last executing test programs: 6.259851021s ago: executing program 2 (id=2347): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 6.249790891s ago: executing program 0 (id=2358): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x2000000}, {0x10000002, 0x4}]}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e32, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, 0x0}, 0x45) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) close(r4) 6.102830538s ago: executing program 2 (id=2348): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x110010, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.swap.events\x00', 0x26e1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000d00)='ns/ipc\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="bf16000000000000b70700001f0000005070000000000000200000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3010100bd2321afb56fa54f26fb0b71afe6adfefcf1d8f7faf75e0f226bd99eea7960717142fa9ea4318123741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ce99fbfbf9b0a49ef23d410f6296b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeac698890c864d59887a59905f1e07f40b1cd3641f8c192c368590f894cd4e1110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967dec6e802f5ab3eea57b09a2ed4048d3b867ddd58211d6ececb0cd2b6d357b85a0218ce740068f4025c0bf1aad90738725837079e468ee207d2f73902fbcfcf49822775985bf31b715f5888b24efa000000000000ffffff010100000000000000000000000000020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9736bdeab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cfe36bc120e3b39a6e5a796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f7da31cf41ab11e0a494034127dd1c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde74fa4ffa4d9aaa705989b8e6731e2401b6a560e3296e52d337c56abf112874ec309bae5fa4c81e5c9f42d9383e41d277b10392a96286744f839c3f128f8f92ef992239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7b06000e3b1c39b2e00916de48a4e70f03cc4146a77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec737555393c61a008280b064bda144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b61799257ab55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bf6cf03b5ed04465746ff8809c3a0d46ff7f000000000000ad1e1f493354b2822b9837421134c0167d78e6c24ed0a2768e827172ea3b774a1467c89fa0f82e8440105051e5510a33dc5a5e143fbfff161c12ca389cbe4c51b3fa00055cc1b66c5fd9c26a54d43fa050645bd6109b113be7664e08add7115c61afcb718cf3c4680b2f6c7a84a4e378a9b15bc20f49e298727340e97cdefb40e56e9cfad973347d0de7ba4754ff231a1b033d8f841ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef79e184f5e93ba5c8c2a4c0443fb652b8d4c2ff030000000000000007b82e6044f643068cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c99220002af8c5e13d52c83ac3fa7c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb5288aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6640a9dea0b6c91996d65da6c24a8f2a86c814459f3cdaaf99000000000000000000bf2130d1b32c826563c508d0ad23bc83ba3f3757210afcf2a64783057e177615c068bd7d74233da1a3b56d4e04a7ec4792b1c4cffddbbdcfdd13ab52f5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fc02b70be8629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64d7cfa6396a6ab8487c383e24d4a8051f80e1811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f20a95b817ea3df3d6c0002a41783499d4411ccbbeed215b745058e56c70afe8016b3dd359e785b36e609f173cc6b893ecd138289709839af6c95fbed6c33e401ec747820d6a6283b3452c57a5d44cacd363589845637071320921d22c1663964ed0700000062f3d90f0eb634ae331385d502fc7cc33158bc306d8c3bdae8108a2380000000000000008832ec0906aaec43659c79c8adfdeb1fd291c6fc6737b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c81eb7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9edfe6dca9c43907f3a85cf655ccd9d624e8c6f7932c4d719347f39ef006c2df747e27a2d16304fa000008ffffffffffffff003049ca923d059c0ab5d886a491adacb7e4b43b1b57776e5fe25cf105fa57f000756755b7230e2c0c1fed5487271c4f2981cf8f4351ef5d08641dacaed0000800b805fbd1b474c9ed0dc19ad6e99b66ee0f8c9d697655ebdf5ef30d1b92bd283df88c1096d4bd3686e18ab07f9b580afbd4bd4d8979686422849b04024f609a7b76e902d35343793d99fe395ae73166187c64a501c1f4bb736fcf1dfde7da6bea1945a14f1c578093e6cfb4702a95fb4f653064244950ae227f2a22678e2ff4699bfcba3b7d5656d9be441d07cc3ba51f5b9e825fbec6aee7f9e1b04cdabf99bd760036f74dec91d341c885e785c8517cc50138be2447fa04b77acd2fd078f1da244051e44b5a881197733ba420c9d6b02fd01fa9369f8d3310be2ff1ad5952e025ce59c2dc8327d26fc4facd5915007d22dfccf67dfb53ae2f72a0812ad121fc7de5aba071b83ebf271a5140c6a0b115bd05d7fff46fe144d9fac4ee0a7a2f7242737fd622dc74ca2d79585d4c821d2294b779eebbaac7d81cdaa5ac506ab269be6ff4f7dd9d5ce2e0b1eef2"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 6.102627838s ago: executing program 3 (id=2350): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf2, 0x0, &(0x7f0000000280)="545292ddc1802d361c41e95d2e014983da19f638e64da47f0c3ad55f135e9ca537ae93fb491b0301acd55144a139257cccb1964eeb1e20b6d0fefcd3a7acde00635cca823911a5086fc4b777ac4e71e42a2548d407828e44194c03ca5e7aa8106e3318ddea6f89bd2bae999738545e1c99ca64178d10fff829f72259dcc462987f040e40c0e421a6aa8b93c6af9ff6f0f798960546699e34f6e4f5ecfb55ca34a186c7a6616b85da68f4afcbce009e7b2facf1ea888f9b692f70b45e578df504557895681b3c88fcb0a9ff2810e7cebc69d3f5ed2c05aa5c8986e6bb92668380d8dbc7e56972b92baf74e1bb402a0bb49d9e", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) 6.099365038s ago: executing program 0 (id=2360): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x10aec4, 0x7f, 0xfffffffe, 0x6, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x810000a6, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.098819198s ago: executing program 4 (id=2361): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002f40)=@base={0x5, 0x4, 0xc, 0xc}, 0x50) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/time\x00') perf_event_open(0x0, r0, 0x4, 0xffffffffffffffff, 0x1a) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r2, 0x2, 0x1, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@fallback=r2, 0xffffffffffffffff, 0x17, 0x0, r2, @void, @value=r2, @void, @void, r3}, 0x20) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5.660133039s ago: executing program 1 (id=2351): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="14"], 0x5000}, 0x0) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r2, 0x12) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) 3.152254644s ago: executing program 1 (id=2352): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x1001, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, 0x0) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.152037644s ago: executing program 4 (id=2353): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a4000140", 0x38}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000008603300040000002100000041"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x800, r1}, 0x38) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='io.stat\x00') bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe551a250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x4180) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r4}, 0x4) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x81, 0x0, r1, 0x3, '\x00', r3, r4, 0x1, 0x5, 0x2}, 0x50) 3.129080145s ago: executing program 0 (id=2354): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48440, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 3.128124505s ago: executing program 2 (id=2355): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = perf_event_open(0x0, 0x0, 0x0, r2, 0x0) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @dev, 0xa}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000040)="80005b020eaa4da2e5d6", 0xa}, {&(0x7f0000001780)}], 0x2, 0x0, 0x0, 0x900}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x1) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x891c, &(0x7f0000000000)={'gre0\x00', @random="0200ff7fffff"}) 3.127643345s ago: executing program 3 (id=2356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x844) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) 2.557242442s ago: executing program 4 (id=2357): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x44101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000090072b8d983435ca132d33683dd3f0e", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f0000000100), 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x4000001) 2.556565062s ago: executing program 0 (id=2370): r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="367c9920b4d90d600000dc9fa2ba000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fffffffffffffffffeffffff00"/28], 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b02", 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x4c, 0x0, 0x4) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(r3, 0x29, 0x36, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d03000000000000000000000204000000000000000000000b020000000000000061"], 0x0, 0x52}, 0x20) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)}, 0x10042) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 2.556228102s ago: executing program 3 (id=2359): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, &(0x7f0000001340)=[{0x0}, {&(0x7f0000000080)}, {0x0}, {&(0x7f0000000340)}], 0x4}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./cgroup/file0/file0\x00'}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="bf4b3e9e3a9e9a758f8ea2a244a7", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.544459332s ago: executing program 2 (id=2371): socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x12) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xc2ba, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu~00\t&&') 1.561923298s ago: executing program 3 (id=2362): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000004000000"], 0x50) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) close(r4) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70c03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x200}, 0x0, 0xd, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) r6 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) 1.560315928s ago: executing program 0 (id=2374): socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c60ebab1c176bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc28d0072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd5adb8e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d01006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f60109af93a09fab1daae4b518d7a5d95a017864487367d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff6f16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c64ac4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5ce4ba01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b059bc295aa0e38ff07edc3492b96e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe449678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a6a2bb0cfb284fcfde9015769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443a6a64c7803760880af23fb3f430a5d11fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630ed5a0c2261bc2d5de6ee174534b8dfc0432ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79aa2832c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574bda31f81d61ccfd58080d2330b9c7b535aed87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf31523d753cf27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e72daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca67905e877893646d185a75582f866785af6b0149e336c31fb177e3e85f4c60cbbde4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3045b9c790984c6fb65fd7887bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981b90d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212dedd245b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000000000000000000000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699f61acdc8e36010d76093ddd227df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eebf33a260a9b2647726795617a9d170000000000000000000000000767003cacbcd49d0f7ba330f3b788ad4cf448e89c48c32915b1c356e3814621f166d55edb985cb1c3224652996c492c6249af22aa673ddf67d75325652cc6d74b00df9cc0012bc725b168c3aab1c7f2303ad6d54a612d7f9791a49b582c2b982423d837ac2e74aa1cde817adc1b24f1b2b6b9d0af28522b14b22359f89f836860811dddc56d303b057e6d81b0a87a5c99279e57c4b297919b478fae9526354e15f1d56dfe9334eaf44955ff81bb"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x12) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xc2ba, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu~00\t&&') 1.556044128s ago: executing program 4 (id=2375): socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000034000b47564cb6281406000007000000", 0x14}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000"], 0x0, 0x52}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 1.408011875s ago: executing program 3 (id=2363): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 1.407266245s ago: executing program 2 (id=2377): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x1001, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, 0x0) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.404689835s ago: executing program 1 (id=2378): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000240)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20044010) close(r1) 942.135957ms ago: executing program 4 (id=2364): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000000"], 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000009}, 0x38) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xff00) r2 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$sock(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x4000) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000100)={r2}) 748.670135ms ago: executing program 1 (id=2365): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], &(0x7f0000000000)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r2, 0x11) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000040)=r2, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/200, 0xc8}, 0x10001) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x31}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x890c, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 358.946633ms ago: executing program 1 (id=2368): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x10aec4, 0x7f, 0xfffffffe, 0x6, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x810000a6, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 357.950813ms ago: executing program 0 (id=2384): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], &(0x7f0000000000)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r2, 0x11) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000040)=r2, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/200, 0xc8}, 0x10001) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x31}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x890c, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 4 [ 109.691831][ T5136] syz.0.217 (5136) used greatest stack depth: 16512 bytes left [ 109.770864][ T4274] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 109.778826][ T4274] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 109.790542][ T4274] CPU: 1 PID: 4274 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 109.798106][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.808158][ T4274] Workqueue: hci3 hci_rx_work [ 109.812840][ T4274] Call Trace: [ 109.816108][ T4274] [ 109.819035][ T4274] dump_stack_lvl+0x188/0x24e [ 109.823708][ T4274] ? show_regs_print_info+0x12/0x12 [ 109.828894][ T4274] ? load_image+0x410/0x410 [ 109.833401][ T4274] sysfs_create_dir_ns+0x26a/0x290 [ 109.838507][ T4274] ? __lock_acquire+0x7c40/0x7c40 [ 109.843530][ T4274] ? sysfs_warn_dup+0xa0/0xa0 [ 109.848208][ T4274] ? do_raw_spin_unlock+0x11d/0x230 [ 109.853412][ T4274] kobject_add_internal+0x617/0xca0 [ 109.858619][ T4274] kobject_add+0x160/0x230 [ 109.863038][ T4274] ? kobject_init+0x1c0/0x1c0 [ 109.867712][ T4274] ? __raw_spin_lock_init+0x41/0x100 [ 109.872988][ T4274] ? klist_children_get+0x50/0x50 [ 109.878002][ T4274] ? get_device_parent+0x121/0x3e0 [ 109.883116][ T4274] device_add+0x470/0x1050 [ 109.887531][ T4274] hci_conn_add_sysfs+0xd1/0x1e0 [ 109.892464][ T4274] le_conn_complete_evt+0xf93/0x15c0 [ 109.897759][ T4274] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 109.903999][ T4274] ? bt_info+0x180/0x180 [ 109.908234][ T4274] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 109.913866][ T4274] ? mutex_unlock+0x10/0x10 [ 109.918360][ T4274] ? skb_pull_data+0xec/0x1f0 [ 109.923036][ T4274] hci_le_enh_conn_complete_evt+0x185/0x460 [ 109.928930][ T4274] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 109.935343][ T4274] ? hci_remote_host_features_evt+0x230/0x230 [ 109.941402][ T4274] hci_event_packet+0x7b3/0x1290 [ 109.946352][ T4274] ? lock_chain_count+0x20/0x20 [ 109.951204][ T4274] ? bis_list+0x280/0x280 [ 109.955525][ T4274] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 109.961414][ T4274] ? kcov_remote_start+0x50f/0x810 [ 109.966520][ T4274] ? lockdep_hardirqs_on+0x94/0x140 [ 109.971716][ T4274] ? hci_send_to_monitor+0x9c/0x4a0 [ 109.976910][ T4274] hci_rx_work+0x3eb/0xd40 [ 109.981324][ T4274] ? _raw_spin_unlock+0x40/0x40 [ 109.986177][ T4274] ? process_one_work+0x7b4/0x1160 [ 109.991291][ T4274] process_one_work+0x8ab/0x1160 [ 109.996235][ T4274] ? worker_detach_from_pool+0x240/0x240 [ 110.001865][ T4274] ? _raw_spin_lock_irq+0xb7/0xf0 [ 110.006885][ T4274] ? _raw_spin_lock_irqsave+0x100/0x100 [ 110.012433][ T4274] ? wq_worker_running+0x97/0x190 [ 110.017455][ T4274] worker_thread+0xaf5/0x12a0 [ 110.022143][ T4274] kthread+0x29d/0x330 [ 110.026198][ T4274] ? worker_clr_flags+0x1a0/0x1a0 [ 110.031209][ T4274] ? kthread_blkcg+0xd0/0xd0 [ 110.035792][ T4274] ret_from_fork+0x1f/0x30 [ 110.040210][ T4274] [ 110.044848][ T4274] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 110.057942][ T4274] Bluetooth: hci3: failed to register connection device [ 110.259151][ T4274] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 110.604670][ T5166] device syzkaller0 entered promiscuous mode [ 110.866719][ T5186] netlink: 'syz.2.236': attribute type 29 has an invalid length. [ 110.901680][ T5186] netlink: 'syz.2.236': attribute type 3 has an invalid length. [ 110.930839][ T5186] netlink: 132 bytes leftover after parsing attributes in process `syz.2.236'. [ 111.262558][ T5191] netlink: 'syz.1.237': attribute type 4 has an invalid length. [ 111.304442][ T5191] netlink: 'syz.1.237': attribute type 26 has an invalid length. [ 111.317138][ T5191] netlink: 60519 bytes leftover after parsing attributes in process `syz.1.237'. [ 111.632776][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 112.114729][ T4277] Bluetooth: hci3: command 0x2016 tx timeout [ 114.917535][ T4274] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 116.991521][ T4274] Bluetooth: hci1: command 0x2016 tx timeout [ 121.535981][ T5277] netlink: 'syz.0.271': attribute type 10 has an invalid length. [ 121.547370][ T5277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.271'. [ 121.561830][ T5277] batman_adv: batadv0: Adding interface: veth0_vlan [ 121.568585][ T5277] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.625641][ T5277] batman_adv: batadv0: Interface activated: veth0_vlan [ 122.053317][ T4277] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 122.062743][ T4277] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 122.086831][ T4277] CPU: 0 PID: 4277 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 122.094424][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.104520][ T4277] Workqueue: hci3 hci_rx_work [ 122.109254][ T4277] Call Trace: [ 122.112542][ T4277] [ 122.115482][ T4277] dump_stack_lvl+0x188/0x24e [ 122.120183][ T4277] ? show_regs_print_info+0x12/0x12 [ 122.125391][ T4277] ? load_image+0x410/0x410 [ 122.129940][ T4277] sysfs_create_dir_ns+0x26a/0x290 [ 122.135062][ T4277] ? __lock_acquire+0x7c40/0x7c40 [ 122.140099][ T4277] ? sysfs_warn_dup+0xa0/0xa0 [ 122.144797][ T4277] ? do_raw_spin_unlock+0x11d/0x230 [ 122.150010][ T4277] kobject_add_internal+0x617/0xca0 [ 122.155234][ T4277] kobject_add+0x160/0x230 [ 122.159676][ T4277] ? kobject_init+0x1c0/0x1c0 [ 122.164377][ T4277] ? __raw_spin_lock_init+0x41/0x100 [ 122.169671][ T4277] ? klist_children_get+0x50/0x50 [ 122.174701][ T4277] ? get_device_parent+0x121/0x3e0 [ 122.179835][ T4277] device_add+0x470/0x1050 [ 122.184277][ T4277] hci_conn_add_sysfs+0xd1/0x1e0 [ 122.189231][ T4277] le_conn_complete_evt+0xf93/0x15c0 [ 122.194551][ T4277] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 122.200805][ T4277] ? bt_info+0x180/0x180 [ 122.205060][ T4277] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 122.210710][ T4277] ? mutex_unlock+0x10/0x10 [ 122.215218][ T4277] ? skb_pull_data+0xec/0x1f0 [ 122.219911][ T4277] hci_le_enh_conn_complete_evt+0x185/0x460 [ 122.225822][ T4277] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 122.232254][ T4277] ? hci_remote_host_features_evt+0x230/0x230 [ 122.238325][ T4277] hci_event_packet+0x7b3/0x1290 [ 122.243285][ T4277] ? lock_chain_count+0x20/0x20 [ 122.248148][ T4277] ? bis_list+0x280/0x280 [ 122.252481][ T4277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 122.258410][ T4277] ? kcov_remote_start+0x50f/0x810 [ 122.263531][ T4277] ? lockdep_hardirqs_on+0x94/0x140 [ 122.268750][ T4277] ? hci_send_to_monitor+0x9c/0x4a0 [ 122.273968][ T4277] hci_rx_work+0x3eb/0xd40 [ 122.278402][ T4277] ? _raw_spin_unlock+0x40/0x40 [ 122.283278][ T4277] ? process_one_work+0x7b4/0x1160 [ 122.288403][ T4277] process_one_work+0x8ab/0x1160 [ 122.293385][ T4277] ? worker_detach_from_pool+0x240/0x240 [ 122.299022][ T4277] ? _raw_spin_lock_irq+0x86/0xf0 [ 122.304064][ T4277] ? _raw_spin_lock_irq+0xb7/0xf0 [ 122.309097][ T4277] ? _raw_spin_lock_irqsave+0x100/0x100 [ 122.314663][ T4277] ? wq_worker_running+0x97/0x190 [ 122.319697][ T4277] worker_thread+0xaf5/0x12a0 [ 122.324449][ T4277] kthread+0x29d/0x330 [ 122.328522][ T4277] ? worker_clr_flags+0x1a0/0x1a0 [ 122.333552][ T4277] ? kthread_blkcg+0xd0/0xd0 [ 122.338151][ T4277] ret_from_fork+0x1f/0x30 [ 122.342612][ T4277] [ 122.348171][ T4277] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 122.363741][ T4277] Bluetooth: hci3: failed to register connection device [ 124.431664][ T4277] Bluetooth: hci3: command 0x2016 tx timeout [ 124.788110][ T5307] netlink: 'syz.3.280': attribute type 39 has an invalid length. [ 125.073638][ T5325] netlink: 'syz.1.285': attribute type 2 has an invalid length. [ 125.098730][ T5325] netlink: 'syz.1.285': attribute type 8 has an invalid length. [ 125.117725][ T5325] netlink: 132 bytes leftover after parsing attributes in process `syz.1.285'. [ 125.266877][ T4274] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 125.419665][ T5344] netlink: 132 bytes leftover after parsing attributes in process `syz.1.290'. [ 125.482859][ T5346] netlink: 'syz.0.292': attribute type 2 has an invalid length. [ 125.490942][ T5346] netlink: 'syz.0.292': attribute type 8 has an invalid length. [ 125.506793][ T5346] netlink: 132 bytes leftover after parsing attributes in process `syz.0.292'. [ 125.624647][ T5348] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 125.988164][ T5367] device bond0 entered promiscuous mode [ 126.007126][ T5367] device bond_slave_0 entered promiscuous mode [ 126.014213][ T5367] device bond_slave_1 entered promiscuous mode [ 126.172293][ T5372] netlink: 'syz.3.304': attribute type 39 has an invalid length. [ 126.274313][ T4274] Bluetooth: hci3: unknown advertising packet type: 0xaa [ 126.353102][ T5372] device hsr_slave_0 left promiscuous mode [ 127.631949][ T4752] wlan1: Trigger new scan to find an IBSS to join [ 128.124647][ T5445] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 128.374883][ T5451] netlink: 'syz.0.338': attribute type 39 has an invalid length. [ 128.470507][ T5451] device hsr_slave_0 left promiscuous mode [ 129.060435][ T5478] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 129.782901][ T5500] netlink: 'syz.2.361': attribute type 2 has an invalid length. [ 129.791279][ T5500] netlink: 'syz.2.361': attribute type 8 has an invalid length. [ 129.853259][ T5500] netlink: 132 bytes leftover after parsing attributes in process `syz.2.361'. [ 130.251078][ T5517] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 130.592792][ T4736] wlan1: Trigger new scan to find an IBSS to join [ 130.593901][ T4320] wlan1: Trigger new scan to find an IBSS to join [ 132.595711][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.602101][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.351254][ T4750] wlan1: Creating new IBSS network, BSSID ee:1e:37:9e:ad:1c [ 133.832079][ T5544] netlink: 'syz.2.378': attribute type 39 has an invalid length. [ 134.013427][ T5544] device hsr_slave_0 left promiscuous mode [ 134.136195][ T5556] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 134.315848][ T5560] netlink: 'syz.4.384': attribute type 10 has an invalid length. [ 134.344065][ T5560] netlink: 40 bytes leftover after parsing attributes in process `syz.4.384'. [ 134.357717][ T5560] batman_adv: batadv0: Adding interface: veth0_vlan [ 134.366059][ T5560] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.394830][ T5560] batman_adv: batadv0: Interface activated: veth0_vlan [ 134.724333][ T5573] netlink: 'syz.4.389': attribute type 2 has an invalid length. [ 134.744742][ T5573] netlink: 'syz.4.389': attribute type 8 has an invalid length. [ 134.785463][ T5573] netlink: 132 bytes leftover after parsing attributes in process `syz.4.389'. [ 135.633228][ T4736] wlan1: Trigger new scan to find an IBSS to join [ 136.610830][ T4736] wlan1: Trigger new scan to find an IBSS to join [ 137.498230][ T4740] wlan1: Creating new IBSS network, BSSID e2:cf:93:b4:f5:74 [ 138.222843][ T5601] netlink: 'syz.3.401': attribute type 10 has an invalid length. [ 138.236143][ T5601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.401'. [ 138.249077][ T5601] batman_adv: batadv0: Adding interface: veth0_vlan [ 138.299885][ T5601] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.414219][ T5601] batman_adv: batadv0: Interface activated: veth0_vlan [ 138.513690][ T5604] netlink: 'syz.4.403': attribute type 39 has an invalid length. [ 139.632102][ T4746] wlan1: Trigger new scan to find an IBSS to join [ 140.059828][ T5608] netlink: 'syz.3.404': attribute type 2 has an invalid length. [ 140.077105][ T5608] netlink: 'syz.3.404': attribute type 8 has an invalid length. [ 140.111574][ T5608] netlink: 132 bytes leftover after parsing attributes in process `syz.3.404'. [ 143.313081][ T4752] wlan1: Creating new IBSS network, BSSID 86:8d:e5:0e:d7:1e [ 143.793611][ T5630] netlink: 'syz.1.415': attribute type 10 has an invalid length. [ 143.852201][ T5630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.415'. [ 143.970348][ T5630] batman_adv: batadv0: Adding interface: veth0_vlan [ 143.997626][ T5630] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.139471][ T5630] batman_adv: batadv0: Interface activated: veth0_vlan [ 149.091251][ T4274] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3 [ 149.302034][ T5678] netlink: 'syz.2.432': attribute type 10 has an invalid length. [ 149.335522][ T5678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.432'. [ 149.374194][ T5678] batman_adv: batadv0: Adding interface: veth0_vlan [ 149.389084][ T5678] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.452057][ T5678] batman_adv: batadv0: Interface activated: veth0_vlan [ 149.810107][ T4274] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 149.817676][ T4274] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 149.827102][ T4274] CPU: 1 PID: 4274 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 149.834664][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.844720][ T4274] Workqueue: hci2 hci_rx_work [ 149.849394][ T4274] Call Trace: [ 149.852661][ T4274] [ 149.855579][ T4274] dump_stack_lvl+0x188/0x24e [ 149.860249][ T4274] ? show_regs_print_info+0x12/0x12 [ 149.865437][ T4274] ? load_image+0x410/0x410 [ 149.869935][ T4274] sysfs_create_dir_ns+0x26a/0x290 [ 149.875035][ T4274] ? __lock_acquire+0x7c40/0x7c40 [ 149.880052][ T4274] ? sysfs_warn_dup+0xa0/0xa0 [ 149.884738][ T4274] ? do_raw_spin_unlock+0x11d/0x230 [ 149.889941][ T4274] kobject_add_internal+0x617/0xca0 [ 149.895132][ T4274] kobject_add+0x160/0x230 [ 149.899544][ T4274] ? kobject_init+0x1c0/0x1c0 [ 149.904214][ T4274] ? __raw_spin_lock_init+0x41/0x100 [ 149.909485][ T4274] ? klist_children_get+0x50/0x50 [ 149.914505][ T4274] ? get_device_parent+0x121/0x3e0 [ 149.919613][ T4274] device_add+0x470/0x1050 [ 149.924021][ T4274] hci_conn_add_sysfs+0xd1/0x1e0 [ 149.928948][ T4274] le_conn_complete_evt+0xf93/0x15c0 [ 149.934247][ T4274] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 149.940497][ T4274] ? bt_info+0x180/0x180 [ 149.944748][ T4274] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 149.950378][ T4274] ? mutex_unlock+0x10/0x10 [ 149.954871][ T4274] ? skb_pull_data+0xec/0x1f0 [ 149.959546][ T4274] hci_le_enh_conn_complete_evt+0x185/0x460 [ 149.965437][ T4274] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 149.971846][ T4274] ? hci_remote_host_features_evt+0x230/0x230 [ 149.977904][ T4274] hci_event_packet+0x7b3/0x1290 [ 149.982844][ T4274] ? lock_chain_count+0x20/0x20 [ 149.987689][ T4274] ? bis_list+0x280/0x280 [ 149.992008][ T4274] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 149.997899][ T4274] ? kcov_remote_start+0x50f/0x810 [ 150.003001][ T4274] ? lockdep_hardirqs_on+0x94/0x140 [ 150.008197][ T4274] ? hci_send_to_monitor+0x9c/0x4a0 [ 150.013399][ T4274] hci_rx_work+0x3eb/0xd40 [ 150.017814][ T4274] ? _raw_spin_unlock+0x40/0x40 [ 150.022667][ T4274] ? process_one_work+0x7b4/0x1160 [ 150.027774][ T4274] process_one_work+0x8ab/0x1160 [ 150.032711][ T4274] ? worker_detach_from_pool+0x240/0x240 [ 150.038333][ T4274] ? _raw_spin_lock_irq+0x86/0xf0 [ 150.043355][ T4274] ? _raw_spin_lock_irq+0xb7/0xf0 [ 150.048372][ T4274] ? _raw_spin_lock_irqsave+0x100/0x100 [ 150.053943][ T4274] ? wq_worker_running+0x97/0x190 [ 150.058956][ T4274] worker_thread+0xaf5/0x12a0 [ 150.063647][ T4274] kthread+0x29d/0x330 [ 150.067708][ T4274] ? worker_clr_flags+0x1a0/0x1a0 [ 150.072725][ T4274] ? kthread_blkcg+0xd0/0xd0 [ 150.077305][ T4274] ret_from_fork+0x1f/0x30 [ 150.081726][ T4274] [ 150.094466][ T4274] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 150.108487][ T4274] Bluetooth: hci2: failed to register connection device [ 151.696763][ T5710] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 152.202708][ T4274] Bluetooth: hci2: command 0x2016 tx timeout [ 152.214281][ T5717] netlink: 'syz.2.450': attribute type 10 has an invalid length. [ 152.363079][ T5717] netlink: 40 bytes leftover after parsing attributes in process `syz.2.450'. [ 154.025710][ T5745] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 155.618413][ T5781] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 156.600793][ T4755] wlan1: Trigger new scan to find an IBSS to join [ 157.380054][ T5810] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 159.638416][ T5843] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 159.647033][ T4750] wlan1: Trigger new scan to find an IBSS to join [ 161.650523][ T4755] wlan1: Trigger new scan to find an IBSS to join [ 162.591906][ T4746] wlan1: Creating new IBSS network, BSSID 82:e7:5a:f6:04:87 [ 162.709292][ T4274] Bluetooth: hci0: unknown advertising packet type: 0xff [ 162.709372][ T4274] Bluetooth: hci0: unknown advertising packet type: 0xa9 [ 163.856325][ T5927] netlink: 5427 bytes leftover after parsing attributes in process `syz.0.541'. [ 163.890194][ T4274] Bluetooth: hci1: unknown advertising packet type: 0xff [ 163.890251][ T4274] Bluetooth: hci1: unknown advertising packet type: 0xa9 [ 163.900919][ T5927] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.541'. [ 163.918725][ T5927] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.541'. [ 164.296400][ T4274] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 164.304361][ T4274] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 164.314100][ T4274] CPU: 0 PID: 4274 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 164.321666][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.331734][ T4274] Workqueue: hci3 hci_rx_work [ 164.336439][ T4274] Call Trace: [ 164.339725][ T4274] [ 164.342660][ T4274] dump_stack_lvl+0x188/0x24e [ 164.347352][ T4274] ? show_regs_print_info+0x12/0x12 [ 164.352563][ T4274] ? load_image+0x410/0x410 [ 164.357092][ T4274] sysfs_create_dir_ns+0x26a/0x290 [ 164.362216][ T4274] ? __lock_acquire+0x7c40/0x7c40 [ 164.367252][ T4274] ? sysfs_warn_dup+0xa0/0xa0 [ 164.371945][ T4274] ? do_raw_spin_unlock+0x11d/0x230 [ 164.377151][ T4274] kobject_add_internal+0x617/0xca0 [ 164.382366][ T4274] kobject_add+0x160/0x230 [ 164.386800][ T4274] ? kobject_init+0x1c0/0x1c0 [ 164.391492][ T4274] ? __raw_spin_lock_init+0x41/0x100 [ 164.396778][ T4274] ? klist_children_get+0x50/0x50 [ 164.401804][ T4274] ? get_device_parent+0x121/0x3e0 [ 164.406926][ T4274] device_add+0x470/0x1050 [ 164.411357][ T4274] hci_conn_add_sysfs+0xd1/0x1e0 [ 164.416301][ T4274] le_conn_complete_evt+0xf93/0x15c0 [ 164.421602][ T4274] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 164.427881][ T4274] ? bt_info+0x180/0x180 [ 164.432127][ T4274] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 