last executing test programs: 11m20.012095803s ago: executing program 0 (id=4910): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) 11m18.778859665s ago: executing program 0 (id=4913): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x20040044) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a8001600a40001400600", 0x3a}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a00", 0x36}], 0x1}, 0x4840) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 11m18.396318955s ago: executing program 0 (id=4926): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0x20, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc88643acd3aaf000c0057bd21762ae3fe8892b69c", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') 11m17.320861242s ago: executing program 0 (id=4924): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x8}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 11m17.01272787s ago: executing program 0 (id=4927): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x8010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x100000000bf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r2], 0x9a) 11m16.082958053s ago: executing program 0 (id=4928): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90524fc600d000347fe000100ff3582c137153e370248018010001700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair(0x22, 0x5, 0x25, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_clone(0x41260080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) 11m0.731226385s ago: executing program 32 (id=4928): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90524fc600d000347fe000100ff3582c137153e370248018010001700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair(0x22, 0x5, 0x25, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_clone(0x41260080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) 4.929907404s ago: executing program 4 (id=7402): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x3, 0x6c99e481}, 0x100001, 0xca, 0x5, 0x5, 0xd12, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000010040)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xc, 0xff}, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000080)="c3ff03077d4423bdb89e1df0080041fddcaf250d6e6e", 0x0, 0x40, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 4.599441512s ago: executing program 1 (id=7403): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000002500)=[{0x10, 0x101, 0x2}], 0x10}, 0x2002c404) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400004}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0x3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000000000160af365040014000d0002008bc3a0e68bd607ab6b716b7feab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040110) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) 3.987001148s ago: executing program 4 (id=7404): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 3.980444748s ago: executing program 1 (id=7407): r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 3.808926143s ago: executing program 3 (id=7408): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x1, @remote, 'batadv_slave_1\x00'}}, 0x80, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x120) 3.576418649s ago: executing program 2 (id=7409): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, {0xa, 0x1000, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 3.575660929s ago: executing program 1 (id=7417): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 3.575113159s ago: executing program 4 (id=7410): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.495087871s ago: executing program 3 (id=7411): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) getpid() syz_clone(0x56114400, &(0x7f0000000180)="6c65298663438e28757e06b38c5c6d50167ec8de6d9d7dfff788e7a17299eb745ff44af9c6433587e672c2", 0x2b, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x2, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) 3.300911725s ago: executing program 4 (id=7412): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x3f}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10d6f3, 0xfffffffffffffffc, 0xcfb5, 0x1, 0x0, 0x4, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305828, &(0x7f0000000040)=0x20000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x10000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0xffff0000, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 2.960970044s ago: executing program 2 (id=7413): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x5, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) 2.577319084s ago: executing program 1 (id=7414): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x3, 0x6c99e481}, 0x100001, 0xca, 0x5, 0x5, 0xd12, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000010040)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xc, 0xff}, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000080)="c3ff03077d4423bdb89e1df0080041fddcaf250d6e6e", 0x0, 0x40, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 2.361312059s ago: executing program 3 (id=7415): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e12", 0x28}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r1) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 2.271943411s ago: executing program 4 (id=7416): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107383, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x7af, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000028000b6394f90509a16dd8e50000cc57", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x40000240) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x4}, 0x50) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fc00000000000e1208000f0100810401a80016eaa40001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca", 0x95}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.217972533s ago: executing program 2 (id=7418): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000002500)=[{0x10, 0x101, 0x2}], 0x10}, 0x2002c404) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400004}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0x3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000000000160af365040014000d0002008bc3a0e68bd607ab6b716b7feab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040110) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) 1.106304241s ago: executing program 3 (id=7419): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) 986.969015ms ago: executing program 2 (id=7420): r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 982.822844ms ago: executing program 1 (id=7428): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x3, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fea9750c33f65adbbc5dffffff0000000009000000850000004f0000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc6}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8942, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="0200c100d8f1"}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0xf}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4, @multicast1}}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000600)="d8b615aacdab519d63944f927b201c84b828a3d192acae7969505ba524984372bda8494ded78bcbf1483a8e2e3d4dcacffaa21caf2850d2a170a6a3775b2ef97173848f90f761c4ed9c7e2c775d9ca44b252fd0b9fcb0fe6b4a923ee33f480626f56e0b345882f48b309e3902eec3c4f7ef964ff6dc85466f97c2863bcd42092fd738614832e92d339f6351c87cb292a896bdad41c1cec9e5b5a74d74d042b8df87aae81900dd25ce501e803c066fdf03951c29851ce6bac08c78ea96db84fb80361667bfbd73ad63fa1f963135f6e352322db79a1d4ff0db99f95fdc9a83bb1e2434def49948a6b246c53c0ab5d7f3e5cdcc79faee30788d87cfa0a3881fd679d146b522630cad2840fdf1e05b035013c0a1d96e91daaafe4e354b20f00b0e48a9c1f4f0a661343153d503d080e16db3f4079c83e1f47607dab39794be6310df69f459dadab84e447828f0a3804a8d9018dc8e73ff9b7da902619e99a47d880081a9196f4b5fb52798d5c6a36db0d5383891781b449fc36ab7bdd03be04d542532ab4b3c0dced15b8d6fb44efe4a96a868ed3eb86a7718ccd5226acf4ae1a5f8bff145388959780290f3c1889a356f9a87f3777e420c816782141de4e7ec22b004e8a7388c5a9b2e34067151f0ad211db47f794af59abcd6a9afdf50599905188c861dbe2d4a8e6139cb46f56e267be93d081538f4a681e68f28942f96922f3995d2eddfaed236eb48cf2971021491ac7", 0x211}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe4030413"], 0x10b8}, 0xff00) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x40305828, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) 824.176779ms ago: executing program 4 (id=7421): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x3fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg$kcm(r1, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x0) 688.709262ms ago: executing program 3 (id=7422): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x41, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x63, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8940, &(0x7f0000000080)) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) close(0xffffffffffffffff) 519.831156ms ago: executing program 2 (id=7423): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x12, 0x33, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000070e131a5410927f446adf2fb12c00000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0], 0x0, 0xffff0000, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6ce1}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) 481.117507ms ago: executing program 1 (id=7424): perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x2, 0x0, 0x10, 0x0, 0x0, 0x400, 0x1f378d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x40}, 0x0, 0x3ff, 0x200, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$kcm(0x22, 0x7, 0x21) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466506000e800a00142603600e1208000f0000000406a80016c0080009400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000000000002e52a52ecfc584ae2bb50e801aa88d19a248ceb14b3dacf91983"]) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x6, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0}, 0x8000, 0x7, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x1000000}]}]}}, &(0x7f00000002c0)=""/147, 0x42, 0x93, 0x1}, 0x28) 247.67µs ago: executing program 2 (id=7425): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) getpid() syz_clone(0x56114400, &(0x7f0000000180)="6c65298663438e28757e06b38c5c6d50167ec8de6d9d7dfff788e7a17299eb745ff44af9c6433587e672c2", 0x2b, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x2, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) 0s ago: executing program 3 (id=7426): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x1, @remote, 'batadv_slave_1\x00'}}, 0x80, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141399ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc0000001a002364bbd93964a8d0bdc802b9be2500"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x78) kernel console output (not intermixed with test programs): en creating new route [ 914.299162][T16042] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4027'. [ 914.935184][T16048] macsec0: entered promiscuous mode [ 914.943481][T16048] macsec0: entered allmulticast mode [ 914.951393][T16048] veth1_macvtap: entered allmulticast mode [ 915.801664][T12270] Bluetooth: hci2: unexpected subevent 0x0a length: 11 < 30 [ 916.397934][T16070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 916.405831][T16070] IPv6: NLM_F_CREATE should be set when creating new route [ 916.415016][T16070] IPv6: NLM_F_CREATE should be set when creating new route [ 916.423532][T16070] IPv6: NLM_F_CREATE should be set when creating new route [ 917.924015][T16085] macsec0: entered promiscuous mode [ 917.930306][T16085] macsec0: entered allmulticast mode [ 917.942311][T16085] veth1_macvtap: entered allmulticast mode [ 918.368671][T16092] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4042'. [ 918.722839][T16100] netlink: 'syz.2.4044': attribute type 10 has an invalid length. [ 918.893700][T16100] team0: Device hsr_slave_0 failed to register rx_handler [ 919.258481][T16113] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4053'. [ 919.480318][T16113] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4053'. [ 919.496649][T16115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 919.504454][T16115] IPv6: NLM_F_CREATE should be set when creating new route [ 919.512780][T16115] IPv6: NLM_F_CREATE should be set when creating new route [ 919.520511][T16115] IPv6: NLM_F_CREATE should be set when creating new route [ 921.118217][T16147] netlink: 'syz.3.4061': attribute type 10 has an invalid length. [ 921.239271][T16147] team0: Device hsr_slave_0 failed to register rx_handler [ 922.011134][T16153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 922.018834][T16153] IPv6: NLM_F_CREATE should be set when creating new route [ 922.026902][T16153] IPv6: NLM_F_CREATE should be set when creating new route [ 922.034800][T16153] IPv6: NLM_F_CREATE should be set when creating new route [ 927.631129][T16191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 927.720009][T12270] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 928.919813][T16213] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4090'. [ 928.947881][T16213] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4090'. [ 929.185229][T16223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 931.878908][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.885733][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.658311][T16241] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4103'. [ 932.687362][T16241] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4103'. [ 933.088431][T16253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 936.490150][T16279] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4115'. [ 936.646812][T16279] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4115'. [ 937.076032][T16289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 938.360662][T16303] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4128'. [ 938.474077][T16303] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4128'. [ 938.836611][T12270] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 939.284058][T16319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 941.997833][T12270] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 945.223050][T16360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 945.552707][T16366] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 946.667623][T16383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 947.028668][T16393] netlink: 'syz.3.4162': attribute type 2 has an invalid length. [ 947.046418][T16393] netlink: 'syz.3.4162': attribute type 2 has an invalid length. [ 947.054727][T16393] netlink: 199676 bytes leftover after parsing attributes in process `syz.3.4162'. [ 948.497936][T16414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 952.913420][T16443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 956.604458][T16467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 957.725069][T16493] netlink: 'syz.1.4207': attribute type 10 has an invalid length. [ 960.361058][T16493] team0: Device hsr_slave_0 failed to register rx_handler [ 961.220972][T16508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 962.158144][T16527] netlink: 'syz.3.4222': attribute type 10 has an invalid length. [ 962.171867][T16527] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4222'. [ 962.180907][T16527] hsr0: entered promiscuous mode [ 962.191589][T16527] bridge0: port 3(hsr0) entered blocking state [ 962.198179][T16527] bridge0: port 3(hsr0) entered disabled state [ 962.222640][T16527] hsr0: entered allmulticast mode [ 962.239451][T16527] hsr_slave_0: entered allmulticast mode [ 962.247362][T16527] hsr_slave_1: entered allmulticast mode [ 962.261808][T16527] bridge0: port 3(hsr0) entered blocking state [ 962.268261][T16527] bridge0: port 3(hsr0) entered forwarding state [ 964.983407][T16544] syz.1.4230: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 965.011669][T16544] CPU: 0 PID: 16544 Comm: syz.1.4230 Not tainted syzkaller #0 [ 965.019211][T16544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 965.029326][T16544] Call Trace: [ 965.032665][T16544] [ 965.035655][T16544] dump_stack_lvl+0x18c/0x250 [ 965.040423][T16544] ? show_regs_print_info+0x20/0x20 [ 965.045695][T16544] ? load_image+0x420/0x420 [ 965.050288][T16544] ? __rcu_read_unlock+0x7c/0xd0 [ 965.055295][T16544] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 965.061803][T16544] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 965.068391][T16544] warn_alloc+0x246/0x340 [ 965.072795][T16544] ? stack_trace_save+0xaa/0x100 [ 965.077819][T16544] ? zone_watermark_ok_safe+0x230/0x230 [ 965.083470][T16544] ? kasan_set_track+0x5f/0x70 [ 965.088299][T16544] ? kasan_set_track+0x4e/0x70 [ 965.093125][T16544] ? __kasan_kmalloc+0x8f/0xa0 [ 965.097956][T16544] ? xsk_init_queue+0xad/0x100 [ 965.102789][T16544] ? xsk_setsockopt+0x4c9/0x750 [ 965.107705][T16544] ? do_sock_setsockopt+0x175/0x1a0 [ 965.112969][T16544] ? __x64_sys_setsockopt+0x182/0x200 [ 965.118421][T16544] __vmalloc_node_range+0x129/0x1320 [ 965.123896][T16544] ? free_vm_area+0x50/0x50 [ 965.128522][T16544] vmalloc_user+0x74/0x80 [ 965.132928][T16544] ? xskq_create+0xbf/0x170 [ 965.137504][T16544] xskq_create+0xbf/0x170 [ 965.141922][T16544] xsk_init_queue+0xad/0x100 [ 965.146605][T16544] xsk_setsockopt+0x4c9/0x750 [ 965.151363][T16544] ? xsk_poll+0x670/0x670 [ 965.155783][T16544] ? __fget_files+0x28/0x460 [ 965.160422][T16544] ? aa_sock_opt_perm+0x74/0x100 [ 965.165418][T16544] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 965.171051][T16544] ? security_socket_setsockopt+0x7e/0xa0 [ 965.176852][T16544] ? xsk_poll+0x670/0x670 [ 965.181271][T16544] do_sock_setsockopt+0x175/0x1a0 [ 965.186362][T16544] ? __fdget+0x180/0x210 [ 965.190691][T16544] __x64_sys_setsockopt+0x182/0x200 [ 965.195986][T16544] do_syscall_64+0x55/0xb0 [ 965.200466][T16544] ? clear_bhb_loop+0x40/0x90 [ 965.205211][T16544] ? clear_bhb_loop+0x40/0x90 [ 965.209962][T16544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 965.215921][T16544] RIP: 0033:0x7f612e79e0d9 [ 965.220401][T16544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.240078][T16544] RSP: 002b:00007f612f5d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 965.248578][T16544] RAX: ffffffffffffffda RBX: 00007f612ea25fa0 RCX: 00007f612e79e0d9 [ 965.256609][T16544] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 965.264642][T16544] RBP: 00007f612e835024 R08: 0000000000004a00 R09: 0000000000000000 [ 965.272674][T16544] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 965.280708][T16544] R13: 00007f612ea26038 R14: 00007f612ea25fa0 R15: 00007ffc29049b58 [ 965.288812][T16544] [ 965.371514][T16544] Mem-Info: [ 965.374795][T16544] active_anon:14757 inactive_anon:0 isolated_anon:0 [ 965.374795][T16544] active_file:18560 inactive_file:40294 isolated_file:0 [ 965.374795][T16544] unevictable:768 dirty:195 writeback:0 [ 965.374795][T16544] slab_reclaimable:10129 slab_unreclaimable:97194 [ 965.374795][T16544] mapped:23969 shmem:1361 pagetables:547 [ 965.374795][T16544] sec_pagetables:0 bounce:0 [ 965.374795][T16544] kernel_misc_reclaimable:0 [ 965.374795][T16544] free:1327170 free_pcp:13867 free_cma:0 [ 965.472417][T16544] Node 0 active_anon:59028kB inactive_anon:0kB active_file:74240kB inactive_file:160972kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:95876kB dirty:780kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10192kB pagetables:2088kB sec_pagetables:0kB all_unreclaimable? no [ 965.543962][T16544] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 965.601790][T16544] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 965.670441][T16544] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 965.685994][T16544] Node 0 DMA32 free:1391616kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:58692kB inactive_anon:0kB active_file:74240kB inactive_file:160144kB unevictable:1536kB writepending:780kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:41676kB local_pcp:21344kB free_cma:0kB [ 965.740175][T16544] lowmem_reserve[]: 0 0 0 0 0 [ 965.768979][T16544] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 965.821598][T16544] lowmem_reserve[]: 0 0 0 0 0 [ 965.827965][T16544] Node 1 Normal free:3901700kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14784kB local_pcp:9248kB free_cma:0kB [ 965.869685][T16544] lowmem_reserve[]: 0 0 0 0 0 [ 965.876823][T16544] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 965.911221][T16544] Node 0 DMA32: 175*4kB (UME) 410*8kB (UME) 237*16kB (ME) 375*32kB (UME) 621*64kB (UME) 635*128kB (UME) 323*256kB (UME) 132*512kB (UM) 53*1024kB (UME) 11*2048kB (UM) 