last executing test programs: 4.051979972s ago: executing program 3 (id=1780): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$kcm(0xf, 0x3, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7ff1, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x25346c7d6a446d0f, 0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) 3.788265587s ago: executing program 3 (id=1782): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x6, 0x8, 0x9, 0x9, 0x0, 0x83, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x9}, 0x6001, 0x0, 0x4, 0x7, 0x5, 0xc, 0x4, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xc, r0, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095000000000000008d9062820b805b34b78cd182a01ecb91883b0a35102f01324235980ad30eec31c3ef5aa5f388d90180b341fe855c2dd81ed8f08c8d0a5e7e73f550d9461d75cb56882bcd494988742cec70bccbc32951d3f9d772b8a3d31048f518cc3e2ac4b79c989dd9a916d196984bd6d75f6f1a8931038fafd5a68929c34c2a263835e34e09ae067cea299ac86468ec133ab03255cd082d9d5386e5b6a48cec6913e6ea6e7c8a7df69b8e5bdeafa1a0093478"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) 2.871332712s ago: executing program 3 (id=1786): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000150400003d0301000000000095000f00000000006926000000000000bf67000000000000450700000fff07003506000002000000170600000ee50014bf250000000000005d670000000000006507000006000000070700004c0001000f75000000000000bf54000000000000070400000400f9ff2d440100000000009500000000000000050000000000000095000700000000000172dbabb733a0e757c7c45402000000a2d23da04d1ffc187f9955911aa1a2ba7ba030c7267c2de00435fd253cc0f0d9b2c3127c46b0f4f95345de3188f0d808398d09ee4dc258d726eae098804de25df627a64ab8efde50fd7f1d58d67e684c45e506598bae66ea1a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07e8a4b6e6355cecc13a5ddf4157f2bfab7201112a30274101fceee66eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a44dd9ff4ae730ae9d0ae42d8814a8c96f101df7da839bcdd7b7c33c8cfe6fd599543ac604d8dd42fc66cdb79cd09ceeedce1e69f11967919f82b0276c90420d08897ee8514b43533f07132589a0a37110fd8571b1e69251bba35cd06c8bd430aafbecfd33757b7dc4803123e9107e5cceaec2a391f9b9b577295ac3864f6c1e30e6190a055953e18bedd1859acdd15af7209d15950f9195b401e74f8b5210e28d46dde2658b4695d9ac9ce7cbefc164a5454fc4da6104db281e18a8992b9f8c82b895da647e6ea4cb622314c5c48abfd620adf7757c23a31a619edcfb45a402c5fced05e5274e08a313d6c5fdd0a8d36b1a268056e6f7e9a6daa5632cda5ad2a9ebfac980c7db63137c226f712e522aad0f13b0e5b43d837d040f813d011538"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r2, r1, 0x4, r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x7f, 0x2, 0xf910, 0x1407e, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x4, 0x2, 0x0, 0x0, @void, @value, @value=r2}, 0x50) syz_clone(0x1c48c9600, 0x0, 0x0, 0x0, 0x0, 0x0) 2.869571382s ago: executing program 1 (id=1792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func_proto, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0x4, 0x2}]}]}, {0x0, [0x30, 0x61]}}, 0x0, 0x44, 0x0, 0x0, 0x7f}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.82525068s ago: executing program 1 (id=1788): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xa}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000300)='GPL\x00', 0xf19, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x3, 0x2, 0x41f}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2c0200, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xf, 0x3, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2e}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000c3160000400000009500baf000000000"], 0x0, 0x2, 0x8e, &(0x7f00000002c0)=""/142}, 0x94) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014000000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) 1.82473274s ago: executing program 2 (id=1789): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$sock_attach_bpf(r3, 0x10d, 0xa, &(0x7f0000000000)=r4, 0x11) 1.545144114s ago: executing program 3 (id=1799): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0xfffffffffffffc9a, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) 1.410066507s ago: executing program 1 (id=1791): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10000, 0x400, 0x0, 0xfffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 1.409493947s ago: executing program 3 (id=1793): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.398580197s ago: executing program 2 (id=1794): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x6, 0x8, 0x9, 0x9, 0x0, 0x83, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x9}, 0x6001, 0x0, 0x4, 0x7, 0x5, 0xc, 0x4, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xc, r0, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095000000000000008d9062820b805b34b78cd182a01ecb91883b0a35102f01324235980ad30eec31c3ef5aa5f388d90180b341fe855c2dd81ed8f08c8d0a5e7e73f550d9461d75cb56882bcd494988742cec70bccbc32951d3f9d772b8a3d31048f518cc3e2ac4b79c989dd9a916d196984bd6d75f6f1a8931038fafd5a68929c34c2a263835e34e09ae067cea299ac86468ec133ab03255cd082d9d5386e5b6a48cec6913e6ea6e7c8a7df69b8e5bdeafa1a0093478"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) 1.266310959s ago: executing program 1 (id=1795): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="14", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x19ffe) 1.263193039s ago: executing program 2 (id=1797): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000001000000050008000100000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x8, 0x0, 0x0, 0x0, 0x8, 0x37a05, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x500, 0x6d}, 0x1075, 0x4, 0x0, 0x2, 0xffffffffffffbbfe, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1.073532192s ago: executing program 2 (id=1800): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x19, &(0x7f0000000000)=r7, 0x8) 922.923165ms ago: executing program 0 (id=1801): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/76}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x0, 0x1, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) 626.55638ms ago: executing program 0 (id=1802): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0xfffffffffffffc9a, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) 556.649071ms ago: executing program 0 (id=1803): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xa}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000300)='GPL\x00', 0xf19, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x3, 0x2, 0x41f}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2c0200, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xf, 0x3, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2e}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000c3160000400000009500baf000000000"], 0x0, 0x2, 0x8e, &(0x7f00000002c0)=""/142}, 0x94) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014000000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) 338.878024ms ago: executing program 1 (id=1804): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$sock_attach_bpf(r3, 0x10d, 0xa, &(0x7f0000000000)=r4, 0x11) 337.775804ms ago: executing program 0 (id=1805): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x20000000000005, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES16=r1], 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20) 307.616235ms ago: executing program 3 (id=1806): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)='$', 0x1}], 0x1}, 0x4040001) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x2, 0xfffffffe, 0x8000, 0x6, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000020000008500000086"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000240)='xen_cpu_write_idt_entry\x00', r4, 0x0, 0x7}, 0x18) recvmsg$unix(r1, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 156.999518ms ago: executing program 0 (id=1807): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000005c0)='workqueue_activate_work\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) 130.463109ms ago: executing program 2 (id=1808): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 71.186139ms ago: executing program 0 (id=1809): syz_clone(0xa91ca400, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4a, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000006c0), 0x0, &(0x7f0000000d40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast}}}, @ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}], 0x80}, 0x800) 61.505779ms ago: executing program 1 (id=1810): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 0s ago: executing program 2 (id=1811): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/76}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x0, 0x1, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 66.294610][ T5774] cgroup: Unknown subsys name 'net' [ 66.457906][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.826641][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.218424][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.226769][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.235970][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.236171][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.245355][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.251679][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.261978][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.273406][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.280708][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.281070][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.294913][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.317080][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.325750][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.332995][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.336592][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.341427][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.347261][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.362162][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.370059][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.370607][ T5799] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.380544][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.384159][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.391709][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.399320][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.839586][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 69.946989][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 69.967641][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 70.046214][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 70.066863][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.074929][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.082641][ T5787] bridge_slave_0: entered allmulticast mode [ 70.089441][ T5787] bridge_slave_0: entered promiscuous mode [ 70.117470][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.124994][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.132295][ T5787] bridge_slave_1: entered allmulticast mode [ 70.139115][ T5787] bridge_slave_1: entered promiscuous mode [ 70.194061][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.201330][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.208489][ T5785] bridge_slave_0: entered allmulticast mode [ 70.216153][ T5785] bridge_slave_0: entered promiscuous mode [ 