164.437778][ T4274] ? mutex_unlock+0x10/0x10 [ 164.442294][ T4274] ? skb_pull_data+0xec/0x1f0 [ 164.446979][ T4274] hci_le_enh_conn_complete_evt+0x185/0x460 [ 164.452894][ T4274] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 164.459327][ T4274] ? hci_remote_host_features_evt+0x230/0x230 [ 164.465403][ T4274] hci_event_packet+0x7b3/0x1290 [ 164.470351][ T4274] ? lock_chain_count+0x20/0x20 [ 164.475209][ T4274] ? bis_list+0x280/0x280 [ 164.479546][ T4274] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 164.485448][ T4274] ? kcov_remote_start+0x50f/0x810 [ 164.490563][ T4274] ? lockdep_hardirqs_on+0x94/0x140 [ 164.495770][ T4274] ? hci_send_to_monitor+0x9c/0x4a0 [ 164.500982][ T4274] hci_rx_work+0x3eb/0xd40 [ 164.505409][ T4274] ? _raw_spin_unlock+0x40/0x40 [ 164.510276][ T4274] ? process_one_work+0x7b4/0x1160 [ 164.515394][ T4274] process_one_work+0x8ab/0x1160 [ 164.520351][ T4274] ? worker_detach_from_pool+0x240/0x240 [ 164.525985][ T4274] ? _raw_spin_lock_irq+0x86/0xf0 [ 164.531020][ T4274] ? _raw_spin_lock_irq+0xb7/0xf0 [ 164.536050][ T4274] ? _raw_spin_lock_irqsave+0x100/0x100 [ 164.541604][ T4274] ? wq_worker_running+0x97/0x190 [ 164.546633][ T4274] worker_thread+0xaf5/0x12a0 [ 164.551338][ T4274] kthread+0x29d/0x330 [ 164.555409][ T4274] ? worker_clr_flags+0x1a0/0x1a0 [ 164.560444][ T4274] ? kthread_blkcg+0xd0/0xd0 [ 164.565038][ T4274] ret_from_fork+0x1f/0x30 [ 164.569478][ T4274] [ 164.579120][ T4274] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 164.592747][ T4274] Bluetooth: hci3: failed to register connection device [ 165.543413][ T5971] netlink: 5427 bytes leftover after parsing attributes in process `syz.3.558'. [ 165.590567][ T5971] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.558'. [ 165.659184][ T5971] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.558'. [ 166.592195][ T4755] wlan1: Trigger new scan to find an IBSS to join [ 166.671822][ T4274] Bluetooth: hci3: command 0x2016 tx timeout [ 167.116479][ T4274] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 167.125101][ T4274] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 167.135470][ T4274] CPU: 0 PID: 4274 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 167.143045][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.153105][ T4274] Workqueue: hci0 hci_rx_work [ 167.157789][ T4274] Call Trace: [ 167.161060][ T4274] [ 167.163996][ T4274] dump_stack_lvl+0x188/0x24e [ 167.168675][ T4274] ? show_regs_print_info+0x12/0x12 [ 167.173865][ T4274] ? load_image+0x410/0x410 [ 167.178377][ T4274] sysfs_create_dir_ns+0x26a/0x290 [ 167.183485][ T4274] ? __lock_acquire+0x7c40/0x7c40 [ 167.188514][ T4274] ? sysfs_warn_dup+0xa0/0xa0 [ 167.193192][ T4274] ? do_raw_spin_unlock+0x11d/0x230 [ 167.198386][ T4274] kobject_add_internal+0x617/0xca0 [ 167.203586][ T4274] kobject_add+0x160/0x230 [ 167.207998][ T4274] ? kobject_init+0x1c0/0x1c0 [ 167.212683][ T4274] ? __raw_spin_lock_init+0x41/0x100 [ 167.217969][ T4274] ? klist_children_get+0x50/0x50 [ 167.222990][ T4274] ? get_device_parent+0x121/0x3e0 [ 167.228105][ T4274] device_add+0x470/0x1050 [ 167.232526][ T4274] hci_conn_add_sysfs+0xd1/0x1e0 [ 167.237459][ T4274] le_conn_complete_evt+0xf93/0x15c0 [ 167.242747][ T4274] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 167.248985][ T4274] ? bt_info+0x180/0x180 [ 167.253233][ T4274] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 167.258879][ T4274] ? mutex_unlock+0x10/0x10 [ 167.263385][ T4274] ? skb_pull_data+0xec/0x1f0 [ 167.268058][ T4274] hci_le_conn_complete_evt+0x183/0x440 [ 167.273605][ T4274] ? hci_remote_host_features_evt+0x230/0x230 [ 167.279667][ T4274] hci_event_packet+0x7b3/0x1290 [ 167.284604][ T4274] ? lock_chain_count+0x20/0x20 [ 167.289449][ T4274] ? bis_list+0x280/0x280 [ 167.293772][ T4274] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 167.299662][ T4274] ? kcov_remote_start+0x50f/0x810 [ 167.304772][ T4274] ? lockdep_hardirqs_on+0x94/0x140 [ 167.309978][ T4274] ? hci_send_to_monitor+0x9c/0x4a0 [ 167.315177][ T4274] hci_rx_work+0x3eb/0xd40 [ 167.319590][ T4274] ? _raw_spin_unlock+0x40/0x40 [ 167.324445][ T4274] ? process_one_work+0x7b4/0x1160 [ 167.329556][ T4274] process_one_work+0x8ab/0x1160 [ 167.334505][ T4274] ? worker_detach_from_pool+0x240/0x240 [ 167.340132][ T4274] ? _raw_spin_lock_irq+0x86/0xf0 [ 167.345157][ T4274] ? _raw_spin_lock_irq+0xb7/0xf0 [ 167.350178][ T4274] ? _raw_spin_lock_irqsave+0x100/0x100 [ 167.355722][ T4274] ? wq_worker_running+0x97/0x190 [ 167.360737][ T4274] worker_thread+0xaf5/0x12a0 [ 167.365431][ T4274] kthread+0x29d/0x330 [ 167.369513][ T4274] ? worker_clr_flags+0x1a0/0x1a0 [ 167.374531][ T4274] ? kthread_blkcg+0xd0/0xd0 [ 167.379115][ T4274] ret_from_fork+0x1f/0x30 [ 167.383539][ T4274] [ 167.393294][ T4274] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 167.406906][ T4274] Bluetooth: hci0: failed to register connection device [ 167.697861][ T6006] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.574'. [ 167.759208][ T6006] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 167.785969][ T4746] wlan1: Creating new IBSS network, BSSID 56:12:04:f9:61:cd [ 167.841522][ T6009] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 167.945969][ T6014] netlink: 5427 bytes leftover after parsing attributes in process `syz.2.575'. [ 167.981884][ T6014] netlink: 52477 bytes leftover after parsing attributes in process `syz.2.575'. [ 167.991807][ T6014] netlink: 71676 bytes leftover after parsing attributes in process `syz.2.575'. [ 168.246683][ T4274] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 168.255037][ T4274] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 168.265687][ T4274] CPU: 1 PID: 4274 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 168.273283][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.283373][ T4274] Workqueue: hci4 hci_rx_work [ 168.288112][ T4274] Call Trace: [ 168.291418][ T4274] [ 168.294383][ T4274] dump_stack_lvl+0x188/0x24e [ 168.299118][ T4274] ? show_regs_print_info+0x12/0x12 [ 168.304364][ T4274] ? load_image+0x410/0x410 [ 168.308955][ T4274] sysfs_create_dir_ns+0x26a/0x290 [ 168.314116][ T4274] ? __lock_acquire+0x7c40/0x7c40 [ 168.319187][ T4274] ? sysfs_warn_dup+0xa0/0xa0 [ 168.323937][ T4274] ? do_raw_spin_unlock+0x11d/0x230 [ 168.329187][ T4274] kobject_add_internal+0x617/0xca0 [ 168.334451][ T4274] kobject_add+0x160/0x230 [ 168.338931][ T4274] ? kobject_init+0x1c0/0x1c0 [ 168.343661][ T4274] ? __raw_spin_lock_init+0x41/0x100 [ 168.348984][ T4274] ? klist_children_get+0x50/0x50 [ 168.354048][ T4274] ? get_device_parent+0x121/0x3e0 [ 168.359210][ T4274] device_add+0x470/0x1050 [ 168.363699][ T4274] hci_conn_add_sysfs+0xd1/0x1e0 [ 168.368692][ T4274] le_conn_complete_evt+0xf93/0x15c0 [ 168.374066][ T4274] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 168.380357][ T4274] ? bt_info+0x180/0x180 [ 168.384643][ T4274] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 168.390326][ T4274] ? mutex_unlock+0x10/0x10 [ 168.394858][ T4274] ? skb_pull_data+0xec/0x1f0 [ 168.399557][ T4274] hci_le_enh_conn_complete_evt+0x185/0x460 [ 168.405467][ T4274] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 168.411900][ T4274] ? hci_remote_host_features_evt+0x230/0x230 [ 168.417974][ T4274] hci_event_packet+0x7b3/0x1290 [ 168.422942][ T4274] ? lock_chain_count+0x20/0x20 [ 168.427812][ T4274] ? bis_list+0x280/0x280 [ 168.432144][ T4274] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 168.438056][ T4274] ? kcov_remote_start+0x50f/0x810 [ 168.443180][ T4274] ? lockdep_hardirqs_on+0x94/0x140 [ 168.448397][ T4274] ? hci_send_to_monitor+0x9c/0x4a0 [ 168.453621][ T4274] hci_rx_work+0x3eb/0xd40 [ 168.458058][ T4274] ? _raw_spin_unlock+0x40/0x40 [ 168.462936][ T4274] ? process_one_work+0x7b4/0x1160 [ 168.468064][ T4274] process_one_work+0x8ab/0x1160 [ 168.473048][ T4274] ? worker_detach_from_pool+0x240/0x240 [ 168.478686][ T4274] ? _raw_spin_lock_irq+0x86/0xf0 [ 168.483729][ T4274] ? _raw_spin_lock_irq+0xb7/0xf0 [ 168.488772][ T4274] ? _raw_spin_lock_irqsave+0x100/0x100 [ 168.494338][ T4274] ? wq_worker_running+0x97/0x190 [ 168.499374][ T4274] worker_thread+0xaf5/0x12a0 [ 168.504125][ T4274] kthread+0x29d/0x330 [ 168.508196][ T4274] ? worker_clr_flags+0x1a0/0x1a0 [ 168.513226][ T4274] ? kthread_blkcg+0xd0/0xd0 [ 168.517829][ T4274] ret_from_fork+0x1f/0x30 [ 168.522315][ T4274] [ 168.529356][ T4274] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 168.542808][ T4274] Bluetooth: hci4: failed to register connection device [ 170.320990][ T6062] __nla_validate_parse: 1 callbacks suppressed [ 170.321037][ T6062] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.592'. [ 170.428758][ T6062] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 170.593162][ T4277] Bluetooth: hci4: command 0x2016 tx timeout [ 171.404307][ T6071] delete_channel: no stack [ 172.453916][ T6082] delete_channel: no stack [ 172.468617][ T6086] delete_channel: no stack [ 172.492914][ T6086] delete_channel: no stack [ 172.880384][ T6096] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.604'. [ 172.932049][ T6096] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.604'. [ 172.980363][ T6096] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.604'. [ 173.370957][ T4736] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 174.029281][ T6117] delete_channel: no stack [ 174.234696][ T6116] device syzkaller0 entered promiscuous mode [ 174.243625][ T6127] delete_channel: no stack [ 174.248684][ T6127] delete_channel: no stack [ 176.210490][ T6139] netlink: 5427 bytes leftover after parsing attributes in process `syz.2.627'. [ 176.234227][ T6139] netlink: 52477 bytes leftover after parsing attributes in process `syz.2.627'. [ 176.266829][ T6139] netlink: 71676 bytes leftover after parsing attributes in process `syz.2.627'. [ 177.166865][ T6155] delete_channel: no stack [ 177.183367][ T4277] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 177.191085][ T4277] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 177.200617][ T4277] CPU: 1 PID: 4277 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 177.208180][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.218245][ T4277] Workqueue: hci4 hci_rx_work [ 177.222946][ T4277] Call Trace: [ 177.226218][ T4277] [ 177.229147][ T4277] dump_stack_lvl+0x188/0x24e [ 177.233822][ T4277] ? show_regs_print_info+0x12/0x12 [ 177.239030][ T4277] ? load_image+0x410/0x410 [ 177.243548][ T4277] sysfs_create_dir_ns+0x26a/0x290 [ 177.248658][ T4277] ? __lock_acquire+0x7c40/0x7c40 [ 177.253692][ T4277] ? sysfs_warn_dup+0xa0/0xa0 [ 177.258375][ T4277] ? do_raw_spin_unlock+0x11d/0x230 [ 177.263572][ T4277] kobject_add_internal+0x617/0xca0 [ 177.268770][ T4277] kobject_add+0x160/0x230 [ 177.273188][ T4277] ? kobject_init+0x1c0/0x1c0 [ 177.277863][ T4277] ? __raw_spin_lock_init+0x41/0x100 [ 177.283138][ T4277] ? klist_children_get+0x50/0x50 [ 177.288162][ T4277] ? get_device_parent+0x121/0x3e0 [ 177.293277][ T4277] device_add+0x470/0x1050 [ 177.297695][ T4277] hci_conn_add_sysfs+0xd1/0x1e0 [ 177.302630][ T4277] le_conn_complete_evt+0xf93/0x15c0 [ 177.307922][ T4277] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 177.314167][ T4277] ? bt_info+0x180/0x180 [ 177.318418][ T4277] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 177.324050][ T4277] ? mutex_unlock+0x10/0x10 [ 177.328547][ T4277] ? skb_pull_data+0xec/0x1f0 [ 177.333221][ T4277] hci_le_enh_conn_complete_evt+0x185/0x460 [ 177.339115][ T4277] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 177.345531][ T4277] ? hci_remote_host_features_evt+0x230/0x230 [ 177.351591][ T4277] hci_event_packet+0x7b3/0x1290 [ 177.356527][ T4277] ? lock_chain_count+0x20/0x20 [ 177.361372][ T4277] ? bis_list+0x280/0x280 [ 177.365695][ T4277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 177.371588][ T4277] ? kcov_remote_start+0x50f/0x810 [ 177.376696][ T4277] ? lockdep_hardirqs_on+0x94/0x140 [ 177.381894][ T4277] ? hci_send_to_monitor+0x9c/0x4a0 [ 177.387095][ T4277] hci_rx_work+0x3eb/0xd40 [ 177.391512][ T4277] ? _raw_spin_unlock+0x40/0x40 [ 177.396362][ T4277] ? process_one_work+0x7b4/0x1160 [ 177.401470][ T4277] process_one_work+0x8ab/0x1160 [ 177.406414][ T4277] ? worker_detach_from_pool+0x240/0x240 [ 177.412038][ T4277] ? _raw_spin_lock_irq+0x86/0xf0 [ 177.417058][ T4277] ? _raw_spin_lock_irq+0xb7/0xf0 [ 177.422081][ T4277] ? _raw_spin_lock_irqsave+0x100/0x100 [ 177.427624][ T4277] ? wq_worker_running+0x97/0x190 [ 177.432642][ T4277] worker_thread+0xaf5/0x12a0 [ 177.437332][ T4277] kthread+0x29d/0x330 [ 177.441392][ T4277] ? worker_clr_flags+0x1a0/0x1a0 [ 177.446408][ T4277] ? kthread_blkcg+0xd0/0xd0 [ 177.450988][ T4277] ret_from_fork+0x1f/0x30 [ 177.455410][ T4277] [ 177.467022][ T4277] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 177.480156][ T4277] Bluetooth: hci4: failed to register connection device [ 177.646640][ T6161] delete_channel: no stack [ 177.652445][ T6161] delete_channel: no stack [ 177.749566][ T6163] netlink: 5427 bytes leftover after parsing attributes in process `syz.2.647'. [ 177.771699][ T6163] netlink: 52477 bytes leftover after parsing attributes in process `syz.2.647'. [ 177.842530][ T6163] netlink: 71676 bytes leftover after parsing attributes in process `syz.2.647'. [ 178.293894][ T6175] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.653'. [ 178.317031][ T6175] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.653'. [ 178.347249][ T6175] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.653'. [ 178.890963][ T6183] netlink: 'syz.4.644': attribute type 2 has an invalid length. [ 179.038038][ T6189] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.642'. [ 179.187447][ T6189] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 180.403427][ T6206] delete_channel: no stack [ 180.408686][ T6206] delete_channel: no stack [ 181.186459][ T6224] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 181.766369][ T6238] delete_channel: no stack [ 181.782595][ T6238] delete_channel: no stack [ 182.459462][ T6249] netlink: 'syz.1.671': attribute type 11 has an invalid length. [ 182.482497][ T6249] __nla_validate_parse: 3 callbacks suppressed [ 182.482510][ T6249] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.671'. [ 182.858961][ T6260] netlink: 5427 bytes leftover after parsing attributes in process `syz.2.674'. [ 182.871929][ T6260] netlink: 52477 bytes leftover after parsing attributes in process `syz.2.674'. [ 182.965068][ T6260] netlink: 71676 bytes leftover after parsing attributes in process `syz.2.674'. [ 183.311031][ T6262] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 183.317780][ T6262] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 183.942317][ T6248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.229103][ T6278] delete_channel: no stack [ 185.390825][ T6304] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 185.615930][ T6311] netlink: 'syz.4.693': attribute type 11 has an invalid length. [ 185.657452][ T6311] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.693'. [ 185.871842][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 185.877900][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 185.884029][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 185.890050][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 186.010688][ T6320] delete_channel: no stack [ 186.148573][ T4274] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 186.432449][ T6310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.641200][ T6350] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 187.647997][ T6350] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 188.767713][ T6401] ¥: port 1(syz_tun) entered blocking state [ 188.806800][ T6401] ¥: port 1(syz_tun) entered disabled state [ 188.835616][ T6401] device syz_tun entered promiscuous mode [ 189.159547][ T6369] device syzkaller0 entered promiscuous mode [ 189.212634][ T6407] delete_channel: no stack [ 189.408900][ T4274] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 189.487836][ T6423] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 189.494635][ T6423] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 190.672121][ T4715] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 191.647965][ T6463] netlink: 'syz.1.731': attribute type 2 has an invalid length. [ 192.014618][ T6474] netlink: 'syz.2.746': attribute type 2 has an invalid length. [ 193.087041][ T6502] netlink: 'syz.4.743': attribute type 21 has an invalid length. [ 193.127708][ T6502] netlink: 'syz.4.743': attribute type 23 has an invalid length. [ 193.174829][ T6502] netlink: 'syz.4.743': attribute type 25 has an invalid length. [ 193.219099][ T6502] netlink: 