250*4096kB (UM) = 1391868kB [ 965.940634][T16544] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 965.960941][T16544] Node 1 Normal: 215*4kB (UME) 51*8kB (UME) 53*16kB (UME) 154*32kB (UME) 52*64kB (UE) 9*128kB (UME) 2*256kB (UE) 1*512kB (M) 0*1024kB 1*2048kB (E) 949*4096kB (M) = 3901700kB [ 965.991889][T16544] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 966.004662][T16544] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 966.027161][T16544] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 966.038619][T16544] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 966.048914][T16544] 60215 total pagecache pages [ 966.056112][T16544] 0 pages in swap cache [ 966.061616][T16544] Free swap = 124996kB [ 966.065802][T16544] Total swap = 124996kB [ 966.069970][T16544] 2097051 pages RAM [ 966.074815][T16558] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.4235'. [ 966.084424][T16544] 0 pages HighMem/MovableOnly [ 966.089123][T16544] 416955 pages reserved [ 966.095855][T16558] netlink: 4548 bytes leftover after parsing attributes in process `syz.3.4235'. [ 966.105352][T16544] 0 pages cma reserved [ 966.121602][T16558] netlink: 'syz.3.4235': attribute type 1 has an invalid length. [ 967.063962][T16570] netlink: 'syz.0.4240': attribute type 10 has an invalid length. [ 967.241702][T16576] sock: sock_timestamping_bind_phc: sock not bind to device [ 967.441044][T16570] team0: Device vxcan1 is of different type [ 968.902748][T16603] sock: sock_timestamping_bind_phc: sock not bind to device [ 969.196044][T16613] netlink: 'syz.2.4260': attribute type 10 has an invalid length. [ 969.525305][T16613] vxcan1: entered promiscuous mode [ 969.545850][T16613] vxcan1: entered allmulticast mode [ 969.562934][T16613] team0: Device vxcan1 is of different type [ 972.488614][T16630] sock: sock_timestamping_bind_phc: sock not bind to device [ 972.949285][T16648] netlink: 'syz.3.4274': attribute type 10 has an invalid length. [ 972.964294][T16648] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4274'. [ 972.978281][T16648] batman_adv: batadv0: Adding interface: virt_wifi0 [ 972.986394][T16648] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.012553][T16648] batman_adv: batadv0: Interface activated: virt_wifi0 [ 973.422941][T16663] netlink: 'syz.2.4282': attribute type 2 has an invalid length. [ 973.451977][T16663] netlink: 'syz.2.4282': attribute type 3 has an invalid length. [ 973.460093][T16663] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4282'. [ 975.553634][T16689] netlink: 'syz.3.4295': attribute type 2 has an invalid length. [ 975.570603][T16689] netlink: 'syz.3.4295': attribute type 3 has an invalid length. [ 975.579361][T16689] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4295'. [ 975.795191][T16700] netlink: 'syz.3.4296': attribute type 10 has an invalid length. [ 975.850777][T16700] team0: Device vxcan1 is of different type [ 976.837924][T16717] netlink: 'syz.0.4306': attribute type 2 has an invalid length. [ 976.864409][T16717] netlink: 'syz.0.4306': attribute type 3 has an invalid length. [ 976.888838][T16717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4306'. [ 977.067744][T16724] netlink: 'syz.1.4308': attribute type 29 has an invalid length. [ 977.098136][T16724] netlink: 'syz.1.4308': attribute type 29 has an invalid length. [ 980.423552][T16757] netlink: 'syz.1.4319': attribute type 2 has an invalid length. [ 980.451267][T16757] netlink: 'syz.1.4319': attribute type 3 has an invalid length. [ 980.499151][T16757] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4319'. [ 981.417201][T16765] netlink: 'syz.0.4332': attribute type 10 has an invalid length. [ 981.426701][T16765] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4332'. [ 981.588472][T16765] batman_adv: batadv0: Adding interface: virt_wifi0 [ 981.610906][T16765] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.721744][T16765] batman_adv: batadv0: Interface activated: virt_wifi0 [ 985.704970][T16782] netlink: 'syz.1.4330': attribute type 3 has an invalid length. [ 985.721493][T16782] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4330'. [ 987.188189][T16801] syzkaller0: entered promiscuous mode [ 987.195678][T16801] syzkaller0: entered allmulticast mode [ 990.061191][T16843] netlink: 'syz.1.4355': attribute type 10 has an invalid length. [ 990.078394][T16843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4355'. [ 990.148152][T16843] batman_adv: batadv0: Adding interface: virt_wifi0 [ 990.161737][T16843] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 990.200330][T16843] batman_adv: batadv0: Interface activated: virt_wifi0 [ 990.604363][T16847] syzkaller0: entered promiscuous mode [ 990.609999][T16847] syzkaller0: entered allmulticast mode [ 992.640290][T16878] netlink: 'syz.2.4367': attribute type 10 has an invalid length. [ 993.127270][T16878] team0: Device vxcan1 is of different type [ 993.335101][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.348230][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.624276][T16912] netlink: 'syz.2.4379': attribute type 10 has an invalid length. [ 997.651615][T16912] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4379'. [ 997.694844][T16912] batman_adv: batadv0: Adding interface: virt_wifi0 [ 997.711705][T16912] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.754279][T16912] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1000.964801][T16946] netlink: 'syz.0.4396': attribute type 10 has an invalid length. [ 1001.021761][T16946] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4396'. [ 1001.882919][T16970] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4408'. [ 1002.054554][T16974] netlink: 'syz.0.4409': attribute type 10 has an invalid length. [ 1002.068398][T16974] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4409'. [ 1005.376092][T17006] netlink: 'syz.1.4423': attribute type 10 has an invalid length. [ 1005.386646][T17006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4423'. [ 1006.682907][T17048] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.4439'. [ 1006.842326][T17048] netlink: del zone limit has 8 unknown bytes [ 1009.329330][T17061] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4442'. [ 1010.133502][T17086] syzkaller0: entered promiscuous mode [ 1010.147666][T17086] syzkaller0: entered allmulticast mode [ 1010.979339][T17105] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.4459'. [ 1011.006128][T17105] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 1012.742888][T17113] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4460'. [ 1012.893432][T17114] syzkaller0: entered promiscuous mode [ 1012.909180][T17114] syzkaller0: entered allmulticast mode [ 1015.536681][T17147] netlink: 'syz.3.4474': attribute type 10 has an invalid length. [ 1015.545283][T17147] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1015.555213][T17147] ipvlan1: entered promiscuous mode [ 1015.560527][T17147] ipvlan1: entered allmulticast mode [ 1015.567495][T17147] veth0_vlan: entered allmulticast mode [ 1015.584045][T17147] bridge0: port 4(ipvlan1) entered blocking state [ 1015.590595][T17147] bridge0: port 4(ipvlan1) entered disabled state [ 1015.603842][T17147] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1015.790546][T17153] syzkaller0: entered promiscuous mode [ 1015.796335][T17153] syzkaller0: entered allmulticast mode [ 1015.813234][T17155] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4475'. [ 1019.759271][T17207] syzkaller0: entered promiscuous mode [ 1019.770125][T17207] syzkaller0: entered allmulticast mode [ 1019.858345][T17210] netlink: 'syz.1.4500': attribute type 10 has an invalid length. [ 1019.868919][T17210] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4500'. [ 1019.895010][T17210] ipvlan1: entered promiscuous mode [ 1019.900807][T17210] ipvlan1: entered allmulticast mode [ 1019.907746][T17210] veth0_vlan: entered allmulticast mode [ 1019.928797][T17210] bridge0: port 3(ipvlan1) entered blocking state [ 1019.947015][T17210] bridge0: port 3(ipvlan1) entered disabled state [ 1020.074024][T17210] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1021.102141][T17224] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.4506'. [ 1021.358359][T17224] netlink: del zone limit has 8 unknown bytes [ 1023.642684][T17237] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.4513'. [ 1023.677143][T17237] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 1025.037505][T17250] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.4516'. [ 1025.275657][T17250] netlink: del zone limit has 8 unknown bytes [ 1025.640185][T17264] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.4523'. [ 1025.661070][T17264] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 1025.717497][T17262] syzkaller0: entered promiscuous mode [ 1025.723514][T17262] syzkaller0: entered allmulticast mode [ 1028.753978][T17298] netlink: 'syz.1.4536': attribute type 10 has an invalid length. [ 1028.771564][T17298] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4536'. [ 1029.959955][T17323] syzkaller0: entered promiscuous mode [ 1029.969062][T17323] syzkaller0: entered allmulticast mode [ 1032.416332][T17338] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.4552'. [ 1032.471998][T17338] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 1033.660648][T17360] netlink: 'syz.1.4563': attribute type 15 has an invalid length. [ 1033.668767][T17360] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.4563'. [ 1033.882577][T12270] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 1034.142786][T17372] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.4570'. [ 1034.173275][T17372] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 1035.358264][T17393] veth1_macvtap: left allmulticast mode [ 1035.364341][T17393] veth1_macvtap: left promiscuous mode [ 1035.369854][T17393] macsec0: left allmulticast mode [ 1035.447198][T17393] veth1_macvtap: entered promiscuous mode [ 1035.468779][T17393] macsec0: entered allmulticast mode [ 1035.483474][T17393] veth1_macvtap: entered allmulticast mode [ 1036.572206][T17417] netlink: 'syz.3.4590': attribute type 3 has an invalid length. [ 1036.600584][T17417] netlink: 'syz.3.4590': attribute type 1 has an invalid length. [ 1036.692527][T17417] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.4590'. [ 1039.239183][T12270] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 1039.239220][T12270] Bluetooth: unknown link type 101 [ 1039.251647][T12270] Bluetooth: hci2: connection err: -111 [ 1039.873688][T12270] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 1040.482832][T17470] netlink: 'syz.2.4613': attribute type 15 has an invalid length. [ 1040.498751][T17470] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.4613'. [ 1041.150765][T17486] netlink: 'syz.0.4619': attribute type 39 has an invalid length. [ 1041.245518][T17486] macvlan0: entered promiscuous mode [ 1041.250909][T17486] macvlan0: entered allmulticast mode [ 1041.357299][T17491] veth1_macvtap: left allmulticast mode [ 1041.367094][T17491] veth1_macvtap: left promiscuous mode [ 1041.372681][T17491] macsec0: left allmulticast mode [ 1041.510586][T17494] veth1_macvtap: entered promiscuous mode [ 1041.518867][T17494] macsec0: entered allmulticast mode [ 1041.524809][T17494] veth1_macvtap: entered allmulticast mode [ 1041.784133][T17496] netlink: 'syz.0.4626': attribute type 3 has an invalid length. [ 1041.803804][T17496] netlink: 'syz.0.4626': attribute type 1 has an invalid length. [ 1041.813752][T17496] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4626'. [ 1041.924422][T17502] netlink: 'syz.3.4625': attribute type 15 has an invalid length. [ 1041.936237][T17502] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.4625'. [ 1042.607688][T17521] veth1_macvtap: left allmulticast mode [ 1042.629288][T17521] veth1_macvtap: left promiscuous mode [ 1042.641592][T17521] macsec0: left allmulticast mode [ 1042.809600][T17521] veth1_macvtap: entered promiscuous mode [ 1042.815695][T17521] macsec0: entered allmulticast mode [ 1042.821021][T17521] veth1_macvtap: entered allmulticast mode [ 1042.899952][T17528] netlink: 'syz.1.4637': attribute type 3 has an invalid length. [ 1042.931708][T17528] netlink: 'syz.1.4637': attribute type 1 has an invalid length. [ 1042.952139][T17528] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4637'. [ 1044.257287][T17551] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1048.807196][T17580] netlink: 'syz.1.4657': attribute type 10 has an invalid length. [ 1048.878409][T17580] team0: Port device dummy0 added [ 1051.117766][T17631] netlink: 'syz.0.4675': attribute type 10 has an invalid length. [ 1051.290246][T17631] team0: Port device dummy0 added [ 1054.488909][T17673] netlink: 'syz.2.4692': attribute type 10 has an invalid length. [ 1054.683882][T17673] dummy0: entered promiscuous mode [ 1054.892161][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.898536][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.912911][T17673] dummy0: entered allmulticast mode [ 1054.919096][T17673] team0: Port device dummy0 added [ 1057.537004][T17709] netlink: 'syz.2.4705': attribute type 3 has an invalid length. [ 1057.587451][T17709] netlink: 'syz.2.4705': attribute type 1 has an invalid length. [ 1057.639705][T17709] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.4705'. [ 1057.866746][T17713] netlink: 'syz.3.4706': attribute type 10 has an invalid length. [ 1057.910946][T17713] team0: Port device dummy0 added [ 1070.004179][T12270] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 1070.040458][T17804] netlink: 3890 bytes leftover after parsing attributes in process `syz.1.4739'. [ 1070.555662][T17816] netlink: 'syz.1.4743': attribute type 29 has an invalid length. [ 1070.581086][T17819] netlink: 'syz.1.4743': attribute type 29 has an invalid length. [ 1070.582927][T17816] netlink: 'syz.1.4743': attribute type 29 has an invalid length. [ 1070.695324][T17816] netlink: 'syz.1.4743': attribute type 21 has an invalid length. [ 1070.706398][T17816] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4743'. [ 1070.972172][T12270] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 1072.022039][T12270] Bluetooth: hci0: command 0x0406 tx timeout [ 1072.982019][T12270] Bluetooth: hci3: command 0x0406 tx timeout [ 1075.824927][T17860] netlink: 'syz.0.4757': attribute type 29 has an invalid length. [ 1075.866212][T17861] netlink: 'syz.0.4757': attribute type 29 has an invalid length. [ 1076.492618][T17860] netlink: 'syz.0.4757': attribute type 29 has an invalid length. [ 1076.518636][T17862] netlink: 'syz.0.4757': attribute type 21 has an invalid length. [ 1076.541455][T17862] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4757'. [ 1076.757933][T17869] netlink: 3890 bytes leftover after parsing attributes in process `syz.2.4760'. [ 1078.121591][T17894] netlink: 'syz.1.4769': attribute type 10 has an invalid length. [ 1079.048368][T17899] netlink: 'syz.2.4773': attribute type 29 has an invalid length. [ 1079.079199][T17900] netlink: 'syz.2.4773': attribute type 29 has an invalid length. [ 1080.625278][T17899] netlink: 'syz.2.4773': attribute type 29 has an invalid length. [ 1080.639594][T17901] netlink: 'syz.2.4773': attribute type 21 has an invalid length. [ 1080.650943][T17901] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4773'. [ 1081.353276][T17914] netlink: 'syz.0.4778': attribute type 3 has an invalid length. [ 1081.371268][T17914] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4778'. [ 1084.143206][T17954] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4800'. [ 1084.228557][T17958] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4800'. [ 1084.249103][T17954] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4800'. [ 1084.539510][T17961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1086.404839][T17976] netlink: 'syz.1.4793': attribute type 3 has an invalid length. [ 1086.661694][T17976] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4793'. [ 1087.053016][T17986] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4803'. [ 1087.123165][T12270] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 1087.209978][T17986] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4803'. [ 1087.237196][T17987] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4803'. [ 1087.498500][T17988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1088.788998][T18001] syzkaller0: entered promiscuous mode [ 1088.829865][T18001] syzkaller0: entered allmulticast mode [ 1093.220976][T18022] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4815'. [ 1093.281975][T12270] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1093.303416][T18025] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4815'. [ 1093.322527][T18022] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4815'. [ 1094.538361][T18041] syzkaller0: entered promiscuous mode [ 1094.548945][T18041] syzkaller0: entered allmulticast mode [ 1096.906281][T12270] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 1096.963659][T18070] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4826'. [ 1097.030201][T18073] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4826'. [ 1097.044359][T18070] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4826'. [ 1099.160853][T18091] syzkaller0: entered promiscuous mode [ 1099.301796][T18091] syzkaller0: entered allmulticast mode [ 1102.497352][T18123] syzkaller0: entered promiscuous mode [ 1102.517156][T18123] syzkaller0: entered allmulticast mode [ 1106.789381][T18149] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.4848'. [ 1106.799236][T18149] netlink: 4548 bytes leftover after parsing attributes in process `syz.0.4848'. [ 1106.962425][T18162] netlink: 'syz.0.4852': attribute type 39 has an invalid length. [ 1107.574162][T18171] netlink: 'syz.3.4855': attribute type 29 has an invalid length. [ 1107.598464][T18171] netlink: 'syz.3.4855': attribute type 29 has an invalid length. [ 1107.642743][T18177] netlink: 'syz.3.4855': attribute type 29 has an invalid length. [ 1107.792995][T18171] netlink: 'syz.3.4855': attribute type 21 has an invalid length. [ 1107.825719][T18171] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4855'. [ 1108.151053][T18185] netlink: 'syz.3.4860': attribute type 10 has an invalid length. [ 1108.169562][T18185] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4860'. [ 1109.642405][T18191] syzkaller0: entered promiscuous mode [ 1109.652729][T18191] syzkaller0: entered allmulticast mode [ 1112.064927][T18214] netlink: 'syz.0.4870': attribute type 10 has an invalid length. [ 1112.076847][T18214] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4870'. [ 1112.599431][T18230] netlink: 'syz.2.4877': attribute type 3 has an invalid length. [ 1112.637909][T18230] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4877'. [ 1113.252893][T18244] netlink: 'syz.1.4879': attribute type 39 has an invalid length. [ 1113.832916][T18253] netlink: 'syz.1.4884': attribute type 10 has an invalid length. [ 1113.840928][T18253] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4884'. [ 1113.893565][T18255] netlink: 'syz.2.4894': attribute type 39 has an invalid length. [ 1114.348556][T18263] netlink: 'syz.3.4886': attribute type 3 has an invalid length. [ 1114.359905][T18263] netlink: 'syz.3.4886': attribute type 1 has an invalid length. [ 1114.370253][T18263] netlink: 'syz.3.4886': attribute type 6 has an invalid length. [ 1114.381235][T18263] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.4886'. [ 1114.635312][T18269] netlink: 'syz.3.4889': attribute type 3 has an invalid length. [ 1114.652250][T18269] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4889'. [ 1116.045161][T18292] netlink: 'syz.3.4900': attribute type 39 has an invalid length. [ 1116.189649][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.196258][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.569089][T18299] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.4903'. [ 1117.009195][T18309] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.4915'. [ 1118.544405][T18325] validate_nla: 6 callbacks suppressed [ 1118.544444][T18325] netlink: 'syz.0.4913': attribute type 33 has an invalid length. [ 1118.587051][T18325] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4913'. [ 1118.710777][T18327] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4914'. [ 1120.601703][T12270] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 1121.216591][T18366] netlink: 'syz.0.4928': attribute type 1 has an invalid length. [ 1121.237758][T18366] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.4928'. [ 