70.258298][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.267660][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.275542][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.283782][ T5785] bridge_slave_1: entered allmulticast mode [ 70.291205][ T5785] bridge_slave_1: entered promiscuous mode [ 70.316466][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.348679][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.356089][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.363448][ T5784] bridge_slave_0: entered allmulticast mode [ 70.371809][ T5784] bridge_slave_0: entered promiscuous mode [ 70.379187][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.386400][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.394118][ T5784] bridge_slave_1: entered allmulticast mode [ 70.401396][ T5784] bridge_slave_1: entered promiscuous mode [ 70.464995][ T5787] team0: Port device team_slave_0 added [ 70.473830][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.486528][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.496196][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.503554][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.510971][ T5786] bridge_slave_0: entered allmulticast mode [ 70.517665][ T5786] bridge_slave_0: entered promiscuous mode [ 70.536698][ T5787] team0: Port device team_slave_1 added [ 70.555632][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.563480][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.571061][ T5786] bridge_slave_1: entered allmulticast mode [ 70.577763][ T5786] bridge_slave_1: entered promiscuous mode [ 70.586912][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.598998][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.665157][ T5785] team0: Port device team_slave_0 added [ 70.694585][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.702316][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.728347][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.741747][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.748904][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.774873][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.788557][ T5785] team0: Port device team_slave_1 added [ 70.797377][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.809454][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.822766][ T5784] team0: Port device team_slave_0 added [ 70.863248][ T5784] team0: Port device team_slave_1 added [ 70.904982][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.912217][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.938530][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.977447][ T5786] team0: Port device team_slave_0 added [ 70.995598][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.003144][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.030500][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.048019][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.055171][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.081504][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.094275][ T5786] team0: Port device team_slave_1 added [ 71.114538][ T5787] hsr_slave_0: entered promiscuous mode [ 71.121251][ T5787] hsr_slave_1: entered promiscuous mode [ 71.131480][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.138461][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.165221][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.213226][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.220534][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.246545][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.278256][ T5785] hsr_slave_0: entered promiscuous mode [ 71.286390][ T5785] hsr_slave_1: entered promiscuous mode [ 71.292893][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.300888][ T5785] Cannot create hsr debugfs directory [ 71.317680][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.324936][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.351115][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.404260][ T5784] hsr_slave_0: entered promiscuous mode [ 71.410918][ T5784] hsr_slave_1: entered promiscuous mode [ 71.417585][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.425423][ T5784] Cannot create hsr debugfs directory [ 71.441602][ T5103] Bluetooth: hci0: command tx timeout [ 71.443417][ T50] Bluetooth: hci1: command tx timeout [ 71.447184][ T5792] Bluetooth: hci2: command tx timeout [ 71.458403][ T5799] Bluetooth: hci3: command tx timeout [ 71.577298][ T5786] hsr_slave_0: entered promiscuous mode [ 71.584762][ T5786] hsr_slave_1: entered promiscuous mode [ 71.591943][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.599713][ T5786] Cannot create hsr debugfs directory [ 71.768282][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.775164][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.848568][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.872440][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.884234][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.919941][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.968909][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.994685][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.008254][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.032746][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.078004][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.099724][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.125347][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.135937][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.222181][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.233024][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.258500][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.269592][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.338435][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.362421][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.396037][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.403528][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.419717][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.426909][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.467956][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.515612][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.564334][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.587253][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.597035][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.604169][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.621550][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.628689][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.661860][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.669038][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.716935][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.724182][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.764291][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.825446][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.865125][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.872391][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.909539][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.916730][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.971741][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.118740][ T5785] veth0_vlan: entered promiscuous mode [ 73.156701][ T5785] veth1_vlan: entered promiscuous mode [ 73.175426][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.303252][ T5785] veth0_macvtap: entered promiscuous mode [ 73.314537][ T5787] veth0_vlan: entered promiscuous mode [ 73.333681][ T5785] veth1_macvtap: entered promiscuous mode [ 73.354191][ T5787] veth1_vlan: entered promiscuous mode [ 73.412962][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.451561][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.470885][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.479875][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.490395][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.499114][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.520362][ T5103] Bluetooth: hci2: command tx timeout [ 73.520554][ T50] Bluetooth: hci0: command tx timeout [ 73.525847][ T5792] Bluetooth: hci3: command tx timeout [ 73.531510][ T5799] Bluetooth: hci1: command tx timeout [ 73.558510][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.578003][ T5787] veth0_macvtap: entered promiscuous mode [ 73.587247][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.616028][ T5787] veth1_macvtap: entered promiscuous mode [ 73.676598][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.687889][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.702309][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.749556][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.761327][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.773571][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.785937][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.795051][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.803866][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.812866][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.834872][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.853462][ T5786] veth0_vlan: entered promiscuous mode [ 73.861730][ T5784] veth0_vlan: entered promiscuous mode [ 73.867809][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.908716][ T5786] veth1_vlan: entered promiscuous mode [ 73.935857][ T5784] veth1_vlan: entered promiscuous mode [ 73.977298][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.995584][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.013812][ T5784] veth0_macvtap: entered promiscuous mode [ 74.027539][ T5784] veth1_macvtap: entered promiscuous mode [ 74.036152][ T5786] veth0_macvtap: entered promiscuous mode [ 74.079442][ T5786] veth1_macvtap: entered promiscuous mode [ 74.156816][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.170532][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.180793][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.191651][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.203496][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.218326][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.245558][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.252721][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.288282][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.308408][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.319238][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.332539][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.348640][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.357693][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.366789][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.376273][ T5146] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 74.376581][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.413801][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.425119][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.435892][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.448718][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.461907][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.472505][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.484580][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.504562][ T5872] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.528871][ T5873] team0: Port device team_slave_0 removed [ 74.541255][ T5873] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 74.575933][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.586556][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.597054][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.608200][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.618193][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.628710][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.641231][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.699375][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.705338][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.710285][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.726670][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.736262][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.745406][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.985305][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.996478][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.037979][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.048830][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.145385][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.172718][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.226616][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.245779][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.508982][ T5888] netlink: 'syz.2.3': attribute type 6 has an invalid length. [ 75.538854][ T5888] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.604607][ T5799] Bluetooth: hci3: command tx timeout [ 75.604685][ T5792] Bluetooth: hci2: command tx timeout [ 75.610940][ T50] Bluetooth: hci1: command tx timeout [ 75.616758][ T5103] Bluetooth: hci0: command tx timeout [ 75.744490][ T5891] warning: `syz.0.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.842111][ T5799] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 76.145418][ C1] hrtimer: interrupt took 35735 ns [ 76.387322][ T5906] syzkaller0: entered promiscuous mode [ 76.399667][ T5906] syzkaller0: entered allmulticast mode [ 76.878317][ T5923] Zero length message leads to an empty skb [ 76.896798][ T5923] netlink: 'syz.1.20': attribute type 6 has an invalid length. [ 76.906124][ T5923] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.20'. [ 77.680527][ T5799] Bluetooth: hci3: command tx timeout [ 77.680573][ T50] Bluetooth: hci1: command tx timeout [ 77.697477][ T50] Bluetooth: hci2: command tx timeout [ 77.699890][ T5799] Bluetooth: hci0: command tx timeout [ 78.515025][ T5799] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6 [ 81.089056][ T5962] netlink: 'syz.1.34': attribute type 21 has an invalid length. [ 81.139376][ T5962] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.164202][ T5962] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.171900][ T5962] IPv6: NLM_F_CREATE should be set when creating new route [ 81.179278][ T5962] IPv6: NLM_F_CREATE should be set when creating new route [ 81.186630][ T5962] IPv6: NLM_F_CREATE should be set when creating new route [ 82.021923][ T787] cfg80211: failed to load regulatory.db [ 82.437275][ T5799] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 82.556705][ T5980] syzkaller0: entered promiscuous mode [ 82.586057][ T5980] syzkaller0: entered allmulticast mode [ 84.149505][ T6009] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 86.146079][ T6037] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.59'. [ 86.159077][ T6037] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.59'. [ 86.183354][ T6037] netlink: 2 bytes leftover after parsing attributes in process `syz.1.59'. [ 88.020501][ T50] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 88.771974][ T6078] syz.0.78[6078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.772104][ T6078] syz.0.78[6078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.796368][ T6081] sctp: [Deprecated]: syz.1.76 (pid 6081) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.796368][ T6081] Use struct sctp_sack_info instead [ 89.337898][ T6097] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 89.345209][ T6097] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 89.352459][ T6097] veth0_to_bridge: entered allmulticast mode [ 89.359529][ T6097] veth0_to_bridge: entered promiscuous mode [ 89.384011][ T6097] Ÿë: port 2(erspan0) entered blocking state [ 89.390561][ T6097] Ÿë: port 2(erspan0) entered disabled state [ 89.397181][ T6097] erspan0: entered allmulticast mode [ 89.403934][ T6097] erspan0: entered promiscuous mode [ 89.725539][ T6103] netlink: 'syz.3.87': attribute type 10 has an invalid length. [ 89.808355][ T6103] veth0_vlan: left promiscuous mode [ 89.833024][ T6103] veth0_vlan: entered promiscuous mode [ 89.855113][ T6103] team0: Device veth0_vlan failed to register rx_handler [ 90.080218][ T5799] Bluetooth: hci0: command tx timeout [ 90.163221][ T6111] syzkaller0: entered promiscuous mode [ 90.168973][ T6111] syzkaller0: entered allmulticast mode [ 90.217266][ T6103] syz.3.87 (6103) used greatest stack depth: 18992 bytes left [ 92.645940][ T6155] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.108'. [ 93.940415][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.959281][ T6182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.999110][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.033220][ T6182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.456032][ T5799] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 98.964439][ T6221] sit0: entered allmulticast mode [ 99.229565][ T6228] syzkaller0: entered allmulticast mode [ 99.291414][ T6234] netlink: 'syz.2.141': attribute type 10 has an invalid length. [ 99.327875][ T6234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.385022][ T6234] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 99.400360][ T6232] Ÿë: port 1(ip6gretap0) entered blocking state [ 99.407074][ T6232] Ÿë: port 1(ip6gretap0) entered disabled state [ 99.414886][ T6232] ip6gretap0: entered allmulticast mode [ 99.422598][ T6232] ip6gretap0: entered promiscuous mode [ 99.500267][ T6231] netlink: 'syz.2.141': attribute type 10 has an invalid length. [ 99.509119][ T6231] netlink: 40 bytes leftover after parsing attributes in process `syz.2.141'. [ 99.538618][ T6231] batadv0: entered promiscuous mode [ 99.591427][ T6231] batadv0: entered allmulticast mode [ 99.605511][ T6231] bond0: (slave batadv0): Releasing backup interface [ 99.643793][ T6231] bridge0: port 3(batadv0) entered blocking state [ 99.663002][ T6231] bridge0: port 3(batadv0) entered disabled state [ 99.913900][ T6248] bond_slave_1: mtu less than device minimum [ 99.953353][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 99.963385][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 99.988395][ T6251] netlink: 132 bytes leftover after parsing attributes in process `syz.2.149'. [ 100.305206][ T6256] syzkaller0: entered promiscuous mode [ 100.322137][ T6256] syzkaller0: entered allmulticast mode [ 100.942358][ T6264] __sock_release: fasync list not empty! [ 101.234053][ T5799] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 101.281628][ T6275] netlink: 'syz.3.159': attribute type 39 has an invalid length. [ 101.886664][ T6282] wg2: entered promiscuous mode [ 101.906657][ T6282] wg2: entered allmulticast mode [ 102.126457][ T6293] syzkaller0: entered promiscuous mode [ 102.132624][ T6293] syzkaller0: entered allmulticast mode [ 102.847338][ T5799] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 102.856934][ T5799] Bluetooth: hci1: Invalid handle: 0x85b0 > 0x0eff [ 103.037406][ T6322] netlink: 'syz.1.182': attribute type 10 has an invalid length. [ 103.061457][ T6322] netlink: 55 bytes leftover after parsing attributes in process `syz.1.182'. [ 103.146473][ T6327] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.183'. [ 103.256578][ T6327] netlink: 'syz.0.183': attribute type 10 has an invalid length. [ 103.294825][ T6327] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 103.516470][ T6337] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.187'. [ 103.834635][ T6348] syzkaller0: entered allmulticast mode [ 103.869756][ T6348] syzkaller0: entered promiscuous mode [ 103.881975][ T6348] syzkaller0: left allmulticast mode [ 103.970996][ T50] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 103.979354][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 104.212790][ T6358] syzkaller0: entered promiscuous mode [ 104.230951][ T6358] syzkaller0: entered allmulticast mode [ 104.581965][ T50] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 104.837612][ T50] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 106.640218][ T50] Bluetooth: hci3: command tx timeout [ 107.081000][ T6446] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.209'. [ 107.100182][ T6446] netlink: zone id is out of range [ 107.105366][ T6446] netlink: zone id is out of range [ 107.113294][ T6446] netlink: zone id is out of range [ 107.118458][ T6446] netlink: zone id is out of range [ 107.135939][ T6446] netlink: zone id is out of range [ 107.145380][ T6446] netlink: zone id is out of range [ 107.160910][ T6446] netlink: zone id is out of range [ 107.180250][ T6446] netlink: zone id is out of range [ 107.203616][ T6446] netlink: get zone limit has 4 unknown bytes [ 107.516305][ T6456] : entered promiscuous mode [ 107.546172][ T6456] : entered allmulticast mode [ 107.794541][ T50] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 108.243360][ T50] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 108.721393][ T50] Bluetooth: hci3: command tx timeout [ 110.694066][ T6523] netlink: 'syz.0.240': attribute type 1 has an invalid length. [ 110.722744][ T6523] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.240'. [ 113.595285][ T6552] netlink: 'syz.3.252': attribute type 15 has an invalid length. [ 114.063066][ T6565] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.357593][ T6578] netlink: 32 bytes leftover after parsing attributes in process `syz.2.263'. [ 114.648593][ T6579] syzkaller0: entered promiscuous mode [ 114.657888][ T6579] syzkaller0: entered allmulticast mode [ 116.996670][ T50] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 117.179706][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 117.593592][ T6647] netlink: 'syz.0.282': attribute type 29 has an invalid length. [ 117.610521][ T6647] netlink: 'syz.0.282': attribute type 29 has an invalid length. [ 117.640670][ T6647] netlink: 'syz.0.282': attribute type 29 has an invalid length. [ 117.838691][ T6649] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.283'. [ 118.926790][ T6676] netlink: 'syz.0.296': attribute type 19 has an invalid length. [ 118.954891][ T6676] netlink: 156 bytes leftover after parsing attributes in process `syz.0.296'. [ 119.076251][ T6683] delete_channel: no stack [ 119.222918][ T6682] Illegal XDP return value 382573253 on prog (id 214) dev N/A, expect packet loss! [ 119.473122][ T6696] netlink: 'syz.2.305': attribute type 33 has an invalid length. [ 119.482944][ T6696] netlink: 152 bytes leftover after parsing attributes in process `syz.2.305'. [ 119.502761][ T6696] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 