'syz.4.743': attribute type 27 has an invalid length. [ 193.251065][ T6502] netlink: 'syz.4.743': attribute type 28 has an invalid length. [ 193.280731][ T6502] netlink: 'syz.4.743': attribute type 29 has an invalid length. [ 193.379506][ T6502] netlink: 'syz.4.743': attribute type 30 has an invalid length. [ 194.127271][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.133640][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.891414][ T6556] netlink: 'syz.1.765': attribute type 21 has an invalid length. [ 196.242227][ T4274] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 196.250864][ T4274] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 196.261755][ T4274] CPU: 1 PID: 4274 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 196.269329][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.279393][ T4274] Workqueue: hci0 hci_rx_work [ 196.284104][ T4274] Call Trace: [ 196.287386][ T4274] [ 196.290321][ T4274] dump_stack_lvl+0x188/0x24e [ 196.295015][ T4274] ? show_regs_print_info+0x12/0x12 [ 196.300230][ T4274] ? load_image+0x410/0x410 [ 196.304768][ T4274] sysfs_create_dir_ns+0x26a/0x290 [ 196.309895][ T4274] ? __lock_acquire+0x7c40/0x7c40 [ 196.314933][ T4274] ? sysfs_warn_dup+0xa0/0xa0 [ 196.319632][ T4274] ? do_raw_spin_unlock+0x11d/0x230 [ 196.324847][ T4274] kobject_add_internal+0x617/0xca0 [ 196.330078][ T4274] kobject_add+0x160/0x230 [ 196.334524][ T4274] ? kobject_init+0x1c0/0x1c0 [ 196.339231][ T4274] ? __raw_spin_lock_init+0x41/0x100 [ 196.344531][ T4274] ? klist_children_get+0x50/0x50 [ 196.349573][ T4274] ? get_device_parent+0x121/0x3e0 [ 196.354710][ T4274] device_add+0x470/0x1050 [ 196.359153][ T4274] hci_conn_add_sysfs+0xd1/0x1e0 [ 196.364112][ T4274] le_conn_complete_evt+0xf93/0x15c0 [ 196.369430][ T4274] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 196.375696][ T4274] ? bt_info+0x180/0x180 [ 196.379953][ T4274] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 196.385617][ T4274] ? mutex_unlock+0x10/0x10 [ 196.390138][ T4274] ? skb_pull_data+0xec/0x1f0 [ 196.394833][ T4274] hci_le_enh_conn_complete_evt+0x185/0x460 [ 196.400755][ T4274] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 196.407196][ T4274] ? hci_remote_host_features_evt+0x230/0x230 [ 196.413285][ T4274] hci_event_packet+0x7b3/0x1290 [ 196.418252][ T4274] ? lock_chain_count+0x20/0x20 [ 196.423129][ T4274] ? bis_list+0x280/0x280 [ 196.427473][ T4274] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 196.433390][ T4274] ? kcov_remote_start+0x50f/0x810 [ 196.438526][ T4274] ? lockdep_hardirqs_on+0x94/0x140 [ 196.443752][ T4274] ? hci_send_to_monitor+0x9c/0x4a0 [ 196.448985][ T4274] hci_rx_work+0x3eb/0xd40 [ 196.453425][ T4274] ? _raw_spin_unlock+0x40/0x40 [ 196.458304][ T4274] ? process_one_work+0x7b4/0x1160 [ 196.463440][ T4274] process_one_work+0x8ab/0x1160 [ 196.468416][ T4274] ? worker_detach_from_pool+0x240/0x240 [ 196.474063][ T4274] ? _raw_spin_lock_irq+0x86/0xf0 [ 196.479111][ T4274] ? _raw_spin_lock_irq+0xb7/0xf0 [ 196.484147][ T4274] ? _raw_spin_lock_irqsave+0x100/0x100 [ 196.489689][ T4274] ? wq_worker_running+0x97/0x190 [ 196.494705][ T4274] worker_thread+0xaf5/0x12a0 [ 196.499397][ T4274] kthread+0x29d/0x330 [ 196.503465][ T4274] ? worker_clr_flags+0x1a0/0x1a0 [ 196.508481][ T4274] ? kthread_blkcg+0xd0/0xd0 [ 196.513065][ T4274] ret_from_fork+0x1f/0x30 [ 196.517491][ T4274] [ 196.544110][ T4274] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 196.557395][ T4274] Bluetooth: hci0: failed to register connection device [ 197.830856][ T4760] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 200.052942][ T6601] validate_nla: 6 callbacks suppressed [ 200.052973][ T6601] netlink: 'syz.3.781': attribute type 21 has an invalid length. [ 200.088235][ T6601] netlink: 'syz.3.781': attribute type 23 has an invalid length. [ 200.118647][ T6601] netlink: 'syz.3.781': attribute type 25 has an invalid length. [ 200.137321][ T6601] netlink: 'syz.3.781': attribute type 27 has an invalid length. [ 200.164970][ T6601] netlink: 'syz.3.781': attribute type 28 has an invalid length. [ 200.190163][ T6601] netlink: 'syz.3.781': attribute type 29 has an invalid length. [ 200.225275][ T6601] netlink: 'syz.3.781': attribute type 30 has an invalid length. [ 200.636721][ T6612] netlink: 'syz.2.795': attribute type 21 has an invalid length. [ 200.663464][ T6612] netlink: 'syz.2.795': attribute type 23 has an invalid length. [ 200.705901][ T6612] netlink: 'syz.2.795': attribute type 25 has an invalid length. [ 201.985484][ T6646] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.791'. [ 202.286035][ T4274] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 202.293639][ T4274] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 203.315453][ T6684] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.813'. [ 204.493495][ T4757] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 205.336551][ T6722] validate_nla: 33 callbacks suppressed [ 205.336581][ T6722] netlink: 'syz.4.827': attribute type 21 has an invalid length. [ 205.357951][ T6722] netlink: 'syz.4.827': attribute type 23 has an invalid length. [ 205.368688][ T6722] netlink: 'syz.4.827': attribute type 25 has an invalid length. [ 205.383670][ T6722] netlink: 'syz.4.827': attribute type 27 has an invalid length. [ 205.399213][ T6722] netlink: 'syz.4.827': attribute type 28 has an invalid length. [ 205.416398][ T6722] netlink: 'syz.4.827': attribute type 29 has an invalid length. [ 205.431161][ T6722] netlink: 'syz.4.827': attribute type 30 has an invalid length. [ 206.351635][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 207.512394][ T6725] netlink: 'syz.3.828': attribute type 2 has an invalid length. [ 207.757351][ T6733] netlink: 'syz.0.832': attribute type 9 has an invalid length. [ 207.783337][ T6733] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.832'. [ 207.862870][ T6739] netlink: 'syz.1.831': attribute type 2 has an invalid length. [ 210.024801][ T6782] netlink: 40 bytes leftover after parsing attributes in process `syz.1.852'. [ 210.038589][ T6782] device ipvlan1 entered promiscuous mode [ 210.057245][ T6782] bridge0: port 3(ipvlan1) entered blocking state [ 210.062955][ T6785] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.850'. [ 210.071908][ T6782] bridge0: port 3(ipvlan1) entered disabled state [ 210.115117][ T6782] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 210.621426][ T6805] validate_nla: 3 callbacks suppressed [ 210.673983][ T6805] netlink: 'syz.0.857': attribute type 15 has an invalid length. [ 213.641415][ T6814] netlink: 'syz.2.874': attribute type 22 has an invalid length. [ 213.651427][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.874'. [ 213.993861][ T6826] netlink: 763 bytes leftover after parsing attributes in process `syz.0.870'. [ 214.015750][ T6826] delete_channel: no stack [ 214.026831][ T6826] delete_channel: no stack [ 214.028316][ T6824] netlink: 'syz.2.868': attribute type 10 has an invalid length. [ 214.045683][ T6824] netlink: 40 bytes leftover after parsing attributes in process `syz.2.868'. [ 214.057479][ T6824] device ipvlan1 entered promiscuous mode [ 214.069396][ T6824] bridge0: port 3(ipvlan1) entered blocking state [ 214.076933][ T6824] bridge0: port 3(ipvlan1) entered disabled state [ 214.089092][ T6829] netlink: 'syz.3.869': attribute type 9 has an invalid length. [ 214.109237][ T6824] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 214.126896][ T6829] netlink: 123820 bytes leftover after parsing attributes in process `syz.3.869'. [ 214.488344][ T6840] netlink: 'syz.2.875': attribute type 15 has an invalid length. [ 214.649530][ T6849] netlink: 'syz.4.879': attribute type 22 has an invalid length. [ 214.663221][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.879'. [ 215.361232][ T6853] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 215.439900][ T6858] netlink: 763 bytes leftover after parsing attributes in process `syz.4.884'. [ 215.466782][ T6858] delete_channel: no stack [ 215.473543][ T6858] delete_channel: no stack [ 215.487806][ T6854] netlink: 'syz.3.882': attribute type 10 has an invalid length. [ 215.577408][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.585377][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.670778][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.678380][ T6854] bridge0: port 2(bridge_slave_1) entered listening state [ 215.686670][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.694308][ T6854] bridge0: port 1(bridge_slave_0) entered listening state [ 215.732184][ T6866] netlink: 'syz.2.885': attribute type 9 has an invalid length. [ 215.739864][ T6866] netlink: 123820 bytes leftover after parsing attributes in process `syz.2.885'. [ 215.755516][ T6854] team0: Port device bridge0 added [ 215.829136][ T6868] netlink: 'syz.0.888': attribute type 10 has an invalid length. [ 215.885429][ T6868] netlink: 40 bytes leftover after parsing attributes in process `syz.0.888'. [ 215.918519][ T6868] device ipvlan1 entered promiscuous mode [ 215.950933][ T6868] bridge0: port 3(ipvlan1) entered blocking state [ 215.965999][ T6868] bridge0: port 3(ipvlan1) entered disabled state [ 215.979417][ T6868] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 216.015162][ T6870] netlink: 'syz.4.900': attribute type 9 has an invalid length. [ 216.038906][ T6870] netlink: 123820 bytes leftover after parsing attributes in process `syz.4.900'. [ 216.231131][ T6880] device syzkaller0 entered promiscuous mode [ 216.260264][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 216.849639][ T6898] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 216.856154][ T6898] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 217.574009][ T6902] netlink: 763 bytes leftover after parsing attributes in process `syz.1.898'. [ 217.589315][ T6902] delete_channel: no stack [ 217.598074][ T6902] delete_channel: no stack [ 217.605048][ T6903] netlink: 'syz.4.901': attribute type 10 has an invalid length. [ 217.624545][ T6903] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.632561][ T6903] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.676644][ T6903] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.684007][ T6903] bridge0: port 2(bridge_slave_1) entered listening state [ 217.692257][ T6903] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.699615][ T6903] bridge0: port 1(bridge_slave_0) entered listening state [ 217.717930][ T6903] team0: Port device bridge0 added [ 217.898003][ T6910] netlink: 'syz.3.904': attribute type 10 has an invalid length. [ 217.909156][ T6910] device ipvlan1 entered promiscuous mode [ 217.947645][ T6910] bridge0: port 3(ipvlan1) entered blocking state [ 217.961944][ T6910] bridge0: port 3(ipvlan1) entered disabled state [ 218.001204][ T6910] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 218.165136][ T6919] netlink: 'syz.1.908': attribute type 9 has an invalid length. [ 218.590967][ T6931] netlink: 'syz.4.925': attribute type 10 has an invalid length. [ 218.614854][ T6935] netlink: 'syz.1.914': attribute type 3 has an invalid length. [ 218.624138][ T6931] bridge0: port 3(ipvlan1) entered blocking state [ 218.624551][ T6931] bridge0: port 3(ipvlan1) entered disabled state [ 218.630260][ T6931] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 218.698587][ T6939] device syzkaller0 entered promiscuous mode [ 218.763536][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 219.009346][ T6948] cgroup: fork rejected by pids controller in /syz3 [ 220.016257][ T4760] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.147782][ T4760] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.997705][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.028879][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.036830][ T4272] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.045123][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.057201][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.064755][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.103400][ T6975] netlink: 'syz.1.933': attribute type 10 has an invalid length. [ 221.122804][ T6975] __nla_validate_parse: 4 callbacks suppressed [ 221.122850][ T6975] netlink: 40 bytes leftover after parsing attributes in process `syz.1.933'. [ 221.198910][ T6975] bridge0: port 3(ipvlan1) entered blocking state [ 221.236645][ T6975] bridge0: port 3(ipvlan1) entered disabled state [ 221.245106][ T6975] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 221.293708][ T4760] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.448056][ T4760] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.673022][ T6988] cgroup: fork rejected by pids controller in /syz4 [ 221.882491][ T6994] netlink: 763 bytes leftover after parsing attributes in process `syz.2.942'. [ 221.910301][ T6994] delete_channel: no stack [ 221.992647][ T6994] delete_channel: no stack [ 222.036982][ T6998] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 222.154708][ T6981] chnl_net:caif_netlink_parms(): no params data found [ 222.390099][ T7006] netlink: 49920 bytes leftover after parsing attributes in process `syz.2.954'. [ 222.489813][ T6981] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.508968][ T6981] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.534262][ T6981] device bridge_slave_0 entered promiscuous mode [ 222.687805][ T6981] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.700890][ T6981] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.716571][ T6981] device bridge_slave_1 entered promiscuous mode [ 222.786378][ T6981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.844697][ T6981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.152018][ T4274] Bluetooth: hci1: command 0x0409 tx timeout [ 223.431503][ T6981] team0: Port device team_slave_0 added [ 223.470033][ T6981] team0: Port device team_slave_1 added [ 223.543260][ T6981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.556437][ T6981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.587428][ T6981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.735467][ T6981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.747820][ T6981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.840174][ T6981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.008555][ T6981] device hsr_slave_0 entered promiscuous mode [ 224.082252][ T6981] device hsr_slave_1 entered promiscuous mode [ 224.101734][ T6981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.109316][ T6981] Cannot create hsr debugfs directory [ 224.407542][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 224.423836][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 224.442253][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 224.455920][ T4277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 224.463763][ T4277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 224.471294][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 224.724458][ T4760] device hsr_slave_1 left promiscuous mode [ 224.738079][ T4760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.748091][ T4760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.769205][ T4760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.777714][ T4760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.838649][ T4760] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 224.867566][ T4760] batman_adv: batadv0: Removing interface: veth0_vlan [ 224.886903][ T4760] device bridge_slave_1 left promiscuous mode [ 224.899191][ T4760] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.916412][ T4760] device bridge_slave_0 left promiscuous mode [ 224.926109][ T4760] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.997367][ T4760] device veth1_macvtap left promiscuous mode [ 225.007797][ T4760] device veth0_macvtap left promiscuous mode [ 225.058260][ T4760] device veth1_vlan left promiscuous mode [ 225.092370][ T4760] device veth0_vlan left promiscuous mode [ 225.232769][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 225.513588][ T4760] team0 (unregistering): Port device team_slave_1 removed [ 225.545739][ T4760] team0 (unregistering): Port device team_slave_0 removed [ 225.587747][ T4760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.621279][ T4760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.818076][ T4760] team0 (unregistering): Port device bridge0 removed [ 225.843510][ T4760] bond0 (unregistering): Released all slaves [ 225.927622][ T7066] netlink: 'syz.1.953': attribute type 10 has an invalid length. [ 225.936571][ T7066] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.944010][ T7066] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.961195][ T7066] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.968900][ T7066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.977243][ T7066] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.984382][ T7066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.001191][ T7066] team0: Port device bridge0 added [ 226.260520][ T7055] chnl_net:caif_netlink_parms(): no params data found [ 226.484141][ T7055] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.491310][ T7055] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.499629][ T7055] device bridge_slave_0 entered promiscuous mode [ 226.508680][ T7055] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.516105][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 226.525672][ T7055] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.536557][ T7055] device bridge_slave_1 entered promiscuous mode [ 226.600171][ T7055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.613396][ T7055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.643062][ T7055] team0: Port device team_slave_0 added [ 226.662611][ T7055] team0: Port device team_slave_1 added [ 226.687591][ T6981] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 226.713952][ T6981] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 226.724605][ T7055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.735982][ T7055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.769364][ T7055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.782879][ T7055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.789840][ T7055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.816615][ T7055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.834956][ T6981] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.857994][ T6981] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.901137][ T7055] device hsr_slave_0 entered promiscuous mode [ 226.915037][ T7055] device hsr_slave_1 entered promiscuous mode [ 226.926081][ T7055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.936813][ T7055] Cannot create hsr debugfs directory [ 227.068861][ T6981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.120743][ T7055] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.143930][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.152512][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.165049][ T6981] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.179947][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.193524][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.202725][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.209828][ T4736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.218416][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.260863][ T7055] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.281598][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.290172][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.306232][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.311657][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 227.313356][ T4736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.354016][ T7055] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.371405][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.390936][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.406576][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.421244][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.478741][ T7055] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.506317][ T6981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.524135][ T6981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.540700][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.557717][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.568772][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.584898][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.597785][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.608824][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.621355][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.643382][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.767002][ T7055] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.795374][ T7055] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.815439][ T7055] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 227.828102][ T7055] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 227.955428][ T7055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.975886][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.991845][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.019634][ T6981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.030240][ T7055] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.048788][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.057776][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.107575][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.117669][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.135596][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.148942][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.160989][ T4726] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.168140][ T4726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.199192][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.210739][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.225811][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.237842][ T4726] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.245000][ T4726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.260337][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.274011][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.296587][ T6981] device veth0_vlan entered promiscuous mode [ 228.313557][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.328821][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.352123][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.362356][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.370861][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.378781][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.386983][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.399708][ T6981] device veth1_vlan entered promiscuous mode [ 228.418886][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 228.434795][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.452654][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.474094][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.486408][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.506865][ T7055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.518801][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.526944][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 228.537133][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.546939][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.569584][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.578442][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.588753][ T6981] device veth0_macvtap entered promiscuous mode [ 228.592110][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 228.618552][ T6981] device veth1_macvtap entered promiscuous mode [ 228.640005][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.657175][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.667300][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.678243][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.688167][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.701545][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.721705][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.741857][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.778831][ T6981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.797059][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 228.809035][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.842512][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.862077][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.888300][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.908695][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.923258][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.934085][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.944125][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.954868][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.965619][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.981084][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.999771][ T6981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.010458][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 229.026100][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 229.039674][ T6981] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.056622][ T6981] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.067674][ T6981] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.084089][ T6981] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.117112][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.129059][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.150292][ T7055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.204702][ T4320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.214464][ T4320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.233008][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 229.266459][ T4320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.274925][ T52] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 229.292522][ T4320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.300063][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 229.392312][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 229.449305][ T7146] netlink: 'syz.3.931': attribute type 2 has an invalid length. [ 230.083941][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.109983][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.217642][ T7055] device veth0_vlan entered promiscuous mode [ 230.301834][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.320881][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.389651][ T7055] device veth1_vlan entered promiscuous mode [ 230.451842][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.465411][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.546575][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 230.566671][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.610217][ T7055] device veth0_macvtap entered promiscuous mode [ 230.649819][ T7055] device veth1_macvtap entered promiscuous mode [ 230.673467][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 230.728428][ T7055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.752889][ T7055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.763647][ T7055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.780393][ T7055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.797652][ T7055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.810234][ T7055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.820840][ T7055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.841148][ T7055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.851561][ T7055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.870130][ T7055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.893261][ T7055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.924486][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 230.943166][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 230.959461][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 230.969670][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.003830][ T7055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.035445][ T7055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.058156][ T7055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.081114][ T7055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.100603][ T7055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.119674][ T7055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.130211][ T7055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.149842][ T7055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.161219][ T7055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.179553][ T7055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.199381][ T7055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.210125][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.229736][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.244796][ T7055] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.261950][ T7055] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.277860][ T7055] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.287327][ T7055] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.751653][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 232.900304][ T4744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.941805][ T4744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.980771][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 233.010818][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.033772][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.062114][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 234.299814][ T7207] syz.2.975 uses obsolete (PF_INET,SOCK_PACKET) [ 234.969840][ T7216] netlink: 'syz.3.978': attribute type 21 has an invalid length. [ 234.999413][ T7216] netlink: 'syz.3.978': attribute type 1 has an invalid length. [ 235.025604][ T7216] netlink: 144 bytes leftover after parsing attributes in process `syz.3.978'. [ 235.177100][ T7217] device syzkaller0 entered promiscuous mode [ 237.358114][ T4760] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 241.258113][ T7249] netlink: 14 bytes leftover after parsing attributes in process `syz.2.990'. [ 241.272159][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.292705][ T7260] netlink: 'syz.1.995': attribute type 21 has an invalid length. [ 241.300863][ T7260] netlink: 'syz.1.995': attribute type 1 has an invalid length. [ 241.351682][ T7260] netlink: 144 bytes leftover after parsing attributes in process `syz.1.995'. [ 241.740669][ T7272] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1000'. [ 241.821396][ T7272] delete_channel: no stack [ 241.828431][ T7272] delete_channel: no stack [ 241.857560][ T7274] device syzkaller0 entered promiscuous mode [ 242.317125][ T7286] Illegal XDP return value 1965305897 on prog (id 655) dev N/A, expect packet loss! [ 242.330290][ T7283] device veth1_macvtap left promiscuous mode [ 242.509497][ T7287] device veth1_macvtap entered promiscuous mode [ 242.526294][ T7287] device macsec0 entered promiscuous mode [ 242.548475][ T7291] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1007'. [ 242.904280][ T7301] netlink: 'syz.4.1012': attribute type 2 has an invalid length. [ 244.933903][ T7299] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1008'. [ 245.122917][ T7314] netlink: 'syz.4.1013': attribute type 21 has an invalid length. [ 245.145978][ T7314] netlink: 'syz.4.1013': attribute type 1 has an invalid length. [ 245.165882][ T7314] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1013'. [ 245.308145][ T7321] netlink: 'syz.1.1026': attribute type 2 has an invalid length. [ 246.023373][ T7337] device veth1_macvtap left promiscuous mode [ 246.076244][ T7338] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1022'. [ 246.106179][ T7342] device veth1_macvtap entered promiscuous mode [ 246.121898][ T7342] device macsec0 entered promiscuous mode [ 246.319032][ T4274] Bluetooth: hci4: Unknown advertising packet type: 0x8100 [ 246.319096][ T4274] Bluetooth: hci4: Malformed LE Event: 0x0d [ 246.396918][ T7351] netlink: 'syz.2.1028': attribute type 21 has an invalid length. [ 246.479860][ T7351] netlink: 'syz.2.1028': attribute type 1 has an invalid length. [ 246.562890][ T7351] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1028'. [ 246.646284][ T7359] netlink: 'syz.4.1031': attribute type 2 has an invalid length. [ 246.647470][ T7353] device syzkaller0 entered promiscuous mode [ 246.704338][ T7360] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1030'. [ 247.791882][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 247.799737][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 248.919805][ T7358] device syzkaller0 entered promiscuous mode [ 250.372794][ T7383] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1037'. [ 250.477586][ T7386] device veth1_macvtap left promiscuous mode [ 250.535521][ T7386] device veth1_macvtap entered promiscuous mode [ 250.545643][ T7386] device macsec0 entered promiscuous mode [ 250.793928][ T7391] device syzkaller0 entered promiscuous mode [ 253.109210][ T7404] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1044'. [ 253.140603][ T4274] Bluetooth: hci0: Unknown advertising packet type: 0x8100 [ 253.140649][ T4274] Bluetooth: hci0: Malformed LE Event: 0x0d [ 253.264441][ T7408] netlink: 'syz.0.1042': attribute type 21 has an invalid length. [ 253.283694][ T7408] netlink: 'syz.0.1042': attribute type 1 has an invalid length. [ 253.292931][ T7408] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1042'. [ 253.418417][ T7413] netlink: 'syz.2.1048': attribute type 2 has an invalid length. [ 253.768547][ T7427] netlink: 'syz.2.1055': attribute type 3 has an invalid length. [ 253.816513][ T7427] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1055'. [ 254.415291][ T7450] netlink: 'syz.2.1066': attribute type 3 has an invalid length. [ 254.436311][ T7450] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1066'. [ 254.711271][ T7461] netlink: 2759 bytes leftover after parsing attributes in process `syz.0.1071'. [ 255.483707][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.490021][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.746276][ T7496] netlink: 2639 bytes leftover after parsing attributes in process `syz.4.1085'. [ 257.755040][ T7494] netlink: 'syz.3.1086': attribute type 3 has an invalid length. [ 257.781580][ T7494] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1086'. [ 260.533437][ T7533] netlink: 2759 bytes leftover after parsing attributes in process `syz.1.1099'. [ 261.327702][ T7542] netlink: 'syz.0.1103': attribute type 3 has an invalid length. [ 261.364689][ T7542] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1103'. [ 261.479846][ T7547] device syzkaller0 entered promiscuous mode [ 261.802539][ T7558] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1111'. [ 262.754278][ T4736] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 266.806948][ T7562] IPv6: pim6reg1: Disabled Multicast RS [ 267.897874][ T7609] netlink: 'syz.1.1130': attribute type 4 has an invalid length. [ 267.921275][ T7609] netlink: 'syz.1.1130': attribute type 26 has an invalid length. [ 267.944290][ T7609] netlink: 60519 bytes leftover after parsing attributes in process `syz.1.1130'. [ 268.900740][ T7614] device veth1_macvtap left promiscuous mode [ 268.991558][ T7616] device veth1_macvtap entered promiscuous mode [ 269.207601][ T7623] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1137'. [ 269.219897][ T7620] IPv6: pim6reg1: Disabled Multicast RS [ 269.619184][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 269.641804][ T7634] device syzkaller0 entered promiscuous mode [ 269.776870][ T7642] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1152'. [ 269.826028][ T7643] netlink: 'syz.3.1142': attribute type 4 has an invalid length. [ 269.839763][ T7643] netlink: 'syz.3.1142': attribute type 26 has an invalid length. [ 269.860008][ T7643] netlink: 60519 bytes leftover after parsing attributes in process `syz.3.1142'. [ 272.939243][ T7665] device veth1_macvtap left promiscuous mode [ 272.952224][ T7665] device macsec0 entered promiscuous mode [ 273.071657][ T7666] device veth1_macvtap entered promiscuous mode [ 273.467507][ T7677] netlink: 'syz.0.1155': attribute type 4 has an invalid length. [ 273.550707][ T7677] netlink: 'syz.0.1155': attribute type 26 has an invalid length. [ 273.563386][ T7677] netlink: 60519 bytes leftover after parsing attributes in process `syz.0.1155'. [ 275.560343][ T7704] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1162'. [ 276.306749][ T7711] device syzkaller0 entered promiscuous mode [ 277.872565][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.879870][ C0] bridge0: topology change detected, propagating [ 277.886672][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.893910][ C0] bridge0: topology change detected, propagating [ 279.450896][ T7714] device veth1_macvtap left promiscuous mode [ 279.483427][ T7714] device macsec0 entered promiscuous mode [ 279.531867][ T7715] device veth1_macvtap entered promiscuous mode [ 281.651605][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.663444][ T7723] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 284.899857][ T7723] batman_adv: batadv0: Removing interface: veth0_vlan [ 284.979163][ T7742] netlink: 'syz.1.1178': attribute type 22 has an invalid length. [ 284.994875][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1178'. [ 294.647374][ T7858] netlink: 'syz.2.1226': attribute type 11 has an invalid length. [ 294.681177][ T7858] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1226'. [ 294.711991][ T4744] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 294.830633][ T7855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.678451][ T7914] netlink: 'syz.4.1246': attribute type 11 has an invalid length. [ 297.731796][ T7914] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1246'. [ 297.875900][ T7913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.930608][ T7931] netlink: 'syz.1.1251': attribute type 21 has an invalid length. [ 299.498407][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1255'. [ 299.760271][ T7961] netlink: 'syz.2.1268': attribute type 21 has an invalid length. [ 300.087830][ T7970] netlink: 'syz.4.1259': attribute type 3 has an invalid length. [ 300.133354][ T7970] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1259'. [ 300.166189][ T7975] netlink: 'syz.3.1261': attribute type 11 has an invalid length. [ 300.200583][ T7975] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1261'. [ 300.327679][ T4274] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 300.387360][ T7974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.656178][ T4320] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 301.164725][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 301.740183][ T8016] netlink: 'syz.4.1277': attribute type 21 has an invalid length. [ 302.481404][ T8032] netlink: 'syz.0.1280': attribute type 11 has an invalid length. [ 302.509463][ T8032] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1280'. [ 302.570802][ T8031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.899656][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1290'. [ 303.751998][ T8073] netlink: 'syz.1.1300': attribute type 11 has an invalid length. [ 303.780372][ T8073] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1300'. [ 304.180776][ T8072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.408845][ T8172] netlink: 'syz.3.1342': attribute type 21 has an invalid length. [ 307.575246][ T8179] delete_channel: no stack [ 307.596410][ T8176] device syzkaller0 entered promiscuous mode [ 309.146150][ T8186] netlink: 'syz.2.1347': attribute type 1 has an invalid length. [ 309.174376][ T8186] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1347'. [ 309.679878][ T8195] device syzkaller0 entered promiscuous mode [ 311.385135][ T8222] netlink: 'syz.0.1359': attribute type 21 has an invalid length. [ 311.573523][ T8226] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 311.618841][ T8226] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 311.628138][ T8226] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 311.637388][ T8226] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 311.646641][ T8226] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 311.655898][ T8226] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 311.665143][ T8226] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 311.674295][ T8226] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 311.683508][ T8226] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 311.692759][ T8226] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 312.373364][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1366'. [ 312.541833][ T8238] netlink: 'syz.0.1377': attribute type 1 has an invalid length. [ 312.567322][ T8238] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1377'. [ 312.820951][ T8244] delete_channel: no stack [ 313.427824][ T8265] netlink: 'syz.3.1375': attribute type 21 has an invalid length. [ 316.764670][ T8340] netlink: 'syz.4.1409': attribute type 13 has an invalid length. [ 316.801669][ T8340] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.1409'. [ 316.918228][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.924604][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.420594][ T8361] net_ratelimit: 9788 callbacks suppressed [ 317.420629][ T8361] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 317.506303][ T8361] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 317.515526][ T8361] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 317.524763][ T8361] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 317.534013][ T8361] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 317.543290][ T8361] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 317.552561][ T8361] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 317.561864][ T8361] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 317.571087][ T8361] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 317.580389][ T8361] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 321.768945][ T8380] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1434'. [ 321.992804][ T8399] delete_channel: no stack [ 322.629823][ T8426] netlink: 'syz.2.1443': attribute type 13 has an invalid length. [ 322.666941][ T8426] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1443'. [ 322.980192][ T8439] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1451'. [ 325.634880][ T8465] netlink: 'syz.3.1460': attribute type 13 has an invalid length. [ 325.653921][ T8465] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1460'. [ 326.111790][ T8481] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1470'. [ 326.240860][ T4760] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 326.359858][ T8489] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1473'. [ 326.753147][ T4274] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 326.761735][ T4274] Bluetooth: hci3: Injecting HCI hardware error event [ 326.769961][ T4277] Bluetooth: hci3: hardware error 0x00 [ 328.072479][ T8533] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1488'. [ 328.392800][ T8547] device syzkaller0 entered promiscuous mode [ 328.446046][ T8546] : port 1(ip6gretap0) entered blocking state [ 328.455316][ T8546] : port 1(ip6gretap0) entered disabled state [ 328.501984][ T8546] device ip6gretap0 entered promiscuous mode [ 328.537635][ T8550] device ip6gretap0 left promiscuous mode [ 328.578717][ T8550] : port 1(ip6gretap0) entered disabled state [ 328.831567][ T4277] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 329.554285][ T4277] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 329.562833][ T4277] Bluetooth: hci0: Injecting HCI hardware error event [ 329.570938][ T4274] Bluetooth: hci0: hardware error 0x00 [ 329.810669][ T8583] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1505'. [ 330.021028][ T4744] tipc: Subscription rejected, illegal request [ 330.060215][ T8588] netlink: 'syz.1.1509': attribute type 2 has an invalid length. [ 330.097759][ T8588] netlink: 'syz.1.1509': attribute type 8 has an invalid length. [ 330.126709][ T8588] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1509'. [ 330.512436][ T4277] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 330.521022][ T4277] Bluetooth: hci4: Injecting HCI hardware error event [ 330.530366][ T4272] Bluetooth: hci4: hardware error 0x00 [ 330.786921][ T8601] net_ratelimit: 6522 callbacks suppressed [ 330.786955][ T8601] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 330.802234][ T8601] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 330.811516][ T8601] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 330.820765][ T8601] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 330.830087][ T8601] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 330.839361][ T8601] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 330.848683][ T8601] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 330.857981][ T8601] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 330.867286][ T8601] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 330.876560][ T8601] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 331.655778][ T4274] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 331.797656][ T52] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 332.062696][ T4277] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 332.071547][ T4277] Bluetooth: hci2: Injecting HCI hardware error event [ 332.080257][ T4277] Bluetooth: hci2: hardware error 0x00 [ 332.601624][ T4272] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 333.712886][ T4274] Bluetooth: hci0: Opcode 0x206c failed: -110 [ 334.677041][ T4272] Bluetooth: hci4: Opcode 0x206c failed: -110 [ 335.161873][ T4277] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 335.672442][ T8658] device syzkaller0 entered promiscuous mode [ 335.791833][ T4274] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 336.752171][ T4272] Bluetooth: hci4: Opcode 0x2046 failed: -110 [ 337.200618][ T52] device hsr_slave_0 left promiscuous mode [ 337.236104][ T52] device hsr_slave_1 left promiscuous mode [ 337.248428][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.266342][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.292445][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.341587][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.370945][ T52] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 337.394916][ T52] batman_adv: batadv0: Removing interface: veth0_vlan [ 337.441393][ T52] device bridge_slave_1 left promiscuous mode [ 337.459462][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.497485][ T52] device bridge_slave_0 left promiscuous mode [ 337.519425][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.615542][ T52] device veth1_macvtap left promiscuous mode [ 337.628810][ T52] device veth0_macvtap left promiscuous mode [ 337.643580][ T52] device veth1_vlan left promiscuous mode [ 337.656641][ T52] device veth0_vlan left promiscuous mode [ 338.572206][ T52] team0 (unregistering): Port device team_slave_1 removed [ 338.618582][ T52] team0 (unregistering): Port device team_slave_0 removed [ 338.670425][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.746272][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.835162][ T4272] Bluetooth: hci4: Opcode 0x206c failed: -110 [ 338.951966][ T52] team0 (unregistering): Port device bridge0 removed [ 338.976738][ T52] bond0 (unregistering): Released all slaves [ 339.747144][ T8714] device syzkaller0 entered promiscuous mode [ 339.932547][ T8717] nr0: port 1(hsr0) entered blocking state [ 339.946230][ T8717] nr0: port 1(hsr0) entered disabled state [ 339.965357][ T8717] device hsr0 entered promiscuous mode [ 339.993834][ T8717] nr0: port 1(hsr0) entered blocking state [ 339.999778][ T8717] nr0: port 1(hsr0) entered forwarding state [ 340.664182][ T34] tipc: Subscription rejected, illegal request [ 340.666723][ T8742] net_ratelimit: 6648 callbacks suppressed [ 340.666763][ T8742] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 340.685911][ T8742] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 340.695188][ T8742] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 340.704410][ T8742] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 340.713667][ T8742] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 340.722919][ T8742] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 340.732143][ T8742] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 340.741350][ T8742] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 340.750575][ T8742] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 340.759826][ T8742] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 340.778666][ T8747] netlink: 'syz.2.1566': attribute type 2 has an invalid length. [ 340.821411][ T8747] netlink: 'syz.2.1566': attribute type 8 has an invalid length. [ 340.843055][ T8747] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1566'. [ 340.881206][ T8746] netlink: 'syz.3.1567': attribute type 5 has an invalid length. [ 340.913191][ T4272] Bluetooth: hci4: Opcode 0x2046 failed: -110 [ 342.078026][ T8760] device lo entered promiscuous mode [ 344.591672][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 345.833949][ T8786] : port 1(ip6gretap0) entered blocking state [ 345.849790][ T8786] : port 1(ip6gretap0) entered disabled state [ 345.920224][ T8786] device ip6gretap0 entered promiscuous