1122.661510][T14265] Bluetooth: hci3: command 0x0406 tx timeout [ 1131.192344][T14265] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1133.786406][T18412] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 1133.798663][T18412] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1133.808117][T18412] CPU: 1 PID: 18412 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1133.815770][T18412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1133.825848][T18412] Workqueue: hci2 hci_rx_work [ 1133.830574][T18412] Call Trace: [ 1133.833867][T18412] [ 1133.836814][T18412] dump_stack_lvl+0x18c/0x250 [ 1133.841515][T18412] ? show_regs_print_info+0x20/0x20 [ 1133.846733][T18412] ? load_image+0x420/0x420 [ 1133.851264][T18412] sysfs_create_dir_ns+0x26e/0x2a0 [ 1133.856392][T18412] ? __lock_acquire+0x7d80/0x7d80 [ 1133.861443][T18412] ? sysfs_warn_dup+0xa0/0xa0 [ 1133.866147][T18412] ? do_raw_spin_unlock+0x121/0x230 [ 1133.871370][T18412] kobject_add_internal+0x617/0xc90 [ 1133.876595][T18412] kobject_add+0x164/0x240 [ 1133.881029][T18412] ? kobject_init+0x1d0/0x1d0 [ 1133.885730][T18412] ? get_device_parent+0x366/0x390 [ 1133.890861][T18412] device_add+0x3fa/0xc40 [ 1133.895205][T18412] hci_conn_add_sysfs+0xd5/0x1e0 [ 1133.900160][T18412] le_conn_complete_evt+0xe9f/0x1480 [ 1133.905465][T18412] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1133.911719][T18412] ? bt_info+0x180/0x180 [ 1133.915974][T18412] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1133.921626][T18412] ? mutex_unlock+0x10/0x10 [ 1133.926141][T18412] ? skb_pull_data+0xf0/0x1f0 [ 1133.930836][T18412] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1133.936743][T18412] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1133.943175][T18412] ? hci_remote_host_features_evt+0x150/0x150 [ 1133.949257][T18412] hci_event_packet+0x7b4/0x1280 [ 1133.954211][T18412] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1133.960383][T18412] ? bis_list+0x290/0x290 [ 1133.964732][T18412] ? kcov_remote_start+0x1b5/0x7e0 [ 1133.969861][T18412] ? hci_send_to_monitor+0xd7/0x4f0 [ 1133.975076][T18412] hci_rx_work+0x43a/0xd60 [ 1133.979510][T18412] ? process_scheduled_works+0x975/0x1600 [ 1133.985265][T18412] process_scheduled_works+0xa60/0x1600 [ 1133.990850][T18412] ? worker_attach_to_pool+0x370/0x370 [ 1133.996332][T18412] ? assign_work+0x3cc/0x5d0 [ 1134.000944][T18412] worker_thread+0xa5e/0xfe0 [ 1134.005565][T18412] ? _raw_spin_unlock+0x40/0x40 [ 1134.010430][T18412] ? __kthread_parkme+0x71/0x1c0 [ 1134.015388][T18412] kthread+0x2fa/0x390 [ 1134.019467][T18412] ? pr_cont_work+0x550/0x550 [ 1134.024161][T18412] ? kthread_blkcg+0xd0/0xd0 [ 1134.028762][T18412] ret_from_fork+0x48/0x80 [ 1134.033191][T18412] ? kthread_blkcg+0xd0/0xd0 [ 1134.037793][T18412] ret_from_fork_asm+0x11/0x20 [ 1134.042593][T18412] [ 1134.047217][T18412] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1134.061127][T18412] Bluetooth: hci2: failed to register connection device [ 1134.119803][T18412] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1134.127770][T18412] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1134.137652][T18412] CPU: 1 PID: 18412 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1134.145319][T18412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1134.155382][T18412] Workqueue: hci1 hci_rx_work [ 1134.160078][T18412] Call Trace: [ 1134.163366][T18412] [ 1134.166305][T18412] dump_stack_lvl+0x18c/0x250 [ 1134.170998][T18412] ? show_regs_print_info+0x20/0x20 [ 1134.176210][T18412] ? load_image+0x420/0x420 [ 1134.180741][T18412] sysfs_create_dir_ns+0x26e/0x2a0 [ 1134.185863][T18412] ? __lock_acquire+0x7d80/0x7d80 [ 1134.190901][T18412] ? sysfs_warn_dup+0xa0/0xa0 [ 1134.195601][T18412] ? do_raw_spin_unlock+0x121/0x230 [ 1134.200820][T18412] kobject_add_internal+0x617/0xc90 [ 1134.206040][T18412] kobject_add+0x164/0x240 [ 1134.210477][T18412] ? kobject_init+0x1d0/0x1d0 [ 1134.215173][T18412] ? get_device_parent+0x366/0x390 [ 1134.220301][T18412] device_add+0x3fa/0xc40 [ 1134.224647][T18412] hci_conn_add_sysfs+0xd5/0x1e0 [ 1134.229601][T18412] le_conn_complete_evt+0xe9f/0x1480 [ 1134.234906][T18412] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1134.241159][T18412] ? bt_info+0x180/0x180 [ 1134.245415][T18412] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1134.251066][T18412] ? mutex_unlock+0x10/0x10 [ 1134.255585][T18412] ? skb_pull_data+0xf0/0x1f0 [ 1134.260279][T18412] hci_le_conn_complete_evt+0x187/0x440 [ 1134.265843][T18412] ? hci_remote_host_features_evt+0x150/0x150 [ 1134.271926][T18412] hci_event_packet+0x7b4/0x1280 [ 1134.276879][T18412] ? __lock_acquire+0x7d80/0x7d80 [ 1134.281918][T18412] ? lock_chain_count+0x20/0x20 [ 1134.286779][T18412] ? bis_list+0x290/0x290 [ 1134.291122][T18412] ? lockdep_hardirqs_on+0x98/0x150 [ 1134.296342][T18412] ? hci_send_to_monitor+0xd7/0x4f0 [ 1134.301554][T18412] hci_rx_work+0x43a/0xd60 [ 1134.305994][T18412] ? process_scheduled_works+0x975/0x1600 [ 1134.311730][T18412] process_scheduled_works+0xa60/0x1600 [ 1134.317314][T18412] ? worker_attach_to_pool+0x370/0x370 [ 1134.322798][T18412] ? assign_work+0x3cc/0x5d0 [ 1134.327407][T18412] worker_thread+0xa5e/0xfe0 [ 1134.332022][T18412] ? _raw_spin_unlock+0x40/0x40 [ 1134.336888][T18412] ? __kthread_parkme+0x71/0x1c0 [ 1134.341844][T18412] kthread+0x2fa/0x390 [ 1134.345923][T18412] ? pr_cont_work+0x550/0x550 [ 1134.350617][T18412] ? kthread_blkcg+0xd0/0xd0 [ 1134.355216][T18412] ret_from_fork+0x48/0x80 [ 1134.359645][T18412] ? kthread_blkcg+0xd0/0xd0 [ 1134.364244][T18412] ret_from_fork_asm+0x11/0x20 [ 1134.369034][T18412] [ 1134.373611][T18412] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1134.387604][T18412] Bluetooth: hci1: failed to register connection device [ 1136.101559][T18412] Bluetooth: hci2: command 0x0406 tx timeout [ 1136.884489][T18412] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1137.285969][T18412] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 1137.293971][T18412] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1137.304977][T18412] CPU: 1 PID: 18412 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1137.312658][T18412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1137.322743][T18412] Workqueue: hci0 hci_rx_work [ 1137.327458][T18412] Call Trace: [ 1137.330762][T18412] [ 1137.333719][T18412] dump_stack_lvl+0x18c/0x250 [ 1137.338454][T18412] ? show_regs_print_info+0x20/0x20 [ 1137.343699][T18412] ? load_image+0x420/0x420 [ 1137.348255][T18412] sysfs_create_dir_ns+0x26e/0x2a0 [ 1137.353385][T18412] ? __lock_acquire+0x7d80/0x7d80 [ 1137.358426][T18412] ? sysfs_warn_dup+0xa0/0xa0 [ 1137.363127][T18412] ? do_raw_spin_unlock+0x121/0x230 [ 1137.368347][T18412] kobject_add_internal+0x617/0xc90 [ 1137.373571][T18412] kobject_add+0x164/0x240 [ 1137.378011][T18412] ? kobject_init+0x1d0/0x1d0 [ 1137.382716][T18412] ? get_device_parent+0x366/0x390 [ 1137.387845][T18412] device_add+0x3fa/0xc40 [ 1137.392190][T18412] hci_conn_add_sysfs+0xd5/0x1e0 [ 1137.397147][T18412] le_conn_complete_evt+0xe9f/0x1480 [ 1137.402455][T18412] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1137.408709][T18412] ? bt_info+0x180/0x180 [ 1137.412967][T18412] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1137.418622][T18412] ? mutex_unlock+0x10/0x10 [ 1137.423143][T18412] ? skb_pull_data+0xf0/0x1f0 [ 1137.427838][T18412] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1137.433745][T18412] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1137.440171][T18412] ? hci_remote_host_features_evt+0x150/0x150 [ 1137.446252][T18412] hci_event_packet+0x7b4/0x1280 [ 1137.451208][T18412] ? __lock_acquire+0x7d80/0x7d80 [ 1137.456246][T18412] ? lock_chain_count+0x20/0x20 [ 1137.461112][T18412] ? bis_list+0x290/0x290 [ 1137.465461][T18412] ? lockdep_hardirqs_on+0x98/0x150 [ 1137.470675][T18412] ? hci_send_to_monitor+0xd7/0x4f0 [ 1137.475891][T18412] hci_rx_work+0x43a/0xd60 [ 1137.480330][T18412] ? process_scheduled_works+0x975/0x1600 [ 1137.486069][T18412] process_scheduled_works+0xa60/0x1600 [ 1137.491657][T18412] ? worker_attach_to_pool+0x370/0x370 [ 1137.497134][T18412] ? assign_work+0x3cc/0x5d0 [ 1137.501742][T18412] worker_thread+0xa5e/0xfe0 [ 1137.506357][T18412] ? _raw_spin_unlock+0x40/0x40 [ 1137.511221][T18412] ? __kthread_parkme+0x71/0x1c0 [ 1137.516181][T18412] kthread+0x2fa/0x390 [ 1137.520262][T18412] ? pr_cont_work+0x550/0x550 [ 1137.524953][T18412] ? kthread_blkcg+0xd0/0xd0 [ 1137.529555][T18412] ret_from_fork+0x48/0x80 [ 1137.533984][T18412] ? kthread_blkcg+0xd0/0xd0 [ 1137.538586][T18412] ret_from_fork_asm+0x11/0x20 [ 1137.543377][T18412] [ 1137.554131][T18412] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1137.572383][T18412] Bluetooth: hci0: failed to register connection device [ 1137.688431][T12270] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1137.698732][T12270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1137.707110][T12270] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1137.729300][T12270] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1137.738088][T12270] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1137.767214][T12270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1138.399573][T18487] chnl_net:caif_netlink_parms(): no params data found [ 1138.499345][T18499] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4975'. [ 1138.695042][T18487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.702384][T18487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.709825][T18487] bridge_slave_0: entered allmulticast mode [ 1138.723697][T18487] bridge_slave_0: entered promiscuous mode [ 1138.738407][T18487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.761610][T18487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.768818][T18487] bridge_slave_1: entered allmulticast mode [ 1138.782536][T18487] bridge_slave_1: entered promiscuous mode [ 1138.822758][T18487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.835563][T18487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.874433][T18487] team0: Port device team_slave_0 added [ 1138.883231][T18487] team0: Port device team_slave_1 added [ 1138.914943][T18487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.922134][T18487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1138.951659][T18487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.970259][T18487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.977531][T18487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1139.006788][T18487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.071138][T18487] hsr_slave_0: entered promiscuous mode [ 1139.079024][T18487] hsr_slave_1: entered promiscuous mode [ 1139.106131][ T1146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.169467][ T1146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.256766][ T1146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.307885][T18487] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1139.335293][ T1146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.350045][T18487] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1139.360528][T18487] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1139.373314][T18487] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1139.548143][T18487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.592204][T18487] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.619147][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.626328][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.641534][T12270] Bluetooth: hci0: command 0x0406 tx timeout [ 1139.753394][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.760584][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1139.781910][T12270] Bluetooth: hci4: command tx timeout [ 1139.890565][T18487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1140.330463][T18487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1140.808601][ T1146] hsr_slave_0: left promiscuous mode [ 1140.822273][ T1146] hsr_slave_1: left promiscuous mode [ 1140.828488][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1140.837681][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.858935][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1140.866564][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.875058][ T1146] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1140.888320][ T1146] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1140.897107][ T1146] bridge_slave_1: left allmulticast mode [ 1140.911665][ T1146] bridge_slave_1: left promiscuous mode [ 1140.917483][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.933801][ T1146] bridge_slave_0: left allmulticast mode [ 1140.939506][ T1146] bridge_slave_0: left promiscuous mode [ 1140.950664][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.001565][ T1146] veth1_macvtap: left allmulticast mode [ 1141.007345][ T1146] veth1_macvtap: left promiscuous mode [ 1141.019246][ T1146] veth0_macvtap: left promiscuous mode [ 1141.024930][ T1146] veth1_vlan: left promiscuous mode [ 1141.030301][ T1146] veth0_vlan: left promiscuous mode [ 1141.603400][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 1141.648699][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 1141.691937][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1141.733949][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1141.865426][T12270] Bluetooth: hci4: command tx timeout [ 1142.027129][ T1146] team0 (unregistering): Port device dummy0 removed [ 1142.079119][ T1146] bond0 (unregistering): Released all slaves [ 1142.278628][T18487] veth0_vlan: entered promiscuous mode [ 1142.305821][T18487] veth1_vlan: entered promiscuous mode [ 1142.396260][T18487] veth0_macvtap: entered promiscuous mode [ 1142.423318][T18487] veth1_macvtap: entered promiscuous mode [ 1142.464330][T18487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1142.475332][T18487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.486435][T18487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1142.498182][T18487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.512075][T18487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1142.539119][T18487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.556073][T18487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1142.579336][T18487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.604079][T18487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.619457][T18487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.630508][T18487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.647355][T18487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.658197][T18487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.675057][T18487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1142.704206][T18487] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.723990][T18487] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.733412][T18487] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.743122][T18487] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.850177][T18520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.869984][T18520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.914744][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.926624][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.941904][T12270] Bluetooth: hci4: command tx timeout [ 1144.347577][T12270] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1144.355406][T12270] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1144.365244][T12270] CPU: 0 PID: 12270 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1144.372931][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1144.383027][T12270] Workqueue: hci2 hci_rx_work [ 1144.387760][T12270] Call Trace: [ 1144.391076][T12270] [ 1144.394049][T12270] dump_stack_lvl+0x18c/0x250 [ 1144.398778][T12270] ? show_regs_print_info+0x20/0x20 [ 1144.404018][T12270] ? load_image+0x420/0x420 [ 1144.408563][T12270] sysfs_create_dir_ns+0x26e/0x2a0 [ 1144.413691][T12270] ? __lock_acquire+0x7d80/0x7d80 [ 1144.418728][T12270] ? sysfs_warn_dup+0xa0/0xa0 [ 1144.423426][T12270] ? do_raw_spin_unlock+0x121/0x230 [ 1144.428649][T12270] kobject_add_internal+0x617/0xc90 [ 1144.433873][T12270] kobject_add+0x164/0x240 [ 1144.438312][T12270] ? kobject_init+0x1d0/0x1d0 [ 1144.443016][T12270] ? get_device_parent+0x366/0x390 [ 1144.448145][T12270] device_add+0x3fa/0xc40 [ 1144.452494][T12270] hci_conn_add_sysfs+0xd5/0x1e0 [ 1144.457453][T12270] le_conn_complete_evt+0xe9f/0x1480 [ 1144.462772][T12270] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1144.469025][T12270] ? bt_info+0x180/0x180 [ 1144.473282][T12270] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1144.478935][T12270] ? mutex_unlock+0x10/0x10 [ 1144.483453][T12270] ? skb_pull_data+0xf0/0x1f0 [ 1144.488167][T12270] hci_le_conn_complete_evt+0x187/0x440 [ 1144.493735][T12270] ? hci_remote_host_features_evt+0x150/0x150 [ 1144.499817][T12270] hci_event_packet+0x7b4/0x1280 [ 1144.504778][T12270] ? __lock_acquire+0x7d80/0x7d80 [ 1144.509821][T12270] ? lock_chain_count+0x20/0x20 [ 1144.514684][T12270] ? bis_list+0x290/0x290 [ 1144.519033][T12270] ? lockdep_hardirqs_on+0x98/0x150 [ 1144.524254][T12270] ? hci_send_to_monitor+0xd7/0x4f0 [ 1144.529475][T12270] hci_rx_work+0x43a/0xd60 [ 1144.533915][T12270] ? process_scheduled_works+0x975/0x1600 [ 1144.539654][T12270] process_scheduled_works+0xa60/0x1600 [ 1144.545246][T12270] ? worker_attach_to_pool+0x370/0x370 [ 1144.550728][T12270] ? assign_work+0x3cc/0x5d0 [ 1144.555340][T12270] worker_thread+0xa5e/0xfe0 [ 1144.559976][T12270] kthread+0x2fa/0x390 [ 1144.564056][T12270] ? pr_cont_work+0x550/0x550 [ 1144.568749][T12270] ? kthread_blkcg+0xd0/0xd0 [ 1144.573351][T12270] ret_from_fork+0x48/0x80 [ 1144.577784][T12270] ? kthread_blkcg+0xd0/0xd0 [ 1144.582387][T12270] ret_from_fork_asm+0x11/0x20 [ 1144.587182][T12270] [ 1144.601502][T12270] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1144.615491][T12270] Bluetooth: hci2: failed to register connection device [ 1146.023422][T18412] Bluetooth: hci4: command tx timeout [ 1146.676533][T18412] Bluetooth: hci2: command 0x0406 tx timeout [ 1155.786763][T18760] netlink: 'syz.2.5018': attribute type 10 has an invalid length. [ 1155.816793][T18760] netlink: 'syz.2.5018': attribute type 10 has an invalid length. [ 1155.826917][T18760] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.5018'. [ 1155.852306][T18760] openvswitch: netlink: Message has 4 unknown bytes. [ 1156.351127][T18412] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 1160.704015][T18825] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5037'. [ 1161.546446][T18844] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1161.589650][T18844] syzkaller0: entered promiscuous mode [ 1161.596697][T18844] syzkaller0: entered allmulticast mode [ 1167.888579][T18880] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5050'. [ 1168.588411][T18900] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5064'. [ 1169.741953][T18932] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5069'. [ 1171.013576][T18967] bridge0: entered promiscuous mode [ 1171.020351][T18967] bridge0: entered allmulticast mode [ 1171.263330][T18971] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5083'. [ 1172.314001][T19006] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1172.367386][T19006] syzkaller0: entered promiscuous mode [ 1172.381481][T19006] syzkaller0: entered allmulticast mode [ 1174.848039][T19028] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5096'. [ 1174.859514][T19032] netlink: 11254 bytes leftover after parsing attributes in process `syz.4.5097'. [ 1174.873695][T19034] netlink: 'syz.4.5097': attribute type 30 has an invalid length. [ 1175.839922][T19064] syzkaller0: entered promiscuous mode [ 1175.871559][T19064] syzkaller0: entered allmulticast mode [ 1176.020970][T19069] netlink: 'syz.3.5106': attribute type 10 has an invalid length. [ 1176.087025][T19069] team0: Port device macvlan0 added [ 1177.638600][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.650003][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.028601][T19144] syzkaller0: entered promiscuous mode [ 1181.034961][T19144] syzkaller0: entered allmulticast mode [ 1181.223506][T19156] netlink: 'syz.4.5122': attribute type 10 has an invalid length. [ 1181.434493][T19156] team0: Port device macvlan0 added [ 1182.432915][T19179] syzkaller0: entered promiscuous mode [ 1182.463853][T19179] syzkaller0: entered allmulticast mode [ 1183.536820][T19196] netlink: 'syz.1.5139': attribute type 10 has an invalid length. [ 1183.714399][T19196] team0: Port device macvlan0 