last executing test programs: 12m16.939055446s ago: executing program 2 (id=12096): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff6ed1, 0x1, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70006000006e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081228000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 12m16.453556608s ago: executing program 2 (id=12103): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'macvlan1\x00', @remote}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x8) 12m16.116648346s ago: executing program 2 (id=12109): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 12m15.390547844s ago: executing program 2 (id=12112): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) 12m15.14732352s ago: executing program 2 (id=12116): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x7, &(0x7f0000000040), 0x4) 12m14.930825365s ago: executing program 2 (id=12118): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 11m59.592653709s ago: executing program 32 (id=12118): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 3.28378676s ago: executing program 4 (id=16923): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x1000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r2}, 0x20) 2.8892046s ago: executing program 4 (id=16929): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2.796071952s ago: executing program 5 (id=16931): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.624975876s ago: executing program 5 (id=16934): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xc4, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000080)=r3, 0x4) close(r0) 2.48692119s ago: executing program 1 (id=16935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89ee, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4004743b, &(0x7f0000000180)) 2.423091181s ago: executing program 4 (id=16936): recvmsg$unix(0xffffffffffffffff, 0x0, 0x10001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x14, 0x0, 0x0) 2.343596333s ago: executing program 3 (id=16938): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xe64c, 0x2}, 0x8003, 0x0, 0x0, 0x9, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x22, &(0x7f00000000c0)=r1, 0x4) 2.329473013s ago: executing program 5 (id=16939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x2000000000000052, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)="14", 0x1}], 0x1}, 0x0) 2.217372176s ago: executing program 0 (id=16940): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000006118"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88f5d9965ff4a44, @perf_bp={0x0, 0x7}, 0x10000, 0xca, 0x100, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x400100}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3e971d"], 0x9a) 2.191259096s ago: executing program 4 (id=16941): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.179514057s ago: executing program 1 (id=16943): r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000200)=r3, 0x4) setsockopt$sock_attach_bpf(r0, 0x6, 0x18, &(0x7f0000000200)=r3, 0x4) 2.142670158s ago: executing program 5 (id=16944): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x19, 0x0, 0x0) 2.142047198s ago: executing program 3 (id=16945): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000000), 0xe) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r0) 1.953465763s ago: executing program 1 (id=16946): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x428, 0x0, 0xc2ba, 0x4, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4000}, 0x18) perf_event_open(&(0x7f0000000380)={0x5, 0x2c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0}, 0x80000, 0xca, 0x0, 0x8, 0x0, 0x400000, 0x0, 0x0, 0x12, 0x0, 0x8}, 0xffffffffffffffff, 0x3, r2, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="02"], 0x9a) 1.941851972s ago: executing program 4 (id=16947): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 1.941088963s ago: executing program 0 (id=16957): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbea3}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0xffffffffffffffff}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 1.901892624s ago: executing program 3 (id=16948): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.859640734s ago: executing program 5 (id=16949): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x214240, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80001, 0x60731, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0x102000, 0x1, 0xb, 0x9, 0x3, 0x8, 0x43, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.728705138s ago: executing program 0 (id=16950): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x4, 0x8, 0x2c, 0xd9, 0x0, 0xfffffffffffffffe, 0x4, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x5691, 0xb}, 0xc0, 0x9, 0x4, 0x9, 0x0, 0x0, 0xfff, 0x0, 0x7ff, 0x0, 0x9}, 0x0, 0x40003, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1.678881859s ago: executing program 4 (id=16951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xca) 1.663668589s ago: executing program 3 (id=16952): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x3af8}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x48000) close(r0) 1.662915729s ago: executing program 1 (id=16963): unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70200001400009e219999dcade5b2c9f000b703000000000d008500000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.599732601s ago: executing program 5 (id=16953): close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f90324fc602f1b02000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.057266245s ago: executing program 3 (id=16954): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x1ffffffffffffdd7, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.056330125s ago: executing program 0 (id=16966): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) 951.390677ms ago: executing program 0 (id=16955): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x2, 0x0, 0x40, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0xa000, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3b20"], 0xfdef) 941.623707ms ago: executing program 1 (id=16956): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 600.671595ms ago: executing program 0 (id=16958): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000240)={r3}) 310.308882ms ago: executing program 1 (id=16959): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 3 (id=16960): openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4048840) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.3.12659'. [ 1204.621129][T32281] netlink: 144 bytes leftover after parsing attributes in process `syz.3.12659'. [ 1205.877632][T32327] netlink: 144 bytes leftover after parsing attributes in process `syz.5.12681'. [ 1205.945534][T32327] netlink: 144 bytes leftover after parsing attributes in process `syz.5.12681'. [ 1206.908035][T32357] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.12692'. [ 1206.951864][T32357] netlink: zone id is out of range [ 1206.971111][T32359] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.12694'. [ 1206.973266][T32357] netlink: zone id is out of range [ 1207.060967][T32357] netlink: del zone limit has 4 unknown bytes [ 1207.770622][T32381] sctp: [Deprecated]: syz.4.12703 (pid 32381) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1207.770622][T32381] Use struct sctp_sack_info instead [ 1209.127503][T32391] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12707'. [ 1209.488308][T32398] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.12710'. [ 1209.551983][T32398] netlink: zone id is out of range [ 1209.563814][T32398] netlink: zone id is out of range [ 1209.586316][T32400] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1209.738019][T32398] netlink: del zone limit has 4 unknown bytes [ 1210.183765][T32411] sctp: [Deprecated]: syz.3.12717 (pid 32411) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1210.183765][T32411] Use struct sctp_sack_info instead [ 1211.405418][T32437] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.12728'. [ 1211.490835][T32437] netlink: zone id is out of range [ 1211.522058][T32437] netlink: zone id is out of range [ 1211.645973][T32437] netlink: del zone limit has 4 unknown bytes [ 1212.539751][T32460] sctp: [Deprecated]: syz.1.12735 (pid 32460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1212.539751][T32460] Use struct sctp_sack_info instead [ 1212.771666][T32464] device syzkaller0 entered promiscuous mode [ 1212.831975][T32472] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.12741'. [ 1212.861655][T32472] netlink: zone id is out of range [ 1212.867744][T32472] netlink: zone id is out of range [ 1212.970102][T32472] netlink: del zone limit has 4 unknown bytes [ 1218.062725][ T4276] Bluetooth: hci1: Malformed Event: 0x02 [ 1219.644343][ T4276] Bluetooth: hci4: Malformed Event: 0x02 [ 1222.596251][ T4276] Bluetooth: hci4: ACL packet too small [ 1223.904247][T32656] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.12825'. [ 1225.145676][T32674] netlink: 'syz.1.12830': attribute type 1 has an invalid length. [ 1226.209472][T32695] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.12843'. [ 1228.217731][T32732] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.12857'. [ 1228.799088][T32746] netlink: 'syz.3.12864': attribute type 1 has an invalid length. [ 1229.307350][T32765] netlink: 'syz.1.12874': attribute type 2 has an invalid length. [ 1229.323100][T32765] netlink: 'syz.1.12874': attribute type 1 has an invalid length. [ 1229.337791][T32765] netlink: 'syz.1.12874': attribute type 8 has an invalid length. [ 1229.351454][T32765] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12874'. [ 1230.506596][ T319] netlink: 'syz.5.12880': attribute type 3 has an invalid length. [ 1230.579809][ T319] netlink: 163968 bytes leftover after parsing attributes in process `syz.5.12880'. [ 1230.835651][ T325] netlink: 'syz.4.12883': attribute type 1 has an invalid length. [ 1232.960359][ T4276] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1234.398991][ T406] netlink: 'syz.1.12917': attribute type 22 has an invalid length. [ 1235.807811][ T439] netlink: 'syz.3.12930': attribute type 3 has an invalid length. [ 1235.828385][ T439] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.12930'. [ 1236.687800][ T4276] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1238.762290][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.768725][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.983702][ T567] netlink: 'syz.4.12975': attribute type 29 has an invalid length. [ 1244.041940][ T567] netlink: 'syz.4.12975': attribute type 29 has an invalid length. [ 1251.136103][ T676] netlink: 26 bytes leftover after parsing attributes in process `syz.1.13024'. [ 1261.091955][ T851] netlink: 'syz.5.13089': attribute type 3 has an invalid length. [ 1263.188152][ T901] netlink: 'syz.4.13111': attribute type 2 has an invalid length. [ 1263.219288][ T901] netlink: 164 bytes leftover after parsing attributes in process `syz.4.13111'. [ 1266.421417][ T4278] Bluetooth: hci5: command 0x0406 tx timeout [ 1267.879591][ T1003] netlink: 'syz.0.13152': attribute type 3 has an invalid length. [ 1268.002566][ T1008] netlink: 'syz.5.13153': attribute type 2 has an invalid length. [ 1268.126723][ T1008] netlink: 164 bytes leftover after parsing attributes in process `syz.5.13153'. [ 1280.153565][ T1261] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.13245'. [ 1282.933922][ T1309] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.13263'. [ 1284.468099][ T1338] netlink: 'syz.3.13277': attribute type 10 has an invalid length. [ 1284.497299][ T1338] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.13277'. [ 1284.566318][ T1342] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.13278'. [ 1285.200288][ T1355] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.13282'. [ 1286.336860][ T1382] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.13293'. [ 1286.622970][ T4276] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1287.946205][ T1416] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.13311'. [ 1288.305974][ T1430] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.13316'. [ 1289.233764][ T4276] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 1290.646861][ T1506] netlink: 'syz.0.13352': attribute type 21 has an invalid length. [ 1290.677667][ T1506] netlink: 164 bytes leftover after parsing attributes in process `syz.0.13352'. [ 1291.654938][ T1545] netlink: 'syz.4.13368': attribute type 21 has an invalid length. [ 1291.672226][ T1545] netlink: 164 bytes leftover after parsing attributes in process `syz.4.13368'. [ 1294.667355][ T1638] netlink: 168 bytes leftover after parsing attributes in process `syz.0.13414'. [ 1298.143438][ T1713] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.13452'. [ 1298.400878][ T1715] IPv6: NLM_F_CREATE should be specified when creating new route [ 1298.454861][ T1715] netlink: 1 bytes leftover after parsing attributes in process `syz.0.13453'. [ 1299.809192][ T1748] netlink: 'syz.3.13468': attribute type 10 has an invalid length. [ 1299.850445][ T1748] netlink: 9279 bytes leftover after parsing attributes in process `syz.3.13468'. [ 1300.184403][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.190838][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.259761][ T1762] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.13475'. [ 1301.279393][ T1762] openvswitch: netlink: Flow actions attr not present in new flow. [ 1301.507862][ T1764] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.13476'. [ 1301.821162][ T1776] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13482'. [ 1302.203097][ T1793] netlink: 'syz.0.13490': attribute type 10 has an invalid length. [ 1302.238557][ T1793] netlink: 9279 bytes leftover after parsing attributes in process `syz.0.13490'. [ 1303.410524][ T1810] netlink: 1 bytes leftover after parsing attributes in process `syz.3.13498'. [ 1303.444773][ T1809] netlink: 180900 bytes leftover after parsing attributes in process `syz.5.13497'. [ 1303.461569][ T1809] openvswitch: netlink: Flow actions attr not present in new flow. [ 1303.932731][ T4276] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1304.310729][ T1840] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13512'. [ 1305.168896][ T1867] netlink: 'syz.5.13523': attribute type 21 has an invalid length. [ 1305.213424][ T1867] IPv6: NLM_F_CREATE should be specified when creating new route [ 1306.021707][ T4278] Bluetooth: hci0: command 0x2016 tx timeout [ 1306.428717][ T1898] sock: sock_timestamping_bind_phc: sock not bind to device [ 1306.666508][ T1905] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.13542'. [ 1306.903431][ T1912] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.13544'. [ 1306.938803][ T1912] openvswitch: netlink: Flow actions attr not present in new flow. [ 1307.554285][ T1926] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13552'. [ 1307.624412][ T1929] sock: sock_timestamping_bind_phc: sock not bind to device [ 1307.815351][ T1935] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.13557'. [ 1308.899166][ T1949] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.13562'. [ 1308.921515][ T1949] openvswitch: netlink: Flow actions attr not present in new flow. [ 1309.017816][ T4276] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1309.329402][ T1962] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13567'. [ 1309.367451][ T1967] sock: sock_timestamping_bind_phc: sock not bind to device [ 1311.062929][ T4276] Bluetooth: hci3: command 0x2016 tx timeout [ 1311.167694][ T1989] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.13579'. [ 1311.178027][ T1989] openvswitch: netlink: Flow actions attr not present in new flow. [ 1311.211780][ T1990] netlink: 'syz.0.13591': attribute type 10 has an invalid length. [ 1311.247414][ T1990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13591'. [ 1311.448797][ T2000] sock: sock_timestamping_bind_phc: sock not bind to device [ 1311.930527][ T2011] netlink: 'syz.3.13589': attribute type 33 has an invalid length. [ 1311.961463][ T2011] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13589'. [ 1311.976869][ T2014] netlink: 3 bytes leftover after parsing attributes in