119.805916][ T6704] syzkaller0: entered promiscuous mode [ 119.838891][ T6704] syzkaller0: entered allmulticast mode [ 123.949514][ T6731] pim6reg1: entered promiscuous mode [ 123.955098][ T6731] pim6reg1: entered allmulticast mode [ 123.989235][ T6752] pim6reg1: entered promiscuous mode [ 123.996422][ T6752] pim6reg1: entered allmulticast mode [ 124.148299][ T50] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 124.372391][ T6764] netlink: 132 bytes leftover after parsing attributes in process `syz.2.332'. [ 124.481165][ T6768] netlink: 'syz.0.334': attribute type 10 has an invalid length. [ 125.726162][ T6798] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.094476][ T50] Bluetooth: hci1: unknown advertising packet type: 0xff [ 126.094512][ T50] Bluetooth: hci1: unknown advertising packet type: 0x80 [ 126.398961][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 126.862447][ T6834] syz.0.362: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 126.910771][ T6834] CPU: 0 PID: 6834 Comm: syz.0.362 Not tainted 6.6.100-syzkaller #0 [ 126.918874][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.929038][ T6834] Call Trace: [ 126.932397][ T6834] [ 126.935405][ T6834] dump_stack_lvl+0x16c/0x230 [ 126.940206][ T6834] ? show_regs_print_info+0x20/0x20 [ 126.945510][ T6834] ? load_image+0x3b0/0x3b0 [ 126.950138][ T6834] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 126.956649][ T6834] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 126.963232][ T6834] warn_alloc+0x210/0x300 [ 126.967632][ T6834] ? stack_trace_save+0x9c/0xe0 [ 126.972545][ T6834] ? zone_watermark_ok_safe+0x230/0x230 [ 126.978175][ T6834] ? kasan_set_track+0x5f/0x70 [ 126.982970][ T6834] ? kasan_set_track+0x4e/0x70 [ 126.987761][ T6834] ? __kasan_kmalloc+0x8f/0xa0 [ 126.992645][ T6834] ? xsk_init_queue+0xb0/0x110 [ 126.997434][ T6834] ? xsk_setsockopt+0x4db/0x6f0 [ 127.002330][ T6834] ? do_sock_setsockopt+0x175/0x1a0 [ 127.007558][ T6834] ? __x64_sys_setsockopt+0x184/0x200 [ 127.012982][ T6834] __vmalloc_node_range+0x126/0x1320 [ 127.018505][ T6834] ? free_vm_area+0x50/0x50 [ 127.023159][ T6834] vmalloc_user+0x74/0x80 [ 127.027705][ T6834] ? xskq_create+0xbf/0x170 [ 127.032247][ T6834] xskq_create+0xbf/0x170 [ 127.036623][ T6834] xsk_init_queue+0xb0/0x110 [ 127.041261][ T6834] xsk_setsockopt+0x4db/0x6f0 [ 127.045996][ T6834] ? xsk_poll+0x670/0x670 [ 127.050385][ T6834] ? __fget_files+0x28/0x4d0 [ 127.055104][ T6834] ? aa_sock_opt_perm+0x74/0x100 [ 127.060101][ T6834] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 127.065681][ T6834] ? security_socket_setsockopt+0x7e/0xa0 [ 127.071427][ T6834] ? xsk_poll+0x670/0x670 [ 127.075836][ T6834] do_sock_setsockopt+0x175/0x1a0 [ 127.080917][ T6834] ? __fdget+0x180/0x210 [ 127.085230][ T6834] __x64_sys_setsockopt+0x184/0x200 [ 127.090671][ T6834] do_syscall_64+0x55/0xb0 [ 127.095119][ T6834] ? clear_bhb_loop+0x40/0x90 [ 127.099822][ T6834] ? clear_bhb_loop+0x40/0x90 [ 127.104542][ T6834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.110477][ T6834] RIP: 0033:0x7f151d18e9a9 [ 127.114948][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.134597][ T6834] RSP: 002b:00007f151e0b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 127.143064][ T6834] RAX: ffffffffffffffda RBX: 00007f151d3b5fa0 RCX: 00007f151d18e9a9 [ 127.151106][ T6834] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 127.159120][ T6834] RBP: 00007f151d210d69 R08: 0000000000000004 R09: 0000000000000000 [ 127.167129][ T6834] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 127.175127][ T6834] R13: 0000000000000000 R14: 00007f151d3b5fa0 R15: 00007ffcfc06f128 [ 127.183196][ T6834] [ 127.245457][ T6834] Mem-Info: [ 127.248906][ T6834] active_anon:6882 inactive_anon:0 isolated_anon:0 [ 127.248906][ T6834] active_file:11140 inactive_file:39843 isolated_file:0 [ 127.248906][ T6834] unevictable:768 dirty:168 writeback:0 [ 127.248906][ T6834] slab_reclaimable:9907 slab_unreclaimable:95248 [ 127.248906][ T6834] mapped:23941 shmem:1361 pagetables:567 [ 127.248906][ T6834] sec_pagetables:0 bounce:0 [ 127.248906][ T6834] kernel_misc_reclaimable:0 [ 127.248906][ T6834] free:1348746 free_pcp:11059 free_cma:0 [ 127.317792][ T6834] Node 0 active_anon:27584kB inactive_anon:0kB active_file:44560kB inactive_file:159172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:95848kB dirty:708kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11596kB pagetables:2284kB sec_pagetables:0kB all_unreclaimable? no [ 127.358006][ T6834] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 127.395584][ T6834] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.430699][ T6834] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 127.437459][ T6834] Node 0 DMA32 free:1491108kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:27540kB inactive_anon:0kB active_file:44560kB inactive_file:157852kB unevictable:1536kB writepending:708kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:19340kB local_pcp:9388kB free_cma:0kB [ 127.471088][ T6834] lowmem_reserve[]: 0 0 1 1 1 [ 127.497568][ T6834] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.588771][ T6834] lowmem_reserve[]: 0 0 0 0 0 [ 127.615490][ T6834] Node 1 Normal free:3888496kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24544kB local_pcp:11552kB free_cma:0kB [ 127.712547][ T6844] netlink: 'syz.1.365': attribute type 2 has an invalid length. [ 127.716512][ T6834] lowmem_reserve[]: 0 0 0 0 0 [ 127.740535][ T6844] netlink: 164 bytes leftover after parsing attributes in process `syz.1.365'. [ 127.755885][ T6834] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 127.822184][ T6834] Node 0 DMA32: 1715*4kB (UM) 1241*8kB (UME) 819*16kB (UME) 583*32kB (UME) 303*64kB (UME) 24*128kB (UME) 4*256kB (ME) 6*512kB (ME) 3*1024kB (ME) 4*2048kB (ME) 343*4096kB (UM) = 1491300kB [ 127.900163][ T6834] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 127.925999][ T6834] Node 1 Normal: 248*4kB (UME) 58*8kB (UME) 22*16kB (UME) 57*32kB (UME) 19*64kB (UME) 3*128kB (UM) 3*256kB (UME) 1*512kB (U) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3888496kB [ 127.951876][ T6834] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.962373][ T6834] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.974330][ T6834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.989335][ T6834] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 128.041260][ T6834] 52344 total pagecache pages [ 128.046908][ T6834] 0 pages in swap cache [ 128.070136][ T6834] Free swap = 124996kB [ 128.074364][ T6834] Total swap = 124996kB [ 128.078551][ T6834] 2097051 pages RAM [ 128.091814][ T6834] 0 pages HighMem/MovableOnly [ 128.101085][ T6834] 416137 pages reserved [ 128.105297][ T6834] 0 pages cma reserved [ 128.811136][ T6882] syz.2.382[6882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.811262][ T6882] syz.2.382[6882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.045314][ T6886] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.383'. [ 129.073848][ T6886] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 133.220810][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.227171][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.546905][ T6911] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.394'. [ 137.550577][ T6949] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.408'. [ 137.835484][ T50] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 139.195559][ T6979] syz.1.421 (6979) used obsolete PPPIOCDETACH ioctl [ 139.381736][ T6993] __sock_release: fasync list not empty! [ 141.369033][ T50] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 141.374188][ T7016] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.432'. [ 141.584995][ T7026] netlink: 'syz.0.436': attribute type 21 has an invalid length. [ 141.829537][ T7038] syzkaller0: entered promiscuous mode [ 141.835886][ T7038] syzkaller0: entered allmulticast mode [ 141.916698][ T7041] netlink: 132 bytes leftover after parsing attributes in process `syz.3.443'. [ 142.311332][ T7046] netlink: 132 bytes leftover after parsing attributes in process `syz.3.445'. [ 142.637666][ T50] Bluetooth: hci3: ISO packet for unknown connection handle 2681 [ 143.443672][ T50] Bluetooth: hci2: command tx timeout [ 143.492510][ T7086] netlink: 'syz.0.463': attribute type 2 has an invalid length. [ 143.501271][ T7086] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.463'. [ 143.583570][ T7088] netlink: 14 bytes leftover after parsing attributes in process `syz.2.465'. [ 144.057150][ T7102] netlink: 'syz.2.470': attribute type 7 has an invalid length. [ 144.154688][ T50] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 144.158283][ T7104] 7B’ç÷ï: renamed from syzkaller0 [ 144.394177][ T7110] syzkaller0: entered promiscuous mode [ 144.399882][ T7110] syzkaller0: entered allmulticast mode [ 148.942065][ T7162] lo: entered allmulticast mode [ 148.965660][ T7170] lo: entered promiscuous mode [ 148.973846][ T7170] lo: left allmulticast mode [ 149.081368][ T7181] syz.0.499[7181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.081605][ T7181] syz.0.499[7181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.177689][ T7183] netlink: 'syz.3.498': attribute type 21 has an invalid length. [ 149.220510][ T7183] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.251175][ T7183] IPv6: Can't replace route, no match found [ 149.381987][ T7193] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.504'. [ 149.660900][ T7204] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.507'. [ 150.242307][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 150.584133][ T7223] netlink: 'syz.1.516': attribute type 39 has an invalid length. [ 150.913928][ T7225] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.517'. [ 151.285682][ T5799] Bluetooth: hci3: ISO packet for unknown connection handle 255 [ 154.368810][ T7294] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.546'. [ 156.125374][ T7314] syzkaller0: entered promiscuous mode [ 156.178319][ T7314] syzkaller0: entered allmulticast mode [ 156.259573][ T7322] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.555'. [ 159.595792][ T7366] netlink: 132 bytes leftover after parsing attributes in process `syz.2.572'. [ 160.632851][ T7374] syzkaller0: entered promiscuous mode [ 160.638657][ T7374] syzkaller0: entered allmulticast mode [ 162.362549][ T7393] netlink: 132 bytes leftover after parsing attributes in process `syz.2.582'. [ 163.409155][ T7418] syzkaller0: entered promiscuous mode [ 163.423051][ T7418] syzkaller0: entered allmulticast mode [ 163.652696][ T7424] netlink: 132 bytes leftover after parsing attributes in process `syz.1.594'. [ 165.002723][ T7444] __sock_release: fasync list not empty! [ 166.208139][ T7472] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 166.226612][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.616152][ T5799] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 167.874487][ T7501] syzkaller0: entered promiscuous mode [ 167.888491][ T7501] syzkaller0: entered allmulticast mode [ 170.496364][ T7506] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.631'. [ 170.506643][ T7509] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 170.518078][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.529198][ T7509] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 