added [ 1184.202777][T19214] netlink: 'syz.2.5154': attribute type 10 has an invalid length. [ 1187.523034][T19223] syzkaller0: entered promiscuous mode [ 1187.547047][T19223] syzkaller0: entered allmulticast mode [ 1187.856764][T19234] netlink: 'syz.1.5151': attribute type 2 has an invalid length. [ 1187.891638][T19234] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5151'. [ 1188.804747][T19252] syzkaller0: entered promiscuous mode [ 1188.836582][T19252] syzkaller0: entered allmulticast mode [ 1189.395276][T18412] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 1190.440277][T18412] Bluetooth: hci4: unknown advertising packet type: 0x20 [ 1192.180026][T18412] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 1193.561698][T19301] netlink: 'syz.4.5180': attribute type 10 has an invalid length. [ 1193.679725][T19301] team0: Port device geneve1 added [ 1194.070636][T18412] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1195.412692][T18412] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 1199.221597][T19396] dummy0: entered promiscuous mode [ 1199.577855][T19403] netlink: 'syz.1.5221': attribute type 10 has an invalid length. [ 1199.763756][T19403] team0: Port device geneve1 added [ 1200.485141][T19419] netlink: 'syz.3.5228': attribute type 10 has an invalid length. [ 1200.511676][T19419] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5228'. [ 1200.601201][T19419] bridge0: port 4(ipvlan1) entered blocking state [ 1200.620917][T19419] bridge0: port 4(ipvlan1) entered disabled state [ 1200.740542][T19419] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1200.832694][T19426] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5231'. [ 1201.165605][T19433] dummy0: entered promiscuous mode [ 1203.383193][T19456] netlink: 'syz.4.5243': attribute type 10 has an invalid length. [ 1203.401625][T19456] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5243'. [ 1203.417978][T19456] ipvlan1: entered promiscuous mode [ 1203.432076][T19456] ipvlan1: entered allmulticast mode [ 1203.451584][T19456] veth0_vlan: entered allmulticast mode [ 1203.564505][T19456] bridge0: port 3(ipvlan1) entered blocking state [ 1203.582489][T19456] bridge0: port 3(ipvlan1) entered disabled state [ 1203.620830][T19456] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1203.846717][T19464] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5246'. [ 1203.879636][T19466] dummy0: entered promiscuous mode [ 1205.396352][T19491] netlink: 'syz.2.5256': attribute type 10 has an invalid length. [ 1205.410333][T19491] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5256'. [ 1205.430330][T19491] ipvlan1: entered promiscuous mode [ 1205.457480][T19491] ipvlan1: entered allmulticast mode [ 1205.472374][T19491] veth0_vlan: entered allmulticast mode [ 1205.510640][T19491] bridge0: port 2(ipvlan1) entered blocking state [ 1205.546263][T19491] bridge0: port 2(ipvlan1) entered disabled state [ 1205.625037][T19491] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1206.016890][T19502] netlink: 'syz.4.5261': attribute type 10 has an invalid length. [ 1206.047666][T19502] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5261'. [ 1206.100011][T19502] team0: entered promiscuous mode [ 1206.113449][T19502] team_slave_0: entered promiscuous mode [ 1206.119480][T19502] team_slave_1: entered promiscuous mode [ 1206.184310][T19502] macvlan0: entered promiscuous mode [ 1206.190294][T19502] geneve1: entered promiscuous mode [ 1206.240231][T18412] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 1206.252000][T18412] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1206.261650][T18412] CPU: 0 PID: 18412 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1206.269339][T18412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1206.279428][T18412] Workqueue: hci0 hci_rx_work [ 1206.284165][T18412] Call Trace: [ 1206.287481][T18412] [ 1206.290448][T18412] dump_stack_lvl+0x18c/0x250 [ 1206.295187][T18412] ? show_regs_print_info+0x20/0x20 [ 1206.300433][T18412] ? load_image+0x420/0x420 [ 1206.305029][T18412] sysfs_create_dir_ns+0x26e/0x2a0 [ 1206.310184][T18412] ? __lock_acquire+0x7d80/0x7d80 [ 1206.315255][T18412] ? sysfs_warn_dup+0xa0/0xa0 [ 1206.319985][T18412] ? do_raw_spin_unlock+0x121/0x230 [ 1206.325239][T18412] kobject_add_internal+0x617/0xc90 [ 1206.330497][T18412] kobject_add+0x164/0x240 [ 1206.334976][T18412] ? kobject_init+0x1d0/0x1d0 [ 1206.339718][T18412] ? get_device_parent+0x366/0x390 [ 1206.344886][T18412] device_add+0x3fa/0xc40 [ 1206.349275][T18412] hci_conn_add_sysfs+0xd5/0x1e0 [ 1206.354270][T18412] le_conn_complete_evt+0xe9f/0x1480 [ 1206.359620][T18412] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1206.365898][T18412] ? bt_info+0x180/0x180 [ 1206.370188][T18412] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1206.375878][T18412] ? mutex_unlock+0x10/0x10 [ 1206.380424][T18412] ? skb_pull_data+0xf0/0x1f0 [ 1206.385155][T18412] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1206.391093][T18412] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1206.397554][T18412] ? hci_remote_host_features_evt+0x150/0x150 [ 1206.403664][T18412] hci_event_packet+0x7b4/0x1280 [ 1206.408657][T18412] ? __lock_acquire+0x7d80/0x7d80 [ 1206.413727][T18412] ? lock_chain_count+0x20/0x20 [ 1206.418618][T18412] ? bis_list+0x290/0x290 [ 1206.423005][T18412] ? lockdep_hardirqs_on+0x98/0x150 [ 1206.428265][T18412] ? hci_send_to_monitor+0xd7/0x4f0 [ 1206.433519][T18412] hci_rx_work+0x43a/0xd60 [ 1206.438002][T18412] ? process_scheduled_works+0x975/0x1600 [ 1206.443772][T18412] process_scheduled_works+0xa60/0x1600 [ 1206.449444][T18412] ? worker_attach_to_pool+0x370/0x370 [ 1206.454965][T18412] ? assign_work+0x3cc/0x5d0 [ 1206.459613][T18412] worker_thread+0xa5e/0xfe0 [ 1206.464281][T18412] ? _raw_spin_unlock+0x40/0x40 [ 1206.469167][T18412] ? __kthread_parkme+0x71/0x1c0 [ 1206.474174][T18412] kthread+0x2fa/0x390 [ 1206.478271][T18412] ? pr_cont_work+0x550/0x550 [ 1206.482993][T18412] ? kthread_blkcg+0xd0/0xd0 [ 1206.487618][T18412] ret_from_fork+0x48/0x80 [ 1206.492070][T18412] ? kthread_blkcg+0xd0/0xd0 [ 1206.496697][T18412] ret_from_fork_asm+0x11/0x20 [ 1206.501556][T18412] [ 1206.507416][T18412] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1206.521624][T18412] Bluetooth: hci0: failed to register connection device [ 1206.522526][T19502] team0: entered allmulticast mode [ 1206.534522][T19502] team_slave_0: entered allmulticast mode [ 1206.540480][T19502] team_slave_1: entered allmulticast mode [ 1206.560475][T19502] macvlan0: entered allmulticast mode [ 1206.590566][T19502] veth1_vlan: entered allmulticast mode [ 1206.596546][T19502] geneve1: entered allmulticast mode [ 1206.612257][T19502] bridge0: port 3(team0) entered blocking state [ 1206.618610][T19502] bridge0: port 3(team0) entered disabled state [ 1206.659398][T19502] bridge0: port 3(team0) entered blocking state [ 1206.666925][T19502] bridge0: port 3(team0) entered forwarding state [ 1208.827589][T19536] netlink: 'syz.1.5271': attribute type 10 has an invalid length. [ 1208.844588][T19536] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5271'. [ 1208.905428][T19536] bridge0: port 3(ipvlan1) entered blocking state [ 1208.922782][T19536] bridge0: port 3(ipvlan1) entered disabled state [ 1208.979968][T19536] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1209.823831][T19553] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5290'. [ 1213.047821][T19578] team0: Port device team_slave_0 removed [ 1214.153859][T19599] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5295'. [ 1216.643551][T19636] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5312'. [ 1216.915193][T19641] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5321'. [ 1217.712127][T19658] netlink: 'syz.3.5319': attribute type 10 has an invalid length. [ 1217.761463][T19658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5319'. [ 1217.770648][T19658] team0: entered promiscuous mode [ 1217.904541][T19658] team_slave_1: entered promiscuous mode [ 1217.932023][T19658] macvlan0: entered promiscuous mode [ 1217.982352][T19658] team0: entered allmulticast mode [ 1218.001516][T19658] team_slave_1: entered allmulticast mode [ 1218.027916][T19658] dummy0: entered allmulticast mode [ 1218.071915][T19658] macvlan0: entered allmulticast mode [ 1218.094229][T19658] veth1_vlan: entered allmulticast mode [ 1218.127400][T19658] bridge0: port 4(team0) entered blocking state [ 1218.161968][T19658] bridge0: port 4(team0) entered disabled state [ 1218.189110][T19658] bridge0: port 4(team0) entered blocking state [ 1218.195793][T19658] bridge0: port 4(team0) entered forwarding state [ 1218.848411][T19677] team_slave_0: left promiscuous mode [ 1218.856624][T19677] team_slave_0: left allmulticast mode [ 1218.885786][T19677] team0: Port device team_slave_0 removed [ 1220.375326][T19712] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5342'. [ 1220.473234][T19716] netlink: 'syz.1.5351': attribute type 10 has an invalid length. [ 1220.511555][T19716] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5351'. [ 1220.563940][T19716] team0: entered promiscuous mode [ 1220.585056][T19716] team_slave_0: entered promiscuous mode [ 1220.621832][T19716] team_slave_1: entered promiscuous mode [ 1220.641995][T19716] macvlan0: entered promiscuous mode [ 1220.669327][T19716] geneve1: entered promiscuous mode [ 1220.686224][T19716] team0: entered allmulticast mode [ 1220.711096][T19716] team_slave_0: entered allmulticast mode [ 1220.731881][T19716] team_slave_1: entered allmulticast mode [ 1220.753169][T19716] dummy0: entered allmulticast mode [ 1220.769234][T19716] macvlan0: entered allmulticast mode [ 1220.792176][T19716] veth1_vlan: entered allmulticast mode [ 1220.818311][T19716] geneve1: entered allmulticast mode [ 1220.842426][T19716] bridge0: port 3(team0) entered blocking state [ 1220.867617][T19716] bridge0: port 3(team0) entered disabled state [ 1220.930521][T19716] bridge0: port 3(team0) entered blocking state [ 1220.937172][T19716] bridge0: port 3(team0) entered forwarding state [ 1221.317524][T19720] team_slave_0: left promiscuous mode [ 1221.323760][T19720] team_slave_0: left allmulticast mode [ 1221.351657][T19720] team0: Port device team_slave_0 removed [ 1223.680310][T19753] syzkaller0: entered promiscuous mode [ 1223.713743][T19753] syzkaller0: entered allmulticast mode [ 1223.857554][T19755] syzkaller0: entered promiscuous mode [ 1223.871521][T19755] syzkaller0: entered allmulticast mode [ 1227.270618][T19772] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5372'. [ 1230.886336][T18412] Bluetooth: hci4: unknown advertising packet type: 0x20 [ 1231.036087][T19812] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5381'. [ 1233.785392][T19857] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5394'. [ 1237.070996][T18412] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 1239.238450][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.271978][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.636562][T18412] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 1246.315193][T19976] netlink: 'syz.4.5437': attribute type 2 has an invalid length. [ 1246.362862][T19976] netlink: 'syz.4.5437': attribute type 8 has an invalid length. [ 1246.378882][T19976] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5437'. [ 1246.640436][T18412] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1247.104089][T19996] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5446'. [ 1253.147513][T20052] netlink: 'syz.2.5462': attribute type 2 has an invalid length. [ 1253.221923][T20052] netlink: 'syz.2.5462': attribute type 8 has an invalid length. [ 1253.230121][T20052] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5462'. [ 1254.554407][T20074] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5473'. [ 1254.761966][T18412] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 1254.770103][T18412] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1254.783122][T18412] CPU: 1 PID: 18412 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1254.790811][T18412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1254.800905][T18412] Workqueue: hci0 hci_rx_work [ 1254.805635][T18412] Call Trace: [ 1254.808950][T18412] [ 1254.811916][T18412] dump_stack_lvl+0x18c/0x250 [ 1254.816644][T18412] ? show_regs_print_info+0x20/0x20 [ 1254.821889][T18412] ? load_image+0x420/0x420 [ 1254.826438][T18412] sysfs_create_dir_ns+0x26e/0x2a0 [ 1254.831571][T18412] ? __lock_acquire+0x7d80/0x7d80 [ 1254.836642][T18412] ? sysfs_warn_dup+0xa0/0xa0 [ 1254.841368][T18412] ? do_raw_spin_unlock+0x121/0x230 [ 1254.846631][T18412] kobject_add_internal+0x617/0xc90 [ 1254.851886][T18412] kobject_add+0x164/0x240 [ 1254.856350][T18412] ? kobject_init+0x1d0/0x1d0 [ 1254.861068][T18412] ? get_device_parent+0x366/0x390 [ 1254.866232][T18412] device_add+0x3fa/0xc40 [ 1254.870613][T18412] hci_conn_add_sysfs+0xd5/0x1e0 [ 1254.875605][T18412] le_conn_complete_evt+0xe9f/0x1480 [ 1254.880950][T18412] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1254.887234][T18412] ? bt_info+0x180/0x180 [ 1254.891514][T18412] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1254.897194][T18412] ? mutex_unlock+0x10/0x10 [ 1254.901740][T18412] ? skb_pull_data+0xf0/0x1f0 [ 1254.906462][T18412] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1254.912393][T18412] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1254.918851][T18412] ? hci_remote_host_features_evt+0x150/0x150 [ 1254.924957][T18412] hci_event_packet+0x7b4/0x1280 [ 1254.929934][T18412] ? __lock_acquire+0x7d80/0x7d80 [ 1254.934992][T18412] ? lock_chain_count+0x20/0x20 [ 1254.939877][T18412] ? bis_list+0x290/0x290 [ 1254.944247][T18412] ? lockdep_hardirqs_on+0x98/0x150 [ 1254.949489][T18412] ? hci_send_to_monitor+0xd7/0x4f0 [ 1254.954727][T18412] hci_rx_work+0x43a/0xd60 [ 1254.959185][T18412] ? process_scheduled_works+0x975/0x1600 [ 1254.964950][T18412] process_scheduled_works+0xa60/0x1600 [ 1254.970580][T18412] ? worker_attach_to_pool+0x370/0x370 [ 1254.976099][T18412] ? assign_work+0x3cc/0x5d0 [ 1254.980733][T18412] worker_thread+0xa5e/0xfe0 [ 1254.985379][T18412] ? _raw_spin_unlock+0x40/0x40 [ 1254.990267][T18412] ? __kthread_parkme+0x71/0x1c0 [ 1254.995255][T18412] kthread+0x2fa/0x390 [ 1254.999360][T18412] ? pr_cont_work+0x550/0x550 [ 1255.004076][T18412] ? kthread_blkcg+0xd0/0xd0 [ 1255.008707][T18412] ret_from_fork+0x48/0x80 [ 1255.013158][T18412] ? kthread_blkcg+0xd0/0xd0 [ 1255.017780][T18412] ret_from_fork_asm+0x11/0x20 [ 1255.022609][T18412] [ 1255.036830][T18412] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1255.050769][T18412] Bluetooth: hci0: failed to register connection device [ 1255.172423][T20085] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 1255.179444][T20085] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 1255.940157][T20095] netlink: 'syz.3.5479': attribute type 2 has an invalid length. [ 1255.963212][T20095] netlink: 'syz.3.5479': attribute type 8 has an invalid length. [ 1255.988276][T20095] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5479'. [ 1257.360417][T12270] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1257.542718][T20123] syzkaller0: entered promiscuous mode [ 1257.561969][T20123] syzkaller0: entered allmulticast mode [ 1257.893235][T20125] netlink: 'syz.1.5490': attribute type 2 has an invalid length. [ 1257.921924][T20125] netlink: 'syz.1.5490': attribute type 8 has an invalid length. [ 1257.960142][T20125] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5490'. [ 1258.058916][T20127] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5499'. [ 1258.111572][T20127] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5499'. [ 1258.182802][T20127] bond0: (slave bond_slave_0): Releasing backup interface [ 1258.245694][T20127] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1258.329015][T12270] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 1258.347659][T12270] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1258.358004][T12270] CPU: 1 PID: 12270 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1258.365693][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1258.375788][T12270] Workqueue: hci0 hci_rx_work [ 1258.380521][T12270] Call Trace: [ 1258.383836][T12270] [ 1258.386806][T12270] dump_stack_lvl+0x18c/0x250 [ 1258.391523][T12270] ? show_regs_print_info+0x20/0x20 [ 1258.396732][T12270] ? load_image+0x420/0x420 [ 1258.401251][T12270] sysfs_create_dir_ns+0x26e/0x2a0 [ 1258.406364][T12270] ? __lock_acquire+0x7d80/0x7d80 [ 1258.411420][T12270] ? sysfs_warn_dup+0xa0/0xa0 [ 1258.416134][T12270] ? do_raw_spin_unlock+0x121/0x230 [ 1258.421364][T12270] kobject_add_internal+0x617/0xc90 [ 1258.426591][T12270] kobject_add+0x164/0x240 [ 1258.431032][T12270] ? kobject_init+0x1d0/0x1d0 [ 1258.435734][T12270] ? get_device_parent+0x366/0x390 [ 1258.440865][T12270] device_add+0x3fa/0xc40 [ 1258.445210][T12270] hci_conn_add_sysfs+0xd5/0x1e0 [ 1258.450170][T12270] le_conn_complete_evt+0xe9f/0x1480 [ 1258.455480][T12270] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1258.461739][T12270] ? bt_info+0x180/0x180 [ 1258.465995][T12270] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1258.471646][T12270] ? mutex_unlock+0x10/0x10 [ 1258.476167][T12270] ? skb_pull_data+0xf0/0x1f0 [ 1258.480863][T12270] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1258.486774][T12270] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1258.493202][T12270] ? hci_remote_host_features_evt+0x150/0x150 [ 1258.499288][T12270] hci_event_packet+0x7b4/0x1280 [ 1258.504249][T12270] ? __lock_acquire+0x7d80/0x7d80 [ 1258.509289][T12270] ? lock_chain_count+0x20/0x20 [ 1258.514159][T12270] ? bis_list+0x290/0x290 [ 1258.518509][T12270] ? lockdep_hardirqs_on+0x98/0x150 [ 1258.523730][T12270] ? hci_send_to_monitor+0xd7/0x4f0 [ 1258.528950][T12270] hci_rx_work+0x43a/0xd60 [ 1258.533394][T12270] ? process_scheduled_works+0x975/0x1600 [ 1258.539143][T12270] process_scheduled_works+0xa60/0x1600 [ 1258.544734][T12270] ? worker_attach_to_pool+0x370/0x370 [ 1258.550217][T12270] ? assign_work+0x3cc/0x5d0 [ 1258.554830][T12270] worker_thread+0xa5e/0xfe0 [ 1258.559470][T12270] kthread+0x2fa/0x390 [ 1258.563553][T12270] ? pr_cont_work+0x550/0x550 [ 1258.568245][T12270] ? kthread_blkcg+0xd0/0xd0 [ 1258.572843][T12270] ret_from_fork+0x48/0x80 [ 1258.577272][T12270] ? kthread_blkcg+0xd0/0xd0 [ 1258.581872][T12270] ret_from_fork_asm+0x11/0x20 [ 1258.586670][T12270] [ 1258.590621][T12270] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1258.604665][T12270] Bluetooth: hci0: failed to register connection device [ 1260.705086][T18412] Bluetooth: hci0: command 0x0406 tx timeout [ 1260.874416][T20168] netlink: 'syz.2.5504': attribute type 2 has an invalid length. [ 1260.898606][T20168] netlink: 'syz.2.5504': attribute type 8 has an invalid length. [ 1260.934656][T20168] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5504'. [ 1261.707242][T18412] Bluetooth: hci4: command 0x0406 tx timeout [ 1263.185985][T20202] syzkaller0: entered promiscuous mode [ 1263.191595][T20202] syzkaller0: entered allmulticast mode [ 1263.598195][T20211] netlink: 'syz.1.5517': attribute type 2 has an invalid length. [ 1263.606657][T20211] netlink: 'syz.1.5517': attribute type 8 has an invalid length. [ 1263.632922][T20211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5517'. [ 1265.123785][T20234] syzkaller0: entered promiscuous mode [ 1265.130701][T20234] syzkaller0: entered allmulticast mode [ 1271.620889][T12270] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 1271.628827][T12270] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1271.638625][T12270] CPU: 1 PID: 12270 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1271.646306][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1271.656400][T12270] Workqueue: hci2 hci_rx_work [ 1271.661137][T12270] Call Trace: [ 1271.664455][T12270] [ 1271.667409][T12270] dump_stack_lvl+0x18c/0x250 [ 1271.672095][T12270] ? show_regs_print_info+0x20/0x20 [ 1271.677296][T12270] ? load_image+0x420/0x420 [ 1271.681817][T12270] sysfs_create_dir_ns+0x26e/0x2a0 [ 1271.686928][T12270] ? __lock_acquire+0x7d80/0x7d80 [ 1271.691976][T12270] ? sysfs_warn_dup+0xa0/0xa0 [ 1271.696702][T12270] ? do_raw_spin_unlock+0x121/0x230 [ 1271.701951][T12270] kobject_add_internal+0x617/0xc90 [ 1271.707183][T12270] kobject_add+0x164/0x240 [ 1271.711616][T12270] ? kobject_init+0x1d0/0x1d0 [ 1271.716322][T12270] ? get_device_parent+0x366/0x390 [ 1271.721470][T12270] device_add+0x3fa/0xc40 [ 1271.725810][T12270] hci_conn_add_sysfs+0xd5/0x1e0 [ 1271.730753][T12270] le_conn_complete_evt+0xe9f/0x1480 [ 1271.736049][T12270] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1271.742309][T12270] ? bt_info+0x180/0x180 [ 1271.746604][T12270] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1271.752273][T12270] ? mutex_unlock+0x10/0x10 [ 1271.756778][T12270] ? skb_pull_data+0xf0/0x1f0 [ 1271.761467][T12270] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1271.767381][T12270] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1271.773825][T12270] ? hci_remote_host_features_evt+0x150/0x150 [ 1271.779900][T12270] hci_event_packet+0x7b4/0x1280 [ 1271.784846][T12270] ? __lock_acquire+0x7d80/0x7d80 [ 1271.789874][T12270] ? lock_chain_count+0x20/0x20 [ 1271.794739][T12270] ? bis_list+0x290/0x290 [ 1271.799107][T12270] ? lockdep_hardirqs_on+0x98/0x150 [ 1271.804316][T12270] ? hci_send_to_monitor+0xd7/0x4f0 [ 1271.809518][T12270] hci_rx_work+0x43a/0xd60 [ 1271.813941][T12270] ? process_scheduled_works+0x975/0x1600 [ 1271.819665][T12270] process_scheduled_works+0xa60/0x1600 [ 1271.825230][T12270] ? worker_attach_to_pool+0x370/0x370 [ 1271.830696][T12270] ? assign_work+0x3cc/0x5d0 [ 1271.835311][T12270] worker_thread+0xa5e/0xfe0 [ 1271.839938][T12270] kthread+0x2fa/0x390 [ 1271.844018][T12270] ? pr_cont_work+0x550/0x550 [ 1271.848741][T12270] ? kthread_blkcg+0xd0/0xd0 [ 1271.853383][T12270] ret_from_fork+0x48/0x80 [ 1271.857836][T12270] ? kthread_blkcg+0xd0/0xd0 [ 1271.862452][T12270] ret_from_fork_asm+0x11/0x20 [ 1271.867229][T12270] [ 1271.873079][T12270] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1271.887069][T12270] Bluetooth: hci2: failed to register connection device [ 1272.743767][T20303] syzkaller0: entered promiscuous mode [ 1272.752615][T20303] syzkaller0: entered allmulticast mode [ 1273.941536][T12270] Bluetooth: hci2: command 0x0406 tx timeout [ 1274.298063][T18412] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 1275.163377][T20346] syzkaller0: entered promiscuous mode [ 1275.181536][T20346] syzkaller0: entered allmulticast mode [ 1276.344737][T12270] Bluetooth: hci4: command 0x0406 tx timeout [ 1276.410802][T20367] netlink: 'syz.2.5568': attribute type 20 has an invalid length. [ 1277.030380][T20378] syzkaller0: entered promiscuous mode [ 1277.047607][T20378] syzkaller0: entered allmulticast mode [ 1277.054170][T12270] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1277.063117][T12270] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1277.082334][T12270] CPU: 1 PID: 12270 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1277.090023][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1277.100118][T12270] Workqueue: hci1 hci_rx_work [ 1277.104841][T12270] Call Trace: [ 1277.108153][T12270] [ 1277.111119][T12270] dump_stack_lvl+0x18c/0x250 [ 1277.115848][T12270] ? show_regs_print_info+0x20/0x20 [ 1277.121094][T12270] ? load_image+0x420/0x420 [ 1277.125660][T12270] sysfs_create_dir_ns+0x26e/0x2a0 [ 1277.130794][T12270] ? __lock_acquire+0x7d80/0x7d80 [ 1277.135838][T12270] ? sysfs_warn_dup+0xa0/0xa0 [ 1277.140538][T12270] ? do_raw_spin_unlock+0x121/0x230 [ 1277.145764][T12270] kobject_add_internal+0x617/0xc90 [ 1277.150989][T12270] kobject_add+0x164/0x240 [ 1277.155433][T12270] ? kobject_init+0x1d0/0x1d0 [ 1277.160129][T12270] ? get_device_parent+0x366/0x390 [ 1277.165256][T12270] device_add+0x3fa/0xc40 [ 1277.169601][T12270] hci_conn_add_sysfs+0xd5/0x1e0 [ 1277.174556][T12270] le_conn_complete_evt+0xe9f/0x1480 [ 1277.179863][T12270] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1277.186116][T12270] ? bt_info+0x180/0x180 [ 1277.190367][T12270] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1277.196018][T12270] ? mutex_unlock+0x10/0x10 [ 1277.200534][T12270] ? skb_pull_data+0xf0/0x1f0 [ 1277.205227][T12270] hci_le_conn_complete_evt+0x187/0x440 [ 1277.210789][T12270] ? hci_remote_host_features_evt+0x150/0x150 [ 1277.216870][T12270] hci_event_packet+0x7b4/0x1280 [ 1277.221829][T12270] ? __lock_acquire+0x7d80/0x7d80 [ 1277.226867][T12270] ? lock_chain_count+0x20/0x20 [ 1277.231737][T12270] ? bis_list+0x290/0x290 [ 1277.236082][T12270] ? lockdep_hardirqs_on+0x98/0x150 [ 1277.241301][T12270] ? hci_send_to_monitor+0xd7/0x4f0 [ 1277.246524][T12270] hci_rx_work+0x43a/0xd60 [ 1277.250958][T12270] ? process_scheduled_works+0x975/0x1600 [ 1277.256693][T12270] process_scheduled_works+0xa60/0x1600 [ 1277.262279][T12270] ? worker_attach_to_pool+0x370/0x370 [ 1277.267758][T12270] ? assign_work+0x3cc/0x5d0 [ 1277.272366][T12270] worker_thread+0xa5e/0xfe0 [ 1277.276996][T12270] kthread+0x2fa/0x390 [ 1277.281073][T12270] ? pr_cont_work+0x550/0x550 [ 1277.285768][T12270] ? kthread_blkcg+0xd0/0xd0 [ 1277.290368][T12270] ret_from_fork+0x48/0x80 [ 1277.294803][T12270] ? kthread_blkcg+0xd0/0xd0 [ 1277.299402][T12270] ret_from_fork_asm+0x11/0x20 [ 1277.304194][T12270] [ 1277.308530][T12270] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1277.322473][T12270] Bluetooth: hci1: failed to register connection device [ 1277.815021][T18412] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 1280.756398][T20396] netlink: 160 bytes leftover after parsing attributes in process `syz.3.5577'. [ 1280.781415][T20396] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1280.832276][ T1146] bridge0: port 4(team0) entered disabled state [ 1281.184691][T18412] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1281.193055][T18412] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1281.202871][T18412] CPU: 0 PID: 18412 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1281.210547][T18412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1281.220638][T18412] Workqueue: hci2 hci_rx_work [ 1281.224593][T20430] netlink: 160 bytes leftover after parsing attributes in process `syz.4.5599'. [ 1281.225351][T18412] Call Trace: [ 1281.237739][T18412] [ 1281.240711][T18412] dump_stack_lvl+0x18c/0x250 [ 1281.244725][T20430] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1281.245415][T18412] ? show_regs_print_info+0x20/0x20 [ 1281.266012][T18412] ? load_image+0x420/0x420 [ 1281.270573][T18412] sysfs_create_dir_ns+0x26e/0x2a0 [ 1281.275709][T18412] ? __lock_acquire+0x7d80/0x7d80 [ 1281.280751][T18412] ? sysfs_warn_dup+0xa0/0xa0 [ 1281.285442][T18412] ? do_raw_spin_unlock+0x121/0x230 [ 1281.290659][T18412] kobject_add_internal+0x617/0xc90 [ 1281.295886][T18412] kobject_add+0x164/0x240 [ 1281.300326][T18412] ? kobject_init+0x1d0/0x1d0 [ 1281.305027][T18412] ? get_device_parent+0x366/0x390 [ 1281.310160][T18412] device_add+0x3fa/0xc40 [ 1281.314504][T18412] hci_conn_add_sysfs+0xd5/0x1e0 [ 1281.319460][T18412] le_conn_complete_evt+0xe9f/0x1480 [ 1281.324767][T18412] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1281.331020][T18412] ? bt_info+0x180/0x180 [ 1281.335274][T18412] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1281.340928][T18412] ? mutex_unlock+0x10/0x10 [ 1281.345445][T18412] ? skb_pull_data+0xf0/0x1f0 [ 1281.350139][T18412] hci_le_conn_complete_evt+0x187/0x440 [ 1281.355712][T18412] ? hci_remote_host_features_evt+0x150/0x150 [ 1281.361798][T18412] hci_event_packet+0x7b4/0x1280 [ 1281.366756][T18412] ? __lock_acquire+0x7d80/0x7d80 [ 1281.371798][T18412] ? lock_chain_count+0x20/0x20 [ 1281.376659][T18412] ? bis_list+0x290/0x290 [ 1281.381007][T18412] ? lockdep_hardirqs_on+0x98/0x150 [ 1281.386225][T18412] ? hci_send_to_monitor+0xd7/0x4f0 [ 1281.391441][T18412] hci_rx_work+0x43a/0xd60 [ 1281.395874][T18412] ? process_scheduled_works+0x975/0x1600 [ 1281.401619][T18412] process_scheduled_works+0xa60/0x1600 [ 1281.407211][T18412] ? worker_attach_to_pool+0x370/0x370 [ 1281.412690][T18412] ? assign_work+0x3cc/0x5d0 [ 1281.417306][T18412] worker_thread+0xa5e/0xfe0 [ 1281.421923][T18412] ? _raw_spin_unlock+0x40/0x40 [ 1281.426792][T18412] ? __kthread_parkme+0x71/0x1c0 [ 1281.431750][T18412] kthread+0x2fa/0x390 [ 1281.435828][T18412] ? pr_cont_work+0x550/0x550 [ 1281.440519][T18412] ? kthread_blkcg+0xd0/0xd0 [ 1281.445118][T18412] ret_from_fork+0x48/0x80 [ 1281.449546][T18412] ? kthread_blkcg+0xd0/0xd0 [ 1281.454149][T18412] ret_from_fork_asm+0x11/0x20 [ 1281.458964][T18412] [ 1281.471421][T18412] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1281.485481][T18412] Bluetooth: hci2: failed to register connection device [ 1281.511027][ T49] bridge0: port 3(team0) entered disabled state [ 1281.610767][T20436] IPv6: pim6reg1: Disabled Multicast RS [ 1281.796444][T20444] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5594'. [ 1281.808133][T20444] netlink: 'syz.2.5594': attribute type 10 has an invalid length. [ 1281.820168][T20444] geneve0: entered promiscuous mode [ 1281.835217][T20444] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1283.014487][T20457] netlink: 'syz.1.5596': attribute type 20 has an invalid length. [ 1283.157961][T20459] syzkaller0: entered promiscuous mode [ 1283.189314][T20459] syzkaller0: entered allmulticast mode [ 1283.953329][T18412] Bluetooth: hci1: command 0x0406 tx timeout [ 1285.955888][T20467] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5601'. [ 1285.965176][T20467] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1286.572906][T12270] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 1286.580897][T12270] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1286.590906][T12270] CPU: 1 PID: 12270 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1286.598584][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1286.608670][T12270] Workqueue: hci1 hci_rx_work [ 1286.613399][T12270] Call Trace: [ 1286.616712][T12270] [ 1286.619675][T12270] dump_stack_lvl+0x18c/0x250 [ 1286.624403][T12270] ? show_regs_print_info+0x20/0x20 [ 1286.629639][T12270] ? load_image+0x420/0x420 [ 1286.634217][T12270] sysfs_create_dir_ns+0x26e/0x2a0 [ 1286.639373][T12270] ? __lock_acquire+0x7d80/0x7d80 [ 1286.644445][T12270] ? sysfs_warn_dup+0xa0/0xa0 [ 1286.649185][T12270] ? do_raw_spin_unlock+0x121/0x230 [ 1286.654447][T12270] kobject_add_internal+0x617/0xc90 [ 1286.659696][T12270] kobject_add+0x164/0x240 [ 1286.664150][T12270] ? kobject_init+0x1d0/0x1d0 [ 1286.668870][T12270] ? get_device_parent+0x366/0x390 [ 1286.674011][T12270] device_add+0x3fa/0xc40 [ 1286.678367][T12270] hci_conn_add_sysfs+0xd5/0x1e0 [ 1286.683336][T12270] le_conn_complete_evt+0xe9f/0x1480 [ 1286.688658][T12270] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1286.694924][T12270] ? bt_info+0x180/0x180 [ 1286.699191][T12270] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1286.704854][T12270] ? mutex_unlock+0x10/0x10 [ 1286.709380][T12270] ? skb_pull_data+0xf0/0x1f0 [ 1286.714089][T12270] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1286.720007][T12270] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1286.726455][T12270] ? hci_remote_host_features_evt+0x150/0x150 [ 1286.732555][T12270] hci_event_packet+0x7b4/0x1280 [ 1286.737521][T12270] ? __lock_acquire+0x7d80/0x7d80 [ 1286.742572][T12270] ? lock_chain_count+0x20/0x20 [ 1286.747446][T12270] ? bis_list+0x290/0x290 [ 1286.751805][T12270] ? lockdep_hardirqs_on+0x98/0x150 [ 1286.757037][T12270] ? hci_send_to_monitor+0xd7/0x4f0 [ 1286.762264][T12270] hci_rx_work+0x43a/0xd60 [ 1286.766715][T12270] ? process_scheduled_works+0x975/0x1600 [ 1286.772463][T12270] process_scheduled_works+0xa60/0x1600 [ 1286.778072][T12270] ? worker_attach_to_pool+0x370/0x370 [ 1286.783565][T12270] ? assign_work+0x3cc/0x5d0 [ 1286.788192][T12270] worker_thread+0xa5e/0xfe0 [ 1286.792853][T12270] kthread+0x2fa/0x390 [ 1286.796940][T12270] ? pr_cont_work+0x550/0x550 [ 1286.801645][T12270] ? kthread_blkcg+0xd0/0xd0 [ 1286.806255][T12270] ret_from_fork+0x48/0x80 [ 1286.810695][T12270] ? kthread_blkcg+0xd0/0xd0 [ 1286.815305][T12270] ret_from_fork_asm+0x11/0x20 [ 1286.820120][T12270] [ 1286.826112][T12270] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1286.841272][T12270] Bluetooth: hci1: failed to register connection device [ 1286.917063][T18412] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1286.925114][T18412] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1286.937565][T18412] CPU: 0 PID: 18412 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1286.945251][T18412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1286.955322][T18412] Workqueue: hci0 hci_rx_work [ 1286.960023][T18412] Call Trace: [ 1286.963318][T18412] [ 1286.966266][T18412] dump_stack_lvl+0x18c/0x250 [ 1286.970970][T18412] ? show_regs_print_info+0x20/0x20 [ 1286.976190][T18412] ? load_image+0x420/0x420 [ 1286.980729][T18412] sysfs_create_dir_ns+0x26e/0x2a0 [ 1286.985856][T18412] ? __lock_acquire+0x7d80/0x7d80 [ 1286.990896][T18412] ? sysfs_warn_dup+0xa0/0xa0 [ 1286.995588][T18412] ? do_raw_spin_unlock+0x121/0x230 [ 1287.000808][T18412] kobject_add_internal+0x617/0xc90 [ 1287.006032][T18412] kobject_add+0x164/0x240 [ 1287.010472][T18412] ? kobject_init+0x1d0/0x1d0 [ 1287.015175][T18412] ? get_device_parent+0x366/0x390 [ 1287.020308][T18412] device_add+0x3fa/0xc40 [ 1287.024668][T18412] hci_conn_add_sysfs+0xd5/0x1e0 [ 1287.029632][T18412] le_conn_complete_evt+0xe9f/0x1480 [ 1287.034949][T18412] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1287.041204][T18412] ? bt_info+0x180/0x180 [ 1287.045467][T18412] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1287.051121][T18412] ? mutex_unlock+0x10/0x10 [ 1287.055642][T18412] ? skb_pull_data+0xf0/0x1f0 [ 1287.060349][T18412] hci_le_conn_complete_evt+0x187/0x440 [ 1287.065918][T18412] ? hci_remote_host_features_evt+0x150/0x150 [ 1287.072006][T18412] hci_event_packet+0x7b4/0x1280 [ 1287.076964][T18412] ? __lock_acquire+0x7d80/0x7d80 [ 1287.082005][T18412] ? lock_chain_count+0x20/0x20 [ 1287.086871][T18412] ? bis_list+0x290/0x290 [ 1287.091221][T18412] ? lockdep_hardirqs_on+0x98/0x150 [ 1287.096443][T18412] ? hci_send_to_monitor+0xd7/0x4f0 [ 1287.101669][T18412] hci_rx_work+0x43a/0xd60 [ 1287.106108][T18412] ? process_scheduled_works+0x975/0x1600 [ 1287.111850][T18412] process_scheduled_works+0xa60/0x1600 [ 1287.117442][T18412] ? worker_attach_to_pool+0x370/0x370 [ 1287.122927][T18412] ? assign_work+0x3cc/0x5d0 [ 1287.127546][T18412] worker_thread+0xa5e/0xfe0 [ 1287.132167][T18412] ? _raw_spin_unlock+0x40/0x40 [ 1287.137036][T18412] ? __kthread_parkme+0x71/0x1c0 [ 1287.142001][T18412] kthread+0x2fa/0x390 [ 1287.146083][T18412] ? pr_cont_work+0x550/0x550 [ 1287.150778][T18412] ? kthread_blkcg+0xd0/0xd0 [ 1287.155386][T18412] ret_from_fork+0x48/0x80 [ 1287.159819][T18412] ? kthread_blkcg+0xd0/0xd0 [ 1287.164425][T18412] ret_from_fork_asm+0x11/0x20 [ 1287.169222][T18412] [ 1287.179125][T18412] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1287.193324][T18412] Bluetooth: hci0: failed to register connection device [ 1287.432859][T12270] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 1287.686918][T20503] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.5615'. [ 1288.910341][T12270] Bluetooth: hci1: command 0x0406 tx timeout [ 1289.018824][T20519] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5621'. [ 1289.028166][T20519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1289.216339][T12270] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 1290.597916][T20552] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5634'. [ 1290.638608][T20552] netlink: 'syz.4.5634': attribute type 10 has an invalid length. [ 1290.670758][T20552] geneve0: entered promiscuous mode [ 1290.749823][T20552] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1292.280103][T20573] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5650'. [ 1292.292070][T20573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1293.541697][T20598] Bluetooth: hci0: command 0x0406 tx timeout [ 1293.543133][T20601] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5649'. [ 1293.602253][T20601] netlink: 'syz.1.5649': attribute type 10 has an invalid length. [ 1293.635070][T20601] geneve0: entered promiscuous mode [ 1293.676625][T20601] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1294.808529][T20618] mac80211_hwsim hwsim22 ..ãc¤±: renamed from wlan1 (while UP) [ 1295.292608][T20628] delete_channel: no stack [ 1295.303616][T12270] Bluetooth: hci2: command 0x0406 tx timeout [ 1295.321652][T20621] netlink: 'syz.2.5659': attribute type 17 has an invalid length. [ 1295.329533][T20621] netlink: 'syz.2.5659': attribute type 16 has an invalid length. [ 1295.361597][T20621] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5659'. [ 1295.411988][T20625] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5655'. [ 1295.429552][T20625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1295.529205][T20631] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5664'. [ 1295.573130][T20631] netlink: 'syz.3.5664': attribute type 10 has an invalid length. [ 1298.260223][T20631] geneve0: entered promiscuous mode [ 1298.316951][T20631] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1298.646800][T20643] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5677'. [ 1298.666775][T20643] netlink: 'syz.3.5677': attribute type 10 has an invalid length. [ 1298.967021][T20652] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.5669'. [ 1298.998978][T20654] mac80211_hwsim hwsim18 ..ãc¤±: renamed from wlan1 (while UP) [ 1299.766866][T20664] netlink: 'syz.1.5673': attribute type 17 has an invalid length. [ 1299.796191][T20664] netlink: 'syz.1.5673': attribute type 16 has an invalid length. [ 1299.826686][T20664] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5673'. [ 1300.414432][T20669] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5679'. [ 1300.426182][T20669] netlink: 'syz.1.5679': attribute type 10 has an invalid length. [ 1300.600478][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.607191][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.785420][T20693] mac80211_hwsim hwsim24 ..