process `syz.0.13600'. [ 1312.226899][ T2024] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.13597'. [ 1312.247752][ T2024] openvswitch: netlink: Flow actions attr not present in new flow. [ 1312.695669][ T2037] netlink: 'syz.5.13603': attribute type 11 has an invalid length. [ 1312.714769][ T2037] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.13603'. [ 1312.736118][ T2037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1313.262460][ T2052] netlink: 'syz.4.13608': attribute type 33 has an invalid length. [ 1313.291878][ T2052] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13608'. [ 1313.507505][ T2062] netlink: 3 bytes leftover after parsing attributes in process `syz.5.13611'. [ 1313.765593][ T2071] openvswitch: netlink: Flow actions attr not present in new flow. [ 1314.078239][ T2079] netlink: 'syz.1.13621': attribute type 11 has an invalid length. [ 1314.091087][ T2079] __nla_validate_parse: 1 callbacks suppressed [ 1314.091102][ T2079] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13621'. [ 1314.123846][ T2079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1314.426158][ T2084] netlink: 'syz.1.13624': attribute type 33 has an invalid length. [ 1314.451938][ T2084] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13624'. [ 1314.861245][ T2096] netlink: 'syz.4.13629': attribute type 10 has an invalid length. [ 1314.869347][ T2096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13629'. [ 1316.380195][ T2132] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.13643'. [ 1316.725508][ T2137] netlink: 64771 bytes leftover after parsing attributes in process `syz.4.13646'. [ 1316.753179][ T2138] netlink: 'syz.3.13644': attribute type 2 has an invalid length. [ 1316.819529][ T2138] device 0 entered promiscuous mode [ 1317.099905][ T2148] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13651'. [ 1317.129837][ T2148] : renamed from caif0 [ 1317.161793][ T2148] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1318.541165][ T2177] netlink: 64771 bytes leftover after parsing attributes in process `syz.0.13660'. [ 1319.737300][ T2206] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.13676'. [ 1319.951847][ T2209] netlink: 64771 bytes leftover after parsing attributes in process `syz.1.13677'. [ 1320.654688][ T2233] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.13687'. [ 1321.292988][ T2239] netlink: 'syz.0.13689': attribute type 2 has an invalid length. [ 1321.336676][ T2239] device 0 entered promiscuous mode [ 1323.927012][ T2249] netlink: 'syz.1.13693': attribute type 3 has an invalid length. [ 1323.972804][ T2249] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.13693'. [ 1324.762078][ T2271] netlink: 'syz.3.13713': attribute type 3 has an invalid length. [ 1324.770151][ T2271] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.13713'. [ 1325.272987][ T2278] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13709'. [ 1325.719489][ T2290] netlink: 'syz.1.13714': attribute type 3 has an invalid length. [ 1325.727774][ T2290] netlink: 'syz.1.13714': attribute type 1 has an invalid length. [ 1325.735856][ T2290] netlink: 120 bytes leftover after parsing attributes in process `syz.1.13714'. [ 1326.107424][ T2304] netlink: 'syz.4.13719': attribute type 3 has an invalid length. [ 1326.152859][ T2304] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.13719'. [ 1326.525476][ T2308] netlink: 'syz.3.13722': attribute type 21 has an invalid length. [ 1328.092848][ T2342] netlink: 'syz.1.13736': attribute type 21 has an invalid length. [ 1330.260923][ T2388] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13753'. [ 1330.910933][ T2407] sctp: [Deprecated]: syz.0.13761 (pid 2407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1330.910933][ T2407] Use struct sctp_sack_info instead [ 1332.054545][ T2439] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.13771'. [ 1332.580580][ T2451] sctp: [Deprecated]: syz.4.13776 (pid 2451) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1332.580580][ T2451] Use struct sctp_sack_info instead [ 1333.323179][ T2458] device syzkaller0 entered promiscuous mode [ 1334.063537][ T2475] ref_ctr_offset mismatch. inode: 0x1258 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1334.494898][ T2488] netlink: 'syz.5.13788': attribute type 3 has an invalid length. [ 1334.508806][ T2488] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.13788'. [ 1335.031003][ T2497] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.13791'. [ 1337.764919][ T2523] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.13801'. [ 1344.792683][ T2678] netlink: 'syz.4.13856': attribute type 3 has an invalid length. [ 1344.851508][ T2678] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.13856'. [ 1347.928085][ T2761] netlink: 'syz.3.13887': attribute type 2 has an invalid length. [ 1347.944529][ T2761] netlink: 'syz.3.13887': attribute type 1 has an invalid length. [ 1347.963579][ T2761] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.13887'. [ 1348.370659][ T2771] netlink: 'syz.1.13892': attribute type 3 has an invalid length. [ 1348.422588][ T2771] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.13892'. [ 1350.432013][ T2827] netlink: 'syz.0.13907': attribute type 3 has an invalid length. [ 1350.527411][ T2827] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13907'. [ 1352.455223][ T2865] netlink: 'syz.0.13922': attribute type 2 has an invalid length. [ 1352.494937][ T2865] netlink: 'syz.0.13922': attribute type 1 has an invalid length. [ 1352.536015][ T2865] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.13922'. [ 1352.924737][ T2869] netlink: 'syz.3.13923': attribute type 3 has an invalid length. [ 1352.945479][ T2869] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.13923'. [ 1353.613417][ T2885] netlink: 'syz.5.13931': attribute type 10 has an invalid length. [ 1353.736676][ T2885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.744760][ T2885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.904039][ T2885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.911489][ T2885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.919157][ T2885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.926530][ T2885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1354.148438][ T2885] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1354.879885][ T2899] netlink: 'syz.4.13938': attribute type 2 has an invalid length. [ 1354.961445][ T2899] netlink: 'syz.4.13938': attribute type 1 has an invalid length. [ 1354.969373][ T2899] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.13938'. [ 1355.159778][ T2902] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.13949'. [ 1355.203150][ T2905] netlink: 'syz.0.13940': attribute type 3 has an invalid length. [ 1355.212026][ T2905] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13940'. [ 1355.246588][ T2906] netlink: 'syz.5.13949': attribute type 1 has an invalid length. [ 1355.264335][ T2906] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.13949'. [ 1357.388759][ T2939] netlink: 'syz.0.13958': attribute type 3 has an invalid length. [ 1357.411711][ T2939] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13958'. [ 1360.705801][ T2982] netlink: 'syz.0.13973': attribute type 3 has an invalid length. [ 1360.721428][ T2982] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13973'. [ 1361.187056][ T2994] netlink: 'syz.0.13988': attribute type 3 has an invalid length. [ 1361.217592][ T2994] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13988'. [ 1361.255143][ T2997] device pim6reg1 entered promiscuous mode [ 1361.305878][ T2999] netlink: 'syz.1.13980': attribute type 21 has an invalid length. [ 1361.325600][ T2999] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.13980'. [ 1361.631606][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.638030][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.744617][ T3013] netlink: 'syz.1.13987': attribute type 10 has an invalid length. [ 1361.995431][ T3013] team0: Device wg1 is of different type [ 1363.054553][ T3025] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.13993'. [ 1363.096797][ T3028] netlink: 830 bytes leftover after parsing attributes in process `syz.4.13995'. [ 1363.265287][ T3030] netlink: 'syz.5.13996': attribute type 3 has an invalid length. [ 1363.291400][ T3030] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.13996'. [ 1363.420776][ T3036] netlink: 'syz.0.13999': attribute type 21 has an invalid length. [ 1363.457313][ T3036] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.13999'. [ 1363.573237][ T3042] device pim6reg1 entered promiscuous mode [ 1363.689406][ T3047] netlink: 'syz.0.14004': attribute type 10 has an invalid length. [ 1363.831944][ T3047] team0: Device wg1 is of different type [ 1365.628150][ T3073] netlink: 'syz.0.14025': attribute type 3 has an invalid length. [ 1365.644169][ T3073] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.14025'. [ 1365.792339][ T3075] netlink: 'syz.5.14015': attribute type 21 has an invalid length. [ 1365.811713][ T3075] netlink: 14548 bytes leftover after parsing attributes in process `syz.5.14015'. [ 1366.479314][ T3082] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14018'. [ 1366.879687][ T3090] netlink: 'syz.5.14021': attribute type 10 has an invalid length. [ 1366.997576][ T3090] team0: Device wg1 is of different type [ 1369.540955][ T3136] netlink: 'syz.3.14038': attribute type 10 has an invalid length. [ 1369.658510][ T3136] team0: Device wg1 is of different type [ 1370.220024][ T3151] netlink: 'syz.5.14045': attribute type 3 has an invalid length. [ 1370.252244][ T3151] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.14045'. [ 1370.975846][ T3177] netlink: 'syz.4.14057': attribute type 10 has an invalid length. [ 1371.170924][ T3177] team0: Device wg1 is of different type [ 1372.272954][ T3212] netlink: 'syz.5.14071': attribute type 10 has an invalid length. [ 1372.340872][ T3212] team0: Device wg1 is of different type [ 1374.169039][ T3247] netlink: 'syz.3.14090': attribute type 10 has an invalid length. [ 1375.173614][ T3247] team0: Device wg1 is of different type [ 1375.224227][ T3261] netlink: 1 bytes leftover after parsing attributes in process `syz.4.14095'. [ 1376.061113][ T3289] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14109'. [ 1377.498018][ T3329] IPv6: NLM_F_CREATE should be specified when creating new route [ 1377.511886][ T3329] netlink: 1 bytes leftover after parsing attributes in process `syz.5.14125'. [ 1391.935854][ T3587] netlink: 'syz.5.14242': attribute type 2 has an invalid length. [ 1391.981321][ T3587] netlink: 'syz.5.14242': attribute type 4 has an invalid length. [ 1392.006715][ T3587] netlink: 'syz.5.14242': attribute type 8 has an invalid length. [ 1392.037259][ T3587] netlink: 'syz.5.14242': attribute type 9 has an invalid length. [ 1392.059990][ T3587] netlink: 'syz.5.14242': attribute type 10 has an invalid length. [ 1392.086429][ T3587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14242'. [ 1393.176882][ T3613] netlink: 176 bytes leftover after parsing attributes in process `syz.1.14244'. [ 1393.403838][ T3619] netlink: 'syz.0.14247': attribute type 2 has an invalid length. [ 1393.434870][ T3619] netlink: 'syz.0.14247': attribute type 4 has an invalid length. [ 1393.461899][ T3619] netlink: 'syz.0.14247': attribute type 8 has an invalid length. [ 1393.483393][ T3619] netlink: 'syz.0.14247': attribute type 9 has an invalid length. [ 1393.508077][ T3619] netlink: 'syz.0.14247': attribute type 10 has an invalid length. [ 1393.535020][ T3619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14247'. [ 1395.088407][ T3661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14262'. [ 1395.366611][ T3666] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.14264'. [ 1396.741894][ T3682] netlink: 176 bytes leftover after parsing attributes in process `syz.5.14271'. [ 1397.482683][ T4278] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 1398.656312][ T3713] netlink: 14556 bytes leftover after parsing attributes in process `syz.5.14285'. [ 1398.931527][ T3715] netlink: 176 bytes leftover after parsing attributes in process `syz.3.14286'. [ 1400.088412][ T3746] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.14300'. [ 1407.630642][ T3820] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.14330'. [ 1408.852046][ T3868] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.14354'. [ 1409.006776][ T3871] validate_nla: 5 callbacks suppressed [ 1409.006795][ T3871] netlink: 'syz.1.14355': attribute type 22 has an invalid length. [ 1410.644746][ T3910] netlink: 'syz.0.14382': attribute type 3 has an invalid length. [ 1410.693428][ T3910] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.14382'. [ 1410.699402][ T3917] netlink: 'syz.0.14382': attribute type 3 has an invalid length. [ 1410.722944][ T3917] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.14382'. [ 1411.737303][ T3952] netlink: 'syz.5.14389': attribute type 3 has an invalid length. [ 1411.746122][ T3952] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.14389'. [ 1411.808294][ T3952] netlink: 'syz.5.14389': attribute type 3 has an invalid length. [ 1411.841512][ T3952] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.14389'. [ 1413.689738][ T3995] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.14417'. [ 1413.719782][ T3997] netlink: 'syz.4.14405': attribute type 3 has an invalid length. [ 1413.790323][ T3997] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.14405'. [ 1413.893161][ T4000] netlink: 'syz.4.14405': attribute type 3 has an invalid length. [ 1413.901065][ T4000] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.14405'. [ 1415.636048][ T4036] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.14431'. [ 1417.177784][ T4077] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.14439'. [ 1417.218569][ T4078] netlink: 'syz.5.14436': attribute type 3 has an invalid length. [ 1417.251770][ T4078] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14436'. [ 1423.065052][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.071559][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.199096][ T4183] netlink: 'syz.5.14481': attribute type 3 has an invalid length. [ 1426.506526][ T4188] netlink: 'syz.1.14493': attribute type 3 has an invalid length. [ 1426.534232][ T4188] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14493'. [ 1426.878005][ T4198] netlink: 'syz.3.14496': attribute type 3 has an invalid length. [ 1426.954757][ T4198] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14496'. [ 1430.887769][ T4221] netlink: 'syz.0.14495': attribute type 3 has an invalid length. [ 1430.896061][ T4221] netlink: 'syz.0.14495': attribute type 8 has an invalid length. [ 1430.935781][ T4221] netlink: 'syz.0.14495': attribute type 7 has an invalid length. [ 1430.955840][ T4221] netlink: 194740 bytes leftover after parsing attributes in process `syz.0.14495'. [ 1432.219989][ T4277] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.14520'. [ 1432.460565][ T4290] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14525'. [ 1432.613436][ T4289] netlink: 'syz.4.14524': attribute type 10 has an invalid length. [ 1434.330920][ T4304] netlink: 'syz.4.14531': attribute type 3 has an invalid length. [ 1434.339534][ T4304] netlink: 'syz.4.14531': attribute type 8 has an invalid length. [ 1434.359915][ T4304] netlink: 'syz.4.14531': attribute type 7 has an invalid length. [ 1434.368366][ T4304] netlink: 194740 bytes leftover after parsing attributes in process `syz.4.14531'. [ 1434.915924][ T4311] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.14535'. [ 1434.982590][ T4316] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14537'. [ 1435.156136][ T4325] netlink: 'syz.0.14540': attribute type 10 has an invalid length. [ 1435.766345][ T4351] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.14550'. [ 1436.088299][ T4361] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14552'. [ 1437.823004][ T4389] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14570'. [ 1438.133789][ T4402] device pim6reg1 entered promiscuous mode [ 1439.325126][ T4428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14586'. [ 1440.064918][ T4442] netlink: 'syz.4.14594': attribute type 39 