][T22011] device wlan1 left promiscuous mode [ 2163.877086][T22014] netlink: 'syz.0.37843': attribute type 10 has an invalid length. [ 2163.910854][T22014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.37843'. [ 2163.936097][T22014] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2164.563154][T22038] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.37854'. [ 2164.867726][T22048] device syzkaller0 entered promiscuous mode [ 2165.512855][T22069] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.37867'. [ 2165.913798][T24950] wlan1: Trigger new scan to find an IBSS to join [ 2165.926885][T22091] device syzkaller0 entered promiscuous mode [ 2165.994016][T22085] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2166.053289][T22085] CPU: 1 PID: 22085 Comm: syz.1.37876 Not tainted syzkaller #0 [ 2166.060986][T22085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2166.071071][T22085] Call Trace: [ 2166.074392][T22085] [ 2166.077351][T22085] dump_stack_lvl+0x188/0x250 [ 2166.082059][T22085] ? show_regs_print_info+0x20/0x20 [ 2166.087285][T22085] ? load_image+0x410/0x410 [ 2166.091820][T22085] sysfs_warn_dup+0x8a/0xa0 [ 2166.096344][T22085] sysfs_do_create_link_sd+0xc0/0x110 [ 2166.101740][T22085] device_add+0x83b/0x1050 [ 2166.106175][T22085] wiphy_register+0x1e74/0x2c40 [ 2166.111049][T22085] ? __rtnl_unlock+0x28/0xa0 [ 2166.115698][T22085] ? cfg80211_event_work+0x40/0x40 [ 2166.120827][T22085] ? minstrel_ht_alloc+0x807/0x980 [ 2166.125961][T22085] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2166.132045][T22085] ieee80211_register_hw+0x2a03/0x3a60 [ 2166.137528][T22085] ? ieee80211_register_hw+0xac1/0x3a60 [ 2166.143102][T22085] ? ieee80211_tasklet_handler+0x20/0x20 [ 2166.148768][T22085] ? rcu_is_watching+0x11/0xa0 [ 2166.153551][T22085] ? hrtimer_init+0x10c/0x220 [ 2166.158256][T22085] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2166.164008][T22085] hwsim_new_radio_nl+0xa7d/0xc50 [ 2166.169065][T22085] genl_rcv_msg+0xd0b/0xfa0 [ 2166.173712][T22085] ? genl_bind+0x370/0x370 [ 2166.178671][T22085] ? rcu_nmi_exit+0x6f/0xf0 [ 2166.183192][T22085] ? verify_lock_unused+0x140/0x140 [ 2166.188407][T22085] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2166.194407][T22085] ? lock_chain_count+0x20/0x20 [ 2166.199283][T22085] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2166.205456][T22085] ? lockdep_hardirqs_on+0x94/0x140 [ 2166.210667][T22085] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2166.217029][T22085] netlink_rcv_skb+0x1e9/0x430 [ 2166.221809][T22085] ? genl_bind+0x370/0x370 [ 2166.226247][T22085] ? netlink_ack+0xb10/0xb10 [ 2166.230862][T22085] ? down_read+0x1aa/0x2e0 [ 2166.235296][T22085] genl_rcv+0x24/0x40 [ 2166.239293][T22085] netlink_unicast+0x78f/0x940 [ 2166.244086][T22085] netlink_sendmsg+0x8ba/0xbe0 [ 2166.249003][T22085] ? lockdep_hardirqs_on+0x94/0x140 [ 2166.254238][T22085] ? netlink_getsockopt+0x570/0x570 [ 2166.259460][T22085] ? netlink_getsockopt+0x570/0x570 [ 2166.264693][T22085] ? netlink_getsockopt+0x570/0x570 [ 2166.269924][T22085] ____sys_sendmsg+0x5be/0x8f0 [ 2166.274723][T22085] ? __sys_sendmsg_sock+0x30/0x30 [ 2166.279770][T22085] ? ___sys_sendmsg+0x21b/0x2e0 [ 2166.284689][T22085] ___sys_sendmsg+0x236/0x2e0 [ 2166.289392][T22085] ? __sys_sendmsg+0x290/0x290 [ 2166.294389][T22085] __se_sys_sendmsg+0x1b7/0x2a0 [ 2166.299265][T22085] ? __x64_sys_sendmsg+0x80/0x80 [ 2166.304212][T22085] ? lockdep_hardirqs_on+0x94/0x140 [ 2166.309454][T22085] do_syscall_64+0x4c/0xa0 [ 2166.313971][T22085] ? clear_bhb_loop+0x30/0x80 [ 2166.318658][T22085] ? clear_bhb_loop+0x30/0x80 [ 2166.323352][T22085] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2166.329260][T22085] RIP: 0033:0x7f0d21230e59 [ 2166.333691][T22085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2166.353311][T22085] RSP: 002b:00007f0d1f489028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2166.361742][T22085] RAX: ffffffffffffffda RBX: 00007f0d214b8fa0 RCX: 00007f0d21230e59 [ 2166.369734][T22085] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2166.377717][T22085] RBP: 00007f0d212c6e6f R08: 0000000000000000 R09: 0000000000000000 [ 2166.385697][T22085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2166.393693][T22085] R13: 00007f0d214b9038 R14: 00007f0d214b8fa0 R15: 00007ffda499fa78 [ 2166.401727][T22085] [ 2166.498932][T22097] __nla_validate_parse: 1 callbacks suppressed [ 2166.498955][T22097] netlink: 6 bytes leftover after parsing attributes in process `syz.4.37877'. [ 2166.523509][T22097] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2167.024765][T22111] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2167.057598][T22111] device syzkaller0 entered promiscuous mode [ 2167.409708][T22115] validate_nla: 5 callbacks suppressed [ 2167.409725][T22115] netlink: 'syz.2.37886': attribute type 6 has an invalid length. [ 2167.637274][T22129] device syzkaller0 entered promiscuous mode [ 2168.362479][T22141] device syzkaller0 entered promiscuous mode [ 2168.571866][T22146] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2168.628719][T22146] device syzkaller0 entered promiscuous mode [ 2169.294083][T22178] device syzkaller0 entered promiscuous mode [ 2169.370201][T22184] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2169.419998][T22184] device syzkaller0 entered promiscuous mode [ 2169.496210][T22188] device syzkaller0 entered promiscuous mode [ 2169.907558][T24944] wlan1: Trigger new scan to find an IBSS to join [ 2169.975370][T24944] wlan1: Creating new IBSS network, BSSID 4a:23:31:bd:ac:f9 [ 2170.943555][T22221] device syzkaller0 entered promiscuous mode [ 2171.017288][T22223] device syzkaller0 entered promiscuous mode [ 2173.833769][T22234] netlink: 'syz.4.37932': attribute type 9 has an invalid length. [ 2173.872231][T22234] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.37932'. [ 2174.046321][T22242] sock: sock_set_timeout: `syz.3.37936' (pid 22242) tries to set negative timeout [ 2174.080337][T22242] netlink: 'syz.3.37936': attribute type 10 has an invalid length. [ 2174.237975][T22242] team0: Device wg1 is of different type [ 2174.464003][T22241] delete_channel: no stack [ 2176.167633][T22289] netlink: 'syz.0.37955': attribute type 3 has an invalid length. [ 2176.193094][T22293] sock: sock_set_timeout: `syz.4.37957' (pid 22293) tries to set negative timeout [ 2176.246934][T22289] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.37955'. [ 2176.260276][T22293] netlink: 'syz.4.37957': attribute type 10 has an invalid length. [ 2176.307483][T22293] team0: Device wg1 is of different type [ 2176.379770][T22291] delete_channel: no stack [ 2176.437079][T22289] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2176.463616][T22289] CPU: 1 PID: 22289 Comm: syz.0.37955 Not tainted syzkaller #0 [ 2176.471224][T22289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2176.481302][T22289] Call Trace: [ 2176.484600][T22289] [ 2176.487544][T22289] dump_stack_lvl+0x188/0x250 [ 2176.492247][T22289] ? show_regs_print_info+0x20/0x20 [ 2176.497465][T22289] ? load_image+0x410/0x410 [ 2176.502019][T22289] sysfs_warn_dup+0x8a/0xa0 [ 2176.506540][T22289] sysfs_do_create_link_sd+0xc0/0x110 [ 2176.512018][T22289] device_add+0x83b/0x1050 [ 2176.516457][T22289] wiphy_register+0x1e74/0x2c40 [ 2176.521344][T22289] ? cfg80211_event_work+0x40/0x40 [ 2176.526471][T22289] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2176.532650][T22289] ? rtnl_unlock+0x5/0x10 [ 2176.537005][T22289] ieee80211_register_hw+0x2a03/0x3a60 [ 2176.542484][T22289] ? ieee80211_register_hw+0xac1/0x3a60 [ 2176.548052][T22289] ? ieee80211_tasklet_handler+0x20/0x20 [ 2176.553725][T22289] ? rcu_is_watching+0x11/0xa0 [ 2176.558596][T22289] ? hrtimer_init+0x10c/0x220 [ 2176.563295][T22289] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2176.569054][T22289] hwsim_new_radio_nl+0xa7d/0xc50 [ 2176.574206][T22289] genl_rcv_msg+0xd0b/0xfa0 [ 2176.578752][T22289] ? genl_bind+0x370/0x370 [ 2176.583200][T22289] ? verify_lock_unused+0x140/0x140 [ 2176.588411][T22289] ? perf_trace_preemptirq_template+0x2bc/0x360 [ 2176.594689][T22289] ? verify_lock_unused+0x140/0x140 [ 2176.599918][T22289] ? perf_trace_preemptirq_template+0x2bc/0x360 [ 2176.606192][T22289] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2176.612554][T22289] netlink_rcv_skb+0x1e9/0x430 [ 2176.617336][T22289] ? genl_bind+0x370/0x370 [ 2176.621770][T22289] ? netlink_ack+0xb10/0xb10 [ 2176.626385][T22289] ? down_read+0x1aa/0x2e0 [ 2176.630936][T22289] genl_rcv+0x24/0x40 [ 2176.634940][T22289] netlink_unicast+0x78f/0x940 [ 2176.639743][T22289] netlink_sendmsg+0x8ba/0xbe0 [ 2176.644536][T22289] ? netlink_getsockopt+0x570/0x570 [ 2176.649758][T22289] ? aa_sock_msg_perm+0x94/0x150 [ 2176.654721][T22289] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2176.660019][T22289] ? security_socket_sendmsg+0x7c/0xa0 [ 2176.665494][T22289] ? netlink_getsockopt+0x570/0x570 [ 2176.670718][T22289] ____sys_sendmsg+0x5be/0x8f0 [ 2176.675509][T22289] ? __sys_sendmsg_sock+0x30/0x30 [ 2176.680561][T22289] ? import_iovec+0x6f/0xa0 [ 2176.685087][T22289] ___sys_sendmsg+0x236/0x2e0 [ 2176.689789][T22289] ? __sys_sendmsg+0x290/0x290 [ 2176.694583][T22289] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2176.700888][T22289] __se_sys_sendmsg+0x1b7/0x2a0 [ 2176.705852][T22289] ? __x64_sys_sendmsg+0x80/0x80 [ 2176.710892][T22289] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2176.716922][T22289] ? lockdep_hardirqs_on+0x94/0x140 [ 2176.722153][T22289] do_syscall_64+0x4c/0xa0 [ 2176.726579][T22289] ? clear_bhb_loop+0x30/0x80 [ 2176.731267][T22289] ? clear_bhb_loop+0x30/0x80 [ 2176.735960][T22289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2176.742227][T22289] RIP: 0033:0x7fee4a727e59 [ 2176.746808][T22289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2176.766877][T22289] RSP: 002b:00007fee48980028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2176.775449][T22289] RAX: ffffffffffffffda RBX: 00007fee4a9affa0 RCX: 00007fee4a727e59 [ 2176.783440][T22289] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2176.791440][T22289] RBP: 00007fee4a7bde6f R08: 0000000000000000 R09: 0000000000000000 [ 2176.799426][T22289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2176.807410][T22289] R13: 00007fee4a9b0038 R14: 00007fee4a9affa0 R15: 00007ffd46f12c58 [ 2176.815603][T22289] [ 2178.153524][T22344] netlink: 'syz.2.37974': attribute type 3 has an invalid length. [ 2178.252136][T22344] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.37974'. [ 2178.343101][T22344] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2178.361811][T22344] CPU: 0 PID: 22344 Comm: syz.2.37974 Not tainted syzkaller #0 [ 2178.369558][T22344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2178.379660][T22344] Call Trace: [ 2178.382972][T22344] [ 2178.385939][T22344] dump_stack_lvl+0x188/0x250 [ 2178.390661][T22344] ? show_regs_print_info+0x20/0x20 [ 2178.395986][T22344] ? load_image+0x410/0x410 [ 2178.400543][T22344] sysfs_warn_dup+0x8a/0xa0 [ 2178.405077][T22344] sysfs_do_create_link_sd+0xc0/0x110 [ 2178.410489][T22344] device_add+0x83b/0x1050 [ 2178.414951][T22344] wiphy_register+0x1e74/0x2c40 [ 2178.420903][T22344] ? cfg80211_event_work+0x40/0x40 [ 2178.426048][T22344] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2178.432256][T22344] ieee80211_register_hw+0x2a03/0x3a60 [ 2178.437869][T22344] ? ieee80211_register_hw+0xac1/0x3a60 [ 2178.443463][T22344] ? ieee80211_tasklet_handler+0x20/0x20 [ 2178.449143][T22344] ? hrtimer_init+0x9f/0x220 [ 2178.453767][T22344] ? __sanitizer_cov_trace_pc+0x3e/0x60 [ 2178.459352][T22344] ? hrtimer_init+0x10c/0x220 [ 2178.464143][T22344] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2178.469921][T22344] hwsim_new_radio_nl+0xa7d/0xc50 [ 2178.475000][T22344] genl_rcv_msg+0xd0b/0xfa0 [ 2178.479564][T22344] ? genl_bind+0x370/0x370 [ 2178.484033][T22344] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2178.490061][T22344] ? lock_chain_count+0x20/0x20 [ 2178.494961][T22344] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2178.501152][T22344] ? lockdep_hardirqs_on+0x94/0x140 [ 2178.506399][T22344] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2178.512601][T22344] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2178.518980][T22344] ? lock_acquire+0x208/0x400 [ 2178.523709][T22344] netlink_rcv_skb+0x1e9/0x430 [ 2178.528510][T22344] ? genl_bind+0x370/0x370 [ 2178.532965][T22344] ? netlink_ack+0xb10/0xb10 [ 2178.537592][T22344] ? down_read+0x1aa/0x2e0 [ 2178.542185][T22344] genl_rcv+0x24/0x40 [ 2178.546198][T22344] netlink_unicast+0x78f/0x940 [ 2178.551002][T22344] netlink_sendmsg+0x8ba/0xbe0 [ 2178.555786][T22344] ? netlink_getsockopt+0x570/0x570 [ 2178.561063][T22344] ? netlink_getsockopt+0x570/0x570 [ 2178.566305][T22344] ____sys_sendmsg+0x5be/0x8f0 [ 2178.571083][T22344] ? __sys_sendmsg_sock+0x30/0x30 [ 2178.576117][T22344] ? import_iovec+0x6f/0xa0 [ 2178.580633][T22344] ___sys_sendmsg+0x236/0x2e0 [ 2178.585318][T22344] ? __sys_sendmsg+0x290/0x290 [ 2178.590134][T22344] __se_sys_sendmsg+0x1b7/0x2a0 [ 2178.595015][T22344] ? __x64_sys_sendmsg+0x80/0x80 [ 2178.600026][T22344] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2178.605958][T22344] do_syscall_64+0x4c/0xa0 [ 2178.610410][T22344] ? clear_bhb_loop+0x30/0x80 [ 2178.615112][T22344] ? clear_bhb_loop+0x30/0x80 [ 2178.619916][T22344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2178.625914][T22344] RIP: 0033:0x7fd62793fe59 [ 2178.630363][T22344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2178.649992][T22344] RSP: 002b:00007fd625b98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2178.658439][T22344] RAX: ffffffffffffffda RBX: 00007fd627bc7fa0 RCX: 00007fd62793fe59 [ 2178.666522][T22344] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2178.674684][T22344] RBP: 00007fd6279d5e6f R08: 0000000000000000 R09: 0000000000000000 [ 2178.682691][T22344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2178.690724][T22344] R13: 00007fd627bc8038 R14: 00007fd627bc7fa0 R15: 00007ffdc40cb3a8 [ 2178.698734][T22344] [ 2179.608246][T22390] netlink: 'syz.4.37993': attribute type 3 has an invalid length. [ 2179.728527][T22390] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.37993'. [ 2179.856745][T22390] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2179.884972][T22390] CPU: 1 PID: 22390 Comm: syz.4.37993 Not tainted syzkaller #0 [ 2179.892587][T22390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2179.902667][T22390] Call Trace: [ 2179.905969][T22390] [ 2179.908919][T22390] dump_stack_lvl+0x188/0x250 [ 2179.913623][T22390] ? show_regs_print_info+0x20/0x20 [ 2179.918843][T22390] ? load_image+0x410/0x410 [ 2179.923382][T22390] sysfs_warn_dup+0x8a/0xa0 [ 2179.927904][T22390] sysfs_do_create_link_sd+0xc0/0x110 [ 2179.933297][T22390] device_add+0x83b/0x1050 [ 2179.937738][T22390] wiphy_register+0x1e74/0x2c40 [ 2179.942628][T22390] ? cfg80211_event_work+0x40/0x40 [ 2179.947755][T22390] ? minstrel_ht_alloc+0x807/0x980 [ 2179.952892][T22390] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2179.959066][T22390] ieee80211_register_hw+0x2a03/0x3a60 [ 2179.964839][T22390] ? ieee80211_register_hw+0xac1/0x3a60 [ 2179.970632][T22390] ? ieee80211_tasklet_handler+0x20/0x20 [ 2179.976291][T22390] ? rcu_is_watching+0x11/0xa0 [ 2179.981079][T22390] ? hrtimer_init+0x10c/0x220 [ 2179.985785][T22390] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2179.991549][T22390] hwsim_new_radio_nl+0xa7d/0xc50 [ 2179.996617][T22390] genl_rcv_msg+0xd0b/0xfa0 [ 2180.001157][T22390] ? genl_bind+0x370/0x370 [ 2180.005603][T22390] ? mark_lock+0x94/0x320 [ 2180.009955][T22390] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2180.015957][T22390] ? lock_chain_count+0x20/0x20 [ 2180.020840][T22390] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2180.027010][T22390] ? lockdep_hardirqs_on+0x94/0x140 [ 2180.032225][T22390] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2180.038590][T22390] netlink_rcv_skb+0x1e9/0x430 [ 2180.043382][T22390] ? genl_bind+0x370/0x370 [ 2180.047824][T22390] ? netlink_ack+0xb10/0xb10 [ 2180.052447][T22390] ? down_read+0x1aa/0x2e0 [ 2180.056893][T22390] genl_rcv+0x24/0x40 [ 2180.060904][T22390] netlink_unicast+0x78f/0x940 [ 2180.065701][T22390] netlink_sendmsg+0x8ba/0xbe0 [ 2180.070505][T22390] ? netlink_getsockopt+0x570/0x570 [ 2180.075726][T22390] ? aa_sock_msg_perm+0x94/0x150 [ 2180.080681][T22390] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2180.085992][T22390] ? security_socket_sendmsg+0x7c/0xa0 [ 2180.091528][T22390] ? netlink_getsockopt+0x570/0x570 [ 2180.096770][T22390] ____sys_sendmsg+0x5be/0x8f0 [ 2180.101567][T22390] ? __sys_sendmsg_sock+0x30/0x30 [ 2180.106614][T22390] ? ___sys_sendmsg+0x21b/0x2e0 [ 2180.111493][T22390] ___sys_sendmsg+0x236/0x2e0 [ 2180.116296][T22390] ? __sys_sendmsg+0x290/0x290 [ 2180.121135][T22390] __se_sys_sendmsg+0x1b7/0x2a0 [ 2180.126010][T22390] ? __x64_sys_sendmsg+0x80/0x80 [ 2180.130988][T22390] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2180.136910][T22390] do_syscall_64+0x4c/0xa0 [ 2180.141347][T22390] ? clear_bhb_loop+0x30/0x80 [ 2180.146040][T22390] ? clear_bhb_loop+0x30/0x80 [ 2180.150738][T22390] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2180.156648][T22390] RIP: 0033:0x7f27c6f89e59 [ 2180.161087][T22390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2180.180880][T22390] RSP: 002b:00007f27c51e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2180.189323][T22390] RAX: ffffffffffffffda RBX: 00007f27c7211fa0 RCX: 00007f27c6f89e59 [ 2180.197309][T22390] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2180.205292][T22390] RBP: 00007f27c701fe6f R08: 0000000000000000 R09: 0000000000000000 [ 2180.213274][T22390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2180.221262][T22390] R13: 00007f27c7212038 R14: 00007f27c7211fa0 R15: 00007ffda66b17d8 [ 2180.229443][T22390] [ 2180.701186][T22418] netlink: 'syz.1.38002': attribute type 10 has an invalid length. [ 2180.710532][T22418] netlink: 40 bytes leftover after parsing attributes in process `syz.1.38002'. [ 2181.701779][T22454] netlink: 'syz.3.38014': attribute type 3 has an invalid length. [ 2181.918843][T22454] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.38014'. [ 2182.076639][T22454] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2182.085749][T22454] CPU: 1 PID: 22454 Comm: syz.3.38014 Not tainted syzkaller #0 [ 2182.093330][T22454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2182.103663][T22454] Call Trace: [ 2182.106974][T22454] [ 2182.109923][T22454] dump_stack_lvl+0x188/0x250 [ 2182.114644][T22454] ? show_regs_print_info+0x20/0x20 [ 2182.119866][T22454] ? load_image+0x410/0x410 [ 2182.124417][T22454] sysfs_warn_dup+0x8a/0xa0 [ 2182.128943][T22454] sysfs_do_create_link_sd+0xc0/0x110 [ 2182.134442][T22454] device_add+0x83b/0x1050 [ 2182.138897][T22454] wiphy_register+0x1e74/0x2c40 [ 2182.143820][T22454] ? cfg80211_event_work+0x40/0x40 [ 2182.148962][T22454] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2182.155164][T22454] ? ieee80211_register_hw+0x2835/0x3a60 [ 2182.160829][T22454] ieee80211_register_hw+0x2a03/0x3a60 [ 2182.166317][T22454] ? ieee80211_register_hw+0xac1/0x3a60 [ 2182.171898][T22454] ? ieee80211_tasklet_handler+0x20/0x20 [ 2182.177563][T22454] ? rcu_is_watching+0x11/0xa0 [ 2182.182354][T22454] ? hrtimer_init+0x10c/0x220 [ 2182.187073][T22454] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2182.192930][T22454] hwsim_new_radio_nl+0xa7d/0xc50 [ 2182.198000][T22454] genl_rcv_msg+0xd0b/0xfa0 [ 2182.202561][T22454] ? genl_bind+0x370/0x370 [ 2182.207016][T22454] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2182.213023][T22454] ? lock_chain_count+0x20/0x20 [ 2182.217907][T22454] ? mark_lock+0x94/0x320 [ 2182.222259][T22454] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2182.228257][T22454] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2182.234615][T22454] ? lock_chain_count+0x20/0x20 [ 2182.239506][T22454] netlink_rcv_skb+0x1e9/0x430 [ 2182.244295][T22454] ? genl_bind+0x370/0x370 [ 2182.248736][T22454] ? netlink_ack+0xb10/0xb10 [ 2182.253353][T22454] ? preempt_count_add+0x85/0x190 [ 2182.258505][T22454] ? down_read+0x1aa/0x2e0 [ 2182.263047][T22454] genl_rcv+0x24/0x40 [ 2182.267055][T22454] netlink_unicast+0x78f/0x940 [ 2182.271856][T22454] netlink_sendmsg+0x8ba/0xbe0 [ 2182.276651][T22454] ? netlink_getsockopt+0x570/0x570 [ 2182.281885][T22454] ? netlink_getsockopt+0x570/0x570 [ 2182.287110][T22454] ____sys_sendmsg+0x5be/0x8f0 [ 2182.291912][T22454] ? __sys_sendmsg_sock+0x30/0x30 [ 2182.296977][T22454] ? import_iovec+0x6f/0xa0 [ 2182.301611][T22454] ___sys_sendmsg+0x236/0x2e0 [ 2182.306320][T22454] ? __sys_sendmsg+0x290/0x290 [ 2182.311123][T22454] ? trace_event_raw_event_lock+0x250/0x250 [ 2182.317076][T22454] __se_sys_sendmsg+0x1b7/0x2a0 [ 2182.322483][T22454] ? __x64_sys_sendmsg+0x80/0x80 [ 2182.327437][T22454] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2182.333478][T22454] ? lockdep_hardirqs_on+0x94/0x140 [ 2182.338708][T22454] do_syscall_64+0x4c/0xa0 [ 2182.343138][T22454] ? clear_bhb_loop+0x30/0x80 [ 2182.347838][T22454] ? clear_bhb_loop+0x30/0x80 [ 2182.352571][T22454] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2182.358567][T22454] RIP: 0033:0x7f3e9f6aae59 [ 2182.363009][T22454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2182.382636][T22454] RSP: 002b:00007f3e9d903028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2182.391074][T22454] RAX: ffffffffffffffda RBX: 00007f3e9f932fa0 RCX: 00007f3e9f6aae59 [ 2182.399069][T22454] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2182.407060][T22454] RBP: 00007f3e9f740e6f R08: 0000000000000000 R09: 0000000000000000 [ 2182.415049][T22454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2182.423038][T22454] R13: 00007f3e9f933038 R14: 00007f3e9f932fa0 R15: 00007fff0e14f2a8 [ 2182.431063][T22454] [ 2182.717489][T22457] netlink: 188 bytes leftover after parsing attributes in process `syz.1.38017'. [ 2183.346214][T22485] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.38027'. [ 2184.066107][T22495] netlink: 'syz.1.38041': attribute type 10 has an invalid length. [ 2184.075116][T22495] netlink: 40 bytes leftover after parsing attributes in process `syz.1.38041'. [ 2184.246078][T22504] netlink: 'syz.1.38033': attribute type 3 has an invalid length. [ 2184.347458][T22504] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.38033'. [ 2184.455146][T22504] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2184.496426][T22504] CPU: 0 PID: 22504 Comm: syz.1.38033 Not tainted syzkaller #0 [ 2184.504039][T22504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2184.514122][T22504] Call Trace: [ 2184.517429][T22504] [ 2184.520381][T22504] dump_stack_lvl+0x188/0x250 [ 2184.525089][T22504] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2184.531276][T22504] ? show_regs_print_info+0x20/0x20 [ 2184.536611][T22504] ? load_image+0x410/0x410 [ 2184.541132][T22504] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2184.547209][T22504] ? sysfs_warn_dup+0x61/0xa0 [ 2184.551899][T22504] sysfs_warn_dup+0x8a/0xa0 [ 2184.556410][T22504] sysfs_do_create_link_sd+0xc0/0x110 [ 2184.561786][T22504] device_add+0x83b/0x1050 [ 2184.566212][T22504] wiphy_register+0x1e74/0x2c40 [ 2184.571099][T22504] ? cfg80211_event_work+0x40/0x40 [ 2184.576207][T22504] ? minstrel_ht_alloc+0x807/0x980 [ 2184.581332][T22504] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2184.587406][T22504] ieee80211_register_hw+0x2a03/0x3a60 [ 2184.592882][T22504] ? ieee80211_register_hw+0xac1/0x3a60 [ 2184.598440][T22504] ? ieee80211_tasklet_handler+0x20/0x20 [ 2184.604077][T22504] ? rcu_is_watching+0x11/0xa0 [ 2184.609214][T22504] ? hrtimer_init+0x10c/0x220 [ 2184.613895][T22504] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2184.619632][T22504] hwsim_new_radio_nl+0xa7d/0xc50 [ 2184.624675][T22504] genl_rcv_msg+0xd0b/0xfa0 [ 2184.629194][T22504] ? genl_bind+0x370/0x370 [ 2184.633615][T22504] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2184.639600][T22504] ? lock_chain_count+0x20/0x20 [ 2184.644462][T22504] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2184.650625][T22504] ? lockdep_hardirqs_on+0x94/0x140 [ 2184.655827][T22504] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2184.661982][T22504] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2184.668318][T22504] ? lock_acquire+0x208/0x400 [ 2184.673007][T22504] netlink_rcv_skb+0x1e9/0x430 [ 2184.677773][T22504] ? genl_bind+0x370/0x370 [ 2184.682196][T22504] ? netlink_ack+0xb10/0xb10 [ 2184.686796][T22504] ? down_read+0x1aa/0x2e0 [ 2184.691216][T22504] genl_rcv+0x24/0x40 [ 2184.695209][T22504] netlink_unicast+0x78f/0x940 [ 2184.699983][T22504] netlink_sendmsg+0x8ba/0xbe0 [ 2184.704755][T22504] ? lockdep_hardirqs_on+0x94/0x140 [ 2184.709962][T22504] ? netlink_getsockopt+0x570/0x570 [ 2184.715170][T22504] ? bpf_lsm_socket_accept+0x10/0x10 [ 2184.720460][T22504] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2184.725751][T22504] ? security_socket_sendmsg+0x7c/0xa0 [ 2184.731213][T22504] ? netlink_getsockopt+0x570/0x570 [ 2184.736422][T22504] ____sys_sendmsg+0x5be/0x8f0 [ 2184.741197][T22504] ? __sys_sendmsg_sock+0x30/0x30 [ 2184.746233][T22504] ? import_iovec+0x6f/0xa0 [ 2184.750740][T22504] ___sys_sendmsg+0x236/0x2e0 [ 2184.755429][T22504] ? __sys_sendmsg+0x290/0x290 [ 2184.760204][T22504] ? rcu_is_watching+0x11/0xa0 [ 2184.764988][T22504] __se_sys_sendmsg+0x1b7/0x2a0 [ 2184.769932][T22504] ? __x64_sys_sendmsg+0x80/0x80 [ 2184.774868][T22504] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2184.780864][T22504] ? lockdep_hardirqs_on+0x94/0x140 [ 2184.786069][T22504] do_syscall_64+0x4c/0xa0 [ 2184.790482][T22504] ? clear_bhb_loop+0x30/0x80 [ 2184.795164][T22504] ? clear_bhb_loop+0x30/0x80 [ 2184.799988][T22504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2184.805900][T22504] RIP: 0033:0x7f0d21230e59 [ 2184.810431][T22504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2184.830165][T22504] RSP: 002b:00007f0d1f489028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2184.838597][T22504] RAX: ffffffffffffffda RBX: 00007f0d214b8fa0 RCX: 00007f0d21230e59 [ 2184.846583][T22504] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2184.854577][T22504] RBP: 00007f0d212c6e6f R08: 0000000000000000 R09: 0000000000000000 [ 2184.862652][T22504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2184.870623][T22504] R13: 00007f0d214b9038 R14: 00007f0d214b8fa0 R15: 00007ffda499fa78 [ 2184.878612][T22504] [ 2185.662025][T22524] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.38042'. [ 2185.704906][T22524] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2186.660096][T22557] device syzkaller0 entered promiscuous mode [ 2186.849542][T22561] netlink: 'syz.3.38053': attribute type 10 has an invalid length. [ 2186.867203][T22561] netlink: 40 bytes leftover after parsing attributes in process `syz.3.38053'. [ 2186.888972][T22561] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2187.901460][T22571] netlink: 'syz.3.38057': attribute type 10 has an invalid length. [ 2187.911094][T22571] netlink: 40 bytes leftover after parsing attributes in process `syz.3.38057'. [ 2187.925147][T22571] device team0 entered promiscuous mode [ 2187.931648][T22571] device team_slave_1 entered promiscuous mode [ 2187.939509][T22571] device wlan1 entered promiscuous mode [ 2187.951789][T22571] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2188.206408][T22590] netlink: 188 bytes leftover after parsing attributes in process `syz.3.38067'. [ 2188.358150][T22605] netlink: 'syz.2.38072': attribute type 3 has an invalid length. [ 2188.411963][T22605] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.38072'. [ 2188.459581][T22605] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2188.494626][T22605] CPU: 1 PID: 22605 Comm: syz.2.38072 Not tainted syzkaller #0 [ 2188.502246][T22605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2188.512324][T22605] Call Trace: [ 2188.515622][T22605] [ 2188.518571][T22605] dump_stack_lvl+0x188/0x250 [ 2188.523280][T22605] ? show_regs_print_info+0x20/0x20 [ 2188.528505][T22605] ? load_image+0x410/0x410 [ 2188.533047][T22605] sysfs_warn_dup+0x8a/0xa0 [ 2188.537574][T22605] sysfs_do_create_link_sd+0xc0/0x110 [ 2188.542965][T22605] device_add+0x83b/0x1050 [ 2188.547457][T22605] wiphy_register+0x1e74/0x2c40 [ 2188.552358][T22605] ? cfg80211_event_work+0x40/0x40 [ 2188.557497][T22605] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2188.563692][T22605] ieee80211_register_hw+0x2a03/0x3a60 [ 2188.569179][T22605] ? ieee80211_register_hw+0xac1/0x3a60 [ 2188.574776][T22605] ? ieee80211_tasklet_handler+0x20/0x20 [ 2188.580462][T22605] ? debug_init+0x41/0x1d0 [ 2188.584897][T22605] ? hrtimer_init+0x3e/0x220 [ 2188.589520][T22605] ? memset_erms+0x3/0x10 [ 2188.593978][T22605] ? hrtimer_init+0x10c/0x220 [ 2188.598682][T22605] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2188.604532][T22605] hwsim_new_radio_nl+0xa7d/0xc50 [ 2188.609592][T22605] genl_rcv_msg+0xd0b/0xfa0 [ 2188.614136][T22605] ? genl_bind+0x370/0x370 [ 2188.618582][T22605] ? mark_lock+0x94/0x320 [ 2188.622933][T22605] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2188.628940][T22605] ? verify_lock_unused+0x140/0x140 [ 2188.634162][T22605] ? lock_chain_count+0x20/0x20 [ 2188.639143][T22605] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2188.645317][T22605] ? lockdep_hardirqs_on+0x94/0x140 [ 2188.650534][T22605] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2188.656898][T22605] netlink_rcv_skb+0x1e9/0x430 [ 2188.661696][T22605] ? genl_bind+0x370/0x370 [ 2188.666222][T22605] ? netlink_ack+0xb10/0xb10 [ 2188.670854][T22605] ? down_read+0x1aa/0x2e0 [ 2188.675294][T22605] genl_rcv+0x24/0x40 [ 2188.679294][T22605] netlink_unicast+0x78f/0x940 [ 