ãc¤±: renamed from wlan1 (while UP) [ 1301.949161][T20696] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.5687'. [ 1302.230700][T18412] Bluetooth: hci4: Malformed LE Event: 0x0b [ 1304.036813][T20710] netlink: 'syz.4.5692': attribute type 10 has an invalid length. [ 1304.080812][T20710] team0: Device hsr_slave_0 failed to register rx_handler [ 1308.426798][T20763] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.5712'. [ 1310.272108][T20785] sock: sock_set_timeout: `syz.2.5720' (pid 20785) tries to set negative timeout [ 1312.114570][T20805] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5723'. [ 1312.147187][T20805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1312.530064][T20811] netlink: 'syz.4.5730': attribute type 1 has an invalid length. [ 1312.545204][T20811] netlink: 60179 bytes leftover after parsing attributes in process `syz.4.5730'. [ 1313.536609][T20822] sock: sock_set_timeout: `syz.4.5735' (pid 20822) tries to set negative timeout [ 1316.464153][T20875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5762'. [ 1317.903503][T20901] netlink: 'syz.2.5764': attribute type 10 has an invalid length. [ 1317.954963][T20901] macvlan0: entered promiscuous mode [ 1317.986186][T20901] bond0: (slave macvlan0): Error -22 calling dev_set_mtu [ 1319.731182][T20904] netlink: 'syz.1.5774': attribute type 1 has an invalid length. [ 1319.779389][T20904] netlink: 60179 bytes leftover after parsing attributes in process `syz.1.5774'. [ 1320.530553][T20926] netlink: 'syz.3.5776': attribute type 10 has an invalid length. [ 1320.652770][T20926] veth1_vlan: left allmulticast mode [ 1320.740375][T20926] macvlan0: left allmulticast mode [ 1320.750055][T20926] team0: Port device macvlan0 removed [ 1320.779685][T20926] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1324.183112][T20939] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5782'. [ 1324.231801][T20942] delete_channel: no stack [ 1324.998987][T18412] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1325.629147][T20974] delete_channel: no stack [ 1326.572449][T18412] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1327.337434][T21002] netlink: 'syz.3.5804': attribute type 10 has an invalid length. [ 1329.714597][T21002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.755926][T21002] bridge_slave_1: left allmulticast mode [ 1329.881428][T21002] bridge_slave_1: left promiscuous mode [ 1329.897355][T21002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.104096][T21002] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1331.410038][T18412] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1331.443819][T21022] delete_channel: no stack [ 1332.112933][T21036] netlink: 'syz.2.5816': attribute type 1 has an invalid length. [ 1332.132279][T21036] netlink: 'syz.2.5816': attribute type 4 has an invalid length. [ 1332.140602][T21036] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5816'. [ 1337.442534][T21075] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5831'. [ 1337.468849][T21074] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.5839'. [ 1338.580873][T21094] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5848'. [ 1343.934056][T21109] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5845'. [ 1344.180535][T21113] netlink: 'syz.2.5847': attribute type 25 has an invalid length. [ 1344.189699][T21113] netlink: 'syz.2.5847': attribute type 25 has an invalid length. [ 1344.339467][T18412] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 1344.416500][T21120] netlink: 'syz.1.5851': attribute type 9 has an invalid length. [ 1344.453057][T21120] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5851'. [ 1344.589220][T21129] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5853'. [ 1345.175363][T21140] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.5865'. [ 1345.478318][T21143] syzkaller0: entered promiscuous mode [ 1345.489826][T21143] syzkaller0: entered allmulticast mode [ 1348.679592][T12270] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 1348.746257][T21166] netlink: 'syz.4.5863': attribute type 29 has an invalid length. [ 1348.926184][T21168] netlink: 668 bytes leftover after parsing attributes in process `syz.1.5864'. [ 1348.936435][T21168] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1348.946168][T21168] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1349.650351][T21178] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5871'. [ 1351.087231][T21166] netlink: 'syz.4.5863': attribute type 29 has an invalid length. [ 1352.697103][T21194] syzkaller0: entered promiscuous mode [ 1354.774754][T21205] netlink: 'syz.4.5880': attribute type 9 has an invalid length. [ 1354.782928][T21205] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5880'. [ 1356.993765][T21220] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.5885'. [ 1357.410911][T21234] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.5897'. [ 1361.143088][T21249] syzkaller0: entered promiscuous mode [ 1361.750614][T21253] netlink: 'syz.2.5895': attribute type 9 has an invalid length. [ 1361.763299][T21253] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5895'. [ 1361.951379][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.961471][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.941618][T21268] syzkaller0: entered promiscuous mode [ 1363.947201][T21268] syzkaller0: entered allmulticast mode [ 1369.974865][T21292] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5919'. [ 1371.414644][T21310] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.5926'. [ 1373.290026][T21332] netlink: 'syz.2.5923': attribute type 29 has an invalid length. [ 1373.309262][T21332] netlink: 'syz.2.5923': attribute type 29 has an invalid length. [ 1373.431007][T21334] syzkaller0: entered promiscuous mode [ 1373.463061][T21334] syzkaller0: entered allmulticast mode [ 1374.155716][T21346] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5930'. [ 1379.570954][T18412] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 1380.233947][T21379] netlink: 'syz.3.5944': attribute type 3 has an invalid length. [ 1380.242325][T21379] netlink: 'syz.3.5944': attribute type 1 has an invalid length. [ 1380.270862][T21379] netlink: 'syz.3.5944': attribute type 1 has an invalid length. [ 1380.283614][T21379] netlink: 'syz.3.5944': attribute type 2 has an invalid length. [ 1380.301518][T21379] netlink: 198100 bytes leftover after parsing attributes in process `syz.3.5944'. [ 1381.595063][T21397] netlink: 'syz.1.5952': attribute type 10 has an invalid length. [ 1381.615388][T21397] team0: Device veth1_vlan is already a lower device of the team interface [ 1381.912807][T21397] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5952'. [ 1384.722132][T21430] netlink: 'syz.3.5965': attribute type 10 has an invalid length. [ 1384.768174][T21430] team0: Device veth1_vlan failed to register rx_handler [ 1385.007667][T21434] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.5965'. [ 1385.709108][T21450] netlink: 'syz.4.5971': attribute type 3 has an invalid length. [ 1385.727732][T21450] netlink: 'syz.4.5971': attribute type 1 has an invalid length. [ 1385.748335][T21450] netlink: 'syz.4.5971': attribute type 1 has an invalid length. [ 1385.767354][T21450] netlink: 'syz.4.5971': attribute type 2 has an invalid length. [ 1385.785279][T21450] netlink: 198100 bytes leftover after parsing attributes in process `syz.4.5971'. [ 1386.205661][T21457] netlink: 'syz.4.5982': attribute type 10 has an invalid length. [ 1386.278599][T21457] veth1_vlan: left allmulticast mode [ 1386.450826][T21457] team0: Port device macvlan0 removed [ 1386.471791][T21457] veth1_vlan: entered allmulticast mode [ 1386.494483][T21457] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1387.052476][T21469] netlink: 'syz.4.5979': attribute type 10 has an invalid length. [ 1387.139550][T21469] team0: Device veth1_vlan failed to register rx_handler [ 1387.352784][T21473] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.5979'. [ 1389.000140][T21495] syzkaller0: entered promiscuous mode [ 1389.021371][T21495] syzkaller0: entered allmulticast mode [ 1392.158245][T21507] netlink: 'syz.1.5989': attribute type 3 has an invalid length. [ 1392.167029][T21507] netlink: 'syz.1.5989': attribute type 1 has an invalid length. [ 1392.175310][T21507] netlink: 'syz.1.5989': attribute type 1 has an invalid length. [ 1392.184214][T21507] netlink: 'syz.1.5989': attribute type 2 has an invalid length. [ 1392.193282][T21507] netlink: 198100 bytes leftover after parsing attributes in process `syz.1.5989'. [ 1394.256233][T21519] netlink: 'syz.2.5993': attribute type 10 has an invalid length. [ 1394.309719][T21519] team0: Device veth1_vlan failed to register rx_handler [ 1394.588326][T21520] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.5993'. [ 1394.862817][T21526] netlink: 'syz.2.5995': attribute type 10 has an invalid length. [ 1394.870974][T21526] macvlan0: entered allmulticast mode [ 1394.876988][T21526] bond0: (slave macvlan0): Error -22 calling dev_set_mtu [ 1395.264740][T21530] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.5998'. [ 1395.424508][T21534] TCP: TCP_TX_DELAY enabled [ 1395.565815][T21539] -1: renamed from syzkaller0 [ 1396.252201][T21549] netlink: 'syz.3.6006': attribute type 28 has an invalid length. [ 1396.812804][T18412] Bluetooth: hci2: Unknown advertising packet type: 0x52 [ 1396.812846][T18412] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1396.863711][T21555] netlink: 'syz.3.6009': attribute type 21 has an invalid length. [ 1396.903703][T21555] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.6009'. [ 1396.939972][T21559] netlink: 'syz.2.6010': attribute type 10 has an invalid length. [ 1396.962580][T21559] team0: Device veth1_vlan failed to register rx_handler [ 1397.018357][T21560] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.6010'. [ 1397.110269][T21562] netlink: 'syz.1.6012': attribute type 10 has an invalid length. [ 1397.124938][T21562] veth1_vlan: left allmulticast mode [ 1397.164535][T21562] team0: Port device macvlan0 removed [ 1397.182462][T21562] veth1_vlan: entered allmulticast mode [ 1397.191006][T21562] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1397.788583][T21576] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.6016'. [ 1398.413667][T18412] Bluetooth: hci4: Unknown advertising packet type: 0x52 [ 1398.413709][T18412] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1399.973935][T18412] Bluetooth: hci2: unexpected event 0x0f length: 151 > 4 [ 1400.304310][T21606] netlink: 'syz.2.6034': attribute type 29 has an invalid length. [ 1400.419872][T21606] netlink: 'syz.2.6034': attribute type 29 has an invalid length. [ 1400.454093][T21608] netlink: 'syz.2.6034': attribute type 29 has an invalid length. [ 1400.493024][T21609] netlink: 'syz.2.6034': attribute type 29 has an invalid length. [ 1400.549302][T21610] netlink: 'syz.2.6034': attribute type 29 has an invalid length. [ 1400.613804][T21615] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.6025'. [ 1400.945127][T21617] -1: renamed from syzkaller0 [ 1402.900827][T18412] Bluetooth: hci0: Unknown advertising packet type: 0x52 [ 1402.900868][T18412] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1404.022773][T18412] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1404.032354][T18412] Bluetooth: hci2: Injecting HCI hardware error event [ 1404.041082][T12270] Bluetooth: hci2: hardware error 0x00 [ 1404.787867][T21658] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.6041'. [ 1404.960683][T21657] netlink: 'syz.4.6042': attribute type 29 has an invalid length. [ 1405.028532][T21657] netlink: 'syz.4.6042': attribute type 29 has an invalid length. [ 1405.061877][T21660] netlink: 'syz.4.6042': attribute type 29 has an invalid length. [ 1405.092646][T21661] netlink: 'syz.4.6042': attribute type 29 has an invalid length. [ 1405.178406][T21657] netlink: 'syz.4.6042': attribute type 29 has an invalid length. [ 1405.491737][T21668] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.6052'. [ 1406.101390][T12270] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1409.053169][T21704] netlink: 'syz.1.6057': attribute type 29 has an invalid length. [ 1409.127795][T21704] netlink: 'syz.1.6057': attribute type 29 has an invalid length. [ 1409.262582][T21702] netlink: 'syz.1.6057': attribute type 29 has an invalid length. [ 1409.278703][T21707] netlink: 'syz.1.6057': attribute type 29 has an invalid length. [ 1409.334446][T21702] netlink: 'syz.1.6057': attribute type 29 has an invalid length. [ 1411.900558][T21745] netlink: 'syz.3.6071': attribute type 29 has an invalid length. [ 1411.933134][T21745] netlink: 'syz.3.6071': attribute type 29 has an invalid length. [ 1411.971563][T21749] netlink: 'syz.3.6071': attribute type 29 has an invalid length. [ 1411.983271][T21753] netlink: 'syz.3.6071': attribute type 29 has an invalid length. [ 1412.093919][T21745] netlink: 'syz.3.6071': attribute type 29 has an invalid length. [ 1415.736703][T21796] netlink: 'syz.2.6086': attribute type 29 has an invalid length. [ 1415.789157][T21796] netlink: 'syz.2.6086': attribute type 29 has an invalid length. [ 1415.845797][T12270] Bluetooth: hci0: unexpected event 0x0f length: 151 > 4 [ 1415.941912][T21801] netlink: 'syz.2.6086': attribute type 29 has an invalid length. [ 1416.001674][T21802] netlink: 'syz.2.6086': attribute type 29 has an invalid length. [ 1416.043850][T21796] netlink: 'syz.2.6086': attribute type 29 has an invalid length. [ 1417.411700][T12270] Bluetooth: hci0: adv larger than maximum supported [ 1417.411738][T12270] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1417.973696][T21830] netlink: 'syz.3.6104': attribute type 29 has an invalid length. [ 1417.981425][T21831] netlink: 'syz.2.6103': attribute type 1 has an invalid length. [ 1417.990847][T21831] netlink: 'syz.2.6103': attribute type 4 has an invalid length. [ 1418.011720][T21831] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6103'. [ 1418.051774][T21830] netlink: 'syz.3.6104': attribute type 29 has an invalid length. [ 1418.071498][T21832] netlink: 'syz.3.6104': attribute type 29 has an invalid length. [ 1418.953464][T21848] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.6109'. [ 1419.398112][T12270] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 1419.873130][T12270] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1419.889807][T12270] Bluetooth: hci0: Injecting HCI hardware error event [ 1419.898095][T12270] Bluetooth: hci0: hardware error 0x00 [ 1420.638402][T21870] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6118'. [ 1420.876295][T21875] syzkaller0: entered promiscuous mode [ 1420.886819][T21875] syzkaller0: entered allmulticast mode [ 1421.069973][T21880] validate_nla: 5 callbacks suppressed [ 1421.070014][T21880] netlink: 'syz.2.6122': attribute type 1 has an invalid length. [ 1421.111443][T21880] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.6122'. [ 1421.410738][T18412] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 1422.021543][T12270] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1423.389367][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.396139][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.341866][T21904] netlink: 'syz.4.6130': attribute type 1 has an invalid length. [ 1425.361773][T21904] netlink: 'syz.4.6130': attribute type 4 has an invalid length. [ 1425.374912][T21904] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.6130'. [ 1425.936433][T21913] netlink: 'syz.4.6133': attribute type 1 has an invalid length. [ 1425.962928][T21913] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.6133'. [ 1428.994557][T21958] netlink: 'syz.1.6153': attribute type 1 has an invalid length. [ 1429.018532][T21958] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6153'. [ 1430.396665][T21988] netlink: 'syz.4.6167': attribute type 1 has an invalid length. [ 1430.416777][T21988] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.6167'. [ 1431.142118][T22004] syzkaller0: entered promiscuous mode [ 1431.163486][T22004] syzkaller0: entered allmulticast mode [ 1433.558407][T22029] netlink: 'syz.2.6192': attribute type 9 has an invalid length. [ 1433.577947][T22029] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.6192'. [ 1435.772974][T22053] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 1435.780373][T22053] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 1438.096274][T22085] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode [ 1438.141580][T22085] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 1438.792526][T22097] syzkaller0: entered promiscuous mode [ 1438.813268][T22097] syzkaller0: entered allmulticast mode [ 1441.513748][T22121] warn_alloc: 2 callbacks suppressed [ 1441.513832][T22121] syz.3.6220: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1441.559981][T22121] CPU: 1 PID: 22121 Comm: syz.3.6220 Not tainted syzkaller #0 [ 1441.567528][T22121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1441.577628][T22121] Call Trace: [ 1441.580950][T22121] [ 1441.583927][T22121] dump_stack_lvl+0x18c/0x250 [ 1441.588659][T22121] ? show_regs_print_info+0x20/0x20 [ 1441.593888][T22121] ? load_image+0x420/0x420 [ 1441.598446][T22121] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1441.604878][T22121] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1441.611419][T22121] warn_alloc+0x246/0x340 [ 1441.615804][T22121] ? stack_trace_save+0xaa/0x100 [ 1441.620784][T22121] ? zone_watermark_ok_safe+0x230/0x230 [ 1441.626346][T22121] ? kasan_set_track+0x5f/0x70 [ 1441.631115][T22121] ? kasan_set_track+0x4e/0x70 [ 1441.635882][T22121] ? __kasan_kmalloc+0x8f/0xa0 [ 1441.640673][T22121] ? xsk_init_queue+0xad/0x100 [ 1441.645446][T22121] ? xsk_setsockopt+0x4c9/0x750 [ 1441.650317][T22121] ? do_sock_setsockopt+0x175/0x1a0 [ 1441.655544][T22121] ? __x64_sys_setsockopt+0x182/0x200 [ 1441.660949][T22121] __vmalloc_node_range+0x129/0x1320 [ 1441.666324][T22121] ? free_vm_area+0x50/0x50 [ 1441.670879][T22121] vmalloc_user+0x74/0x80 [ 1441.675237][T22121] ? xskq_create+0xbf/0x170 [ 1441.679768][T22121] xskq_create+0xbf/0x170 [ 1441.684129][T22121] xsk_init_queue+0xad/0x100 [ 1441.688756][T22121] xsk_setsockopt+0x4c9/0x750 [ 1441.693467][T22121] ? xsk_poll+0x670/0x670 [ 1441.697829][T22121] ? __fget_files+0x28/0x460 [ 1441.702444][T22121] ? aa_sock_opt_perm+0x74/0x100 [ 1441.707416][T22121] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1441.712986][T22121] ? security_socket_setsockopt+0x7e/0xa0 [ 1441.718721][T22121] ? xsk_poll+0x670/0x670 [ 1441.723086][T22121] do_sock_setsockopt+0x175/0x1a0 [ 1441.728129][T22121] ? __fdget+0x180/0x210 [ 1441.732402][T22121] __x64_sys_setsockopt+0x182/0x200 [ 1441.737631][T22121] do_syscall_64+0x55/0xb0 [ 1441.742068][T22121] ? clear_bhb_loop+0x40/0x90 [ 1441.746777][T22121] ? clear_bhb_loop+0x40/0x90 [ 1441.751482][T22121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1441.757392][T22121] RIP: 0033:0x7f37c3f9e0d9 [ 1441.761831][T22121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.781458][T22121] RSP: 002b:00007f37c4e9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1441.789895][T22121] RAX: ffffffffffffffda RBX: 00007f37c4225fa0 RCX: 00007f37c3f9e0d9 [ 1441.797886][T22121] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 1441.805873][T22121] RBP: 00007f37c4035024 R08: 0000000000000004 R09: 0000000000000000 [ 1441.813864][T22121] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1441.821854][T22121] R13: 00007f37c4226038 R14: 00007f37c4225fa0 R15: 00007ffdf1b0ece8 [ 1441.829876][T22121] [ 1441.844610][T22121] Mem-Info: [ 1441.852474][T22121] active_anon:15274 inactive_anon:0 isolated_anon:0 [ 1441.852474][T22121] active_file:18560 inactive_file:40477 isolated_file:0 [ 1441.852474][T22121] unevictable:768 dirty:203 writeback:0 [ 1441.852474][T22121] slab_reclaimable:10599 slab_unreclaimable:99022 [ 1441.852474][T22121] mapped:24035 shmem:1373 pagetables:569 [ 1441.852474][T22121] sec_pagetables:0 bounce:0 [ 1441.852474][T22121] kernel_misc_reclaimable:0 [ 1441.852474][T22121] free:1328201 free_pcp:8872 free_cma:0 [ 1441.911332][T22121] Node 0 active_anon:61096kB inactive_anon:0kB active_file:74240kB inactive_file:161704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96140kB dirty:812kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10440kB pagetables:2276kB sec_pagetables:0kB all_unreclaimable? no [ 1441.956546][T22121] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1441.987516][T22121] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1442.023147][T22121] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1442.029301][T22121] Node 0 DMA32 free:1393692kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:61060kB inactive_anon:0kB active_file:74240kB inactive_file:160876kB unevictable:1536kB writepending:812kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:22020kB local_pcp:12208kB free_cma:0kB [ 1442.066716][T22121] lowmem_reserve[]: 0 0 0 0 0 [ 1442.073330][T22121] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1442.100863][T22121] lowmem_reserve[]: 0 0 0 0 0 [ 1442.106261][T22121] Node 1 Normal free:3903748kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12736kB local_pcp:8736kB free_cma:0kB [ 1442.136965][T22121] lowmem_reserve[]: 0 0 0 0 0 [ 1442.150792][T22121] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1442.173694][T22121] Node 0 DMA32: 453*4kB (ME) 1743*8kB (UME) 375*16kB (ME) 787*32kB (UME) 548*64kB (UME) 642*128kB (UME) 379*256kB (UM) 154*512kB (UME) 55*1024kB (UME) 9*2048kB (UM) 239*4096kB (UM) = 1393756kB [ 1442.208965][T22121] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1442.229285][T22121] Node 1 Normal: 215*4kB (UME) 51*8kB (UME) 53*16kB (UME) 178*32kB (UME) 64*64kB (UE) 13*128kB (UME) 2*256kB (UE) 1*512kB (M) 0*1024kB 1*2048kB (E) 949*4096kB (M) = 3903748kB [ 1442.251100][T22121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1442.269761][T22121] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1442.279655][T22121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1442.293104][T22121] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1442.327281][T22121] 60412 total pagecache pages [ 1442.346464][T22121] 0 pages in swap cache [ 1442.362875][T22121] Free swap = 124996kB [ 1442.380143][T22121] Total swap = 124996kB [ 1442.393128][T22121] 2097051 pages RAM [ 1442.401430][T22121] 0 pages HighMem/MovableOnly [ 1442.451136][T22121] 416955 pages reserved [ 1442.455838][T22121] 0 pages cma reserved [ 1442.988616][T22134] netlink: 'syz.3.6224': attribute type 39 has an invalid length. [ 1443.280089][T22142] netlink: 'syz.1.6235': attribute type 39 has an invalid length. [ 1443.536490][T22145] syzkaller0: entered promiscuous mode [ 1443.565868][T22145] syzkaller0: entered allmulticast mode [ 1453.095884][T22196] netlink: 'syz.2.6241': attribute type 39 has an invalid length. [ 1453.541399][T22208] netlink: 'syz.1.6245': attribute type 3 has an invalid length. [ 1453.586388][T22208] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6245'. [ 1456.294293][T22246] netlink: 'syz.2.6265': attribute type 3 has an invalid length. [ 1456.392533][T22246] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6265'. [ 1459.274692][T22279] netlink: 'syz.3.6276': attribute type 3 has an invalid length. [ 1459.321692][T22279] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6276'. [ 1460.809127][T12270] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 1461.836026][T22309] delete_channel: no stack [ 1462.494370][T22321] netlink: 