has an invalid length. [ 1440.112438][ T4442] device macvlan0 entered promiscuous mode [ 1440.408471][ T4447] netlink: 192432 bytes leftover after parsing attributes in process `syz.0.14607'. [ 1440.457037][ T4447] netlink: get zone limit has 4 unknown bytes [ 1440.682536][ T4459] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14601'. [ 1441.053150][ T4465] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14603'. [ 1441.989645][ T4481] device syzkaller0 entered promiscuous mode [ 1444.040442][ T4503] netlink: 192432 bytes leftover after parsing attributes in process `syz.5.14633'. [ 1444.073759][ T4503] netlink: get zone limit has 4 unknown bytes [ 1446.127637][ T4498] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14621'. [ 1446.137191][ T4514] netlink: 'syz.5.14627': attribute type 2 has an invalid length. [ 1447.468568][ T4534] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14647'. [ 1447.504199][ T4534] openvswitch: netlink: Message has 6 unknown bytes. [ 1447.552257][ T4537] netlink: 192432 bytes leftover after parsing attributes in process `syz.4.14636'. [ 1447.628310][ T4537] netlink: get zone limit has 4 unknown bytes [ 1448.454399][ T4553] netlink: 'syz.4.14646': attribute type 2 has an invalid length. [ 1448.839142][ T4561] netlink: 'syz.0.14651': attribute type 7 has an invalid length. [ 1448.871839][ T4561] netlink: 191184 bytes leftover after parsing attributes in process `syz.0.14651'. [ 1449.867425][ T4580] netlink: 14 bytes leftover after parsing attributes in process `syz.5.14660'. [ 1449.936141][ T4580] openvswitch: netlink: Message has 6 unknown bytes. [ 1450.439142][ T4590] netlink: 'syz.5.14665': attribute type 7 has an invalid length. [ 1450.456454][ T4590] netlink: 191184 bytes leftover after parsing attributes in process `syz.5.14665'. [ 1451.819741][ T4559] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14645'. [ 1451.829601][ T4586] netlink: 'syz.0.14663': attribute type 2 has an invalid length. [ 1451.997769][ T4594] netlink: 'syz.5.14676': attribute type 9 has an invalid length. [ 1452.047242][ T4594] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.14676'. [ 1452.471098][ T4609] device syzkaller0 entered promiscuous mode [ 1452.696754][ T4278] Bluetooth: hci3: unexpected event 0x31 length: 151 > 6 [ 1452.807796][ T4625] netlink: 'syz.1.14680': attribute type 8 has an invalid length. [ 1452.850031][ T4625] netlink: 'syz.1.14680': attribute type 1 has an invalid length. [ 1452.875167][ T4625] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.14680'. [ 1453.917894][ T4278] Bluetooth: hci0: unexpected event 0x31 length: 151 > 6 [ 1456.460144][ T4673] netlink: 'syz.1.14703': attribute type 4 has an invalid length. [ 1456.508233][ T4278] Bluetooth: hci1: unexpected event 0x31 length: 151 > 6 [ 1456.519355][ T4673] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.14703'. [ 1456.649199][ T4682] netlink: 'syz.4.14707': attribute type 8 has an invalid length. [ 1456.691629][ T4682] netlink: 'syz.4.14707': attribute type 1 has an invalid length. [ 1456.730674][ T4682] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.14707'. [ 1459.958780][ T4789] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.14755'. [ 1460.203031][ T4278] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 1461.058302][ T4816] netlink: 'syz.3.14764': attribute type 6 has an invalid length. [ 1461.084749][ T4816] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.14764'. [ 1461.340917][ T4820] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.14766'. [ 1463.017709][ T4820] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1463.027269][ T4820] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1463.037515][ T4820] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1464.188579][ T4856] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.14780'. [ 1464.352813][ T4858] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.14781'. [ 1465.105309][ T4876] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.14790'. [ 1465.151634][ T4876] netlink: zone id is out of range [ 1465.183977][ T4876] netlink: zone id is out of range [ 1465.204985][ T4876] netlink: zone id is out of range [ 1465.225265][ T4876] netlink: zone id is out of range [ 1465.230670][ T4876] netlink: zone id is out of range [ 1465.266782][ T4876] netlink: zone id is out of range [ 1465.297308][ T4876] netlink: zone id is out of range [ 1465.311480][ T4876] netlink: zone id is out of range [ 1465.316972][ T4876] netlink: zone id is out of range [ 1465.341246][ T4876] netlink: zone id is out of range [ 1465.663633][ T4878] device syzkaller0 entered promiscuous mode [ 1469.011441][ T4908] netlink: 'syz.4.14804': attribute type 21 has an invalid length. [ 1469.019454][ T4908] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.14804'. [ 1469.633746][ T4933] netlink: 'syz.0.14813': attribute type 6 has an invalid length. [ 1469.661574][ T4933] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.14813'. [ 1470.914194][ T4953] device syzkaller0 entered promiscuous mode [ 1471.403860][ T4973] netlink: 'syz.4.14830': attribute type 6 has an invalid length. [ 1471.412466][ T4973] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.14830'. [ 1474.424659][ T4968] netlink: 'syz.3.14828': attribute type 21 has an invalid length. [ 1474.432697][ T4968] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.14828'. [ 1474.806593][ T5007] netlink: 'syz.1.14845': attribute type 6 has an invalid length. [ 1474.855137][ T5007] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.14845'. [ 1475.902584][ T5040] netlink: 'syz.3.14858': attribute type 2 has an invalid length. [ 1475.928385][ T5040] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.14858'. [ 1476.353744][ T5054] bond0: (slave bridge0): Error: Slave device does not support XDP [ 1476.417385][ T5054] netlink: 140 bytes leftover after parsing attributes in process `syz.5.14864'. [ 1476.441394][ T5054] netlink: 10 bytes leftover after parsing attributes in process `syz.5.14864'. [ 1476.488790][ T5054] bond0: (slave bond_slave_0): Releasing backup interface [ 1476.538703][ T5054] net_ratelimit: 139 callbacks suppressed [ 1476.538729][ T5054] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1476.992414][ T5070] device syzkaller0 entered promiscuous mode [ 1481.376489][ T5115] netlink: 140 bytes leftover after parsing attributes in process `syz.3.14889'. [ 1481.418751][ T5115] netlink: 10 bytes leftover after parsing attributes in process `syz.3.14889'. [ 1481.482777][ T5115] bond0: (slave bond_slave_0): Releasing backup interface [ 1481.520464][ T5115] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1482.793494][ T4278] Bluetooth: hci5: unexpected subevent 0x04 length: 150 > 11 [ 1483.323221][ T5185] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1483.736904][ T4278] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 1484.520338][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.526775][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.811854][ T5232] netlink: 140 bytes leftover after parsing attributes in process `syz.0.14950'. [ 1484.843750][ T5232] netlink: 10 bytes leftover after parsing attributes in process `syz.0.14950'. [ 1484.887917][ T5232] bond0: (slave bond_slave_0): Releasing backup interface [ 1484.990688][ T5232] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1485.058690][ T4278] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 1485.707206][ T5248] device syzkaller0 entered promiscuous mode [ 1487.861682][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 1487.935767][ T5263] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.14964'. [ 1488.226927][ T4278] Bluetooth: hci4: unexpected subevent 0x04 length: 150 > 11 [ 1488.353090][ T5274] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1489.224559][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 1491.471156][ T4278] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17 [ 1491.524108][ T5328] netlink: 15007 bytes leftover after parsing attributes in process `syz.1.14981'. [ 1493.392740][ T5361] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1494.175014][ T5376] netlink: 15007 bytes leftover after parsing attributes in process `syz.5.14998'. [ 1494.503069][ T4278] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1495.267888][ T5400] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1497.427197][ T5441] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.15026'. [ 1499.120759][ T4278] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1499.120800][ T4278] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 1504.517949][ T5498] netlink: 56843 bytes leftover after parsing attributes in process `syz.4.15049'. [ 1506.481093][ T5532] netlink: 'syz.5.15066': attribute type 1 has an invalid length. [ 1506.595910][ T5532] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.15066'. [ 1509.978637][ T5558] netlink: 'syz.5.15077': attribute type 3 has an invalid length. [ 1510.051456][ T5558] netlink: 'syz.5.15077': attribute type 4 has an invalid length. [ 1510.091331][ T5558] netlink: 9067 bytes leftover after parsing attributes in process `syz.5.15077'. [ 1510.157255][ T5561] ref_ctr_offset mismatch. inode: 0x178f offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1515.674905][ T5627] ref_ctr_offset mismatch. inode: 0x151a offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1516.203692][ T5632] device syzkaller0 entered promiscuous mode [ 1530.415891][ T5826] ref_ctr_offset mismatch. inode: 0x1962 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1532.371210][ T5848] sctp: [Deprecated]: syz.1.15189 (pid 5848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1532.371210][ T5848] Use struct sctp_sack_info instead [ 1532.588978][ T5854] ref_ctr_offset mismatch. inode: 0x174a offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1533.978231][ T5878] netlink: 15794 bytes leftover after parsing attributes in process `syz.5.15212'. [ 1534.360575][ T5887] netlink: 15794 bytes leftover after parsing attributes in process `syz.0.15214'. [ 1536.006751][ T5902] ref_ctr_offset mismatch. inode: 0xb81 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1536.875321][ T5915] ref_ctr_offset mismatch. inode: 0xb88 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1537.096344][ T5922] netlink: 'syz.4.15217': attribute type 1 has an invalid length. [ 1537.138467][ T5922] netlink: 'syz.4.15217': attribute type 4 has an invalid length. [ 1537.157224][ T5922] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.15217'. [ 1537.340096][ T5927] sctp: [Deprecated]: syz.4.15220 (pid 5927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1537.340096][ T5927] Use struct sctp_sack_info instead [ 1537.588045][ T5930] ref_ctr_offset mismatch. inode: 0x1987 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1537.955923][ T5940] ref_ctr_offset mismatch. inode: 0x198e offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1538.057146][ T5945] netlink: 'syz.0.15224': attribute type 25 has an invalid length. [ 1538.102034][ T5945] netlink: 'syz.0.15224': attribute type 28 has an invalid length. [ 1540.201050][ T5968] sctp: [Deprecated]: syz.0.15237 (pid 5968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1540.201050][ T5968] Use struct sctp_sack_info instead [ 1541.630965][ T4299] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.747796][ T4299] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.898503][ T5993] sctp: [Deprecated]: syz.3.15249 (pid 5993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1541.898503][ T5993] Use struct sctp_sack_info instead [ 1541.927649][ T4299] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.112076][ T4299] batman_adv: batadv0: Removing interface: netdevsim0 [ 1542.130557][ T4299] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.968841][ T6015] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1542.978599][ T6015] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1542.987430][ T6015] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1543.000670][ T6015] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1543.008783][ T6015] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1543.016370][ T6015] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1543.334708][ T6025] netlink: 'syz.5.15256': attribute type 29 has an invalid length. [ 1543.394825][ T6025] netlink: 'syz.5.15256': attribute type 29 has an invalid length. [ 1543.454064][ T6032] netlink: 'syz.5.15256': attribute type 29 has an invalid length. [ 1543.508630][ T6025] netlink: 'syz.5.15256': attribute type 29 has an invalid length. [ 1543.670623][ T6025] netlink: 'syz.5.15256': attribute type 29 has an invalid length. [ 1545.071542][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 1545.944994][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.951552][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.036218][ T6011] chnl_net:caif_netlink_parms(): no params data found [ 1547.141487][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 1547.339222][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.363185][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.391443][ T6011] device bridge_slave_0 entered promiscuous mode [ 1547.422085][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.447948][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.475891][ T6011] device bridge_slave_1 entered promiscuous mode [ 1547.540926][ T6011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1547.578116][ T6011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1547.684699][ T6011] team0: Port device team_slave_0 added [ 1547.715342][ T6011] team0: Port device team_slave_1 added [ 1547.810398][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1547.834411][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1547.905840][ T6011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1547.937888][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1547.960006][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.028020][ T6011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1548.477330][ T6011] device hsr_slave_0 entered promiscuous mode [ 1548.493006][ T6011] device hsr_slave_1 entered promiscuous mode [ 1548.499923][ T6011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1548.509464][ T6011] Cannot create hsr debugfs directory [ 1548.862573][ T4299] device hsr_slave_0 left promiscuous mode [ 1548.869158][ T4299] device hsr_slave_1 left promiscuous mode [ 1548.880453][ T4299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1548.888322][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1548.896906][ T4299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1548.904967][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1548.928850][ T4299] device bridge_slave_0 left promiscuous mode [ 1548.935311][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.974436][ T4299] device veth1_macvtap left promiscuous mode [ 1548.980556][ T4299] device veth0_macvtap left promiscuous mode [ 1548.994151][ T4299] device veth1_vlan left promiscuous mode [ 1549.000068][ T4299] device veth0_vlan left promiscuous mode [ 1549.238804][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 1549.805685][ T4299] team0 (unregistering): Port device team_slave_1 removed [ 1549.853857][ T4299] team0 (unregistering): Port device team_slave_0 removed [ 1549.900891][ T4299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1549.950722][ T4299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1549.993945][ T4299] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1550.280649][ T4299] bond0 (unregistering): Released all slaves [ 1550.850740][ T6011] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1550.878626][ T6011] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1550.905335][ T6011] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1550.919937][ T6011] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1551.047197][ T6011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.069770][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1551.082572][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1551.093755][ T6011] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.105624][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1551.115815][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1551.125971][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.133198][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1551.167438][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1551.180806][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1551.193556][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1551.204112][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.211397][ T453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1551.220253][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1551.240337][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1551.267072][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1551.278100][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1551.287512][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1551.299163][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1551.310108][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1551.318631][ T6015] Bluetooth: hci3: command 0x0419 tx timeout [ 1551.326673][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1551.340136][ T6011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1551.352692][ T6011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1551.362192][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1551.386885][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1551.417386][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1551.767390][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1551.781548][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1551.807904][ T6011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1552.290013][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1552.306912][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1552.334341][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1552.347482][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1552.358451][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1552.374971][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1552.390827][ T6011] device veth0_vlan entered promiscuous mode [ 1552.408669][ T6011] device veth1_vlan entered promiscuous mode [ 1552.454894][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1552.472045][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1552.482129][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1552.502389][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1552.524800][ T6011] device veth0_macvtap entered promiscuous mode [ 1552.535996][ T6011] device veth1_macvtap entered promiscuous mode [ 1552.563681][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.580732][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.592895][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.610059][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.620249][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.634788][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.647604][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.665991][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.678405][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.693532][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.708741][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1552.722113][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1552.737499][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1552.749520][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1552.770551][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.790233][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.800622][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.817586][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.828615][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.839358][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.849821][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.861444][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.871817][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.882578][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.894442][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1552.909633][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1552.922000][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1552.943912][ T6011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.953649][ T6011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.963245][ T6011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.979289][ T6011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.115310][ T9570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.127854][ T9570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.163109][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1553.189637][ T453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.211539][ T453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.220236][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1554.473787][ T6157] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.15280'. [ 1554.506051][ T6163] netlink: 'syz.1.15271': attribute type 1 has an invalid length. [ 1554.538720][ T6163] netlink: 'syz.1.15271': attribute type 4 has an invalid length. [ 1554.567423][ T6163] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.15271'. [ 1554.607915][ T6165] netlink: 'syz.1.15271': attribute type 1 has an invalid length. [ 1554.658500][ T6165] netlink: 'syz.1.15271': attribute type 4 has an invalid length. [ 1554.690446][ T6165] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.15271'. [ 1555.166922][ T6179] ref_ctr_offset mismatch. inode: 0xbcb offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1555.660251][ T6188] cgroup: fork rejected by pids controller in /syz5 [ 1556.845557][ T6211] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.15287'. [ 1557.540194][ T6231] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.15302'. [ 1560.599238][ T6245] ref_ctr_offset mismatch. inode: 0x15ee offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1561.898335][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1561.907978][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1561.916548][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1561.925823][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1561.935197][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1561.943061][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1563.689100][ T453] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.032324][ T4278] Bluetooth: hci5: command 0x0409 tx timeout [ 1564.955731][ T6267] netlink: 'syz.3.15303': attribute type 14 has an invalid length. [ 1564.963991][ T6267] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.15303'. [ 1565.055304][ T453] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.174613][ T453] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.511645][ T6274] netlink: 'syz.0.15307': attribute type 1 has an invalid length. [ 1565.523377][ T6274] netlink: 'syz.0.15307': attribute type 4 has an invalid length. [ 1565.539165][ T6274] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.15307'. [ 1565.550410][ T6277] netlink: 'syz.0.15307': attribute type 1 has an invalid length. [ 1565.571205][ T6277] netlink: 'syz.0.15307': attribute type 4 has an invalid length. [ 1565.579103][ T6277] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.15307'. [ 1565.845327][ T6254] chnl_net:caif_netlink_parms(): no params data found [ 1566.019731][ T6254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.045630][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.076573][ T6254] device bridge_slave_0 entered promiscuous mode [ 1566.101423][ T4278] Bluetooth: hci5: command 0x041b tx timeout [ 1566.120008][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.130213][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.150056][ T6254] device bridge_slave_1 entered promiscuous mode [ 1566.212553][ T6254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1566.225215][ T6254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.284293][ T6254] team0: Port device team_slave_0 added [ 1566.308431][ T6254] team0: Port device team_slave_1 added [ 1566.357883][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1566.376340][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1566.415615][ T6254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.440741][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1566.449553][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1566.488072][ T6254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1568.181256][ T4278] Bluetooth: hci5: command 0x040f tx timeout [ 1568.340713][ T6254] device hsr_slave_0 entered promiscuous mode [ 1568.381687][ T6254] device hsr_slave_1 entered promiscuous mode [ 1568.388594][ T6254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1568.409080][ T6254] Cannot create hsr debugfs directory [ 1568.453456][ T453] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.193840][ T6015] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1570.204828][ T6015] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1570.213637][ T6015] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1570.224029][ T6015] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1570.231957][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1570.239456][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1570.262072][ T4278] Bluetooth: hci5: command 0x0419 tx timeout [ 1570.526934][ T6316] chnl_net:caif_netlink_parms(): no params data found [ 1570.608188][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.615946][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.625000][ T6316] device bridge_slave_0 entered promiscuous mode [ 1570.635130][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.657498][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.677885][ T6316] device bridge_slave_1 entered promiscuous mode [ 1570.792283][ T6316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1570.826339][ T6316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1570.952247][ T6316] team0: Port device team_slave_0 added [ 1570.989128][ T6316] team0: Port device team_slave_1 added [ 1571.054838][ T6316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1571.071427][ T6316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1571.103089][ T6316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1571.117015][ T6316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1571.124720][ T6316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1571.168490][ T6316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1571.864383][ T6316] device hsr_slave_0 entered promiscuous mode [ 1571.915479][ T6316] device hsr_slave_1 entered promiscuous mode [ 1571.961032][ T6316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1571.979921][ T6316] Cannot create hsr debugfs directory [ 1572.341561][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 1573.007052][ T6254] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1573.073336][ T6316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.207727][ T6254] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1573.258860][ T6316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.292387][ T6254] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1573.391732][ T6254] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1573.479234][ T6316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.633278][ T6316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.054439][ T6254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1574.071029][ T6316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1574.111774][ T6316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1574.123655][ T6316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1574.149075][ T453] device hsr_slave_0 left promiscuous mode [ 1574.160419][ T453] device hsr_slave_1 left promiscuous mode [ 1574.176082][ T453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1574.184156][ T453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1574.192434][ T453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1574.199909][ T453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1574.208287][ T453] device bridge_slave_1 left promiscuous mode [ 1574.215172][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.224120][ T453] device bridge_slave_0 left promiscuous mode [ 1574.230449][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.277201][ T453] device veth1_macvtap left promiscuous mode [ 1574.283594][ T453] device veth0_macvtap left promiscuous mode [ 1574.289762][ T453] device veth1_vlan left promiscuous mode [ 1574.296333][ T453] device veth0_vlan left promiscuous mode [ 1574.425947][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 1574.889786][ T453] team0 (unregistering): Port device team_slave_1 removed [ 1574.937696][ T453] team0 (unregistering): Port device team_slave_0 removed [ 1574.985274][ T453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1575.373999][ T453] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1575.386190][ T453] bond0 (unregistering): Released all slaves [ 1575.487133][ T6316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1575.516923][ T6254] 8021q: adding VLAN 0 to HW filter on device team0 [ 1575.552106][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1575.570194][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1575.603393][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1575.613156][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1575.622170][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.629338][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1575.706033][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1575.723489][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1575.740994][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1575.752689][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.759901][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1575.778474][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1575.788314][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1575.798059][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1575.809698][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1575.874726][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1575.889624][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1575.907460][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1575.927175][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1575.939714][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1575.966647][ T6254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1575.996989][ T6254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1576.010882][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1576.020678][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1576.068352][ T6316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1576.151904][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1576.160636][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1576.213825][ T6316] 8021q: adding VLAN 0 to HW filter on device team0 [ 1576.254858][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1576.273391][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1576.290837][ T9548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.298083][ T9548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1576.343916][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1576.362594][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1576.381775][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1576.401608][ T9548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.408790][ T9548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.431559][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1576.452919][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1576.487104][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1576.502084][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 1576.521189][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1576.539586][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1576.548294][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1576.582538][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1576.612663][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1576.649164][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1576.663076][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1576.682067][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1576.696461][ T6316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1576.911720][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1576.919325][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1576.963188][ T6254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1577.176002][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1577.184279][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1577.200355][ T6316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1577.253721][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1577.270348][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1577.341929][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1577.353166][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1577.379190][ T6316] device veth0_vlan entered promiscuous mode [ 1577.386780][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1577.396541][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1577.413927][ T6316] device veth1_vlan entered promiscuous mode [ 1577.467979][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1577.477172][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1577.486261][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1577.495566][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1577.509561][ T6316] device veth0_macvtap entered promiscuous mode [ 1577.562706][ T9554] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1577.583696][ T6316] device veth1_macvtap entered promiscuous mode [ 1577.618982][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.630416][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.641583][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.652559][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.663358][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.676376][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.686318][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.696910][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.707063][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.717578][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.729335][ T6316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1577.748241][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1577.757205][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1577.769183][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1577.781023][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.792062][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1577.802984][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.814046][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1577.824801][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.835622][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1577.851009][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.862148][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1577.872705][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.884449][ T6316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1577.904748][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1577.923168][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1577.934163][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1577.944441][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1577.960570][ T6316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.970059][ T6316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.979254][ T6316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.989198][ T6316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.059617][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1578.068799][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1578.080680][ T6254] device veth0_vlan entered promiscuous mode [ 1578.097543][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1578.106475][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1578.140636][ T6254] device veth1_vlan entered promiscuous mode [ 1578.246772][ T9534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1578.276200][ T9534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1578.323526][ T453] device hsr_slave_0 left promiscuous mode [ 1578.329833][ T453] device hsr_slave_1 left promiscuous mode [ 1578.337118][ T453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1578.347704][ T453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1578.358244][ T453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1578.366122][ T453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1578.374241][ T453] device bridge_slave_1 left promiscuous mode [ 1578.380520][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.389901][ T453] device bridge_slave_0 left promiscuous mode [ 1578.396246][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.419519][ T453] device veth1_macvtap left promiscuous mode [ 1578.426053][ T453] device veth0_macvtap left promiscuous mode [ 1578.432267][ T453] device veth1_vlan left promiscuous mode [ 1578.438116][ T453] device veth0_vlan left promiscuous mode [ 1578.592207][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 1578.986680][ T453] team0 (unregistering): Port device team_slave_1 removed [ 1579.030789][ T453] team0 (unregistering): Port device team_slave_0 removed [ 1579.076472][ T453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1579.120663][ T453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1579.443678][ T453] bond0 (unregistering): Released all slaves [ 1579.546366][ T9554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1579.555538][ T9554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1579.564408][ T9554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1579.572966][ T9554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1579.583110][ T9554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1579.604490][ T6254] device veth0_macvtap entered promiscuous mode [ 1579.621217][ T454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1579.629128][ T454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1579.640812][ T6254] device veth1_macvtap entered promiscuous mode [ 1579.694371][ T9554] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1579.702762][ T9554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1579.739086][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1579.750415][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.765771][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1579.776470][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.787016][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1579.798091][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.808269][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1579.819433][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.829793][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1579.842203][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.854522][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1579.862680][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1579.872504][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1579.884336][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.895704][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.905938][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.918097][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.928479][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.940413][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.950842][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.974114][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.989372][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1580.003125][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.019539][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.032370][ T9554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1580.049694][ T9554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1580.063672][ T6254] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.083849][ T6254] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.093439][ T6254] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.102768][ T6254] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.333610][ T9554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.357991][ T9554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.390473][ T9554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1580.495437][ T9554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.531840][ T9554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.542524][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1590.202829][ T6515] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.15369'. [ 1590.312264][ T6515] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1590.357455][ T6515] CPU: 1 PID: 6515 Comm: syz.3.15369 Not tainted syzkaller #0 [ 1590.365193][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1590.375370][ T6515] Call Trace: [ 1590.378714][ T6515] [ 1590.381706][ T6515] dump_stack_lvl+0x188/0x24e [ 1590.386469][ T6515] ? show_regs_print_info+0x12/0x12 [ 1590.391752][ T6515] ? load_image+0x410/0x410 [ 1590.396357][ T6515] sysfs_warn_dup+0x8a/0xa0 [ 1590.400977][ T6515] sysfs_do_create_link_sd+0xc0/0x110 [ 1590.406435][ T6515] device_add+0x83b/0x1050 [ 1590.410946][ T6515] wiphy_register+0x1d8b/0x2aa0 [ 1590.415912][ T6515] ? cfg80211_event_work+0x40/0x40 [ 1590.421087][ T6515] ? minstrel_ht_alloc+0x894/0xa20 [ 1590.426261][ T6515] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1590.432389][ T6515] ieee80211_register_hw+0x2d48/0x39f0 [ 1590.437937][ T6515] ? ieee80211_register_hw+0xee1/0x39f0 [ 1590.443526][ T6515] ? ieee80211_register_hw+0xee1/0x39f0 [ 1590.449129][ T6515] ? ieee80211_tasklet_handler+0x20/0x20 [ 1590.454804][ T6515] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1590.460736][ T6515] ? __debug_object_init+0xed/0x440 [ 1590.466015][ T6515] ? memset+0x1e/0x40 [ 1590.470034][ T6515] ? __hrtimer_init+0x189/0x270 [ 1590.474931][ T6515] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1590.480738][ T6515] ? memcpy+0x3c/0x60 [ 1590.484780][ T6515] hwsim_new_radio_nl+0xab7/0xc90 [ 1590.489871][ T6515] genl_family_rcv_msg_doit+0x22f/0x350 [ 1590.495451][ T6515] ? end_current_label_crit_section+0x170/0x170 [ 1590.501761][ T6515] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1590.507714][ T6515] ? bpf_lsm_capable+0x5/0x10 [ 1590.512426][ T6515] ? security_capable+0x85/0xb0 [ 1590.517337][ T6515] genl_rcv_msg+0x601/0x790 [ 1590.521887][ T6515] ? genl_bind+0x360/0x360 [ 1590.526335][ T6515] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1590.532736][ T6515] netlink_rcv_skb+0x1ef/0x440 [ 1590.537546][ T6515] ? genl_bind+0x360/0x360 [ 1590.542003][ T6515] ? netlink_ack+0x1160/0x1160 [ 1590.546827][ T6515] ? down_read+0x1a8/0x2d0 [ 1590.551286][ T6515] genl_rcv+0x24/0x40 [ 1590.555305][ T6515] netlink_unicast+0x7ad/0x920 [ 1590.560125][ T6515] netlink_sendmsg+0x8ad/0xbd0 [ 1590.564947][ T6515] ? netlink_getsockopt+0x550/0x550 [ 1590.570218][ T6515] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1590.575811][ T6515] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1590.581226][ T6515] ? security_socket_sendmsg+0x7c/0xa0 [ 1590.586735][ T6515] ? netlink_getsockopt+0x550/0x550 [ 1590.591984][ T6515] ____sys_sendmsg+0x5ed/0x9a0 [ 1590.596806][ T6515] ? __sys_sendmsg_sock+0x30/0x30 [ 1590.601878][ T6515] ? __import_iovec+0x306/0x510 [ 1590.606786][ T6515] ? import_iovec+0x6f/0xa0 [ 1590.611337][ T6515] ___sys_sendmsg+0x2a2/0x360 [ 1590.616075][ T6515] ? __sys_sendmsg+0x2a0/0x2a0 [ 1590.621045][ T6515] __se_sys_sendmsg+0x1c3/0x2b0 [ 1590.625950][ T6515] ? __x64_sys_sendmsg+0x80/0x80 [ 1590.630986][ T6515] ? lockdep_hardirqs_on+0x94/0x140 [ 1590.636266][ T6515] do_syscall_64+0x4c/0xa0 [ 1590.640743][ T6515] ? clear_bhb_loop+0x60/0xb0 [ 1590.645465][ T6515] ? clear_bhb_loop+0x60/0xb0 [ 1590.650192][ T6515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1590.656123][ T6515] RIP: 0033:0x7fef82d9e0d9 [ 1590.660576][ T6515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1590.680231][ T6515] RSP: 002b:00007fef83cc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1590.688692][ T6515] RAX: ffffffffffffffda RBX: 00007fef83025fa0 RCX: 00007fef82d9e0d9 [ 1590.696838][ T6515] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1590.704858][ T6515] RBP: 00007fef82e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1590.712873][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.720879][ T6515] R13: 00007fef83026038 R14: 00007fef83025fa0 R15: 00007ffc8bbd8278 [ 1590.728926][ T6515] [ 1592.085751][ T6551] netlink: 'syz.4.15384': attribute type 2 has an invalid length. [ 1592.144046][ T6551] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.15384'. [ 1594.196548][ T6600] netlink: 'syz.0.15406': attribute type 10 has an invalid length. [ 1594.204781][ T6600] netlink: 'syz.0.15406': attribute type 11 has an invalid length. [ 1594.220106][ T6600] netlink: 5145 bytes leftover after parsing attributes in process `syz.0.15406'. [ 1597.357581][ T6621] Zero length message leads to an empty skb [ 1600.205169][ T6660] netlink: 'syz.0.15427': attribute type 3 has an invalid length. [ 1600.242649][ T6660] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.15427'. [ 1601.267858][ T6684] TCP: TCP_TX_DELAY enabled [ 1603.532075][ T6703] device veth1_macvtap left promiscuous mode [ 1603.538617][ T6703] device macsec0 entered promiscuous mode [ 1603.603970][ T6704] device veth1_macvtap entered promiscuous mode [ 1603.851027][ T6716] netlink: 'syz.4.15451': attribute type 1 has an invalid length. [ 1603.859169][ T6716] netlink: 'syz.4.15451': attribute type 4 has an invalid length. [ 1603.962037][ T6716] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.15451'. [ 1604.945582][ T4276] Bluetooth: hci4: Malformed LE Event: 0x02 [ 1607.095654][ T6787] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.15481'. [ 1607.157356][ T6787] netlink: zone id is out of range [ 1607.208349][ T6787] netlink: zone id is out of range [ 1607.259909][ T6787] netlink: zone id is out of range [ 1607.304975][ T6787] netlink: zone id is out of range [ 1607.351975][ T6787] netlink: zone id is out of range [ 1607.392078][ T6787] netlink: zone id is out of range [ 1607.425965][ T6787] netlink: zone id is out of range [ 1607.456797][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.463126][ T6787] netlink: zone id is out of range [ 1607.468338][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.527300][ T6787] netlink: zone id is out of range [ 1607.579166][ T6787] netlink: zone id is out of range [ 1610.474181][ T6805] device syzkaller0 entered promiscuous mode [ 1610.508124][ T6805] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 65487 [ 1614.628949][ T6880] netlink: 'syz.0.15522': attribute type 3 has an invalid length. [ 1615.092412][ T4276] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 1615.173579][ T6885] device syzkaller0 entered promiscuous mode [ 1617.142026][ T6015] Bluetooth: hci3: command 0x0409 tx timeout [ 1619.946697][ T6932] netlink: 'syz.3.15542': attribute type 2 has an invalid length. [ 1619.961335][ T6932] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15542'. [ 1620.420058][ T6944] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.15548'. [ 1628.863203][ T6015] Bluetooth: hci5: Malformed HCI Event [ 1632.272638][ T6015] Bluetooth: hci4: Dropping invalid advertising data [ 1632.279465][ T6015] Bluetooth: hci4: Malformed LE Event: 0x02 [ 1632.385312][ T7116] device syzkaller0 entered promiscuous mode [ 1633.047023][ T7125] netlink: 'syz.1.15629': attribute type 11 has an invalid length. [ 1633.057002][ T7125] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15629'. [ 1633.097559][ T7125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1637.035765][ T7158] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.15640'. [ 1638.984323][ T7217] netlink: 'syz.0.15666': attribute type 11 has an invalid length. [ 1639.022483][ T7217] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15666'. [ 1639.062705][ T7215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1640.326117][ T7247] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15679'. [ 1640.400158][ T7247] netlink: 'syz.1.15679': attribute type 12 has an invalid length. [ 1640.501813][ T7247] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15679'. [ 1640.759078][ T7262] syz.0.15684[7262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1640.759338][ T7262] syz.0.15684[7262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1644.718305][ T7326] netlink: 'syz.4.15713': attribute type 2 has an invalid length. [ 1644.791745][ T7326] netlink: 'syz.4.15713': attribute type 2 has an invalid length. [ 1644.826171][ T7326] netlink: 194740 bytes leftover after parsing attributes in process `syz.4.15713'. [ 1644.865245][ T7330] device syzkaller0 entered promiscuous mode [ 1646.463687][ T7353] netlink: 56 bytes leftover after parsing attributes in process `syz.0.15724'. [ 1646.588303][ T6015] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 1648.689723][ T7353] netlink: 56 bytes leftover after parsing attributes in process `syz.0.15724'. [ 1648.969208][ T7370] netlink: 126324 bytes leftover after parsing attributes in process `syz.5.15730'. [ 1655.710202][ T7442] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15755'. [ 1655.797691][ T7446] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15755'. [ 1656.047668][ T7453] ¥: port 1(team0) entered blocking state [ 1656.076687][ T7453] ¥: port 1(team0) entered disabled state [ 1656.108360][ T7453] device team0 entered promiscuous mode [ 1656.158551][ T7453] device team_slave_0 entered promiscuous mode [ 1656.197579][ T7453] device team_slave_1 entered promiscuous mode [ 1656.230160][ T7449] device team0 left promiscuous mode [ 1656.254723][ T7449] device team_slave_0 left promiscuous mode [ 1656.288915][ T7449] device team_slave_1 left promiscuous mode [ 1656.308142][ T7449] ¥: port 1(team0) entered disabled state [ 1656.749364][ T7465] netlink: 105 bytes leftover after parsing attributes in process `syz.4.15765'. [ 1657.200583][ T7463] device syzkaller0 entered promiscuous mode [ 1657.244675][ T6015] Bluetooth: hci3: ISO packet too small [ 1660.322638][ T7529] netlink: 'syz.1.15791': attribute type 15 has an invalid length. [ 1660.349511][ T7529] netlink: 'syz.1.15791': attribute type 16 has an invalid length. [ 1660.381300][ T7529] netlink: 'syz.1.15791': attribute type 4 has an invalid length. [ 1660.420550][ T7529] netlink: 'syz.1.15791': attribute type 6 has an invalid length. [ 1660.459046][ T7529] netlink: 'syz.1.15791': attribute type 15 has an invalid length. [ 1660.491304][ T7529] netlink: 'syz.1.15791': attribute type 16 has an invalid length. [ 1660.515137][ T7532] device syzkaller0 entered promiscuous mode [ 1660.553649][ T7529] netlink: 'syz.1.15791': attribute type 20 has an invalid length. [ 1660.584962][ T7529] netlink: 'syz.1.15791': attribute type 21 has an invalid length. [ 1660.601268][ T7529] netlink: 'syz.1.15791': attribute type 23 has an invalid length. [ 1660.609500][ T7529] netlink: 'syz.1.15791': attribute type 25 has an invalid length. [ 1660.629892][ T7529] netlink: 13226 bytes leftover after parsing attributes in process `syz.1.15791'. [ 1660.817427][ T7543] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.15797'. [ 1661.790805][ T7546] net_ratelimit: 3660 callbacks suppressed [ 1661.790843][ T7546] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1661.844031][ T7546] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1661.853547][ T7546] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1661.863019][ T7546] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1661.872513][ T7546] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1661.882103][ T7546] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1661.891622][ T7546] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1661.901023][ T7546] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1661.910617][ T7546] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1661.920130][ T7546] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1665.865949][ T4276] Bluetooth: hci3: command 0x0406 tx timeout [ 1666.469126][ T7592] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.15818'. [ 1668.836278][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.842684][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1672.672713][ T4276] Bluetooth: hci5: Dropping invalid advertising data [ 1672.679989][ T4276] Bluetooth: hci5: unknown advertising packet type: 0xff [ 1672.680019][ T4276] Bluetooth: hci5: Malformed LE Event: 0x02 [ 1673.265863][ T7655] validate_nla: 4 callbacks suppressed [ 1673.265881][ T7655] netlink: 'syz.4.15840': attribute type 2 has an invalid length. [ 1673.405962][ T7655] netlink: 'syz.4.15840': attribute type 1 has an invalid length. [ 1673.451494][ T7655] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.15840'. [ 1681.549006][ T7751] netlink: 'syz.0.15881': attribute type 1 has an invalid length. [ 1681.569538][ T7751] netlink: 'syz.0.15881': attribute type 4 has an invalid length. [ 1681.601130][ T7751] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.15881'. [ 1681.610596][ T7752] netlink: 'syz.0.15881': attribute type 1 has an invalid length. [ 1681.621515][ T7752] netlink: 'syz.0.15881': attribute type 4 has an invalid length. [ 1681.638007][ T7752] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.15881'. [ 1682.332208][ T7758] netlink: 'syz.0.15884': attribute type 3 has an invalid length. [ 1682.376864][ T7758] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.15884'. [ 1683.759243][ T7792] netlink: 'syz.1.15899': attribute type 4 has an invalid length. [ 1683.791135][ T7792] netlink: 'syz.1.15899': attribute type 7 has an invalid length. [ 1683.819305][ T7792] netlink: 194740 bytes leftover after parsing attributes in process `syz.1.15899'. [ 1686.261408][ T6015] Bluetooth: hci5: command 0x0406 tx timeout [ 1686.299488][ T7807] device syzkaller0 entered promiscuous mode [ 1686.354916][ T7812] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 1686.597331][ T6015] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3 [ 1686.656908][ T7820] netlink: 'syz.3.15911': attribute type 1 has an invalid length. [ 1686.735702][ T7820] netlink: 'syz.3.15911': attribute type 4 has an invalid length. [ 1686.781145][ T7820] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.15911'. [ 1686.820387][ T6015] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1686.828395][ T6015] Bluetooth: hci3: Invalid handle: 0xffff > 0x0eff [ 1686.862441][ T7823] netlink: 'syz.3.15911': attribute type 1 has an invalid length. [ 1686.870349][ T7823] netlink: 'syz.3.15911': attribute type 4 has an invalid length. [ 1686.961346][ T7823] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.15911'. [ 1688.725823][ T7881] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.15938'. [ 1689.865270][ T4276] Bluetooth: hci3: command 0x206e tx timeout [ 1690.643735][ T7889] device syzkaller0 entered promiscuous mode [ 1691.945126][ T4276] Bluetooth: hci3: command 0x206e tx timeout [ 1692.393462][ T7926] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.15955'. [ 1694.025623][ T4276] Bluetooth: hci3: command 0x206e tx timeout [ 1694.991475][ T7944] netlink: 'syz.1.15964': attribute type 2 has an invalid length. [ 1695.000497][ T7944] netlink: 'syz.1.15964': attribute type 1 has an invalid length. [ 1695.011578][ T7944] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.15964'. [ 1696.101369][ T6015] Bluetooth: hci3: command 0x206e tx timeout [ 1696.501283][ T6015] Bluetooth: hci0: command 0x0406 tx timeout [ 1697.713267][ T7902] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.15947'. [ 1697.731224][ T7934] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.15960'. [ 1697.955683][ T7961] netlink: 'syz.4.15971': attribute type 8 has an invalid length. [ 1697.972472][ T7961] netlink: 'syz.4.15971': attribute type 9 has an invalid length. [ 1697.980453][ T7961] netlink: 'syz.4.15971': attribute type 10 has an invalid length. [ 1697.988960][ T7961] netlink: 'syz.4.15971': attribute type 11 has an invalid length. [ 1697.998288][ T7961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15971'. [ 1698.017231][ T7962] device syzkaller0 entered promiscuous mode [ 1698.181281][ T4276] Bluetooth: hci3: command 0x206e tx timeout [ 1699.112434][ T7989] netlink: 'syz.4.15984': attribute type 29 has an invalid length. [ 1699.139887][ T7989] netlink: 'syz.4.15984': attribute type 29 has an invalid length. [ 1699.798822][ T8016] netlink: 'syz.3.15996': attribute type 10 has an invalid length. [ 1700.261496][ T4276] Bluetooth: hci3: command 0x206e tx timeout [ 1700.404595][ T8016] team0: Device hsr_slave_0 failed to register rx_handler [ 1702.019414][ T8042] netlink: 'syz.0.16008': attribute type 27 has an invalid length. [ 1702.341171][ T4276] Bluetooth: hci3: command 0x206e tx timeout [ 1703.868116][ T8071] device syzkaller0 entered promiscuous mode [ 1704.421292][ T4276] Bluetooth: hci3: command 0x206e tx timeout [ 1706.506572][ T6015] Bluetooth: hci3: command 0x206e tx timeout [ 1708.582001][ T6015] Bluetooth: hci3: command 0x206e tx timeout [ 1709.138679][ T8078] netlink: 'syz.1.16023': attribute type 9 has an invalid length. [ 1709.150310][ T8078] netlink: 'syz.1.16023': attribute type 10 has an invalid length. [ 1709.161329][ T8078] netlink: 'syz.1.16023': attribute type 11 has an invalid length. [ 1709.170701][ T8085] netlink: 'syz.0.16027': attribute type 1 has an invalid length. [ 1709.179099][ T8085] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.16027'. [ 1710.470598][ T8150] device syzkaller0 entered promiscuous mode [ 1710.662453][ T6015] Bluetooth: hci3: command 0x206e tx timeout [ 1710.931714][ T8163] netlink: 'syz.4.16064': attribute type 2 has an invalid length. [ 1710.939914][ T8163] netlink: 10 bytes leftover after parsing attributes in process `syz.4.16064'. [ 1711.773946][ T8186] netlink: 14 bytes leftover after parsing attributes in process `syz.5.16073'. [ 1711.852204][ T8188] sock: sock_timestamping_bind_phc: sock not bind to device [ 1712.640262][ T8186] device hsr_slave_0 left promiscuous mode [ 1712.650603][ T8186] device hsr_slave_1 left promiscuous mode [ 1712.741697][ T4276] Bluetooth: hci3: command 0x206e tx timeout [ 1712.771894][ T8178] delete_channel: no stack [ 1714.831509][ T4276] Bluetooth: hci3: command 0x206e tx timeout [ 1716.752563][ T8259] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.16103'. [ 1716.901870][ T4276] Bluetooth: hci3: command 0x206e tx timeout [ 1718.981834][ T4276] Bluetooth: hci3: command 0x206e tx timeout [ 1719.376882][ T8274] netlink: 'syz.0.16109': attribute type 11 has an invalid length. [ 1719.395935][ T8274] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16109'. [ 1720.035098][ T8273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1721.065235][ T4276] Bluetooth: hci3: command 0x206e tx timeout [ 1721.256280][ T4276] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10 [ 1721.559841][ T8328] net_ratelimit: 6809 callbacks suppressed [ 1721.559885][ T8328] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1721.657349][ T4276] Bluetooth: hci5: Malformed LE Event: 0x1d [ 1721.686634][ T8328] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1721.696393][ T8328] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1721.705958][ T8328] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1721.715506][ T8328] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1721.725114][ T8328] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1721.734564][ T8328] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1721.744129][ T8328] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1721.753916][ T8328] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1721.763454][ T8328] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1723.156553][ T4276] Bluetooth: hci3: command 0x206e tx timeout [ 1723.301138][ T4276] Bluetooth: hci1: command 0x2021 tx timeout [ 1723.509534][ T8349] netlink: 'syz.5.16140': attribute type 3 has an invalid length. [ 1723.521510][ T8349] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.16140'. [ 1724.572168][ T8370] netlink: 'syz.5.16148': attribute type 15 has an invalid length. [ 1724.617682][ T8370] netlink: 'syz.5.16148': attribute type 16 has an invalid length. [ 1724.651200][ T8370] netlink: 'syz.5.16148': attribute type 20 has an invalid length. [ 1724.689400][ T8370] netlink: 'syz.5.16148': attribute type 21 has an invalid length. [ 1724.724517][ T8370] netlink: 'syz.5.16148': attribute type 23 has an invalid length. [ 1724.751429][ T8370] netlink: 'syz.5.16148': attribute type 25 has an invalid length. [ 1724.806988][ T8370] netlink: 15862 bytes leftover after parsing attributes in process `syz.5.16148'. [ 1725.047672][ T8381] netlink: 56843 bytes leftover after parsing attributes in process `syz.0.16154'. [ 1725.231514][ T4276] Bluetooth: hci3: command 0x206e tx timeout [ 1727.301456][ T4276] Bluetooth: hci3: command 0x206e tx timeout [ 1727.639113][ T8457] netlink: 'syz.3.16186': attribute type 3 has an invalid length. [ 1727.648238][ T8457] netlink: 'syz.3.16186': attribute type 1 has an invalid length. [ 1727.656755][ T8457] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.16186'. [ 1727.658664][ T8451] device syzkaller0 entered promiscuous mode [ 1729.382561][ T4276] Bluetooth: hci3: command 0x206e tx timeout [ 1729.814411][ T8484] netlink: 'syz.4.16199': attribute type 3 has an invalid length. [ 1729.830559][ T8484] netlink: 'syz.4.16199': attribute type 1 has an invalid length. [ 1729.841302][ T8484] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.16199'. [ 1730.291796][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.298213][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.695149][ T8504] sctp: [Deprecated]: syz.4.16209 (pid 8504) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1730.695149][ T8504] Use struct sctp_sack_info instead [ 1731.463000][ T4276] Bluetooth: hci3: command 0x206e tx timeout [ 1733.257507][ T8529] net_ratelimit: 3256 callbacks suppressed [ 1733.257529][ T8529] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1733.551168][ T4276] Bluetooth: hci3: command 0x206e tx timeout [ 1734.258419][ T8541] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.16225'. [ 1735.126104][ T8557] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.16231'. [ 1735.357610][ T8564] netlink: 'syz.3.16234': attribute type 1 has an invalid length. [ 1735.378337][ T8564] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.16234'. [ 1735.622292][ T6015] Bluetooth: hci3: command 0x206e tx timeout [ 1737.701347][ T6015] Bluetooth: hci3: command 0x206e tx timeout [ 1740.689971][ T8628] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.16261'. [ 1740.773079][ T8628] netlink: zone id is out of range [ 1740.795502][ T8628] netlink: zone id is out of range [ 1740.813538][ T8632] netlink: 'syz.0.16262': attribute type 3 has an invalid length. [ 1740.832220][ T8628] netlink: get zone limit has 8 unknown bytes [ 1740.860010][ T8632] netlink: 'syz.0.16262': attribute type 8 has an invalid length. [ 1740.900155][ T8632] netlink: 'syz.0.16262': attribute type 7 has an invalid length. [ 1740.932427][ T8632] netlink: 194740 bytes leftover after parsing attributes in process `syz.0.16262'. [ 1747.095043][ T8734] netlink: 'syz.0.16306': attribute type 7 has an invalid length. [ 1747.111775][ T8734] netlink: 191184 bytes leftover after parsing attributes in process `syz.0.16306'. [ 1749.356341][ T8761] netlink: 'syz.5.16319': attribute type 1 has an invalid length. [ 1749.376623][ T8761] netlink: 'syz.5.16319': attribute type 4 has an invalid length. [ 1749.444221][ T8761] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.16319'. [ 1750.401931][ T8791] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.16331'. [ 1751.279869][ T8802] netlink: 'syz.4.16334': attribute type 1 has an invalid length. [ 1751.321355][ T8802] netlink: 'syz.4.16334': attribute type 4 has an invalid length. [ 1751.370730][ T8802] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.16334'. [ 1755.617970][ T8852] netlink: 'syz.0.16355': attribute type 1 has an invalid length. [ 1755.636360][ T8852] netlink: 