2188.684092][T22605] netlink_sendmsg+0x8ba/0xbe0 [ 2188.688890][T22605] ? netlink_getsockopt+0x570/0x570 [ 2188.694117][T22605] ? aa_sock_msg_perm+0x94/0x150 [ 2188.699073][T22605] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2188.704375][T22605] ? security_socket_sendmsg+0x7c/0xa0 [ 2188.709876][T22605] ? netlink_getsockopt+0x570/0x570 [ 2188.715103][T22605] ____sys_sendmsg+0x5be/0x8f0 [ 2188.719895][T22605] ? __sys_sendmsg_sock+0x30/0x30 [ 2188.724949][T22605] ? import_iovec+0x6f/0xa0 [ 2188.729477][T22605] ___sys_sendmsg+0x236/0x2e0 [ 2188.734194][T22605] ? __sys_sendmsg+0x290/0x290 [ 2188.739029][T22605] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2188.745319][T22605] __se_sys_sendmsg+0x1b7/0x2a0 [ 2188.750203][T22605] ? __x64_sys_sendmsg+0x80/0x80 [ 2188.755157][T22605] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2188.761274][T22605] ? lockdep_hardirqs_on+0x94/0x140 [ 2188.766500][T22605] do_syscall_64+0x4c/0xa0 [ 2188.770937][T22605] ? clear_bhb_loop+0x30/0x80 [ 2188.775637][T22605] ? clear_bhb_loop+0x30/0x80 [ 2188.780332][T22605] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2188.786249][T22605] RIP: 0033:0x7fd62793fe59 [ 2188.790688][T22605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2188.810323][T22605] RSP: 002b:00007fd625b98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2188.818861][T22605] RAX: ffffffffffffffda RBX: 00007fd627bc7fa0 RCX: 00007fd62793fe59 [ 2188.826858][T22605] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2188.834848][T22605] RBP: 00007fd6279d5e6f R08: 0000000000000000 R09: 0000000000000000 [ 2188.842843][T22605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2188.851015][T22605] R13: 00007fd627bc8038 R14: 00007fd627bc7fa0 R15: 00007ffdc40cb3a8 [ 2188.859159][T22605] [ 2189.944693][T22619] netlink: 'syz.4.38074': attribute type 10 has an invalid length. [ 2189.958402][T22619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.38074'. [ 2189.981060][T22619] device team0 entered promiscuous mode [ 2189.994527][T22619] device team_slave_1 entered promiscuous mode [ 2190.006279][T22619] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2191.525301][T22622] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2191.526621][T22623] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.38076'. [ 2191.578149][T22623] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2191.592170][T22622] device syzkaller0 entered promiscuous mode [ 2191.812973][T22635] netlink: 'syz.0.38093': attribute type 15 has an invalid length. [ 2192.617256][T22656] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.38088'. [ 2192.707967][T22660] netlink: 'syz.3.38091': attribute type 3 has an invalid length. [ 2192.804869][T22660] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.38091'. [ 2192.883373][T22660] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2192.935056][T22660] CPU: 1 PID: 22660 Comm: syz.3.38091 Not tainted syzkaller #0 [ 2192.942668][T22660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2192.952925][T22660] Call Trace: [ 2192.956221][T22660] [ 2192.959163][T22660] dump_stack_lvl+0x188/0x250 [ 2192.963862][T22660] ? show_regs_print_info+0x20/0x20 [ 2192.969086][T22660] ? load_image+0x410/0x410 [ 2192.973626][T22660] sysfs_warn_dup+0x8a/0xa0 [ 2192.978147][T22660] sysfs_do_create_link_sd+0xc0/0x110 [ 2192.983556][T22660] device_add+0x83b/0x1050 [ 2192.987998][T22660] wiphy_register+0x1e74/0x2c40 [ 2192.992891][T22660] ? cfg80211_event_work+0x40/0x40 [ 2192.998024][T22660] ? minstrel_ht_alloc+0x807/0x980 [ 2193.003190][T22660] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2193.009288][T22660] ieee80211_register_hw+0x2a03/0x3a60 [ 2193.014781][T22660] ? ieee80211_register_hw+0xac1/0x3a60 [ 2193.020359][T22660] ? ieee80211_tasklet_handler+0x20/0x20 [ 2193.026030][T22660] ? rcu_is_watching+0x11/0xa0 [ 2193.030823][T22660] ? hrtimer_init+0x10c/0x220 [ 2193.035626][T22660] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2193.041393][T22660] hwsim_new_radio_nl+0xa7d/0xc50 [ 2193.046731][T22660] genl_rcv_msg+0xd0b/0xfa0 [ 2193.051284][T22660] ? genl_bind+0x370/0x370 [ 2193.055737][T22660] ? irqentry_enter+0x33/0x50 [ 2193.060445][T22660] ? verify_lock_unused+0x140/0x140 [ 2193.065664][T22660] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2193.071670][T22660] ? lock_chain_count+0x20/0x20 [ 2193.076550][T22660] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2193.082734][T22660] ? lockdep_hardirqs_on+0x94/0x140 [ 2193.087960][T22660] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2193.094332][T22660] netlink_rcv_skb+0x1e9/0x430 [ 2193.099120][T22660] ? genl_bind+0x370/0x370 [ 2193.103562][T22660] ? netlink_ack+0xb10/0xb10 [ 2193.108183][T22660] ? down_read+0x1aa/0x2e0 [ 2193.112744][T22660] genl_rcv+0x24/0x40 [ 2193.116764][T22660] netlink_unicast+0x78f/0x940 [ 2193.121658][T22660] netlink_sendmsg+0x8ba/0xbe0 [ 2193.126451][T22660] ? netlink_getsockopt+0x570/0x570 [ 2193.131681][T22660] ? aa_sock_msg_perm+0x94/0x150 [ 2193.136645][T22660] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2193.142150][T22660] ? security_socket_sendmsg+0x7c/0xa0 [ 2193.147635][T22660] ? netlink_getsockopt+0x570/0x570 [ 2193.152873][T22660] ____sys_sendmsg+0x5be/0x8f0 [ 2193.157676][T22660] ? __sys_sendmsg_sock+0x30/0x30 [ 2193.162733][T22660] ? import_iovec+0x6f/0xa0 [ 2193.167258][T22660] ___sys_sendmsg+0x236/0x2e0 [ 2193.171969][T22660] ? __sys_sendmsg+0x290/0x290 [ 2193.176767][T22660] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2193.183064][T22660] __se_sys_sendmsg+0x1b7/0x2a0 [ 2193.187945][T22660] ? __x64_sys_sendmsg+0x80/0x80 [ 2193.192910][T22660] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2193.198930][T22660] ? lockdep_hardirqs_on+0x94/0x140 [ 2193.204157][T22660] do_syscall_64+0x4c/0xa0 [ 2193.208596][T22660] ? clear_bhb_loop+0x30/0x80 [ 2193.213291][T22660] ? clear_bhb_loop+0x30/0x80 [ 2193.217989][T22660] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2193.223909][T22660] RIP: 0033:0x7f3e9f6aae59 [ 2193.228352][T22660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2193.247977][T22660] RSP: 002b:00007f3e9d903028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2193.256426][T22660] RAX: ffffffffffffffda RBX: 00007f3e9f932fa0 RCX: 00007f3e9f6aae59 [ 2193.264423][T22660] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2193.272423][T22660] RBP: 00007f3e9f740e6f R08: 0000000000000000 R09: 0000000000000000 [ 2193.280408][T22660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2193.288405][T22660] R13: 00007f3e9f933038 R14: 00007f3e9f932fa0 R15: 00007fff0e14f2a8 [ 2193.296440][T22660] [ 2193.432445][T22668] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.38095'. [ 2193.443026][T22668] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2193.706423][T22674] netlink: 152 bytes leftover after parsing attributes in process `syz.0.38098'. [ 2195.219499][T22697] device syzkaller0 entered promiscuous mode [ 2195.649354][T22706] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.38108'. [ 2195.674966][T22706] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2196.124688][T22719] netlink: 'syz.1.38113': attribute type 3 has an invalid length. [ 2196.206792][T22718] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.38113'. [ 2196.236280][T22718] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2196.245829][T22718] CPU: 1 PID: 22718 Comm: syz.1.38113 Not tainted syzkaller #0 [ 2196.253418][T22718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2196.263635][T22718] Call Trace: [ 2196.266934][T22718] [ 2196.269877][T22718] dump_stack_lvl+0x188/0x250 [ 2196.274573][T22718] ? show_regs_print_info+0x20/0x20 [ 2196.279784][T22718] ? load_image+0x410/0x410 [ 2196.284309][T22718] sysfs_warn_dup+0x8a/0xa0 [ 2196.288826][T22718] sysfs_do_create_link_sd+0xc0/0x110 [ 2196.294217][T22718] device_add+0x83b/0x1050 [ 2196.298644][T22718] wiphy_register+0x1e74/0x2c40 [ 2196.303520][T22718] ? cfg80211_event_work+0x40/0x40 [ 2196.308635][T22718] ? minstrel_ht_alloc+0x807/0x980 [ 2196.313759][T22718] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2196.319835][T22718] ieee80211_register_hw+0x2a03/0x3a60 [ 2196.325402][T22718] ? ieee80211_register_hw+0xac1/0x3a60 [ 2196.330965][T22718] ? ieee80211_tasklet_handler+0x20/0x20 [ 2196.336645][T22718] ? rcu_is_watching+0x11/0xa0 [ 2196.341506][T22718] ? hrtimer_init+0x10c/0x220 [ 2196.346190][T22718] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2196.351934][T22718] hwsim_new_radio_nl+0xa7d/0xc50 [ 2196.356979][T22718] genl_rcv_msg+0xd0b/0xfa0 [ 2196.361521][T22718] ? genl_bind+0x370/0x370 [ 2196.365954][T22718] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2196.371156][T22718] ? verify_lock_unused+0x140/0x140 [ 2196.376389][T22718] ? perf_trace_lock+0xe4/0x390 [ 2196.381260][T22718] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2196.387631][T22718] netlink_rcv_skb+0x1e9/0x430 [ 2196.392506][T22718] ? genl_bind+0x370/0x370 [ 2196.396933][T22718] ? netlink_ack+0xb10/0xb10 [ 2196.401535][T22718] ? down_read+0x1aa/0x2e0 [ 2196.405955][T22718] genl_rcv+0x24/0x40 [ 2196.409938][T22718] netlink_unicast+0x78f/0x940 [ 2196.414715][T22718] netlink_sendmsg+0x8ba/0xbe0 [ 2196.419496][T22718] ? netlink_getsockopt+0x570/0x570 [ 2196.424699][T22718] ? aa_sock_msg_perm+0x94/0x150 [ 2196.429640][T22718] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2196.434924][T22718] ? security_socket_sendmsg+0x7c/0xa0 [ 2196.440386][T22718] ? netlink_getsockopt+0x570/0x570 [ 2196.445593][T22718] ____sys_sendmsg+0x5be/0x8f0 [ 2196.450373][T22718] ? __sys_sendmsg_sock+0x30/0x30 [ 2196.455407][T22718] ? import_iovec+0x6f/0xa0 [ 2196.459925][T22718] ___sys_sendmsg+0x236/0x2e0 [ 2196.464611][T22718] ? __sys_sendmsg+0x290/0x290 [ 2196.469389][T22718] ? trace_event_raw_event_lock+0x250/0x250 [ 2196.475281][T22718] ? do_raw_spin_unlock+0x11d/0x230 [ 2196.480505][T22718] __se_sys_sendmsg+0x1b7/0x2a0 [ 