mode [ 346.042330][ T8789] device ip6gretap0 left promiscuous mode [ 346.048259][ T8789] : port 1(ip6gretap0) entered disabled state [ 348.541772][ T8844] nr0: port 1(hsr0) entered blocking state [ 348.547846][ T8844] nr0: port 1(hsr0) entered disabled state [ 348.618265][ T8844] device hsr0 entered promiscuous mode [ 348.741753][ T8849] nr0: port 1(hsr0) entered blocking state [ 348.747701][ T8849] nr0: port 1(hsr0) entered forwarding state [ 348.846502][ T8852] : port 1(ip6gretap0) entered blocking state [ 348.887005][ T8852] : port 1(ip6gretap0) entered disabled state [ 348.941711][ T8852] device ip6gretap0 entered promiscuous mode [ 349.001893][ T8853] device ip6gretap0 left promiscuous mode [ 349.007822][ T8853] : port 1(ip6gretap0) entered disabled state [ 349.746011][ T8877] device lo entered promiscuous mode [ 349.794128][ T8872] netlink: 'syz.1.1605': attribute type 5 has an invalid length. [ 351.117870][ T8888] nr0: port 1(hsr0) entered blocking state [ 351.132944][ T8888] nr0: port 1(hsr0) entered disabled state [ 351.140352][ T8888] device hsr0 entered promiscuous mode [ 351.157731][ T8889] nr0: port 1(hsr0) entered blocking state [ 351.163711][ T8889] nr0: port 1(hsr0) entered forwarding state [ 353.399494][ T8904] : port 1(ip6gretap0) entered blocking state [ 353.439100][ T8904] : port 1(ip6gretap0) entered disabled state [ 353.477556][ T8904] device ip6gretap0 entered promiscuous mode [ 353.542127][ T8911] device ip6gretap0 left promiscuous mode [ 353.575897][ T8911] : port 1(ip6gretap0) entered disabled state [ 354.101991][ T8924] device lo entered promiscuous mode [ 354.183715][ T8922] device lo left promiscuous mode [ 355.249042][ T8951] : port 1(ip6gretap0) entered blocking state [ 355.339739][ T8951] : port 1(ip6gretap0) entered disabled state [ 355.378092][ T8951] device ip6gretap0 entered promiscuous mode [ 355.409252][ T8955] device ip6gretap0 left promiscuous mode [ 355.481747][ T8955] : port 1(ip6gretap0) entered disabled state [ 355.821396][ T8967] netlink: 'syz.4.1641': attribute type 2 has an invalid length. [ 356.706342][ T8967] device 0 entered promiscuous mode [ 356.913472][ T8982] netlink: 'syz.2.1653': attribute type 2 has an invalid length. [ 357.758958][ T8982] device 0 entered promiscuous mode [ 358.767256][ T9012] : port 1(ip6gretap0) entered blocking state [ 358.824135][ T9012] : port 1(ip6gretap0) entered disabled state [ 358.879951][ T9012] device ip6gretap0 entered promiscuous mode [ 358.926826][ T9016] device ip6gretap0 left promiscuous mode [ 358.957815][ T9016] : port 1(ip6gretap0) entered disabled state [ 359.353029][ T9028] netlink: 'syz.1.1660': attribute type 2 has an invalid length. [ 359.499751][ T9028] device 0 entered promiscuous mode [ 359.691156][ T9036] netlink: 'syz.0.1672': attribute type 2 has an invalid length. [ 359.884761][ T4272] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 360.018911][ T9036] device 0 entered promiscuous mode [ 363.004945][ T4736] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 363.373840][ T9080] device syzkaller0 entered promiscuous mode [ 363.384097][ T9083] : port 1(ip6gretap0) entered blocking state [ 363.390359][ T9083] : port 1(ip6gretap0) entered disabled state [ 363.406796][ T9083] device ip6gretap0 entered promiscuous mode [ 364.980853][ T9077] device ip6gretap0 left promiscuous mode [ 364.987003][ T9077] : port 1(ip6gretap0) entered disabled state [ 364.999305][ T9088] netlink: 'syz.1.1676': attribute type 39 has an invalid length. [ 365.015189][ T9088] device macvlan0 entered promiscuous mode [ 365.193642][ T9095] netlink: 'syz.3.1678': attribute type 2 has an invalid length. [ 365.227874][ T9096] : port 1(ip6gretap0) entered blocking state [ 365.238817][ T9096] : port 1(ip6gretap0) entered disabled state [ 365.281821][ T9096] device ip6gretap0 entered promiscuous mode [ 365.310452][ T9095] device 0 entered promiscuous mode [ 365.334599][ T9101] device ip6gretap0 left promiscuous mode [ 365.353206][ T9101] : port 1(ip6gretap0) entered disabled state [ 365.708910][ T9116] netlink: 'syz.3.1685': attribute type 10 has an invalid length. [ 365.847261][ T9116] team0: Port device virt_wifi0 added [ 366.836744][ T9145] : port 1(ip6gretap0) entered blocking state [ 366.845260][ T9145] : port 1(ip6gretap0) entered disabled state [ 366.904785][ T9145] device ip6gretap0 entered promiscuous mode [ 366.992593][ T9148] netlink: 'syz.3.1698': attribute type 2 has an invalid length. [ 366.999390][ T9146] device ip6gretap0 left promiscuous mode [ 367.019999][ T9146] : port 1(ip6gretap0) entered disabled state [ 367.576987][ T9148] device 1 entered promiscuous mode [ 371.487746][ T9184] netlink: 'syz.1.1716': attribute type 2 has an invalid length. [ 372.054919][ T9184] device 1 entered promiscuous mode [ 372.110259][ T9196] : port 1(ip6gretap0) entered blocking state [ 372.141377][ T9196] : port 1(ip6gretap0) entered disabled state [ 372.221389][ T9196] device ip6gretap0 entered promiscuous mode [ 372.295055][ T9198] device ip6gretap0 left promiscuous mode [ 372.311823][ T9198] : port 1(ip6gretap0) entered disabled state [ 376.273659][ T9235] netlink: 'syz.4.1731': attribute type 2 has an invalid length. [ 376.670185][ T9235] device 1 entered promiscuous mode [ 376.886543][ T9246] : port 1(ip6gretap0) entered blocking state [ 376.893540][ T9246] : port 1(ip6gretap0) entered disabled state [ 376.934990][ T9246] device ip6gretap0 entered promiscuous mode [ 376.985154][ T9248] device ip6gretap0 left promiscuous mode [ 376.991092][ T9248] : port 1(ip6gretap0) entered disabled state [ 378.364822][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.371178][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.478076][ T9281] netlink: 'syz.1.1749': attribute type 2 has an invalid length. [ 378.926715][ T9281] device 2 entered promiscuous mode [ 378.942904][ T9291] : port 1(ip6gretap0) entered blocking state [ 378.960010][ T9291] : port 1(ip6gretap0) entered disabled state [ 378.990867][ T9291] device ip6gretap0 entered promiscuous mode [ 379.028359][ T9294] device ip6gretap0 left promiscuous mode [ 379.049081][ T9294] : port 1(ip6gretap0) entered disabled state [ 383.022610][ T9326] device syzkaller0 entered promiscuous mode [ 385.807305][ T9368] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.1777'. [ 392.749284][ T9442] device syzkaller0 entered promiscuous mode [ 394.029975][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 394.701853][ T9456] : port 1(ip6gretap0) entered blocking state [ 394.708088][ T9456] : port 1(ip6gretap0) entered disabled state [ 394.742840][ T9456] device ip6gretap0 entered promiscuous mode [ 394.783183][ T9457] device ip6gretap0 left promiscuous mode [ 394.791927][ T9457] : port 1(ip6gretap0) entered disabled state [ 398.013711][ T9482] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.021016][ T9482] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.087663][ T9489] device bridge_slave_1 left promiscuous mode [ 398.123235][ T9489] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.177601][ T9489] device bridge_slave_0 left promiscuous mode [ 398.190554][ T9489] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.504999][ T9542] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1836'. [ 403.870734][ T9547] netlink: 'syz.2.1836': attribute type 25 has an invalid length. [ 403.921553][ T9547] netlink: 'syz.2.1836': attribute type 6 has an invalid length. [ 404.350102][ T9559] netlink: 'syz.3.1838': attribute type 10 has an invalid length. [ 404.615596][ T9559] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.660249][ T9559] bond0: (slave team0): Enslaving as an active interface with an up link [ 405.087307][ T9571] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1845'. [ 405.130770][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 405.169458][ T9571] net_ratelimit: 3319 callbacks suppressed [ 405.169472][ T9571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.930559][ T9584] netlink: 'syz.3.1850': attribute type 1 has an invalid length. [ 405.943832][ T9584] netlink: 'syz.3.1850': attribute type 4 has an invalid length. [ 405.961586][ T9584] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1850'. [ 408.861985][ T9601] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.869284][ T9601] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.572843][ T9603] device bridge_slave_1 left promiscuous mode [ 409.582045][ T9603] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.719698][ T9603] device bridge_slave_0 left promiscuous mode [ 409.728894][ T9603] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.776333][ T9603] team0: Port device bridge0 removed [ 411.221160][ T9642] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1865'. [ 411.242073][ T9642] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 411.295751][ T9642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.067646][ T9667] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1884'. [ 412.080899][ T9667] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 412.115634][ T9667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.154151][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.161893][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.299503][ T9670] device bridge_slave_1 left promiscuous mode [ 412.318640][ T9670] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.335457][ T9670] device bridge_slave_0 left promiscuous mode [ 412.347876][ T9670] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.877768][ T9676] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: veth0_vlan [ 412.941014][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.407997][ T9687] netlink: 'syz.1.1882': attribute type 2 has an invalid length. [ 416.576734][ T9713] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1888'. [ 416.736839][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 416.871252][ T9713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.933130][ T9729] netlink: 'syz.2.1894': attribute type 10 has an invalid length. [ 418.300753][ T9729] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.324138][ T9736] netlink: 'syz.0.1909': attribute type 2 has an invalid length. [ 418.380630][ T9729] device team0 entered promiscuous mode [ 418.403591][ T9729] device team_slave_0 entered promiscuous mode [ 418.430681][ T9729] device team_slave_1 entered promiscuous mode [ 418.450395][ T9729] device bridge0 entered promiscuous mode [ 418.516516][ T9729] bond0: (slave team0): Enslaving as an active interface with an up link [ 418.773283][ T9736] device 1 entered promiscuous mode [ 419.472417][ T9755] netlink: 'syz.1.1917': attribute type 10 has an invalid length. [ 419.627711][ T9755] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.672922][ T9755] bond0: (slave team0): Enslaving as an active interface with an up link [ 420.263735][ T9773] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.370993][ T9778] device bridge_slave_1 left promiscuous mode [ 420.436111][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.514296][ T9778] device bridge_slave_0 left promiscuous mode [ 420.520671][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.723005][ T9778] device bridge0 left promiscuous mode [ 420.786100][ T9778] team0: Port device bridge0 removed [ 421.789992][ T9809] netlink: 'syz.0.1923': attribute type 10 has an invalid length. [ 422.536963][ T9809] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.622593][ T9809] bond0: (slave team0): Enslaving as an active interface with an up link [ 423.862225][ T9827] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.869757][ T9827] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.904975][ T9829] device bridge_slave_1 left promiscuous mode [ 423.925395][ T9829] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.979202][ T9829] device bridge_slave_0 left promiscuous mode [ 424.007449][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.821653][ T4760] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 428.385005][ T9876] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1941'. [ 428.468830][ T9876] netlink: zone id is out of range [ 428.474397][ T9876] netlink: zone id is out of range [ 428.480524][ T9876] netlink: zone id is out of range [ 428.486178][ T9876] netlink: zone id is out of range [ 428.500047][ T9876] netlink: zone id is out of range [ 428.512995][ T9876] netlink: zone id is out of range [ 428.525111][ T9876] netlink: zone id is out of range [ 428.571972][ T9876] netlink: zone id is out of range [ 428.587572][ T9876] netlink: zone id is out of range [ 428.606344][ T9876] netlink: zone id is out of range [ 428.906314][ T9884] netlink: 'syz.4.1949': attribute type 10 has an invalid length. [ 431.958892][ T9884] team0: Device wg1 is of different type [ 439.794269][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.800611][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.447486][T10044] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2004'. [ 444.482442][T10044] net_ratelimit: 3 callbacks suppressed [ 444.482458][T10044] netlink: zone id is out of range [ 444.501665][T10044] netlink: zone id is out of range [ 444.527269][T10044] netlink: zone id is out of range [ 444.546934][T10044] netlink: zone id is out of range [ 444.559597][T10044] netlink: zone id is out of range [ 444.571807][T10044] netlink: zone id is out of range [ 444.586123][T10044] netlink: zone id is out of range [ 444.600240][T10044] netlink: zone id is out of range [ 444.641613][T10044] netlink: zone id is out of range [ 444.672033][T10044] netlink: zone id is out of range [ 446.036394][T10078] device syzkaller0 entered promiscuous mode [ 447.198488][T10085] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2019'. [ 449.802036][T10087] netlink: 'syz.4.2020': attribute type 10 has an invalid length. [ 451.257453][T10138] netlink: 'syz.1.2039': attribute type 21 has an invalid length. [ 451.275366][T10138] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.2039'. [ 451.544179][T10143] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2041'. [ 454.824703][ T4316] syzkaller0: tun_net_xmit 76 [ 454.830005][ T4316] syzkaller0: tun_net_xmit 48 [ 454.836598][T10218] syzkaller0: create flow: hash 1102618456 index 2 [ 454.911990][ T4319] syzkaller0: tun_net_xmit 76 [ 455.062852][ T4316] syzkaller0: tun_net_xmit 76 [ 455.395531][ T4316] syzkaller0: tun_net_xmit 76 [ 456.912341][T10218] syzkaller0: delete flow: hash 1102618456 index 2 [ 458.952838][ T4728] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 459.028622][T10249] netlink: 'syz.0.2081': attribute type 10 has an invalid length. [ 459.730813][T10249] team0: Device vxcan1 is of different type [ 459.760063][T10259] netlink: 'syz.1.2082': attribute type 10 has an invalid length. [ 459.780453][T10259] device vlan0 entered promiscuous mode [ 459.849416][T10259] team0: Port device vlan0 added [ 461.952332][T10292] device syzkaller0 left promiscuous mode [ 462.159700][T10303] netlink: 'syz.2.2099': attribute type 10 has an invalid length. [ 462.182604][T10303] device vlan0 entered promiscuous mode [ 462.252046][T10303] team0: Port device vlan0 added [ 464.389360][T10347] netlink: 'syz.0.2115': attribute type 10 has an invalid length. [ 464.555725][T10349] net_ratelimit: 16 callbacks suppressed [ 464.555741][T10349] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 465.408489][T10374] netlink: 'syz.2.2135': attribute type 21 has an invalid length. [ 465.429768][T10374] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.2135'. [ 474.626940][T10449] tun0: tun_chr_ioctl cmd 1074812118 [ 477.119830][T10456] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 480.870734][T10456] team0: Port device vlan0 removed [ 480.901074][T10456] batman_adv: batadv0: Removing interface: veth0_vlan [ 481.459908][T10487] netlink: 'syz.3.2169': attribute type 9 has an invalid length. [ 481.492137][T10487] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2169'. [ 481.672450][T10495] device syzkaller0 left promiscuous mode [ 482.756129][T10499] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2175'. [ 488.559161][T10543] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2191'. [ 489.658945][T10590] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2216'. [ 489.704111][T10590] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 489.977704][ T4757] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 493.820128][T10605] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2208'. [ 494.094049][T10622] netlink: 'syz.3.2215': attribute type 10 has an invalid length. [ 494.121926][T10622] team0: Device vxcan1 is of different