last executing test programs: 25.081845982s ago: executing program 1 (id=37706): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 24.858928889s ago: executing program 1 (id=37710): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 24.46806344s ago: executing program 1 (id=37713): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x30, 0x0, 0x5000) 19.298325418s ago: executing program 1 (id=37722): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7ffffffffffffffe}, 0x0, 0x0, 0xc2bb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 18.9302116s ago: executing program 1 (id=37727): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000008000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x5, 0x0, 0x3}, {}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 18.766813675s ago: executing program 4 (id=37730): socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x2010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2b, 0x5}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 18.61418367s ago: executing program 1 (id=37732): r0 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x410644f5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5450, 0xf0ff1f00000000) socketpair(0x1d, 0xa, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) 17.554366242s ago: executing program 4 (id=37734): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 17.272460381s ago: executing program 4 (id=37735): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x800, 0x22, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x60, 0x0}, 0x40000001) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)="c77d6b1910ac", 0x6}], 0x1}, 0x11) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)}, 0x14002) 15.461805176s ago: executing program 4 (id=37737): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) 5.378433795s ago: executing program 2 (id=37766): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 5.334274626s ago: executing program 2 (id=37767): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 5.19568739s ago: executing program 2 (id=37768): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5.022370396s ago: executing program 2 (id=37769): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb, 0x7}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x9a) 4.937932759s ago: executing program 2 (id=37770): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.766417704s ago: executing program 2 (id=37772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2e, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a89080403fe80000020006558", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 4.764203744s ago: executing program 4 (id=37773): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000010000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.378564936s ago: executing program 3 (id=37776): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x40, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0xf000}, @timestamp={0x44, 0x4, 0x88}]}}}], 0x38}, 0x0) 3.23928737s ago: executing program 32 (id=37732): r0 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x410644f5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5450, 0xf0ff1f00000000) socketpair(0x1d, 0xa, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) 1.501970354s ago: executing program 3 (id=37778): r0 = socket$kcm(0xa, 0x3, 0x11) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x80108907, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 1.494193494s ago: executing program 0 (id=37779): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x3, 0x84) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000340)='\x02\x00\x00\x00\xbc$j\xfef;q1\xff\xd3r\xa3\xc81U\x8ez.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcd\x01t\r=\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') gettid() socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$unix(r0, 0x0, 0x80) 1.414908606s ago: executing program 4 (id=37780): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 1.194251683s ago: executing program 0 (id=37781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0x12}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x41, 0x0}, 0x10) 1.120040306s ago: executing program 0 (id=37782): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff99}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x2a, 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.043577478s ago: executing program 0 (id=37783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 919.244222ms ago: executing program 0 (id=37784): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x8, 0x0, 0x0}}, 0x10) 776.792946ms ago: executing program 0 (id=37785): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="0200ffffff8d"}) 758.004027ms ago: executing program 3 (id=37786): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) write$cgroup_subtree(r1, 0x0, 0xfe33) 537.577733ms ago: executing program 3 (id=37787): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x42}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x28, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 268.365881ms ago: executing program 3 (id=37788): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x7, 0x0, 0x3, 0x0, 0x10000000000, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_config_ext={0x0, 0x4}, 0x20, 0x3, 0xfffffffc, 0x6, 0x7, 0x4, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x10, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') 0s ago: executing program 3 (id=37789): socket$kcm(0x29, 0x2, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x407, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x86400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x8, 0x9}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x8400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000000), 0x15) kernel console output (not intermixed with test programs): 968 bytes leftover after parsing attributes in process `syz.4.32816'. [ 2273.209146][ T9337] netlink: 'syz.0.32815': attribute type 3 has an invalid length. [ 2273.218597][ T9337] netlink: 152 bytes leftover after parsing attributes in process `syz.0.32815'. [ 2273.639646][ T9371] device sit0 entered promiscuous mode [ 2274.614376][ T9388] device syzkaller0 entered promiscuous mode [ 2279.730019][ T9416] device sit0 entered promiscuous mode [ 2281.397641][ T9473] device syzkaller0 entered promiscuous mode [ 2283.237230][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.243586][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.627916][ T9513] netlink: 'syz.0.32888': attribute type 29 has an invalid length. [ 2284.655525][ T9513] netlink: 'syz.0.32888': attribute type 29 has an invalid length. [ 2284.707581][ T9513] netlink: 'syz.0.32888': attribute type 29 has an invalid length. [ 2284.757862][ T9513] netlink: 'syz.0.32888': attribute type 29 has an invalid length. [ 2284.807846][ T9513] netlink: 'syz.0.32888': attribute type 29 has an invalid length. [ 2284.846948][ T9513] netlink: 'syz.0.32888': attribute type 29 has an invalid length. [ 2286.444111][ T9550] device syzkaller0 entered promiscuous mode [ 2287.034090][ T9566] netlink: 'syz.2.32907': attribute type 29 has an invalid length. [ 2289.289616][ T9566] netlink: 'syz.2.32907': attribute type 29 has an invalid length. [ 2291.875488][ T3128] wlan1: Trigger new scan to find an IBSS to join [ 2293.111269][ T9671] sctp: [Deprecated]: syz.3.32965 (pid 9671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2293.111269][ T9671] Use struct sctp_sack_info instead [ 2294.938057][ T3128] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2295.876367][ T3128] wlan1: Trigger new scan to find an IBSS to join [ 2297.769142][T22459] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 2298.318518][ T9789] sctp: [Deprecated]: syz.4.33005 (pid 9789) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2298.318518][ T9789] Use struct sctp_sack_info instead [ 2302.340558][ T9883] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.33049'. [ 2302.389596][ T9885] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.33050'. [ 2302.408175][ T9885] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2302.416907][ T9885] CPU: 1 PID: 9885 Comm: syz.1.33050 Not tainted syzkaller #0 [ 2302.424435][ T9885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2302.434549][ T9885] Call Trace: [ 2302.437882][ T9885] [ 2302.440952][ T9885] dump_stack_lvl+0x188/0x24e [ 2302.445714][ T9885] ? show_regs_print_info+0x12/0x12 [ 2302.450998][ T9885] ? load_image+0x400/0x400 [ 2302.455602][ T9885] sysfs_warn_dup+0x8a/0xa0 [ 2302.460176][ T9885] sysfs_do_create_link_sd+0xc0/0x110 [ 2302.465615][ T9885] device_add+0x7ed/0xfb0 [ 2302.469999][ T9885] wiphy_register+0x1d9f/0x2ac0 [ 2302.474928][ T9885] ? cfg80211_event_work+0x40/0x40 [ 2302.480085][ T9885] ? minstrel_ht_alloc+0x894/0xa20 [ 2302.485258][ T9885] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2302.491369][ T9885] ieee80211_register_hw+0x2d00/0x39f0 [ 2302.496895][ T9885] ? ieee80211_register_hw+0xf41/0x39f0 [ 2302.502569][ T9885] ? ieee80211_register_hw+0xe41/0x39f0 [ 2302.508173][ T9885] ? ieee80211_tasklet_handler+0x20/0x20 [ 2302.513886][ T9885] ? memset+0x1e/0x40 [ 2302.517929][ T9885] ? __hrtimer_init+0x186/0x270 [ 2302.522827][ T9885] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2302.528626][ T9885] hwsim_new_radio_nl+0xafa/0xce0 [ 2302.533716][ T9885] genl_family_rcv_msg_doit+0x22a/0x330 [ 2302.539307][ T9885] ? end_current_label_crit_section+0x170/0x170 [ 2302.545593][ T9885] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2302.551535][ T9885] ? bpf_lsm_capable+0x5/0x10 [ 2302.556251][ T9885] ? security_capable+0x85/0xb0 [ 2302.561152][ T9885] genl_rcv_msg+0x604/0x790 [ 2302.565700][ T9885] ? genl_bind+0x360/0x360 [ 2302.570156][ T9885] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2302.576549][ T9885] netlink_rcv_skb+0x1fb/0x450 [ 2302.581352][ T9885] ? genl_bind+0x360/0x360 [ 2302.585802][ T9885] ? netlink_ack+0x1170/0x1170 [ 2302.590620][ T9885] ? down_read+0x1a8/0x2d0 [ 2302.595104][ T9885] genl_rcv+0x24/0x40 [ 2302.599116][ T9885] netlink_unicast+0x74d/0x8d0 [ 2302.603939][ T9885] netlink_sendmsg+0x8ad/0xbd0 [ 2302.608938][ T9885] ? netlink_getsockopt+0x550/0x550 [ 2302.614185][ T9885] ? aa_sock_msg_perm+0x94/0x150 [ 2302.619165][ T9885] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2302.624478][ T9885] ? security_socket_sendmsg+0x7c/0xa0 [ 2302.629981][ T9885] ? netlink_getsockopt+0x550/0x550 [ 2302.635269][ T9885] ____sys_sendmsg+0x5be/0x970 [ 2302.640093][ T9885] ? __sys_sendmsg_sock+0x30/0x30 [ 2302.645154][ T9885] ? __import_iovec+0x315/0x500 [ 2302.650055][ T9885] ? import_iovec+0x6f/0xa0 [ 2302.654690][ T9885] ___sys_sendmsg+0x2a2/0x360 [ 2302.659417][ T9885] ? try_to_wake_up+0x67c/0x1080 [ 2302.664419][ T9885] ? __sys_sendmsg+0x290/0x290 [ 2302.669323][ T9885] __se_sys_sendmsg+0x1bb/0x2a0 [ 2302.674262][ T9885] ? __x64_sys_sendmsg+0x80/0x80 [ 2302.679274][ T9885] ? lockdep_hardirqs_on+0x94/0x140 [ 2302.684512][ T9885] do_syscall_64+0x4c/0xa0 [ 2302.689064][ T9885] ? clear_bhb_loop+0x60/0xb0 [ 2302.693786][ T9885] ? clear_bhb_loop+0x60/0xb0 [ 2302.698503][ T9885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2302.704442][ T9885] RIP: 0033:0x7f7b4259ce59 [ 2302.708891][ T9885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2302.728534][ T9885] RSP: 002b:00007f7b433c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2302.736985][ T9885] RAX: ffffffffffffffda RBX: 00007f7b42815fa0 RCX: 00007f7b4259ce59 [ 2302.745084][ T9885] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 2302.753083][ T9885] RBP: 00007f7b42632d6f R08: 0000000000000000 R09: 0000000000000000 [ 2302.761087][ T9885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2302.769084][ T9885] R13: 00007f7b42816038 R14: 00007f7b42815fa0 R15: 00007ffd868d03e8 [ 2302.777113][ T9885] [ 2304.713526][ T5724] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 2305.835567][ T9955] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.33080'. [ 2307.124266][ T9980] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.33090'. [ 2307.699392][ T9988] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.33095'. [ 2311.687908][ T5724] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 2313.008033][T10059] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.33125'. [ 2313.334327][T10069] tap0: tun_chr_ioctl cmd 1074812117 [ 2314.138025][T10094] netlink: 'syz.1.33141': attribute type 27 has an invalid length. [ 2314.176675][T10094] C: renamed from team_slave_0 [ 2314.525000][T10106] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.33146'. [ 2314.578798][T10106] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2318.474354][T10143] netlink: 'syz.4.33163': attribute type 27 has an invalid length. [ 2318.491237][T10142] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.33161'. [ 2318.500747][T10143] C: renamed from team_slave_0 [ 2318.548342][T10142] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2318.572707][T10142] CPU: 0 PID: 10142 Comm: syz.0.33161 Not tainted syzkaller #0 [ 2318.580354][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2318.590473][T10142] Call Trace: [ 2318.593902][T10142] [ 2318.596890][T10142] dump_stack_lvl+0x188/0x24e [ 2318.601656][T10142] ? show_regs_print_info+0x12/0x12 [ 2318.606930][T10142] ? load_image+0x400/0x400 [ 2318.611528][T10142] sysfs_warn_dup+0x8a/0xa0 [ 2318.616136][T10142] sysfs_do_create_link_sd+0xc0/0x110 [ 2318.621764][T10142] device_add+0x7ed/0xfb0 [ 2318.626195][T10142] wiphy_register+0x1d9f/0x2ac0 [ 2318.631254][T10142] ? cfg80211_event_work+0x40/0x40 [ 2318.636447][T10142] ? minstrel_ht_alloc+0x894/0xa20 [ 2318.641654][T10142] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2318.647806][T10142] ieee80211_register_hw+0x2d00/0x39f0 [ 2318.653342][T10142] ? ieee80211_register_hw+0xf41/0x39f0 [ 2318.658947][T10142] ? ieee80211_register_hw+0xe41/0x39f0 [ 2318.664549][T10142] ? ieee80211_tasklet_handler+0x20/0x20 [ 2318.670262][T10142] ? memset+0x1e/0x40 [ 2318.674283][T10142] ? __hrtimer_init+0x186/0x270 [ 2318.679236][T10142] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2318.685067][T10142] hwsim_new_radio_nl+0xafa/0xce0 [ 2318.690197][T10142] genl_family_rcv_msg_doit+0x22a/0x330 [ 2318.695802][T10142] ? end_current_label_crit_section+0x170/0x170 [ 2318.702125][T10142] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2318.708427][T10142] ? bpf_lsm_capable+0x5/0x10 [ 2318.713158][T10142] ? security_capable+0x85/0xb0 [ 2318.718087][T10142] genl_rcv_msg+0x604/0x790 [ 2318.722655][T10142] ? genl_bind+0x360/0x360 [ 2318.727131][T10142] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2318.733564][T10142] netlink_rcv_skb+0x1fb/0x450 [ 2318.738494][T10142] ? genl_bind+0x360/0x360 [ 2318.742963][T10142] ? netlink_ack+0x1170/0x1170 [ 2318.747798][T10142] ? down_read+0x1a8/0x2d0 [ 2318.752274][T10142] genl_rcv+0x24/0x40 [ 2318.756294][T10142] netlink_unicast+0x74d/0x8d0 [ 2318.761138][T10142] netlink_sendmsg+0x8ad/0xbd0 [ 2318.765980][T10142] ? netlink_getsockopt+0x550/0x550 [ 2318.771233][T10142] ? aa_sock_msg_perm+0x94/0x150 [ 2318.776221][T10142] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2318.781555][T10142] ? security_socket_sendmsg+0x7c/0xa0 [ 2318.787243][T10142] ? netlink_getsockopt+0x550/0x550 [ 2318.792492][T10142] ____sys_sendmsg+0x5be/0x970 [ 2318.797413][T10142] ? __sys_sendmsg_sock+0x30/0x30 [ 2318.802489][T10142] ? __import_iovec+0x315/0x500 [ 2318.807395][T10142] ? import_iovec+0x6f/0xa0 [ 2318.811951][T10142] ___sys_sendmsg+0x2a2/0x360 [ 2318.816675][T10142] ? try_to_wake_up+0x67c/0x1080 [ 2318.821670][T10142] ? __sys_sendmsg+0x290/0x290 [ 2318.826564][T10142] __se_sys_sendmsg+0x1bb/0x2a0 [ 2318.831460][T10142] ? __x64_sys_sendmsg+0x80/0x80 [ 2318.836461][T10142] ? lockdep_hardirqs_on+0x94/0x140 [ 2318.841704][T10142] do_syscall_64+0x4c/0xa0 [ 2318.846171][T10142] ? clear_bhb_loop+0x60/0xb0 [ 2318.850900][T10142] ? clear_bhb_loop+0x60/0xb0 [ 2318.855642][T10142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2318.861582][T10142] RIP: 0033:0x7f8faef9ce59 [ 2318.866036][T10142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2318.885754][T10142] RSP: 002b:00007f8fafe73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2318.894230][T10142] RAX: ffffffffffffffda RBX: 00007f8faf215fa0 RCX: 00007f8faef9ce59 [ 2318.902275][T10142] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 2318.910298][T10142] RBP: 00007f8faf032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2318.918319][T10142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2318.926333][T10142] R13: 00007f8faf216038 R14: 00007f8faf215fa0 R15: 00007ffea5e99698 [ 2318.934382][T10142] [ 2320.716458][ T5724] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 2320.728498][T10210] netlink: 168 bytes leftover after parsing attributes in process `syz.3.33195'. [ 2320.794152][T10216] tap0: tun_chr_ioctl cmd 1074812117 [ 2320.965000][T10219] netlink: 112 bytes leftover after parsing attributes in process `syz.1.33198'. [ 2321.298984][T10234] netlink: 112 bytes leftover after parsing attributes in process `syz.2.33214'. [ 2322.459794][T10251] netlink: 168 bytes leftover after parsing attributes in process `syz.0.33210'. [ 2322.676973][T10259] tap0: tun_chr_ioctl cmd 1074812117 [ 2322.792090][T10263] netlink: 112 bytes leftover after parsing attributes in process `syz.0.33217'. [ 2323.319164][T10279] netlink: 168 bytes leftover after parsing attributes in process `syz.2.33225'. [ 2325.862195][ T3128] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2327.806261][T22459] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2328.671782][ T5724] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 2329.639588][T10442] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.33292'. [ 2331.837419][T10471] netlink: 'syz.3.33307': attribute type 3 has an invalid length. [ 2331.857766][T10471] netlink: 'syz.3.33307': attribute type 1 has an invalid length. [ 2331.878627][T10471] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.33307'. [ 2334.298618][T10521] netlink: 'syz.2.33327': attribute type 3 has an invalid length. [ 2334.341252][T10521] netlink: 'syz.2.33327': attribute type 1 has an invalid length. [ 2334.360882][T10521] netlink: 198452 bytes leftover after parsing attributes in process `syz.2.33327'. [ 2336.824259][T10579] device pim6reg1 entered promiscuous mode [ 2337.618712][T10605] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.33365'. [ 2339.052506][T10627] netlink: 'syz.4.33379': attribute type 21 has an invalid length. [ 2340.694908][T10673] netlink: 'syz.3.33399': attribute type 3 has an invalid length. [ 2340.718830][T10673] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.33399'. [ 2342.823547][T10732] netlink: 'syz.3.33423': attribute type 21 has an invalid length. [ 2344.677483][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.683857][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.974959][T10765] netlink: 'syz.2.33440': attribute type 21 has an invalid length. [ 2346.396769][T10793] netlink: 'syz.1.33451': attribute type 10 has an invalid length. [ 2346.591097][T10793] team0: Device wg1 is of different type [ 2347.881936][T10821] netlink: 'syz.3.33461': attribute type 22 has an invalid length. [ 2348.249456][T10826] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.33475'. [ 2348.538925][ T5724] Bluetooth: hci2: Malformed Event: 0x02 [ 2349.817038][T10859] netlink: 10 bytes leftover after parsing attributes in process `syz.1.33478'. [ 2350.149417][ T5724] Bluetooth: hci0: Malformed Event: 0x02 [ 2350.207153][T10870] sock: sock_timestamping_bind_phc: sock not bind to device [ 2351.973059][T10896] netlink: 'syz.0.33494': attribute type 21 has an invalid length. [ 2352.678748][ T5724] Bluetooth: hci1: Malformed Event: 0x02 [ 2353.654572][T10932] netlink: 'syz.0.33521': attribute type 22 has an invalid length. [ 2353.722411][T10936] netlink: 'syz.1.33511': attribute type 21 has an invalid length. [ 2353.875782][T10939] netlink: 'syz.0.33515': attribute type 10 has an invalid length. [ 2353.946215][T10939] device wg1 entered promiscuous mode [ 2353.951877][T10939] team0: Device wg1 is of different type [ 2355.909291][T10978] netlink: 'syz.3.33531': attribute type 10 has an invalid length. [ 2355.999697][T10978] device wg1 entered promiscuous mode [ 2356.016323][T10978] team0: Device wg1 is of different type [ 2356.863161][T10998] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.33541'. [ 2357.554950][ T5724] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2359.547262][T11070] bridge0: port 3(veth1_to_hsr) entered blocking state [ 2359.554680][T11070] bridge0: port 3(veth1_to_hsr) entered disabled state [ 2359.604838][T11070] device veth1_to_hsr entered promiscuous mode [ 2359.613425][T11070] bridge0: port 3(veth1_to_hsr) entered blocking state [ 2359.620454][T11070] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 2359.636863][ T5724] Bluetooth: hci4: command 0x2016 tx timeout [ 2359.643978][T11072] netlink: 10 bytes leftover after parsing attributes in process `syz.3.33572'. [ 2361.358014][T11108] netlink: 'syz.4.33590': attribute type 10 has an invalid length. [ 2361.458182][T11108] device wg1 entered promiscuous mode [ 2361.473174][T11108] team0: Device wg1 is of different type [ 2361.579766][T11113] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.33592'. [ 2364.632727][T11124] netlink: 'syz.2.33596': attribute type 21 has an invalid length. [ 2364.773530][ T5724] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 2365.347540][T11151] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.33609'. [ 2365.594386][T11161] netlink: 'syz.0.33613': attribute type 21 has an invalid length. [ 2365.637340][ T5724] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2365.983207][T11175] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.33630'. [ 2366.006526][T11175] netlink: 'syz.0.33630': attribute type 1 has an invalid length. [ 2366.014423][T11175] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.33630'. [ 2366.488657][T11184] bridge0: port 3(veth1_to_hsr) entered blocking state [ 2366.553708][T11184] bridge0: port 3(veth1_to_hsr) entered disabled state [ 2366.595853][T11184] device veth1_to_hsr entered promiscuous mode [ 2366.644504][T11184] bridge0: port 3(veth1_to_hsr) entered blocking state [ 2366.651573][T11184] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 2366.835149][ T5724] Bluetooth: hci2: command 0x2016 tx timeout [ 2367.127725][T11191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.33627'. [ 2367.414926][T11205] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.33635'. [ 2367.452039][T11205] netlink: 'syz.1.33635': attribute type 1 has an invalid length. [ 2367.473611][T11205] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.33635'. [ 2367.721447][ T5724] Bluetooth: hci3: command 0x2016 tx timeout [ 2367.750722][T11217] bridge0: port 4(veth1_to_hsr) entered blocking state [ 2367.782495][T11217] bridge0: port 4(veth1_to_hsr) entered disabled state [ 2367.827433][T11217] device veth1_to_hsr entered promiscuous mode [ 2367.845896][T11217] bridge0: port 4(veth1_to_hsr) entered blocking state [ 2367.852971][T11217] bridge0: port 4(veth1_to_hsr) entered forwarding state [ 2368.170672][T11227] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.33645'. [ 2368.214538][T11227] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2368.951406][T11242] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.33650'. [ 2369.013891][T11242] netlink: 'syz.4.33650': attribute type 1 has an invalid length. [ 2369.052811][T11242] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.33650'. [ 2369.499503][T11255] netlink: 'syz.0.33656': attribute type 2 has an invalid length. [ 2369.507989][T11255] netlink: 'syz.0.33656': attribute type 4 has an invalid length. [ 2369.517533][T11255] netlink: 'syz.0.33656': attribute type 8 has an invalid length. [ 2369.529317][T11255] netlink: 'syz.0.33656': attribute type 9 has an invalid length. [ 2369.538623][T11255] netlink: 'syz.0.33656': attribute type 10 has an invalid length. [ 2369.555686][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33656'. [ 2369.960296][T11265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2369.981217][T11265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2370.284018][T11265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2370.302893][T11265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2371.197940][T11280] netlink: 'syz.3.33670': attribute type 2 has an invalid length. [ 2371.217456][T11280] netlink: 'syz.3.33670': attribute type 4 has an invalid length. [ 2371.246388][T11280] netlink: 'syz.3.33670': attribute type 8 has an invalid length. [ 2371.264612][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33670'. [ 2374.490398][T11321] validate_nla: 2 callbacks suppressed [ 2374.490420][T11321] netlink: 'syz.1.33685': attribute type 2 has an invalid length. [ 2374.515088][T11321] netlink: 'syz.1.33685': attribute type 4 has an invalid length. [ 2374.522985][T11321] netlink: 'syz.1.33685': attribute type 8 has an invalid length. [ 2374.545054][T11321] netlink: 'syz.1.33685': attribute type 9 has an invalid length. [ 2374.553016][T11321] netlink: 'syz.1.33685': attribute type 10 has an invalid length. [ 2374.602520][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33685'. [ 2375.184579][T11345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2375.195324][T11344] netlink: 'syz.0.33699': attribute type 3 has an invalid length. [ 2375.211238][T11344] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.33699'. [ 2375.221068][T11345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2375.252165][T11345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2375.283001][T11345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2375.292138][T11345] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 2375.304730][T11345] batman_adv: batadv0: Removing interface: veth0_vlan [ 2375.510543][T11353] netlink: 'syz.0.33713': attribute type 1 has an invalid length. [ 2375.591066][T11353] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.33713'. [ 2376.822422][T11387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2376.860741][T11389] netlink: 'syz.4.33720': attribute type 1 has an invalid length. [ 2376.861605][T11387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2376.877258][T11389] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.33720'. [ 2376.928686][T11387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2376.965530][T11387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2379.326255][T11441] netlink: 'syz.2.33737': attribute type 1 has an invalid length. [ 2379.365625][T11441] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.33737'. [ 2380.174545][ T5724] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 2380.350362][ T5724] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 2380.358606][ T5724] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 2380.368327][ T5724] CPU: 0 PID: 5724 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 2380.375915][ T5724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2380.386008][ T5724] Workqueue: hci2 hci_rx_work [ 2380.390849][ T5724] Call Trace: [ 2380.394160][ T5724] [ 2380.397117][ T5724] dump_stack_lvl+0x188/0x24e [ 2380.401852][ T5724] ? show_regs_print_info+0x12/0x12 [ 2380.407100][ T5724] ? load_image+0x400/0x400 [ 2380.411656][ T5724] sysfs_create_dir_ns+0x26a/0x290 [ 2380.416827][ T5724] ? sysfs_warn_dup+0xa0/0xa0 [ 2380.421554][ T5724] ? do_raw_spin_unlock+0x11d/0x230 [ 2380.426838][ T5724] kobject_add_internal+0x61c/0xcc0 [ 2380.432116][ T5724] kobject_add+0x160/0x230 [ 2380.436588][ T5724] ? kobject_init+0x1d0/0x1d0 [ 2380.441320][ T5724] ? klist_children_get+0x50/0x50 [ 2380.446402][ T5724] ? get_device_parent+0x121/0x3f0 [ 2380.451560][ T5724] device_add+0x483/0xfb0 [ 2380.455944][ T5724] ? kmem_cache_free+0xf7/0x290 [ 2380.460949][ T5724] hci_conn_add_sysfs+0xd1/0x1e0 [ 2380.466088][ T5724] le_conn_complete_evt+0x1062/0x1670 [ 2380.471532][ T5724] ? le_conn_complete_evt+0xe9/0x1670 [ 2380.476980][ T5724] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2380.483275][ T5724] ? bt_info+0x180/0x180 [ 2380.487573][ T5724] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2380.493271][ T5724] ? skb_pull_data+0xf7/0x200 [ 2380.498031][ T5724] hci_le_conn_complete_evt+0x183/0x440 [ 2380.503639][ T5724] ? hci_remote_host_features_evt+0x270/0x270 [ 2380.509769][ T5724] hci_event_packet+0x7b9/0x1280 [ 2380.514773][ T5724] ? bis_list+0x280/0x280 [ 2380.519152][ T5724] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2380.525121][ T5724] ? kcov_remote_start+0x4c7/0x7e0 [ 2380.530374][ T5724] ? patch_conexant_auto+0x1260/0x1650 [ 2380.535889][ T5724] ? hci_send_to_monitor+0x9c/0x4a0 [ 2380.541151][ T5724] hci_rx_work+0x3eb/0xd40 [ 2380.545627][ T5724] ? _raw_spin_unlock+0x40/0x40 [ 2380.550533][ T5724] ? process_one_work+0x7b0/0x1160 [ 2380.555794][ T5724] process_one_work+0x8a2/0x1160 [ 2380.560903][ T5724] ? worker_detach_from_pool+0x240/0x240 [ 2380.566606][ T5724] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2380.571683][ T5724] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2380.577278][ T5724] ? kthread_data+0x4b/0xc0 [ 2380.581852][ T5724] worker_thread+0xaa2/0x1270 [ 2380.586614][ T5724] ? __kthread_parkme+0x162/0x1c0 [ 2380.591701][ T5724] kthread+0x29d/0x330 [ 2380.595824][ T5724] ? worker_clr_flags+0x1a0/0x1a0 [ 2380.600901][ T5724] ? kthread_blkcg+0xd0/0xd0 [ 2380.605536][ T5724] ret_from_fork+0x1f/0x30 [ 2380.610052][ T5724] [ 2380.613896][ T5724] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2380.627031][ T5724] Bluetooth: hci2: failed to register connection device [ 2380.916611][T22020] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2381.603276][T11489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2381.645340][T11489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2381.665868][T11489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2381.673649][T11489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2381.713793][ T5724] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 2381.731302][T11489] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 2381.745524][T11489] batman_adv: batadv0: Removing interface: veth0_vlan [ 2382.386548][T11502] device syzkaller0 entered promiscuous mode [ 2382.675793][ T5724] Bluetooth: hci2: command 0x2016 tx timeout [ 2385.216914][ T5724] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2385.224750][ T5724] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 2385.234547][ T5724] CPU: 0 PID: 5724 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 2385.242137][ T5724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2385.252221][ T5724] Workqueue: hci3 hci_rx_work [ 2385.256930][ T5724] Call Trace: [ 2385.260225][ T5724] [ 2385.263180][ T5724] dump_stack_lvl+0x188/0x24e [ 2385.267898][ T5724] ? show_regs_print_info+0x12/0x12 [ 2385.273134][ T5724] ? load_image+0x400/0x400 [ 2385.277679][ T5724] sysfs_create_dir_ns+0x26a/0x290 [ 2385.282844][ T5724] ? sysfs_warn_dup+0xa0/0xa0 [ 2385.287551][ T5724] ? do_raw_spin_unlock+0x11d/0x230 [ 2385.292778][ T5724] kobject_add_internal+0x61c/0xcc0 [ 2385.298039][ T5724] kobject_add+0x160/0x230 [ 2385.302484][ T5724] ? kobject_init+0x1d0/0x1d0 [ 2385.307196][ T5724] ? klist_children_get+0x50/0x50 [ 2385.312258][ T5724] ? get_device_parent+0x121/0x3f0 [ 2385.317391][ T5724] device_add+0x483/0xfb0 [ 2385.321750][ T5724] ? kmem_cache_free+0xf7/0x290 [ 2385.326660][ T5724] hci_conn_add_sysfs+0xd1/0x1e0 [ 2385.331626][ T5724] le_conn_complete_evt+0x1062/0x1670 [ 2385.337026][ T5724] ? le_conn_complete_evt+0xe9/0x1670 [ 2385.342429][ T5724] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2385.348700][ T5724] ? bt_info+0x180/0x180 [ 2385.352969][ T5724] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2385.358644][ T5724] ? skb_pull_data+0xf7/0x200 [ 2385.363351][ T5724] hci_le_conn_complete_evt+0x183/0x440 [ 2385.368982][ T5724] ? hci_remote_host_features_evt+0x270/0x270 [ 2385.375097][ T5724] hci_event_packet+0x7b9/0x1280 [ 2385.380071][ T5724] ? bis_list+0x280/0x280 [ 2385.384423][ T5724] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2385.390385][ T5724] ? kcov_remote_start+0x4c7/0x7e0 [ 2385.395525][ T5724] ? patch_conexant_auto+0x1260/0x1650 [ 2385.401014][ T5724] ? hci_send_to_monitor+0x9c/0x4a0 [ 2385.406275][ T5724] hci_rx_work+0x3eb/0xd40 [ 2385.410718][ T5724] ? _raw_spin_unlock+0x40/0x40 [ 2385.415602][ T5724] ? process_one_work+0x7b0/0x1160 [ 2385.420740][ T5724] process_one_work+0x8a2/0x1160 [ 2385.425712][ T5724] ? worker_detach_from_pool+0x240/0x240 [ 2385.431371][ T5724] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2385.436423][ T5724] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2385.442001][ T5724] ? kthread_data+0x4b/0xc0 [ 2385.446634][ T5724] worker_thread+0xaa2/0x1270 [ 2385.451347][ T5724] ? __kthread_parkme+0x162/0x1c0 [ 2385.456410][ T5724] kthread+0x29d/0x330 [ 2385.460503][ T5724] ? worker_clr_flags+0x1a0/0x1a0 [ 2385.465557][ T5724] ? kthread_blkcg+0xd0/0xd0 [ 2385.470173][ T5724] ret_from_fork+0x1f/0x30 [ 2385.474628][ T5724] [ 2385.478816][ T5724] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2385.492596][ T5724] Bluetooth: hci3: failed to register connection device [ 2385.550888][T11555] device syzkaller0 entered promiscuous mode [ 2386.738299][ T5724] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2387.557761][ T5724] Bluetooth: hci3: command 0x2016 tx timeout [ 2388.755273][ T5724] Bluetooth: hci0: command 0x2016 tx timeout [ 2388.956615][ T5724] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2388.964385][ T5724] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 2388.975810][ T5724] CPU: 0 PID: 5724 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 2388.983414][ T5724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2388.993500][ T5724] Workqueue: hci4 hci_rx_work [ 2388.998230][ T5724] Call Trace: [ 2389.001532][ T5724] [ 2389.004496][ T5724] dump_stack_lvl+0x188/0x24e [ 2389.009226][ T5724] ? show_regs_print_info+0x12/0x12 [ 2389.014457][ T5724] ? load_image+0x400/0x400 [ 2389.018993][ T5724] sysfs_create_dir_ns+0x26a/0x290 [ 2389.024132][ T5724] ? sysfs_warn_dup+0xa0/0xa0 [ 2389.028836][ T5724] ? do_raw_spin_unlock+0x11d/0x230 [ 2389.034152][ T5724] kobject_add_internal+0x61c/0xcc0 [ 2389.039392][ T5724] kobject_add+0x160/0x230 [ 2389.043841][ T5724] ? kobject_init+0x1d0/0x1d0 [ 2389.048560][ T5724] ? klist_children_get+0x50/0x50 [ 2389.053612][ T5724] ? get_device_parent+0x121/0x3f0 [ 2389.058754][ T5724] device_add+0x483/0xfb0 [ 2389.063106][ T5724] ? kmem_cache_free+0xf7/0x290 [ 2389.067988][ T5724] hci_conn_add_sysfs+0xd1/0x1e0 [ 2389.072969][ T5724] le_conn_complete_evt+0x1062/0x1670 [ 2389.078381][ T5724] ? le_conn_complete_evt+0xe9/0x1670 [ 2389.083788][ T5724] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2389.090062][ T5724] ? bt_info+0x180/0x180 [ 2389.094333][ T5724] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2389.100000][ T5724] ? skb_pull_data+0xf7/0x200 [ 2389.105144][ T5724] hci_le_conn_complete_evt+0x183/0x440 [ 2389.110732][ T5724] ? hci_remote_host_features_evt+0x270/0x270 [ 2389.116845][ T5724] hci_event_packet+0x7b9/0x1280 [ 2389.121825][ T5724] ? bis_list+0x280/0x280 [ 2389.126191][ T5724] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2389.132112][ T5724] ? kcov_remote_start+0x4c7/0x7e0 [ 2389.137257][ T5724] ? patch_conexant_auto+0x1260/0x1650 [ 2389.142754][ T5724] ? hci_send_to_monitor+0x9c/0x4a0 [ 2389.147999][ T5724] hci_rx_work+0x3eb/0xd40 [ 2389.152443][ T5724] ? _raw_spin_unlock+0x40/0x40 [ 2389.157325][ T5724] ? process_one_work+0x7b0/0x1160 [ 2389.162468][ T5724] process_one_work+0x8a2/0x1160 [ 2389.167450][ T5724] ? worker_detach_from_pool+0x240/0x240 [ 2389.173117][ T5724] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2389.178188][ T5724] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2389.183765][ T5724] ? kthread_data+0x4b/0xc0 [ 2389.188305][ T5724] worker_thread+0xaa2/0x1270 [ 2389.193029][ T5724] ? __kthread_parkme+0x162/0x1c0 [ 2389.198095][ T5724] kthread+0x29d/0x330 [ 2389.202183][ T5724] ? worker_clr_flags+0x1a0/0x1a0 [ 2389.207247][ T5724] ? kthread_blkcg+0xd0/0xd0 [ 2389.211858][ T5724] ret_from_fork+0x1f/0x30 [ 2389.216316][ T5724] [ 2389.221360][ T5724] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2389.234505][ T5724] Bluetooth: hci4: failed to register connection device [ 2389.774245][T11655] device pim6reg1 entered promiscuous mode [ 2390.939663][ T5724] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2391.320179][ T4283] Bluetooth: hci4: command 0x2016 tx timeout [ 2391.670455][T11700] device pim6reg1 entered promiscuous mode [ 2392.119312][T11713] netlink: 'syz.2.33864': attribute type 10 has an invalid length. [ 2392.243230][T11713] team0: Port device macvlan1 added [ 2392.995092][ T4283] Bluetooth: hci1: command 0x2016 tx timeout [ 2395.493579][T11731] netlink: 'syz.1.33870': attribute type 10 has an invalid length. [ 2395.504261][T11731] device hsr0 entered promiscuous mode [ 2395.528131][T11731] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2395.568987][T11731] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2395.593185][T11731] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2395.624516][T11731] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2395.669575][T11733] device pim6reg1 entered promiscuous mode [ 2397.019312][T11766] device syzkaller0 entered promiscuous mode [ 2400.315296][T11802] netlink: 'syz.1.33902': attribute type 10 has an invalid length. [ 2400.371254][T11802] team0: Port device macvlan1 added [ 2404.517341][T11917] bridge0: port 4(batadv0) entered blocking state [ 2404.531633][T11917] bridge0: port 4(batadv0) entered disabled state [ 2404.541990][T11917] device batadv0 entered promiscuous mode [ 2404.548979][T11917] bridge0: port 4(batadv0) entered blocking state [ 2404.555562][T11917] bridge0: port 4(batadv0) entered forwarding state [ 2404.599687][T22459] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2404.609658][T22459] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2406.117628][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.124030][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2407.191261][T11996] netlink: 'syz.0.33993': attribute type 1 has an invalid length. [ 2407.211230][T11996] netlink: 'syz.0.33993': attribute type 1 has an invalid length. [ 2407.220127][T11996] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.33993'. [ 2410.274100][T12072] netlink: 60 bytes leftover after parsing attributes in process `syz.2.34023'. [ 2410.283446][T12072] netlink: 60 bytes leftover after parsing attributes in process `syz.2.34023'. [ 2410.319403][T12072] netlink: 60 bytes leftover after parsing attributes in process `syz.2.34023'. [ 2410.346134][T12072] netlink: 60 bytes leftover after parsing attributes in process `syz.2.34023'. [ 2415.018840][T12125] netlink: 'syz.2.34044': attribute type 1 has an invalid length. [ 2415.108439][T12125] netlink: 'syz.2.34044': attribute type 1 has an invalid length. [ 2415.179128][T12125] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.34044'. [ 2417.390925][T12153] netlink: 'syz.3.34062': attribute type 1 has an invalid length. [ 2417.415286][T12153] netlink: 'syz.3.34062': attribute type 1 has an invalid length. [ 2417.440392][T12153] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.34062'. [ 2420.987173][T12168] bond0: (slave syz_tun): Releasing backup interface [ 2421.126663][T12180] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.34072'. [ 2425.919219][T12240] netlink: 'syz.0.34096': attribute type 10 has an invalid length. [ 2425.965779][T12240] netlink: 9279 bytes leftover after parsing attributes in process `syz.0.34096'. [ 2426.041322][T12243] netlink: 168 bytes leftover after parsing attributes in process `syz.4.34097'. [ 2429.660096][T12273] netlink: 'syz.3.34112': attribute type 10 has an invalid length. [ 2429.732132][T12273] netlink: 9279 bytes leftover after parsing attributes in process `syz.3.34112'. [ 2429.937936][T12287] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.34118'. [ 2434.739471][T12330] : renamed from pim6reg1 [ 2440.104608][T12344] netlink: 'syz.4.34140': attribute type 10 has an invalid length. [ 2440.139610][T12344] netlink: 9279 bytes leftover after parsing attributes in process `syz.4.34140'. [ 2442.501296][T12383] netlink: 'syz.1.34159': attribute type 27 has an invalid length. [ 2442.528373][T12383] netlink: 164 bytes leftover after parsing attributes in process `syz.1.34159'. [ 2444.255968][T12421] netlink: 'syz.3.34176': attribute type 27 has an invalid length. [ 2444.286581][T12421] netlink: 164 bytes leftover after parsing attributes in process `syz.3.34176'. [ 2448.000438][T12452] netlink: 'syz.2.34190': attribute type 27 has an invalid length. [ 2448.026172][T12452] netlink: 164 bytes leftover after parsing attributes in process `syz.2.34190'. [ 2448.241005][T12461] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2448.249700][T12461] device syzkaller0 entered promiscuous mode [ 2450.775272][T12500] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2450.788179][T12500] device syzkaller0 entered promiscuous mode [ 2452.337320][T12542] netlink: 48 bytes leftover after parsing attributes in process `syz.2.34242'. [ 2453.721516][ T4283] Bluetooth: hci2: unexpected subevent 0x05 length: 150 > 12 [ 2454.880634][T12589] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2454.900366][T12589] device syzkaller0 entered promiscuous mode [ 2455.805721][ T4283] Bluetooth: hci2: command 0x201b tx timeout [ 2456.665261][ T4283] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2459.708430][ T4283] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12 [ 2459.721209][T12697] netlink: 48 bytes leftover after parsing attributes in process `syz.1.34300'. [ 2459.949727][ T4283] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2460.501527][T12729] netlink: 'syz.1.34316': attribute type 2 has an invalid length. [ 2460.530836][T12729] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.34316'. [ 2460.663683][ T4283] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2460.746425][T12737] netlink: 48 bytes leftover after parsing attributes in process `syz.0.34317'. [ 2461.795304][ T4283] Bluetooth: hci1: command 0x201b tx timeout [ 2463.353569][T12783] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.34338'. [ 2463.744068][T12801] netlink: 'syz.4.34346': attribute type 2 has an invalid length. [ 2463.758303][T12801] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.34346'. [ 2464.778363][T12839] netlink: 'syz.3.34363': attribute type 2 has an invalid length. [ 2464.789597][T12839] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.34363'. [ 2467.061608][T12875] netlink: 48 bytes leftover after parsing attributes in process `syz.4.34381'. [ 2467.557882][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.564292][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.349196][T12909] netlink: 48 bytes leftover after parsing attributes in process `syz.3.34396'. [ 2468.410058][T12913] netlink: 125520 bytes leftover after parsing attributes in process `syz.4.34398'. [ 2470.630884][T12946] netlink: 48 bytes leftover after parsing attributes in process `syz.4.34413'. [ 2471.132080][T26755] tipc: Subscription rejected, illegal request [ 2471.254607][T12964] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.34422'. [ 2474.385186][T12982] netlink: 48 bytes leftover after parsing attributes in process `syz.2.34432'. [ 2476.657869][T22020] tipc: Subscription rejected, illegal request [ 2478.190780][T13027] netlink: 48 bytes leftover after parsing attributes in process `syz.1.34448'. [ 2478.460366][T13030] netlink: 14 bytes leftover after parsing attributes in process `syz.4.34451'. [ 2478.669936][T13030] bridge0: port 2(bridge_slave_1) entered disabled state [ 2480.737792][T13072] syz.4.34469 (13072) used greatest stack depth: 18032 bytes left [ 2484.000760][T13143] netlink: 'syz.2.34502': attribute type 2 has an invalid length. [ 2484.055082][T13143] netlink: 'syz.2.34502': attribute type 9 has an invalid length. [ 2484.095163][T13143] netlink: 'syz.2.34502': attribute type 10 has an invalid length. [ 2484.136077][T13143] netlink: 'syz.2.34502': attribute type 11 has an invalid length. [ 2484.144091][T13143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.34502'. [ 2489.204122][T13228] netlink: 48 bytes leftover after parsing attributes in process `syz.3.34535'. [ 2492.589829][T13272] netlink: 'syz.1.34552': attribute type 3 has an invalid length. [ 2492.608315][T13272] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.34552'. [ 2494.667691][T13311] netlink: 'syz.0.34569': attribute type 3 has an invalid length. [ 2494.710219][T13311] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.34569'. [ 2497.070835][T13348] netlink: 'syz.2.34583': attribute type 3 has an invalid length. [ 2497.145206][T13348] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.34583'. [ 2497.161832][T13349] netlink: 'syz.1.34584': attribute type 3 has an invalid length. [ 2497.171983][T13349] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.34584'. [ 2499.263784][T13397] netlink: 'syz.0.34601': attribute type 3 has an invalid length. [ 2499.284868][T13397] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.34601'. [ 2502.954941][T13449] netlink: 'syz.0.34624': attribute type 10 has an invalid length. [ 2503.078929][T13449] device vxcan1 entered promiscuous mode [ 2503.146493][T13449] team0: Device vxcan1 is of different type [ 2504.315543][T13468] netlink: 'syz.2.34635': attribute type 3 has an invalid length. [ 2504.323679][T13468] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.34635'. [ 2506.253714][T13514] netlink: 'syz.4.34651': attribute type 3 has an invalid length. [ 2506.315484][T13514] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.34651'. [ 2509.738263][T13558] netlink: 'syz.3.34669': attribute type 3 has an invalid length. [ 2509.755119][T13558] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.34669'. [ 2516.238519][ T5724] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2516.246546][ T5724] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 2516.258811][ T5724] CPU: 1 PID: 5724 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 2516.266422][ T5724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2516.276522][ T5724] Workqueue: hci3 hci_rx_work [ 2516.281266][ T5724] Call Trace: [ 2516.284579][ T5724] [ 2516.287546][ T5724] dump_stack_lvl+0x188/0x24e [ 2516.292265][ T5724] ? show_regs_print_info+0x12/0x12 [ 2516.297500][ T5724] ? load_image+0x400/0x400 [ 2516.302045][ T5724] sysfs_create_dir_ns+0x26a/0x290 [ 2516.307193][ T5724] ? sysfs_warn_dup+0xa0/0xa0 [ 2516.311907][ T5724] ? do_raw_spin_unlock+0x11d/0x230 [ 2516.317148][ T5724] kobject_add_internal+0x61c/0xcc0 [ 2516.322397][ T5724] kobject_add+0x160/0x230 [ 2516.326869][ T5724] ? kobject_init+0x1d0/0x1d0 [ 2516.331593][ T5724] ? klist_children_get+0x50/0x50 [ 2516.336663][ T5724] ? get_device_parent+0x121/0x3f0 [ 2516.341839][ T5724] device_add+0x483/0xfb0 [ 2516.346211][ T5724] ? kmem_cache_free+0xf7/0x290 [ 2516.351105][ T5724] hci_conn_add_sysfs+0xd1/0x1e0 [ 2516.356169][ T5724] le_conn_complete_evt+0x1062/0x1670 [ 2516.361587][ T5724] ? le_conn_complete_evt+0xe9/0x1670 [ 2516.366990][ T5724] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2516.373343][ T5724] ? bt_info+0x180/0x180 [ 2516.377624][ T5724] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2516.383293][ T5724] ? skb_pull_data+0xf7/0x200 [ 2516.387999][ T5724] hci_le_conn_complete_evt+0x183/0x440 [ 2516.393582][ T5724] ? hci_remote_host_features_evt+0x270/0x270 [ 2516.399688][ T5724] hci_event_packet+0x7b9/0x1280 [ 2516.404680][ T5724] ? bis_list+0x280/0x280 [ 2516.409038][ T5724] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2516.414970][ T5724] ? kcov_remote_start+0x4c7/0x7e0 [ 2516.420131][ T5724] ? patch_conexant_auto+0x1260/0x1650 [ 2516.425625][ T5724] ? hci_send_to_monitor+0x9c/0x4a0 [ 2516.430867][ T5724] hci_rx_work+0x3eb/0xd40 [ 2516.435329][ T5724] ? _raw_spin_unlock+0x40/0x40 [ 2516.440238][ T5724] ? process_one_work+0x7b0/0x1160 [ 2516.445387][ T5724] process_one_work+0x8a2/0x1160 [ 2516.450381][ T5724] ? worker_detach_from_pool+0x240/0x240 [ 2516.456047][ T5724] ? _raw_spin_lock_irq+0x86/0xf0 [ 2516.461111][ T5724] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2516.466284][ T5724] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2516.471860][ T5724] ? kthread_data+0x4b/0xc0 [ 2516.476411][ T5724] worker_thread+0xaa2/0x1270 [ 2516.481129][ T5724] ? __kthread_parkme+0x162/0x1c0 [ 2516.486279][ T5724] kthread+0x29d/0x330 [ 2516.490374][ T5724] ? worker_clr_flags+0x1a0/0x1a0 [ 2516.495427][ T5724] ? kthread_blkcg+0xd0/0xd0 [ 2516.500040][ T5724] ret_from_fork+0x1f/0x30 [ 2516.504501][ T5724] [ 2516.518779][ T5724] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2516.533732][ T5724] Bluetooth: hci3: failed to register connection device [ 2518.609912][T13674] Bluetooth: hci3: command 0x2016 tx timeout [ 2519.455243][T13737] delete_channel: no stack [ 2520.365209][T13759] netlink: 'syz.4.34758': attribute type 1 has an invalid length. [ 2520.373115][T13759] netlink: 'syz.4.34758': attribute type 4 has an invalid length. [ 2520.381716][T13759] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.34758'. [ 2522.894276][T13674] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2522.902212][T13674] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 2522.913113][T13674] CPU: 0 PID: 13674 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 2522.920813][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2522.930914][T13674] Workqueue: hci1 hci_rx_work [ 2522.935647][T13674] Call Trace: [ 2522.938960][T13674] [ 2522.941929][T13674] dump_stack_lvl+0x188/0x24e [ 2522.946658][T13674] ? show_regs_print_info+0x12/0x12 [ 2522.951894][T13674] ? load_image+0x400/0x400 [ 2522.956447][T13674] sysfs_create_dir_ns+0x26a/0x290 [ 2522.961596][T13674] ? sysfs_warn_dup+0xa0/0xa0 [ 2522.966315][T13674] ? do_raw_spin_unlock+0x11d/0x230 [ 2522.971547][T13674] kobject_add_internal+0x61c/0xcc0 [ 2522.976801][T13674] kobject_add+0x160/0x230 [ 2522.981254][T13674] ? kobject_init+0x1d0/0x1d0 [ 2522.985973][T13674] ? klist_children_get+0x50/0x50 [ 2522.991022][T13674] ? get_device_parent+0x121/0x3f0 [ 2522.996162][T13674] device_add+0x483/0xfb0 [ 2523.000600][T13674] ? kmem_cache_free+0xf7/0x290 [ 2523.005489][T13674] hci_conn_add_sysfs+0xd1/0x1e0 [ 2523.010464][T13674] le_conn_complete_evt+0x1062/0x1670 [ 2523.015891][T13674] ? le_conn_complete_evt+0xe9/0x1670 [ 2523.021309][T13674] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2523.027584][T13674] ? bt_info+0x180/0x180 [ 2523.031866][T13674] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2523.037537][T13674] ? skb_pull_data+0xf7/0x200 [ 2523.042247][T13674] hci_le_conn_complete_evt+0x183/0x440 [ 2523.047837][T13674] ? hci_remote_host_features_evt+0x270/0x270 [ 2523.053946][T13674] hci_event_packet+0x7b9/0x1280 [ 2523.058927][T13674] ? bis_list+0x280/0x280 [ 2523.063289][T13674] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2523.069223][T13674] ? kcov_remote_start+0x4c7/0x7e0 [ 2523.074383][T13674] ? patch_conexant_auto+0x1260/0x1650 [ 2523.079874][T13674] ? hci_send_to_monitor+0x9c/0x4a0 [ 2523.085109][T13674] hci_rx_work+0x3eb/0xd40 [ 2523.089557][T13674] ? _raw_spin_unlock+0x40/0x40 [ 2523.094445][T13674] ? process_one_work+0x7b0/0x1160 [ 2523.099623][T13674] process_one_work+0x8a2/0x1160 [ 2523.104601][T13674] ? worker_detach_from_pool+0x240/0x240 [ 2523.110265][T13674] ? _raw_spin_lock_irq+0x86/0xf0 [ 2523.115321][T13674] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2523.120368][T13674] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2523.125940][T13674] ? kthread_data+0x4b/0xc0 [ 2523.130488][T13674] worker_thread+0xaa2/0x1270 [ 2523.135207][T13674] ? __kthread_parkme+0x162/0x1c0 [ 2523.140276][T13674] kthread+0x29d/0x330 [ 2523.144451][T13674] ? worker_clr_flags+0x1a0/0x1a0 [ 2523.149507][T13674] ? kthread_blkcg+0xd0/0xd0 [ 2523.154124][T13674] ret_from_fork+0x1f/0x30 [ 2523.158672][T13674] [ 2523.167337][T13674] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2523.180609][T13674] Bluetooth: hci1: failed to register connection device [ 2524.379250][T13803] delete_channel: no stack [ 2524.599679][T13807] delete_channel: no stack [ 2525.235344][T13674] Bluetooth: hci1: command 0x2016 tx timeout [ 2526.212782][ T4283] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2526.220671][ T4283] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 2526.230844][ T4283] CPU: 1 PID: 4283 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 2526.238543][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2526.248647][ T4283] Workqueue: hci0 hci_rx_work [ 2526.253373][ T4283] Call Trace: [ 2526.256771][ T4283] [ 2526.259742][ T4283] dump_stack_lvl+0x188/0x24e [ 2526.264468][ T4283] ? show_regs_print_info+0x12/0x12 [ 2526.269721][ T4283] ? load_image+0x400/0x400 [ 2526.274263][ T4283] sysfs_create_dir_ns+0x26a/0x290 [ 2526.279429][ T4283] ? sysfs_warn_dup+0xa0/0xa0 [ 2526.284145][ T4283] ? do_raw_spin_unlock+0x11d/0x230 [ 2526.289690][ T4283] kobject_add_internal+0x61c/0xcc0 [ 2526.294945][ T4283] kobject_add+0x160/0x230 [ 2526.299398][ T4283] ? kobject_init+0x1d0/0x1d0 [ 2526.304111][ T4283] ? klist_children_get+0x50/0x50 [ 2526.309253][ T4283] ? get_device_parent+0x121/0x3f0 [ 2526.314391][ T4283] device_add+0x483/0xfb0 [ 2526.318747][ T4283] ? kmem_cache_free+0xf7/0x290 [ 2526.323637][ T4283] hci_conn_add_sysfs+0xd1/0x1e0 [ 2526.328621][ T4283] le_conn_complete_evt+0x1062/0x1670 [ 2526.334034][ T4283] ? le_conn_complete_evt+0xe9/0x1670 [ 2526.339445][ T4283] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2526.345721][ T4283] ? bt_info+0x180/0x180 [ 2526.350000][ T4283] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2526.355678][ T4283] ? skb_pull_data+0xf7/0x200 [ 2526.360389][ T4283] hci_le_conn_complete_evt+0x183/0x440 [ 2526.365978][ T4283] ? hci_remote_host_features_evt+0x270/0x270 [ 2526.372172][ T4283] hci_event_packet+0x7b9/0x1280 [ 2526.377151][ T4283] ? bis_list+0x280/0x280 [ 2526.381513][ T4283] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2526.387438][ T4283] ? kcov_remote_start+0x4c7/0x7e0 [ 2526.392576][ T4283] ? patch_conexant_auto+0x1260/0x1650 [ 2526.398101][ T4283] ? hci_send_to_monitor+0x9c/0x4a0 [ 2526.403336][ T4283] hci_rx_work+0x3eb/0xd40 [ 2526.407783][ T4283] ? _raw_spin_unlock+0x40/0x40 [ 2526.412671][ T4283] ? process_one_work+0x7b0/0x1160 [ 2526.417841][ T4283] process_one_work+0x8a2/0x1160 [ 2526.422881][ T4283] ? worker_detach_from_pool+0x240/0x240 [ 2526.428576][ T4283] ? _raw_spin_lock_irq+0x86/0xf0 [ 2526.433651][ T4283] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2526.438713][ T4283] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2526.444299][ T4283] ? kthread_data+0x4b/0xc0 [ 2526.448859][ T4283] worker_thread+0xaa2/0x1270 [ 2526.453597][ T4283] kthread+0x29d/0x330 [ 2526.457704][ T4283] ? worker_clr_flags+0x1a0/0x1a0 [ 2526.462764][ T4283] ? kthread_blkcg+0xd0/0xd0 [ 2526.467390][ T4283] ret_from_fork+0x1f/0x30 [ 2526.471853][ T4283] [ 2526.476134][ T4283] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2526.491194][ T4283] Bluetooth: hci0: failed to register connection device [ 2528.516399][ T4283] Bluetooth: hci0: command 0x2016 tx timeout [ 2528.999118][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.005544][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2533.486651][T13952] device syzkaller0 left promiscuous mode [ 2533.775161][T13958] netlink: 'syz.4.34839': attribute type 10 has an invalid length. [ 2535.684576][T14014] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.34862'. [ 2535.724428][T14014] openvswitch: netlink: Flow actions attr not present in new flow. [ 2536.346811][T14032] netlink: 60 bytes leftover after parsing attributes in process `syz.0.34867'. [ 2537.949859][T14034] netlink: 'syz.4.34868': attribute type 10 has an invalid length. [ 2537.998859][T14034] device geneve1 entered promiscuous mode [ 2538.013648][T14034] team0: Port device geneve1 added [ 2539.437427][T14075] netlink: 'syz.1.34888': attribute type 13 has an invalid length. [ 2539.466756][T14075] netlink: 152 bytes leftover after parsing attributes in process `syz.1.34888'. [ 2539.496612][T14075] syz_tun: refused to change device tx_queue_len [ 2539.539032][T14075] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2539.680100][T14084] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.34892'. [ 2539.722384][T14084] openvswitch: netlink: Flow actions attr not present in new flow. [ 2539.928724][T14089] netlink: 'syz.4.34894': attribute type 3 has an invalid length. [ 2539.945119][T14089] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.34894'. [ 2539.982027][T14089] netlink: 'syz.4.34894': attribute type 3 has an invalid length. [ 2540.000373][T14089] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.34894'. [ 2540.018453][T14089] netlink: 'syz.4.34894': attribute type 3 has an invalid length. [ 2540.031141][T14089] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.34894'. [ 2540.958980][T14111] netlink: 'syz.0.34901': attribute type 10 has an invalid length. [ 2541.562308][T14121] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.34905'. [ 2541.586492][T14121] openvswitch: netlink: Flow actions attr not present in new flow. [ 2543.200830][T14159] netlink: 60 bytes leftover after parsing attributes in process `syz.4.34935'. [ 2543.230112][T14163] netlink: 'syz.1.34922': attribute type 10 has an invalid length. [ 2543.739006][T14183] netlink: 'syz.3.34933': attribute type 13 has an invalid length. [ 2543.775082][T14183] netlink: 152 bytes leftover after parsing attributes in process `syz.3.34933'. [ 2546.015973][T14235] netlink: 'syz.4.34953': attribute type 13 has an invalid length. [ 2546.031925][T14235] netlink: 152 bytes leftover after parsing attributes in process `syz.4.34953'. [ 2546.058719][T14235] syz_tun: refused to change device tx_queue_len [ 2546.074372][T14235] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2550.040313][T14315] netlink: 'syz.3.34994': attribute type 2 has an invalid length. [ 2550.085185][T14315] netlink: 'syz.3.34994': attribute type 1 has an invalid length. [ 2550.095702][T14315] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.34994'. [ 2550.180638][T14320] netlink: 'syz.1.34997': attribute type 14 has an invalid length. [ 2550.215213][T14320] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.34997'. [ 2550.430679][T14330] netlink: 126288 bytes leftover after parsing attributes in process `syz.1.35002'. [ 2556.241718][T14388] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.35023'. [ 2566.622117][ T4283] Bluetooth: hci2: unexpected subevent 0x06 length: 150 > 10 [ 2568.675233][ T4283] Bluetooth: hci2: command 0x2021 tx timeout [ 2569.106647][T14581] sctp: [Deprecated]: syz.1.35106 (pid 14581) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2569.106647][T14581] Use struct sctp_sack_info instead [ 2570.413385][T14610] sctp: [Deprecated]: syz.0.35120 (pid 14610) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2570.413385][T14610] Use struct sctp_sack_info instead [ 2571.557626][T14647] sctp: [Deprecated]: syz.2.35135 (pid 14647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2571.557626][T14647] Use struct sctp_sack_info instead [ 2571.827034][T14655] netlink: 14 bytes leftover after parsing attributes in process `syz.2.35141'. [ 2572.000300][T14655] device veth0_macvtap left promiscuous mode [ 2572.907084][T14679] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.35148'. [ 2573.720152][T14692] device syzkaller0 entered promiscuous mode [ 2578.832959][ T4283] Bluetooth: hci3: unexpected subevent 0x06 length: 150 > 10 [ 2580.921777][ T4283] Bluetooth: hci3: command 0x2021 tx timeout [ 2581.455174][T14728] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.35170'. [ 2583.311194][ T4283] Bluetooth: hci2: Dropping invalid advertising data [ 2583.318052][ T4283] Bluetooth: hci2: unknown advertising packet type: 0xff [ 2583.318081][ T4283] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2583.603624][T14792] sock: sock_timestamping_bind_phc: sock not bind to device [ 2585.707622][ T4283] Bluetooth: hci0: Dropping invalid advertising data [ 2585.714424][ T4283] Bluetooth: hci0: unknown advertising packet type: 0xff [ 2585.714452][ T4283] Bluetooth: hci0: Malformed LE Event: 0x02 [ 2586.037245][T14828] sock: sock_timestamping_bind_phc: sock not bind to device [ 2587.703893][ T4283] Bluetooth: hci1: Dropping invalid advertising data [ 2587.710801][ T4283] Bluetooth: hci1: unknown advertising packet type: 0xff [ 2587.710831][ T4283] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2588.588565][T14854] sock: sock_timestamping_bind_phc: sock not bind to device [ 2589.717548][T14867] netlink: 'syz.1.35243': attribute type 2 has an invalid length. [ 2589.735076][T14867] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.35243'. [ 2590.437374][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.443780][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2592.296223][T14924] device syzkaller0 entered promiscuous mode [ 2592.308604][T14924] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 2592.585104][ T4283] Bluetooth: hci4: Dropping invalid advertising data [ 2592.592195][ T4283] Bluetooth: hci4: unknown advertising packet type: 0xff [ 2592.592222][ T4283] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2594.734409][T14968] netlink: 'syz.2.35272': attribute type 2 has an invalid length. [ 2594.769130][T14968] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.35272'. [ 2595.162914][T14974] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.35275'. [ 2595.205376][T14974] netlink: zone id is out of range [ 2595.237637][T14974] netlink: zone id is out of range [ 2595.257070][T14974] netlink: zone id is out of range [ 2595.272447][T14974] netlink: zone id is out of range [ 2595.306818][T14974] netlink: zone id is out of range [ 2595.327643][T14974] netlink: zone id is out of range [ 2595.354320][T14974] netlink: zone id is out of range [ 2595.361683][T14974] netlink: zone id is out of range [ 2595.381582][T14974] netlink: zone id is out of range [ 2595.404722][T14974] netlink: zone id is out of range [ 2598.829228][T14976] netlink: 'syz.4.35277': attribute type 10 has an invalid length. [ 2598.846451][T14976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2598.877452][T14976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2598.926209][T14976] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2598.945174][T14983] netlink: 16083 bytes leftover after parsing attributes in process `syz.0.35282'. [ 2599.049765][T14995] device syzkaller0 entered promiscuous mode [ 2599.658727][T15017] netlink: 60 bytes leftover after parsing attributes in process `syz.4.35292'. [ 2600.217502][T15032] netlink: 'syz.4.35298': attribute type 3 has an invalid length. [ 2600.227142][T15032] netlink: 'syz.4.35298': attribute type 