170.541917][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.558281][ T7512] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.632'. [ 170.720205][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 170.802488][ T7524] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 170.819326][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.830746][ T7524] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 170.865865][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.160598][ T7537] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 171.188398][ T7537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.203901][ T7537] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 171.215442][ T7537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.925815][ T7563] lo: entered allmulticast mode [ 172.928753][ T7568] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.647'. [ 173.080364][ T7563] lo: entered promiscuous mode [ 173.097715][ T7563] lo: left allmulticast mode [ 177.744848][ T7604] lo: entered allmulticast mode [ 177.796471][ T7604] lo: entered promiscuous mode [ 177.804726][ T7604] lo: left allmulticast mode [ 179.789847][ T7627] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.672'. [ 180.020589][ T7627] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 180.269196][ T7630] syz.3.675[7630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.269369][ T7630] syz.3.675[7630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.453077][ T7636] lo: entered allmulticast mode [ 180.537973][ T7636] lo: entered promiscuous mode [ 180.543569][ T7636] lo: left allmulticast mode [ 186.209417][ T7673] lo: left promiscuous mode [ 186.214365][ T7673] lo: entered allmulticast mode [ 186.232612][ T7679] lo: entered promiscuous mode [ 186.237467][ T7679] lo: left allmulticast mode [ 191.395719][ T7763] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.600175][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 191.600317][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 191.606266][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 191.618387][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 191.689528][ T7766] syzkaller0: entered promiscuous mode [ 191.707489][ T7766] syzkaller0: entered allmulticast mode [ 194.678524][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.685083][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.430386][ T7794] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.921123][ T7805] syzkaller0: entered promiscuous mode [ 195.951803][ T7805] syzkaller0: entered allmulticast mode [ 204.809758][ T5792] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 208.844589][ T7958] netlink: 'syz.2.804': attribute type 29 has an invalid length. [ 209.639249][ T7958] netlink: 'syz.2.804': attribute type 29 has an invalid length. [ 210.331785][ T7984] netlink: 'syz.3.819': attribute type 29 has an invalid length. [ 210.466713][ T7984] netlink: 'syz.3.819': attribute type 29 has an invalid length. [ 210.500876][ T7991] netlink: 'syz.3.819': attribute type 29 has an invalid length. [ 212.482755][ T5103] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 212.777498][ T8017] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.829'. [ 214.223707][ T5103] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 214.431127][ T8049] syzkaller0: entered promiscuous mode [ 214.452496][ T8049] syzkaller0: entered allmulticast mode [ 214.551749][ T8050] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.841'. [ 215.869699][ T5103] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 216.783309][ T8073] netlink: 32 bytes leftover after parsing attributes in process `syz.3.852'. [ 218.340081][ T8097] netlink: 'syz.1.862': attribute type 1 has an invalid length. [ 218.391457][ T8097] netlink: 'syz.1.862': attribute type 4 has an invalid length. [ 218.474204][ T8097] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.862'. [ 218.600484][ T8108] netlink: 'syz.0.865': attribute type 64 has an invalid length. [ 218.623495][ T8107] netlink: 'syz.3.866': attribute type 29 has an invalid length. [ 218.780048][ T8107] netlink: 'syz.3.866': attribute type 29 has an invalid length. [ 218.834807][ T8109] netlink: 'syz.3.866': attribute type 29 has an invalid length. [ 218.898694][ T8107] syzkaller0: entered promiscuous mode [ 218.905867][ T8107] syzkaller0: entered allmulticast mode [ 222.178706][ T8125] netlink: 'syz.2.872': attribute type 15 has an invalid length. [ 222.394590][ T8134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.627696][ T8140] netlink: 32 bytes leftover after parsing attributes in process `syz.1.875'. [ 223.025083][ T8145] netlink: 'syz.2.876': attribute type 1 has an invalid length. [ 223.038228][ T8145] netlink: 'syz.2.876': attribute type 4 has an invalid length. [ 223.047452][ T8145] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.876'. [ 223.661163][ T8154] syzkaller0: entered promiscuous mode [ 223.702868][ T8154] syzkaller0: entered allmulticast mode [ 224.497538][ T8167] netlink: 'syz.0.885': attribute type 29 has an invalid length. [ 225.621848][ T8167] netlink: 'syz.0.885': attribute type 29 has an invalid length. [ 225.787773][ T8180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.816237][ T8179] netlink: 32 bytes leftover after parsing attributes in process `syz.0.886'. [ 225.839468][ T8180] ipvlan0: entered promiscuous mode [ 225.845055][ T8180] ipvlan0: entered allmulticast mode [ 225.854332][ T8180] veth0_vlan: entered allmulticast mode [ 227.123771][ T8206] netlink: 'syz.1.899': attribute type 29 has an invalid length. [ 227.163854][ T8206] netlink: 'syz.1.899': attribute type 29 has an invalid length. [ 227.309311][ T8209] netlink: 'syz.1.899': attribute type 29 has an invalid length. [ 227.449881][ T8206] syzkaller0: entered promiscuous mode [ 227.489563][ T8206] syzkaller0: entered allmulticast mode [ 227.620623][ T8213] syzkaller0: entered promiscuous mode [ 227.628713][ T8213] syzkaller0: entered allmulticast mode [ 227.668814][ T8220] netlink: 'syz.2.905': attribute type 4 has an invalid length. [ 227.678417][ T8220] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.905'. [ 227.846173][ T8224] netlink: 'syz.0.915': attribute type 4 has an invalid length. [ 227.857375][ T8224] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.915'. [ 230.959546][ T8240] netlink: 'syz.1.910': attribute type 64 has an invalid length. [ 233.754059][ T8272] syzkaller0: entered promiscuous mode [ 233.759588][ T8272] syzkaller0: entered allmulticast mode [ 234.449441][ T8287] syzkaller0: entered promiscuous mode [ 234.465532][ T8287] syzkaller0: entered allmulticast mode [ 236.962001][ T8302] netlink: 'syz.2.932': attribute type 29 has an invalid length. [ 236.984214][ T8302] netlink: 'syz.2.932': attribute type 29 has an invalid length. [ 237.031772][ T8309] netlink: 'syz.2.932': attribute type 29 has an invalid length. [ 237.476246][ T8308] syzkaller0: entered promiscuous mode [ 237.605219][ T8309] syzkaller0: entered promiscuous mode [ 237.615353][ T8309] syzkaller0: entered allmulticast mode [ 241.063413][ T8341] syzkaller0: entered promiscuous mode [ 241.068969][ T8341] syzkaller0: entered allmulticast mode [ 243.666318][ T8368] netlink: 'syz.1.952': attribute type 1 has an invalid length. [ 243.676308][ T8368] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.952'. [ 244.583396][ T8363] netlink: 'syz.3.951': attribute type 64 has an invalid length. [ 246.599724][ T8395] netlink: 'syz.2.963': attribute type 64 has an invalid length. [ 247.168740][ T5103] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 248.422589][ T8423] netlink: 'syz.2.977': attribute type 64 has an invalid length. [ 248.548950][ T8426] netlink: 'syz.1.978': attribute type 33 has an invalid length. [ 248.567916][ T8426] netlink: 152 bytes leftover after parsing attributes in process `syz.1.978'. [ 248.589251][ T8426] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 249.986417][ T5103] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 250.102010][ T8433] syzkaller0: entered promiscuous mode [ 252.486188][ T8462] netlink: 'syz.0.990': attribute type 33 has an invalid length. [ 252.494175][ T8462] netlink: 152 bytes leftover after parsing attributes in process `syz.0.990'. [ 252.503597][ T8462] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 256.085429][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.092215][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.284731][ T8522] pim6reg1: entered promiscuous mode [ 259.290298][ T8522] pim6reg1: entered allmulticast mode [ 259.551324][ T8546] : entered promiscuous mode [ 259.556096][ T8546] : entered allmulticast mode [ 260.624911][ T8562] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.1026'. [ 260.750403][ T8562] netlink: zone id is out of range [ 260.760236][ T8562] netlink: zone id is out of range [ 260.773680][ T8562] netlink: zone id is out of range [ 260.778854][ T8562] netlink: zone id is out of range [ 260.806993][ T8562] netlink: zone id is out of range [ 260.820324][ T8562] netlink: zone id is out of range [ 260.825499][ T8562] netlink: zone id is out of range [ 260.839440][ T8562] netlink: zone id is out of range [ 260.850069][ T8562] netlink: get zone limit has 4 unknown bytes [ 261.043272][ T8567] pim6reg1: entered promiscuous mode [ 261.068789][ T8567] pim6reg1: entered allmulticast mode [ 261.243723][ T5103] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 261.251628][ T5103] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 262.933549][ T5103] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 263.610104][ T5103] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 264.603731][ T5103] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 264.970262][ T5103] Bluetooth: hci0: command 0x0406 tx timeout [ 265.020597][ T8629] pim6reg1: entered promiscuous mode [ 265.041734][ T8629] pim6reg1: entered allmulticast mode [ 265.527768][ T8640] syzkaller0: entered promiscuous mode [ 265.551130][ T8642] syzkaller0: left promiscuous mode [ 265.556393][ T8642] syzkaller0: entered allmulticast mode [ 266.640561][ T5103] Bluetooth: hci2: command 0x0406 tx timeout [ 267.350161][ T5103] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 267.364439][ T8660] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1069'. [ 267.379673][ T5103] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 267.445436][ T8660] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 269.473752][ T8686] syzkaller0: entered promiscuous mode [ 269.485044][ T8686] syzkaller0: entered allmulticast mode [ 271.547000][ T8714] pim6reg1: entered promiscuous mode [ 271.556402][ T8714] pim6reg1: entered allmulticast mode [ 271.747315][ T8720] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1083'. [ 271.956170][ T8720] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 273.933770][ T8741] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1100'. [ 274.075689][ T8741] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 274.169937][ T8747] pim6reg1: entered promiscuous mode [ 274.175591][ T8747] pim6reg1: entered allmulticast mode [ 274.258075][ T5103] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 274.265890][ T5103] Bluetooth: hci3: Invalid handle: 0x85b0 > 0x0eff [ 274.369257][ T8752] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1106'. [ 274.386309][ T8752] netlink: 'syz.1.1106': attribute