'syz.4.6291': attribute type 3 has an invalid length. [ 1462.574167][T22321] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6291'. [ 1463.103153][T12270] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1466.617094][T22355] netlink: 'syz.2.6306': attribute type 3 has an invalid length. [ 1466.639811][T22355] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6306'. [ 1467.069034][T22362] warn_alloc: 1 callbacks suppressed [ 1467.069073][T22362] syz.1.6309: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1467.117008][T22362] CPU: 0 PID: 22362 Comm: syz.1.6309 Not tainted syzkaller #0 [ 1467.124538][T22362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1467.134628][T22362] Call Trace: [ 1467.137939][T22362] [ 1467.140898][T22362] dump_stack_lvl+0x18c/0x250 [ 1467.145624][T22362] ? show_regs_print_info+0x20/0x20 [ 1467.150863][T22362] ? load_image+0x420/0x420 [ 1467.155416][T22362] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1467.161870][T22362] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1467.168412][T22362] warn_alloc+0x246/0x340 [ 1467.172779][T22362] ? zone_watermark_ok_safe+0x230/0x230 [ 1467.178388][T22362] ? kasan_set_track+0x5f/0x70 [ 1467.183205][T22362] ? kasan_set_track+0x4e/0x70 [ 1467.188005][T22362] ? __kasan_kmalloc+0x8f/0xa0 [ 1467.192804][T22362] ? xsk_init_queue+0xad/0x100 [ 1467.197611][T22362] ? xsk_setsockopt+0x4c9/0x750 [ 1467.202501][T22362] ? do_sock_setsockopt+0x175/0x1a0 [ 1467.207755][T22362] ? __x64_sys_setsockopt+0x182/0x200 [ 1467.213175][T22362] __vmalloc_node_range+0x129/0x1320 [ 1467.218552][T22362] ? free_vm_area+0x50/0x50 [ 1467.223116][T22362] vmalloc_user+0x74/0x80 [ 1467.227488][T22362] ? xskq_create+0xbf/0x170 [ 1467.232042][T22362] xskq_create+0xbf/0x170 [ 1467.236420][T22362] xsk_init_queue+0xad/0x100 [ 1467.241074][T22362] xsk_setsockopt+0x4c9/0x750 [ 1467.245797][T22362] ? xsk_poll+0x670/0x670 [ 1467.250170][T22362] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1467.256360][T22362] ? xsk_poll+0x670/0x670 [ 1467.260728][T22362] ? do_sock_setsockopt+0x15e/0x1a0 [ 1467.265966][T22362] ? xsk_poll+0x670/0x670 [ 1467.270339][T22362] do_sock_setsockopt+0x175/0x1a0 [ 1467.275403][T22362] ? __fdget+0x180/0x210 [ 1467.279687][T22362] __x64_sys_setsockopt+0x182/0x200 [ 1467.284928][T22362] do_syscall_64+0x55/0xb0 [ 1467.289376][T22362] ? clear_bhb_loop+0x40/0x90 [ 1467.294088][T22362] ? clear_bhb_loop+0x40/0x90 [ 1467.298802][T22362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1467.304727][T22362] RIP: 0033:0x7f612e79e0d9 [ 1467.309178][T22362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1467.328820][T22362] RSP: 002b:00007f612f5d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1467.337281][T22362] RAX: ffffffffffffffda RBX: 00007f612ea25fa0 RCX: 00007f612e79e0d9 [ 1467.345292][T22362] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1467.353293][T22362] RBP: 00007f612e835024 R08: 0000000000000004 R09: 0000000000000000 [ 1467.361291][T22362] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1467.369290][T22362] R13: 00007f612ea26038 R14: 00007f612ea25fa0 R15: 00007ffc29049b58 [ 1467.377314][T22362] [ 1467.514322][T12270] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1467.535737][T22362] Mem-Info: [ 1467.539929][T22362] active_anon:15271 inactive_anon:0 isolated_anon:0 [ 1467.539929][T22362] active_file:18560 inactive_file:40487 isolated_file:0 [ 1467.539929][T22362] unevictable:768 dirty:203 writeback:0 [ 1467.539929][T22362] slab_reclaimable:10485 slab_unreclaimable:99408 [ 1467.539929][T22362] mapped:25048 shmem:1373 pagetables:598 [ 1467.539929][T22362] sec_pagetables:0 bounce:0 [ 1467.539929][T22362] kernel_misc_reclaimable:0 [ 1467.539929][T22362] free:1329155 free_pcp:7181 free_cma:0 [ 1467.651669][T22362] Node 0 active_anon:61284kB inactive_anon:0kB active_file:74240kB inactive_file:161744kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100292kB dirty:812kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10504kB pagetables:2492kB sec_pagetables:0kB all_unreclaimable? no [ 1467.717067][T22362] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1467.888043][T22362] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1467.973452][T22362] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1468.014138][T22362] Node 0 DMA32 free:1397508kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:61248kB inactive_anon:0kB active_file:74240kB inactive_file:160916kB unevictable:1536kB writepending:812kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:20296kB local_pcp:16448kB free_cma:0kB [ 1468.081439][T22362] lowmem_reserve[]: 0 0 0 0 0 [ 1468.087476][T22362] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1468.145736][T22362] lowmem_reserve[]: 0 0 0 0 0 [ 1468.162307][T22362] Node 1 Normal free:3903748kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12736kB local_pcp:8736kB free_cma:0kB [ 1468.218818][T22362] lowmem_reserve[]: 0 0 0 0 0 [ 1468.229713][T22362] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1468.298211][T22362] Node 0 DMA32: 1443*4kB (UM) 1741*8kB (UME) 1373*16kB (UME) 442*32kB (UME) 438*64kB (UME) 645*128kB (UME) 379*256kB (UM) 157*512kB (UME) 55*1024kB (UME) 9*2048kB (UM) 239*4096kB (UM) = 1397508kB [ 1468.375926][T22362] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1468.418705][T22362] Node 1 Normal: 215*4kB (UME) 51*8kB (UME) 53*16kB (UME) 178*32kB (UME) 64*64kB (UE) 13*128kB (UME) 2*256kB (UE) 1*512kB (M) 0*1024kB 1*2048kB (E) 949*4096kB (M) = 3903748kB [ 1468.490875][T22362] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1468.533399][T22362] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1468.565911][T22362] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1468.604202][T22362] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1468.628989][T22362] 60420 total pagecache pages [ 1468.651564][T22362] 0 pages in swap cache [ 1468.662856][T22362] Free swap = 124996kB [ 1468.689318][T22362] Total swap = 124996kB [ 1468.710363][T22362] 2097051 pages RAM [ 1468.724638][T22362] 0 pages HighMem/MovableOnly [ 1468.747465][T22362] 416955 pages reserved [ 1468.770768][T22362] 0 pages cma reserved [ 1468.807159][T22388] netlink: 'syz.2.6316': attribute type 3 has an invalid length. [ 1468.840390][T22388] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6316'. [ 1469.334679][T22393] netlink: 'syz.2.6326': attribute type 3 has an invalid length. [ 1469.386313][T22393] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6326'. [ 1471.810483][T22399] delete_channel: no stack [ 1473.929195][T22442] netlink: 'syz.4.6342': attribute type 3 has an invalid length. [ 1473.941282][T22442] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6342'. [ 1475.080632][T22454] netlink: 'syz.3.6339': attribute type 29 has an invalid length. [ 1475.098980][T22451] delete_channel: no stack [ 1475.128809][T22454] netlink: 'syz.3.6339': attribute type 29 has an invalid length. [ 1475.152244][T22459] netlink: 'syz.3.6339': attribute type 29 has an invalid length. [ 1475.190479][T22454] netlink: 'syz.3.6339': attribute type 29 has an invalid length. [ 1475.209912][T22454] netlink: 'syz.3.6339': attribute type 29 has an invalid length. [ 1475.915571][T22479] netlink: 'syz.3.6349': attribute type 1 has an invalid length. [ 1475.950155][T22479] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.6349'. [ 1476.557903][T22490] delete_channel: no stack [ 1476.678097][T22496] netlink: 'syz.2.6355': attribute type 29 has an invalid length. [ 1476.686805][T22496] netlink: 'syz.2.6355': attribute type 29 has an invalid length. [ 1476.737383][T22496] netlink: 'syz.2.6355': attribute type 29 has an invalid length. [ 1479.185467][T22517] validate_nla: 2 callbacks suppressed [ 1479.185485][T22517] netlink: 'syz.1.6362': attribute type 10 has an invalid length. [ 1479.217207][T22510] delete_channel: no stack [ 1479.430850][T22517] mac80211_hwsim hwsim22 ..ãc¤±: entered promiscuous mode [ 1479.458050][T22517] mac80211_hwsim hwsim22 ..ãc¤±: entered allmulticast mode [ 1479.507173][T22517] team0: Port device ..ãc¤± added [ 1479.577714][T22516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.909899][T22556] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6378'. [ 1480.951749][T22557] netlink: 'syz.1.6377': attribute type 1 has an invalid length. [ 1480.960387][T22557] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6377'. [ 1481.222791][T22559] syzkaller0: entered promiscuous mode [ 1481.228337][T22559] syzkaller0: entered allmulticast mode [ 1484.826551][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.838150][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.320735][T22654] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.6405'. [ 1490.341596][T22654] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 1495.714639][T22692] netlink: 'syz.3.6425': attribute type 10 has an invalid length. [ 1495.887913][T22692] mac80211_hwsim hwsim18 ..ãc¤±: entered promiscuous mode [ 1495.914265][T22692] mac80211_hwsim hwsim18 ..ãc¤±: entered allmulticast mode [ 1495.941898][T22692] team0: Port device ..ãc¤± added [ 1495.962336][T22694] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6426'. [ 1496.004239][T22690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1502.600812][T22701] netlink: 'syz.4.6428': attribute type 6 has an invalid length. [ 1502.610163][T22701] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6428'. [ 1502.977000][T22736] netlink: 'syz.4.6437': attribute type 10 has an invalid length. [ 1503.092848][T22736] mac80211_hwsim hwsim24 ..ãc¤±: entered promiscuous mode [ 1503.102038][T22736] mac80211_hwsim hwsim24 ..ãc¤±: entered allmulticast mode [ 1503.120109][T22736] team0: Port device ..ãc¤± added [ 1503.156434][T22735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1505.227682][T22763] netlink: 'syz.1.6448': attribute type 6 has an invalid length. [ 1505.278085][T22763] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6448'. [ 1506.052390][T22780] netlink: 'syz.2.6453': attribute type 10 has an invalid length. [ 1506.848335][T22779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1507.044527][T22780] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 1507.057413][T22780] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 1507.077095][T22780] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 1507.085841][T22780] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 1507.095561][T22780] team0: Port device wlan1 added [ 1508.098783][T22800] syzkaller0: entered promiscuous mode [ 1508.104524][T22800] syzkaller0: entered allmulticast mode [ 1509.970088][T22814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1510.844045][T22812] netlink: 'syz.3.6463': attribute type 6 has an invalid length. [ 1510.852008][T22812] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6463'. [ 1510.867126][T22815] netlink: 'syz.2.6465': attribute type 10 has an invalid length. [ 1512.750507][T22899] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.6474'. [ 1512.786836][T22901] netlink: 'syz.3.6476': attribute type 10 has an invalid length. [ 1512.799202][T22899] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 1512.892928][T22900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1514.501746][T22937] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.6487'. [ 1514.544671][T22937] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 1517.675470][T22941] netlink: 'syz.1.6489': attribute type 10 has an invalid length. [ 1517.823923][T22940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1518.173081][T22959] netlink: 'syz.1.6502': attribute type 10 has an invalid length. [ 1518.188638][T22957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1519.199874][T22972] netlink: 'syz.1.6507': attribute type 10 has an invalid length. [ 1519.217361][T22971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1519.486033][T22978] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.6499'. [ 1519.518714][T22978] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 1519.792850][T22987] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6503'. [ 1520.044339][T22992] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6504'. [ 1520.142545][T22991] netlink: 'syz.4.6506': attribute type 33 has an invalid length. [ 1520.154010][T22991] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6506'. [ 1520.189831][T22991] A link change request failed with some changes committed already. Interface ..ãc¤± may have been left with an inconsistent configuration, please check. [ 1520.809724][T23005] netlink: 'syz.3.6513': attribute type 10 has an invalid length. [ 1520.843446][T23001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1521.304362][T23011] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.6515'. [ 1521.314694][T23011] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 1522.314745][T23037] netlink: 'syz.4.6525': attribute type 10 has an invalid length. [ 1522.547956][T23036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1522.849955][T23049] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6530'. [ 1523.602145][T23065] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6531'. [ 1526.446310][T23098] netlink: 'syz.1.6539': attribute type 10 has an invalid length. [ 1526.478974][T23097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1526.887009][T23106] syzkaller0: entered promiscuous mode [ 1526.925959][T23106] syzkaller0: entered allmulticast mode [ 1527.114982][T23116] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6544'. [ 1531.034606][T23123] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6545'. [ 1533.127909][T23166] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6557'. [ 1538.259762][T23196] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6572'. [ 1540.379865][T23235] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6583'. [ 1542.768637][T23302] syzkaller0: entered promiscuous mode [ 1542.778825][T23302] syzkaller0: entered allmulticast mode [ 1546.268092][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.274823][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.388592][T23310] syzkaller0: entered promiscuous mode [ 1549.396697][T23310] syzkaller0: entered allmulticast mode [ 1551.570945][T23373] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6630'. [ 1561.071864][T23439] û: renamed from bond_slave_0 [ 1568.249091][T23500] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6666'. [ 1568.905625][T23520] raw_sendmsg: syz.1.6673 forgot to set AF_INET. Fix it! [ 1569.968277][T23536] syzkaller0: entered allmulticast mode [ 1570.018610][T23536] syzkaller0: left allmulticast mode [ 1570.223200][T23539] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6679'. [ 1570.899097][T23551] syzkaller0: entered allmulticast mode [ 1571.027141][T23551] syzkaller0: left allmulticast mode [ 1573.247222][T23588] netlink: 'syz.1.6697': attribute type 29 has an invalid length. [ 1573.271728][T23588] netlink: 'syz.1.6697': attribute type 3 has an invalid length. [ 1573.295474][T23588] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6697'. [ 1573.902016][T23593] syzkaller0: entered allmulticast mode [ 1573.968544][T23593] syzkaller0: left allmulticast mode [ 1574.229797][T23603] syzkaller0: entered promiscuous mode [ 1574.245692][T23603] syzkaller0: entered allmulticast mode [ 1577.517319][T23627] syzkaller0: entered promiscuous mode [ 1577.526172][T23627] syzkaller0: entered allmulticast mode [ 1578.831144][T23643] netlink: 'syz.2.6717': attribute type 29 has an invalid length. [ 1578.861739][T23643] netlink: 'syz.2.6717': attribute type 3 has an invalid length. [ 1578.870154][T23643] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6717'. [ 1581.221787][T12270] Bluetooth: hci4: unexpected event 0x16 length: 15 > 6 [ 1582.069719][T23660] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1582.394002][T23674] netlink: 'syz.4.6728': attribute type 29 has an invalid length. [ 1582.409138][T23674] netlink: 'syz.4.6728': attribute type 3 has an invalid length. [ 1582.421562][T23674] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6728'. [ 1586.696036][T12270] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 1589.821910][T23723] netlink: 'syz.3.6744': attribute type 29 has an invalid length. [ 1589.854131][T23723] netlink: 'syz.3.6744': attribute type 3 has an invalid length. [ 1589.873089][T23723] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6744'. [ 1591.379977][T23753] netlink: 'syz.3.6749': attribute type 4 has an invalid length. [ 1592.075256][T23759] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1592.835519][T23766] netlink: 'syz.4.6756': attribute type 29 has an invalid length. [ 1592.852689][T23766] netlink: 'syz.4.6756': attribute type 3 has an invalid length. [ 1592.861386][T23766] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6756'. [ 1593.285799][T23775] netlink: 'syz.4.6767': attribute type 29 has an invalid length. [ 1593.301229][T23775] netlink: 'syz.4.6767': attribute type 3 has an invalid length. [ 1593.324794][T23775] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6767'. [ 1596.348085][T23795] netlink: 'syz.1.6762': attribute type 4 has an invalid length. [ 1596.450458][T23802] netlink: 'syz.1.6775': attribute type 16 has an invalid length. [ 1596.466198][T23802] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6775'. [ 1596.602001][T23806] netlink: 'syz.4.6774': attribute type 10 has an invalid length. [ 1596.670956][T23806] bridge0: port 3(team0) entered disabled state [ 1596.784702][T23806] bridge0: port 3(team0) entered disabled state [ 1596.822113][T23806] team_slave_1: left promiscuous mode [ 1596.848644][T23806] team_slave_1: left allmulticast mode [ 1596.893023][T23806] team0 (unregistering): Port device team_slave_1 removed [ 1596.900386][T23806] geneve1: left promiscuous mode [ 1596.927038][T23806] geneve1: left allmulticast mode [ 1596.987912][T23806] team0 (unregistering): Port device geneve1 removed [ 1597.007447][T23806] mac80211_hwsim hwsim24 ..ãc¤±: left promiscuous mode [ 1597.015073][T23806] mac80211_hwsim hwsim24 ..ãc¤±: left allmulticast mode [ 1597.045812][T23806] team0 (unregistering): Port device ..ãc¤± removed [ 1597.174552][T23824] netlink: 'syz.1.6770': attribute type 29 has an invalid length. [ 1597.192983][T23824] netlink: 'syz.1.6770': attribute type 3 has an invalid length. [ 1597.200777][T23824] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6770'. [ 1598.135076][T23837] netlink: 'syz.4.6783': attribute type 29 has an invalid length. [ 1598.167558][T23837] netlink: 'syz.4.6783': attribute type 3 has an invalid length. [ 1598.232867][T23837] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6783'. [ 1599.420511][T23850] netlink: 'syz.4.6779': attribute type 4 has an invalid length. [ 1599.528679][T23851] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1599.628569][T23856] netlink: 'syz.3.6781': attribute type 16 has an invalid length. [ 1599.636610][T23856] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6781'. [ 1601.271848][T23877] netlink: 'syz.2.6788': attribute type 29 has an invalid length. [ 1601.280194][T23877] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6788'. [ 1604.245125][T23868] validate_nla: 1 callbacks suppressed [ 1604.245144][T23868] netlink: 'syz.3.6786': attribute type 10 has an invalid length. [ 1604.270327][T23868] bridge0: port 4(team0) entered disabled state [ 1604.303629][T23868] bridge0: port 4(team0) entered disabled state [ 1604.312322][T23868] team_slave_1: left promiscuous mode [ 1604.317940][T23868] team_slave_1: left allmulticast mode [ 1604.335141][T23868] team0 (unregistering): Port device team_slave_1 removed [ 1604.362521][T23868] dummy0: left allmulticast mode [ 1604.382482][T23868] team0 (unregistering): Port device dummy0 removed [ 1604.389388][T23868] mac80211_hwsim hwsim18 ..ãc¤±: left promiscuous mode [ 1604.405031][T23868] mac80211_hwsim hwsim18 ..ãc¤±: left allmulticast mode [ 1604.413427][T23868] team0 (unregistering): Port device ..