1 has an invalid length. [ 2600.239627][T15032] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.35298'. [ 2602.690783][T15057] netlink: 'syz.3.35311': attribute type 3 has an invalid length. [ 2602.719215][T15057] netlink: 'syz.3.35311': attribute type 1 has an invalid length. [ 2602.745230][T15057] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.35311'. [ 2603.464719][T15074] device syzkaller0 entered promiscuous mode [ 2604.143087][T15089] netlink: 'syz.2.35326': attribute type 3 has an invalid length. [ 2604.168615][T15089] netlink: 'syz.2.35326': attribute type 1 has an invalid length. [ 2604.207495][T15089] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.35326'. [ 2604.774808][T15105] device syzkaller0 entered promiscuous mode [ 2604.959899][T15115] netlink: 60 bytes leftover after parsing attributes in process `syz.0.35336'. [ 2612.406825][T15203] device syzkaller0 left promiscuous mode [ 2618.098065][ T4283] Bluetooth: hci3: unexpected event 0x03 length: 151 > 11 [ 2621.988740][ T4283] Bluetooth: hci4: Malformed HCI Event [ 2625.980304][ T4283] Bluetooth: hci1: Malformed HCI Event [ 2628.349529][ T4283] Bluetooth: hci3: Malformed HCI Event [ 2634.183132][T15426] sctp: [Deprecated]: syz.2.35473 (pid 15426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2634.183132][T15426] Use struct sctp_sack_info instead [ 2634.439649][T15439] sctp: [Deprecated]: syz.4.35490 (pid 15439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2634.439649][T15439] Use struct sctp_sack_info instead [ 2636.452344][T15475] sctp: [Deprecated]: syz.0.35494 (pid 15475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2636.452344][T15475] Use struct sctp_sack_info instead [ 2638.517428][T15510] device syzkaller0 entered promiscuous mode [ 2645.314646][T15541] netlink: 'syz.2.35526': attribute type 13 has an invalid length. [ 2645.538015][T15560] netlink: 'syz.0.35533': attribute type 2 has an invalid length. [ 2645.565063][T15560] netlink: 'syz.0.35533': attribute type 1 has an invalid length. [ 2645.572963][T15560] netlink: 'syz.0.35533': attribute type 8 has an invalid length. [ 2645.621192][T15560] netlink: 44 bytes leftover after parsing attributes in process `syz.0.35533'. [ 2646.082290][T15580] netlink: 14 bytes leftover after parsing attributes in process `syz.1.35542'. [ 2646.103070][T15580] net_ratelimit: 3660 callbacks suppressed [ 2646.103105][T15580] openvswitch: netlink: Message has 6 unknown bytes. [ 2646.135450][T15583] netlink: 'syz.2.35544': attribute type 10 has an invalid length. [ 2646.143419][T15583] netlink: 'syz.2.35544': attribute type 11 has an invalid length. [ 2646.164443][T15583] netlink: 5145 bytes leftover after parsing attributes in process `syz.2.35544'. [ 2646.981474][T15617] netlink: 'syz.3.35553': attribute type 13 has an invalid length. [ 2647.144549][T15620] netlink: 'syz.4.35554': attribute type 2 has an invalid length. [ 2647.168038][T15620] netlink: 'syz.4.35554': attribute type 1 has an invalid length. [ 2647.186371][T15620] netlink: 'syz.4.35554': attribute type 8 has an invalid length. [ 2647.223701][T15620] netlink: 44 bytes leftover after parsing attributes in process `syz.4.35554'. [ 2647.334072][T15626] netlink: 5145 bytes leftover after parsing attributes in process `syz.0.35557'. [ 2647.737553][T15639] netlink: 14 bytes leftover after parsing attributes in process `syz.4.35568'. [ 2647.755241][T15639] openvswitch: netlink: Message has 6 unknown bytes. [ 2648.216601][T15655] netlink: 44 bytes leftover after parsing attributes in process `syz.1.35574'. [ 2648.747171][T15665] netlink: 5145 bytes leftover after parsing attributes in process `syz.1.35577'. [ 2649.549415][T15676] netlink: 14 bytes leftover after parsing attributes in process `syz.0.35582'. [ 2649.571933][T15676] openvswitch: netlink: Message has 6 unknown bytes. [ 2652.013516][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.019921][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.456916][T15722] netlink: 14 bytes leftover after parsing attributes in process `syz.3.35599'. [ 2652.520764][T15722] openvswitch: netlink: Message has 6 unknown bytes. [ 2664.672109][T15835] validate_nla: 8 callbacks suppressed [ 2664.672131][T15835] netlink: 'syz.2.35647': attribute type 2 has an invalid length. [ 2664.721799][T15835] netlink: 'syz.2.35647': attribute type 1 has an invalid length. [ 2664.735161][T15835] netlink: 'syz.2.35647': attribute type 8 has an invalid length. [ 2664.756659][T15835] netlink: 88 bytes leftover after parsing attributes in process `syz.2.35647'. [ 2670.198778][T15916] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.35684'. [ 2670.217754][T15916] netlink: zone id is out of range [ 2670.226080][T15916] netlink: zone id is out of range [ 2670.389780][T15916] netlink: del zone limit has 4 unknown bytes [ 2674.420386][T15961] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.35703'. [ 2674.461215][T15961] netlink: zone id is out of range [ 2674.479649][T15961] netlink: zone id is out of range [ 2674.650283][T15961] netlink: del zone limit has 4 unknown bytes [ 2678.585372][T15996] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.35716'. [ 2678.616418][T15996] netlink: zone id is out of range [ 2678.629771][T15996] netlink: zone id is out of range [ 2678.709298][T15996] netlink: del zone limit has 4 unknown bytes [ 2679.967957][T16040] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.35735'. [ 2679.979434][T16040] netlink: zone id is out of range [ 2679.989127][T16040] netlink: zone id is out of range [ 2680.057552][T16040] netlink: del zone limit has 4 unknown bytes [ 2681.800330][T16077] netlink: 15794 bytes leftover after parsing attributes in process `syz.3.35761'. [ 2682.191721][T16081] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.35750'. [ 2682.237692][T16081] netlink: zone id is out of range [ 2682.244837][T16081] netlink: zone id is out of range [ 2682.468533][T16081] netlink: del zone limit has 4 unknown bytes [ 2682.715317][T16095] netlink: 15794 bytes leftover after parsing attributes in process `syz.0.35767'. [ 2684.192406][T16121] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.35769'. [ 2684.234510][T16121] netlink: zone id is out of range [ 2684.241122][T16121] netlink: zone id is out of range [ 2684.325090][T16121] netlink: del zone limit has 4 unknown bytes [ 2685.098459][T16139] netlink: 15794 bytes leftover after parsing attributes in process `syz.1.35772'. [ 2688.368140][T16198] device syzkaller0 entered promiscuous mode [ 2695.127522][T16254] netlink: 'syz.1.35823': attribute type 3 has an invalid length. [ 2695.140678][T16254] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.35823'. [ 2695.437949][ T4283] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 2696.730853][T16282] netlink: 'syz.0.35832': attribute type 29 has an invalid length. [ 2699.565088][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 2700.645707][T16282] netlink: 'syz.0.35832': attribute type 29 has an invalid length. [ 2700.663867][T16289] netlink: 'syz.4.35834': attribute type 10 has an invalid length. [ 2709.518577][T16403] device syzkaller0 entered promiscuous mode [ 2711.738399][T16448] device syzkaller0 entered promiscuous mode [ 2711.862809][T16450] device syzkaller0 entered promiscuous mode [ 2713.170901][T16486] device syzkaller0 entered promiscuous mode [ 2713.317445][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.323847][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.704608][T16500] device syzkaller0 entered promiscuous mode [ 2716.453473][T16542] device syzkaller0 entered promiscuous mode [ 2716.582780][T16540] device syzkaller0 entered promiscuous mode [ 2717.003377][T16559] device syzkaller0 entered promiscuous mode [ 2720.236423][T16579] device syzkaller0 entered promiscuous mode [ 2721.347636][T16647] device syzkaller0 entered promiscuous mode [ 2726.747382][T16657] device wlan1 entered promiscuous mode [ 2728.156886][ T4283] Bluetooth: hci1: ISO packet too small [ 2730.293782][ T4283] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 2731.076688][ T4283] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 2732.363932][ T4283] Bluetooth: hci2: ISO packet too small [ 2732.593415][ T4283] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 2733.412535][ T4283] Bluetooth: hci4: ISO packet too small [ 2733.994631][ T4283] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 2734.908228][ T4283] Bluetooth: hci0: ISO packet too small [ 2736.270601][ T4283] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 2736.842745][T16930] device syzkaller0 entered promiscuous mode [ 2736.893738][T16938] netlink: 'syz.4.36108': attribute type 29 has an invalid length. [ 2738.931138][T16938] netlink: 'syz.4.36108': attribute type 29 has an invalid length. [ 2738.954994][T16954] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.36116'. [ 2739.219946][T16965] netlink: 'syz.2.36121': attribute type 3 has an invalid length. [ 2739.235359][T16965] netlink: 'syz.2.36121': attribute type 1 has an invalid length. [ 2739.254170][T16965] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.36121'. [ 2740.967280][T17006] netlink: 'syz.3.36137': attribute type 3 has an invalid length. [ 2740.975719][T17006] netlink: 'syz.3.36137': attribute type 1 has an invalid length. [ 2740.983663][T17006] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.36137'. [ 2742.552632][T17035] netlink: 'syz.1.36151': attribute type 3 has an invalid length. [ 2742.592342][T17035] netlink: 'syz.1.36151': attribute type 1 has an invalid length. [ 2742.619600][T17035] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.36151'. [ 2745.774087][T17102] device syzkaller0 entered promiscuous mode [ 2746.789042][T17110] delete_channel: no stack [ 2754.136765][ T4283] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2754.144460][ T4283] Bluetooth: hci4: Invalid handle: 0xffff > 0x0eff [ 2754.508750][T17222] delete_channel: no stack [ 2757.856717][T17229] delete_channel: no stack [ 2758.372780][T13674] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2758.380393][T13674] Bluetooth: hci1: Invalid handle: 0xffff > 0x0eff [ 2759.048195][T17268] device syzkaller0 entered promiscuous mode [ 2761.457681][T13674] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2761.465370][T13674] Bluetooth: hci3: Invalid handle: 0xffff > 0x0eff [ 2764.723249][T17329] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.36276'. [ 2772.711097][T17401] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.36312'. [ 2772.993170][T17413] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.36327'. [ 2774.756882][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.763583][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2776.675307][T17476] netlink: 'syz.0.36347': attribute type 3 has an invalid length. [ 2776.683207][T17476] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.36347'. [ 2776.998920][T17490] netlink: 60583 bytes leftover after parsing attributes in process `syz.2.36353'. [ 2777.024993][T17490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36353'. [ 2778.876725][T17536] netlink: 'syz.3.36372': attribute type 3 has an invalid length. [ 2778.907456][T17536] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.36372'. [ 2780.452521][T17568] netlink: 'syz.1.36387': attribute type 3 has an invalid length. [ 2780.469548][T17568] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.36387'. [ 2781.678395][T17598] device syzkaller0 entered promiscuous mode [ 2785.569289][T17615] netlink: 60583 bytes leftover after parsing attributes in process `syz.3.36406'. [ 2785.578825][T17615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36406'. [ 2785.753824][T17646] netlink: 60583 bytes leftover after parsing attributes in process `syz.1.36431'. [ 2785.767120][T17646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36431'. [ 2788.752049][T13674] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 2790.668851][T17679] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.36436'. [ 2791.906456][T17707] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.36446'. [ 2792.845596][T13674] Bluetooth: hci4: command 0x0406 tx timeout [ 2794.484272][ T4283] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 2794.647034][T17752] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.36465'. [ 2797.238300][T17767] netlink: 'syz.0.36473': attribute type 29 has an invalid length. [ 2798.595070][T13674] Bluetooth: hci2: command 0x0406 tx timeout [ 2800.857671][T17767] netlink: 'syz.0.36473': attribute type 29 has an invalid length. [ 2800.859482][T17752] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2800.886282][T17752] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2800.896616][T17752] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2800.994538][T17791] device syzkaller0 entered promiscuous mode [ 2801.377109][T17810] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.36491'. [ 2801.387064][T17810] openvswitch: netlink: Key type 386 is out of range max 32 [ 2807.124317][T17836] netlink: 'syz.3.36498': attribute type 29 has an invalid length. [ 2809.566286][T17836] netlink: 'syz.3.36498': attribute type 29 has an invalid length. [ 2809.574748][T17847] device syzkaller0 left promiscuous mode [ 2812.202561][T17897] device syzkaller0 entered promiscuous mode [ 2812.224943][T17892] netlink: 'syz.2.36521': attribute type 29 has an invalid length. [ 2812.245437][T17892] netlink: 'syz.2.36521': attribute type 29 has an invalid length. [ 2812.268010][T17892] netlink: 'syz.2.36521': attribute type 29 has an invalid length. [ 2812.810447][T17925] device syzkaller0 left promiscuous mode [ 2813.534013][T17931] device syzkaller0 entered promiscuous mode [ 2813.557922][T17934] netlink: 'syz.1.36539': attribute type 29 has an invalid length. [ 2813.625332][T17934] netlink: 'syz.1.36539': attribute type 29 has an invalid length. [ 2813.715631][T17935] netlink: 'syz.1.36539': attribute type 29 has an invalid length. [ 2819.238131][T17949] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2819.461989][T17974] netlink: 'syz.4.36555': attribute type 29 has an invalid length. [ 2819.500034][T17974] netlink: 'syz.4.36555': attribute type 29 has an invalid length. [ 2819.546825][T17974] netlink: 'syz.4.36555': attribute type 29 has an invalid length. [ 2819.923775][T17992] netlink: 2739 bytes leftover after parsing attributes in process `syz.2.36563'. [ 2821.218866][T18004] device syzkaller0 entered promiscuous mode [ 2825.427057][T18081] netlink: 2739 bytes leftover after parsing attributes in process `syz.4.36602'. [ 2832.926080][T18196] device syzkaller0 entered promiscuous mode [ 2836.196791][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.203164][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2839.368490][T18247] netlink: 'syz.0.36667': attribute type 10 has an invalid length. [ 2839.405745][T18247] netlink: 40 bytes leftover after parsing attributes in process `syz.0.36667'. [ 2839.456345][T18247] bridge0: port 5(veth0_vlan) entered blocking state [ 2839.479141][T18247] bridge0: port 5(veth0_vlan) entered disabled state [ 2839.616325][T18247] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2841.406401][T18282] device syzkaller0 entered promiscuous mode [ 2849.975634][T18389] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.36727'. [ 2850.014788][T18388] netlink: 'syz.3.36727': attribute type 1 has an invalid length. [ 2850.051972][T18388] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.36727'. [ 2850.345007][T18399] device syzkaller0 entered promiscuous mode [ 2853.415168][T18433] netlink: 'syz.0.36747': attribute type 21 has an invalid length. [ 2853.423181][T18433] netlink: 'syz.0.36747': attribute type 6 has an invalid length. [ 2853.434723][T18433] netlink: 132 bytes leftover after parsing attributes in process `syz.0.36747'. [ 2853.539486][T18442] netlink: 'syz.1.36759': attribute type 10 has an invalid length. [ 2853.565327][T18442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.36759'. [ 2853.585578][T18442] bridge0: port 4(veth0_vlan) entered blocking state [ 2853.600760][T18442] bridge0: port 4(veth0_vlan) entered disabled state [ 2853.643057][T18442] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2854.588787][T18478] device syzkaller0 entered promiscuous mode [ 2855.491216][T18492] netlink: 'syz.1.36780': attribute type 1 has an invalid length. [ 2855.512349][T18492] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.36780'. [ 2857.368979][T18489] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.36780'. [ 2857.378487][T18491] netlink: 'syz.3.36768': attribute type 10 has an invalid length. [ 2857.388461][T18491] netlink: 40 bytes leftover after parsing attributes in process `syz.3.36768'. [ 2857.398357][T18491] bridge0: port 4(veth0_vlan) entered blocking state [ 2857.406601][T18491] bridge0: port 4(veth0_vlan) entered disabled state [ 2857.416296][T18491] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2857.674948][T18502] netlink: 'syz.2.36773': attribute type 7 has an invalid length. [ 2857.682955][T18502] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.36773'. [ 2863.193178][T18535] netlink: 'syz.2.36786': attribute type 10 has an invalid length. [ 2863.201222][T18535] netlink: 40 bytes leftover after parsing attributes in process `syz.2.36786'. [ 2863.211193][T18535] bridge0: port 4(veth0_vlan) entered blocking state [ 2863.218160][T18535] bridge0: port 4(veth0_vlan) entered disabled state [ 2863.226772][T18535] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2863.369877][ T4283] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 2866.828549][T18566] netlink: 'syz.1.36810': attribute type 10 has an invalid length. [ 2866.850565][T18566] bridge0: port 3(veth1_to_hsr) entered disabled state [ 2866.857811][T18566] bridge0: port 2(bridge_slave_1) entered disabled state [ 2866.865031][T18566] bridge0: port 1(bridge_slave_0) entered disabled state [ 2866.898243][T18566] bridge0: port 3(veth1_to_hsr) entered blocking state [ 2866.905335][T18566] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 2866.912671][T18566] bridge0: port 2(bridge_slave_1) entered blocking state [ 2866.919880][T18566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2866.927342][T18566] bridge0: port 1(bridge_slave_0) entered blocking state [ 2866.934510][T18566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2866.959466][T18566] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2867.060316][T18573] netlink: 'syz.4.36799': attribute type 10 has an invalid length. [ 2867.072858][T18573] netlink: 40 bytes leftover after parsing attributes in process `syz.4.36799'. [ 2867.092342][T18573] bridge0: port 5(veth0_vlan) entered blocking state [ 2867.101072][T18573] bridge0: port 5(veth0_vlan) entered disabled state [ 2867.160682][T18573] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2867.621711][T18589] netlink: 'syz.0.36806': attribute type 2 has an invalid length. [ 2867.630967][T18589] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.36806'. [ 2875.248058][T18623] netlink: 'syz.4.36817': attribute type 10 has an invalid length. [ 2875.265066][T18623] netlink: 40 bytes leftover after parsing attributes in process `syz.4.36817'. [ 2875.286179][T18623] bridge0: port 5(veth0_vlan) entered blocking state [ 2875.293084][T18623] bridge0: port 5(veth0_vlan) entered disabled state [ 2875.312824][T18623] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2877.126901][T18656] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.36843'. [ 2880.112450][T18690] netlink: 'syz.3.36850': attribute type 10 has an invalid length. [ 2880.125335][T18690] bridge0: port 3(team0) entered disabled state [ 2880.131821][T18690] bridge0: port 2(bridge_slave_1) entered disabled state [ 2880.139117][T18690] bridge0: port 1(bridge_slave_0) entered disabled state [ 2880.213079][T18690] bridge0: port 3(team0) entered blocking state [ 2880.219561][T18690] bridge0: port 3(team0) entered forwarding state [ 2880.226311][T18690] bridge0: port 2(bridge_slave_1) entered blocking state [ 2880.233471][T18690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2880.240970][T18690] bridge0: port 1(bridge_slave_0) entered blocking state [ 2880.248400][T18690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2880.269445][T18690] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2886.847650][T18743] netlink: 'syz.0.36870': attribute type 1 has an invalid length. [ 2886.855684][T18743] netlink: 'syz.0.36870': attribute type 4 has an invalid length. [ 2886.863534][T18743] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.36870'. [ 2886.995096][T18746] netlink: 'syz.4.36871': attribute type 10 has an invalid length. [ 2887.003114][T18746] netlink: 140 bytes leftover after parsing attributes in process `syz.4.36871'. [ 2887.016465][T18746] bridge0: port 3(team0) entered disabled state [ 2887.025275][T18746] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2890.937127][ T4283] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2890.945077][ T4283] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 2890.954467][ T4283] CPU: 0 PID: 4283 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 2890.962071][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2890.972193][ T4283] Workqueue: hci4 hci_rx_work [ 2890.976935][ T4283] Call Trace: [ 2890.980245][ T4283] [ 2890.983207][ T4283] dump_stack_lvl+0x188/0x24e [ 2890.987946][ T4283] ? show_regs_print_info+0x12/0x12 [ 2890.993232][ T4283] ? load_image+0x400/0x400 [ 2890.997809][ T4283] sysfs_create_dir_ns+0x26a/0x290 [ 2891.002984][ T4283] ? sysfs_warn_dup+0xa0/0xa0 [ 2891.007736][ T4283] ? do_raw_spin_unlock+0x11d/0x230 [ 2891.013000][ T4283] kobject_add_internal+0x61c/0xcc0 [ 2891.018280][ T4283] kobject_add+0x160/0x230 [ 2891.022848][ T4283] ? kobject_init+0x1d0/0x1d0 [ 2891.027578][ T4283] ? klist_children_get+0x50/0x50 [ 2891.032649][ T4283] ? get_device_parent+0x121/0x3f0 [ 2891.037809][ T4283] device_add+0x483/0xfb0 [ 2891.042210][ T4283] ? kmem_cache_free+0xf7/0x290 [ 2891.047124][ T4283] hci_conn_add_sysfs+0xd1/0x1e0 [ 2891.052123][ T4283] le_conn_complete_evt+0x1062/0x1670 [ 2891.057568][ T4283] ? le_conn_complete_evt+0xe9/0x1670 [ 2891.063013][ T4283] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2891.069300][ T4283] ? bt_info+0x180/0x180 [ 2891.073582][ T4283] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2891.079269][ T4283] ? skb_pull_data+0xf7/0x200 [ 2891.083982][ T4283] hci_le_conn_complete_evt+0x183/0x440 [ 2891.089574][ T4283] ? hci_remote_host_features_evt+0x270/0x270 [ 2891.095706][ T4283] hci_event_packet+0x7b9/0x1280 [ 2891.100691][ T4283] ? bis_list+0x280/0x280 [ 2891.105070][ T4283] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2891.111009][ T4283] ? kcov_remote_start+0x4c7/0x7e0 [ 2891.116170][ T4283] ? patch_conexant_auto+0x1260/0x1650 [ 2891.121663][ T4283] ? hci_send_to_monitor+0x9c/0x4a0 [ 2891.126902][ T4283] hci_rx_work+0x3eb/0xd40 [ 2891.131366][ T4283] ? _raw_spin_unlock+0x40/0x40 [ 2891.136260][ T4283] ? process_one_work+0x7b0/0x1160 [ 2891.141395][ T4283] process_one_work+0x8a2/0x1160 [ 2891.146392][ T4283] ? worker_detach_from_pool+0x240/0x240 [ 2891.152084][ T4283] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2891.157224][ T4283] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2891.162803][ T4283] ? kthread_data+0x4b/0xc0 [ 2891.167343][ T4283] worker_thread+0xaa2/0x1270 [ 2891.172114][ T4283] kthread+0x29d/0x330 [ 2891.176202][ T4283] ? worker_clr_flags+0x1a0/0x1a0 [ 2891.181268][ T4283] ? kthread_blkcg+0xd0/0xd0 [ 2891.185872][ T4283] ret_from_fork+0x1f/0x30 [ 2891.190320][ T4283] [ 2891.196055][ T4283] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2891.214869][ T4283] Bluetooth: hci4: failed to register connection device [ 2892.486138][T18879] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.36927'. [ 2893.235852][T18866] Bluetooth: hci4: command 0x2016 tx timeout [ 2895.146201][T18866] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 2895.153892][T18866] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 2895.164407][T18866] CPU: 0 PID: 18866 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 2895.172082][T18866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2895.182178][T18866] Workqueue: hci2 hci_rx_work [ 2895.186883][T18866] Call Trace: [ 2895.190174][T18866] [ 2895.193109][T18866] dump_stack_lvl+0x188/0x24e [ 2895.197817][T18866] ? show_regs_print_info+0x12/0x12 [ 2895.203061][T18866] ? load_image+0x400/0x400 [ 2895.207595][T18866] sysfs_create_dir_ns+0x26a/0x290 [ 2895.212726][T18866] ? sysfs_warn_dup+0xa0/0xa0 [ 2895.217438][T18866] ? do_raw_spin_unlock+0x11d/0x230 [ 2895.222673][T18866] kobject_add_internal+0x61c/0xcc0 [ 2895.227898][T18866] kobject_add+0x160/0x230 [ 2895.232333][T18866] ? kobject_init+0x1d0/0x1d0 [ 2895.237051][T18866] ? klist_children_get+0x50/0x50 [ 2895.242094][T18866] ? get_device_parent+0x121/0x3f0 [ 2895.247227][T18866] device_add+0x483/0xfb0 [ 2895.251572][T18866] ? kmem_cache_free+0xf7/0x290 [ 2895.256471][T18866] hci_conn_add_sysfs+0xd1/0x1e0 [ 2895.261453][T18866] le_conn_complete_evt+0x1062/0x1670 [ 2895.266882][T18866] ? le_conn_complete_evt+0xe9/0x1670 [ 2895.272301][T18866] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2895.278559][T18866] ? bt_info+0x180/0x180 [ 2895.282847][T18866] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2895.288499][T18866] ? skb_pull_data+0xf7/0x200 [ 2895.293213][T18866] hci_le_conn_complete_evt+0x183/0x440 [ 2895.298785][T18866] ? hci_remote_host_features_evt+0x270/0x270 [ 2895.304909][T18866] hci_event_packet+0x7b9/0x1280 [ 2895.309895][T18866] ? bis_list+0x280/0x280 [ 2895.314269][T18866] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2895.320186][T18866] ? kcov_remote_start+0x4c7/0x7e0 [ 2895.325314][T18866] ? patch_conexant_auto+0x1260/0x1650 [ 2895.330812][T18866] ? hci_send_to_monitor+0x9c/0x4a0 [ 2895.336028][T18866] hci_rx_work+0x3eb/0xd40 [ 2895.340456][T18866] ? _raw_spin_unlock+0x40/0x40 [ 2895.345342][T18866] ? process_one_work+0x7b0/0x1160 [ 2895.350467][T18866] process_one_work+0x8a2/0x1160 [ 2895.355432][T18866] ? worker_detach_from_pool+0x240/0x240 [ 2895.361172][T18866] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2895.366223][T18866] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2895.371806][T18866] ? kthread_data+0x4b/0xc0 [ 2895.376332][T18866] worker_thread+0xaa2/0x1270 [ 2895.381036][T18866] ? __kthread_parkme+0x162/0x1c0 [ 2895.386100][T18866] kthread+0x29d/0x330 [ 2895.390185][T18866] ? worker_clr_flags+0x1a0/0x1a0 [ 2895.395265][T18866] ? kthread_blkcg+0xd0/0xd0 [ 2895.399881][T18866] ret_from_fork+0x1f/0x30 [ 2895.404370][T18866] [ 2895.408898][T18866] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2895.422134][T18866] Bluetooth: hci2: failed to register connection device [ 2895.430946][T18891] netlink: 'syz.2.36932': attribute type 10 has an invalid length. [ 2895.441121][T18891] bridge0: port 3(veth1_to_hsr) entered disabled state [ 2895.448297][T18891] bridge0: port 2(bridge_slave_1) entered disabled state [ 2895.455478][T18891] bridge0: port 1(bridge_slave_0) entered disabled state [ 2895.478468][T18891] bridge0: port 3(veth1_to_hsr) entered blocking state [ 2895.485645][T18891] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 2895.492847][T18891] bridge0: port 2(bridge_slave_1) entered blocking state [ 2895.500034][T18891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2895.507472][T18891] bridge0: port 1(bridge_slave_0) entered blocking state [ 2895.514649][T18891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2895.567737][T18891] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2895.586293][T18895] netlink: 'syz.3.36933': attribute type 10 has an invalid length. [ 2895.594259][T18895] netlink: 140 bytes leftover after parsing attributes in process `syz.3.36933'. [ 2895.630129][T18895] bridge0: port 3(team0) entered disabled state [ 2895.733709][T18895] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2895.774889][T18897] netlink: 'syz.1.36934': attribute type 1 has an invalid length. [ 2895.788045][T18897] netlink: 'syz.1.36934': attribute type 4 has an invalid length. [ 2895.800435][T18897] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.36934'. [ 2896.097109][T18928] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.36949'. [ 2896.337783][T13674] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2896.345749][T13674] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 2896.356415][T13674] CPU: 1 PID: 13674 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 2896.364125][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2896.374245][T13674] Workqueue: hci3 hci_rx_work [ 2896.379012][T13674] Call Trace: [ 2896.382367][T13674] [ 2896.385375][T13674] dump_stack_lvl+0x188/0x24e [ 2896.390154][T13674] ? show_regs_print_info+0x12/0x12 [ 2896.395457][T13674] ? load_image+0x400/0x400 [ 2896.400083][T13674] sysfs_create_dir_ns+0x26a/0x290 [ 2896.405255][T13674] ? sysfs_warn_dup+0xa0/0xa0 [ 2896.409993][T13674] ? do_raw_spin_unlock+0x11d/0x230 [ 2896.415236][T13674] kobject_add_internal+0x61c/0xcc0 [ 2896.420504][T13674] kobject_add+0x160/0x230 [ 2896.424981][T13674] ? kobject_init+0x1d0/0x1d0 [ 2896.429727][T13674] ? klist_children_get+0x50/0x50 [ 2896.434916][T13674] ? get_device_parent+0x121/0x3f0 [ 2896.440084][T13674] device_add+0x483/0xfb0 [ 2896.444474][T13674] ? kmem_cache_free+0xf7/0x290 [ 2896.449400][T13674] hci_conn_add_sysfs+0xd1/0x1e0 [ 2896.454416][T13674] le_conn_complete_evt+0x1062/0x1670 [ 2896.459865][T13674] ? le_conn_complete_evt+0xe9/0x1670 [ 2896.465304][T13674] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2896.471696][T13674] ? bt_info+0x180/0x180 [ 2896.476026][T13674] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2896.481733][T13674] ? skb_pull_data+0xf7/0x200 [ 2896.486466][T13674] hci_le_conn_complete_evt+0x183/0x440 [ 2896.492074][T13674] ? hci_remote_host_features_evt+0x270/0x270 [ 2896.498204][T13674] hci_event_packet+0x7b9/0x1280 [ 2896.503214][T13674] ? bis_list+0x280/0x280 [ 2896.507599][T13674] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2896.513556][T13674] ? kcov_remote_start+0x4c7/0x7e0 [ 2896.518736][T13674] ? patch_conexant_auto+0x1260/0x1650 [ 2896.524262][T13674] ? hci_send_to_monitor+0x9c/0x4a0 [ 2896.529539][T13674] hci_rx_work+0x3eb/0xd40 [ 2896.534009][T13674] ? _raw_spin_unlock+0x40/0x40 [ 2896.538924][T13674] ? process_one_work+0x7b0/0x1160 [ 2896.544176][T13674] process_one_work+0x8a2/0x1160 [ 2896.549187][T13674] ? worker_detach_from_pool+0x240/0x240 [ 2896.554876][T13674] ? _raw_spin_lock_irq+0x86/0xf0 [ 2896.559953][T13674] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2896.565027][T13674] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2896.570619][T13674] ? kthread_data+0x4b/0xc0 [ 2896.575193][T13674] worker_thread+0xaa2/0x1270 [ 2896.579980][T13674] kthread+0x29d/0x330 [ 2896.584091][T13674] ? worker_clr_flags+0x1a0/0x1a0 [ 2896.589175][T13674] ? kthread_blkcg+0xd0/0xd0 [ 2896.593815][T13674] ret_from_fork+0x1f/0x30 [ 2896.598308][T13674] [ 2896.605200][T13674] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2896.618401][T13674] Bluetooth: hci3: failed to register connection device [ 2896.923730][T18952] ref_ctr_offset mismatch. inode: 0x1b4e offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2897.474886][T13674] Bluetooth: hci2: command 0x2016 tx timeout [ 2897.638122][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.644533][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2898.128066][T18866] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2898.136039][T18866] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 