type 10 has an invalid length. [ 274.415438][ T8752] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 274.706499][ T8759] netlink: 'syz.3.1099': attribute type 10 has an invalid length. [ 274.718054][ T8759] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1099'. [ 275.404742][ T5103] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 275.412596][ T5103] Bluetooth: hci0: Invalid handle: 0x85b0 > 0x0eff [ 275.587425][ T8781] pim6reg1: entered promiscuous mode [ 275.607793][ T8781] pim6reg1: entered allmulticast mode [ 275.658711][ T5103] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 276.444312][ T8801] netlink: 'syz.2.1116': attribute type 10 has an invalid length. [ 276.459302][ T8801] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1116'. [ 277.069705][ T8817] netlink: 'syz.1.1123': attribute type 29 has an invalid length. [ 277.094563][ T8817] netlink: 'syz.1.1123': attribute type 29 has an invalid length. [ 277.160333][ T8819] netlink: 'syz.1.1123': attribute type 29 has an invalid length. [ 277.192377][ T8818] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.1122'. [ 279.434819][ T8843] netlink: 'syz.3.1133': attribute type 29 has an invalid length. [ 279.443318][ T8843] netlink: 'syz.3.1133': attribute type 29 has an invalid length. [ 279.471010][ T8843] netlink: 'syz.3.1133': attribute type 29 has an invalid length. [ 279.836217][ T5103] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 280.288682][ T8865] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1141'. [ 280.910108][ T5103] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 280.920983][ T5792] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 281.158956][ T8876] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.1147'. [ 282.109036][ T8895] netlink: 'syz.2.1152': attribute type 29 has an invalid length. [ 282.122370][ T8895] netlink: 'syz.2.1152': attribute type 29 has an invalid length. [ 282.234416][ T8896] netlink: 'syz.2.1152': attribute type 29 has an invalid length. [ 282.331127][ T5103] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 282.522194][ T8901] syzkaller0: entered promiscuous mode [ 282.559855][ T8901] syzkaller0: entered allmulticast mode [ 282.623125][ T5103] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 282.762811][ T5103] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 282.817922][ T5103] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 282.937442][ T8911] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1159'. [ 284.185892][ T8928] netlink: 'syz.0.1174': attribute type 39 has an invalid length. [ 284.331687][ T8933] bond_slave_1: mtu less than device minimum [ 284.947302][ T8942] netlink: 'syz.1.1178': attribute type 39 has an invalid length. [ 285.087932][ T8943] syzkaller0: entered promiscuous mode [ 285.104794][ T8943] syzkaller0: entered allmulticast mode [ 285.718855][ T8953] netlink: 'syz.0.1177': attribute type 10 has an invalid length. [ 285.779096][ T8953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.811464][ T8953] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 285.849556][ T8958] Ÿë: port 3(ip6gretap0) entered blocking state [ 285.857639][ T8958] Ÿë: port 3(ip6gretap0) entered disabled state [ 285.868725][ T8958] ip6gretap0: entered allmulticast mode [ 285.882391][ T8958] ip6gretap0: entered promiscuous mode [ 285.889731][ T8953] netlink: 'syz.0.1177': attribute type 10 has an invalid length. [ 285.917439][ T8953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1177'. [ 285.937365][ T8953] batadv0: entered promiscuous mode [ 285.944251][ T8953] batadv0: entered allmulticast mode [ 285.956548][ T8953] bond0: (slave batadv0): Releasing backup interface [ 285.967233][ T8953] bridge0: port 3(batadv0) entered blocking state [ 285.979119][ T8953] bridge0: port 3(batadv0) entered disabled state [ 286.169045][ T8968] sit0: entered allmulticast mode [ 286.193685][ T6411] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 286.202977][ T6411] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 286.660226][ T8979] netlink: 'syz.3.1184': attribute type 39 has an invalid length. [ 286.891894][ T8980] syzkaller0: entered promiscuous mode [ 286.897626][ T8980] syzkaller0: entered allmulticast mode [ 287.904531][ T8996] Ÿë: port 1(ip6gretap0) entered blocking state [ 287.915310][ T8996] Ÿë: port 1(ip6gretap0) entered disabled state [ 287.943710][ T8996] ip6gretap0: entered allmulticast mode [ 288.078813][ T8996] ip6gretap0: entered promiscuous mode [ 288.160307][ T9003] sit0: entered allmulticast mode [ 288.733438][ T9021] netlink: 'syz.1.1205': attribute type 10 has an invalid length. [ 288.756410][ T9021] veth1_macvtap: left promiscuous mode [ 289.128360][ T9030] syzkaller0: entered allmulticast mode [ 290.753803][ T9081] netlink: 'syz.2.1217': attribute type 39 has an invalid length. [ 290.890947][ T9084] netlink: 'syz.3.1216': attribute type 10 has an invalid length. [ 290.926183][ T9080] netlink: 'syz.3.1216': attribute type 10 has an invalid length. [ 290.940755][ T9080] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1216'. [ 291.278501][ T9093] netlink: 'syz.0.1227': attribute type 39 has an invalid length. [ 291.750602][ T9101] syzkaller0: entered promiscuous mode [ 291.756393][ T9101] syzkaller0: entered allmulticast mode [ 292.245851][ T9109] sit0: entered allmulticast mode [ 292.772411][ T9118] syzkaller0: entered allmulticast mode [ 293.086566][ T9123] netlink: 'syz.0.1240': attribute type 10 has an invalid length. [ 293.099870][ T9123] veth1_macvtap: left promiscuous mode [ 294.731001][ T9147] syzkaller0: entered allmulticast mode [ 294.941989][ T9153] netlink: 'syz.2.1244': attribute type 10 has an invalid length. [ 294.970304][ T9153] veth1_macvtap: left promiscuous mode [ 295.247430][ T9157] netlink: 'syz.3.1245': attribute type 10 has an invalid length. [ 295.824525][ T5103] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 295.866531][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.936803][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.944080][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.615420][ T9214] netlink: 'syz.1.1259': attribute type 10 has an invalid length. [ 299.075163][ T9249] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.101301][ T9247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.118203][ T9247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.137605][ T9247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.147300][ T9247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.234127][ T9249] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.241381][ T9249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.107906][ T9274] netlink: 'syz.2.1274': attribute type 10 has an invalid length. [ 301.935871][ T9292] netlink: 'syz.3.1280': attribute type 10 has an invalid length. [ 302.025227][ T9292] veth1_macvtap: left promiscuous mode [ 302.203556][ T9294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.212713][ T9294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.224070][ T9294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.233283][ T9294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.301367][ T9294] bridge0: port 3(batadv0) entered disabled state [ 303.390755][ T9319] netlink: 'syz.2.1289': attribute type 10 has an invalid length. [ 304.102398][ T9327] netlink: 'syz.0.1303': attribute type 10 has an invalid length. [ 304.180729][ T5103] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 305.607026][ T9356] netlink: 'syz.1.1306': attribute type 10 has an invalid length. [ 305.619082][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.642200][ T9356] bridge_slave_1: left allmulticast mode [ 305.648084][ T9356] bridge_slave_1: left promiscuous mode [ 305.655300][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.675820][ T9356] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 305.838122][ T9360] netlink: 'syz.1.1308': attribute type 10 has an invalid length. [ 305.979628][ T5103] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 306.486627][ T9381] netlink: 'syz.3.1319': attribute type 10 has an invalid length. [ 306.509479][ T9381] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.529605][ T9381] bridge_slave_1: left allmulticast mode [ 306.546346][ T9381] bridge_slave_1: left promiscuous mode [ 306.560471][ T9381] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.584743][ T9381] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 306.933762][ T9396] netlink: 'syz.3.1324': attribute type 21 has an invalid length. [ 307.051365][ T5103] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 307.844635][ T9409] netlink: 'syz.0.1332': attribute type 10 has an invalid length. [ 307.873491][ T9409] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.894296][ T9409] bridge_slave_1: left allmulticast mode [ 307.910335][ T9409] bridge_slave_1: left promiscuous mode [ 307.916214][ T9409] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.934063][ T9409] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 308.194222][ T9422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.204768][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.235687][ T9422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.258822][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.309051][ T9422] bridge0: port 3(batadv0) entered disabled state [ 308.328362][ T5103] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 308.559606][ T9429] netlink: 'syz.2.1338': attribute type 21 has an invalid length. [ 309.742191][ T9445] netlink: 'syz.2.1345': attribute type 10 has an invalid length. [ 309.780335][ T9445] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.802733][ T9445] bridge_slave_1: left allmulticast mode [ 309.808495][ T9445] bridge_slave_1: left promiscuous mode [ 309.828847][ T9445] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.844580][ T9445] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 311.423645][ T9469] netlink: 'syz.2.1357': attribute type 10 has an invalid length. [ 311.497150][ T9469] veth0_vlan: left promiscuous mode [ 311.529161][ T9469] veth0_vlan: entered promiscuous mode [ 311.548761][ T9469] team0: Device veth0_vlan failed to register rx_handler [ 313.057032][ T9512] netlink: 'syz.0.1374': attribute type 10 has an invalid length. [ 313.127010][ T9512] veth0_vlan: left promiscuous mode [ 313.153714][ T9512] veth0_vlan: entered promiscuous mode [ 313.164381][ T9512] team0: Device veth0_vlan failed to register rx_handler [ 316.203041][ T9549] netlink: 'syz.1.1389': attribute type 10 has an invalid length. [ 316.233397][ T9549] veth0_vlan: left promiscuous mode [ 316.244791][ T9549] veth0_vlan: entered promiscuous mode [ 316.259604][ T9549] team0: Device veth0_vlan failed to register rx_handler [ 316.327844][ T9556] : entered promiscuous mode [ 316.332760][ T9556] : entered allmulticast mode [ 317.338543][ T9588] netlink: 'syz.1.1400': attribute type 3 has an invalid length. [ 317.353051][ T9588] netlink: 'syz.1.1400': attribute type 4 has an invalid length. [ 317.362547][ T9588] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.1400'. [ 317.536824][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.547199][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.738494][ T9612] syz.1.1407[9612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.738622][ T9612] syz.1.1407[9612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.188327][ T9622] netlink: 'syz.0.1412': attribute type 3 has an invalid length. [ 319.216066][ T9622] netlink: 'syz.0.1412': attribute type 4 has an invalid length. [ 319.227268][ T9622] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.1412'. [ 319.403522][ T5103] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 320.020453][ T9635] syzkaller0: entered promiscuous mode [ 320.036918][ T9635] syzkaller0: entered allmulticast mode [ 320.664408][ T9648] syz.3.1420[9648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.664532][ T9648] syz.3.1420[9648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.176234][ T9654] netlink: 'syz.1.1421': attribute type 10 has an invalid length. [ 321.223610][ T9654] veth0_vlan: left promiscuous mode [ 321.236606][ T9654] veth0_vlan: entered promiscuous mode [ 321.320014][ T9654] team0: Device veth0_vlan failed to register rx_handler [ 321.442779][ T5103] Bluetooth: hci1: command 0x0406 tx timeout [ 321.549045][ T9656] netlink: 'syz.3.1422': attribute type 12 has an invalid length. [ 321.558189][ T9656] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1422'. [ 321.591478][ T9654] syz.1.1421 (9654) used greatest stack depth: 18280 bytes left [ 322.513832][ T9664] : entered promiscuous mode [ 322.588722][ T9664] : entered allmulticast mode [ 324.385910][ T9683] syzkaller0: entered promiscuous mode [ 324.431745][ T9683] syzkaller0: entered allmulticast mode [ 324.781777][ T9691] syz.2.1433[9691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.781897][ T9691] syz.2.1433[9691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.333874][ T5103] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 327.051930][ T9728] netlink: 'syz.0.1449': attribute type 12 has an invalid length. [ 327.060822][ T9728] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1449'. [ 327.360998][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 329.641769][ T9751] netlink: 'syz.1.1466': attribute type 10 has an invalid length. [ 329.667943][ T9751] veth1_vlan: entered allmulticast mode [ 329.708144][ T9751] team0: Device veth1_vlan failed to register rx_handler [ 330.142336][ T9762] netlink: 'syz.2.1461': attribute type 29 has an invalid length. [ 330.173421][ T9762] netlink: 'syz.2.1461': attribute type 29 has an invalid length. [ 330.232275][ T9765] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1462'. [ 330.693976][ T9768] syzkaller0: entered promiscuous mode [ 330.717473][ T9772] netlink: 'syz.1.1465': attribute type 10 has an invalid length. [ 330.837362][ T9772] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.879029][ T9772] bond0: (slave team0): Enslaving as an active interface with an up link [ 334.273861][ T9819] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1483'. [ 334.286154][ T9819] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.1483'. [ 334.295925][ T9819] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1483'. [ 337.270591][ T9861] netlink: 'syz.3.1495': attribute type 10 has an invalid length. [ 337.348666][ T9861] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.377643][ T9861] bond0: (slave team0): Enslaving as an active interface with an up link [ 337.492678][ T9868] syzkaller0: entered promiscuous mode [ 339.322553][ T9876] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1501'. [ 339.419543][ T9880] syzkaller0: entered promiscuous mode [ 343.959423][ T9911] netlink: 'syz.0.1520': attribute type 10 has an invalid length. [ 343.983865][ T9911] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 344.312759][ T9926] IPv6: syzkaller: Disabled Multicast RS [ 345.451541][ T9933] syzkaller0: entered promiscuous mode [ 345.457077][ T9933] syzkaller0: entered allmulticast mode [ 347.202195][ T9947] : renamed from bond0 (while UP) [ 347.380789][ T9957] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1530'. [ 348.692520][ T9992] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1549'. [ 349.587708][ T9991] syzkaller0: entered promiscuous mode [ 349.593313][ T9991] syzkaller0: entered allmulticast mode [ 351.306377][T10016] netlink: 'syz.1.1547': attribute type 10 has an invalid length. [ 351.356553][T10016] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 352.367437][T10023] syzkaller0: entered promiscuous mode [ 352.373223][T10023] syzkaller0: entered allmulticast mode [ 352.589873][ T5792] Bluetooth: hci2: adv larger than maximum supported [ 355.911815][ T5792] Bluetooth: hci0: adv larger than maximum supported [ 357.545034][T10103] wg2: entered promiscuous mode [ 357.569825][T10103] wg2: entered allmulticast mode [ 359.507309][T10134] wg2: entered promiscuous mode [ 359.528860][T10134] wg2: entered allmulticast mode [ 362.571081][T10183] netlink: 'syz.1.1620': attribute type 10 has an invalid length. [ 362.603268][T10183] bond0: (slave netdevsim0): Releasing backup interface [ 363.061328][T10200] syz.2.1619[10200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.061557][T10200] syz.2.1619[10200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.153222][T10204] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1621'. [ 366.174371][T10204] bond_slave_0: entered promiscuous mode [ 366.180398][T10204] bond_slave_1: entered promiscuous mode [ 366.186075][T10204] bridge_slave_1: entered promiscuous mode [ 366.961337][ T5792] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 366.969447][ T5792] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 366.979560][ T5792] CPU: 1 PID: 5792 Comm: kworker/u5:3 Not tainted 6.6.100-syzkaller #0 [ 366.987842][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 366.997900][ T5792] Workqueue: hci2 hci_rx_work [ 367.002605][ T5792] Call Trace: [ 367.005982][ T5792] [ 367.008912][ T5792] dump_stack_lvl+0x16c/0x230 [ 367.013594][ T5792] ? show_regs_print_info+0x20/0x20 [ 367.018799][ T5792] ? load_image+0x3b0/0x3b0 [ 367.023346][ T5792] sysfs_create_dir_ns+0x256/0x280 [ 367.028475][ T5792] ? hci_rx_work+0x43a/0xd80 [ 367.033074][ T5792] ? sysfs_warn_dup+0xa0/0xa0 [ 367.037765][ T5792] ? do_raw_spin_unlock+0x121/0x230 [ 367.042966][ T5792] kobject_add_internal+0x6b8/0xc70 [ 367.048173][ T5792] kobject_add+0x156/0x220 [ 367.052678][ T5792] ? __rwlock_init+0x150/0x150 [ 367.057562][ T5792] ? kobject_init+0x1e0/0x1e0 [ 367.062258][ T5792] ? _raw_spin_unlock+0x28/0x40 [ 367.067120][ T5792] ? get_device_parent+0x366/0x390 [ 367.072743][ T5792] device_add+0x408/0xc20 [ 367.077077][ T5792] hci_conn_add_sysfs+0xd5/0x1e0 [ 367.082104][ T5792] le_conn_complete_evt+0xc37/0x1220 [ 367.087400][ T5792] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 367.093729][ T5792] ? bt_info+0x160/0x160 [ 367.097980][ T5792] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 367.104011][ T5792] ? skb_pull_data+0xfb/0x200 [ 367.108696][ T5792] hci_le_conn_complete_evt+0x187/0x440 [ 367.114264][ T5792] ? hci_remote_host_features_evt+0x160/0x160 [ 367.120331][ T5792] hci_event_packet+0x795/0x1210 [ 367.125277][ T5792] ? bis_list+0x290/0x290 [ 367.129617][ T5792] ? lockdep_hardirqs_on+0x98/0x150 [ 367.134818][ T5792] ? hci_send_to_monitor+0xd7/0x4f0 [ 367.140026][ T5792] hci_rx_work+0x43a/0xd80 [ 367.144480][ T5792] ? process_scheduled_works+0x957/0x15b0 [ 367.150197][ T5792] process_scheduled_works+0xa45/0x15b0 [ 367.155765][ T5792] ? assign_work+0x400/0x400 [ 367.160447][ T5792] ? assign_work+0x39e/0x400 [ 367.165219][ T5792] worker_thread+0xa55/0xfc0 [ 367.169807][ T5792] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 367.175728][ T5792] kthread+0x2fa/0x390 [ 367.179791][ T5792] ? pr_cont_work+0x560/0x560 [ 367.184469][ T5792] ? kthread_blkcg+0xd0/0xd0 [ 367.189057][ T5792] ret_from_fork+0x48/0x80 [ 367.193475][ T5792] ? kthread_blkcg+0xd0/0xd0 [ 367.198069][ T5792] ret_from_fork_asm+0x11/0x20 [ 367.202868][ T5792] [ 367.206996][ T5792] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 367.221467][ T5792] Bluetooth: hci2: failed to register connection device [ 367.257399][ T5792] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 367.525909][T10236] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1634'. [ 367.590094][T10236] bond_slave_0: entered promiscuous mode [ 367.599531][T10236] bond_slave_1: entered promiscuous mode [ 367.607726][T10236] bridge_slave_1: entered promiscuous mode [ 367.614361][ T5103] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 367.614688][ T5103] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 367.614723][ T5103] CPU: 0 PID: 5103 Comm: kworker/u5:1 Not tainted 6.6.100-syzkaller #0 [ 367.614742][ T5103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.614753][ T5103] Workqueue: hci1 hci_rx_work [ 367.614780][ T5103] Call Trace: [ 367.614788][ T5103] [ 367.614796][ T5103] dump_stack_lvl+0x16c/0x230 [ 367.614822][ T5103] ? show_regs_print_info+0x20/0x20 [ 367.614844][ T5103] ? load_image+0x3b0/0x3b0 [ 367.614883][ T5103] sysfs_create_dir_ns+0x256/0x280 [ 367.614907][ T5103] ? hci_rx_work+0x43a/0xd80 [ 367.614928][ T5103] ? sysfs_warn_dup+0xa0/0xa0 [ 367.614954][ T5103] ? do_raw_spin_unlock+0x121/0x230 [ 367.614981][ T5103] kobject_add_internal+0x6b8/0xc70 [ 367.615013][ T5103] kobject_add+0x156/0x220 [ 367.615035][ T5103] ? __rwlock_init+0x150/0x150 [ 367.615059][ T5103] ? kobject_init+0x1e0/0x1e0 [ 367.615083][ T5103] ? _raw_spin_unlock+0x28/0x40 [ 367.615111][ T5103] ? get_device_parent+0x366/0x390 [ 367.615140][ T5103] device_add+0x408/0xc20 [ 367.615167][ T5103] hci_conn_add_sysfs+0xd5/0x1e0 [ 367.615195][ T5103] le_conn_complete_evt+0xc37/0x1220 [ 367.615230][ T5103] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 367.615253][ T5103] ? bt_info+0x160/0x160 [ 367.615272][ T5103] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 367.615296][ T5103] ? skb_pull_data+0xfb/0x200 [ 367.615326][ T5103] hci_le_conn_complete_evt+0x187/0x440 [ 367.615350][ T5103] ? hci_remote_host_features_evt+0x160/0x160 [ 367.615377][ T5103] hci_event_packet+0x795/0x1210 [ 367.615410][ T5103] ? bis_list+0x290/0x290 [ 367.615436][ T5103] ? lockdep_hardirqs_on+0x98/0x150 [ 367.615461][ T5103] ? hci_send_to_monitor+0xd7/0x4f0 [ 367.615486][ T5103] hci_rx_work+0x43a/0xd80 [ 367.615518][ T5103] ? process_scheduled_works+0x957/0x15b0 [ 367.615539][ T5103] process_scheduled_works+0xa45/0x15b0 [ 367.615591][ T5103] ? assign_work+0x400/0x400 [ 367.615619][ T5103] ? assign_work+0x39e/0x400 [ 367.615653][ T5103] worker_thread+0xa55/0xfc0 [ 367.615674][ T5103] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 367.615700][ T5103] ? _raw_spin_unlock+0x40/0x40 [ 367.615722][ T5103] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 367.615768][ T5103] kthread+0x2fa/0x390 [ 367.615784][ T5103] ? pr_cont_work+0x560/0x560 [ 367.615806][ T5103] ? kthread_blkcg+0xd0/0xd0 [ 367.615823][ T5103] ret_from_fork+0x48/0x80 [ 367.615842][ T5103] ? kthread_blkcg+0xd0/0xd0 [ 367.615859][ T5103] ret_from_fork_asm+0x11/0x20 [ 367.615897][ T5103] [ 367.615923][ T5103] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 367.615954][ T5103] Bluetooth: hci1: failed to register connection device [ 367.925370][T10236] team_slave_1: entered promiscuous mode [ 368.278078][ T5792] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 369.132073][ T5792] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 369.348536][T10271] delete_channel: no stack [ 369.565511][T10276] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1651'. [ 