'syz.0.16355': attribute type 4 has an invalid length. [ 1755.645691][ T8852] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.16355'. [ 1757.289402][ T8897] netlink: 'syz.1.16372': attribute type 1 has an invalid length. [ 1757.317543][ T8897] netlink: 'syz.1.16372': attribute type 4 has an invalid length. [ 1757.330806][ T8897] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.16372'. [ 1758.716077][ T8914] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.16385'. [ 1758.766661][ T8914] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1760.638830][ T8958] netlink: 'syz.0.16401': attribute type 2 has an invalid length. [ 1760.678743][ T8958] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.16401'. [ 1760.862174][ T8966] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.16404'. [ 1760.893282][ T8966] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1760.913589][ T8966] CPU: 0 PID: 8966 Comm: syz.5.16404 Not tainted syzkaller #0 [ 1760.921165][ T8966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1760.931386][ T8966] Call Trace: [ 1760.934715][ T8966] [ 1760.937702][ T8966] dump_stack_lvl+0x188/0x24e [ 1760.942474][ T8966] ? show_regs_print_info+0x12/0x12 [ 1760.947748][ T8966] ? load_image+0x410/0x410 [ 1760.952362][ T8966] sysfs_warn_dup+0x8a/0xa0 [ 1760.956941][ T8966] sysfs_do_create_link_sd+0xc0/0x110 [ 1760.962401][ T8966] device_add+0x83b/0x1050 [ 1760.966910][ T8966] wiphy_register+0x1d8b/0x2aa0 [ 1760.971888][ T8966] ? cfg80211_event_work+0x40/0x40 [ 1760.977079][ T8966] ? minstrel_ht_alloc+0x894/0xa20 [ 1760.982395][ T8966] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1760.988568][ T8966] ieee80211_register_hw+0x2d48/0x39f0 [ 1760.994150][ T8966] ? ieee80211_register_hw+0xee1/0x39f0 [ 1760.999814][ T8966] ? ieee80211_register_hw+0xee1/0x39f0 [ 1761.005494][ T8966] ? ieee80211_tasklet_handler+0x20/0x20 [ 1761.011210][ T8966] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1761.017230][ T8966] ? __debug_object_init+0xed/0x440 [ 1761.022535][ T8966] ? memset+0x1e/0x40 [ 1761.026587][ T8966] ? __hrtimer_init+0x189/0x270 [ 1761.031540][ T8966] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1761.037364][ T8966] ? memcpy+0x3c/0x60 [ 1761.041430][ T8966] hwsim_new_radio_nl+0xab7/0xc90 [ 1761.046573][ T8966] genl_family_rcv_msg_doit+0x22f/0x350 [ 1761.052193][ T8966] ? end_current_label_crit_section+0x170/0x170 [ 1761.058533][ T8966] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1761.064602][ T8966] ? bpf_lsm_capable+0x5/0x10 [ 1761.069359][ T8966] ? security_capable+0x85/0xb0 [ 1761.074316][ T8966] genl_rcv_msg+0x601/0x790 [ 1761.078921][ T8966] ? genl_bind+0x360/0x360 [ 1761.083412][ T8966] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1761.089866][ T8966] netlink_rcv_skb+0x1ef/0x440 [ 1761.094712][ T8966] ? genl_bind+0x360/0x360 [ 1761.099197][ T8966] ? netlink_ack+0x1160/0x1160 [ 1761.104073][ T8966] ? down_read+0x1a8/0x2d0 [ 1761.108667][ T8966] genl_rcv+0x24/0x40 [ 1761.112723][ T8966] netlink_unicast+0x7ad/0x920 [ 1761.117592][ T8966] netlink_sendmsg+0x8ad/0xbd0 [ 1761.122457][ T8966] ? netlink_getsockopt+0x550/0x550 [ 1761.127738][ T8966] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1761.133374][ T8966] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1761.138720][ T8966] ? security_socket_sendmsg+0x7c/0xa0 [ 1761.144256][ T8966] ? netlink_getsockopt+0x550/0x550 [ 1761.149538][ T8966] ____sys_sendmsg+0x5ed/0x9a0 [ 1761.154417][ T8966] ? __sys_sendmsg_sock+0x30/0x30 [ 1761.159505][ T8966] ? __import_iovec+0x306/0x510 [ 1761.164442][ T8966] ? import_iovec+0x6f/0xa0 [ 1761.169035][ T8966] ___sys_sendmsg+0x2a2/0x360 [ 1761.173837][ T8966] ? __sys_sendmsg+0x2a0/0x2a0 [ 1761.178793][ T8966] __se_sys_sendmsg+0x1c3/0x2b0 [ 1761.183730][ T8966] ? __x64_sys_sendmsg+0x80/0x80 [ 1761.188794][ T8966] ? lockdep_hardirqs_on+0x94/0x140 [ 1761.194074][ T8966] do_syscall_64+0x4c/0xa0 [ 1761.198558][ T8966] ? clear_bhb_loop+0x60/0xb0 [ 1761.203300][ T8966] ? clear_bhb_loop+0x60/0xb0 [ 1761.208053][ T8966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1761.214022][ T8966] RIP: 0033:0x7f0f0f19e0d9 [ 1761.218497][ T8966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1761.238176][ T8966] RSP: 002b:00007f0f100f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1761.246693][ T8966] RAX: ffffffffffffffda RBX: 00007f0f0f425fa0 RCX: 00007f0f0f19e0d9 [ 1761.254746][ T8966] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1761.262786][ T8966] RBP: 00007f0f0f235024 R08: 0000000000000000 R09: 0000000000000000 [ 1761.270857][ T8966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1761.278898][ T8966] R13: 00007f0f0f426038 R14: 00007f0f0f425fa0 R15: 00007ffd34412c68 [ 1761.287027][ T8966] [ 1761.995451][ T8993] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.16430'. [ 1762.025151][ T8993] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1762.048128][ T8993] CPU: 0 PID: 8993 Comm: syz.0.16430 Not tainted syzkaller #0 [ 1762.055697][ T8993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1762.065822][ T8993] Call Trace: [ 1762.069154][ T8993] [ 1762.072189][ T8993] dump_stack_lvl+0x188/0x24e [ 1762.076954][ T8993] ? show_regs_print_info+0x12/0x12 [ 1762.082229][ T8993] ? load_image+0x410/0x410 [ 1762.086831][ T8993] sysfs_warn_dup+0x8a/0xa0 [ 1762.091416][ T8993] sysfs_do_create_link_sd+0xc0/0x110 [ 1762.096869][ T8993] device_add+0x83b/0x1050 [ 1762.101361][ T8993] wiphy_register+0x1d8b/0x2aa0 [ 1762.106319][ T8993] ? cfg80211_event_work+0x40/0x40 [ 1762.111496][ T8993] ? minstrel_ht_alloc+0x894/0xa20 [ 1762.116736][ T8993] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1762.122883][ T8993] ieee80211_register_hw+0x2d48/0x39f0 [ 1762.128449][ T8993] ? ieee80211_register_hw+0xee1/0x39f0 [ 1762.134062][ T8993] ? ieee80211_register_hw+0xee1/0x39f0 [ 1762.139692][ T8993] ? ieee80211_tasklet_handler+0x20/0x20 [ 1762.145390][ T8993] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1762.151358][ T8993] ? __debug_object_init+0xed/0x440 [ 1762.156644][ T8993] ? memset+0x1e/0x40 [ 1762.160688][ T8993] ? __hrtimer_init+0x189/0x270 [ 1762.165626][ T8993] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1762.171439][ T8993] ? memcpy+0x3c/0x60 [ 1762.175486][ T8993] hwsim_new_radio_nl+0xab7/0xc90 [ 1762.180615][ T8993] genl_family_rcv_msg_doit+0x22f/0x350 [ 1762.186230][ T8993] ? end_current_label_crit_section+0x170/0x170 [ 1762.192557][ T8993] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1762.198543][ T8993] ? bpf_lsm_capable+0x5/0x10 [ 1762.203318][ T8993] ? security_capable+0x85/0xb0 [ 1762.208260][ T8993] genl_rcv_msg+0x601/0x790 [ 1762.212844][ T8993] ? genl_bind+0x360/0x360 [ 1762.217318][ T8993] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1762.223748][ T8993] netlink_rcv_skb+0x1ef/0x440 [ 1762.228578][ T8993] ? genl_bind+0x360/0x360 [ 1762.233049][ T8993] ? netlink_ack+0x1160/0x1160 [ 1762.237908][ T8993] ? down_read+0x1a8/0x2d0 [ 1762.242389][ T8993] genl_rcv+0x24/0x40 [ 1762.246422][ T8993] netlink_unicast+0x7ad/0x920 [ 1762.251305][ T8993] netlink_sendmsg+0x8ad/0xbd0 [ 1762.256147][ T8993] ? netlink_getsockopt+0x550/0x550 [ 1762.261401][ T8993] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1762.267053][ T8993] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1762.272408][ T8993] ? security_socket_sendmsg+0x7c/0xa0 [ 1762.277940][ T8993] ? netlink_getsockopt+0x550/0x550 [ 1762.283235][ T8993] ____sys_sendmsg+0x5ed/0x9a0 [ 1762.288096][ T8993] ? __sys_sendmsg_sock+0x30/0x30 [ 1762.293180][ T8993] ? __import_iovec+0x306/0x510 [ 1762.298200][ T8993] ? import_iovec+0x6f/0xa0 [ 1762.302785][ T8993] ___sys_sendmsg+0x2a2/0x360 [ 1762.307537][ T8993] ? __sys_sendmsg+0x2a0/0x2a0 [ 1762.312486][ T8993] __se_sys_sendmsg+0x1c3/0x2b0 [ 1762.317517][ T8993] ? __x64_sys_sendmsg+0x80/0x80 [ 1762.322568][ T8993] ? lockdep_hardirqs_on+0x94/0x140 [ 1762.327933][ T8993] do_syscall_64+0x4c/0xa0 [ 1762.332420][ T8993] ? clear_bhb_loop+0x60/0xb0 [ 1762.337190][ T8993] ? clear_bhb_loop+0x60/0xb0 [ 1762.341934][ T8993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1762.347979][ T8993] RIP: 0033:0x7f4db7b9e0d9 [ 1762.352452][ T8993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1762.372139][ T8993] RSP: 002b:00007f4db898f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1762.380624][ T8993] RAX: ffffffffffffffda RBX: 00007f4db7e25fa0 RCX: 00007f4db7b9e0d9 [ 1762.388659][ T8993] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1762.396700][ T8993] RBP: 00007f4db7c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1762.404729][ T8993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1762.412758][ T8993] R13: 00007f4db7e26038 R14: 00007f4db7e25fa0 R15: 00007ffe328676a8 [ 1762.420827][ T8993] [ 1762.689740][ T9003] netlink: 'syz.1.16422': attribute type 10 has an invalid length. [ 1762.710671][ T9003] netlink: 'syz.1.16422': attribute type 11 has an invalid length. [ 1762.719402][ T9003] netlink: 5145 bytes leftover after parsing attributes in process `syz.1.16422'. [ 1762.874377][ T9010] netlink: 'syz.5.16426': attribute type 2 has an invalid length. [ 1762.921181][ T9010] netlink: 199848 bytes leftover after parsing attributes in process `syz.5.16426'. [ 1765.741627][ T9029] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.16433'. [ 1765.764518][ T9029] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1768.784013][ T9073] netlink: 'syz.4.16456': attribute type 3 has an invalid length. [ 1768.819136][ T9073] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.16456'. [ 1769.029617][ T9077] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.16457'. [ 1770.132929][ T9077] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1770.159313][ T9077] CPU: 0 PID: 9077 Comm: syz.0.16457 Not tainted syzkaller #0 [ 1770.166876][ T9077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1770.176986][ T9077] Call Trace: [ 1770.180343][ T9077] [ 1770.183323][ T9077] dump_stack_lvl+0x188/0x24e [ 1770.188082][ T9077] ? show_regs_print_info+0x12/0x12 [ 1770.193361][ T9077] ? load_image+0x410/0x410 [ 1770.197935][ T9077] sysfs_warn_dup+0x8a/0xa0 [ 1770.202533][ T9077] sysfs_do_create_link_sd+0xc0/0x110 [ 1770.207961][ T9077] device_add+0x83b/0x1050 [ 1770.212435][ T9077] wiphy_register+0x1d8b/0x2aa0 [ 1770.217444][ T9077] ? cfg80211_event_work+0x40/0x40 [ 1770.222640][ T9077] ? minstrel_ht_alloc+0x894/0xa20 [ 1770.227924][ T9077] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1770.234067][ T9077] ieee80211_register_hw+0x2d48/0x39f0 [ 1770.239617][ T9077] ? ieee80211_register_hw+0xee1/0x39f0 [ 1770.245225][ T9077] ? ieee80211_register_hw+0xee1/0x39f0 [ 1770.250845][ T9077] ? ieee80211_tasklet_handler+0x20/0x20 [ 1770.256546][ T9077] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1770.262500][ T9077] ? __debug_object_init+0xed/0x440 [ 1770.267772][ T9077] ? memset+0x1e/0x40 [ 1770.271810][ T9077] ? __hrtimer_init+0x189/0x270 [ 1770.276723][ T9077] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1770.282531][ T9077] ? memcpy+0x3c/0x60 [ 1770.286568][ T9077] hwsim_new_radio_nl+0xab7/0xc90 [ 1770.291674][ T9077] genl_family_rcv_msg_doit+0x22f/0x350 [ 1770.297289][ T9077] ? end_current_label_crit_section+0x170/0x170 [ 1770.303603][ T9077] ? lockdep_hardirqs_on+0x94/0x140 [ 1770.308859][ T9077] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1770.314805][ T9077] ? bpf_lsm_capable+0x5/0x10 [ 1770.319505][ T9077] ? security_capable+0x85/0xb0 [ 1770.324414][ T9077] genl_rcv_msg+0x601/0x790 [ 1770.328992][ T9077] ? genl_bind+0x360/0x360 [ 1770.333469][ T9077] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1770.339876][ T9077] netlink_rcv_skb+0x1ef/0x440 [ 1770.344713][ T9077] ? genl_bind+0x360/0x360 [ 1770.349185][ T9077] ? netlink_ack+0x1160/0x1160 [ 1770.354034][ T9077] ? down_read+0x1a8/0x2d0 [ 1770.358494][ T9077] genl_rcv+0x24/0x40 [ 1770.362521][ T9077] netlink_unicast+0x7ad/0x920 [ 1770.367362][ T9077] netlink_sendmsg+0x8ad/0xbd0 [ 1770.372207][ T9077] ? netlink_getsockopt+0x550/0x550 [ 1770.377472][ T9077] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1770.383073][ T9077] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1770.388405][ T9077] ? security_socket_sendmsg+0x7c/0xa0 [ 1770.393981][ T9077] ? netlink_getsockopt+0x550/0x550 [ 1770.399240][ T9077] ____sys_sendmsg+0x5ed/0x9a0 [ 1770.404073][ T9077] ? __sys_sendmsg_sock+0x30/0x30 [ 1770.409155][ T9077] ? __import_iovec+0x306/0x510 [ 1770.414069][ T9077] ? import_iovec+0x6f/0xa0 [ 1770.418630][ T9077] ___sys_sendmsg+0x2a2/0x360 [ 1770.423370][ T9077] ? __sys_sendmsg+0x2a0/0x2a0 [ 1770.428249][ T9077] __se_sys_sendmsg+0x1c3/0x2b0 [ 1770.433156][ T9077] ? __x64_sys_sendmsg+0x80/0x80 [ 1770.438171][ T9077] ? lockdep_hardirqs_on+0x94/0x140 [ 1770.443422][ T9077] do_syscall_64+0x4c/0xa0 [ 1770.447898][ T9077] ? clear_bhb_loop+0x60/0xb0 [ 1770.452631][ T9077] ? clear_bhb_loop+0x60/0xb0 [ 1770.457387][ T9077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1770.463611][ T9077] RIP: 0033:0x7f4db7b9e0d9 [ 1770.468076][ T9077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1770.487744][ T9077] RSP: 002b:00007f4db898f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1770.496223][ T9077] RAX: ffffffffffffffda RBX: 00007f4db7e25fa0 RCX: 00007f4db7b9e0d9 [ 1770.504257][ T9077] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1770.512283][ T9077] RBP: 00007f4db7c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1770.520302][ T9077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1770.528318][ T9077] R13: 00007f4db7e26038 R14: 00007f4db7e25fa0 R15: 00007ffe328676a8 [ 1770.536372][ T9077] [ 1770.785810][ T6015] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1771.010560][ T9096] device veth1_macvtap left promiscuous mode [ 1771.034313][ T9096] device macsec0 entered promiscuous mode [ 1771.114447][ T9099] device veth1_macvtap entered promiscuous mode [ 1771.126745][ T9091] netlink: 'syz.3.16460': attribute type 2 has an invalid length. [ 1771.145467][ T9091] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.16460'. [ 1771.370771][ T9107] netlink: 'syz.5.16466': attribute type 1 has an invalid length. [ 1771.413300][ T9107] netlink: 'syz.5.16466': attribute type 4 has an invalid length. [ 1771.439467][ T9107] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.16466'. [ 1772.752161][ T9143] netlink: 'syz.1.16485': attribute type 2 has an invalid length. [ 1772.772370][ T9143] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.16485'. [ 1773.752148][ T9172] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.16497'. [ 1773.785842][ T9172] netlink: zone id is out of range [ 1773.821330][ T9172] netlink: zone id is out of range [ 1773.875028][ T9172] netlink: zone id is out of range [ 1773.880955][ T9172] netlink: zone id is out of range [ 1773.913430][ T9172] netlink: zone id is out of range [ 1773.931734][ T9172] netlink: zone id is out of range [ 1773.949119][ T9172] netlink: zone id is out of range [ 1773.969640][ T9172] netlink: zone id is out of range [ 1774.021389][ T9172] netlink: zone id is out of range [ 1774.051903][ T9172] netlink: zone id is out of range [ 1774.875767][ T9188] device syzkaller0 entered promiscuous mode [ 1779.398325][ T9253] netlink: 'syz.4.16535': attribute type 3 has an invalid length. [ 1779.552213][ T6015] Bluetooth: hci0: unexpected event 0x04 length: 151 > 10 [ 1779.626167][ T9263] netlink: 'syz.4.16540': attribute type 10 has an invalid length. [ 1779.687465][ T9263] netlink: 'syz.4.16540': attribute type 11 has an invalid length. [ 1779.710134][ T9263] netlink: 5145 bytes leftover after parsing attributes in process `syz.4.16540'. [ 1781.647338][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 1782.078140][ T9303] netlink: 'syz.5.16555': attribute type 10 has an invalid length. [ 1782.123853][ T9303] netlink: 'syz.5.16555': attribute type 11 has an invalid length. [ 1782.141685][ T9303] netlink: 5145 bytes leftover after parsing attributes in process `syz.5.16555'. [ 1782.350609][ T9304] device syzkaller0 entered promiscuous mode [ 1789.787054][ T9315] netlink: 16083 bytes leftover after parsing attributes in process `syz.0.16561'. [ 1791.703735][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.710217][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.253826][ T4276] Bluetooth: hci3: Malformed HCI Event [ 1800.241923][ T9479] netlink: 'syz.4.16641': attribute type 11 has an invalid length. [ 1800.271642][ T9479] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16641'. [ 1800.304546][ T9479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1801.393522][ T4276] Bluetooth: hci1: Dropping invalid advertising data [ 1801.400674][ T4276] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1805.310541][ T9549] device syzkaller0 entered promiscuous mode [ 1809.946980][ T9615] netlink: 'syz.1.16683': attribute type 11 has an invalid length. [ 1809.996416][ T9615] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16683'. [ 1810.055786][ T9613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1812.611865][ T9661] syz.3.16702[9661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1812.612045][ T9661] syz.3.16702[9661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1816.959301][ T9721] netlink: 'syz.3.16728': attribute type 2 has an invalid length. [ 1817.020522][ T9721] netlink: 'syz.3.16728': attribute type 2 has an invalid length. [ 1817.035968][ T9721] netlink: 194740 bytes leftover after parsing attributes in process `syz.3.16728'. [ 1818.379528][ T9743] netlink: 126324 bytes leftover after parsing attributes in process `syz.3.16748'. [ 1818.431210][ T4276] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 1820.501324][ T6015] Bluetooth: hci3: command 0x206c tx timeout [ 1820.514784][ T4276] Bluetooth: hci3: Opcode 0x206c failed: -110 [ 1820.524145][ T4276] Bluetooth: hci3: Opcode 0x2046 failed: -110 [ 1822.581230][ T6015] Bluetooth: hci3: command 0x2046 tx timeout [ 1828.460185][ T9835] netlink: 105 bytes leftover after parsing attributes in process `syz.0.16780'. [ 1830.326058][ T6015] Bluetooth: hci0: ISO packet too small [ 1830.623644][ T9849] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16773'. [ 1830.707171][ T9857] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16773'. [ 1830.818564][ T9860] ¥: port 1(team0) entered blocking state [ 1830.893760][ T9860] ¥: port 1(team0) entered disabled state [ 1830.921785][ T9860] device team0 entered promiscuous mode [ 1830.927423][ T9860] device team_slave_0 entered promiscuous mode [ 1830.961307][ T9860] device team_slave_1 entered promiscuous mode [ 1830.982830][ T9859] device team0 left promiscuous mode [ 1831.002043][ T9859] device team_slave_0 left promiscuous mode [ 1831.016124][ T9859] device team_slave_1 left promiscuous mode [ 1831.047304][ T9859] ¥: port 1(team0) entered disabled state [ 1833.518420][ T9917] netlink: 'syz.0.16808': attribute type 15 has an invalid length. [ 1833.536106][ T9917] netlink: 'syz.0.16808': attribute type 16 has an invalid length. [ 1833.546951][ T9917] netlink: 'syz.0.16808': attribute type 4 has an invalid length. [ 1833.562834][ T9917] netlink: 'syz.0.16808': attribute type 6 has an invalid length. [ 1833.577701][ T9917] netlink: 'syz.0.16808': attribute type 15 has an invalid length. [ 1833.609260][ T9917] netlink: 'syz.0.16808': attribute type 16 has an invalid length. [ 1833.620641][ T9917] netlink: 'syz.0.16808': attribute type 20 has an invalid length. [ 1833.642734][ T9917] netlink: 'syz.0.16808': attribute type 21 has an invalid length. [ 1833.659052][ T9917] netlink: 'syz.0.16808': attribute type 23 has an invalid length. [ 1833.667551][ T9917] netlink: 'syz.0.16808': attribute type 25 has an invalid length. [ 1833.682794][ T9917] netlink: 13226 bytes leftover after parsing attributes in process `syz.0.16808'. [ 1833.880198][ T9921] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.16809'. [ 1835.643533][ T9923] net_ratelimit: 3660 callbacks suppressed [ 1835.643573][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1835.696080][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1835.705675][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1835.715332][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1835.724856][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1835.734467][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1835.743989][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1835.753456][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1835.763170][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1835.772660][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1839.115909][ T9952] device syzkaller0 entered promiscuous mode [ 1840.050643][ T9966] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.16830'. [ 1844.603031][ T6015] Bluetooth: hci4: Dropping invalid advertising data [ 1844.609817][ T6015] Bluetooth: hci4: unknown advertising packet type: 0xff [ 1844.609847][ T6015] Bluetooth: hci4: Malformed LE Event: 0x02 [ 1845.393019][T10040] validate_nla: 4 callbacks suppressed [ 1845.393041][T10040] netlink: 'syz.5.16860': attribute type 2 has an invalid length. [ 1845.459428][T10040] netlink: 'syz.5.16860': attribute type 1 has an invalid length. [ 1845.489941][T10040] netlink: 170140 bytes leftover after parsing attributes in process `syz.5.16860'. [ 1851.292467][T10139] netlink: 'syz.3.16904': attribute type 3 has an invalid length. [ 1851.309675][T10139] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.16904'. [ 1851.790256][T10157] netlink: 'syz.0.16913': attribute type 4 has an invalid length. [ 1851.808350][T10157] netlink: 'syz.0.16913': attribute type 7 has an invalid length. [ 1851.821275][T10157] netlink: 194740 bytes leftover after parsing attributes in process `syz.0.16913'. [ 1852.521143][ T6015] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 1853.166975][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.180633][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.924617][T10184] device syzkaller0 entered promiscuous mode [ 1856.100706][ T4276] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 1856.108332][ T4276] Bluetooth: hci5: Invalid handle: 0xffff > 0x0eff [ 1856.324920][T10194] netlink: 'syz.4.16929': attribute type 1 has an invalid length. [ 1856.373847][T10194] netlink: 'syz.4.16929': attribute type 4 has an invalid length. [ 1856.407272][T10194] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.16929'. [ 1856.433011][T10197] netlink: 'syz.4.16929': attribute type 1 has an invalid length. [ 1856.461669][T10197] netlink: 'syz.4.16929': attribute type 4 has an invalid length. [ 1856.470053][T10197] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.16929'. [ 1857.239864][ T6015] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1857.600928][T10248] netlink: 127868 bytes leftover after parsing attributes in process `syz.5.16953'. [ 1858.990702][ T6015] Bluetooth: hci4: command 0x206e tx timeout [ 1859.546201][ T28] INFO: task rcu_tasks_kthre:12 blocked for more than 143 seconds. [ 1859.557801][ T28] Not tainted syzkaller #0 [ 1859.568487][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1859.579844][ T28] task:rcu_tasks_kthre state:D stack:28080 pid:12 ppid:2 flags:0x00004000 [ 1859.601488][ T28] Call Trace: [ 1859.605452][ T28] [ 1859.610816][ T28] __schedule+0x107f/0x4030 [ 1859.629573][ T28] ? __sched_text_start+0x8/0x8 [ 1859.647102][ T28] schedule+0xb9/0x180 [ 1859.658327][ T28] schedule_timeout+0xbd/0x2d0 [ 1859.670284][ T28] ? console_conditional_schedule+0x40/0x40 [ 1859.689595][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1859.707923][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 1859.720075][ T28] ? lock_chain_count+0x20/0x20 [ 1859.739736][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1859.759816][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1859.777520][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1859.790395][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1859.803553][ T28] ? wait_for_completion+0x26f/0x590 [ 1859.810079][ T28] wait_for_completion+0x2c2/0x590 [ 1859.818972][ T28] ? io_schedule+0xd0/0xd0 [ 1859.826198][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1859.834929][ T28] ? debug_object_active_state+0x6b/0x380 [ 1859.840759][ T28] __synchronize_srcu+0x2b3/0x350 [ 1859.853759][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1859.859852][ T28] ? synchronize_srcu_expedited+0x20/0x20 [ 1859.871313][ T28] ? rcu_read_lock_any_held+0x130/0x130 [ 1859.876969][ T28] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 1859.886657][ T28] ? synchronize_srcu+0x18f/0x1b0 [ 1859.892019][ T28] rcu_tasks_wait_gp+0x49f/0xac0 [ 1859.897150][ T28] ? rcu_tasks_wait_gp+0x21a/0xac0 [ 1859.903227][ T28] ? lock_chain_count+0x20/0x20 [ 1859.908236][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1859.914459][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1859.919813][ T28] ? rcu_tasks_invoke_cbs+0x670/0x670 [ 1859.925470][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1859.931609][ T28] ? _raw_spin_unlock+0x40/0x40 [ 1859.936681][ T28] rcu_tasks_one_gp+0xd27/0xef0 [ 1859.941965][ T28] ? rcu_tasks_one_gp+0xe5/0xef0 [ 1859.948850][ T28] rcu_tasks_kthread+0x6e/0x90 [ 1859.953974][ T28] kthread+0x29d/0x330 [ 1859.958956][ T28] ? rcu_tasks_postgp+0x10/0x10 [ 1859.964178][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1859.968847][ T28] ret_from_fork+0x1f/0x30 [ 1859.978398][ T28] [ 1859.988621][ T28] [ 1859.988621][ T28] Showing all locks held in the system: [ 1860.025941][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1860.043463][ T28] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1860.071213][ T28] 1 lock held by rcu_tasks_trace/13: [ 1860.079545][ T28] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1860.091257][ T28] 1 lock held by khungtaskd/28: [ 1860.096174][ T28] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1860.106632][ T28] 2 locks held by getty/4031: [ 1860.113494][ T28] #0: ffff88807e1c0098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1860.128478][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 1860.138883][ T28] 2 locks held by kworker/0:6/4321: [ 1860.144451][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1860.156743][ T28] #1: ffffc9000456fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1860.168400][ T28] 2 locks held by syz.4.16951/10239: [ 1860.174036][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1860.184158][ T28] #1: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 1860.195580][ T28] 1 lock held by syz.5.16953/10242: [ 1860.200837][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1860.210118][ T28] [ 1860.212576][ T28] ============================================= [ 1860.212576][ T28] [ 1860.221509][ T28] NMI backtrace for cpu 1 [ 1860.225883][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1860.233133][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1860.243234][ T28] Call Trace: [ 1860.246547][ T28] [ 1860.249502][ T28] dump_stack_lvl+0x188/0x24e [ 1860.254225][ T28] ? irq_work_queue+0xb8/0x140 [ 1860.259112][ T28] ? show_regs_print_info+0x12/0x12 [ 1860.264345][ T28] ? load_image+0x410/0x410 [ 1860.268876][ T28] ? vprintk_emit+0x59f/0x6a0 [ 1860.273605][ T28] ? printk_sprint+0x460/0x460 [ 1860.278406][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 1860.283430][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1860.289608][ T28] ? _printk+0xda/0x130 [ 1860.293789][ T28] ? load_image+0x410/0x410 [ 1860.298318][ T28] ? load_image+0x410/0x410 [ 1860.302867][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1860.308965][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1860.315141][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1860.321160][ T28] watchdog+0xf0e/0xf50 [ 1860.325383][ T28] ? watchdog+0x1ed/0xf50 [ 1860.329755][ T28] kthread+0x29d/0x330 [ 1860.333854][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1860.338903][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1860.343516][ T28] ret_from_fork+0x1f/0x30 [ 1860.347972][ T28] [ 1860.351830][ T28] Sending NMI from CPU 1 to CPUs 0: [ 1860.357639][ C0] NMI backtrace for cpu 0 [ 1860.357651][ C0] CPU: 0 PID: 454 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 1860.357669][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1860.357680][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1860.357782][ C0] RIP: 0010:unwind_next_frame+0x87e/0x1fd0 [ 1860.357815][ C0] Code: 4c 39 f0 0f 96 c0 20 c8 3c 01 0f 85 d6 0e 00 00 48 89 ef e8 d4 1f 00 00 49 89 c7 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 28 <80> 3c 28 00 4c 8d 73 48 74 08 4c 89 f7 e8 30 58 9a 00 4d 89 3e 48 [ 1860.357829][ C0] RSP: 0018:ffffc90017fdf5e0 EFLAGS: 00000202 [ 1860.357843][ C0] RAX: 1ffff92002ffbeda RBX: ffffc90017fdf688 RCX: ffffffff8e37e201 [ 1860.357856][ C0] RDX: ffffc90017fd8000 RSI: ffffffff8e37e1fc RDI: ffffc90017fdfad8 [ 1860.357869][ C0] RBP: dffffc0000000000 R08: 000000000000000d R09: 0000000000000004 [ 1860.357881][ C0] R10: dffffc0000000000 R11: fffff52002ffbedd R12: dffffc0000000000 [ 1860.357893][ C0] R13: ffffc90017fe0000 R14: 1ffff92002ffbed3 R15: ffffffff882e87c9 [ 1860.357906][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1860.357921][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1860.357933][ C0] CR2: 00007fef82fed158 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 1860.357948][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 1860.357958][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1860.357968][ C0] Call Trace: [ 1860.357974][ C0] [ 1860.357985][ C0] ? __kmem_cache_free+0xb6/0x200 [ 1860.358012][ C0] ? stack_trace_save+0xf0/0xf0 [ 1860.358063][ C0] arch_stack_walk+0x10c/0x140 [ 1860.358091][ C0] ? __kmem_cache_free+0xb6/0x200 [ 1860.358111][ C0] stack_trace_save+0xa6/0xf0 [ 1860.358132][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 1860.358158][ C0] kasan_set_track+0x4b/0x70 [ 1860.358180][ C0] ? kasan_set_track+0x4b/0x70 [ 1860.358201][ C0] ? kasan_save_free_info+0x27/0x40 [ 1860.358217][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 1860.358246][ C0] ? slab_free_freelist_hook+0x133/0x1b0 [ 1860.358266][ C0] ? __kmem_cache_free+0xb6/0x200 [ 1860.358308][ C0] ? __kmem_cache_free+0xb6/0x200 [ 1860.358325][ C0] kasan_save_free_info+0x27/0x40 [ 1860.358341][ C0] ____kasan_slab_free+0x126/0x1f0 [ 1860.358366][ C0] slab_free_freelist_hook+0x133/0x1b0 [ 1860.358389][ C0] ? skb_release_data+0x5e9/0x7e0 [ 1860.358414][ C0] __kmem_cache_free+0xb6/0x200 [ 1860.358435][ C0] skb_release_data+0x5e9/0x7e0 [ 1860.358463][ C0] consume_skb+0xa2/0x100 [ 1860.358487][ C0] nsim_dev_trap_report_work+0x71f/0xa80 [ 1860.358517][ C0] ? process_one_work+0x7b4/0x1160 [ 1860.358538][ C0] process_one_work+0x8ab/0x1160 [ 1860.358566][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1860.358588][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1860.358608][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1860.358629][ C0] ? wq_worker_running+0x97/0x190 [ 1860.358679][ C0] worker_thread+0xaf5/0x12a0 [ 1860.358706][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1860.358732][ C0] kthread+0x29d/0x330 [ 1860.358746][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1860.358765][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1860.358781][ C0] ret_from_fork+0x1f/0x30 [ 1860.358811][ C0] [ 1860.438752][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1860.438817][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1860.438886][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1860.438919][ T28] Call Trace: [ 1860.438940][ T28] [ 1860.438968][ T28] dump_stack_lvl+0x188/0x24e [ 1860.439072][ T28] ? memcpy+0x3c/0x60 [ 1860.439136][ T28] ? show_regs_print_info+0x12/0x12 [ 1860.439210][ T28] ? load_image+0x410/0x410 [ 1860.439298][ T28] panic+0x2d3/0x710 [ 1860.439358][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1860.439451][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1860.439511][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 1860.439613][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1860.439697][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1860.439800][ T28] watchdog+0xf4d/0xf50 [ 1860.439882][ T28] ? watchdog+0x1ed/0xf50 [ 1860.439965][ T28] kthread+0x29d/0x330 [ 1860.440016][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1860.440087][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1860.440162][ T28] ret_from_fork+0x1f/0x30 [ 1860.440290][ T28] [ 1860.445858][ T28] Kernel Offset: disabled [ 1860.790331][ T28] Rebooting in 86400 seconds..