2196.485446][T22718] ? __x64_sys_sendmsg+0x80/0x80 [ 2196.490401][T22718] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2196.496397][T22718] ? lockdep_hardirqs_on+0x94/0x140 [ 2196.501881][T22718] do_syscall_64+0x4c/0xa0 [ 2196.506297][T22718] ? clear_bhb_loop+0x30/0x80 [ 2196.510984][T22718] ? clear_bhb_loop+0x30/0x80 [ 2196.515674][T22718] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2196.521569][T22718] RIP: 0033:0x7f0d21230e59 [ 2196.525987][T22718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2196.545599][T22718] RSP: 002b:00007f0d1f489028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2196.554023][T22718] RAX: ffffffffffffffda RBX: 00007f0d214b8fa0 RCX: 00007f0d21230e59 [ 2196.562012][T22718] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2196.569986][T22718] RBP: 00007f0d212c6e6f R08: 0000000000000000 R09: 0000000000000000 [ 2196.577977][T22718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2196.586047][T22718] R13: 00007f0d214b9038 R14: 00007f0d214b8fa0 R15: 00007ffda499fa78 [ 2196.594152][T22718] [ 2198.222530][T22754] netlink: 132 bytes leftover after parsing attributes in process `syz.2.38127'. [ 2199.254553][T22774] netlink: 188 bytes leftover after parsing attributes in process `syz.4.38136'. [ 2199.546200][T22783] netlink: 132 bytes leftover after parsing attributes in process `syz.3.38139'. [ 2200.459027][T22801] IPv6: Can't replace route, no match found [ 2200.546183][T22807] device syzkaller0 entered promiscuous mode [ 2200.604232][T22813] device syzkaller0 entered promiscuous mode [ 2200.623440][T22814] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.38151'. [ 2202.892358][T22845] IPv6: Can't replace route, no match found [ 2202.898759][T22844] netlink: 188 bytes leftover after parsing attributes in process `syz.1.38161'. [ 2202.909309][T22842] netlink: 'syz.0.38160': attribute type 10 has an invalid length. [ 2202.918484][T22842] netlink: 40 bytes leftover after parsing attributes in process `syz.0.38160'. [ 2202.928145][T22842] device team0 entered promiscuous mode [ 2202.934061][T22842] device team_slave_1 entered promiscuous mode [ 2202.941114][T22842] device wlan1 entered promiscuous mode [ 2202.948687][T22842] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2203.623766][T22862] device syzkaller0 entered promiscuous mode [ 2203.912975][T22866] device syzkaller0 entered promiscuous mode [ 2204.351385][T22882] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.38178'. [ 2204.523078][T22886] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.38180'. [ 2204.567316][T22886] netlink: 20624 bytes leftover after parsing attributes in process `syz.4.38180'. [ 2204.626319][T22885] delete_channel: no stack [ 2204.747208][T22892] device syzkaller0 entered promiscuous mode [ 2205.139987][T22896] device syzkaller0 entered promiscuous mode [ 2205.637234][T22908] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.38190'. [ 2206.105853][T22910] netlink: 188 bytes leftover after parsing attributes in process `syz.3.38189'. [ 2207.712021][T22923] netlink: 'syz.1.38194': attribute type 15 has an invalid length. [ 2207.774614][T22923] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.38194'. [ 2208.106986][T22933] device syzkaller0 entered promiscuous mode [ 2208.251701][T22942] netlink: 40 bytes leftover after parsing attributes in process `syz.1.38212'. [ 2208.316269][T22942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38212'. [ 2208.370640][T22939] netlink: 'syz.2.38213': attribute type 15 has an invalid length. [ 2208.399148][T22939] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.38213'. [ 2209.897388][T22974] netlink: 156 bytes leftover after parsing attributes in process `syz.2.38206'. [ 2210.469262][T22998] netlink: 'syz.1.38220': attribute type 10 has an invalid length. [ 2210.499560][T22997] : port 1(erspan0) entered blocking state [ 2210.506869][T22997] : port 1(erspan0) entered disabled state [ 2210.535842][T22997] device erspan0 entered promiscuous mode [ 2210.697404][T23000] sock: sock_timestamping_bind_phc: sock not bind to device [ 2210.855675][T23006] syzkaller0: create flow: hash 1703414980 index 1 [ 2210.889915][T23006] syzkaller0: delete flow: hash 1703414980 index 1 [ 2211.004506][T23010] netlink: 156 bytes leftover after parsing attributes in process `syz.1.38227'. [ 2211.718224][T23035] netlink: 'syz.4.38235': attribute type 10 has an invalid length. [ 2212.413786][T23048] netlink: 188 bytes leftover after parsing attributes in process `syz.0.38239'. [ 2212.761483][T23052] netlink: 156 bytes leftover after parsing attributes in process `syz.4.38241'. [ 2213.392649][T23079] netlink: 'syz.3.38252': attribute type 10 has an invalid length. [ 2214.164177][T23092] netlink: 188 bytes leftover after parsing attributes in process `syz.2.38255'. [ 2214.691784][T23104] netlink: 156 bytes leftover after parsing attributes in process `syz.3.38259'. [ 2214.757845][T23117] : port 1(erspan0) entered blocking state [ 2214.793594][T23117] : port 1(erspan0) entered disabled state [ 2214.836647][T23117] device erspan0 entered promiscuous mode [ 2214.877484][T23124] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.38266'. [ 2214.908444][T23128] netlink: 'syz.2.38266': attribute type 16 has an invalid length. [ 2214.936436][T23128] netlink: 'syz.2.38266': attribute type 21 has an invalid length. [ 2214.954526][T23128] netlink: 'syz.2.38266': attribute type 25 has an invalid length. [ 2214.974628][T23128] netlink: 'syz.2.38266': attribute type 27 has an invalid length. [ 2214.994550][T23128] netlink: 'syz.2.38266': attribute type 28 has an invalid length. [ 2215.018417][T23128] netlink: 'syz.2.38266': attribute type 29 has an invalid length. [ 2215.038556][T23128] netlink: 'syz.2.38266': attribute type 30 has an invalid length. [ 2217.972098][ T6443] syzkaller0: tun_net_xmit 76 [ 2217.982408][ T6443] syzkaller0: tun_net_xmit 48 [ 2218.008229][ T8018] syzkaller0: tun_net_xmit 76 [ 2218.025034][T23202] syzkaller0: delete flow: hash 1703414980 index 1 [ 2219.776098][T23231] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.38304'. [ 2219.834577][T23232] netlink: 'syz.1.38304': attribute type 16 has an invalid length. [ 2219.852116][T23232] netlink: 'syz.1.38304': attribute type 21 has an invalid length. [ 2219.891930][T23232] netlink: 'syz.1.38304': attribute type 25 has an invalid length. [ 2219.925690][T23232] netlink: 'syz.1.38304': attribute type 27 has an invalid length. [ 2219.957710][T23232] netlink: 'syz.1.38304': attribute type 28 has an invalid length. [ 2220.004425][T23232] netlink: 'syz.1.38304': attribute type 29 has an invalid length. [ 2220.028429][T23232] netlink: 'syz.1.38304': attribute type 30 has an invalid length. [ 2221.836823][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.843170][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.161539][T23261] : port 1(veth1_virt_wifi) entered blocking state [ 2222.223919][T23261] : port 1(veth1_virt_wifi) entered disabled state [ 2222.246033][T23266] netlink: 'syz.4.38317': attribute type 10 has an invalid length. [ 2222.807161][T23276] netlink: 76 bytes leftover after parsing attributes in process `syz.2.38321'. [ 2223.489051][T23289] netlink: 'syz.0.38327': attribute type 3 has an invalid length. [ 2223.518363][T23289] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.38327'. [ 2223.554318][T23289] netlink: 'syz.0.38327': attribute type 10 has an invalid length. [ 2224.276251][T23309] device syzkaller0 entered promiscuous mode [ 2225.124032][T23331] netlink: 'syz.1.38342': attribute type 10 has an invalid length. [ 2225.878616][T23344] netlink: 'syz.1.38347': attribute type 6 has an invalid length. [ 2225.887204][T23344] netlink: 164 bytes leftover after parsing attributes in process `syz.1.38347'. [ 2226.400109][T23348] netlink: 'syz.2.38349': attribute type 2 has an invalid length. [ 2227.159234][T23372] netlink: 76 bytes leftover after parsing attributes in process `syz.4.38358'. [ 2228.616442][T23388] netlink: 'syz.2.38366': attribute type 39 has an invalid length. [ 2229.234139][T23401] netlink: 'syz.2.38371': attribute type 6 has an invalid length. [ 2229.242627][T23401] netlink: 164 bytes leftover after parsing attributes in process `syz.2.38371'. [ 2229.832245][T23420] netlink: 132 bytes leftover after parsing attributes in process `syz.1.38377'. [ 2229.966294][T23424] netlink: 128 bytes leftover after parsing attributes in process `syz.4.38379'. [ 2230.009806][T23424] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2230.101453][T23426] device syzkaller0 entered promiscuous mode [ 2230.538032][T23447] netlink: 'syz.4.38384': attribute type 6 has an invalid length. [ 2230.554522][T23447] netlink: 164 bytes leftover after parsing attributes in process `syz.4.38384'. [ 2230.799120][T23452] netlink: 'syz.3.38387': attribute type 39 has an invalid length. [ 2231.289091][T23470] netlink: 128 bytes leftover after parsing attributes in process `syz.1.38394'. [ 2231.299187][T23470] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2231.727203][T23481] netlink: 'syz.3.38399': attribute type 6 has an invalid length. [ 2231.764606][T23481] netlink: 164 bytes leftover after parsing attributes in process `syz.3.38399'. [ 2231.988486][T23486] netlink: 'syz.0.38403': attribute type 39 has an invalid length. [ 2232.992547][T23506] netlink: 132 bytes leftover after parsing attributes in process `syz.2.38408'. [ 2233.797151][T23525] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2233.854707][T23529] netlink: 'syz.2.38415': attribute type 10 has an invalid length. [ 2234.017488][T23529] device vxcan1 entered promiscuous mode [ 2234.047472][T23529] team0: Device vxcan1 is of different type [ 2234.614398][T23553] device syzkaller0 entered promiscuous mode [ 2234.678516][T23556] netlink: 'syz.3.38423': attribute type 10 has an invalid length. [ 2234.773970][T23556] device wlan1 left promiscuous mode [ 2234.819084][T23556] team0: Port device wlan1 removed [ 2234.838061][T23558] netlink: 'syz.3.38423': attribute type 10 has an invalid length. [ 2234.876579][T23558] device nlmon0 entered promiscuous mode [ 2234.892532][T23558] team0: Device nlmon0 is of different type [ 2234.933069][T23555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2235.224568][T23564] netlink: 128 bytes leftover after parsing attributes in process `syz.3.38424'. [ 2235.256556][T23564] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2235.337702][T23567] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2236.148265][T23586] netlink: set zone limit has 8 unknown bytes [ 2236.662037][T23605] netlink: 'syz.4.38443': attribute type 39 has an invalid length. [ 2236.711317][T23607] netlink: 128 bytes leftover after parsing attributes in process `syz.0.38440'. [ 2236.721545][T23607] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2237.495104][T23622] netlink: 'syz.3.38447': attribute type 10 has an invalid length. [ 2237.590766][T23622] device vxcan1 entered promiscuous mode [ 2237.605484][T23622] team0: Device vxcan1 is of different type [ 2238.237772][T23641] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2238.284154][T23645] netlink: 'syz.0.38457': attribute type 3 has an invalid length. [ 2238.314283][T23645] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.38457'. [ 2238.826166][T23654] netlink: set zone limit has 8 unknown bytes [ 2239.721650][T23692] netlink: 'syz.0.38473': attribute type 10 has an invalid length. [ 2239.814240][T23692] device vxcan1 entered promiscuous mode [ 2239.830026][T23692] team0: Device vxcan1 is of different type [ 2240.061700][T23697] netlink: set zone limit has 8 unknown bytes [ 2240.888863][T23729] netlink: 'syz.1.38484': attribute type 39 has an invalid length. [ 2240.997909][T23736] netlink: 'syz.2.38488': attribute type 3 has an invalid length. [ 2241.008009][T23736] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.38488'. [ 2241.096387][T23731] device syzkaller0 entered promiscuous mode [ 2241.412847][T23742] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2241.624395][T23751] netlink: set zone limit has 8 unknown bytes [ 2241.774629][T23760] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2242.177539][T23774] netlink: 'syz.0.38502': attribute type 39 has an invalid length. [ 2242.429306][T23771] netlink: 'syz.4.38500': attribute type 20 has an invalid length. [ 2242.676889][T23786] netlink: 'syz.1.38503': attribute type 10 has an invalid length. [ 2242.729357][T23786] netlink: 'syz.1.38503': attribute type 10 has an invalid length. [ 2242.869722][T23783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2243.098133][T23800] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2243.734203][T23817] netlink: 'syz.3.38519': attribute type 39 has an invalid length. [ 2243.935097][T23822] netlink: 'syz.1.38517': attribute type 10 has an invalid length. [ 2244.166359][T23838] device syzkaller0 entered promiscuous mode [ 2246.037043][T23881] netlink: 'syz.2.38537': attribute type 39 has an invalid length. [ 2246.559935][T23880] netlink: 'syz.4.38538': attribute type 10 has an invalid length. [ 2246.905295][T23885] device syzkaller0 entered promiscuous mode [ 2247.171002][T23887] device syzkaller0 entered promiscuous mode [ 2247.343287][T23891] netlink: 'syz.2.38544': attribute type 10 has an invalid length. [ 2247.375400][T23897] netlink: 'syz.2.38544': attribute type 10 has an invalid length. [ 2247.410242][T23894] netlink: 'syz.0.38554': attribute type 20 has an invalid length. [ 2247.412183][T23890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2251.316867][T23971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2251.947298][T23988] netlink: 'syz.2.38580': attribute type 39 has an invalid length. [ 2252.216393][T24000] netlink: 'syz.4.38585': attribute type 10 has an invalid length. [ 2252.361289][T24000] device team0 left promiscuous mode [ 2252.443241][T24000] device team_slave_1 left promiscuous mode [ 2252.943712][T24013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2253.126792][T24030] netlink: 'syz.4.38594': attribute type 39 has an invalid length. [ 2254.030857][T24054] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.38605'. [ 2254.661954][T24087] netlink: 'syz.4.38616': attribute type 3 has an invalid length. [ 2254.698730][T24089] netlink: 'syz.4.38616': attribute type 9 has an invalid length. [ 2254.701230][T24087] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.38616'. [ 2254.767310][T24089] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.38616'. [ 2254.876426][T24097] netlink: 'syz.2.38619': attribute type 10 has an invalid length. [ 2254.911166][T24097] device team0 left promiscuous mode [ 2254.917125][T24097] device team_slave_1 left promiscuous mode [ 2255.004795][T24098] netlink: 'syz.2.38619': attribute type 10 has an invalid length. [ 2255.016130][T24098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.38619'. [ 2255.046130][T24098] device team0 entered promiscuous mode [ 2255.058996][T24098] device team_slave_1 entered promiscuous mode [ 2255.068101][T24098] 8021q: adding VLAN 0 to HW filter on device team0 [ 2255.078407][T24098] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2255.175192][T24087] netlink: 'syz.4.38616': attribute type 9 has an invalid length. [ 2255.185523][T24087] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.38616'. [ 2256.327796][T24125] netlink: 128 bytes leftover after parsing attributes in process `syz.4.38626'. [ 2256.348819][T24125] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2256.722450][T24147] netlink: 'syz.3.38632': attribute type 10 has an invalid length. [ 2256.797375][T24147] device team0 left promiscuous mode [ 2256.818272][T24147] device team_slave_1 left promiscuous mode [ 2256.862115][T24141] netlink: 'syz.3.38632': attribute type 10 has an invalid length. [ 2256.912168][T24153] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.38635'. [ 2256.925862][T24141] netlink: 40 bytes leftover after parsing attributes in process `syz.3.38632'. [ 2256.947772][T24141] device team0 entered promiscuous mode [ 2256.953640][T24141] device team_slave_1 entered promiscuous mode [ 2257.050286][T24141] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2257.120896][T24158] netlink: 'syz.1.38638': attribute type 3 has an invalid length. [ 2257.133236][T24158] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.38638'. [ 2257.179390][T24158] netlink: 'syz.1.38638': attribute type 9 has an invalid length. [ 2257.218672][T24158] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.38638'. [ 2259.184189][T24224] __nla_validate_parse: 3 callbacks suppressed [ 2259.184225][T24224] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.38661'. [ 2259.257893][T24231] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.38663'. [ 2259.273422][T24233] validate_nla: 1 callbacks suppressed [ 2259.273461][T24233] netlink: 'syz.1.38664': attribute type 10 has an invalid length. [ 2259.290164][T24233] netlink: 'syz.1.38664': attribute type 10 has an invalid length. [ 2259.298479][T24233] netlink: 40 bytes leftover after parsing attributes in process `syz.1.38664'. [ 2259.388711][T24239] netlink: 14538 bytes leftover after parsing attributes in process `syz.2.38668'. [ 2259.488497][T24237] cgroup: fork rejected by pids controller in /syz1 [ 2260.174284][T24268] netlink: 'syz.2.38677': attribute type 1 has an invalid length. [ 2260.194584][T24268] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.38677'. [ 2260.511591][T24270] chnl_net:caif_netlink_parms(): no params data found [ 2260.570302][T24270] bridge0: port 1(bridge_slave_0) entered blocking state [ 2260.578790][T24270] bridge0: port 1(bridge_slave_0) entered disabled state [ 2260.589100][T24270] device bridge_slave_0 entered promiscuous mode [ 2260.599254][T24270] bridge0: port 2(bridge_slave_1) entered blocking state [ 2260.606855][T24270] bridge0: port 2(bridge_slave_1) entered disabled state [ 2260.617038][T24270] device bridge_slave_1 entered promiscuous mode [ 2260.642651][T24270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2260.656899][T24270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2260.686117][T24270] team0: Port device team_slave_0 added [ 2260.694217][T24270] team0: Port device team_slave_1 added [ 2260.720464][T24270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2260.727598][T24270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2260.755204][T24270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2260.768004][T24270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2260.776279][T24270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2260.803644][T24270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2260.848833][T24270] device hsr_slave_0 entered promiscuous mode [ 2260.856347][T24270] device hsr_slave_1 entered promiscuous mode [ 2260.863061][T24270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2260.871989][T24270] Cannot create hsr debugfs directory [ 2261.384055][T24270] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2261.392613][T24270] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2261.402157][T24270] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2261.410748][T24270] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2261.457714][T24270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2261.469422][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2261.477868][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2261.487868][T24270] 8021q: adding VLAN 0 to HW filter on device team0 [ 2261.497878][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2261.507191][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2261.516487][T24944] bridge0: port 1(bridge_slave_0) entered blocking state [ 