369.585093][T10276] bond_slave_0: entered promiscuous mode [ 369.599719][T10276] bond_slave_1: entered promiscuous mode [ 369.609984][T10276] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 369.620789][T10276] bridge_slave_1: entered promiscuous mode [ 369.630222][T10276] team_slave_0: entered promiscuous mode [ 369.648930][T10276] team_slave_1: entered promiscuous mode [ 369.993228][T10284] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1661'. [ 370.949771][ T5792] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 371.674262][T10315] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1668'. [ 371.713435][T10317] delete_channel: no stack [ 372.719021][T10332] netlink: 'syz.0.1684': attribute type 10 has an invalid length. [ 372.745222][T10332] : (slave netdevsim0): Releasing backup interface [ 373.655942][T10348] netlink: 'syz.2.1681': attribute type 21 has an invalid length. [ 373.669765][T10348] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1681'. [ 373.682817][T10348] netlink: 'syz.2.1681': attribute type 4 has an invalid length. [ 374.775098][T10363] netlink: 'syz.3.1688': attribute type 10 has an invalid length. [ 375.928169][T10386] netlink: 'syz.1.1699': attribute type 10 has an invalid length. [ 375.939439][T10386] bond0: (slave bond_slave_0): Releasing backup interface [ 375.948910][T10386] bond_slave_0: left promiscuous mode [ 376.269774][T10400] netlink: 'syz.3.1703': attribute type 21 has an invalid length. [ 376.312085][T10400] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1703'. [ 376.380207][T10400] netlink: 'syz.3.1703': attribute type 4 has an invalid length. [ 377.968156][T10423] netlink: 'syz.3.1714': attribute type 10 has an invalid length. [ 377.977739][T10423] bond0: (slave bond_slave_0): Releasing backup interface [ 377.985965][T10423] bond_slave_0: left promiscuous mode [ 378.088936][T10425] netlink: 'syz.1.1716': attribute type 21 has an invalid length. [ 378.110806][T10425] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1716'. [ 378.126962][T10425] netlink: 'syz.1.1716': attribute type 4 has an invalid length. [ 378.342823][T10435] netlink: 'syz.2.1719': attribute type 6 has an invalid length. [ 378.368404][T10435] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1719'. [ 378.980633][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.987078][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.533014][T10460] netlink: 'syz.2.1728': attribute type 10 has an invalid length. [ 380.550803][T10460] bond0: (slave bond_slave_0): Releasing backup interface [ 380.560921][T10460] bond_slave_0: left promiscuous mode [ 380.630409][T10462] syzkaller0: entered promiscuous mode [ 380.636041][T10462] syzkaller0: entered allmulticast mode [ 382.475902][ T5792] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 382.710339][T10487] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 384.565170][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 386.341962][ T5792] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 386.453692][T10515] syzkaller0: entered promiscuous mode [ 386.459427][T10515] syzkaller0: entered allmulticast mode [ 388.410160][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 389.007254][T10538] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1760'. [ 389.110765][T10545] netlink: 'syz.1.1762': attribute type 6 has an invalid length. [ 389.130413][T10545] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1762'. [ 389.188772][T10543] team0: Port device team_slave_0 removed [ 389.206139][T10543] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 391.715855][T10580] netlink: 'syz.3.1773': attribute type 6 has an invalid length. [ 391.727099][T10580] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1773'. [ 391.743802][T10582] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1774'. [ 391.961130][T10582] team0: Port device team_slave_0 removed [ 391.967481][T10582] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 392.425070][ T5792] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 394.465423][T10618] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1788'. [ 394.638884][T10618] team_slave_0: left promiscuous mode [ 394.672893][T10618] team0: Port device team_slave_0 removed [ 394.686220][T10618] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 395.710666][T10651] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1803'. [ 395.789792][T10651] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 396.281194][T10663] [ 396.283581][T10663] ====================================================== [ 396.290636][T10663] WARNING: possible circular locking dependency detected [ 396.297702][T10663] 6.6.100-syzkaller #0 Not tainted [ 396.302847][T10663] ------------------------------------------------------ [ 396.309890][T10663] syz.0.1809/10663 is trying to acquire lock: [ 396.315999][T10663] ffffffff9705a1b0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x13a/0x540 [ 396.326224][T10663] [ 396.326224][T10663] but task is already holding lock: [ 396.333598][T10663] ffff88807d43fa38 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xca/0xea0 [ 396.342495][T10663] [ 396.342495][T10663] which lock already depends on the new lock. [ 396.342495][T10663] [ 396.352893][T10663] [ 396.352893][T10663] the existing dependency chain (in reverse order) is: [ 396.361901][T10663] [ 396.361901][T10663] -> #1 (&trie->lock){-.-.}-{2:2}: [ 396.369216][T10663] _raw_spin_lock_irqsave+0xa8/0xf0 [ 396.374938][T10663] trie_delete_elem+0x96/0x6a0 [ 396.380226][T10663] bpf_prog_0605f9f479290f07+0x1d/0x3b [ 396.386202][T10663] bpf_trace_run2+0x1d1/0x3c0 [ 396.391391][T10663] __bpf_trace_contention_end+0xdd/0x130 [ 396.397563][T10663] trace_contention_end+0xe6/0x110 [ 396.403196][T10663] __pv_queued_spin_lock_slowpath+0x7ec/0x9d0 [ 396.409776][T10663] do_raw_spin_lock+0x24e/0x2c0 [ 396.415146][T10663] _raw_spin_lock_irqsave+0xb4/0xf0 [ 396.420860][T10663] debug_object_activate+0x6c/0x4b0 [ 396.426570][T10663] kvfree_call_rcu+0x99/0x780 [ 396.431764][T10663] cfg80211_update_known_bss+0x172/0x900 [ 396.437914][T10663] __cfg80211_bss_update+0x144/0x21f0 [ 396.443805][T10663] cfg80211_inform_bss_frame_data+0xaea/0x12b0 [ 396.450474][T10663] ieee80211_bss_info_update+0x70b/0x930 [ 396.456624][T10663] ieee80211_ibss_rx_queued_mgmt+0x17c9/0x2ac0 [ 396.463292][T10663] ieee80211_iface_work+0x717/0xc70 [ 396.469005][T10663] cfg80211_wiphy_work+0x225/0x260 [ 396.474657][T10663] process_scheduled_works+0xa45/0x15b0 [ 396.480742][T10663] worker_thread+0xa55/0xfc0 [ 396.485921][T10663] kthread+0x2fa/0x390 [ 396.490511][T10663] ret_from_fork+0x48/0x80 [ 396.495444][T10663] ret_from_fork_asm+0x11/0x20 [ 396.500725][T10663] [ 396.500725][T10663] -> #0 (&obj_hash[i].lock){-.-.}-{2:2}: [ 396.508544][T10663] __lock_acquire+0x2ddb/0x7c80 [ 396.513909][T10663] lock_acquire+0x197/0x410 [ 396.518923][T10663] _raw_spin_lock_irqsave+0xa8/0xf0 [ 396.524636][T10663] debug_check_no_obj_freed+0x13a/0x540 [ 396.530700][T10663] slab_free_freelist_hook+0xd2/0x1b0 [ 396.536585][T10663] __kmem_cache_free+0xba/0x1f0 [ 396.541949][T10663] trie_update_elem+0x6d1/0xea0 [ 396.547316][T10663] bpf_map_update_value+0x660/0x720 [ 396.553039][T10663] generic_map_update_batch+0x5e0/0x810 [ 396.559101][T10663] bpf_map_do_batch+0x3d7/0x610 [ 396.564464][T10663] __sys_bpf+0x31b/0x800 [ 396.569215][T10663] __x64_sys_bpf+0x7c/0x90 [ 396.574142][T10663] do_syscall_64+0x55/0xb0 [ 396.579074][T10663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.585487][T10663] [ 396.585487][T10663] other info that might help us debug this: [ 396.585487][T10663] [ 396.595705][T10663] Possible unsafe locking scenario: [ 396.595705][T10663] [ 396.603144][T10663] CPU0 CPU1 [ 396.608498][T10663] ---- ---- [ 396.613851][T10663] lock(&trie->lock); [ 396.617928][T10663] lock(&obj_hash[i].lock); [ 396.625035][T10663] lock(&trie->lock); [ 396.631619][T10663] lock(&obj_hash[i].lock); [ 396.636201][T10663] [ 396.636201][T10663] *** DEADLOCK *** [ 396.636201][T10663] [ 396.644339][T10663] 2 locks held by syz.0.1809/10663: [ 396.649555][T10663] #0: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x41d/0x720 [ 396.659495][T10663] #1: ffff88807d43fa38 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xca/0xea0 [ 396.668815][T10663] [ 396.668815][T10663] stack backtrace: [ 396.674691][T10663] CPU: 1 PID: 10663 Comm: syz.0.1809 Not tainted 6.6.100-syzkaller #0 [ 396.684397][T10663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 396.694453][T10663] Call Trace: [ 396.697730][T10663] [ 396.700654][T10663] dump_stack_lvl+0x16c/0x230 [ 396.705331][T10663] ? load_image+0x3b0/0x3b0 [ 396.709830][T10663] ? show_regs_print_info+0x20/0x20 [ 396.715036][T10663] ? print_circular_bug+0x12b/0x1a0 [ 396.720232][T10663] check_noncircular+0x2bd/0x3c0 [ 396.725171][T10663] ? print_deadlock_bug+0x5d0/0x5d0 [ 396.730362][T10663] ? lockdep_lock+0xe0/0x220 [ 396.734953][T10663] ? _find_first_zero_bit+0xd3/0x100 [ 396.740238][T10663] __lock_acquire+0x2ddb/0x7c80 [ 396.745109][T10663] ? verify_lock_unused+0x140/0x140 [ 396.750306][T10663] ? trace_event_raw_event_lock+0x230/0x230 [ 396.756203][T10663] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 396.761919][T10663] lock_acquire+0x197/0x410 [ 396.766499][T10663] ? debug_check_no_obj_freed+0x13a/0x540 [ 396.772227][T10663] ? trace_event_raw_event_lock+0x230/0x230 [ 396.778116][T10663] ? read_lock_is_recursive+0x20/0x20 [ 396.783491][T10663] _raw_spin_lock_irqsave+0xa8/0xf0 [ 396.788686][T10663] ? debug_check_no_obj_freed+0x13a/0x540 [ 396.794399][T10663] ? _raw_spin_lock+0x40/0x40 [ 396.799074][T10663] ? percpu_ref_put+0x12/0x100 [ 396.803844][T10663] debug_check_no_obj_freed+0x13a/0x540 [ 396.809388][T10663] ? percpu_ref_put+0x12/0x100 [ 396.814144][T10663] ? percpu_ref_put+0x12/0x100 [ 396.818900][T10663] slab_free_freelist_hook+0xd2/0x1b0 [ 396.824269][T10663] ? trie_update_elem+0x6d1/0xea0 [ 396.829298][T10663] __kmem_cache_free+0xba/0x1f0 [ 396.834150][T10663] trie_update_elem+0x6d1/0xea0 [ 396.839021][T10663] bpf_map_update_value+0x660/0x720 [ 396.844224][T10663] generic_map_update_batch+0x5e0/0x810 [ 396.849779][T10663] ? rcu_read_unlock+0xa0/0xa0 [ 396.854629][T10663] ? __fdget+0x180/0x210 [ 396.858867][T10663] ? rcu_read_unlock+0xa0/0xa0 [ 396.863627][T10663] bpf_map_do_batch+0x3d7/0x610 [ 396.868475][T10663] __sys_bpf+0x31b/0x800 [ 396.872714][T10663] ? bpf_link_show_fdinfo+0x350/0x350 [ 396.878094][T10663] ? lock_chain_count+0x20/0x20 [ 396.882945][T10663] __x64_sys_bpf+0x7c/0x90 [ 396.887354][T10663] do_syscall_64+0x55/0xb0 [ 396.891771][T10663] ? clear_bhb_loop+0x40/0x90 [ 396.896438][T10663] ? clear_bhb_loop+0x40/0x90 [ 396.901110][T10663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.907014][T10663] RIP: 0033:0x7f151d18e9a9 [ 396.911432][T10663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.931033][T10663] RSP: 002b:00007f151e0b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.939444][T10663] RAX: ffffffffffffffda RBX: 00007f151d3b5fa0 RCX: 00007f151d18e9a9 [ 396.947497][T10663] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 396.955461][T10663] RBP: 00007f151d210d69 R08: 0000000000000000 R09: 0000000000000000 [ 396.963517][T10663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.971484][T10663] R13: 0000000000000000 R14: 00007f151d3b5fa0 R15: 00007ffcfc06f128 [ 396.979492][T10663]