2898.146195][T18866] CPU: 0 PID: 18866 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 2898.153906][T18866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2898.164043][T18866] Workqueue: hci1 hci_rx_work [ 2898.168800][T18866] Call Trace: [ 2898.172117][T18866] [ 2898.175081][T18866] dump_stack_lvl+0x188/0x24e [ 2898.179825][T18866] ? show_regs_print_info+0x12/0x12 [ 2898.185087][T18866] ? load_image+0x400/0x400 [ 2898.189668][T18866] sysfs_create_dir_ns+0x26a/0x290 [ 2898.194835][T18866] ? sysfs_warn_dup+0xa0/0xa0 [ 2898.199572][T18866] ? do_raw_spin_unlock+0x11d/0x230 [ 2898.204827][T18866] kobject_add_internal+0x61c/0xcc0 [ 2898.210096][T18866] kobject_add+0x160/0x230 [ 2898.214576][T18866] ? kobject_init+0x1d0/0x1d0 [ 2898.219312][T18866] ? klist_children_get+0x50/0x50 [ 2898.224391][T18866] ? get_device_parent+0x121/0x3f0 [ 2898.229564][T18866] device_add+0x483/0xfb0 [ 2898.233958][T18866] ? kmem_cache_free+0xf7/0x290 [ 2898.238884][T18866] hci_conn_add_sysfs+0xd1/0x1e0 [ 2898.243888][T18866] le_conn_complete_evt+0x1062/0x1670 [ 2898.249325][T18866] ? le_conn_complete_evt+0xe9/0x1670 [ 2898.254772][T18866] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2898.261073][T18866] ? bt_info+0x180/0x180 [ 2898.265371][T18866] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2898.271064][T18866] ? skb_pull_data+0xf7/0x200 [ 2898.275799][T18866] hci_le_conn_complete_evt+0x183/0x440 [ 2898.281512][T18866] ? hci_remote_host_features_evt+0x270/0x270 [ 2898.287702][T18866] hci_event_packet+0x7b9/0x1280 [ 2898.292681][T18866] ? bis_list+0x280/0x280 [ 2898.297043][T18866] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2898.302979][T18866] ? kcov_remote_start+0x4c7/0x7e0 [ 2898.308125][T18866] ? patch_conexant_auto+0x1260/0x1650 [ 2898.313628][T18866] ? hci_send_to_monitor+0x9c/0x4a0 [ 2898.318875][T18866] hci_rx_work+0x3eb/0xd40 [ 2898.323325][T18866] ? _raw_spin_unlock+0x40/0x40 [ 2898.328224][T18866] ? process_one_work+0x7b0/0x1160 [ 2898.333368][T18866] process_one_work+0x8a2/0x1160 [ 2898.338352][T18866] ? worker_detach_from_pool+0x240/0x240 [ 2898.344012][T18866] ? _raw_spin_lock_irq+0x86/0xf0 [ 2898.349167][T18866] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2898.354240][T18866] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2898.359818][T18866] ? kthread_data+0x4b/0xc0 [ 2898.364370][T18866] worker_thread+0xaa2/0x1270 [ 2898.369100][T18866] ? __kthread_parkme+0x162/0x1c0 [ 2898.374175][T18866] kthread+0x29d/0x330 [ 2898.378281][T18866] ? worker_clr_flags+0x1a0/0x1a0 [ 2898.383335][T18866] ? kthread_blkcg+0xd0/0xd0 [ 2898.387969][T18866] ret_from_fork+0x1f/0x30 [ 2898.392435][T18866] [ 2898.403543][T18866] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2898.416722][T18866] Bluetooth: hci1: failed to register connection device [ 2898.674991][T13674] Bluetooth: hci3: command 0x2016 tx timeout [ 2900.104397][T19031] netlink: 'syz.2.36991': attribute type 1 has an invalid length. [ 2900.131764][T19031] netlink: 152 bytes leftover after parsing attributes in process `syz.2.36991'. [ 2900.434882][T18866] Bluetooth: hci1: command 0x2016 tx timeout [ 2902.166438][T19082] netlink: 'syz.2.37013': attribute type 3 has an invalid length. [ 2902.198201][T19082] netlink: 'syz.2.37013': attribute type 4 has an invalid length. [ 2902.225133][T19082] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.37013'. [ 2904.565283][T19154] ref_ctr_offset mismatch. inode: 0x1b5e offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2906.603955][T19204] ref_ctr_offset mismatch. inode: 0x1fa5 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2906.824474][T19213] netlink: 'syz.3.37066': attribute type 2 has an invalid length. [ 2906.844955][T19213] netlink: 'syz.3.37066': attribute type 9 has an invalid length. [ 2906.855203][T19213] netlink: 'syz.3.37066': attribute type 10 has an invalid length. [ 2906.863152][T19213] netlink: 'syz.3.37066': attribute type 11 has an invalid length. [ 2906.891083][T13674] Bluetooth: hci3: unexpected event 0x30 length: 151 > 3 [ 2906.893663][T19213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.37066'. [ 2907.309414][T19235] ref_ctr_offset mismatch. inode: 0x32a6 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2907.649206][T19248] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.37081'. [ 2908.272793][T19271] netlink: 'syz.4.37089': attribute type 1 has an invalid length. [ 2908.283380][T19271] netlink: 152 bytes leftover after parsing attributes in process `syz.4.37089'. [ 2908.889871][T19293] ref_ctr_offset mismatch. inode: 0x1bc5 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2909.468425][T19306] netlink: 'syz.4.37103': attribute type 3 has an invalid length. [ 2909.499817][T19306] netlink: 132 bytes leftover after parsing attributes in process `syz.4.37103'. [ 2909.651402][T19308] netlink: 'syz.1.37101': attribute type 1 has an invalid length. [ 2909.671352][T19308] netlink: 152 bytes leftover after parsing attributes in process `syz.1.37101'. [ 2910.198996][T19317] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.37108'. [ 2911.092022][T19327] ref_ctr_offset mismatch. inode: 0x1fde offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2911.194772][T19334] netlink: 'syz.1.37116': attribute type 3 has an invalid length. [ 2911.215195][T19334] netlink: 132 bytes leftover after parsing attributes in process `syz.1.37116'. [ 2911.341750][T19340] netlink: 'syz.3.37118': attribute type 1 has an invalid length. [ 2911.351917][T19340] netlink: 152 bytes leftover after parsing attributes in process `syz.3.37118'. [ 2911.613268][T19349] ref_ctr_offset mismatch. inode: 0x32d4 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2912.712146][T19370] netlink: 'syz.0.37131': attribute type 3 has an invalid length. [ 2912.825033][T19370] netlink: 132 bytes leftover after parsing attributes in process `syz.0.37131'. [ 2913.058046][T19378] netlink: 'syz.0.37132': attribute type 1 has an invalid length. [ 2913.086904][T19378] netlink: 152 bytes leftover after parsing attributes in process `syz.0.37132'. [ 2913.323581][T19386] ref_ctr_offset mismatch. inode: 0x1ff9 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2913.369211][T19388] netlink: 'syz.4.37150': attribute type 1 has an invalid length. [ 2913.378017][T19388] netlink: 152 bytes leftover after parsing attributes in process `syz.4.37150'. [ 2913.942043][T19397] netlink: 'syz.0.37153': attribute type 1 has an invalid length. [ 2913.984986][T19397] netlink: 152 bytes leftover after parsing attributes in process `syz.0.37153'. [ 2914.181825][T19406] netlink: 'syz.2.37146': attribute type 3 has an invalid length. [ 2914.202464][T19406] netlink: 132 bytes leftover after parsing attributes in process `syz.2.37146'. [ 2914.610593][T19412] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.37148'. [ 2914.820208][T19419] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.37152'. [ 2917.678162][T19438] netlink: 'syz.1.37160': attribute type 1 has an invalid length. [ 2917.686256][T19438] netlink: 152 bytes leftover after parsing attributes in process `syz.1.37160'. [ 2917.695924][T19441] netlink: 10 bytes leftover after parsing attributes in process `syz.2.37158'. [ 2917.706923][T19453] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.37166'. [ 2922.898808][T19554] Q6`Ҙ: renamed from lo [ 2923.182950][T19562] netlink: 'syz.3.37209': attribute type 4 has an invalid length. [ 2928.557823][T19655] Q6`Ҙ: renamed from lo [ 2933.244772][T13674] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 2934.311674][T13674] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 2935.314895][T13674] Bluetooth: hci2: command 0x0409 tx timeout [ 2936.354858][T18866] Bluetooth: hci4: command 0x0409 tx timeout [ 2936.830575][T19799] netlink: 'syz.1.37298': attribute type 10 has an invalid length. [ 2936.850397][T19799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2936.860946][T19799] team0: Port device bond0 added [ 2937.340541][T19820] device lo left promiscuous mode [ 2937.412008][T19824] Q6`Ҙ: renamed from lo [ 2938.741966][T19844] netlink: 'syz.2.37318': attribute type 10 has an invalid length. [ 2938.794686][T19844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2938.822986][T19844] team0: Port device bond0 added [ 2939.055361][T19859] netlink: 'syz.2.37326': attribute type 2 has an invalid length. [ 2939.081547][T19859] netlink: 'syz.2.37326': attribute type 1 has an invalid length. [ 2939.101217][T19859] netlink: 21959 bytes leftover after parsing attributes in process `syz.2.37326'. [ 2941.626859][T19900] netlink: 'syz.0.37345': attribute type 10 has an invalid length. [ 2941.672125][T19900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2941.748256][T19900] device bond0 entered promiscuous mode [ 2941.753921][T19900] device bond_slave_0 entered promiscuous mode [ 2941.798128][T19900] device bond_slave_1 entered promiscuous mode [ 2941.837511][T19900] team0: Port device bond0 added [ 2942.161177][T19918] device syzkaller0 entered promiscuous mode [ 2946.036253][T19946] netlink: 'syz.4.37365': attribute type 10 has an invalid length. [ 2946.047992][T19946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2946.056014][T19946] device bond0 entered promiscuous mode [ 2946.061610][T19946] device bond_slave_0 entered promiscuous mode [ 2946.068323][T19946] device bond_slave_1 entered promiscuous mode [ 2946.075244][T19946] device batadv_slave_0 entered promiscuous mode [ 2946.084708][T19946] team0: Port device bond0 added [ 2946.422526][T19988] netlink: 'syz.2.37385': attribute type 3 has an invalid length. [ 2946.450834][T19988] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.37385'. [ 2946.548683][T19988] netlink: 'syz.2.37385': attribute type 3 has an invalid length. [ 2946.676442][T19988] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.37385'. [ 2949.035903][T20044] netlink: 'syz.0.37406': attribute type 3 has an invalid length. [ 2949.094963][T20044] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.37406'. [ 2954.739476][T20105] device wlan0 entered promiscuous mode [ 2956.664549][T20141] device syzkaller0 entered promiscuous mode [ 2958.658965][T13674] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 2958.659005][T13674] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 2959.080536][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.087024][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2963.946736][T20197] __sock_release: fasync list not empty! [ 2964.926098][T20221] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.37482'. [ 2969.036897][T20247] __sock_release: fasync list not empty! [ 2970.937939][T20259] device syzkaller0 entered promiscuous mode [ 2971.569127][T20284] __sock_release: fasync list not empty! [ 2971.863663][T13674] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17 [ 2971.863706][T13674] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 2973.567952][T20312] device syzkaller0 entered promiscuous mode [ 2973.774635][T13674] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 2973.774679][T13674] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 2984.580932][T20378] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.37546'. [ 2986.326701][T20439] device syzkaller0 entered promiscuous mode [ 2992.600566][T20454] netlink: 8161 bytes leftover after parsing attributes in process `syz.4.37580'. [ 2995.943712][T20512] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.37599'. [ 2996.243177][T13674] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 2996.296061][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2996.347464][T20527] device syzkaller0 entered promiscuous mode [ 2996.360659][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2996.400821][T20526] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2996.701745][T20544] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.37615'. [ 2997.022204][T20553] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.37619'. [ 2998.285116][T13674] Bluetooth: hci4: command 0x0409 tx timeout [ 2999.967357][T20568] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.37622'. [ 3000.101320][T20572] device syzkaller0 entered promiscuous mode [ 3002.261885][T20583] device syzkaller0 entered promiscuous mode [ 3003.265582][T20590] netlink: 2639 bytes leftover after parsing attributes in process `syz.3.37629'. [ 3013.123393][T20669] device syzkaller0 entered promiscuous mode [ 3018.691773][T20683] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.37667'. [ 3018.701517][T20687] netlink: 'syz.1.37669': attribute type 2 has an invalid length. [ 3018.711008][T20687] netlink: 'syz.1.37669': attribute type 9 has an invalid length. [ 3018.719441][T20687] netlink: 'syz.1.37669': attribute type 10 has an invalid length. [ 3018.729251][T20687] netlink: 'syz.1.37669': attribute type 11 has an invalid length. [ 3018.737505][T20687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.37669'. [ 3018.937216][T20709] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.37678'. [ 3020.555154][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.561568][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 3022.546183][T20738] device syzkaller0 entered promiscuous mode [ 3027.748205][T20799] netlink: 'syz.4.37717': attribute type 6 has an invalid length. [ 3027.757333][T20799] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.37717'. [ 3031.865589][T20755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37696'. [ 3031.874651][T20755] netlink: 152 bytes leftover after parsing attributes in process `syz.0.37696'. [ 3032.476151][T20824] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.37727'. [ 3033.635312][T20835] can: request_module (can-proto-0) failed. [ 3033.914627][T20843] device virt_wifi0 entered promiscuous mode [ 3036.231682][T20855] device syzkaller0 entered promiscuous mode [ 3037.226790][T13674] Bluetooth: Frame is too long (len 13, expected len 4) [ 3046.721194][T20934] device syzkaller0 entered promiscuous mode [ 3048.415803][T18866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3048.424472][T18866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3048.432802][T18866] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3048.443978][T18866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3048.453563][T18866] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3048.461482][T18866] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3050.529869][T18866] Bluetooth: hci5: command 0x0409 tx timeout [ 3052.595176][T18866] Bluetooth: hci5: command 0x041b tx timeout [ 3052.872375][T20948] chnl_net:caif_netlink_parms(): no params data found [ 3052.938302][T20948] bridge0: port 1(bridge_slave_0) entered blocking state [ 3052.945632][T20948] bridge0: port 1(bridge_slave_0) entered disabled state [ 3052.954472][T20948] device bridge_slave_0 entered promiscuous mode [ 3052.977445][T20948] bridge0: port 2(bridge_slave_1) entered blocking state [ 3052.984815][T20948] bridge0: port 2(bridge_slave_1) entered disabled state [ 3052.993186][T20948] device bridge_slave_1 entered promiscuous mode [ 3053.037696][T20834] bond0: (slave syz_tun): Releasing backup interface [ 3053.063339][T20948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3053.076089][T20948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3053.101587][T20948] team0: Port device team_slave_0 added [ 3053.110745][T20948] team0: Port device team_slave_1 added [ 3053.151206][T26763] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3053.168883][T20948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3053.176047][T20948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3053.202251][T20948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3053.215103][T20948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3053.222187][T20948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3053.248910][T20948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3053.280646][T26763] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3053.310403][T20948] device