ãc¤± removed [ 1604.444002][T23896] netlink: 'syz.4.6795': attribute type 16 has an invalid length. [ 1604.457714][T23896] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6795'. [ 1604.484502][T23896] veth1_macvtap: entered allmulticast mode [ 1604.503449][T23898] netlink: 'syz.2.6794': attribute type 4 has an invalid length. [ 1605.078948][T23911] netlink: 'syz.4.6800': attribute type 29 has an invalid length. [ 1605.132908][T23911] netlink: 'syz.4.6800': attribute type 3 has an invalid length. [ 1605.182966][T23911] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6800'. [ 1607.705282][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.711744][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.947818][T23937] netlink: 'syz.2.6808': attribute type 4 has an invalid length. [ 1610.189757][T23941] netlink: 'syz.1.6807': attribute type 10 has an invalid length. [ 1612.888409][T23941] bridge0: port 3(team0) entered disabled state [ 1612.958216][T23941] bridge0: port 3(team0) entered disabled state [ 1612.969808][T23941] team_slave_0: left promiscuous mode [ 1612.976027][T23941] team_slave_0: left allmulticast mode [ 1612.984740][T23941] team0 (unregistering): Port device team_slave_0 removed [ 1612.992572][T23941] team_slave_1: left promiscuous mode [ 1612.998321][T23941] team_slave_1: left allmulticast mode [ 1613.014701][T23941] team0 (unregistering): Port device team_slave_1 removed [ 1613.031710][T23941] dummy0: left allmulticast mode [ 1613.051497][T23941] team0 (unregistering): Port device dummy0 removed [ 1613.065937][T23941] geneve1: left promiscuous mode [ 1613.072222][T23941] geneve1: left allmulticast mode [ 1613.079001][T23941] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.088639][T23941] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.102161][T23941] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.111989][T23941] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.135693][T23941] team0 (unregistering): Port device geneve1 removed [ 1613.153851][T23941] mac80211_hwsim hwsim22 ..ãc¤±: left promiscuous mode [ 1613.161037][T23941] mac80211_hwsim hwsim22 ..ãc¤±: left allmulticast mode [ 1613.174642][T23941] team0 (unregistering): Port device ..ãc¤± removed [ 1613.205754][T23942] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1613.502207][T23951] netlink: 'syz.1.6811': attribute type 29 has an invalid length. [ 1613.510284][T23951] netlink: 'syz.1.6811': attribute type 3 has an invalid length. [ 1613.571356][T23951] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6811'. [ 1616.782772][T23961] syzkaller0: entered promiscuous mode [ 1616.788283][T23961] syzkaller0: entered allmulticast mode [ 1617.080786][T23989] netlink: 'syz.3.6821': attribute type 29 has an invalid length. [ 1617.096845][T23989] netlink: 'syz.3.6821': attribute type 3 has an invalid length. [ 1617.105370][T23989] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6821'. [ 1620.426613][T24013] netlink: 'syz.4.6831': attribute type 29 has an invalid length. [ 1620.463787][T24013] netlink: 'syz.4.6831': attribute type 3 has an invalid length. [ 1620.511885][T24013] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6831'. [ 1623.752149][T24031] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.6834'. [ 1623.888128][T24035] netlink: 'syz.1.6836': attribute type 4 has an invalid length. [ 1624.339711][T24038] syzkaller0: entered promiscuous mode [ 1624.348964][T24038] syzkaller0: entered allmulticast mode [ 1624.359102][T24041] netlink: 'syz.1.6846': attribute type 4 has an invalid length. [ 1624.650555][T24047] netlink: 'syz.1.6841': attribute type 29 has an invalid length. [ 1624.666129][T24047] netlink: 'syz.1.6841': attribute type 3 has an invalid length. [ 1624.691531][T24047] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6841'. [ 1629.901942][T24060] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.6847'. [ 1630.811446][T24072] netlink: 'syz.2.6851': attribute type 4 has an invalid length. [ 1630.974310][T24075] netlink: 'syz.3.6853': attribute type 29 has an invalid length. [ 1630.983183][T24075] netlink: 'syz.3.6853': attribute type 3 has an invalid length. [ 1631.004318][T24075] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6853'. [ 1633.551805][T24080] netlink: 'syz.2.6856': attribute type 10 has an invalid length. [ 1634.009308][T24080] team0 (unregistering): left allmulticast mode [ 1634.018283][T24080] team_slave_1: left allmulticast mode [ 1634.051735][T24080] dummy0: left allmulticast mode [ 1634.059509][T24080] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 1634.070632][T24080] team0 (unregistering): left promiscuous mode [ 1634.078864][T24080] team_slave_1: left promiscuous mode [ 1634.086413][T24080] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 1634.096641][T24080] : port 1(team0) entered disabled state [ 1634.133935][T24080] team0 (unregistering): Port device team_slave_1 removed [ 1634.168543][T24080] team0 (unregistering): Port device dummy0 removed [ 1634.178510][T24080] team0 (unregistering): Port device wlan1 removed [ 1638.165363][T24090] netlink: 'syz.2.6867': attribute type 10 has an invalid length. [ 1638.238120][T24096] syzkaller0: entered promiscuous mode [ 1638.243962][T24096] syzkaller0: entered allmulticast mode [ 1640.294206][T24104] netlink: 'syz.2.6870': attribute type 10 has an invalid length. [ 1640.488530][T24109] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.6860'. [ 1640.594662][T24108] netlink: 'syz.2.6872': attribute type 10 has an invalid length. [ 1641.612757][T24122] IPv6: NLM_F_CREATE should be specified when creating new route [ 1641.620652][T24122] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6875'. [ 1645.732935][T24146] netlink: 'syz.4.6879': attribute type 26 has an invalid length. [ 1645.801483][T24146] netlink: 62827 bytes leftover after parsing attributes in process `syz.4.6879'. [ 1646.766937][T24157] syzkaller0: entered promiscuous mode [ 1646.775313][T24157] syzkaller0: entered allmulticast mode [ 1646.784370][T24159] IPv6: NLM_F_CREATE should be specified when creating new route [ 1646.792615][T24159] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6882'. [ 1650.039495][T24171] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6887'. [ 1654.083607][T24215] IPv6: NLM_F_CREATE should be specified when creating new route [ 1654.131029][T24215] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6903'. [ 1657.050133][T24253] IPv6: NLM_F_CREATE should be specified when creating new route [ 1657.092908][T24253] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6916'. [ 1660.394918][T24264] syzkaller0: entered promiscuous mode [ 1660.400573][T24264] syzkaller0: entered allmulticast mode [ 1667.023579][T24353] lo: entered promiscuous mode [ 1669.151704][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.158085][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.840348][T24391] syzkaller0: entered promiscuous mode [ 1671.848413][T24391] syzkaller0: entered allmulticast mode [ 1679.051100][T24432] netlink: 'syz.4.6976': attribute type 3 has an invalid length. [ 1679.123850][T24432] netlink: 'syz.4.6976': attribute type 1 has an invalid length. [ 1679.194537][T24432] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.6976'. [ 1680.717245][T24448] netlink: 'syz.1.6983': attribute type 33 has an invalid length. [ 1680.761189][T24448] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6983'. [ 1683.940576][T24484] syzkaller0: entered promiscuous mode [ 1683.948870][T24484] syzkaller0: entered allmulticast mode [ 1688.624721][T24503] netlink: 'syz.1.7003': attribute type 3 has an invalid length. [ 1688.632754][T24503] netlink: 'syz.1.7003': attribute type 16 has an invalid length. [ 1688.641309][T24503] netlink: 'syz.1.7003': attribute type 18 has an invalid length. [ 1688.652713][T24503] netlink: 'syz.1.7003': attribute type 20 has an invalid length. [ 1688.660567][T24503] netlink: 'syz.1.7003': attribute type 25 has an invalid length. [ 1690.260740][T24533] syzkaller0: entered promiscuous mode [ 1690.270106][T24533] syzkaller0: entered allmulticast mode [ 1695.175686][T24572] syzkaller0: entered promiscuous mode [ 1695.182879][T24572] syzkaller0: entered allmulticast mode [ 1698.267242][T24604] syzkaller0: entered promiscuous mode [ 1698.281461][T24604] syzkaller0: entered allmulticast mode [ 1703.586986][T24614] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7041'. [ 1703.624906][T24614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1703.649546][T24614] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1703.688538][T24614] bond0 (unregistering): Released all slaves [ 1707.342797][T24647] netlink: 'syz.2.7056': attribute type 10 has an invalid length. [ 1708.165796][T24649] netlink: 'syz.4.7057': attribute type 4 has an invalid length. [ 1708.219854][T24651] netlink: 'syz.1.7058': attribute type 10 has an invalid length. [ 1708.246419][T24651] hsr0: entered promiscuous mode [ 1708.286106][T24651] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1708.341270][T24651] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1708.373352][T24651] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1708.405894][T24651] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1709.719399][T24679] netlink: 'syz.2.7067': attribute type 3 has an invalid length. [ 1709.748625][T24679] netlink: 'syz.2.7067': attribute type 16 has an invalid length. [ 1709.776704][T24679] netlink: 'syz.2.7067': attribute type 18 has an invalid length. [ 1709.796137][T24679] netlink: 'syz.2.7067': attribute type 20 has an invalid length. [ 1709.809668][T24679] netlink: 'syz.2.7067': attribute type 25 has an invalid length. [ 1716.534366][T24725] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7080'. [ 1717.404609][T24725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1717.471992][T24725] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1719.240956][T24725] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1719.256636][T24725] veth1_vlan: left allmulticast mode [ 1719.265493][T24725] bond0 (unregistering): Released all slaves [ 1719.379581][T24740] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7085'. [ 1719.400316][T24740] hsr_slave_0: left promiscuous mode [ 1719.408875][T24740] hsr_slave_1: left promiscuous mode [ 1719.515794][T24745] netlink: 'syz.4.7087': attribute type 10 has an invalid length. [ 1722.017797][T24756] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.7090'. [ 1722.028048][T24756] bridge_slave_1: default FDB implementation only supports local addresses [ 1724.076058][T24787] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7097'. [ 1724.259842][T24787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1724.308367][T24787] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1724.318381][T24787] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.328256][T24787] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.341403][T24787] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.350903][T24787] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.379433][T24787] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1724.394686][T24787] veth1_vlan: left allmulticast mode [ 1724.403924][T24787] bond0 (unregistering): Released all slaves [ 1724.568524][T24793] netlink: 'syz.1.7099': attribute type 10 has an invalid length. [ 1728.088303][T24823] netlink: 'syz.4.7109': attribute type 3 has an invalid length. [ 1728.131748][T24823] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.7109'. [ 1728.624113][T24828] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7111'. [ 1729.022132][T24828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1729.079535][T24828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1729.162186][T24828] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1729.190737][T24828] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1729.227201][T24828] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1729.247861][T24828] bond0 (unregistering): Released all slaves [ 1729.410510][T24831] netlink: 'syz.3.7112': attribute type 10 has an invalid length. [ 1730.623806][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.630549][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.685670][T24847] netlink: 'syz.4.7127': attribute type 10 has an invalid length. [ 1732.095581][T24863] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7123'. [ 1733.343520][T24886] netlink: 'syz.1.7130': attribute type 10 has an invalid length. [ 1737.020917][T24922] netlink: 'syz.2.7141': attribute type 10 has an invalid length. [ 1738.419027][T24934] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7143'. [ 1744.587205][T24990] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7162'. [ 1744.727908][T24990] hsr_slave_0: left promiscuous mode [ 1744.854937][T24990] hsr_slave_1: left promiscuous mode [ 1745.100795][T24990] bridge0: port 3(hsr0) entered disabled state [ 1745.324305][T24990] hsr0 (unregistering): left allmulticast mode [ 1745.330962][T24990] bridge0: port 3(hsr0) entered disabled state [ 1745.406411][T24994] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.7163'. [ 1745.669834][T25005] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7173'. [ 1745.741960][T25005] hsr_slave_0: left promiscuous mode [ 1745.985125][T25005] hsr_slave_1: left promiscuous mode [ 1746.346634][T25014] À: port 1(vlan0) entered blocking state [ 1746.353384][T25014] À: port 1(vlan0) entered disabled state [ 1746.359396][T25014] vlan0: entered allmulticast mode [ 1746.371619][T25014] vlan0: entered promiscuous mode [ 1747.597930][T25041] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.7176'. [ 1747.826743][T25043] netlink: 668 bytes leftover after parsing attributes in process `syz.1.7177'. [ 1747.863299][T25043] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1747.912124][T25043] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1748.070182][T25051] À: port 1(vlan0) entered blocking state [ 1748.099593][T25051] À: port 1(vlan0) entered disabled state [ 1748.110623][T25051] vlan0: entered allmulticast mode [ 1748.170174][T25051] vlan0: entered promiscuous mode [ 1748.342096][T25054] syzkaller0: entered promiscuous mode [ 1750.496656][T25058] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7181'. [ 1750.506027][T25058] hsr_slave_0: left promiscuous mode [ 1750.512260][T25058] hsr_slave_1: left promiscuous mode [ 1751.344681][T25081] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.7189'. [ 1751.421654][T25086] À: port 1(vlan0) entered blocking state [ 1751.427544][T25086] À: port 1(vlan0) entered disabled state [ 1751.478883][T25086] vlan0: entered allmulticast mode [ 1751.489053][T25086] vlan0: entered promiscuous mode [ 1751.892285][T25097] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7195'. [ 1753.498963][T25125] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7203'. [ 1753.511761][T25127] À: port 1(vlan0) entered blocking state [ 1753.517704][T25127] À: port 1(vlan0) entered disabled state [ 1753.524292][T25127] vlan0: entered allmulticast mode [ 1753.530803][T25127] vlan0: entered promiscuous mode [ 1753.757018][T25131] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.7204'. [ 1754.032387][T25139] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7206'. [ 1754.736595][T25154] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7218'. [ 1755.364559][T25170] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.7220'. [ 1756.597898][T25184] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7224'. [ 1757.162295][T25194] netlink: 'syz.2.7235': attribute type 26 has an invalid length. [ 1757.202505][T25194] netlink: 62827 bytes leftover after parsing attributes in process `syz.2.7235'. [ 1757.524451][T25168] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7217'. [ 1757.563143][T25168] bridge_slave_1: default FDB implementation only supports local addresses [ 1761.838065][T25248] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7242'. [ 1761.891012][T25248] bridge_slave_1: default FDB implementation only supports local addresses [ 1764.052339][T25274] netlink: 160 bytes leftover after parsing attributes in process `syz.2.7252'. [ 1766.469382][T25317] netlink: 'syz.3.7270': attribute type 26 has an invalid length. [ 1766.478915][T25317] netlink: 62827 bytes leftover after parsing attributes in process `syz.3.7270'. [ 1769.222108][T25349] netlink: 'syz.3.7284': attribute type 9 has an invalid length. [ 1769.241180][T25349] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.7284'. [ 1769.446848][T25358] netlink: 160 bytes leftover after parsing attributes in process `syz.4.7279'. [ 1774.987649][T25454] syzkaller0: entered promiscuous mode [ 1774.997622][T25454] syzkaller0: entered allmulticast mode [ 1779.348344][T25495] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7327'. Stopping sshd: stopped /usr/sbin/sshd (pid 5532) OK Stopping crond: stopped /usr/sbin/crond (pid 5516) OK [ 1781.425452][T25530] netlink: 'syz.1.7342': attribute type 15 has an invalid length. Stopping dhcpcd... [ 1782.087395][T25544] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7346'. stopped /sbin/dhcpcd (pid 5433) [ 1782.203010][T25549] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7346'. [ 1782.238444][T25544] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7346'. [ 1782.369137][T25549] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.7346'. Stopping network: [ 1783.809406][T25590] netlink: 'syz.2.7357': attribute type 3 has an invalid length. [ 1783.822434][T25590] netlink: 'syz.2.7357': attribute type 4 has an invalid length. [ 1783.837209][T25590] netlink: 'syz.2.7357': attribute type 7 has an invalid length. [ 1783.847372][T25590] netlink: 'syz.2.7357': attribute type 8 has an invalid length. [ 1783.897308][T25590] netlink: 'syz.2.7357': attribute type 7 has an invalid length. [ 1783.921397][T25590] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.7357'. OK Stopping iptables: OK Stopping system message bus: [ 1785.707220][T25638] netlink: set zone limit has 8 unknown bytes done [ 1786.526589][T25646] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.7381'. [ 1786.619776][T25646] netlink: zone id is out of range [ 1786.659493][T25646] netlink: zone id is out of range [ 1786.678530][T25646] netlink: zone id is out of range [ 1786.716051][T25646] netlink: zone id is out of range [ 1786.746200][T25646] netlink: zone id is out of range [ 1786.781568][T25646] netlink: zone id is out of range [ 1786.787452][T25646] netlink: zone id is out of range [ 1786.813933][T25646] netlink: zone id is out of range [ 1786.830242][T25646] netlink: zone id is out of range [ 1787.872303][T12270] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1788.189054][T25676] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7382'. [ 1788.588257][T25678] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7382'. [ 1788.631899][T25682] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.7382'. [ 1788.660422][T25676] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7382'. [ 1789.433504][T25692] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.7385'. [ 1789.808288][T25700] netlink: 'syz.1.7389': attribute type 39 has an invalid length. Stopping klogd: OK Stopping acpid: [ 1791.181864][T25723] net_ratelimit: 172 callbacks suppressed [ 1791.181885][T25723] netlink: set zone limit has 8 unknown bytes OK [ 1792.110358][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.127271][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.150387][T25732] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.7398'. [ 1792.195705][T25732] netlink: zone id is out of range [ 1792.207359][T25732] netlink: zone id is out of range [ 1792.224436][T25732] netlink: zone id is out of range [ 1792.230256][T25732] netlink: zone id is out of range Stopping syslogd: [ 1792.262326][T25732] netlink: zone id is out of range [ 1792.267884][T25732] netlink: zone id is out of range [ 1792.326555][T25732] netlink: zone id is out of range [ 1792.340085][T25732] netlink: zone id is out of range [ 1792.371813][T25732] netlink: zone id is out of range stopped /sbin/syslogd (pid 5121) OK [ 1792.558190][T12270] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 1792.832013][T25748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7403'. umount: can't remount debugfs read-only [ 1793.860542][T25767] netlink: 'syz.3.7411': attribute type 39 has an invalid length. [ 1794.555663][T25772] netlink: 'syz.4.7412': attribute type 4 has an invalid length. [ 1795.379367][T25786] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7418'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.175 closed by remote host. [ 1798.400797][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.560518][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 1798.689338][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.747275][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.663059][T25815] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1799.674511][T25815] ACPI: PM: Preparing to enter system sleep state S5 [ 1799.683735][T25815] kvm: exiting hardware virtualization [ 1799.689343][T25815] reboot: Power down serialport: VM disconnected.