type [ 494.667681][T10639] tun0: tun_chr_ioctl cmd 1074812118 [ 495.124447][T10651] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2225'. [ 495.333557][T10656] device syzkaller0 left promiscuous mode [ 495.512840][T10664] netlink: 'syz.4.2233': attribute type 10 has an invalid length. [ 495.588621][T10664] team0: Device vxcan1 is of different type [ 495.742473][T10669] tun0: tun_chr_ioctl cmd 1074812118 [ 495.933198][T10676] netlink: 'syz.1.2237': attribute type 9 has an invalid length. [ 495.970377][T10676] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2237'. [ 496.330827][T10680] netlink: 'syz.1.2249': attribute type 10 has an invalid length. [ 496.387063][T10680] team0: Device vxcan1 is of different type [ 496.776283][T10699] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2242'. [ 497.008487][T10704] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2257'. [ 497.324145][T10715] device ipvlan1 left promiscuous mode [ 497.519226][T10719] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2264'. [ 497.904097][T10729] netlink: 'syz.4.2251': attribute type 9 has an invalid length. [ 497.928258][T10729] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2251'. [ 497.976927][T10732] netlink: 'syz.0.2253': attribute type 15 has an invalid length. [ 497.989969][T10732] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2253'. [ 498.244911][T10740] IPv6: Can't replace route, no match found [ 501.246627][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.253014][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.679506][T10770] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2278'. [ 501.738757][T10770] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 504.638650][T10779] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2270'. [ 506.280820][T10815] netlink: 'syz.2.2292': attribute type 9 has an invalid length. [ 506.290287][T10815] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2292'. [ 506.519471][T10824] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2287'. [ 506.587546][T10818] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2288'. [ 506.649862][T10818] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 512.031925][T10882] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2302'. [ 512.094862][T10882] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 512.671852][ T4773] wlan1: Trigger new scan to find an IBSS to join [ 516.673870][ T34] wlan1: Trigger new scan to find an IBSS to join [ 517.671914][ T34] wlan1: Creating new IBSS network, BSSID 00:00:00:00:70:25 [ 517.702569][T10978] device syzkaller0 entered promiscuous mode [ 521.432217][T11026] netlink: 'syz.3.2356': attribute type 16 has an invalid length. [ 521.450611][T11026] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2356'. [ 521.610539][T11031] netlink: 'syz.4.2353': attribute type 1 has an invalid length. [ 522.050170][T11040] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2371'. [ 522.118212][T11040] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 522.165890][T11040] CPU: 1 PID: 11040 Comm: syz.2.2371 Not tainted syzkaller #0 [ 522.173402][T11040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 522.183485][T11040] Call Trace: [ 522.186761][T11040] [ 522.189685][T11040] dump_stack_lvl+0x188/0x24e [ 522.194369][T11040] ? show_regs_print_info+0x12/0x12 [ 522.199563][T11040] ? load_image+0x410/0x410 [ 522.204072][T11040] sysfs_warn_dup+0x8a/0xa0 [ 522.208573][T11040] sysfs_do_create_link_sd+0xc0/0x110 [ 522.213945][T11040] device_add+0x83b/0x1050 [ 522.218365][T11040] wiphy_register+0x1d8b/0x2aa0 [ 522.223231][T11040] ? cfg80211_event_work+0x40/0x40 [ 522.228332][T11040] ? minstrel_ht_alloc+0x894/0xa20 [ 522.233447][T11040] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 522.239536][T11040] ieee80211_register_hw+0x2d48/0x39f0 [ 522.245004][T11040] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 522.251188][T11040] ? ieee80211_register_hw+0xf41/0x39f0 [ 522.256820][T11040] ? ieee80211_register_hw+0xf41/0x39f0 [ 522.262370][T11040] ? ieee80211_tasklet_handler+0x20/0x20 [ 522.267999][T11040] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 522.273894][T11040] ? __debug_object_init+0xed/0x440 [ 522.279097][T11040] ? memset+0x1e/0x40 [ 522.283080][T11040] ? __hrtimer_init+0x189/0x270 [ 522.287937][T11040] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 522.293672][T11040] ? memcpy+0x3c/0x60 [ 522.297660][T11040] hwsim_new_radio_nl+0xab7/0xc90 [ 522.302698][T11040] genl_family_rcv_msg_doit+0x22f/0x350 [ 522.308241][T11040] ? end_current_label_crit_section+0x170/0x170 [ 522.314483][T11040] ? lockdep_hardirqs_on+0x94/0x140 [ 522.319686][T11040] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 522.325587][T11040] ? bpf_lsm_capable+0x5/0x10 [ 522.330259][T11040] ? security_capable+0x85/0xb0 [ 522.335110][T11040] genl_rcv_msg+0x601/0x790 [ 522.339619][T11040] ? genl_bind+0x360/0x360 [ 522.344033][T11040] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 522.350371][T11040] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 522.356351][T11040] netlink_rcv_skb+0x1ef/0x440 [ 522.361112][T11040] ? genl_bind+0x360/0x360 [ 522.365528][T11040] ? netlink_ack+0x1160/0x1160 [ 522.370296][T11040] ? genl_bind+0x360/0x360 [ 522.374712][T11040] genl_rcv+0x24/0x40 [ 522.378689][T11040] netlink_unicast+0x7ad/0x920 [ 522.383456][T11040] netlink_sendmsg+0x8ad/0xbd0 [ 522.388222][T11040] ? netlink_getsockopt+0x550/0x550 [ 522.393415][T11040] ? apparmor_socket_sendmsg+0x8a/0x330 [ 522.398961][T11040] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 522.404237][T11040] ? security_socket_sendmsg+0x7c/0xa0 [ 522.409690][T11040] ? netlink_getsockopt+0x550/0x550 [ 522.414882][T11040] ____sys_sendmsg+0x5ed/0x9a0 [ 522.419648][T11040] ? __sys_sendmsg_sock+0x30/0x30 [ 522.424665][T11040] ? __import_iovec+0x306/0x510 [ 522.429523][T11040] ? import_iovec+0x6f/0xa0 [ 522.434027][T11040] ___sys_sendmsg+0x2a2/0x360 [ 522.438708][T11040] ? __sys_sendmsg+0x2a0/0x2a0 [ 522.443486][T11040] ? ktime_get+0x7b/0x270 [ 522.447834][T11040] __se_sys_sendmsg+0x1c3/0x2b0 [ 522.452687][T11040] ? __x64_sys_sendmsg+0x80/0x80 [ 522.457632][T11040] ? lockdep_hardirqs_on+0x94/0x140 [ 522.462829][T11040] do_syscall_64+0x4c/0xa0 [ 522.467238][T11040] ? clear_bhb_loop+0x60/0xb0 [ 522.471907][T11040] ? clear_bhb_loop+0x60/0xb0 [ 522.476578][T11040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 522.482484][T11040] RIP: 0033:0x7f5af959e159 [ 522.486893][T11040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.506489][T11040] RSP: 002b:00007f5afa3d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.514898][T11040] RAX: ffffffffffffffda RBX: 00007f5af9825fa0 RCX: 00007f5af959e159 [ 522.522861][T11040] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 522.530824][T11040] RBP: 00007f5af963503b R08: 0000000000000000 R09: 0000000000000000 [ 522.538785][T11040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.546745][T11040] R13: 00007f5af9826038 R14: 00007f5af9825fa0 R15: 00007fff05b68198 [ 522.554725][T11040] [ 522.982645][T11052] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2374'. [ 523.056945][T11052] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 523.098040][T11052] CPU: 1 PID: 11052 Comm: syz.0.2374 Not tainted syzkaller #0 [ 523.105541][T11052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 523.115611][T11052] Call Trace: [ 523.118899][T11052] [ 523.121840][T11052] dump_stack_lvl+0x188/0x24e [ 523.126539][T11052] ? show_regs_print_info+0x12/0x12 [ 523.131755][T11052] ? load_image+0x410/0x410 [ 523.136303][T11052] sysfs_warn_dup+0x8a/0xa0 [ 523.140829][T11052] sysfs_do_create_link_sd+0xc0/0x110 [ 523.146222][T11052] device_add+0x83b/0x1050 [ 523.150654][T11052] wiphy_register+0x1d8b/0x2aa0 [ 523.155523][T11052] ? cfg80211_event_work+0x40/0x40 [ 523.160630][T11052] ? minstrel_ht_alloc+0x894/0xa20 [ 523.165745][T11052] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 523.171814][T11052] ieee80211_register_hw+0x2d48/0x39f0 [ 523.177283][T11052] ? ieee80211_register_hw+0xf41/0x39f0 [ 523.182821][T11052] ? ieee80211_register_hw+0xf41/0x39f0 [ 523.188366][T11052] ? ieee80211_tasklet_handler+0x20/0x20 [ 523.193991][T11052] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 523.199889][T11052] ? __debug_object_init+0xed/0x440 [ 523.205088][T11052] ? memset+0x1e/0x40 [ 523.209066][T11052] ? __hrtimer_init+0x189/0x270 [ 523.213913][T11052] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 523.219644][T11052] ? memcpy+0x3c/0x60 [ 523.223626][T11052] hwsim_new_radio_nl+0xab7/0xc90 [ 523.228660][T11052] genl_family_rcv_msg_doit+0x22f/0x350 [ 523.234206][T11052] ? end_current_label_crit_section+0x170/0x170 [ 523.240442][T11052] ? lockdep_hardirqs_on+0x94/0x140 [ 523.245638][T11052] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 523.251532][T11052] ? bpf_lsm_capable+0x5/0x10 [ 523.256204][T11052] ? security_capable+0x85/0xb0 [ 523.261152][T11052] genl_rcv_msg+0x601/0x790 [ 523.265674][T11052] ? genl_bind+0x360/0x360 [ 523.270085][T11052] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 523.276426][T11052] netlink_rcv_skb+0x1ef/0x440 [ 523.281182][T11052] ? genl_bind+0x360/0x360 [ 523.285606][T11052] ? netlink_ack+0x1160/0x1160 [ 523.290380][T11052] ? down_read+0x1a8/0x2d0 [ 523.294800][T11052] genl_rcv+0x24/0x40 [ 523.298778][T11052] netlink_unicast+0x7ad/0x920 [ 523.303546][T11052] netlink_sendmsg+0x8ad/0xbd0 [ 523.308328][T11052] ? netlink_getsockopt+0x550/0x550 [ 523.313533][T11052] ? apparmor_socket_sendmsg+0x8a/0x330 [ 523.319081][T11052] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 523.324362][T11052] ? security_socket_sendmsg+0x7c/0xa0 [ 523.329832][T11052] ? netlink_getsockopt+0x550/0x550 [ 523.335036][T11052] ____sys_sendmsg+0x5ed/0x9a0 [ 523.339806][T11052] ? __sys_sendmsg_sock+0x30/0x30 [ 523.344822][T11052] ? __import_iovec+0x306/0x510 [ 523.349677][T11052] ? import_iovec+0x6f/0xa0 [ 523.354182][T11052] ___sys_sendmsg+0x2a2/0x360 [ 523.358857][T11052] ? __sys_sendmsg+0x2a0/0x2a0 [ 523.363633][T11052] ? ktime_get+0x7b/0x270 [ 523.367981][T11052] __se_sys_sendmsg+0x1c3/0x2b0 [ 523.372831][T11052] ? __x64_sys_sendmsg+0x80/0x80 [ 523.377778][T11052] ? lockdep_hardirqs_on+0x94/0x140 [ 523.382980][T11052] do_syscall_64+0x4c/0xa0 [ 523.387391][T11052] ? clear_bhb_loop+0x60/0xb0 [ 523.392075][T11052] ? clear_bhb_loop+0x60/0xb0 [ 523.396757][T11052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.402650][T11052] RIP: 0033:0x7f094ad9e159 [ 523.407057][T11052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.426658][T11052] RSP: 002b:00007f094bced028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.435066][T11052] RAX: ffffffffffffffda RBX: 00007f094b025fa0 RCX: 00007f094ad9e159 [ 523.443033][T11052] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 523.450996][T11052] RBP: 00007f094ae3503b R08: 0000000000000000 R09: 0000000000000000 [ 523.458959][T11052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.466920][T11052] R13: 00007f094b026038 R14: 00007f094b025fa0 R15: 00007ffe3538e6e8 [ 523.474896][T11052] [ 526.638383][T11084] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 526.646228][T11084] #PF: supervisor instruction fetch in kernel mode [ 526.652727][T11084] #PF: error_code(0x0010) - not-present page [ 526.658713][T11084] PGD 4c44f067 P4D 4c44f067 PUD 0 [ 526.663842][T11084] Oops: 0010 [#1] PREEMPT SMP KASAN [ 526.669045][T11084] CPU: 0 PID: 11084 Comm: syz.2.2369 Not tainted syzkaller #0 [ 526.676503][T11084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 526.686562][T11084] RIP: 0010:0x0 [ 526.690033][T11084] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 526.697400][T11084] RSP: 0018:ffffc900034e7298 EFLAGS: 00010246 [ 526.703475][T11084] RAX: 1ffffffff162c67b RBX: 1ffff9200069ce64 RCX: 0000000000000000 [ 526.711449][T11084] RDX: ffffc900034e7340 RSI: 0000000000000001 RDI: ffff88807cb34000 [ 526.719437][T11084] RBP: ffffc900034e73b0 R08: ffff88807cb3403f R09: 1ffff1100f966807 [ 526.727394][T11084] R10: dffffc0000000000 R11: ffffed100f966808 R12: ffffe8ffffc413b8 [ 526.735362][T11084] R13: ffffffff8b1633d8 R14: 0000000000000000 R15: ffff88807cb34000 [ 526.743325][T11084] FS: 00007f5afa3d66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 526.752263][T11084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 526.758854][T11084] CR2: ffffffffffffffd6 CR3: 000000003d99c000 CR4: 00000000003506f0 [ 526.766837][T11084] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 526.774828][T11084] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 526.782800][T11084] Call Trace: [ 526.786062][T11084] [ 526.788975][T11084] bond_xdp_xmit+0x31e/0x550 [ 526.793565][T11084] ? bond_xdp_xmit+0x94/0x550 [ 526.798266][T11084] ? bond_xdp+0x8c0/0x8c0 [ 526.802607][T11084] bq_xmit_all+0xca9/0x1120 [ 526.807119][T11084] ? perf_trace_preemptirq_template+0x268/0x320 [ 526.813357][T11084] ? __dev_flush+0x1b0/0x1b0 [ 526.817941][T11084] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 526.823912][T11084] ? lock_chain_count+0x20/0x20 [ 526.828753][T11084] ? rcu_is_watching+0x11/0xa0 [ 526.833510][T11084] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 526.839650][T11084] ? lockdep_hardirqs_on+0x94/0x140 [ 526.844842][T11084] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 526.850988][T11084] bq_enqueue+0x338/0x3d0 [ 526.855320][T11084] dev_map_enqueue_multi+0xf89/0x10f0 [ 526.860694][T11084] ? dev_map_enqueue+0x330/0x330 [ 526.865623][T11084] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 526.871775][T11084] ? rcu_read_lock_held+0x40/0x40 [ 526.876790][T11084] xdp_do_redirect_frame+0x477/0x650 [ 526.882070][T11084] bpf_test_run_xdp_live+0xa8b/0x1a90 [ 526.887436][T11084] ? 0xffffffffa00041c0 [ 526.891577][T11084] ? text_poke_copy+0x7b/0x90 [ 526.896252][T11084] ? bpf_test_run_xdp_live+0x515/0x1a90 [ 526.901786][T11084] ? xdp_convert_md_to_buff+0x330/0x330 [ 526.907332][T11084] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 526.913562][T11084] ? bpf_prog_change_xdp+0xe/0x30 [ 526.918574][T11084] bpf_prog_test_run_xdp+0x757/0xf80 [ 526.923854][T11084] ? __lock_acquire+0x7c40/0x7c40 [ 526.928872][T11084] ? dev_put+0x80/0x80 [ 526.932931][T11084] ? dev_put+0x80/0x80 [ 526.936991][T11084] bpf_prog_test_run+0x31c/0x390 [ 526.941921][T11084] __sys_bpf+0x62b/0x780 [ 526.946152][T11084] ? bpf_link_show_fdinfo+0x380/0x380 [ 526.951516][T11084] ? lock_chain_count+0x20/0x20 [ 526.956358][T11084] __x64_sys_bpf+0x78/0x90 [ 526.960761][T11084] do_syscall_64+0x4c/0xa0 [ 526.965166][T11084] ? clear_bhb_loop+0x60/0xb0 [ 526.969830][T11084] ? clear_bhb_loop+0x60/0xb0 [ 526.974496][T11084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.980393][T11084] RIP: 0033:0x7f5af959e159 [ 526.984796][T11084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.004389][T11084] RSP: 002b:00007f5afa3d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 527.012794][T11084] RAX: ffffffffffffffda RBX: 00007f5af9825fa0 RCX: 00007f5af959e159 [ 527.020753][T11084] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 527.028710][T11084] RBP: 00007f5af963503b R08: 0000000000000000 R09: 0000000000000000 [ 527.036666][T11084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.044622][T11084] R13: 00007f5af9826038 R14: 00007f5af9825fa0 R15: 00007fff05b68198 [ 527.052583][T11084] [ 527.055609][T11084] Modules linked in: [ 527.059499][T11084] CR2: 0000000000000000 [ 527.063651][T11084] ---[ end trace 0000000000000000 ]--- [ 527.069091][T11084] RIP: 0010:0x0 [ 527.072544][T11084] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 527.079892][T11084] RSP: 0018:ffffc900034e7298 EFLAGS: 00010246 [ 527.085942][T11084] RAX: 1ffffffff162c67b RBX: 1ffff9200069ce64 RCX: 0000000000000000 [ 527.093901][T11084] RDX: ffffc900034e7340 RSI: 0000000000000001 RDI: ffff88807cb34000 [ 527.101858][T11084] RBP: ffffc900034e73b0 R08: ffff88807cb3403f R09: 1ffff1100f966807 [ 527.109820][T11084] R10: dffffc0000000000 R11: ffffed100f966808 R12: ffffe8ffffc413b8 [ 527.117775][T11084] R13: ffffffff8b1633d8 R14: 0000000000000000 R15: ffff88807cb34000 [ 527.125733][T11084] FS: 00007f5afa3d66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 527.134646][T11084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 527.141213][T11084] CR2: ffffffffffffffd6 CR3: 000000003d99c000 CR4: 00000000003506f0 [ 527.149175][T11084] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 527.157129][T11084] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 527.165115][T11084] Kernel panic - not syncing: Fatal exception in interrupt [ 527.172528][T11084] Kernel Offset: disabled [ 527.176839][T11084] Rebooting in 86400 seconds..