hsr_slave_0 entered promiscuous mode [ 3053.318168][T20948] device hsr_slave_1 entered promiscuous mode [ 3053.324917][T20948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3053.332596][T20948] Cannot create hsr debugfs directory [ 3053.365947][T26763] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3053.432985][T26763] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3053.502415][T20948] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3053.512615][T20948] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3053.524120][T20948] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3053.535311][T20948] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3053.780682][T20948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3053.854299][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3053.866368][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3053.877711][T20948] 8021q: adding VLAN 0 to HW filter on device team0 [ 3053.987075][T20947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3053.998835][T20947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3054.008350][T20947] bridge0: port 1(bridge_slave_0) entered blocking state [ 3054.015561][T20947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3054.024964][T20947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3054.034038][T20947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3054.045663][T20947] bridge0: port 2(bridge_slave_1) entered blocking state [ 3054.052813][T20947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3054.101320][T20947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3054.111759][T20947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3054.126960][T20947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3054.143833][T20947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3054.160297][T20947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3054.169386][T20947] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3054.218157][T20947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3054.227052][T20947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3054.242367][T20947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3054.251303][T20947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3054.267974][T20948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3054.280765][T20948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3054.305615][T20947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3054.318427][T20947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3054.662608][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3054.672180][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3054.680814][T18866] Bluetooth: hci5: command 0x040f tx timeout [ 3054.697017][T20948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3055.029019][T26763] device hsr_slave_0 left promiscuous mode [ 3055.058663][T26763] device hsr_slave_1 left promiscuous mode [ 3055.065942][T26763] device veth1_to_hsr left promiscuous mode [ 3055.072041][T26763] bridge0: port 3(veth1_to_hsr) entered disabled state [ 3055.084914][T26763] device bridge_slave_1 left promiscuous mode [ 3055.091192][T26763] bridge0: port 2(bridge_slave_1) entered disabled state [ 3055.106218][T26763] device bridge_slave_0 left promiscuous mode [ 3055.112460][T26763] bridge0: port 1(bridge_slave_0) entered disabled state [ 3055.149999][T26763] device veth1_vlan left promiscuous mode [ 3055.361419][T26763] team0 (unregistering): Port device macvlan1 removed [ 3055.737614][T26763] team0 (unregistering): Port device team_slave_1 removed [ 3055.779637][T26763] team0 (unregistering): Port device C removed [ 3055.820640][T26763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3055.864115][T26763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3056.140886][T26763] team0 (unregistering): Port device bond0 removed [ 3056.175338][T26763] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 3056.184137][T26763] bond0 (unregistering): Released all slaves [ 3056.313492][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3056.335468][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3056.368949][T22461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3056.378268][T22461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3056.390332][T20948] device veth0_vlan entered promiscuous mode [ 3056.407421][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3056.416706][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3056.433045][T20948] device veth1_vlan entered promiscuous mode [ 3056.463590][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3056.485747][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3056.494048][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3056.516393][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3056.537651][T20948] device veth0_macvtap entered promiscuous mode [ 3056.548927][T20948] device veth1_macvtap entered promiscuous mode [ 3056.599182][T20948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3056.606598][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3056.617270][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3056.626847][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3056.638139][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3056.649875][T20948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3056.661004][T20948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3056.675434][T20948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3056.683547][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3056.693425][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3056.706306][T20948] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3056.716329][T20948] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3056.725729][T20948] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3056.734466][T20948] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3056.755038][T18866] Bluetooth: hci5: command 0x0419 tx timeout [ 3056.859971][T16283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3056.888665][T16283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3056.907246][T26763] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3056.921925][T26763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3056.930988][T26763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3056.941512][T16283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3081.958180][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.964544][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.396983][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.403343][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 3171.074930][T13674] Bluetooth: hci5: command 0x0406 tx timeout [ 3203.291243][ T2976] bond0: (slave syz_tun): Releasing backup interface [ 3203.641862][T22633] bond0: (slave syz_tun): Releasing backup interface [ 3203.669995][ T2936] bond0: (slave syz_tun): Releasing backup interface [ 3203.712458][T26763] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3203.827754][T26763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3203.891205][T26763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3204.837401][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.843765][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.198905][T26763] device hsr_slave_0 left promiscuous mode [ 3205.207675][T26763] device hsr_slave_1 left promiscuous mode [ 3205.214342][T26763] device veth1_to_hsr left promiscuous mode [ 3205.221966][T26763] bridge0: port 3(veth1_to_hsr) entered disabled state [ 3205.232176][T26763] device bridge_slave_1 left promiscuous mode [ 3205.242980][T26763] bridge0: port 2(bridge_slave_1) entered disabled state [ 3205.253165][T26763] device bridge_slave_0 left promiscuous mode [ 3205.260754][T26763] bridge0: port 1(bridge_slave_0) entered disabled state [ 3205.296921][T26763] device veth1_macvtap left promiscuous mode [ 3205.303055][T26763] device veth1_vlan left promiscuous mode [ 3205.527536][T26763] team0 (unregistering): Port device macvlan1 removed [ 3205.838545][T26763] team0 (unregistering): Port device team_slave_1 removed [ 3205.879649][T26763] team0 (unregistering): Port device team_slave_0 removed [ 3205.921754][T26763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3205.965697][T26763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3206.230729][T26763] team0 (unregistering): Port device bond0 removed [ 3206.264486][T26763] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 3206.273837][T26763] bond0 (unregistering): Released all slaves [ 3206.871711][T22461] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3206.939803][T22461] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3207.009755][T22461] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3207.097714][T22461] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3207.284303][T22461] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3207.374281][T22461] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3207.453772][T22461] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3207.549678][T22461] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3207.685506][T22461] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3207.767316][T22461] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3207.858097][T22461] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3207.938607][T22461] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3208.095948][T22461] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3208.206307][T22461] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3208.290304][T22461] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3208.339140][T22461] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3211.351827][T22461] device hsr_slave_0 left promiscuous mode [ 3211.362125][T22461] device hsr_slave_1 left promiscuous mode [ 3211.369063][T22461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3211.377803][T22461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3211.385950][T22461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3211.393629][T22461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3211.402641][T22461] device bridge_slave_1 left promiscuous mode [ 3211.409708][T22461] bridge0: port 2(bridge_slave_1) entered disabled state [ 3211.419146][T22461] device bridge_slave_0 left promiscuous mode [ 3211.425913][T22461] bridge0: port 1(bridge_slave_0) entered disabled state [ 3211.438998][T22461] device hsr_slave_0 left promiscuous mode [ 3211.445576][T22461] device hsr_slave_1 left promiscuous mode [ 3211.451866][T22461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3211.459433][T22461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3211.467529][T22461] device batadv0 left promiscuous mode [ 3211.473165][T22461] bridge0: port 4(batadv0) entered disabled state [ 3211.481386][T22461] device bridge_slave_1 left promiscuous mode [ 3211.487668][T22461] bridge0: port 2(bridge_slave_1) entered disabled state [ 3211.495890][T22461] device bridge_slave_0 left promiscuous mode [ 3211.502086][T22461] bridge0: port 1(bridge_slave_0) entered disabled state [ 3211.515328][T22461] device hsr_slave_0 left promiscuous mode [ 3211.521579][T22461] device hsr_slave_1 left promiscuous mode [ 3211.528106][T22461] device veth1_to_hsr left promiscuous mode [ 3211.534142][T22461] bridge0: port 4(veth1_to_hsr) entered disabled state [ 3211.542405][T22461] bridge0: port 3(team0) entered disabled state [ 3211.550426][T22461] device bridge_slave_1 left promiscuous mode [ 3211.556933][T22461] bridge0: port 2(bridge_slave_1) entered disabled state [ 3211.565280][T22461] device bridge_slave_0 left promiscuous mode [ 3211.571466][T22461] bridge0: port 1(bridge_slave_0) entered disabled state [ 3211.583222][T22461] device hsr_slave_0 left promiscuous mode [ 3211.589806][T22461] device hsr_slave_1 left promiscuous mode [ 3211.596394][T22461] device bridge_slave_1 left promiscuous mode [ 3211.602578][T22461] bridge0: port 2(bridge_slave_1) entered disabled state [ 3211.610970][T22461] device bridge_slave_0 left promiscuous mode [ 3211.617207][T22461] bridge0: port 1(bridge_slave_0) entered disabled state [ 3211.701672][T22461] device veth1_macvtap left promiscuous mode [ 3211.707817][T22461] device veth0_macvtap left promiscuous mode [ 3211.713908][T22461] device veth1_vlan left promiscuous mode [ 3211.719897][T22461] device veth0_vlan left promiscuous mode [ 3211.727838][T22461] device veth1_vlan left promiscuous mode [ 3211.737699][T22461] device veth1_vlan left promiscuous mode [ 3211.746747][T22461] device veth1_macvtap left promiscuous mode [ 3211.752809][T22461] device veth0_macvtap left promiscuous mode [ 3211.759434][T22461] device veth1_vlan left promiscuous mode [ 3212.489938][T22461] team0 (unregistering): Port device team_slave_1 removed [ 3212.532485][T22461] team0 (unregistering): Port device team_slave_0 removed [ 3212.572428][T22461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3212.616024][T22461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3212.928970][T22461] bond0 (unregistering): Released all slaves [ 3213.134618][T22461] device geneve1 left promiscuous mode [ 3213.143087][T22461] team0 (unregistering): Port device geneve1 removed [ 3213.452705][T22461] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 3213.462042][T22461] device batadv_slave_0 left promiscuous mode [ 3213.505352][T22461] device team_slave_1 left promiscuous mode [ 3213.513286][T22461] team0 (unregistering): Port device team_slave_1 removed [ 3213.552589][T22461] device C left promiscuous mode [ 3213.558940][T22461] team0 (unregistering): Port device C removed [ 3213.600118][T22461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3213.609063][T22461] device bond_slave_1 left promiscuous mode [ 3213.649452][T22461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3213.658649][T22461] device bond_slave_0 left promiscuous mode [ 3213.932019][T22461] device bond0 left promiscuous mode [ 3213.938483][T22461] team0 (unregistering): Port device bond0 removed [ 3213.973723][T22461] bond0 (unregistering): Released all slaves [ 3216.136965][T22461] device team_slave_1 left promiscuous mode [ 3216.145522][T22461] team0 (unregistering): Port device team_slave_1 removed [ 3216.184311][T22461] device team_slave_0 left promiscuous mode [ 3216.191153][T22461] team0 (unregistering): Port device team_slave_0 removed [ 3216.233008][T22461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3216.242019][T22461] device bond_slave_1 left promiscuous mode [ 3216.286070][T22461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3216.295712][T22461] device bond_slave_0 left promiscuous mode [ 3216.543620][T22461] device bond0 left promiscuous mode [ 3216.549954][T22461] team0 (unregistering): Port device bond0 removed [ 3216.578692][T22461] bond0 (unregistering): Released all slaves [ 3217.104924][T22461] device team_slave_1 left promiscuous mode [ 3217.113211][T22461] team0 (unregistering): Port device team_slave_1 removed [ 3217.153275][T22461] device team_slave_0 left promiscuous mode [ 3217.160464][T22461] team0 (unregistering): Port device team_slave_0 removed [ 3217.205235][T22461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3217.250066][T22461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3217.526784][T22461] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 3217.535596][T22461] bond0 (unregistering): Released all slaves [ 3266.287632][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.294057][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)