2261.523569][T24944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2261.531362][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2261.552666][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2261.561355][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2261.570566][T24944] bridge0: port 2(bridge_slave_1) entered blocking state [ 2261.577681][T24944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2261.588822][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2261.600072][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2261.622510][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2261.631608][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2261.640693][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2261.651977][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2261.661075][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2261.682748][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2261.691180][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2261.702860][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2261.711454][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2261.731173][T24270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2261.826068][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2261.833646][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2261.856460][T24270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2261.872551][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2261.881757][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2261.907636][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2261.916559][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2261.925635][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2261.933339][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2261.950956][T24270] device veth0_vlan entered promiscuous mode [ 2261.961619][T24270] device veth1_vlan entered promiscuous mode [ 2261.980827][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2261.989694][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2261.998298][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2262.007321][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2262.030180][T24270] device veth0_macvtap entered promiscuous mode [ 2262.039177][T24270] device veth1_macvtap entered promiscuous mode [ 2262.052859][T24270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2262.060366][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2262.069329][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2262.077440][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2262.087900][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2262.101672][T24270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2262.113565][T24270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2262.122658][T24270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2262.132878][T24270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2262.141889][T24270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2262.162677][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2262.175318][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2262.258691][T25187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2262.274803][T25187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2262.288217][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2262.318497][T24950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2262.326465][T24950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2262.335038][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2262.465103][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 2262.592065][T24285] netlink: 128 bytes leftover after parsing attributes in process `syz.1.38676'. [ 2262.603704][T24285] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2262.678529][T24285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2264.545415][T10736] Bluetooth: hci2: command 0x041b tx timeout [ 2266.624580][T10736] Bluetooth: hci2: command 0x040f tx timeout [ 2268.704547][T10736] Bluetooth: hci2: command 0x0419 tx timeout [ 2274.510025][T24292] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.38680'. [ 2274.687135][T24291] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.38679'. [ 2274.967619][T24306] device syzkaller0 entered promiscuous mode [ 2275.032854][T24317] device syzkaller0 entered promiscuous mode [ 2275.159507][T24309] chnl_net:caif_netlink_parms(): no params data found [ 2275.347391][T24328] device syzkaller0 entered promiscuous mode [ 2275.357076][T24309] bridge0: port 1(bridge_slave_0) entered blocking state [ 2275.364408][T24309] bridge0: port 1(bridge_slave_0) entered disabled state [ 2275.372636][T24309] device bridge_slave_0 entered promiscuous mode [ 2275.381669][T24309] bridge0: port 2(bridge_slave_1) entered blocking state [ 2275.390613][T24309] bridge0: port 2(bridge_slave_1) entered disabled state [ 2275.399165][T24309] device bridge_slave_1 entered promiscuous mode [ 2275.447748][T24309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2275.491428][T24309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2275.538162][T24309] team0: Port device team_slave_0 added [ 2275.562753][T24309] team0: Port device team_slave_1 added [ 2275.615871][T24309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2275.624428][T24309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2275.650610][T24309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2275.683140][T24309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2275.690272][T24309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2275.739163][T24309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2275.751243][T24339] netlink: 132 bytes leftover after parsing attributes in process `syz.2.38697'. [ 2275.773522][T24321] chnl_net:caif_netlink_parms(): no params data found [ 2275.781252][T24339] netlink: 'syz.2.38697': attribute type 10 has an invalid length. [ 2275.789951][T24339] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.38697'. [ 2275.800518][T24339] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2275.859833][T24309] device hsr_slave_0 entered promiscuous mode [ 2275.867152][T24309] device hsr_slave_1 entered promiscuous mode [ 2275.874164][T24309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2275.892566][T24309] Cannot create hsr debugfs directory [ 2276.000555][T24321] bridge0: port 1(bridge_slave_0) entered blocking state [ 2276.008844][T24321] bridge0: port 1(bridge_slave_0) entered disabled state [ 2276.017359][T24321] device bridge_slave_0 entered promiscuous mode [ 2276.027693][T24321] bridge0: port 2(bridge_slave_1) entered blocking state [ 2276.035207][T24321] bridge0: port 2(bridge_slave_1) entered disabled state [ 2276.043133][T24321] device bridge_slave_1 entered promiscuous mode [ 2276.083176][T24321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2276.096724][T24321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2276.123742][T24321] team0: Port device team_slave_0 added [ 2276.132524][T24321] team0: Port device team_slave_1 added [ 2276.161489][T24321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2276.168634][T24321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2276.194953][T24321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2276.207727][T24321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2276.214970][T24321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2276.242743][T24321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2276.280147][T24309] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2276.294293][T24321] device hsr_slave_0 entered promiscuous mode [ 2276.301231][T24321] device hsr_slave_1 entered promiscuous mode [ 2276.308242][T24321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2276.315941][T24321] Cannot create hsr debugfs directory [ 2276.321875][T24309] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2276.338586][T24309] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2276.361301][T24309] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2276.442260][T24321] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.499147][T24321] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.516155][T24309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2276.533116][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2276.541350][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2276.554275][T24309] 8021q: adding VLAN 0 to HW filter on device team0 [ 2276.573455][T24321] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.589938][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2276.600281][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2276.608778][T24950] bridge0: port 1(bridge_slave_0) entered blocking state [ 2276.615953][T24950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2276.623609][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2276.647880][T24321] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.662310][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2276.671921][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2276.681811][T24944] bridge0: port 2(bridge_slave_1) entered blocking state [ 2276.688905][T24944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2276.700375][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2276.723116][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2276.745784][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2276.756599][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2276.765196][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2276.773792][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2276.782601][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2276.796033][T18276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2276.806063][T18276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2276.822251][T18276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2276.830811][T18276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2276.857447][T24321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2276.865645][T10736] Bluetooth: hci3: command 0x0409 tx timeout [ 2276.878782][T24321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2276.889276][T24321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2276.899385][T24321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2276.971996][T24321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2276.988501][T18276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2277.005256][T18276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2277.021280][T18276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2277.029032][T18276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2277.042802][T24309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2277.053929][T24321] 8021q: adding VLAN 0 to HW filter on device team0 [ 2277.065452][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2277.074149][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2277.087258][T25187] bridge0: port 1(bridge_slave_0) entered blocking state [ 2277.094428][T25187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2277.105022][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2277.119047][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2277.131147][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2277.140250][T24950] bridge0: port 2(bridge_slave_1) entered blocking state [ 2277.147649][T24950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2277.160179][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2277.173009][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2277.184620][T10736] Bluetooth: hci5: command 0x0409 tx timeout [ 2277.192608][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2277.206434][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2277.216599][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2277.226010][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2277.235159][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2277.243757][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2277.252682][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2277.270053][T24321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2277.281509][T24321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2277.292465][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2277.306694][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2277.346505][T18276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2277.359166][T18276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2277.385661][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2277.393885][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2277.406942][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2277.417872][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2277.432002][T24309] device veth0_vlan entered promiscuous mode [ 2277.458366][T24309] device veth1_vlan entered promiscuous mode [ 2277.478756][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2277.488683][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2277.497036][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2277.519814][T24321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2277.538365][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2277.547147][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2277.556276][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2277.568007][T24309] device veth0_macvtap entered promiscuous mode [ 2277.580271][T24309] device veth1_macvtap entered promiscuous mode [ 2277.598302][T24309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2277.609972][T24309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2277.621860][T24309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2277.630620][T18276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2277.640524][T18276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2277.651418][T18276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2277.661850][T18276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2277.674249][T24309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2277.685496][T24309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2277.697078][T24309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2277.709114][T24309] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2277.719391][T24309] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2277.728618][T24309] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2277.738046][T24309] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2277.754882][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2277.763524][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2277.842277][T24944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2277.853756][T24944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2277.876495][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2277.912204][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2277.923455][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2277.939052][T24321] device veth0_vlan entered promiscuous mode [ 2277.949071][T18276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2277.955087][T24321] device veth1_vlan entered promiscuous mode [ 2277.964954][T18276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2277.972431][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2277.980858][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2277.989868][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2277.998384][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2278.009826][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2278.017794][T24944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2278.045293][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2278.053702][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2278.066583][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2278.080592][T24321] device veth0_macvtap entered promiscuous mode [ 2278.094543][T24321] device veth1_macvtap entered promiscuous mode [ 2278.112962][T24321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2278.124580][T24321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2278.138635][T24321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2278.149978][T24321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2278.163679][T24321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2278.173310][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2278.183402][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2278.192256][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2278.201369][T25187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2278.211911][T24321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2278.222829][T24321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2278.232924][T24321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2278.243443][T24321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2278.256739][T24321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2278.264924][T24370] netlink: 'syz.5.38678': attribute type 10 has an invalid length. [ 2278.292636][T24370] 8021q: adding VLAN 0 to HW filter on device team0 [ 2278.312003][T24370] bond0: (slave team0): Enslaving as an active interface with an up link [ 2278.328602][T24371] netlink: 'syz.5.38678': attribute type 10 has an invalid length. [ 2278.337639][T24371] netlink: 40 bytes leftover after parsing attributes in process `syz.5.38678'. [ 2278.347025][T24371] device team0 entered promiscuous mode [ 2278.352590][T24371] device team_slave_0 entered promiscuous mode [ 2278.359069][T24371] device team_slave_1 entered promiscuous mode [ 2278.366827][T24371] bond0: (slave team0): Releasing backup interface [ 2278.380615][T24371] bridge0: port 3(team0) entered blocking state [ 2278.387868][T24371] bridge0: port 3(team0) entered disabled state [ 2278.397020][T18276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2278.415246][T18276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2278.426720][T24321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.442921][T24321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.453124][T24321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.461972][T24321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.534784][T25187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2278.548530][T25187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2278.570885][T24950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2278.583863][T18276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2278.592684][T18276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2278.600581][T18276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2278.945039][T29005] Bluetooth: hci3: command 0x041b tx timeout [ 2279.265534][T29005] Bluetooth: hci5: command 0x041b tx timeout [ 2281.024652][ T363] Bluetooth: hci3: command 0x040f tx timeout [ 2281.344534][ T363] Bluetooth: hci5: command 0x040f tx timeout [ 2283.104849][ T2320] Bluetooth: hci3: command 0x0419 tx timeout [ 2283.266729][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.273056][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.424811][T18431] Bluetooth: hci5: command 0x0419 tx timeout [ 2344.706758][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.713076][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 2382.634460][ T2320] Bluetooth: hci2: command 0x0406 tx timeout [ 2397.984413][ T2320] Bluetooth: hci5: command 0x0406 tx timeout [ 2397.995554][T29005] Bluetooth: hci3: command 0x0406 tx timeout [ 2406.147324][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.153669][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.586406][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.592712][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.026789][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.033146][ T1423] ieee802154 phy1 wpan1: encryption failed: -22